samba (2:4.17.12+dfsg-0+deb12u1~bpo11+1) bullseye-backports; urgency=medium * Rebuild for bullseye-backports (no source changes). -- Michael Tokarev Wed, 18 Oct 2023 10:42:20 +0300 samba (2:4.17.12+dfsg-0+deb12u1) bookworm-security; urgency=medium * new stable security bugfix release: o CVE-2023-3961: https://www.samba.org/samba/security/CVE-2023-3961.html Unsanitized pipe names allow SMB clients to connect as root to existing unix domain sockets on the file system. o CVE-2023-4091: https://www.samba.org/samba/security/CVE-2023-4091.html SMB client can truncate files to 0 bytes by opening files with OVERWRITE disposition when using the acl_xattr Samba VFS module with the smb.conf setting "acl_xattr:ignore system acls = yes" o CVE-2023-4154: https://www.samba.org/samba/security/CVE-2023-4154.html An RODC and a user with the GET_CHANGES right can view all attributes, including secrets and passwords. Additionally, the access check fails open on error conditions. o CVE-2023-42669: https://www.samba.org/samba/security/CVE-2023-42669.html Calls to the rpcecho server on the AD DC can request that the server block for a user-defined amount of time, denying service. o CVE-2023-42670: https://www.samba.org/samba/security/CVE-2023-42670.html Samba can be made to start multiple incompatible RPC listeners, disrupting service on the AD DC. -- Michael Tokarev Tue, 10 Oct 2023 18:17:19 +0300 samba (2:4.17.11+dfsg-0+deb12u1) bookworm; urgency=medium * new upstream stable/bugfix release 4.17.11, including: o https://bugzilla.samba.org/show_bug.cgi?id=9959 Windows client join fails if a second container CN=System exists somewhere o https://bugzilla.samba.org/show_bug.cgi?id=15342 Spotlight sometimes returns no results on latest macOS o https://bugzilla.samba.org/show_bug.cgi?id=15346 2-3min delays at reconnect with smb2_validate_sequence_number: bad message_id 2 o https://bugzilla.samba.org/show_bug.cgi?id=15384 net ads lookup (with unspecified realm) fails o https://bugzilla.samba.org/show_bug.cgi?id=15401 Improve GetNChanges to address some (but not all "Azure AD Connect") syncronisation tool looping during the initial user sync phase o https://bugzilla.samba.org/show_bug.cgi?id=15407 Samba replication logs show (null) DN o https://bugzilla.samba.org/show_bug.cgi?id=15417 Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination o https://bugzilla.samba.org/show_bug.cgi?id=15419 Weird filename can cause assert to fail in openat_pathref_fsp_nosymlink() o https://bugzilla.samba.org/show_bug.cgi?id=15420 reply_sesssetup_and_X() can dereference uninitialized tmp pointer o https://bugzilla.samba.org/show_bug.cgi?id=15427 Spotlight results return wrong date in result list o https://bugzilla.samba.org/show_bug.cgi?id=15430 Missing return in reply_exit_done() o https://bugzilla.samba.org/show_bug.cgi?id=15432 TREE_CONNECT without SETUP causes smbd to use uninitialized pointer o https://bugzilla.samba.org/show_bug.cgi?id=15435 Regression DFS not working with widelinks = true o https://bugzilla.samba.org/show_bug.cgi?id=15441 samba-tool ntacl get segfault if aio_pthread appended o https://bugzilla.samba.org/show_bug.cgi?id=15446 DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed o https://bugzilla.samba.org/show_bug.cgi?id=15449 mdssvc: Do an early talloc_free() in _mdssvc_open() o https://bugzilla.samba.org/show_bug.cgi?id=15451 ctdb_killtcp fails to work with --enable-pcap and libpcap ≥ 1.9.1 o https://bugzilla.samba.org/show_bug.cgi?id=15453 File doesn't show when user doesn't have permission if aio_pthread is loaded o https://bugzilla.samba.org/show_bug.cgi?id=15463 macOS mdfind returns only 50 results * d/control: indicate the git branch in Vcs-Git URL (-b bookworm) * d/control: fix description of samba-common-bin (samba-client) * d/salsa-ci.yml: set RELEASE to bookworm -- Michael Tokarev Tue, 12 Sep 2023 15:55:41 +0300 samba (2:4.17.10+dfsg-0+deb12u1) bookworm-security; urgency=medium * new upstream stable/security release 4.17.10, including: o CVE-2022-2127: When winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in winbind and possibly crash it. https://www.samba.org/samba/security/CVE-2022-2127.html o CVE-2023-3347: SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. https://www.samba.org/samba/security/CVE-2023-3347.html o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service for Spotlight can be triggered by an unauthenticated attacker by issuing a malformed RPC request. https://www.samba.org/samba/security/CVE-2023-34966.html o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service for Spotlight can be used by an unauthenticated attacker to trigger a process crash in a shared RPC mdssvc worker process. https://www.samba.org/samba/security/CVE-2023-34967.html o CVE-2023-34968: As part of the Spotlight protocol Samba discloses the server-side absolute path of shares and files and directories in search results. https://www.samba.org/samba/security/CVE-2023-34968.html o BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023. https://bugzilla.samba.org/show_bug.cgi?id=15418 (this has been patched in the previous upload; Closes: #1041043) -- Michael Tokarev Wed, 19 Jul 2023 17:55:58 +0300 samba (2:4.17.9+dfsg-0+deb12u3) bookworm; urgency=medium * +fix-unsupported-netr_LogonGetCapabilities-l2.patch Fix windows logon/trust issues with 2023-07 windows updates: https://bugzilla.samba.org/show_bug.cgi?id=15418 -- Michael Tokarev Fri, 14 Jul 2023 12:34:30 +0300 samba (2:4.17.9+dfsg-0+deb12u2) bookworm; urgency=medium * link with -latomic explicitly on a few architectures where gcc misses it (notable armel & mipsel), to fix FTBFS there, - the same as on sid. https://gcc.gnu.org/bugzilla/show_bug.cgi?id=81358 -- Michael Tokarev Sun, 09 Jul 2023 09:44:29 +0300 samba (2:4.17.9+dfsg-0+deb12u1) bookworm-proposed-updates; urgency=medium * d/copyright: filter out autogenerated manpages from the upstream source when dfsg-repacking. The manpages are generated during build if not up to date, and changes significantly in every upstream release since the version number and the release date are included in every manpage. * new upstream stable/bugfix release, with the following fixes: * https://bugzilla.samba.org/show_bug.cgi?id=14030 named crashes on DLZ zone update (this was in debian in previous upload) * https://bugzilla.samba.org/show_bug.cgi?id=15275 smbd_scavenger crashes when service smbd is stopped * https://bugzilla.samba.org/show_bug.cgi?id=15361 winbind recurses into itself via rpcd_lsad * https://bugzilla.samba.org/show_bug.cgi?id=15374 aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse() * https://bugzilla.samba.org/show_bug.cgi?id=15378 vfs_fruit might cause a failing open for delete * https://bugzilla.samba.org/show_bug.cgi?id=15382 cli_list loops 100% CPU against pre-lanman2 servers * https://bugzilla.samba.org/show_bug.cgi?id=15391 smbclient leaks fds with showacls * https://bugzilla.samba.org/show_bug.cgi?id=15403 smbget memory leak if failed to download files recursively * https://bugzilla.samba.org/show_bug.cgi?id=15404 Backport --pidl-developer fixes * https://bugzilla.samba.org/show_bug.cgi?id=15413 winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR * remove dnsserver-rename-dns_name_equal.patch (included upstream) * heimdal-to-support-KEYRING-ccache.patch: enable KEYRING in heimdal (ability to store kerberos tickets in kernel keyring) (Closes: #1023609) * d/control: build-depend on libkeyutils-dev (it is pulled by some other dep, but better to be safe) -- Michael Tokarev Fri, 07 Jul 2023 11:40:17 +0300 samba (2:4.17.8+dfsg-2) unstable; urgency=medium * dnsserver-rename-dns_name_equal.patch (forgotten) patch from upstream targetting next stable Fixes crashes of named with samba DLZ plugin due to symbol name conflict (dns_name_equal() function). There's no resulting code changes, just a symbol rename. https://bugzilla.samba.org/show_bug.cgi?id=14030 Closes: #1036587, #927747 -- Michael Tokarev Wed, 24 May 2023 22:54:43 +0300 samba (2:4.17.8+dfsg-1) unstable; urgency=medium * upstream stable/security/bugfix release, fixing the following issues: * https://bugzilla.samba.org/show_bug.cgi?id=14810 CVE-2020-25720 Create Child permission should not allow full write to all attributes (additional changes) * https://bugzilla.samba.org/show_bug.cgi?id=15143 New filename parser doesn't check veto files smb.conf parameter * https://bugzilla.samba.org/show_bug.cgi?id=15302 log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower (this was included in Debian package already) * https://bugzilla.samba.org/show_bug.cgi?id=15306 Floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c * https://bugzilla.samba.org/show_bug.cgi?id=15313 Large directory optimization broken for non-lcomp path elements * https://bugzilla.samba.org/show_bug.cgi?id=15317 winbindd idmap child contacts the domain controller without a need * https://bugzilla.samba.org/show_bug.cgi?id=15318 idmap_autorid may fail to map sids of trusted domains for the * https://bugzilla.samba.org/show_bug.cgi?id=15319 idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings * https://bugzilla.samba.org/show_bug.cgi?id=15323 net ads search -P doesn't work against servers in other domains * https://bugzilla.samba.org/show_bug.cgi?id=15325 dsgetdcname: assumes local system uses IPv4 * https://bugzilla.samba.org/show_bug.cgi?id=15328 test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners * https://bugzilla.samba.org/show_bug.cgi?id=15329 Reduce flapping of ridalloc test * https://bugzilla.samba.org/show_bug.cgi?id=15329 Reduce flapping of ridalloc test * https://bugzilla.samba.org/show_bug.cgi?id=15338 DS ACEs might be inherited to unrelated object classes * https://bugzilla.samba.org/show_bug.cgi?id=15351 large_ldap test is unreliable * https://bugzilla.samba.org/show_bug.cgi?id=15353 Temporary smbXsrv_tcon_global.tdb can't be parsed * https://bugzilla.samba.org/show_bug.cgi?id=15354 mdssvc may crash when initializing * https://bugzilla.samba.org/show_bug.cgi?id=15357 streams_depot fails to create streams * https://bugzilla.samba.org/show_bug.cgi?id=15358 shadow_copy2 and streams_depot don't play well together * https://bugzilla.samba.org/show_bug.cgi?id=15360 Setting veto files = /.*/ break listing directories * https://bugzilla.samba.org/show_bug.cgi?id=15366 wbinfo -u fails on ad dc with >1000 users * d/gbp.conf: switch debian-branch to "bookworm" -- Michael Tokarev Thu, 11 May 2023 10:52:40 +0300 samba (2:4.17.7+dfsg-1) unstable; urgency=high * upstream stable/security/bugfix release, fixing the following issues: o CVE-2023-0225: An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory. https://www.samba.org/samba/security/CVE-2023-0225.html o CVE-2023-0922: The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection. https://www.samba.org/samba/security/CVE-2023-0922.html o CVE-2023-0614: Fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure via LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. Installations with such secrets in their Samba AD should assume they have been obtained and need replacing. https://www.samba.org/samba/security/CVE-2023-0614.html Closes: CVE-2023-0225 CVE-2023-0922 CVE-2023-0614 * update libldb symbols and versions -- Michael Tokarev Wed, 29 Mar 2023 17:59:17 +0300 samba (2:4.17.6+dfsg-1) unstable; urgency=medium * new upstream stable/bugfix release 4.17.6: * https://bugzilla.samba.org/show_bug.cgi?id=15314 streams_xattr is creating unexpected locks on folders. * https://bugzilla.samba.org/show_bug.cgi?id=10635 Use of the Azure AD Connect cloud sync tool is now supported for password hash synchronisation, allowing Samba AD Domains to synchronise passwords with this popular cloud environment. * https://bugzilla.samba.org/show_bug.cgi?id=15299 Spotlight doesn't work with latest macOS Ventura. * https://bugzilla.samba.org/show_bug.cgi?id=15310 New samba-dcerpc architecture does not scale gracefully. * https://bugzilla.samba.org/show_bug.cgi?id=15307 vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd() in close and fstat. * https://bugzilla.samba.org/show_bug.cgi?id=15293 With clustering enabled samba-bgqd can core dump due to use after free. * https://bugzilla.samba.org/show_bug.cgi?id=15311 fd_load() function implicitly closes the fd where it should not. * debian/po/ro.po update from Remus-Gabriel Chelu * s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch makes smbd a bit less spammy in logs * d/control: clarify some package descriptions (Closes: #1031922) -- Michael Tokarev Thu, 09 Mar 2023 12:52:14 +0300 samba (2:4.17.5+dfsg-2) unstable; urgency=medium * d/control: samba: depends on exact version of python3-samba * d/control: fix typo * more tweaks for foreign/cross build * d/control: work around autodep8 #904999 again * introduce upstream-like aliases for debian .service names, add rationale -- Michael Tokarev Sat, 04 Feb 2023 17:15:40 +0300 samba (2:4.17.5+dfsg-1) unstable; urgency=medium * new upstream stable/bugfix release. From WHATSNEW.txt: * BUG 14808: smbc_getxattr() return value is incorrect. * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly. * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors. * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS (Closes: #1023606). * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle. * BUG 15277: DFS links don't work anymore on Mac clients since 4.17. * BUG 15283: vfs_virusfilter segfault on access, directory edgecase (accessing NULL value). * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes). * BUG 15243: %U for include directive doesn't work for share listing (netshareenum) (the fix was in debian before). * BUG 15266: Shares missing from netshareenum response in samba 4.17.4 (the fix was in debian before). * BUG 15269: ctdb: use-after-free in run_proc. * BUG 15280: irpc_destructor may crash during shutdown. * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo. * BUG 15268: smbclient segfaults with use after free on an optimized build * BUG 15282: smbstatus leaking files in msg.sock and msg.lock. * BUG 15164: Leak in wbcCtxPingDc2. * BUG 15265: Access based share enum does not work in Samba 4.16+. * BUG 15267: Crash during share enumeration. * BUG 15271: rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer. * BUG 15281: Avoid relying on C89 features in a few places. * remove patches applied upstream: - reload-registry-shares-after-reloading-services.patch - rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch * d/control: Standards-Version: 4.6.2 (no changes) * d/control: put all doc-generating build-deps into one line * little prep for cross-compilation - build-depend on python3:any and python3-dev:any - build-depend on libpython3-dev for actual module building, and use arch-specific python3-config from there - set and export _PYTHON_SYSCONFIGDATA_NAME to get foreign-arch values provided by libpython3-dev (also helps when python itself is foreign) - depend on perl:any not just perl - export CC/CPP/LD/PKGCONFIG for ./configure (buildtools.mk) * d/gbp.conf: unignore branch * d/control: samba, ctdb, winbind: do not depend on lsb-base (the script is in sysvinit-utils now) * d/control: drop unused build-dep on libncurses5-dev -- Michael Tokarev Fri, 27 Jan 2023 11:15:01 +0300 samba (2:4.17.4+dfsg-3) unstable; urgency=medium * +rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch https://bugzilla.samba.org/show_bug.cgi?id=15265 * +reload-registry-shares-after-reloading-services.patch https://bugzilla.samba.org/show_bug.cgi?id=15266 * d/samba.postinst: fix /var/spool/samba => /var/tmp handling (old spooldir can be referred to in other sections too) * create common script "is-configured" to check if the service is configured in smb.conf, and stop masking services in postinst * rewrite SysV init scripts (simplify, make consistent, etc) * d/winbind.postinst: create/change /var/lib/samba/winbindd_privileged at install time only (it should be in /run/samba/ somewhere these days) * d/control: change version of samba which samba-ad-provisioning Breaks to where provisioning was split out -- Michael Tokarev Tue, 03 Jan 2023 10:45:36 +0300 samba (2:4.17.4+dfsg-2) unstable; urgency=medium * d/control: samba-dc-provision Replaces+Breaks samba (< 4.17.4+dfsg-2). Closes: #1026387 -- Michael Tokarev Mon, 19 Dec 2022 16:36:00 +0300 samba (2:4.17.4+dfsg-1) unstable; urgency=medium * new upstream stable/security release, with the following changes: - CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022, see https://www.samba.org/samba/security/CVE-2022-37966.html - CVE-2022-37967: Windows Kerberos Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022. See https://www.samba.org/samba/security/CVE-2022-37967.html - CVE-2022-38023: Weak "RC4" (rc4-hmac) protection of the NetLogon Secure channel uses, see https://www.samba.org/samba/security/CVE-2022-38023.html There are several important behavior changes included in this release, which may cause compatibility problems interacting with system still expecting the former behavior. Please read the documents referenced above! See also the WHATSNEW.txt document, as there are several new, changed and deprecated smb.conf parameters. * Other bugfixes in this release (from WHATSNEW.txt): https://bugzilla.samba.org/show_bug.cgi?id=14929 CVE-2022-44640 Upstream Heimdal free of user-controlled pointer in FAST. https://bugzilla.samba.org/show_bug.cgi?id=15219 Heimdal session key selection in AS-REQ examines wrong entry. https://bugzilla.samba.org/show_bug.cgi?id=13135 The KDC logic around msDs-supportedEncryptionTypes differs from Windows. https://bugzilla.samba.org/show_bug.cgi?id=14611 CVE-2021-20251 Bad password count not incremented atomically. https://bugzilla.samba.org/show_bug.cgi?id=15206 libnet: change_password() doesn't work with dcerpc_samr_ChangePasswordUser4() https://bugzilla.samba.org/show_bug.cgi?id=15230 Memory leak in snprintf replacement functions. https://bugzilla.samba.org/show_bug.cgi?id=15253 RODC doesn't reset badPwdCount reliable via an RWDC (CVE-2021-20251 regression). https://bugzilla.samba.org/show_bug.cgi?id=15198 Prevent EBADF errors with vfs_glusterfs. https://bugzilla.samba.org/show_bug.cgi?id=15243 %U for include directive doesn't work for share listing (netshareenum). https://bugzilla.samba.org/show_bug.cgi?id=15257 Stack smashing in net offlinejoin requestodj. * removed patches which are now included upstream: - nsswitch-pam-data-time_t.patch - CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch -- Michael Tokarev Thu, 15 Dec 2022 21:54:31 +0300 samba (2:4.17.3+dfsg-4) unstable; urgency=medium * create samba-ad-provision package with contents of /usr/share/samba/setup. It is recommended by samba, so can be uninstalled if not needed. * create samba-ad-dc package. It is an empty metapackage for now, but with dependencies needed to run an Active Directory Domain Controller (AD-DC) * samba-ad-provision.lintian-overrides: license files * print meaningful error message if samba-ad-provision is not installed (meaningful-error-if-no-samba-ad-provision.patch) * print meaningful error message if python3-markdown is not installed (meaningful-error-if-no-python3-markdown.patch) * ctdb: move rundir from /var/run to /run * fix typo in fruit patch * a few more spelling fixes * add #DEBHELPER# tokens to libnss-winbind.{postinst,postrm} * remove mentions of /var/spool/samba from samba.lintian-overrides (moved to /var/tmp) * change embedded-library heimdal lintian override in a way to be understood by both old and new lintian, so the package can be uploaded -- Michael Tokarev Mon, 05 Dec 2022 14:39:43 +0300 samba (2:4.17.3+dfsg-3) unstable; urgency=medium * d/control: winbind should depend on the same binary:Version of libwbclient, or else its components can't talk to the daemon. Thank you Stefan Weichinger for the patience while finding this one! * libnss-winbind: add postinst/postrm scripts to add/remove nsswitch.conf entry for winbind (but not for wins) -- Michael Tokarev Thu, 01 Dec 2022 22:38:07 +0300 samba (2:4.17.3+dfsg-2) unstable; urgency=medium * fruit-disable-useless-size_t-overflow-check.patch (Closes: #974868) * CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch Fix regression on 32bit systems: https://bugzilla.samba.org/show_bug.cgi?id=15203 -- Michael Tokarev Mon, 21 Nov 2022 20:41:46 +0300 samba (2:4.17.3+dfsg-1) unstable; urgency=medium * new upstream security release 4.17.3, fixing the following issue: CVE-2022-42898: Heimdal Kerberos libraries suffers from an integer multiplication overflow vulnerability which affects 32bit platforms, see https://www.samba.org/samba/security/CVE-2022-42898.html This changes third_party/heimdal/, it does not affect mitkrb5 builds. * d/rules: stop stripping +dfsg suffix from ldb version * d/control: declare dependency on password (for groupadd in postinst) for winbind and samba (Closes: #1023759) * implement pkg.samba.mitkrb5 build profile to build with system mit-krb5 (with "mitkrb5" version suffix in some packages for now) * d/control: mark libufing-dev build dep with (to simplify out-of-archive builds for older systems) * d/rules: parametrise list of packages to omit (eg on ubuntu-i386) with ${omit-pkgs} * d/rules: use variables in a more consistent way, use single ${config-args} * d/control: tdb-tools and lmdb-utils packages are also needed for tests (everything is commented out for now anyway) * d/rules: update knownfail tests * d/rules: stop exporting buildflags, export compiler options when needed * d/rules: always define rados:Depends & vfsmods:Depends substvars * unwrap-getresgid-typo.patch - fix crash during p11-kit execution (https://bugzilla.samba.org/show_bug.cgi?id=15227) (for the testsuite only) * nsswitch-pam-data-time_t.patch - fix time_t not fit in a pointer (eg x32) (https://bugzilla.samba.org/show_bug.cgi?id=15224) -- Michael Tokarev Tue, 15 Nov 2022 19:26:10 +0300 samba (2:4.17.2+dfsg-9) unstable; urgency=medium * hurd-compat.patch: some minor compatibility tweaks for hurd * d/rules compat work: - ceph is linux-only like glusterfs - d/rules: add another conditional, with_snapper - combine linux features into single block * d/rules: support "terse" build option for non-verbose build * d/rules: remove third_party/heimdal/lib/gssapi/gssapi.h before build (Closes: #1013205). This fixes -I path order and include mess which caused samba to FTBFS on sparc64 for quite some time -- Michael Tokarev Sun, 06 Nov 2022 20:13:19 +0300 samba (2:4.17.2+dfsg-8) unstable; urgency=medium * d/rules: do not explicitly enable quotas on non-linux: enable everything interesting on linux explicitly and let ./configure to figure it out in other systems. This should fix FTBFS problem on hurd. * d/rules: do not disable systemd on non-linux, let ./configure figure it out * d/winbind.postinst: switch addgroup => groupadd and eliminate getent. winbind package never declared dependency on adduser but always used addgroup command in its postinst script. Finally this broke piuparts. Switch to groupadd which is even easier to use. * d/samba.postinst: switch addgroup => groupadd and eliminate getent * d/smb.conf: use useradd in example create user script too -- Michael Tokarev Thu, 03 Nov 2022 15:04:46 +0300 samba (2:4.17.2+dfsg-7) unstable; urgency=medium * another way to work around #1013259: provide a compatibility symlink libndr.so.2 pointing to libndr.so.3: - libndr-debug-level-compat.diff, libndr-revert-so3.diff: remove - d/samba-libs.symbols: adjust symbols/versions - d/samba-libs.install: libndr.so.2 => libndr.so.3 - d/samba-libs.links: provide the compat libndr.so.2 symlink * d/samba-libs.links: add comments describing libndr.so.N issue * d/samba-libs.links: add libndr.so.1 compat symlink too (for bullseye sssd) * d/control: unbreak bullseye/jammy sssd-ad-common, sssd-ad, sssd-ipa by samba-libs once libndr.so.1 compat link is here -- Michael Tokarev Wed, 02 Nov 2022 20:43:53 +0300 samba (2:4.17.2+dfsg-6) unstable; urgency=medium * d/control: fix comment in previous upload -- Michael Tokarev Wed, 02 Nov 2022 10:45:26 +0300 samba (2:4.17.2+dfsg-5) unstable; urgency=medium * d/control: bump version of broken-by-samba-libs sssd and add more affected sssd packages; also reformat the comment there so dpkg-gencontrol does not complain -- Michael Tokarev Wed, 02 Nov 2022 09:34:10 +0300 samba (2:4.17.2+dfsg-4) unstable; urgency=medium * d/control: stop suggesting old/orphaned/gone-upstream smbldap-tools * libndr work (Closes: #1013259): - d/control: samba-libs breaks bullseye sssd-ad due to libndr.so.1=>.2 bump - d/samba-libs.install: be more explicit about sonames of public libs to catch soname changes - libndr-debug-level-compat.diff, libndr-revert-so3.diff: revert libndr.so.2->3 soname bump by providing compat wrapper for new symbol - d/samba-libs.symbols: provide symbols for libndr.so.2 -- Michael Tokarev Tue, 01 Nov 2022 12:53:22 +0300 samba (2:4.17.2+dfsg-3) unstable; urgency=low * rebase on top of debian 4.16.6+dfsg-6 release, include some history of 4.17.* experimental releases in changelog * d/samba-libs.lintian-overrides: update package-name-doesnt-match-sonames to match all libs * urgency is set to low to delay unstable->testing transition a bit -- Michael Tokarev Sun, 30 Oct 2022 16:23:51 +0300 samba (2:4.17.2+dfsg-2) experimental; urgency=medium * d/rules: stop dh_installpam from installing samba.pam to the samba package (Closes: #1022775, #1022776) -- Michael Tokarev Tue, 25 Oct 2022 20:13:53 +0300 samba (2:4.17.2+dfsg-1) experimental; urgency=medium * upstream 4.17.2 security release: CVE-2022-3592 A malicious client can use a symlink to escape the exported directory. https://www.samba.org/samba/security/CVE-2022-3592.html (Samba 4.17 only) * Remove poptGetArg-misuse-fixes-1022826.diff (applied to 4.17.2) * d/rules: no need to build compile_et,asn1_compile intermediate targets anymore; also remove now-unused ${WAFv} macro -- Michael Tokarev Tue, 25 Oct 2022 14:30:44 +0300 samba (2:4.17.1+dfsg-1) experimental; urgency=medium * new upstream bugfix release containing a security fix: * CVE-2021-20251 Bad password count not incremented atomically. * Merge changes from 4.16.x (debian/master) branch. * use-bzero-instead-of-memset_s.diff : use explicit_bzero() instead of bzero() for the substitute of memset_s(). bzero() is wrong here because it, just like memset, can be optimized out by the compiler. -- Michael Tokarev Wed, 19 Oct 2022 21:34:11 +0300 samba (2:4.17.0+dfsg-2) experimental; urgency=medium * mention closing of CVE-2022-32743 by the 4.17.0 upload * mention closing of CVE-2022-1615 by the 4.17.0 upload * move libpac-samba4.so.0 from samba to samba-libs (Closes: #1021450) -- Michael Tokarev Sat, 08 Oct 2022 23:00:05 +0300 samba (2:4.17.0+dfsg-1) experimental; urgency=medium * new upstream release 4.17.0 Closes: CVE-2022-1615 Closes: #1021022, CVE-2022-32743 * removed: spelling.patch (partially applied upstream) * removed: weak-crypto-allowed-clarify.diff (applied upstream) * refresh: ctdb-create-piddir.patch * refresh: fix-nfs-service-name-to-nfs-kernel-server.patch * d/control: update minimum versions for talloc/tevent/tdb * d/rules: do not install ctdb.service, it is installed by upstream now * d/ctdb.install: do not install ctdb_wrapper (not used anymore) * d/libldb2.symbols, d/d/python3-ldb.symbols.in: new versions: 2.6.0 2.6.1 per upstream, re-version symbols added in 2.5.2 as added in 2.6.1 (ldb users needs to be recompiled anyway after updating libldb) * new: spelling.patch: a few more spelling fixes * d/control: bump Standards-Version to 4.6.1 (no changes) * Remove dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch (included in 4.17.0 already) -- Michael Tokarev Tue, 13 Sep 2022 20:47:05 +0300 samba (2:4.16.6+dfsg-6) unstable; urgency=medium * d/rules: use the right dir for dh_shlibdeps -l (long-standing issue) * rewrite shlibs/symbols-generating file d/genshlibs, make whole process much more clean and strighforward, and 10x times faster too * debian/libnss-winbind.triggers: activate ldconfig trigger * add debian/samba-libs.symbols with libsmbldap library * d/samba.examples: do not install smbadduser: csh considered harmful * d/rules: remove long-unused commented-out override_dh_perl-arch * d/samba.lintian-overrides: *docs-outside-share-doc usr/share/samba/setup/ * d/genshlibs: add the forgotten mkdir for d/$pkg/DEBIAN * remove static/fixed branding d/patches/VERSION.patch * d/rules: implement dynamic branding of VERSION file based on dpkg-vendor * d/rules: simplify package interdependency checking rules * d/rules: add a lot more interpackage dependency checks * d/NEWS: merge it into d/samba.NEWS (removes several lintian warnings) -- Michael Tokarev Sat, 29 Oct 2022 08:28:53 +0300 samba (2:4.16.6+dfsg-5) unstable; urgency=medium * move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz manpages to winbind package where they belong and where actual idmap modules lives. (install all idmap_*.8 manpages to winbind package) * d/rules: install pam.d/samba with mode 0644, not 0755 * many lintian-override updates: - source: ctdb/doc/*.html actually has sources - source: +very-long-line-length-in-source-file * (for generated files) - source: +debian-control-has-unusual-field-spacing Breaks - winbind: +spare-manual-page for module manpages - *: update some overrides for new lintian - libpam-winbind: +spare-manual-page pam_winbind.8 - libldb2: +package-contains-empty-directory .../ldb/modules/ldb/ - *: +hardening-no-fortify-functions for some simple shared libs -- Michael Tokarev Wed, 26 Oct 2022 22:27:00 +0300 samba (2:4.16.6+dfsg-4) unstable; urgency=medium * poptGetArg-misuse-fixes-1022826.diff: fix poptGetArg() misuse for popt-1.9 (Closes: #1022826) -- Michael Tokarev Wed, 26 Oct 2022 19:45:38 +0300 samba (2:4.16.6+dfsg-3) unstable; urgency=medium * d/rules: stop dh_installpam from installing samba.pam to the samba package (Closes: #1022775, #1022776) -- Michael Tokarev Tue, 25 Oct 2022 20:13:53 +0300 samba (2:4.16.6+dfsg-2) unstable; urgency=medium * d/rules: pam.d/samba should go to /etc, not / * d/README.source.md: it is README.source.md not README.source * d/control: bump Standards-Version to 4.6.1 (no changes) * d/rules: verify that samba-libs does not depend on samba -- Michael Tokarev Tue, 25 Oct 2022 13:55:33 +0300 samba (2:4.16.6+dfsg-1) unstable; urgency=medium * new upstream security release 4.16.6, fixing: CVE-2022-3437: There is a limited write heap buffer overflow in the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba). https://www.samba.org/samba/security/CVE-2022-3437.html * use explicit_bzero() instead of bzero() for the substitute of memset_s() * d/rules: make it a bit more consistent with other samba packages * d/rules: stop exporting ${PYTHON} * a bunch of ubuntu-related changes: - d/rules: omit glusterfs on ubuntu-i386 - apply Ubuntu changes to smb.conf at install time (d/smb.conf.ubuntu.diff) - d/tests/: ensure io_uring module is built before testing it - d/rules: inline parallel check from dpkg/buildopts.mk (buildopts.mk does not exist on ubuntu 20.04 focal) -- Michael Tokarev Tue, 25 Oct 2022 12:48:20 +0300 samba (2:4.16.5+dfsg-2) unstable; urgency=medium [ Michael Tokarev ] * d/tests/util: use printf for formatting password for smbpasswd, not non-standard echo \n (mr !60) * introduce LDB_2.4.4 version symbol (Closes: #1021371) Create an empty ABI file just to make the scripts run during the build stage to introduce LDB_2.4.4 version symbol into libldb.so, and remove this empty file in the clean target. It is a bit hackish but works fine. This is only needed to upgrade from bullseye to bookworm, from 4.13.13+dfsg-1~deb11u5+ to the next release, 4.16+. Remove this for bookworm+. * dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch: GnuTLS gnutls_rnd() can fail and give predictable random values. Closes: #1021024, CVE-2022-1615 [ John Paul Adrian Glaubitz ] * disable ceph support on ppc64 and x32 (Closes: #1020781, #1012165) -- Michael Tokarev Sat, 08 Oct 2022 15:11:15 +0300 samba (2:4.16.5+dfsg-1) unstable; urgency=medium * new (minor) upstream release 4.16.5 * removed fix-samba-tool-domain-join-segfault.patch (included upstream) * d/gbp.conf: no need to filter orig.tar: uscan already does that -- Michael Tokarev Thu, 08 Sep 2022 12:44:38 +0300 samba (2:4.16.4+dfsg-2) unstable; urgency=medium * d/libldb2.symbols: include newly added symbols -- Michael Tokarev Mon, 01 Aug 2022 15:43:11 +0300 samba (2:4.16.4+dfsg-1) unstable; urgency=high * new upstream security release fixing: o CVE-2022-2031: Samba AD users can bypass certain restrictions associated with changing passwords. https://www.samba.org/samba/security/CVE-2022-2031.html o CVE-2022-32742: Server memory information leak via SMB1. https://www.samba.org/samba/security/CVE-2022-32742.html o CVE-2022-32744: Samba AD users can forge password change requests for any user. https://www.samba.org/samba/security/CVE-2022-32744.html o CVE-2022-32745: Samba AD users can crash the server process with an LDAP add or modify request. https://www.samba.org/samba/security/CVE-2022-32745.html o CVE-2022-32746: Samba AD users can induce a use-after-free in the server process with an LDAP add or modify request. https://www.samba.org/samba/security/CVE-2022-32746.html * Closes: #1016449, CVE-2022-2031 CVE-2022-32742, CVE-2022-32744, CVE-2022-32745, CVE-2022-32746 -- Michael Tokarev Wed, 27 Jul 2022 18:35:53 +0300 samba (2:4.16.3+dfsg-1) unstable; urgency=medium [ Michael Tokarev ] * new upstream minor/bugfix releae. See WHATSNEW.txt for details. * d/watch: add the forgotten repacksuffix=+dfsg [ Andreas Hasenack ] * update nfs configuration examples for ctdb -- Michael Tokarev Mon, 18 Jul 2022 17:15:07 +0300 samba (2:4.16.2+dfsg-1) unstable; urgency=medium * new upstream minor/bugfix release. * removed waf-add-support-for-GNU-kFreeBSD.patch (applied upstream) * new minor version of libldb (no code changes, just the build system update to support python 3.11) * move samba-dcerpcd from samba package to samba-common-bin due to winbind New in 4.16 samba-dcerpcd binary is used by smbd and winbind, so putting it to samba package makes winbind unable to run it without samba. For now, in order to fix this issue, move this binary from samba to samba-common-bin package. It might be worth creating its own package for this binary (or maybe some more binaries), once it is clear where upstream is going to. Making this binary a part of samba-common-bin adds some more files to smbclient-only setup. (Closes: #1012240) * remove mksmbpasswd script and manpage: we have smbpasswd whcih can add entries to smbpasswd file if needed, and can handle other passwod storage formats too -- Michael Tokarev Mon, 13 Jun 2022 19:08:44 +0300 samba (2:4.16.1+dfsg-8) unstable; urgency=medium * fix the Breaks/Replaces versions in the previous upload for moving libsamba-utils.so, and use the same Breaks/Replaces for the -dev packages too -- Michael Tokarev Tue, 07 Jun 2022 14:11:09 +0300 samba (2:4.16.1+dfsg-7) unstable; urgency=medium * drop libunwind-dev build dependency again: it turned out the internal stack unwind is better anyway * move libsamba-utils.so and its dependencies from libwbclient0 into samba-libs. In the past, libwbclient were built using this library, but it does not depend on libsamba-utils anymore * d/control: libnss-winbind and libpam-winbind does not depend on samba-common. None of the files in samba-common are used by nss and pam modules; winbind does use them but not the modules. * d/rules: add --with-sockets-dir=/run/samba (or else it was /var/run/samba) -- Michael Tokarev Tue, 07 Jun 2022 12:09:50 +0300 samba (2:4.16.1+dfsg-6) unstable; urgency=medium * d/control: specify arch list for libunwind-dev build-dep to be the same as for libunwind itself (it is not built on all architectures) -- Michael Tokarev Sun, 29 May 2022 12:09:22 +0300 samba (2:4.16.1+dfsg-5) unstable; urgency=medium * add-missing-libs-deps.diff: add missing dependencies for a few samba libraries. Closes: #1010922 * point [printers] to /var/tmp/, stop shipping /var/spool/samba/. For a long time, we shipped an alternative /var/tmp/ directory with mode 01777 (so that anyone can use it to store files) but without the same setup as for regular /var/tmp/ (in particular, without removing old files and since it is not a usual place to store temp files, no one actually looked at it the same way someone would take care of /var/tmp/. Change smb.conf to use /var/tmp/ instead of /var/spool/samba/. In the postinst script, remove /var/spool/samba/, check if it is still used in smb.conf, and create a compatibility symlink pointing to tmp/, suggesting changing smb.conf. And remove this compat symlink in postrm. This probably can be accomplished by a debconf question, but the thing is complicated by the fact that smb.conf might be upgrading too at the same time. * debian/patches/weak-crypto-allowed-clarify.diff: update * testparm-do-not-fail-if-pid-dir-does-not-exist.patch: also cover samba-tool testparm too, not only regular stand-alone testparm. * fix-samba-tool-domain-join-segfault.patch: fix segfault when joining an AD-DC domain using samba-tool join. * d/rules: enable --with-profilig-data to build samba with profiling collection (if set in smb.conf) * d/control: add libunwind-dev to build-deps, to compile in stack backtrace logging in case of crash * d/control: stop build-conflicting with now-unused libtracker-miner-2.0-dev * d/control: stop build-conflicting with libtracker-sparql-2.0-dev: there's no point in explicitly disabling libtracker-sparql support (bullseye-only for now anyway) -- Michael Tokarev Sat, 28 May 2022 22:50:43 +0300 samba (2:4.16.1+dfsg-4) unstable; urgency=medium [ Michael Tokarev ] * fix spelling in disable-setuid-confchecks.patch * d/NEWS: split it into different $package.NEWS files * d/upstream/metadata: add Bug-Database * d/samba.postinst: create sambashare group and usershare directory on new install only * libldb2: provide compat symlinks for bullseye ldb modules dir * d/rules: provide Build-Depends-Package: for python3-ldb * samba-vfs-modules.lintian-overrides: add spare-manual-page vfs_*.8 override * winbind.lintian-overrides: add spare-manual-page idmap_*.8 override [ Arnaud Rebillout ] * Fix patch testparm-do-not-fail-if-pid-dir-does-not-exist (Closes: #1010835) -- Michael Tokarev Wed, 11 May 2022 09:50:03 +0300 samba (2:4.16.1+dfsg-3) unstable; urgency=medium * fix ldb package version generation in d/make_shlibs which was wrong in 2 previous uploads. Will I *ever* make it actually work someday? -- Michael Tokarev Mon, 02 May 2022 18:32:24 +0300 samba (2:4.16.1+dfsg-2) unstable; urgency=medium * rethink ldb version *again*, to be 2.5.0+smb4.16.1-2 or else 2.5.0+smb-1 from samba-4.16.1-2 sorts before 2.5.0+smb-7 from samba-4.16.0-7. -- Michael Tokarev Mon, 02 May 2022 17:02:16 +0300 samba (2:4.16.1+dfsg-1) unstable; urgency=medium * new upstream minor release 4.16.1 * move-msg.sock-from-var-lib-samba-to-run-samba.patch: move /var/lib/samba/private/msg.sock/ to /run/samba/msg.sock/. This is a (private) socket directory for IPC, it should not be in /var. * Remove /var/lib/samba/private/msg.sock/ in postinst * testparm-do-not-fail-if-pid-dir-does-not-exist.patch: testparm deliberately fails if /run/samba does not exist, while testparam itself does not use it and daemons will create it on demand. Just make it a warning instead of a fatal error, and we'll not need to pre-create this dir in a random place using hackish ways * ctdb-create-piddir.patch: create /run/ctdb/ in ctdb.service and ctdb.init before invoking ctdbd (as the latter does not create its pid directory on demand). * stop (ab)using tmpfiles.d to pre-create /run/samba/ and /run/ctdb/ and stop creating /run/samba/ in samba-common-bin.postinst just to make testparam happy. * d/rules: minor tweaks -- Michael Tokarev Mon, 02 May 2022 13:16:12 +0300 samba (2:4.16.0+dfsg-7) unstable; urgency=medium * another bunch of small tweaks to d/rules: - set SHELL to /bin/sh -e - rework the clean target - provide fast replacement of architecture.mk - better expression for DEB_REVISION - rearrange configure options * do not disable glusterfs on ubuntu-i386 (glusterfs is now in main) * mention closing of #1001053 by the 4.16 upload * change the ldb version string again, removing te "+samba*" suffix to allow bin-NMUs +b1 (Closes: #1010100) -- Michael Tokarev Sun, 24 Apr 2022 16:56:34 +0300 samba (2:4.16.0+dfsg-6) unstable; urgency=medium * another attempt to fix/work around #221618. Re-enable libsmbclient-ensure-lfs-221618.patch and change it to just define an extra type array int[sizeof(off_t)-7]. If off_t is small it will become a compile error. It is an ugly way to do it, but it should actually work, unlike various static_assert/_Static_assert which are language (C/C++) and standard-dependent. Closes: #221618. -- Michael Tokarev Sat, 09 Apr 2022 17:27:09 +0300 samba (2:4.16.0+dfsg-5) unstable; urgency=medium * disable libsmbclient-ensure-lfs-221618.patch for now. It throws errors in one or another configuration no matter what. Repoens: #221618 * d/salsa-ci.yml: re-allow blhc salsa-ci test to fail again due to different bug in blhc -- Michael Tokarev Sat, 09 Apr 2022 16:33:57 +0300 samba (2:4.16.0+dfsg-4) unstable; urgency=medium * libsmbclient-ensure-lfs-221618.patch: replace _Static_assert with static_assert (and include to make C++ happy too (Closes: #1009211) * disable-setuid-confchecks.patch: when running configure tests, samba tries to verify setuid/setgid etc calls are actually *working*, not just exists. This is only possible when the configure is running as root. But it turns out in some salsa-ci configuration (namely in the reprotest), the second build is actually running as root, and in that environment, actual setegid call is failing somehow. Just disable the config-time check for correctly working setgid and assume it "just works" if present, exactly like non-root build will do. * d/salsa-ci.yml: do not expect failure in blhc test (the original prob has been fixed long ago), and stop requiring experimental * mention closing of #999876 by 4.16 -- Michael Tokarev Sat, 09 Apr 2022 00:42:38 +0300 samba (2:4.16.0+dfsg-3) unstable; urgency=medium * d/control: comment out the selftest-mode build deps for now * d/control: forgotten python3-samba:Replaces against samba package too, not just samba-libs, when moving dckeytab python lib (Closes: #1009175) -- Michael Tokarev Fri, 08 Apr 2022 10:18:23 +0300 samba (2:4.16.0+dfsg-2) unstable; urgency=medium * use strict versioned dependency between samba-dsdb-modules and libldb2, since they're tied to each other and are now built from the same source * fix forgotten shlib symbols generation for python3-ldb * change libldb versioning scheme from ldb_2:2.5.0+samba4.16.0-1 to ldb_2:2.5.0-1+samba4.16.0 so that symbols versioning works correctly. Unfortunately the previous upload to experimental used the first form which is greather than the correct one, so temporarily (just for this 2.5.0 version of ldb) use this: ldb_2:2.5.0+smb-1+samba4.16.0 (with "+smb" suffix to be removed for 2.5.1+) * exclude samba-vfs-modules for i386 ubuntu build since this package is useless without samba itself (which is not built on this environment) * create selftest rules and add !nocheck build-dependencies (but do not enable selftests for now as they're failing) * split build system into -arch and -indep parts. We build only one arch-all package (samba-common) which contains only static files from debian/, there's no need to build whole samba to build this package. Move almost all Build-Depends to Build-Depends-Arch (and reindent them). * various updates to d/rules -- Michael Tokarev Thu, 07 Apr 2022 09:56:56 +0300 samba (2:4.16.0+dfsg-1) experimental; urgency=medium * New upstream major release. Closes: #1004690, CVE-2021-20316: Fileserver symlink metadata share escape Closes: #1004691, CVE-2021-43566: mkdir race condition allows share escape Closes: #1004692, CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target of a symlink exists Closes: #1005642 (windows client data corruption due to cache poisoning) Closes: #1001053 (MIT-kerberos config broken after fix for CVE-2020-25717) Closes: #988197 (legacy printing support, 47d79d7e7e406f7dd2) Closes: #998423 (coredump connecting from macos to shares with var substs) Closes: #999876 (winbind allow trusted domains = no regression) * Notable changes in 4.16 series compared to 4.13: - modular VFS (see The_New_VFS.txt) - publishing printers in AD is more complete - group policies for winbindd cilents (like linux systems) - certificate auto enrollement in AD group policy - large list of improvements in samba-tool - SMB1 protocol has been deprecated, some subcommands has been removed - more consistend options/subcommands in samba commands * d/rules: export PYTHONHASHSEED=1. This makes lots of sporadic build-time debian-specific failures to go away, by preserving order of waf hashes * refresh patches, update build-depend versions (talloc, tdb, tevent) * refresh lintian-overrides files, add many new overrides * build-depend on python3-markdown * build-depend on libjson-perl for new heimdal bits * more consistent internal lib naming; refresh file lists everywhere * samba: install new rpc_* services, install samba-dcerpc * refresh symbols files * build libldb from samba sources, not from separate source (this moves ldb plugins from /usr/lib/$triple/ldb/plugin/ldb/ to /usr/lib/$triple/samba/ldb/ - the same where dsdb modules are). * optimizations for d/make_shlibs; also allow one to specify explicit version for some packages * as per clarifications for waf --{bundled,builtin}-libraries, remove now-wrong usage there. This also fixes build failures with current samba sources * d/rules: various optimizations to reduce startup costs by eliminating unnecessary external command calls during d/rules read by make. Including caching of LDB version information in d/ldb-version.mk file. This does not affect the buildd processing much (and does not affect runtime at all), but helps with build procedure debugging. * d/rules: numerous small fixes, cleanups and other changes, including: - clean up the install target - remove some now-irrelevant parts - fix no-glusterfs-build on non-linux * change build procedure: instead of `waf build', run `waf install'. `waf build' builds samba to be run from the build dir, and `waf install' rebuilds/relinks everything again for production. Build the production variant only, no build-dir one. * samba-common-bin.postinst: explicitly mkdir /run/samba before invoking samba binaries (Closes: #953530) * in the salsa git repository of samba, stop keeping debian patches in applied form, keep them in d/patches/ only as most other packages do. * move single python (helper) module, libsamba-policy, together with 2 internal libraries used by it, from samba-libs package to python3-samba. This makes samba-libs to be free from python-related files, and makes python3-samba to be the only python-providing package. Closes: #1006875, #878612, #862338 * also move dckeytab python module from samba to python3-samba (actually stop moving it from python3-samba to samba to incorrectly avoid a circular dependency). Also verify that python3-samba does not depend on samba package. * weak-crypto-allowed-clarify.diff: clarify "weak crypto is allowed" testparm message (Closes: #975882) * spelling.patch: fix many common spelling mistakes in the source * ctdb: simplify/cleanup instllation of READMEs/examples * d/control: remove breaks/replaces/depends on ancient versions of some packages (ancient dpkg version in Pre-Depends, ancient samba-libs) * d/rules: rework wrong shlibdeps handling * move helper programs from /usr/lib/$multiarch/ to /usr/libexec/ where they belongs. This should not affect users. * smbclient: re-do the fix for an old bug, #221618. The original "fix" did not fix anything (it is too late already to #define _FILE_OFFSET_BITS when all types has already been defined). From now on, raise an error if off_t is less than 64bits (it should >=64 when #include'ing with proper LFS defines). In theory this can break some sources which either included libsmbclient.h without a reason or which didn't use any of the functions which deals with off_t (smbc_lseek etc), - which did not explicitly enable LFS on a 32bit system. Please email us if you faced such situation. * drop 07_private_lib patch: we do not need to force rpath for private libraries into every samba binary, upstream build system does a good job here. -- Michael Tokarev Tue, 05 Apr 2022 16:01:25 +0300 samba (2:4.13.14+dfsg-1) unstable; urgency=high * New upstream security release in order to address the following defects: - CVE-2016-2124: don't fallback to non spnego authentication if we require kerberos - MS CVE-2020-17049 in Samba: 'Bronze bit' S4U2Proxy Constrained Delegation bypass - CVE-2020-25717: A user on the domain can become root on domain members - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other servers + Bump build-depends ldb >= 2.2.3 - CVE-2020-25719: AD DC Username based races when no PAC is given - CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers (eg objectSid) - CVE-2020-25722: AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues) - CVE-2021-3738: crash in dsdb stack - CVE-2021-23192: dcerpc requests don't check all fragments against the first auth_state + Update d/samba-libs.install for libdcerpc-pkt-auth.so.0 * Add patch to fix "allow trusted domains" * Bump ldb build-depends to 2.2.3 * Update d/samba-libs.install -- Mathieu Parent Tue, 09 Nov 2021 20:53:03 +0100 samba (2:4.13.13+dfsg-1) unstable; urgency=high [ Athos Ribeiro ] * Add autopkgtest to verify tmpfiles setup (LP: #1905387) - d/t/reinstall-samba-common-bin: make sure /run/samba is created by the samba-common-bin installation process (postinst script) - d/t/control: run new reinstall-samba-common-bin test case [ Paride Legovini ] * samba.postinst: do not populate sambashare from the Ubuntu admin group (LP: #1942195) [ Mathieu Parent ] * New upstream version - Remove CVE-2021-20254.patch - Bump build-depends ldb >= 2.2.0 * libwbclient0: Add Breaks+Replaces: libsamba-util0 (<< 2:4.0.0) (Closes: #988170) -- Mathieu Parent Mon, 01 Nov 2021 08:59:20 +0100 samba (2:4.13.5+dfsg-2) unstable; urgency=high * CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token (Closes: #987811) * Add Breaks+Replaces: samba-dev (<< 2:4.11) (Closes: #987209) -- Mathieu Parent Thu, 06 May 2021 21:09:29 +0200 samba (2:4.13.5+dfsg-1) unstable; urgency=medium * New upstream version (Closes: #984863) -- Mathieu Parent Sat, 13 Mar 2021 08:31:27 +0100 samba (2:4.13.4+dfsg-1) unstable; urgency=medium * New upstream version - GPG signature has changed - Update samba-libs.install - Update symbols * Never use priority high when asking for DHCP integration (Closes: #981554) * Sync CTDB patches with Ubuntu: - Add "ctdb-config: enable syslog by default" - Update "fix nfs related service names" * d/rules: Ubuntu specifics - No Ceph on i386 - Disable some i386 packages - No GlusterFS -- Mathieu Parent Tue, 09 Feb 2021 22:26:43 +0100 samba (2:4.13.3+dfsg-1) unstable; urgency=medium [ Andreas Hasenack ] * d/control: enable the liburing vfs module (Closes: #976854) * Add new DEP8 tests for the uring vfs module * Factor out common DEP8 test code into d/t/util and change the tests to source from it * Add set -x and set -e to DEP8 tests [ Mathieu Parent ] * liburing-dev is linux-any * New upstream version -- Mathieu Parent Wed, 16 Dec 2020 18:23:09 +0100 samba (2:4.13.2+dfsg-3) unstable; urgency=medium * Ensure systemd-tmpfiles is called before testparm (Closes: #975422) * Only check configuration on configure step -- Mathieu Parent Sun, 22 Nov 2020 10:44:51 +0100 samba (2:4.13.2+dfsg-2) unstable; urgency=medium * Upload to unstable -- Mathieu Parent Wed, 18 Nov 2020 20:34:51 +0100 samba (2:4.13.2+dfsg-1) experimental; urgency=medium * New upstream major version - Update d/gbp.conf, d/watch and d/README.source for 4.13 - Update patches - Bump build-depends ldb >= 2.2.0 - Install new files - Update symbols * Includes the following security fixes: - CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify (Closes: #973400) - CVE-2020-14323: Unprivileged user can crash winbind (Closes: #973399) - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (Closes: #973398) - CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon") (Closes: #971048) * Includes the following fixes: - Fixes "samba_dnsupdate gives depreacation warnings" (Closes: #973957) - s3: libsmbclient.h: add missing time.h include (Closes: #946840) * Remove unused python3-crypto dependency (Closes: #971292) * Enable Spotlight with ES backend (Closes: #956096, #956482) * Standards-Version: 4.5.0 * Add missing Build-Depends-Package in libsmbclient.symbols and libwbclient0.symbols * d/copyright: Fix duplicate-globbing-patterns * Remove outdated/malformed lintian overrides * d/winbind.logrotate: Only reload winbindd when running (Closes: #946821) * Bump to debhelper compat 13 * Add another library-not-linked-against-libc override -- Mathieu Parent Thu, 12 Nov 2020 11:23:01 +0100 samba (2:4.12.5+dfsg-3) unstable; urgency=high * Add Breaks: sssd-ad-common (<< 2.3.0), due to libndr so bump (Closes: #963971) * Add patch traffic_packets: fix SyntaxWarning: "is" with a literal (Closes: #964165) * Add patch Rename mdfind to mdsearch (Closes: #963985) -- Mathieu Parent Sat, 04 Jul 2020 23:57:59 +0200 samba (2:4.12.5+dfsg-2) unstable; urgency=high * Add missing symbol (path_expand_tilde) -- Mathieu Parent Thu, 02 Jul 2020 15:27:25 +0200 samba (2:4.12.5+dfsg-1) unstable; urgency=high * New upstream security release: - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU - CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV. - CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd. - Bump build-depends ldb >= 2.1.4 -- Mathieu Parent Thu, 02 Jul 2020 14:03:36 +0200 samba (2:4.12.3+dfsg-2) unstable; urgency=medium * Upload to unstable -- Mathieu Parent Sun, 28 Jun 2020 11:45:14 +0200 samba (2:4.12.3+dfsg-1) experimental; urgency=medium * New upstream major version (Closes: #963106) - Update d/gbp.conf, d/watch and d/README.source for 4.12 - Drop merged patches - Bump build-depends talloc >= 2.3.1, tdb >= 1.4.3, tevent >= 0.10.2 and ldb >= 2.1.3 - Upstream fixes: + pygpo: use correct method flags (Closes: #963242, #961585, #960171, #956428) + CVE-2020-10700: A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service (Closes: #960189) + CVE-2020-10704: A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability (Closes: #960188) - intel aes-ni no more needed as GnuTLS is used - Install new files - Update symbols - Update samba-libs.lintian-overrides * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915) -- Mathieu Parent Wed, 24 Jun 2020 23:12:11 +0200 samba (2:4.11.5+dfsg-1) unstable; urgency=medium * New upstream security release - CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD Directory not automatic. - CVE-2019-14907: Crash after failed character conversion at log level 3 or above. - CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC. - Bump build-depends ldb >= 2.0.8 -- Mathieu Parent Tue, 28 Jan 2020 07:19:46 +0100 samba (2:4.11.3+dfsg-1) unstable; urgency=high * New upstream security release - Drop merged patches for previous security fixes - CVE-2019-14861: An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name. - CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC. * d/control: drop python3-matplotlib * d/control: Fix stronger-dependency-implies-weaker (samba depends -> recommends python3-dnspython) -- Mathieu Parent Mon, 16 Dec 2019 09:47:45 +0100 samba (2:4.11.1+dfsg-3) unstable; urgency=medium * Add some python dependencies: - python3-matplotlib : samba-tool visualize - python3-markdown : samba-tool domain schemaupgrade - python3-dnspython : samba-tool dns * Only build with default python3 (Closes: #943635) -- Mathieu Parent Sun, 17 Nov 2019 14:48:02 +0100 samba (2:4.11.1+dfsg-2) unstable; urgency=high * New upstream security release - CVE-2019-10218: Malicious servers can cause Samba client code to return filenames containing path separators to calling code. - CVE-2019-14833: When the password contains multi-byte (non-ASCII) characters, the check password script does not receive the full password string. -- Mathieu Parent Fri, 18 Oct 2019 20:26:45 +0200 samba (2:4.11.1+dfsg-1) unstable; urgency=medium * New upstream release -- Mathieu Parent Fri, 18 Oct 2019 19:00:46 +0200 samba (2:4.11.0+dfsg-11) unstable; urgency=medium * Stop building with spotlight support which pulls glib (Closes: #941654) * Force quota support (Closes: #941899) * Standards-Version: 4.4.1, no change -- Mathieu Parent Mon, 14 Oct 2019 12:16:04 +0200 samba (2:4.11.0+dfsg-10) unstable; urgency=medium * Add libwbclient-dev to samba-dev depends as samba-util was moved there (Closes: #941750) -- Mathieu Parent Sat, 05 Oct 2019 15:57:07 +0200 samba (2:4.11.0+dfsg-9) unstable; urgency=medium * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2) -- Mathieu Parent Thu, 03 Oct 2019 19:08:17 +0200 samba (2:4.11.0+dfsg-8) unstable; urgency=medium * d/gbp.conf: sign-tags = True * Do not check smb.conf with testparm when server role=active directory domain controller (Closes: #931734) * Force one job during configure step with -j 1 (Closes: #941467). Not setting -j leads to default which is number of cpus -- Mathieu Parent Thu, 03 Oct 2019 07:52:39 +0200 samba (2:4.11.0+dfsg-7) unstable; urgency=medium * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467) * This version is built with talloc from sid (Closes: #940963) -- Mathieu Parent Wed, 02 Oct 2019 20:45:24 +0200 samba (2:4.11.0+dfsg-6) unstable; urgency=medium * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467) -- Mathieu Parent Tue, 01 Oct 2019 22:35:36 +0200 samba (2:4.11.0+dfsg-5) experimental; urgency=medium * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false * Remove patches: - "build: Remove tests for _readdir() and __readdir()" - "build: Remove tests for rdchk()" - "build: Remove tests for _pwrite() and __pwrite()" * Add patches by Ralph Boehme: - "wscript: remove all checks for _FUNC and __FUNC" - "wscript: split function check to one per line and sort alphabetically" -- Mathieu Parent Mon, 30 Sep 2019 13:37:50 +0200 samba (2:4.11.0+dfsg-4) experimental; urgency=medium * Use the same arches for librados-dev than libcephfs-dev (Fix missing build-depends on alpha and sh4) * Split vfsmods:Recommends substvar into {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also alpha and sh4) * Add patch for "build: Remove tests for _readdir() and _readdir()", to hopefully fix FTBFS on armel -- Mathieu Parent Sun, 29 Sep 2019 09:29:03 +0200 samba (2:4.11.0+dfsg-3) experimental; urgency=medium * Try to fix FTBFS on armel (armhf is fixed): - Add patch for build: Remove tests for rdchk() -- Mathieu Parent Sat, 28 Sep 2019 22:17:04 +0200 samba (2:4.11.0+dfsg-2) experimental; urgency=medium * d/gitlabracadabra.yml: Add samba-team/libsmb2 * Try to fix FTBFS on armel and armhf: - Add patch for build: Remove tests for _pwrite() and __pwrite() -- Mathieu Parent Sat, 28 Sep 2019 11:47:56 +0200 samba (2:4.11.0+dfsg-1) experimental; urgency=medium [ Mathieu Parent ] * Upload to experimental * New upstream major release - Update d/gbp.conf, d/watch and d/README.source for 4.11 - Import upstream release - Update fix-nfs-service-name-to-nfs-kernel-server.patch - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and ldb >= 2:2.0.7 - libsamba-passdb.so bumped to 0.28.0 - libnon-posix-acls is now a subsystem - Drop libparse-pidl-perl package (Closes: #939419) - Add new files to d/*.install - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies - Move libsamba-util deps to libwbclient0 * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on armel and armhf * salsa-ci: Build on experimental [ John Paul Adrian Glaubitz ] * Disable cephfs support on architectures where it's not stable (Closes: #940697) [ Louis van Belle ] * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build dumpmscat * d/control, d/rules: Enable spotlight (TimeMachine) * d/control: Bump libtdb-dev (>= 2) in samba-dev deps * Update libwbclient0.symbols * d/rules: adjust LDB_DEPENDS -- Mathieu Parent Thu, 26 Sep 2019 09:37:51 +0200 samba (2:4.10.8+dfsg-1) unstable; urgency=medium * Upload to unstable * New upstream release: - CVE-2019-10197: Combination of parameters and permissions can allow user to escape from the share path definition -- Mathieu Parent Tue, 10 Sep 2019 18:46:54 +0200 samba (2:4.10.7+dfsg-1) experimental; urgency=medium [ Mathieu Parent ] * New upstream release - Update patches - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged - libsamba-passdb.so bumped to 0.27.2 - Update symbols - Update installed files * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9) (Closes: #910242) * Add missing Breaks+Replace found by piuparts (Closes: #929217) * Enable vfs_nfs4acl_xattr (Closes: #930540) * ctdb: - enable ceph and etcd recovery lock - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends * Add gitlabracadabra.yml * Update salsa-ci.yml [ Rafael David Tinoco ] * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture (Closes: #931138) * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201): - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service name from nfs to nfs-kernel-server - ctdb-config: depend on /etc/ctdb/nodes file - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to allow pid file to exist - added /var/lib/ctdb/* directories - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/* - Add examples of NFS HA CTDB config files + helper script [ Mathieu Parent ] * Update d/gbp.conf, d/watch and d/README.source for 4.10 * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and ldb >= 2:1.5.5 * Bump libcmocka-dev builddep to 1.1.3 * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS * d/copyright: - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/ - Move License details to end of file - Add waf licences - Add lib/replace licences - Update lib/{ldb,talloc,tdb} licences * Move to Python3 (from Ubuntu) * Bump debhelper from old 11 to 12. * Standards-Version: 4.4.0 * Replace all reference of /var/run to /run (Closes: #934540) * Replace python shbang by python3 in d/*.py -- Mathieu Parent Thu, 29 Aug 2019 14:32:52 +0200 samba (2:4.9.5+dfsg-1) experimental; urgency=medium * New upstream release - Bump ldb Build-Depends to 2:1.5.1+really1.4.6 - Drop s3-auth-ignore-create_builtin_guests-failing-without.patch, merged - Drop and python-gpg.patch, merged * Add Recommends: samba-dsdb-modules for samba-common-bin (Closes: #862467) -- Mathieu Parent Wed, 20 Mar 2019 21:07:02 +0100 samba (2:4.9.4+dfsg-4) unstable; urgency=medium * samba-libs: Add Breaks+Replaces: libndr-standard0 (<< 4) (Closes: #910242) * Improve AppArmor integration (Closes: #896080) - Install update-apparmor-samba-profile 1.2 from Christian Boltz (openSUSE) - Adapt update-apparmor-samba-profile: Rename apparmor profile snippet, and test for it's directory - smbd.init: Run update-apparmor-samba-profile before start - smbd.service: Run update-apparmor-samba-profile before start - Remove /etc/apparmor.d/samba/smbd-shares on purge -- Mathieu Parent Tue, 26 Feb 2019 22:18:19 +0100 samba (2:4.9.4+dfsg-3) unstable; urgency=medium [ Ivo De Decker ] * Remove myself from uploaders [ Mathieu Parent ] * Update debian/gitlab-ci.yml * Standards-Version: 4.3.0 * Add upstream patch for python-gpg support * Replace Suggests: python-gpgme by Recommends: python-gpg (Closes: #876984) -- Mathieu Parent Fri, 15 Feb 2019 11:14:10 +0100 samba (2:4.9.4+dfsg-2) unstable; urgency=medium * Append +really0.02 to libparse-pidl-perl version (Closes: #918564) * Add apport hook (From Ubuntu) * Change build dependency to libglusterfs-dev (Closes: #919667) -- Mathieu Parent Wed, 23 Jan 2019 20:59:08 +0100 samba (2:4.9.4+dfsg-1) unstable; urgency=medium * New upstream release - Remove patches for previous security fixes, merged - Remove unused lintian overrides (library-not-linked-against-libc) * ignore create_builtin_guests() failing without a valid idmap configuration (Closes: #909465, #899269) -- Mathieu Parent Sat, 22 Dec 2018 18:32:00 +0100 samba (2:4.9.2+dfsg-2) unstable; urgency=high * New upstream security release - CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD Internal DNS server - CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT - CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server - CVE-2018-16852 NULL pointer de-reference in Samba AD DC DNS servers - because of CVE-2018-16853 (Samba AD DC S4U2Self Crash in experimental MIT Kerberos configuration (unsupported)), mark the MIT Kerberos build of the Samba AD DC as experimental (not used in Debian package) - CVE-2018-16857 Bad password count in AD DC not always effective * Prepend 1.5.1+really to ldb version -- Mathieu Parent Sat, 24 Nov 2018 23:21:27 +0100 samba (2:4.9.2+dfsg-1) unstable; urgency=medium * New upstream release - Bump build-dependencies to ldb 1.4.2 - Update debian/samba-libs.install * d/gitlab-ci.yml: - Update to use include - allow_failure for reprotest until #912340 is fixed * d/rules: Replace override_dh_perl by override_dh_perl-arch (Closes: #913143) * debian/gitlab-ci.yml: - Samba sometimes needs ldb from experimental - Use ldb from experimental in piuparts -- Mathieu Parent Sat, 17 Nov 2018 17:25:10 +0100 samba (2:4.9.1+dfsg-2) unstable; urgency=medium [ Mathieu Parent ] * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32 * Allow one to change password via passwd in default config - third_party: Update pam_wrapper to version 1.0.7 - third_party: Add pam_set_items.so from pam_wrapper - nsswitch: Add try_authtok option to pam_winbind - tests: Check pam_winbind pw change with different options - Patch for previous 4 commits - debian/winbind.pam-config: Use the new try_authtok option allowing password change while preserving current behavior with password strength modules (Closes: #858923, LP: #570944) * README.source: use gbp pull --track-missing * Override library-not-linked-against-libc false positives (See #896012) * Fix wrong-path-for-interpreter for pidl and findsmb * ctdb.postrm: Fix to disable_legacy (found by piuparts) (Closes: #911530) [ James Clarke ] * Fix systemd-related build failures on non-Linux [ Mathieu Parent ] * Add Gitlab CI: - Subscribe to salsa-ci-team/pipeline (See salsa-ci-team/pipeline!27 and samba-team/samba!10) - Copy /etc/apt/{sources.list.d,preferences.d} in the dockerbuilder container (salsa-ci-team/images!9) - Allow daemons to start during autopkgtest (salsa-ci-team/images!10) - debian/gitlab-ci.yml: all jobs: Use ldb from experimental - debian/gitlab-ci.yml: piuparts job: Add --scriptsdir, --allow-database and --warn-on-leftovers-after-purge options - debian/gitlab-ci.yml: piuparts job: Copy apt config to allow enabling extra repositories - debian/gitlab-ci.yml: piuparts job: Use image with the following changes: + Add pre_install_copy_configs and post_install_remove_configs to copy, resp. remove config files from /etc-target to /etc + patch pre_remove_50_find_bad_permissions to workaround findutils bug #912180. Also proposed another workaround in piuparts as bug #911334 which is merged but not yet released * Upload to unstable -- Mathieu Parent Thu, 01 Nov 2018 21:13:37 +0100 samba (2:4.9.1+dfsg-1) experimental; urgency=medium * New upstream release -- Mathieu Parent Mon, 24 Sep 2018 13:33:21 +0200 samba (2:4.9.0+dfsg-1) experimental; urgency=medium * Upload to experimental * New upstream release - Update d/gbp.conf, d/watch and d/README.source for 4.9 - Remove Fix-pidl-manpage-sections.patch, Fix-spelling.patch and Improve-vfs_linux_xfs_sgid-manpage.patch, merged upstream - Bump build-depends talloc >= 2.1.14, tdb >= 1.3.16, tevent >= 0.9.37 and ldb >= 2:1.4.2' - Update paths - Update libsmbclient.symbols - ctdb.lintian-override: Remove script-not-executable override - Add ctdb.NEWS: "Configuration has been completely overhauled" - ctdb: Enable/disable legacy script in postinst/presinst -- Mathieu Parent Sat, 22 Sep 2018 23:04:11 +0200 samba (2:4.8.5+dfsg-1) unstable; urgency=medium * New upstream release - Bump ldb Build-depends to 2:1.4.0+really1.3.6 - Fixes FTBFS on kFreeBSD (Closes: #883972) - d/rules: winbind_krb5_locator is now in the correct path - winbind_krb5_locator manpage has moved from section 7 to 8 * Standards-Version: 4.2.1 -- Mathieu Parent Thu, 30 Aug 2018 19:32:24 +0200 samba (2:4.8.4+dfsg-2) unstable; urgency=high * Fix typo in previous release: s/usefull/useful/ * Prepend 1.4.0+really to ldb version to allow samba-dsdb-modules install (Closes: #906562, #906568) * Urgency still set to high -- Mathieu Parent Sun, 19 Aug 2018 10:08:22 +0200 samba (2:4.8.4+dfsg-1) unstable; urgency=high [ Andreas Hasenack ] * d/samba.logrotate: only try to reload the services if they are running (Closes: #902149) * Remove the deprecated "syslog" and "syslog only" options (Closes: #901138) [ Mathieu Parent ] * New upstream security release - CVE-2018-1139 Weak authentication protocol allowed - CVE-2018-1140 Denial of Service Attack on DNS and LDAP server - CVE-2018-10858 Insufficient input validation on client directory listing in libsmbclient - CVE-2018-10918 Denial of Service Attack on AD DC DRSUAPI server - CVE-2018-10919 Confidential attribute disclosure from the AD LDAP server - Urgency set to high - Bump build-depends ldb >= 1.3.5 (actually 2:1.4.0+really1.3.5) for CVE-2018-1140 * smb.conf: Remove "wins support" and "wins server" comments * smb.conf: Improve "logging" comments * smb.conf: Remove "dns proxy = no", only useful as a WINS server * smb.conf: Propose better idmap config * smb.conf: Remove "passdb backend = tdbsam" as this is the default * smb.conf: Fix "usershare max shares" default (patched to 100 instead of 0) * Standards-Version: 4.2.0 * Set Rules-Requires-Root: binary-targets as chmod is used * Remove override_dh_strip target as dbgsym migration is complete -- Mathieu Parent Fri, 17 Aug 2018 16:30:18 +0200 samba (2:4.8.2+dfsg-2) unstable; urgency=medium * Update panic-action script message, samba-dbg renamed to samba-dbgsym (Closes: #900242) * Ensure /var/lib/samba/dhcp.conf exists (Closes: #901585) * Check smb.conf with testparm, and also with samba-tool when server role = active directory domain controller (Closes: #900908) -- Mathieu Parent Mon, 18 Jun 2018 23:39:41 +0200 samba (2:4.8.2+dfsg-1) unstable; urgency=medium * New upstream release - Bump build-depends ldb >= 1.3.3 * Fix lintian warnings with patches recently merged upstream: - Add Fix-pidl-manpage-sections.patch - Add Fix-spelling.patch - Add Improve-vfs_linux_xfs_sgid-manpage.patch * Wrap very long lines in d/rules -- Mathieu Parent Thu, 17 May 2018 09:58:09 +0200 samba (2:4.8.1+dfsg-2) unstable; urgency=low * Upload to unstable * Really ignore nmbd start errors when there is no non-loopback interface (Closes: #893762) * Ignore nmbd start errors when there is no local IPv4 non-loopback interface (Closes: #859526) * Fix possible-unindented-list-in-extended-description in samba-vfs-modules -- Mathieu Parent Tue, 15 May 2018 21:23:32 +0200 samba (2:4.8.1+dfsg-1) experimental; urgency=medium * New upstream release * Add lintian override for "smbclient: executable-is-not-world-readable usr/lib/x86_64-linux-gnu/samba/smbspool_krb5_wrapper 0700" (See #894720) * Improve samba-vfs-modules description (Closes: #776505) * Check smb.conf in samba-common-bin.postinst (Closes: #816301) * Mark libparse-pidl-perl, samba-dev, samba-dsdb-modules and samba-vfs-modules as"Multi-Arch: same" * Standards-Version: 4.1.4, no change * debian/smb.conf: Fix typo in comment line: sever -> server (Closes: #763648) * Read smb.conf until [print$] section instead of [cdrom] to preserve locally-defined shares (Closes: #776259) * Fix and improve dhcp integration: - dhclient3 was renamed to dhclient long time ago... - Remove /etc/samba/dhcp.conf on purge (Closes: #784713) - Move dhcp.conf out of /etc to allow ro root (Closes: #695362) - Update template for "Move dhcp.conf out of /etc to allow ro root" * Enable --accel-aes=intelaesni on DEB_HOST_GNU_CPU=x86_64 (Closes: #896196) - Use dh-exec to install libaesni-intel.so.0 only on amd64 -- Mathieu Parent Sun, 29 Apr 2018 12:54:06 +0200 samba (2:4.8.0+dfsg-2) experimental; urgency=medium * Remove unused and outdated debian/README.debian (debian/README.Debian is used instead) * Mask services as appropriate in samba and winbind postinst (Closes: #863285) - mask samba-ad-dc unless server role = active directory domain controller (as before) - mask smbd and nmbd when server role = active directory domain controller - mask nmbd when disable netbios = yes (Closes: #866125) * Set smbspool_krb5_wrapper permissions to 0700 (Closes: #894720, #372270) * Remove Depends: samba-libs of lib{nss,pam}-winbind * Mark winbind "Multi-Arch: allowed" and make lib{pam,nss}-winbind depends on winbind:any to allow co-installation (Closes: #881100) * Ignore nmbd start errors when there is no non-loopback interface (Closes: #893762) -- Mathieu Parent Sun, 08 Apr 2018 22:09:53 +0200 samba (2:4.8.0+dfsg-1) experimental; urgency=medium [ Mathieu Parent ] * New major upstream version - Update d/gbp.conf and d/watch for 4.8 - Update upstream source from tag 'upstream/4.8.0+dfsg' - Re-apply patches - Remove patches merged upstream: + no_build_system.patch + systemd-syslog.target-is-obsolete.patch + Add-documentation-to-systemd-Unit-files.patch + fix_kill_path_in_units.patch + nmbd-requires-a-working-network.patch + CVE-2018-1050-11343-4.7.patch + CVE-2018-1057-v4-7.metze01.patches.txt - Bump build-depends talloc >= 2.1.11~, tdb >= 1.3.15~, tevent >= 0.9.36~ and ldb >= 2:1.3.2~ - Drop Build-Conflicts-Arch: libaio-dev, vfs_aio_linux was dropped - Update debian/*.install and use debian/not-installed - Update debian/libsmbclient.symbols - Upload to experimental * debian/README.source - Update instructions - Convert to Markdown - Add a symlink from README.source to README.source.md * debian/rules: - Use the new --systemd-install-services - Use dh_missing --fail-missing - Re-order debian/rules overrides in the order they are called - Remove broken get-packaged-orig-source target - Remove unused DEB_BUILD_OPT_FOO variables - Add some comments - Move all the custom installs from override_dh_install to override_dh_auto_install - Remove --sourcedir override to dh_install "since dh_install automatically looks for files in debian/tmp in debhelper compatibility level 7 and above" - PIDFile= is now correctly set in *.service [ Louis van Belle ] * Update d/control, Relax Build-Depends to allow backport -- Mathieu Parent Mon, 19 Mar 2018 13:02:51 +0100 samba (2:4.7.4+dfsg-2) unstable; urgency=high [ Mathieu Parent ] * This is a security release in order to address the following defects: - CVE-2018-1050: Codenomicon crashes in spoolss server code - CVE-2018-1057: Unprivileged user can change any user (and admin) password * Fix "/etc/dhcp/dhclient-enter-hooks.d/samba returned non-zero exit status 1" when samba.service is disabled - Pick patch from Ubuntu for Launchpad #1579597 - Fix systemd check * Replace override_dh_systemd_start by override_dh_installsystemd (Fixes ctdb starting on install and restarting on upgrade since update to debhelper compat 11) * Replace --no-restart-on-upgrade by --no-stop-on-upgrade in dh_installinit and dh_installsystemd * Add missing dh_installsystemd calls to ensure that services are properly unmasked and enabled in postinst [ Andreas Hasenack ] * Add extra DEP8 tests to samba (Closes: #890439): - d/t/control, d/t/cifs-share-access: access a file in a share using cifs - d/t/control, d/t/smbclient-anonymous-share-list: list available shares anonymously - d/t/control, d/t/smbclient-authenticated-share-list: list available shares using an authenticated connection - d/t/control, d/t/smbclient-share-access: create a share and download a file from it -- Mathieu Parent Fri, 02 Mar 2018 20:55:06 +0100 samba (2:4.7.4+dfsg-1) unstable; urgency=medium * New upstream version - Updates patches - Bump ldb build-deps to 1.2.3 * Repository moved to salsa: Update Vcs-* fields * d/README.source: - ensure required branches exists - sync all required branches * Standards-Version: 4.1.3 (no change) * Move to debhelper compat 11 * Move libpam-winbind: to section admin * Move libnss-winbind: to section admin -- Mathieu Parent Thu, 11 Jan 2018 20:49:28 +0100 samba (2:4.7.3+dfsg-1) unstable; urgency=high * New upstream version - Remove patches for CVE-2017-15275 and CVE-2017-14746, merged - Bump libtevent-dev to 0.9.34, to fix upstream "BUG 13130: smbd on disk file corruption bug under heavy threaded load" - Set urgency to high for this fix * Stop building vfs_aio_linux (Closes: #881239) * Print "ignore the following error about deb-systemd-helper not finding samba-ad-dc.service" on upgrade too (Closes: #882482). Thanks Julian Gilbey for the patch -- Mathieu Parent Thu, 23 Nov 2017 16:39:19 +0100 samba (2:4.7.1+dfsg-2) unstable; urgency=high * This is a security release in order to address the following defects: - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown. - CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug. -- Mathieu Parent Sun, 12 Nov 2017 10:02:19 +0100 samba (2:4.7.1+dfsg-1) unstable; urgency=medium * New upstream version * Add lintian-override about heimdal embedded-library * Remove trailing spaces in debian/changelog -- Mathieu Parent Wed, 08 Nov 2017 07:48:31 +0100 samba (2:4.7.0+dfsg-2) unstable; urgency=medium * Upload to sid * Bump libcmocka-dev builddep to 1.1.1 (Closes: #878357) * Remove Skip-raw.write-tests.patch as we don't run tests * Remove 05_share_ldb_module, not understood - d/rules: /usr/lib/*/samba/share/ldb.so is not present anymore -- Mathieu Parent Thu, 26 Oct 2017 17:30:02 +0200 samba (2:4.7.0+dfsg-1) experimental; urgency=medium * New major upstream version - Update d/gbp.conf and d/watch for 4.7 - Update patches - Remove no_build_env.patch, no more needed - Remove 4 patches merged upstream - Bump build-depends ldb >= 2:1.2.2~, tdb >= 1.3.14~, tevent >= 0.9.33~ - Move replace from builtin to bundled libraries to fix FTBFS - Update d/*.install - Update symbols * Rework all patches for dep5 and "gbp pq" * Add libjansson-dev to Build-Depends to allow logging in JSON format * Lintian fixes: - build-depends: dh-systemd (>= 1.5) => use debhelper (>= 9.20160709) - Move libsmbclient-dev from priority extra to optional - Standards-Version: 4.1.1 - Update samba-libs.lintian-overrides (following libsmbldap bump) -- Mathieu Parent Thu, 12 Oct 2017 22:09:19 +0200 samba (2:4.6.7+dfsg-2) unstable; urgency=high * This is a security release in order to address the following defects: - CVE-2017-12150: Some code path don't enforce smb signing, when they should - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects - CVE-2017-12163: Server memory information leak over SMB1 -- Mathieu Parent Tue, 19 Sep 2017 22:00:13 +0200 samba (2:4.6.7+dfsg-1) unstable; urgency=medium * New upstream version - Removed CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch, merged - Remove s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch, merged * README.source: Default merge-mode of gbp has changed to replace * Fix samba.logrotate (Thanks Thomas A. Reim) -- Mathieu Parent Tue, 15 Aug 2017 23:06:36 +0200 samba (2:4.6.5+dfsg-8) unstable; urgency=medium * Remove dependency on update-inetd, not used anymore * vfs_ceph and vfs_glusterfs are linux only (d/rules part) * Remove build-dependency on faketime, not used anymore -- Mathieu Parent Sun, 23 Jul 2017 19:56:07 +0200 samba (2:4.6.5+dfsg-7) unstable; urgency=medium * xfslibs-dev is only available on linux * Fix logrotate for /var/log/samba/log.samba to send SIGHUP to all processes of the service (systemd only) * Add reportbug script for samba-common, samba and winbind (Closes: #682861) -- Mathieu Parent Fri, 21 Jul 2017 06:19:57 +0200 samba (2:4.6.5+dfsg-6) unstable; urgency=medium * libcephfs-dev is only available on linux * Fix libpam-winbind.prerm to be multiarch-safe (Closes: #647430) * Add missing logrotate for /var/log/samba/log.samba (Closes: #803924) * Use smbcontrol in logrotate when available (Closes: #804705) * From upstream: Fix outdated DNS Root servers (Closes: #865406) * Drop xsltproc_dont_build_smb.conf.5.patch, as #750593 is marked fixed (Closes: #776223) -- Mathieu Parent Wed, 19 Jul 2017 22:53:50 +0200 samba (2:4.6.5+dfsg-5) unstable; urgency=medium * Remove bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch, unused * Remove samba-ad-dc.templates * Remove upstart files on upgrade (Closes: #867688) * glusterfs-common is only available on linux * Remove the samba service * Ensure /var/log/samba permissions are set (Closes: #711138) -- Mathieu Parent Tue, 18 Jul 2017 23:29:44 +0200 samba (2:4.6.5+dfsg-4) unstable; urgency=high * This is a security release in order to address the following defects: - CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation (Closes: #868209) * Other fixes: - Remove empty samba-common.maintscript (leading to empty preinst and prerm) -- Mathieu Parent Thu, 13 Jul 2017 14:38:32 +0200 samba (2:4.6.5+dfsg-3) unstable; urgency=medium * Remove upstart code * Remove empty prerm for samba and samba-common-bin (Closes: #866258, #866284) * sysv: Use --pidfile in addition to --exec to avoid matching daemons in containers (Closes: #810794) * Standards-Version: 4.0.0 - Use https form of the copyright-format URL (Debian Policy 4.0.0) * Remove debian/bzr-builddeb.conf * Remove empty debian/diversions * Remove "ugly workaround to get the manpages on every architecture to be identical", xsltproc now honour SOURCE_DATE_EPOCH * Remove dh-exec shbang in libnss-winbind.install * Remove empty debian/libsmbclient.manpages * Remove pre-jessie maintscript snipsets * Move to debhelper compat 10 (Major change: dh_installinit command now defaults to --restart-after-upgrade) * Remove unused samba-ad-dc package metadata (Closes: #866138) * Fix "Non-kerberos logins fails on winbind 4.X when krb5_auth is configured in PAM" (Closes: #739768) -- Mathieu Parent Thu, 29 Jun 2017 09:45:59 +0200 samba (2:4.6.5+dfsg-2) unstable; urgency=medium * Upload to unstable * Move runtime dependencies of vfs_ceph and vfs_snapper to Recommends * Fix typo s/DESTIDR/DESTDIR/ in d/rules * Enable vfs_glusterfs (Closes: #864862) * Add libdbus-1-dev as Build-Depends to allow vfs_snapper to build (Closes: #804781). Patch by Willy Vanlid. -- Mathieu Parent Mon, 19 Jun 2017 23:56:56 +0200 samba (2:4.6.5+dfsg-1) experimental; urgency=medium * New upstream version (Closes: #859390) - d/gbp.conf, d/watch: Change major version to 4.6 - Bump Build-dependencies of talloc, tdb, tevent and ldb to resp. 2.1.9, 1.3.12, O.9.31 and 1.1.29 - Remove CVE-2017-7494.patch: applied upstream - Add Build-Depends: libcmocka-dev (>= 1.0) - Update d/*.install - d/samba-common.docs: Roadmap removed upstream * Update README.source, about importing major versions * d/control cleanup: - Remove Conflicts and Replaces on pre-wheezy samba4 packages - Remove Conflicts, Breaks and Replaces on pre-wheezy samba packages - Remove Conflicts, Breaks and Replaces on pre-jessie samba packages - Remove Conflicts, Breaks and Replaces on (pre-jessie) samba4 packages - Remove Conflicts on pre-jessie libldb1 package - Remove Breaks on pre-jessie qtsmbstatus-server package - Remove Replaces on pre-wheezy smbget package - wrap-and-sort * Add libcephfs-dev as b-d to build vfs_ceph (Closes: #856998). Patch from Ubuntu * Enable avahi support (Closes: #859875). Patch from Laurent Bigonville. * Translations: - Portuguese translation for debconf messages (Closes: #864172). Patch from Rui Branco - Hungarian translation for debconf messages (Closes: #708277) * Properly quote subshell invocation in samba-common.preinst (Closes: #771689) * Add Build-Depends: xfslibs-dev, for XFS quotas -- Mathieu Parent Mon, 12 Jun 2017 08:09:43 +0200 samba (2:4.5.8+dfsg-2) unstable; urgency=high * CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside -- Mathieu Parent Thu, 18 May 2017 11:53:47 +0200 samba (2:4.5.8+dfsg-1) unstable; urgency=high * New upstream version - Drop CVE-2017-2619.patch: merged upstream - Fix CVE-2017-2619 regression with "follow symlink = no" (Closes: #858564) -- Mathieu Parent Sat, 01 Apr 2017 20:39:17 +0200 samba (2:4.5.6+dfsg-2) unstable; urgency=high * This is a security release in order to address the following defects: - CVE-2017-2619: symlink race permits opening files outside share directory -- Mathieu Parent Wed, 22 Mar 2017 08:03:34 +0100 samba (2:4.5.6+dfsg-1) unstable; urgency=medium * New upstream version * Fix typo in smbd.service and winbind.service (s/nmb.service/nmbd.service) (Closes: #857232) -- Mathieu Parent Thu, 09 Mar 2017 15:42:37 +0100 samba (2:4.5.5+dfsg-1) unstable; urgency=medium * New upstream version - Revert rewrite of the vfs_fruit module (Closes: #856561) * Fix 'winbindd privileged socket directory' (Closes: #754339): - Fix path from /var/run/samba/winbindd_privileged/ to /var/lib/samba/winbindd_privileged/. - Move mkdir+chgrp+chmod to postinst (to handle systemd also). - Thanks to Jim Barber for the report. * logrotate: Use delaycompress on all logs (Closes: #702201) - Thanks to Matthew Gabeler-Lee for the proposed fix. -- Mathieu Parent Sun, 05 Mar 2017 23:21:09 +0100 samba (2:4.5.4+dfsg-1) unstable; urgency=medium [ Mathieu Parent ] * New upstream version - Drop security-2016-12-19.patch, was 4.5.3 * missing-build-dependency-for-dh_-command dh_python2 => dh-python [ Vincent Blut ] * d/control: Suggest chrony as an alternative to ntp (Closes: #851727) [ Daniel A ] * add gpgme support (Closes: #850908) -- Mathieu Parent Wed, 25 Jan 2017 21:25:40 +0100 samba (2:4.5.2+dfsg-2) unstable; urgency=high * This is a security release in order to address the following defects: - CVE-2016-2123 (Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability). - CVE-2016-2125 (Unconditional privilege delegation to Kerberos servers in trusted realms). - CVE-2016-2126 (Flaws in Kerberos PAC validation can trigger privilege elevation). -- Mathieu Parent Sat, 17 Dec 2016 22:54:35 +0100 samba (2:4.5.2+dfsg-1) unstable; urgency=medium * New upstream version - Remove CTDB-Fix-samba-eventscript.patch: merged - d/rules: /usr/share/ctdb-tests is now /usr/share/ctdb/tests * Update gbp.conf with debian-branch = master -- Mathieu Parent Thu, 08 Dec 2016 20:21:52 +0100 samba (2:4.5.1+dfsg-2) unstable; urgency=medium * Upload to unstable -- Mathieu Parent Mon, 05 Dec 2016 07:01:35 +0100 samba (2:4.5.1+dfsg-1) experimental; urgency=medium * New upstream version - Refresh patches - Remove bug_12283_segfault_tevent_internals.patch - Remove gencache-Bail-out-of-stabilize-if-we-can-not-get-the.patch - Adding libdsdb-garbage-collect-tombstones.so.0 to samba-libs.install * CTDB: Fix samba eventscript * nmbd requires a working network (Closes: #698056, #842056, #840608, LP: #1635491) * Be more verbose about masking samba-ad-dc.service (Closes: #841147) * Remove Fix_parallel_build.patch, not working -- Mathieu Parent Tue, 01 Nov 2016 13:54:29 +0100 samba (2:4.5.0+dfsg-1) experimental; urgency=medium * Upload to experimental * New upstream version + Remove patches: - bug_601406_fix-perl-path-in-example.patch, similar applied - waf_smbpasswd_location, applied - Fix-privacy-breach-on-google.com.patch, doc moved out of source - ctdb-Fix-detection-of-gnukfreebsd.patch, applied - gcc_6.patch, applied + Dumped dependencies - libldb-dev (>= 2:1.1.27~) - libtalloc-dev (>= 2.1.8~) - libtdb-dev (>= 1.3.10~) - libtevent-dev (>= 0.9.29~) - python-talloc-dev (>= 2.1.8~) + Install new files and update debian/ctdb.docs + Update to libwbclient0.symbols + Update samba-libs.lintian-overrides (libtevent-unix-util0 removed) + /etc/default/ctdb is now /etc/ctdb/ctdbd.conf * Add patch for https://bugzilla.samba.org/show_bug.cgi?id=12045 * ctdb/wscript: Call CHECK_XSLTPROC_MANPAGES() before checking XSLTPROC_MANPAGES. This should fix parallel builds, including tests.reproducible-builds.org. Thanks HW42 on IRC * Depends: lsb-base (>= 3.0-6), for ctdb and winbind as they source /lib/lsb/init-functions -- Mathieu Parent Sun, 23 Oct 2016 15:56:59 +0200 samba (2:4.4.6+dfsg-2) unstable; urgency=high * Remove uses of tevent internals. This fixes segfault. Closes: #840382, #840298. -- Mathieu Parent Wed, 12 Oct 2016 05:53:33 +0200 samba (2:4.4.6+dfsg-1) unstable; urgency=medium * New upstream release. * Use epoch in samba-vfs-modules Breaks and Replaces (Closes: #833164) * Only fix PIDFile in {nmbd,samba-ad-dc,smbd,winbind}.service (i.e. not ctdb.service) Closes: #838000. * logrotate: Only reload smbd when needed. Thanks Roland Hieber. Closes: #838796. -- Mathieu Parent Mon, 10 Oct 2016 22:23:45 +0200 samba (2:4.4.5+dfsg-3) unstable; urgency=medium [ Jelmer Vernooij ] * Add strict dependencies on samba-libs, because of use of private libraries without stable ABI across Samba binary packages. * Add Breaks clauses for older versions of samba-libs and samba to samba-vfs-modules, as some files have moved. Closes: #833164, #832880 [ Mathieu Parent ] * Remove /etc/systemd/system/samba-ad-dc.service (from postinst) on purge. Closes: #832352 * Fix PIDFile in systemd service files. Closes: #830909 * Remove unused lintian overrides * Use automatic debug packages (-dbgsym) (Closes: #819776) * Remove Christian Perrier from uploaders (Closes: #836715). Thanks for all you work, and thanks for bringing me in the team and as a DD. * Update Turkish translation. Thanks Atila KOÇ. Closes: #791903 * Drop dependency on samba-libs in libwbclient0 to avoid circular dependency. -- Mathieu Parent Fri, 09 Sep 2016 13:00:54 +0200 samba (2:4.4.5+dfsg-2) unstable; urgency=medium * Disable running of 'make quicktest' during build, as it takes very long to run on x32 and enables building non-production NTVFS server. Closes: #830571 -- Jelmer Vernooij Sat, 09 Jul 2016 19:09:19 +0000 samba (2:4.4.5+dfsg-1) unstable; urgency=medium * New upstream release. + Fixes CVE-2016-2119: Client side SMB2/3 required signing can be downgraded. Closes: #830195 -- Jelmer Vernooij Thu, 07 Jul 2016 10:51:40 +0000 samba (2:4.4.4+dfsg-3) unstable; urgency=medium * Add patch gcc_6.patch, fixing compatibility with gcc 6. Closes: #812264 -- Jelmer Vernooij Mon, 04 Jul 2016 12:20:56 +0000 samba (2:4.4.4+dfsg-2) unstable; urgency=medium * Mask samba-ad-dc.service unless needed (Closes: #828137) * Fix kill path in systemd units (Closes: #828730) -- Mathieu Parent Mon, 27 Jun 2016 21:37:58 +0200 samba (2:4.4.4+dfsg-1) unstable; urgency=medium * New upstream release. * The "Thanks lintian" release * Fixes: - Ensure that dpkg-buildflags are passed, and enable all hardening - systemd + Enable systemd (sd_notify) on Linux, and install systemd files + Remove obsolete syslog.target from service files + Add documentation field to unit files - Drop fix-cluster-build.diff: no more needed - Use secure Vcs-* URLs - Fix copyright file - samba.postinst: command-with-path-in-maintainer-script update-inetd - samba-common-bin: package-contains-empty-directory usr/lib/samba/ - winbind: package-contains-empty-directory usr/lib/samba/nss_info/ - Add Description to init files * No-op fixes: - d/control: Drop XS-Testsuite field - Drop redundant "Priority: optional" fields - Drop redundant "Section: net" fields - Describe non-standard-dir-perm var/spool/samba/ - Describe no_build_system.patch - Remove README.build-upstream, as packaging/Debian/ is now empty - Verify upstream tarball from uscan - Update README.source and remove build-orig.sh -- Mathieu Parent Mon, 13 Jun 2016 21:52:52 +0200 samba (2:4.4.3+dfsg-4) unstable; urgency=medium * Fix build with DEB_BUILD_OPTIONS=nocheck * Still run "make quicktest" but ignore failures -- Mathieu Parent Sat, 07 May 2016 13:18:53 +0200 samba (2:4.4.3+dfsg-3) unstable; urgency=medium * Skip raw.write tests for now as they fail on 32-bit -- Mathieu Parent Fri, 06 May 2016 15:34:07 +0200 samba (2:4.4.3+dfsg-2) unstable; urgency=medium * Run quicktest during build * Reproducibility: - Drop no_build_options.patch as it breaks "make test" - Remove unreproducible build environment instead * Mention that patch waf_smbpasswd_location was submitted * usershare.patch: Fix "usershare max shares" default in XML doc and in s4 -- Mathieu Parent Tue, 03 May 2016 12:30:56 +0200 samba (2:4.4.3+dfsg-1) unstable; urgency=medium * Cleanup ctdb READMEs during 'clean' step. * New upstream release. -- Jelmer Vernooij Mon, 02 May 2016 14:12:46 +0000 samba (2:4.4.2+dfsg-2) unstable; urgency=medium * Merge in 4.3 package changes. -- Jelmer Vernooij Wed, 27 Apr 2016 01:29:47 +0000 samba (2:4.4.2+dfsg-1) unstable; urgency=medium * New upstream release. * Bump standards version to 3.9.8 (no changes). * Drop build dependency on perl-modules; depend on perl instead. * Upload to unstable. -- Jelmer Vernooij Tue, 26 Apr 2016 23:29:54 +0000 samba (2:4.4.1+dfsg-1) experimental; urgency=medium * New upstream release + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team): - CVE-2015-5370 (Multiple errors in DCE-RPC code) - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP) - CVE-2016-2111 (NETLOGON Spoofing Vulnerability) - CVE-2016-2112 (LDAP client and server don't enforce integrity) - CVE-2016-2113 (Missing TLS certificate validation) - CVE-2016-2114 ("server signing = mandatory" not enforced) - CVE-2016-2115 (SMB IPC traffic is not integrity protected) - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible) * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze -- Andrew Bartlett Mon, 11 Apr 2016 16:09:59 +1200 samba (2:4.4.0+dfsg-1) experimental; urgency=medium [ Andrew Bartlett ] * New upstream release. -- Andrew Bartlett Wed, 06 Apr 2016 17:08:20 +1200 samba (2:4.3.8+dfsg-1) unstable; urgency=low [ Jelmer Vernooij ] * Add patch no_build_system.patch: drop host-specific define that prevents reproducible builds. * New upstream release. + Drop patch security-2016-04-12-prerequisite-v4-3-regression-fixes.metze01.txt, now included upstream. * Bump version in Replaces: samba-libs for samba-vfs-modules to 4.3.2+dfsg-1, to fix jessie->stretch upgrades. Closes: #821070 -- Jelmer Vernooij Sat, 16 Apr 2016 01:18:36 +0000 samba (2:4.3.7+dfsg-1) unstable; urgency=high * New upstream release. + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team): - CVE-2015-5370 (Multiple errors in DCE-RPC code) - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP) - CVE-2016-2111 (NETLOGON Spoofing Vulnerability) - CVE-2016-2112 (LDAP client and server don't enforce integrity) - CVE-2016-2113 (Missing TLS certificate validation) - CVE-2016-2114 ("server signing = mandatory" not enforced) - CVE-2016-2115 (SMB IPC traffic is not integrity protected) - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible) * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze -- Andrew Bartlett Wed, 13 Apr 2016 10:24:17 +1200 samba (2:4.3.6+dfsg-2) unstable; urgency=low [ Mathieu Parent ] * Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146). Patch by Santiago Vila * Drop samba from winbind depends and use samba-common* instead (Closes: #732604) * Add an override to script-not-executable etc/ctdb/events.d/10.external * Add ufw integration (from Ubuntu) * Don't build ctdb twice: - Shorten build time - Fix ctdb log path from /var/log/log.ctdb to /var/log/ctdb/log.ctdb - Remove unused /usr/lib/*/ctdb/*.so files [ Steven Chamberlain ] * ctdb: Fix detection of gnukfreebsd (Closes: #802621) [ Jelmer Vernooij ] * Add no_build_options.patch: make package more reproducible by disabling build options output. [ Andrew Bartlett ] * Allow to build/run the AD DC provision/dbcheck against talloc 2.1.6 (Closes: #820015) -- Mathieu Parent Thu, 31 Mar 2016 22:26:11 +0200 samba (2:4.3.6+dfsg-1) unstable; urgency=medium * New upstream release. + Fixes: - CVE-2015-7560: Incorrect ACL get/set allowed on symlink path. - CVE-2016-0771 (Out-of-bounds read in internal DNS server. -- Jelmer Vernooij Sat, 27 Feb 2016 23:28:53 +0000 samba (2:4.3.5+dfsg-3) unstable; urgency=medium * Fix dhclient hook if samba is not installed. Thanks, Jan Braun. Closes: #801976 * Rebuild against current version of ldb in the archive. Closes: #817036 -- Jelmer Vernooij Tue, 08 Mar 2016 00:24:10 +0000 samba (2:4.3.5+dfsg-2) unstable; urgency=medium * Move strict ldb dependency to samba-dsdb-modules package, which actually contains the modules. Closes: #816210 -- Jelmer Vernooij Sun, 06 Mar 2016 22:51:53 +0000 samba (2:4.3.5+dfsg-1) unstable; urgency=medium * New upstream release. * Fixed usershare.patch to apply against new version. * Loosen dependencies on ldb to ldb >= 1.1.21, per upstream. * Drop patch sockets-with-htons.patch: applied upstream. * Bump standards version to 3.9.7 (no changes). -- Jelmer Vernooij Sat, 05 Mar 2016 15:56:42 +0000 samba (2:4.3.3+dfsg-2) unstable; urgency=medium [ Jelmer Vernooij ] * Add dependency on libtevent-dev in samba-dev. [ Mathieu Parent ] * Fix CTDB behavior since CVE-2015-8543 (Closes: #813406) -- Mathieu Parent Thu, 04 Feb 2016 13:25:01 +0100 samba (2:4.3.3+dfsg-1) unstable; urgency=medium * New upstream release. Closes: #808133. + Drop subunit dependency, no longer used. + Drop ntdb dependencies, no longer used. + Fixes: - CVE-2015-5252: Insufficient symlink verification in smbd - CVE-2015-5296: Samba client requesting encryption vulnerable downgrade attack - CVE-2015-5299: Missing access control check in shadow copy code - CVE-2015-7540: Remote DoS in Samba (AD) LDAP server - CVE-2015-8467: Denial of service attack against Windows Active Directory server - CVE-2015-3223: Denial of service in Samba Active Directory server - CVE-2015-5330: Remote memory read in Samba LDAP server * Remove libpam-smbpasswd, which is broken and slated for removal upstream. Closes: #799840 * Remove lib/zlib/contrib/dotzlib/DotZLib.chm from excluded files in copyright; no longer shipped upstream. * Remove wins2dns.awk example script. * Remove the samba-doc package, and move examples files from it to relevant other packages. Closes: #769385 * Move samba-dsdb-modules back from Depends to Recommends, as using Samba as a standalone server doesn't require the dsdb modules. -- Jelmer Vernooij Fri, 18 Dec 2015 01:18:42 +0000 samba (2:4.3.0+dfsg-2) experimental; urgency=medium * Re-enable cluster support. + Build samba-cluster-support as built-in library, since its dependencies are broken. -- Jelmer Vernooij Mon, 28 Sep 2015 00:34:51 +0000 samba (2:4.3.0+dfsg-1) experimental; urgency=medium * Fix watch file. * New upstream release. * Drop no_wrapper patch: applied upstream. * Drop patch ctdb_sockpath.patch: applied upstream. * Drop Fix-CTDB-build-with-PMDA patch: applied upstream. -- Jelmer Vernooij Sat, 19 Sep 2015 01:59:36 +0000 samba (2:4.2.1+dfsg-1) experimental; urgency=medium [ Jelmer Vernooij ] * New upstream release. + Drop patch do-not-install-smbclient4-and-nmbclient4: applied upstream. + Drop patch bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch: present upstream. + Refresh patch 26_heimdal_compat.26_heimdal_compat. + Add build-dependency on libarchive-dev. * Drop samba_bug_11077_torturetest.patch: applied upstream. * Drop dependency on ctdb - now bundled with Samba. * Use bundled Heimdal as the system Heimdal doesn't contain the changes required for Samba. * Add patch heimdal-rfc3454.txt: patch in truncated rfc3454.txt for building bundled heimdal. * Drop patches 25_heimdal_api_changes and 26_heimdal_compat. * Disable cluster support; it breaks the build. * Add patch no_wrapper: avoid dependencies on {nss,uid,socket}_wrapper. * Move some libraries around. * Move ownership of var/lib/samba and var/lib/samba/private to samba- common, remove obsolete samba4.dirs. Closes: #793866 * Remove ctdb-tests and ctdb-pcp-pmda packages as they contain problems and unclear what they are useful for, now ctdb now longer provides an external API. [ Mathieu Parent ] * Merge ctdb source package - initial merge - libctdb-dev has been dropped - ctdb-dbg renamed to ctdb-tests, debug files moved to samba-dbg - ctdb-tests depends on python * Fix CTDB socketpath parsing * Fix CTDB build with PMDA * ctdb: Fix privacy breach on google.com (from documentation) -- Jelmer Vernooij Sun, 07 Dec 2014 15:34:36 +0000 samba (2:4.1.20+dfsg-1) unstable; urgency=medium * New upstream release (last compatible with current OpenChange). * samba_bug_11077_torturetest.patch: refresh. -- Jelmer Vernooij Sun, 20 Sep 2015 17:48:59 +0000 samba (2:4.1.17+dfsg-5) unstable; urgency=medium * Rebuild against new ldb. Closes: #799569 -- Jelmer Vernooij Sun, 20 Sep 2015 13:20:53 +0000 samba (2:4.1.17+dfsg-4) unstable; urgency=medium * Add pidl_reproducible.patch: Make pidl output reproducible. -- Jelmer Vernooij Tue, 28 Apr 2015 00:10:21 +0000 samba (2:4.1.17+dfsg-3) unstable; urgency=medium * Rebuild against new ldb. Closes: #783424 -- Jelmer Vernooij Mon, 27 Apr 2015 00:09:50 +0000 samba (2:4.1.17+dfsg-2) unstable; urgency=medium [ Andreas Beckmann ] * Add samba.preinst to temporarily deactivate the old qtsmbstatusd initscript which has dependencies incompatible with the new samba initscript. This will ensure a clean upgrade path for samba if the qtsmbstatus-server package was installed previously. (Closes: #779666) -- Ivo De Decker Sat, 07 Mar 2015 13:09:23 +0100 samba (2:4.1.17+dfsg-1) unstable; urgency=high * New upstream release. Fixes: - CVE-2014-8143: Elevation of privilege to Active Directory Domain Controller. Closes: #776993 - CVE-2015-0240: Unexpected code execution in smbd. Closes: #779033 * Refresh patch add-so-version-to-private-libraries. * Add new smbtorture test rpc.schannel_anon_setpw to detect the conditions leading to CVE-2015-0240. * Add breaks on qtsmbstatus-server (<< 2.2.1-3~). Closes: #775041 * Build-depend on reverted ldb version (with increased epoch). -- Ivo De Decker Mon, 23 Feb 2015 20:20:21 +0100 samba (2:4.1.13+dfsg-4) unstable; urgency=medium * Revert previous patch, since ldb has an active module version check. Instead, just depend on ldb 1.1.18. Closes: #771991 -- Jelmer Vernooij Wed, 10 Dec 2014 18:13:42 +0000 samba (2:4.1.13+dfsg-3) unstable; urgency=medium * Update debian/rules to allow support for multiple upstream ldb versions, when verified. Closes: #771991 -- Jelmer Vernooij Thu, 04 Dec 2014 21:03:54 +0100 samba (2:4.1.13+dfsg-2) unstable; urgency=medium * Mask /etc/init.d/samba init script for systemd. This should make systemd ignore the samba init script. Thanks to Michael Biebl for the suggestion. Closes: #740942 * Disable samba init script on upgrade from wheezy to jessie. Thanks again to Michael Biebl for the report. Closes: #766690 -- Ivo De Decker Sat, 25 Oct 2014 00:49:12 +0200 samba (2:4.1.13+dfsg-1) unstable; urgency=medium * New upstream release. * Bump standards version to 3.9.6 (no changes). -- Ivo De Decker Tue, 21 Oct 2014 20:22:19 +0200 samba (2:4.1.11+dfsg-2) unstable; urgency=medium * Updated Italian translation. Thanks Luca Monducci. Closes: #760743 * Use HTTP in watch file, as ftp.samba.org is not working reliably for me. * Use Excluded-Files in debian/copyright for DFSG-nonfree files. * Update Dutch translation. Thanks Frans Spiesschaert. Closes: #763650 -- Jelmer Vernooij Sun, 07 Sep 2014 20:52:27 +0200 samba (2:4.1.11+dfsg-1) unstable; urgency=high * New upstream release. Fixes: + CVE-2014-3560: Remote code execution in nmbd. Closes: #756759 -- Jelmer Vernooij Sun, 03 Aug 2014 03:47:07 +0200 samba (2:4.1.9+dfsg-2) unstable; urgency=medium [ Jelmer Vernooij ] * Depend on libgnutls28-dev rather than libgnutls-dev. Closes: #753146 * Remove outdated-autotools-helper-file overrides for config.guess and config.sub; files are no longer present upstream. * Add branch to Vcs-Git header. * samba.smbd.upstart: Remove leftover code for RUN_MODE=inetd, which was already removed elsewhere. * Move dsdb-module library from samba-dsdb-modules to samba-libs, to prevent circular dependencies between samba-dsdb-modules and samba- libs. This is necessary since dsdb-module is now used by the dcerpc- server library. [ Debconf translations ] * New Brazilian Portugese translation from Adriano Rafael Gomes. Closes: #752719 -- Jelmer Vernooij Sun, 29 Jun 2014 19:43:52 +0200 samba (2:4.1.9+dfsg-1) unstable; urgency=high * New upstream security release. Fixes: - CVE-2014-0244: nmbd denial of service - CVE-2014-3493: smbd denial of service: server crash/memory corruption -- Ivo De Decker Mon, 23 Jun 2014 18:33:27 +0200 samba (2:4.1.8+dfsg-1) unstable; urgency=medium [ Jelmer Vernooij ] * Remove smbd and nmbd from required-start and required-stop in samba.init. Closes: #739887 [ Ivo De Decker ] * Remove workaround for #745233. * New upstream release. Fixes: - CVE-2014-0239: dns: Don't reply to replies. Closes: #749845 - CVE-2014-0178: Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response. * Use the upstream version of the smb.conf.5 manpage, instead of building it. This is an ugly temporary workaround because xsltproc crashes on some architectures when building this manpage (due to #750593). This fixes the FTBFS, and should make samba installable with the new ldb version. Closes: #750541, 750796 -- Ivo De Decker Sun, 08 Jun 2014 23:37:53 +0200 samba (2:4.1.7+dfsg-2) unstable; urgency=medium * Build-depend on heimdal-dev instead of libkrb5-dev. * Add versioned build-dep on libgmp10 for now, which should be pulled in by libhogweed2, to be able to build in outdated build environments (like on most buildds). This is a workaround for #745233. -- Ivo De Decker Sun, 20 Apr 2014 13:44:39 +0200 samba (2:4.1.7+dfsg-1) unstable; urgency=medium * New upstream release. * Remove readline63.patch, integrated upstream. * Add build-dep on libkrb5-dev, no longer pulled in by libcups2-dev. * Don't try to delete Parse/Yapp/Driver.pm, which is no longer installed. -- Ivo De Decker Sat, 19 Apr 2014 13:39:09 +0200 samba (2:4.1.6+dfsg-1) unstable; urgency=high * New upstream security release. Fixes: - CVE-2013-4496: password lockout not enforced for SAMR password changes - CVE-2013-6442: smbcacls can remove a file or directory ACL by mistake * Backport fix for readline 6.3 from master -- Ivo De Decker Sat, 15 Mar 2014 12:13:59 +0100 samba (2:4.1.5+dfsg-1) unstable; urgency=medium [ Jelmer Vernooij ] * Fix watch file. [ Ivo De Decker ] * New upstream release. * Remove the part of patch 26_heimdal_compat integrated upstream. -- Ivo De Decker Sat, 22 Feb 2014 23:17:59 +0100 samba (2:4.1.4+dfsg-3) unstable; urgency=medium * Move samba.dckeytab module to samba package, as it relies on hdb. Closes: #736405, #736430 -- Jelmer Vernooij Fri, 24 Jan 2014 23:35:14 +0000 samba (2:4.1.4+dfsg-2) unstable; urgency=medium [ Jelmer Vernooij ] * Depend on newer version of ctdb, as Samba won't build against older versions without --enable-old-ctdb. * Bump standards version to 3.9.5 (no changes). * Move libpac, db_glue and hdb module from samba-libs to samba package to reduce size and dependency set of libs package. * Fix compatibility with newer versions of the Heimdal HDB API. + Update 26_heimdal_compat: Fix initialization of HDB plugin. Thanks Jeff Clark. Closes: #732342 + Add dependency on specific version of the Heimdal HDB API. Closes: #732344 [ Steve Langasek ] * dhcp3-client is superseded by dhcp-client; update the references in the package. Closes: #736070. * Move the dhcp client hook from /etc/dhcp3 to /etc/dhcp. Closes: #649100. * debian/bin/xsltproc: don't use $FAKETIME as the variable name in our wrapper script, this seems to make faketime unhappy. -- Jelmer Vernooij Sat, 18 Jan 2014 20:26:35 +0000 samba (2:4.1.4+dfsg-1) unstable; urgency=medium * New upstream release. * Update version of talloc build-deps to 2.0.8. * python-samba: add depends on python-ntdb. -- Ivo De Decker Sat, 18 Jan 2014 14:07:15 +0100 samba (2:4.1.3+dfsg-2) unstable; urgency=medium * Add debug symbols for all binaries to samba-dbg. Closes: #732493 * Add lintian overrides for empty prerm scripts. -- Ivo De Decker Fri, 27 Dec 2013 12:39:54 +0100 samba (2:4.1.3+dfsg-1) experimental; urgency=low [ Jelmer Vernooij ] * New upstream release. + Drop 0002-lib-replace-Allow-OS-vendor-to-assert-that-getpass-i.patch: upstream no longer uses getpass. * Add source dependency on libntdb1, and stop passing --disable-ntdb, which has been removed. * Remove handling for SWAT, which is no longer shipped upstream. * Split VFS modules out from samba-libs into a separate binary package. * Move service and process_model modules from the samba-libs to the samba package. Prevents dependencies on libkdc2-heimdal and libhdb9-heimdal. [ Ivo De Decker ] * Add build-dep on python-ntdb. * Add build-dep on libncurses5-dev. * Add depends on python-ntdb to samba. * New upstream release. -- Ivo De Decker Mon, 09 Dec 2013 23:24:27 +0100 samba (2:4.0.13+dfsg-2) UNRELEASED; urgency=low [ Steve Langasek ] * Check for alternative's presence before calling update-alternatives --remove-all, instead of silently ignoring all errors from update-alternatives. [ Debconf translations ] * Spanish (Javier Fernández-Sanguino). Closes: #731800 -- Steve Langasek Mon, 09 Dec 2013 11:13:59 -0800 samba (2:4.0.13+dfsg-1) unstable; urgency=high [ Steve Langasek ] * Move update-alternatives upgrade removal handling to the postinst, where it belongs. Closes: #730090. * Really remove all references to encrypted passwords: the samba-common.config script still included references, which could cause upgrade failures in some cases. Closes: #729167. [ Ivo De Decker ] * New upstream security release. Fixes: - CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked - CVE-2012-6150: pam_winbind login without require_membership_of restrictions * Add empty prerm scripts for samba and samba-common-bin.prerm, to allow upgrades from earlier versions with broken prerm script (bug introduced in 2:4.0.10+dfsg-3) * Don't fail in postinst when removing old alternatives fails. [ Jelmer Vernooij ] * Fix invocations of 'update-alternatives --remove-all'. Closes: #731192 -- Ivo De Decker Mon, 09 Dec 2013 18:34:07 +0100 samba (2:4.0.12+dfsg-1) unstable; urgency=low [ Ivo De Decker ] * New upstream release. [ Debconf translations ] * Thai (Theppitak Karoonboonyanan). Closes: #728525 * Norwegian Bokmål (Bjørn Steensrud). Closes: #729070 * German (Holger Wansing). Closes: #729210 [ Jelmer Vernooij ] * Add 26_heimdal_compat: Fix compatibility with newer versions of Heimdal. -- Ivo De Decker Sun, 24 Nov 2013 07:48:20 +0100 samba (2:4.0.11+dfsg-1) unstable; urgency=high * New upstream security release. Fixes: - CVE-2013-4475: ACLs are not checked on opening an alternate data stream on a file or directory - CVE-2013-4476: Private key in key.pem world readable * Move world-readable private key file on upgrade to allow auto-regeneration. * Add check in samba-ad-dc init script for wrong permission on private key file that would prevent samba to start. * Update samba-libs.lintian-overrides for moved libtorture0. -- Ivo De Decker Mon, 11 Nov 2013 15:42:40 +0100 samba (2:4.0.10+dfsg-4) unstable; urgency=low [ Christian Perrier ] * Mark one debconf string as non-translatable [ Debconf translations ] * French updated (Christian Perrier). * Swedish (Martin Bagge / brother). Closes: #727186 * Hebrew (Omer Zak). * Japanese (Kenshi Muto). Closes: #727218 * Indonesian (Al Qalit). Closes: #727543 * Russian (Yuri Kozlov). Closes: #727612 * Esperanto (Felipe Castro). Closes: #727619 * Polish (Michał Kułach). Closes: #727646 * Danish (Joe Hansen). Closes: #727764 * Czech (Miroslav Kure). Closes: #728100 * Basque (Iñaki Larrañaga Murgoitio). Closes: #728315 [ Jelmer Vernooij ] * Move libtorture0 to samba-testsuite to reduce size of samba-libs and prevent dependency on libsubunit0. [ Ivo De Decker ] * Handle move of tdb files to private dir in samba-libs.preinst. Closes: #726472 * Also do the tdb move in libpam-smbpass.preinst, to avoid breaking the pam module if the upgrade fails. -- Ivo De Decker Sat, 02 Nov 2013 11:27:25 +0100 samba (2:4.0.10+dfsg-3) unstable; urgency=low [ Ivo De Decker ] * Remove Sesse from uploaders. Thanks for your work on samba4. * Include /etc/pam.d/samba in samba-common. It got lost somewhere in the samba4 merge. Closes: #726183 * Remove unused alternatives links on upgrade in samba-common-bin.prerm. * Add support for 'status' in samba-ad-dc init script. * Fix umask in make_shlibs to avoid lintian error control-file-has-bad-permissions. * Enable verbose build log. * Run xsltproc under faketime to get the same date for manpages on different architectures in Multi-Arch: same packages. Closes: #726314 * Restore build-dep on libcups2-dev, which got lost in the samba4 merge. This should restore the cups printing functionality. Closes: #726726 * Add wrapper for cups-config to filter out -L/usr/lib/${DEB_HOST_MULTIARCH}, to work around build-failure. * Also add other build-deps which were present in samba 2:3.6.19-1. * if the same tdb file is present in /var/lib/samba and /var/lib/samba/private, abort the upgrade to work around #726472 for now. * Document swat removal. Closes: #726751 [ Steve Langasek ] * Don't fail on errors from testparm in the samba init script. Closes: #726326 * debian/patches/bug_221618_precise-64bit-prototype.patch: adjust the LFS handling to work independently of header include order. Closes: #727065. -- Ivo De Decker Tue, 22 Oct 2013 08:10:31 +0200 samba (2:4.0.10+dfsg-2) unstable; urgency=low * First upload the unified samba 4.x package to unstable. Thanks to everyone who worked on these packages all these years. * Remove Noël from uploaders. Thanks for your work on the samba packages * Add myself to uploaders. -- Ivo De Decker Sat, 12 Oct 2013 11:05:55 +0200 samba (2:4.0.10+dfsg-1) experimental; urgency=low * Team upload. [ Ivo De Decker ] * Update vcs urls to point to samba instead of samba4. * New upstream release. * Limit build-dep on libaio-dev to linux architectures. * Merge init script changes from 3.6 packages. [ Steve Langasek ] * Don't put useless symlinks to nss modules in the libnss-winbind package. * Add lintian overrides for another set of wrong lintian errors for the NSS modules. -- Ivo De Decker Thu, 10 Oct 2013 21:56:08 +0200 samba (2:4.0.9+dfsg-1) experimental; urgency=low * Team upload. [ Steve Langasek ] * The samba-ad-dc upstart job should be installed unconditionally, not just in Ubuntu. * Don't exclude our private libraries from the shlibs generation. * Port debian/autodeps.py to python3 and build-depend on python3 so we can invoke it correctly from debian/rules. [ Jelmer Vernooij ] * Bump standards version to 3.9.4 (no changes). * Suggest libwireshark-dev for libparse-pidl-perl, as it is necessary to build wireshark dissectors generated by pidl. * samba-ad-dc: Drop suggests for removed packages swat2 and samba-gtk. * samba: Remove inetd servers from suggests; inetd support was dropped in 3.6.16-1. * Fix database errors during upgrade. Closes: #700768 * Integrate libraries in samba-libs [ Ivo De Decker ] * New upstream release. * Merge contents of samba-ad-dc into samba. * Remove systemd support for now, as it is broken. Closes: #719477 * Add lintian override for samba-libs: package-name-doesnt-match-sonames. * Add missing depends for dev packages. * Generate correct shlibs for both public and private libs. [ Jeroen Dekkers ] * Drop 10_messaging_subsystem patch. * Add patch to not install smbclient4 and nmblookup4 and remove samba4-clients binary package. -- Ivo De Decker Sun, 22 Sep 2013 17:19:44 +0200 samba (2:4.0.8+dfsg-1) experimental; urgency=low [ Christian Perrier ] * Remove all mention of "Samba 4" and "experimental version of Samba" in packages' description. Samba version 4 is now production-ready. [ Andrew Bartlett ] * Update build-dependencies on Samba libraries using autodeps.py * New upstream security release. Closes: #718781 Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation [ Ivo De Decker ] * New upstream release * refresh patches for new upstream version * remove patches integrated upstream * Update build-dependencies for new upstream version * Add replaces for python-samba for packages that take over files from it. Closes: #719212 -- Ivo De Decker Sun, 11 Aug 2013 23:45:16 +0200 samba (2:4.0.6+dfsg-1) experimental; urgency=low * Team upload. [ Andrew Bartlett ] * Converted to full AD DC package on the basis of the 3.6 package - Samba now can be an Active Directory Domain controller - The samba4-* packages are replaced by this package. - This package now uses the s3fs file server by default, not the ntvfs file server used in the samba4 packages. * Provides a new library based package - Upstream's new build system uses libraries extensively, so new packages reflect that. - This provides the libraries that Openchange and other projects depend on * Move binary files out of /var/lib/samba to /var/lib/samba/private, where they belong according to upstream Samba: - schannel_store.tdb - idmap2.tdb - passdb.tdb - secrets.tdb * Remove most of the samba4 references, except for binaries ending in 4 * Removed debconf support for encrypted passwords * Samba 3.x users upgrading can either upgrade to an AD DC or continue using Samba without major changes. [ Christian Perrier ] * Move libnss_winbind.so.2 and libnss_wins.so.2 to /lib as in 3.6.* * Use the same set of configure arguments than 3.6.15 (except those eventually specific to version 4 and above) * Add libctdb-dev to build dependencies as we're building with cluster support just like 3.6 packages * Re-introduce mksmbpasswd for compatibility with 3.* packages [ Ivo De Decker ] * Specify all paths using configure options, so that we can finally get rid of the fhs patch. Closes: #705449 [ Steve Langasek ] * Make samba-common Conflicts: swat, which is now obsolete and no longer built from samba 4.0; the old versions of swat in the archive are incompatible with smb.conf from samba 4.0, so force them off the system to avoid configuration corruption. -- Ivo De Decker Thu, 20 Jun 2013 21:51:49 +0200 samba4 (4.0.3+dfsg1-0.1) experimental; urgency=low [ Andrew Bartlett ] * Non-maintainer upload. * New upstream relese: 4.0.3 + Fixes CVE-2013-0172 Samba 4.0.0 as an AD DC may provide authenticated users with write access to LDAP directory objects + Fixes many other ACL related issues in the AD DC + Drop 08_waf_python_config as it is now upstream. * Fix the forced use of NTVFS by setting the required options in the smb.conf at configure time. * Add depenencies to ensure python-samba requires exactly this binary version of our core libraries. Closes: #700348 -- Andrew Bartlett Sat, 16 Feb 2013 17:06:34 +0100 samba4 (4.0.0+dfsg1-1) experimental; urgency=low [ Martin Pitt ] * debian/tests/control: Fix dependency: python-samba4 does not exist, it's python-samba. Closes: #695854 [ Jelmer Vernooij ] * New upstream release: 4.0.0! + Add 08_waf_python_config to cope with python-config no longer being a script. * Add 25_heimdal_api_changes, to update Samba to work with the current Heimdal in Sid. Patch from Samuel Cabrero Alamán . Closes: #686227 * Add 11_force_ntvfs: Force the use of NTVFS, until the version of smbd in the archive is new enough. Closes: #694697 * Drop dependency on libsmbclient; instead, build private copy. -- Jelmer Vernooij Thu, 13 Dec 2012 16:27:20 +0100 samba4 (4.0.0~rc6+dfsg1-1) experimental; urgency=low * New upstream release. + Drop 08_heimdal_config_h and 11_system_heimdal, now applied upstream. -- Jelmer Vernooij Tue, 04 Dec 2012 14:39:40 +0100 samba4 (4.0.0~rc5+dfsg1-1) experimental; urgency=low * New upstream release. * Add autopkgtest header. Closes: #692671 * Use Multi-Arch for winbind4. -- Jelmer Vernooij Thu, 08 Nov 2012 15:13:43 +0100 samba4 (4.0.0~rc4+dfsg1-1) experimental; urgency=low * New upstream release. + Bump minimum ldb version to 1.1.13. * Switch to Git as VCS. * Remove DM-Upload-Allowed field. * Depend on heimdal-multidev rather than heimdal-dev. + Add 11_system_heimdal to support building with system heimdal. -- Jelmer Vernooij Sun, 28 Oct 2012 16:21:43 +0100 samba4 (4.0.0~rc3+dfsg1-1) experimental; urgency=low * New upstream release. -- Jelmer Vernooij Tue, 16 Oct 2012 14:53:19 +0200 samba4 (4.0.0~rc2+dfsg1-2) experimental; urgency=low * Depend on at least ldb 1.1.12. Closes: #689594 * Suggest ntp daemon for ntpsignd integration. * Support specifying 'none' as server role to disable provision. Closes: #690138 * Prompt user for administrator password. Closes: #690139 * Bump debconf level of server role to 'high'. -- Jelmer Vernooij Thu, 04 Oct 2012 13:22:40 +0200 samba4 (4.0.0~rc2+dfsg1-1) experimental; urgency=low * New upstream release. -- Jelmer Vernooij Tue, 25 Sep 2012 03:34:08 +0200 samba4 (4.0.0~beta2+dfsg1-3) unstable; urgency=low * Fix setup when no domain is set. Closes: #681048 -- Jelmer Vernooij Sun, 05 Aug 2012 16:52:02 +0200 samba4 (4.0.0~beta2+dfsg1-2) unstable; urgency=low * Use ntvfs while debian ships an old version of Samba 3. Closes: #679678 * Don't attempt to add shares to the configuration if it doesn't exist. Closes: #681050 -- Jelmer Vernooij Tue, 10 Jul 2012 11:52:44 +0200 samba4 (4.0.0~beta2+dfsg1-1) unstable; urgency=low * New upstream release. * Update Slovak translation. Thanks Ivan Masár. Closes: #677906 * Add build dependency on libacl1-dev. -- Jelmer Vernooij Mon, 18 Jun 2012 00:49:12 +0200 samba4 (4.0.0~beta1+dfsg1-3) unstable; urgency=high * Prevent adding share with invalid name when used in domain controller mode. -- Jelmer Vernooij Sun, 17 Jun 2012 17:00:00 +0200 samba4 (4.0.0~beta1+dfsg1-2) unstable; urgency=low * Create leading directories in addshare script. Closes: #677643 * Use attr/attributes.h on GNU/kFreeBSD. Fixes finding of ATTR_ROOT. -- Jelmer Vernooij Sat, 16 Jun 2012 01:42:10 +0200 samba4 (4.0.0~beta1+dfsg1-1) unstable; urgency=medium * New upstream release. * Add 08_heimdal_config_h: Fixes compatibility with newer versions of Heimdal. Closes: #674918 * Use standard spelling of domain controller in debconf templates. Closes: #670413 * Switch to debhelper 9. * samba4-clients: Drop conflicts with smbclient; upstream has renamed the Samba4-specific smbclient and nmblookup binaries. -- Jelmer Vernooij Wed, 30 May 2012 18:42:06 +0200 samba4 (4.0.0~alpha20+dfsg1-1) unstable; urgency=medium * New upstream release. + No longer installs libkdc-policy.so. LP: #887537 -- Jelmer Vernooij Tue, 01 May 2012 15:02:19 +0200 samba4 (4.0.0~alpha19+dfsg1-7) unstable; urgency=low * Only update smb.conf if it exists. Closes: #670560 * Automatically add shares required for active directory controllers if they don't exist. Closes: #670558 -- Jelmer Vernooij Thu, 26 Apr 2012 19:59:26 +0200 samba4 (4.0.0~alpha19+dfsg1-6) unstable; urgency=low * Rebuild against ldb 1.1.6. -- Jelmer Vernooij Fri, 20 Apr 2012 12:47:15 +0200 samba4 (4.0.0~alpha19+dfsg1-5) unstable; urgency=low * Use dbcheck when upgrading from recent versions of Samba4, as it's both more reliable and quicker than upgradeprovision. * Move samba-dsdb-modules from Recommends to Depends, as LDAP server support has been dropped. Closes: #669331 -- Jelmer Vernooij Thu, 19 Apr 2012 17:33:33 +0200 samba4 (4.0.0~alpha19+dfsg1-4) unstable; urgency=low * Fix pattern matching line in setoption.py. Thanks Hleb Valoshka. Closes: #669015 * setoption.py: Preserve mode on smb.conf file. -- Jelmer Vernooij Mon, 16 Apr 2012 17:33:07 +0200 samba4 (4.0.0~alpha19+dfsg1-3) unstable; urgency=low * Convert setoption.pl to Python to avoid dependency on perl-modules. Closes: #668800 -- Jelmer Vernooij Sun, 15 Apr 2012 15:50:57 +0200 samba4 (4.0.0~alpha19+dfsg1-2) unstable; urgency=low * Correctly import server role and realm from existing smb.conf file. LP: #936891 LP: #832465 Closes: #659775 * Force correct realm during upgradeprovision. LP: #728864 -- Jelmer Vernooij Fri, 13 Apr 2012 16:47:37 +0200 samba4 (4.0.0~alpha19+dfsg1-1) unstable; urgency=low * New upstream release. + Drop patches applied upstream: 06_upgradedns, 08_smb2_deps. + Cope with missing sysvol folders during provision upgrade. LP: #930370 + Depend on tdb 1.2.10. + Depend on ldb 1.1.5. + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting beyond of allocated array. * Fix replaces: samba-common field in samba4-common-bin. * Update Catalan debconf translation. Thanks, Jordi Mallach. Closes: #663737 -- Jelmer Vernooij Wed, 11 Apr 2012 16:58:39 +0200 samba4 (4.0.0~alpha18.dfsg1-4) unstable; urgency=low * Add patch 08_smb2_deps: Remove (unnecessary) dependencies on various private Samba 3 libraries, for which proper package Depends: lines were missing. Closes: #665295 * Add dependency on tdb-tools. This will be removed once upstream removes the use of tdbbackup in provision. Closes: #664658 -- Jelmer Vernooij Wed, 28 Mar 2012 16:20:21 +0200 samba4 (4.0.0~alpha18.dfsg1-3) unstable; urgency=low * Fix compatibility with newer versions of Heimdal. Fixes FTBFS. Closes: #664820 -- Jelmer Vernooij Wed, 21 Mar 2012 14:11:29 +0100 samba4 (4.0.0~alpha18.dfsg1-2) unstable; urgency=low * Add Replaces: python-samba to libsmbclient-raw0 as some private libraries have moved. Thanks Axel Beckert. Closes: #663641 -- Jelmer Vernooij Tue, 13 Mar 2012 16:39:12 +0100 samba4 (4.0.0~alpha18.dfsg1-1) unstable; urgency=low [ Jelmer Vernooij ] * New upstream release. + Depend on newer versions of ldb. + Depend on tevent >= 0.9.15. + Sanitizes NetBIOS names. LP: #938592 + Re-adds support for 'security = domain' parsing. LP: #916556 * Fix typo in recommendations of samba4: samba4-dsdb-modules -> samba-dsdb-modules. * Recommend attr package for Samba4. * Create util.h -> samba_util.h symlink for backwards compatibility. * Add dependency on libbsd-dev, used for strlcat and strlcpy. * Extracts waf source code. Closes: #654500 [ Debconf translations ] * Russian (Yuri Kozlov). Closes: #651583 * Portuguese (Miguel Figueiredo). Closes: #653557 * German (Holger Wansing). Closes: #653714 * Norwegian Bokmål (Bjørn Steensrud). Closes: #654284 * Spanish (Javier Fernández-Sanguino). Closes: #656403 * Danish (Joe Hansen). Closes: #656785 * Dutch (Jeroen Schot). Closes: #657469 * Hebrew (Omer Zak). * Polish (Michał Kułach). Closes: #659570 * Czech (Miroslav Kure). Closes: #659573 * Turkish (İsmail BAYDAN). Closes: #659575 * Japanese (Kenshi Muto). Closes: #659978 * Esperanto (Felipe Castro) [ Jelmer Vernooij ] * Rename upgradedns to less generic samba_upgradedns. * Bump standards version to 3.9.3 (no changes). * Use DEP-5 for copyright file. * Indonesian (Mahyuddin Susanto). Closes: #660031 * Italian (Luca Monducci). Closes: #660150 * Use samba-tool to retrieve configuration options from debconf. LP: #936891, Closes: #659775 * Add really basic autopkgtest test. * Fix bundled libraries for samba.samba3 python module. LP: #889869 -- Jelmer Vernooij Mon, 12 Mar 2012 19:01:00 +0100 samba4 (4.0.0~alpha17.dfsg2-1) unstable; urgency=low * Remove more non-free IETF files. Closes: #547280 * Rebuild for newer version of ldb. -- Jelmer Vernooij Sat, 03 Dec 2011 01:41:49 +0100 samba4 (4.0.0~alpha17.dfsg1-3) unstable; urgency=low * Install libmemcache.so, libutil_str.so and various other private libraries required by the samba3 module in python-samba. LP: #889864, LP: #889869 -- Jelmer Vernooij Sun, 13 Nov 2011 17:03:29 +0100 samba4 (4.0.0~alpha17.dfsg1-2) unstable; urgency=low * Include upstart file to eliminate delta with Ubuntu. -- Jelmer Vernooij Fri, 11 Nov 2011 16:13:58 +0100 samba4 (4.0.0~alpha17.dfsg1-1) unstable; urgency=low * Strip non-free IETF RFC files. Closes: #547280 * Rebuild against newer ldb. Closes: #648326 * Updated Swedish debconf translation. Thanks Martin Bagge. Closes: #644942 * Updated French debconf translation. Thanks Christian Perrier. Closes: #644465 -- Jelmer Vernooij Fri, 11 Nov 2011 03:16:37 +0100 samba4 (4.0.0~alpha17-3) unstable; urgency=low * Upload to unstable. Closes: #642905 * Use default python version rather than 2.7. -- Jelmer Vernooij Tue, 27 Sep 2011 00:11:31 +0200 samba4 (4.0.0~alpha17-2) experimental; urgency=low * In -dev package dependencies, depend on a specific version of other Samba dev packages. -- Jelmer Vernooij Sat, 24 Sep 2011 23:10:30 +0200 samba4 (4.0.0~alpha17-1) experimental; urgency=low * New upstream release. * Add libsmbclient-{raw0,dev} packages, required for winexe. * Add libsamba-credentials0 and libsamba-credentials-dev packages for new public library for credentials management. -- Jelmer Vernooij Sun, 18 Sep 2011 15:14:42 +0200 samba4 (4.0.0~alpha17~git20110807.dfsg1-1) experimental; urgency=low * New upstream snapshot. * Depend on newer version of ldb. Closes: #636961 * Update Indonesian Debconf translation. Thanks Mahyuddin Susanto. Closes: #608552 * Preserve server role set in smb.conf. LP: #815586 -- Jelmer Vernooij Sun, 07 Aug 2011 23:37:37 +0200 samba4 (4.0.0~alpha17~git20110801.dfsg1-1) experimental; urgency=low * Improve outdated package descriptions. Closes: #486370 * New upstream release. * Bump standards version to 3.9.2 (no changes). * Add new libsamdb-dev package, required by openchange which relies on the samdb.pc file. + No header files are shipped yet, but an upstream fix is pending. * Recommend bind9utils in samba4 package. * Remove complex dependency loop between library packages. Closes: #598842 + Disable currently unfinished ldb share module. + Split dcerpc server libraries out into libdcerpc-server{0,-dev} to cut dependency loop. + New samba-dsdb-modules package with all DSDB related LDB modules. * Move libwinbind-client library to libgensec0. Closes: #623327 * Add support for multi-arch. * Switch to new style debhelper. * Fix symbolic link for ldb modules. Closes: #632974 -- Jelmer Vernooij Sun, 31 Jul 2011 20:16:03 +0200 samba4 (4.0.0~alpha15.dfsg1-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Fri, 22 Apr 2011 02:57:04 +0200 samba4 (4.0.0~alpha15~git20110410.dfsg1-1) experimental; urgency=low * New upstream snapshot. + Drop patch now applied upstream: 02_backupkey_private.diff * Switch to dh_python2. Closes: #617059 -- Jelmer Vernooij Sat, 05 Mar 2011 14:44:25 +0100 samba4 (4.0.0~alpha15~git20110224.dfsg1-2) experimental; urgency=low * Depend on newer version of Heimdal which exposes more hx509 symbols. Fixes FTBFS. * Tighten libldb1 dependency for LDB modules. * Depend on newer version of pyldb. Closes: #615631 -- Jelmer Vernooij Mon, 28 Feb 2011 03:52:35 +0100 samba4 (4.0.0~alpha15~git20110224.dfsg1-1) experimental; urgency=low * New upstream release. + Avoids unnecessary setlocale call to "C". LP: #519025, #519025 * Fix dependency on newer version of ldb. Closes: #614466 * Add missing dependency on python-samba, required for testparm. LP: #641082 * Use libwbclient. LP: #714344, Closes: #611214 * Make sure /var/run/samba exists. LP: #646037 -- Jelmer Vernooij Wed, 23 Feb 2011 00:35:59 +0100 samba4 (4.0.0~alpha15~git20110124.dfsg1-2) experimental; urgency=low * Build-depend on newer version of heimdal-multidev with fixed kdc.h. * Build-depend on versioned libkdc2-heimdal which includes kdc_log. Closes: #611112 -- Jelmer Vernooij Tue, 25 Jan 2011 09:22:16 -0800 samba4 (4.0.0~alpha15~git20110124.dfsg1-1) experimental; urgency=low * New upstream snapshot. + Removes unresolved symbols from libraries. Closes: #596690, #599075, #602855. LP: #658116, #592882, #646042 * Add dependency on comerr-dev. * Update Spanish Debconf translation. Thanks Ricardo Fraile. Closes: #596075 * Update Danish debconf translation. Thanks Joe Dalton. Closes: #598779 * Re-remove non-free IETF RFCs, add test to prevent future regression. Closes: #547280 * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846 * Upgrade provision data between releases. Closes: #600117 -- Jelmer Vernooij Fri, 15 Oct 2010 01:32:48 +0200 samba4 (4.0.0~alpha14~bzr13684.dfsg1-1) unstable; urgency=low * New upstream snapshot. + Depend on libsubunit-dev. * Support talloc 2.0.1. * Update dependency for ldb to be >= 0.9.14. Closes: #596745 * Support parallel builds. -- Jelmer Vernooij Tue, 28 Sep 2010 09:46:54 +0200 samba4 (4.0.0~alpha13+git+bzr12785.dfsg1-1) experimental; urgency=low * Install provision scripts to /usr/share/samba/setup. * Move nsstest from samba4 to winbind4. * Support building against tdb 1.2.1. -- Jelmer Vernooij Fri, 10 Sep 2010 17:45:20 +0200 samba4 (4.0.0~alpha13+git+bzr12687.dfsg1-1) experimental; urgency=low * New upstream snapshot. * Mark as compatible with older versions of tdb (>= 1.2.2). -- Jelmer Vernooij Wed, 08 Sep 2010 03:30:03 +0200 samba4 (4.0.0~alpha13+git+bzr12670.dfsg1-1) experimental; urgency=low * Add missing dependency on pkg-config. * Require subunit >= 0.0.6, older versions have a broken tap2subunit. * Debconf translations: - Swedish (Martin Bagge). Closes: #586819 * New upstream snapshot. - Fixes symbols for LDB modules. Closes: #594763, #594771, #594773. * Require tdb 1.2.3. Closes: #595644 -- Jelmer Vernooij Sun, 05 Sep 2010 17:34:46 +0200 samba4 (4.0.0~alpha13+git+bzr12292.dfsg1-1) experimental; urgency=low * New upstream snapshot. + Fixes provision to be able to find the data path again. * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846 * Suggest swat2. * Migrate to Bazaar. * Bump standards version to 3.9.1 (no changes). -- Jelmer Vernooij Sun, 22 Aug 2010 02:38:51 +0200 samba4 (4.0.0~alpha13+git20100618.dfsg1-1) experimental; urgency=low [ Jelmer Vernooij ] * New upstream snapshot. Closes: #578009, #577880 + Add dependency on python-dnspython. + Removes last Python string exception. Closes: #585327 + Installs all display specifiers. Closes: #548911 [ Christian Perrier ] * Debconf translations: - Swedish (Martin Bagge). Closes: #552734 - Russian (Yuri Kozlov). Closes: #563346 - Spanish (Omar Campagne). Closes: #579099 -- Jelmer Vernooij Sun, 28 Feb 2010 02:33:37 +0100 samba4 (4.0.0~alpha8+git20100227.dfsg1-1) experimental; urgency=low * Fix sections of libndr-standard0 and libndr0. * New upstream snapshot. -- Jelmer Vernooij Mon, 22 Feb 2010 11:19:07 +0100 samba4 (4.0.0~alpha8+git20100222.dfsg1-1) experimental; urgency=low [ Christian Perrier ] * Change "Provides:" in init script to avoid conflicting Provides with samba. Closes: #547209 * Swedish debconf translation (Martin Bagge). Closes: #552734 [ Jelmer Vernooij ] * Depend on specific version of libldb. Closes: #562389 * Build against system Heimdal and remove the copy of Heimdal from the Samba 4 source tree, since it contains non-free IETF RFC/I-D. Closes: #547280 * Bump standards version to 3.8.4. * Switch to dpkg-source 3.0 (quilt) format -- Jelmer Vernooij Wed, 03 Feb 2010 15:17:20 +0100 samba4 (4.0.0~alpha8+git20090912-1) unstable; urgency=low * Upload to unstable. * Fix nmblookup.1.gz filename for alternatives. * New upstream snapshot. + Add new binary packages libndr-standard0 and libndr-standard-dev. * Bump standards version to 3.8.3. * Remove unused patch system. -- Jelmer Vernooij Sat, 12 Sep 2009 13:28:33 +0200 samba4 (4.0.0~alpha8+git20090718-1) experimental; urgency=low * New upstream snapshot. * The server package now suggests a version of bind9 that supports update-policy. -- Jelmer Vernooij Sat, 18 Jul 2009 17:34:30 +0200 samba4 (4.0.0~alpha8~git20090620-1) experimental; urgency=low * Support building against Python2.6. * Add missing dependency on tdb >= 1.1.3. (Closes: #517171) * Add missing dependencies on tdb-dev and libtalloc-dev to libldb-samba4-dev. (Closes: #525885) * Use newer version of tevent. (Closes: #531480, #533457, #533455) * New upstream snapshot. * Bump standards version to 3.8.2. * Reorganization to let Samba 3 and Samba 4 co-exist on the same system: + Depend on samba-common for smb.conf, /etc/samba/gdbcommands, /usr/share/samba/{panic-action,*.dat}. + Rename samba4-common to samba4-common-bin. * samba4-testsuite now recommends subunit, since it can output subunit streams. * Document license for Active Directory schemas. * Fix init script to run samba rather than smbd. (Closes: #522646) * Removed libldb-samba4-{dev,0}, now using libldb{-dev,0} since there are no longer any differences. -- Jelmer Vernooij Thu, 18 Jun 2009 00:19:44 +0200 samba4 (4.0.0~alpha7~20090225-1) experimental; urgency=low * Build-depend on pkg-config, as we no longer seem to pull that in through any other dependencies. (Closes: #516882) -- Jelmer Vernooij Wed, 25 Feb 2009 04:04:36 +0100 samba4 (4.0.0~alpha7~20090223-1) experimental; urgency=low * Add build dependency on libpopt-dev, so the system libpopt is always used rather than the one included by Samba. * Use the alternatives system for the smbstatus, nmblookup, net and testparm binaries as well as various data files. * Make the samba4 and samba4-testsuite packages conflict with samba-tools. (Closes: #506236) * Build against external libtevent. -- Jelmer Vernooij Sat, 21 Feb 2009 17:46:41 +0100 samba4 (4.0.0~alpha6-1) experimental; urgency=low * New upstream release. -- Jelmer Vernooij Tue, 20 Jan 2009 02:59:15 +0100 samba4 (4.0.0~alpha5+20090105-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Mon, 05 Jan 2009 21:08:53 +0100 samba4 (4.0.0~alpha5+20081126-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Wed, 26 Nov 2008 03:48:41 +0100 samba4 (4.0.0~alpha5+20081101-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Sat, 01 Nov 2008 14:40:09 +0100 samba4 (4.0.0~alpha5+20081031-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Fri, 31 Oct 2008 00:10:41 +0100 samba4 (4.0.0~alpha5+20081014-1) experimental; urgency=low * Fix typo in description. (Closes: 500811) * New upstream snapshot. -- Jelmer Vernooij Thu, 09 Oct 2008 18:41:59 +0200 samba4 (4.0.0~alpha5+20080930-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Tue, 30 Sep 2008 16:19:22 +0200 samba4 (4.0.0~alpha5+20080825-1) experimental; urgency=low * Add watch file. * Use policy-compliant sysconfdir and localstatedir. (Closes: #495944) -- Jelmer Vernooij Mon, 25 Aug 2008 17:42:44 +0200 samba4 (4.0.0~alpha4~20080727-1) experimental; urgency=low [ Steve Langasek ] * Add missing dependency on libparse-yapp-perl to libparse-pidl-perl. [ Jelmer Vernooij ] * Make samba4-common conflict with samba-common. (Closes: #492088) * New Slovak translation. (Closes: #487889) * New Thai translation from Theppitak Karoonboonyanan. (Closes: #486614) * New Vietnamese translation from Clytie Siddall. (Closes: #486618) * New Bulgarian translation from Damyan Ivanov. (Closes: #486626) * New Japanese translation from Kenshi Muto. (Closes: #486648) * New Galician translation from Jacobo Tarrio. (Closes: #486701) * New Turkish translation from Mehmet TURKER. (Closes: #487244) * New Czech translation from Miroslav Kure. (Closes: #487265) * New Arabic translation from Ossama Khayat. (Closes: #487322) * New German translation from Holger Wansing. (Closes: #487542) * New Italian translation from Luca Monducci. (Closes: #487720) * New Portugese translation from the Portuguese Translation Team. (Closes: #487753) * New Korean translation from Sunjae Park. (Closes: #487894) * New Lithuanian translation from Gintautas Miliauskas. (Closes: #487895) * New Romanian translation from Eddy Petrișor. (Closes: #488874) -- Jelmer Vernooij Sun, 27 Jul 2008 15:38:41 +0200 samba4 (4.0.0~alpha4~20080617-1) experimental; urgency=low * Fixed maintainer email address. * New upstream snapshot. * Remove dependency on unpackaged libevents in ldb pkg-config file. -- Jelmer Vernooij Mon, 16 Jun 2008 21:29:43 +0200 samba4 (4.0.0~alpha4~20080616-1) experimental; urgency=low * Fix dependency of libsamba-hostconfig-dev on libsamba-hostconfig0. * Fix dependency of libldb-samba4-dev on libldb-samba4-0. * Remove tdb binaries as they're already packaged elsewhere. (Closes: #485619, #486270) * New upstream snapshot. * New French translation from Christian Perrier. (Closes: #486072) -- Jelmer Vernooij Sat, 14 Jun 2008 20:39:13 +0200 samba4 (4.0.0~alpha4~20080522-1) experimental; urgency=low * New upstream snapshot. (Closes: #478328) -- Jelmer Vernooij Thu, 22 May 2008 02:25:05 +0200 samba4 (4.0.0~alpha4~20080403-1) experimental; urgency=low * Rename source package to samba4. -- Jelmer Vernooij Mon, 28 Jan 2008 17:23:58 +0100 samba (4.0.0~alpha3~20080120-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Sat, 19 Jan 2008 22:34:08 +0100 samba (4.0.0~alpha2~svn26294-1) experimental; urgency=low * New upstream snapshot. * Set Vcs-Svn field. -- Jelmer Vernooij Sat, 19 Jan 2008 22:32:28 +0100 samba (4.0.0~~tp5-1) experimental; urgency=low * New upstream release. * Set homepage field. -- Jelmer Vernooij Sun, 25 Nov 2007 16:28:02 +0000 samba (4.0.0~~svn22819-1) experimental; urgency=low * New upstream snapshot. -- Jelmer Vernooij Wed, 09 May 2007 15:28:50 +0200 samba (4.0.0~~svn19515-1) experimental; urgency=low * New upstream versions (svn snapshots of r19515). -- Jelmer Vernooij Mon, 30 Oct 2006 16:45:36 +0100 samba (3.9.1+4.0.0tp2-1) experimental; urgency=low * New upstream version (tech preview 2). [ Jelmer Vernooij ] * Remove setntacl utility (it doesn't do anything). * Include oLschema2ldif.1 in the ldb-tools package. * Enable shared library building. * Put ldb, tdb, gtksamba, talloc and gensec libraries into seperate binary packages. * Pass fewer options for paths to configure * Adapt to new paths from upstream -- Jelmer Vernooij Thu, 23 Mar 2006 01:13:32 +0100 samba (3.9.1+4.0.0tp1-1) experimental; urgency=low * New upstream version (tech preview 1). [ Steinar H. Gunderson ] * Forward-port panic-action script from the Samba 3 packaging. * Patch the smb.conf provisioning template (only used by swat in the Debian packaging) to use the panic-action script by default. * Patch the samba-common postinst to generate smb.conf files with the same setting. * Include ntlm_auth.1 and smbd.8 man pages in the samba package. * Make the samba dependency on samba-common versioned. * Install /usr/bin/setntacl manually; the upstream install target doesn't seem to do it anymore. * Ask for the realm (and give it to the upgrade script) when upgrading from Samba 3; it can't be easily autodetected. (Note that upgrade still seems to be broken for now.) [ Jelmer Vernooij ] * Remove gwsam utility. * Include gwcrontab.1 and gepdump.1 man pages in the samba-gtk-frontends package. * Remove ldbtest utility from ldb-tools package. -- Steinar H. Gunderson Tue, 24 Jan 2006 16:01:59 +0100 samba4 (3.9.0-SVN-build-6710-1) unstable; urgency=low * Newer upstream version -- Jelmer Vernooij Thu, 12 May 2005 14:04:05 +0200 samba4 (3.9.0-SVN-build-655-1) unstable; urgency=low * Initial release. -- Jelmer Vernooij Thu, 13 May 2004 01:38:41 +0200 samba (3.9.0+SVN12946-1) experimental; urgency=low * New upstream version. * Fix upgrades from Samba 3 giving too few parameters to provision(). (Closes: #348079) * Add sections to binary packages to match the archive: * libparse-pidl-perl: perl * samba-dev: devel * samba-gtk-frontends: x11 * Adjust our export procedure we get the Subversion revision number in include/version.h (and thus in the build itself), and document how in README.building. * Remove "reload" option from the init script, since Samba 4 doesn't understand SIGHUP yet. -- Steinar H. Gunderson Sun, 15 Jan 2006 13:43:43 +0100 samba (3.9.0+SVN12856-1) experimental; urgency=low * New upstream version. * Move testparm from samba into samba-common. * Make samba-common Architecture: any. * Make samba-common replace/conflict samba (<= 3.9.0+SVN12739-1). * Make samba-clients depend on samba-common. * Make samba-common depend on debconf. * Replace debconf dependencies with ${misc:Depends}, to automatically get the debconf-2.0 alternative right. * Include the newuser binary in samba-server package. * Add missing Build-Depends on: libgnutls-dev, libreadline5-dev, libpam0g-dev. All were causing silent build failures (ie. the package was simply built without the features). * Remove Build-Depends on libldap-dev. * Include NEWS file. -- Steinar H. Gunderson Wed, 11 Jan 2006 22:08:32 +0100 samba (3.9.0+SVN12739-1) experimental; urgency=low * Move /usr/lib/samba/setup from samba-common to samba. * Make samba replace samba-common (<= 3.9.0+SVN12726-1) * Add a missing db_stop in samba.postinst, probably causing problems starting the daemon in some cases. * Add orphan files from /usr/bin (and relevant manpages) into their correct packages: * ldb-tools: ldbrename, ldbtest, oLschema2ldif. * samba: ntlm_auth. * samba-clients: getntacl. * samba-gtk-frontends: gwcrontab. * winregistry-tools: winreg. * samba3dump and tdbtorture remain orphans. * Add new executable /usr/bin/testparm to samba package. * Add /var/lib/samba directory to samba package; it's needed by testparm. * Rewrite configuration/bootstrapping to be able to install the client only and still get a usable smb.conf. The basic idea is: * samba-common looks for an smb.conf. If there is none, it asks for realm and domain and generates a skeleton smb.conf. * If samba notices an upgrade from Samba 3, it asks whether the user wants to upgrade. If not, it leaves everything alone (and broken). * Otherwise, samba asks whether the user wants to set up a PDC. If yes, it adds "server role = pdc" to smb.conf and provisions the server. * Removed unused file samba.conffiles. * Run dh_installdebconf on architecture-independent packages as well, now that samba-common has a config script. * Let samba-clients conflict/replace samba-common (<< 3.9.0), as they share /usr/bin/net. -- Steinar H. Gunderson Fri, 6 Jan 2006 14:25:50 +0100 samba (3.9.0+SVN12726-1) experimental; urgency=low * First upload to Debian main. * Package renaming to get more in line with Samba 3 packaging: * Rename samba-server package to just samba, for consistency with the Samba 3 packaging. * Rename samba.samba.init to samba.init, now that the init script and the server package are called the same. * Rename samba-swat to swat, and add a dependency from swat to samba. * debian/rules changes: * Change SOURCEPATH to reflect that we now have the packaging in debian/, not packaging/debian/. This will have to be reverted whenever upstream syncs with us. * Removed debmake comment, it's hardly relevant any more. * Removed comment that there aren't any architecture-independent packages (because there are). * Remove redundant "package=samba" variable. * Do "make pch ; make all" instead of "make proto ; -make pch ; make all"; some build system bug prevents us from just doing "make pch all", but since we're more or less guaranteed a recent gcc version, the pch target shouldn't fail, so we won't allow it to. * Remove autogen.sh call from configure; it should be done in the upstream tarball, not in maintainer scripts. * debian/control changes: * Copied Uploaders: line from Samba 3 packaging, adding myself. * Rename samba-client package to samba-clients. * Make samba-clients Replaces/Conflicts smbclient. * Build-depend on docbook-xml, not just docbook-xsl -- the documentation needs data from both to build. * Move the samba binary package to the top, so it's the one receiving the README.* files, among others. * Maintainer script changes: * Attempt to upgrade from Samba 3 if that's what the user tries to do. * Copy upgrade script into /usr/lib/samba/setup. * Check for upgrade from << 3.9.0 in config, and ask the user for upgrade if relevant. * Check for upgrade from << 3.9.0 in postinst, and upgrade if the user wished to. * Only provision in samba.postinst if we're doing a fresh install. * Support purging properly in postrm, both for samba and samba-common (adapted from the Samba 3 packaging). * Don't ask about an administrator password -- just let the provisioning scripts make up a random one. * Updated README.Debian to show the user how to change the password. * Make samba recommend ldb-tools. * Install README.building along with all the other documentation. * Don't try to ask about the "done" question, which we nuked in a previous release. * Updated debian/copyright. * Added Samba copyright holders. * Noted that talloc, ldb and tdb are under the LGPL. * Added copyright holders and licensing for the packaging itself. * Remove a few unused files in the packaging. * Change debhelper compatibility level to 5. * Update versioned depends accordingly. * Don't give --pidfile to start-stop-daemon when stopping -- current versions of Samba 4 won't die when the parent is killed. * Updated README.debian somewhat, and renamed to use a capital D. * Rewritten README.building, to reflect the magic that has to be done with the package in another repository. * Update po/POTFILES.in to reflect name change (from samba4-server -> samba-server -> samba). -- Steinar H. Gunderson Thu, 5 Jan 2006 21:27:13 +0100 samba (3.9.0+SVN12395-1) unstable; urgency=low * New snapshot, drop 4 suffix -- Jelmer Vernooij Tue, 20 Dec 2005 13:38:26 +0100 samba4 (3.9.0+SVN12312-1) unstable; urgency=low * New upstream snapshot. -- Jelmer Vernooij Mon, 27 Jun 2005 11:25:57 +0200 samba (2:3.6.19-1) unstable; urgency=low * Team upload. * New upstream release -- Ivo De Decker Wed, 25 Sep 2013 20:01:48 +0200 samba (2:3.6.18-1) unstable; urgency=low * Team upload. [ Steve Langasek ] * Split the samba init script into nmbd and smbd init scripts, for better alignment with how init systems other than sysvinit work. This also drops the override of the arguments to update-rc.d in debian/rules, no longer needed in the post-insserv world. * Add upstart jobs from Ubuntu for smbd, nmbd, and winbind. [ Ivo De Decker ] * New upstream release -- Ivo De Decker Tue, 20 Aug 2013 22:06:45 +0200 samba (2:3.6.17-1) unstable; urgency=high * Team upload. * New upstream security release. Closes: #718781 Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation -- Ivo De Decker Mon, 05 Aug 2013 13:46:23 +0200 samba (2:3.6.16-2) unstable; urgency=high * Team upload. * Make build-dep on libtevent-dev explicit. * Fix waf-as-source.patch to make sure unpacking works in recent build environment. Closes: #716932 -- Ivo De Decker Tue, 16 Jul 2013 22:01:04 +0200 samba (2:3.6.16-1) unstable; urgency=low * Team upload. [ Steve Langasek ] * Drop support for running smbd from inetd; this is not well-supported upstream, and can't correctly handle all of the long-running services that are needed as part of modern samba. Closes: #707622. [ Ivo De Decker ] * New upstream release -- Ivo De Decker Wed, 19 Jun 2013 21:05:07 +0200 samba (2:3.6.15-1) unstable; urgency=high * Team upload. * New upstream bugfix release. Closes: #707042 * Update VCS URL's for new git repo. * The recommends for the separate libnss-winbind and libpam-winbind packages needed for the upgrade of winbind from squeeze to wheezy are no longer needed. Lowering them to suggests. Closes: #706434, #674853 -- Ivo De Decker Thu, 09 May 2013 11:55:03 +0200 samba (2:3.6.14-1) unstable; urgency=low * Team upload. * New upstream release -- Ivo De Decker Sat, 04 May 2013 22:02:15 +0200 samba (2:3.6.13-2) experimental; urgency=low * Team upload. * Move binary files out of /etc/samba to /var/lib/samba, where they belong according to the FHS: - schannel_store.tdb - idmap2.tdb - MACHINE.sid Closes: #454770 -- Ivo De Decker Sun, 21 Apr 2013 12:54:03 +0200 samba (2:3.6.13-1) experimental; urgency=low * Team upload. * New upstream release * samba: Suggests winbind. Closes: #689857 -- Ivo De Decker Mon, 18 Mar 2013 21:29:58 +0100 samba (2:3.6.12-1) experimental; urgency=low * Team upload. * Security update, fixing the following issues: - CVE-2013-0213: Clickjacking issue in SWAT - CVE-2013-0214: Potential XSRF in SWAT * New upstream release * Install pkgconfig file in libsmbclient-dev. Closes: #700643 -- Ivo De Decker Sun, 17 Feb 2013 22:25:34 +0100 samba (2:3.6.10-1) experimental; urgency=low * New upstream release -- Christian Perrier Sat, 15 Dec 2012 08:03:03 +0100 samba (2:3.6.9-1) experimental; urgency=low * New upstream release -- Christian Perrier Thu, 01 Nov 2012 08:17:29 +0100 samba (2:3.6.8-1) experimental; urgency=low * New upstream release. -- Christian Perrier Tue, 18 Sep 2012 07:13:41 +0200 samba (2:3.6.7-1) experimental; urgency=low * New upstream release. -- Christian Perrier Sat, 11 Aug 2012 21:37:38 +0200 samba (2:3.6.6-3) unstable; urgency=low [ Ansgar Burchardt ] * debian/rules: Use xz compression for binary packages. Closes: #683899 -- Christian Perrier Sun, 05 Aug 2012 12:19:12 +0200 samba (2:3.6.6-2) unstable; urgency=low * Restore the DHCP hook. -- Steve Langasek Wed, 27 Jun 2012 09:31:15 -0700 samba (2:3.6.6-1) unstable; urgency=low [ Ivo De Decker ] * Only enable swat in inetd.conf on first install. Closes: #658245 * Minor lintian fixes. * Remove DHCP hook. Closes: #652942, #629406, #649100 * Don't reload smbd when running from inetd. Closes: #678741 * Don't start smbd when guest account doesn't exist. Closes: #653382 * Only export public symbols in libsmbclient and libwbclient. [ Christian Perrier ] * New upstream version -- Christian Perrier Wed, 27 Jun 2012 06:03:17 +0200 samba (2:3.6.5-7) unstable; urgency=low * Allow installing smbclient package together with newer versions of samba4-clients, which no longer ship the smbclient and nmblookup binaries. -- Jelmer Vernooij Mon, 11 Jun 2012 13:19:24 +0200 samba (2:3.6.5-6) unstable; urgency=high [ Ivo De Decker ] * Update symbols file for linux-only symbols in libsmbclient. This should fix the FTBFS on kfreebsd and hurd. Closes: #676170 * Enable ctdb for non-linux archs. * Remove old if-up script during upgrade. -- Christian Perrier Wed, 06 Jun 2012 19:10:02 +0200 samba (2:3.6.5-5) unstable; urgency=low [ Christian Perrier ] * Make libpam-winbind depend on libnss-winbind. [ Ivo De Decker ] * Update symbols file for libsmbclient and libwbclient0 * Add lintian overrides for examples in samba-doc * libpam-winbind: change Depends on libnss-winbind to Recommends * libnss-winbind: Suggests libpam-winbind * Update package description for winbind, libpam-winbind and libnss-winbind to better reflect their content * Backport vfs_shadow_copy2 from master, to allow shadow copy to work without wide links [ Luk Claes ] * Ship wbclient.pc file in multiarch safe directory (Closes: #674215). [ Sam Morris ] * Add libutil_drop_AI_ADDRCONFIG.patch that allows running nmbd when no network interfaces have been assigned an address, therefore removing the need for an if-up script. Closes: #640668,#640508 -- Christian Perrier Sun, 03 Jun 2012 20:00:56 +0200 samba (2:3.6.5-3) unstable; urgency=low [ Luk Claes ] * Ship wbclient.pc so cifs-utils can be built again (Closes: #672733). * Activate parallel building. Might need DEB_BUILD_OPTIONS as usual. [ Christian Perrier ] * Add Breaks and Replaces on libpam-winbind for newly created libnss-winbind. Thanks to Colin Watson for pointing this and shame on me for not properly checking the transition. Closes: #673122 -- Christian Perrier Thu, 17 May 2012 10:34:38 +0200 samba (2:3.6.5-2) unstable; urgency=low * The yearly "SambaXP bug cleaning party" release. 11 years SambaXP, 20 years Samba and counting... * Make samba-common "Multi-Arch: foreign" * Adapt patch in upstream #7499 and stop nss_wins clobbering other daemon's logfiles. Closes: #598313 * Add some mention about some use for the user information in Kerberos environments in the smbspool manpage. Closes: #387266 * Drop link to no longer provided "Using Samba" documentation in HTML documentation summary file. Closes: #604768 * Provide WHATSNEW.txt in samba-doc too as it is linked from the documentation summary file. Do not compress that file. * Fix link to WHATSNEW.txt in HTML documentation summary file. This is the second part of the fix for #604768 * Use lp_state_dir() instead of get_dyn_STATEDIR() in fhs-filespaths.patch as the latter does indeed hardcode the location for passdb.tdb and secrets.tdb to /var/lib/samba (the compile-time option for state directory and NOT the configurable value). This is left to "state directory" instead of "private dir" at least as of now, because if doesn't change anything to the current behaviour, but allows the files' location to be configurable through "state directory" (and not "private dir"). Closes: #249873 * Disable useless smbtorture4 build. Thanks to Ivo De Decker for the patch. Closes: #670561 * Add upstream commit that adds waf source to the buildtools/ directory. As upstream will, one day or another, merge this, I prefer this over removing the waf binary and repack upstream tarball. Closes: #654499 * Build-Conflict with python-ldb and python-ldb-dev to avoid build failures when some versions of these packages are locally installed. Closes: #657314 * Rename fix-samba.ldip-syntax.patch to fix-samba.ldif-syntax.patch * Split NSS modules into a new libnss-winbind binary package. Closes: #646292 * Add a NEWS.Debian entry about the libnss-winbind split and, while at it, add an entry for libpam-winbind too (as it will affect upgrades from squeeze). * Drop code that was moving files around in samba.postinst and winbind.postinst for pre-squeeze versions of the package. * Drop code that was modifying a deprecated "passdb backend" setting in smb.conf for pre-squeeze versions of the package (in samba-common.config). * Add Should-Start dependency to winbind init script to guarantee that the samba init script is started before winbind if present. Closes: #638066 * Provide a (basic) manpage to smbtorture(1). Closes: #528735 * Turkish debconf translation update (Atila KOÇ). Closes: #672447 * Drop the code that generates an smbpasswd file from the system's user list. This adds very long delays on systems with many users, including those with external user backends. It also makes much less sense nowadays and the use of libpam-smbpass can easily fill most of the needs. Closes: #671926 * Merged from Ubuntu: - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. This allows for anonymous user shares. Closes: #672497 -- Christian Perrier Sat, 12 May 2012 14:30:58 +0200 samba (2:3.6.5-1) unstable; urgency=low * New upstream release. Fixes CVE-2012-2111: Incorrect permission checks when granting/removing privileges can compromise file server security. * Build-Depend on debhelper >= 9~ (which is in unstable for a few months now) * Use "set -e" in maintainer scripts instead of passing -e in the shebang line * Update Standards to 3.9.3 (checked, no change) -- Christian Perrier Tue, 01 May 2012 08:07:39 +0200 samba (2:3.6.4-1) unstable; urgency=low [ Christian Perrier ] * Two changes in the previous version should indeed read: - samba.postinst: Avoid scary pdbedit warnings on first import. - samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted. Closes: #664509 [ Jelmer Vernooij ] * New upstream release. + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting beyond of allocated array. -- Jelmer Vernooij Wed, 11 Apr 2012 23:25:41 +0200 samba (2:3.6.3-2) unstable; urgency=low [ Christian Perrier ] * Fix example samba.ldif syntax. Closes: #659963 * Set minimal version of tdb ot 1.2.6 in Build-Depends (thanks, backports!) * Lower priority of debconf question to medium after some pondering. After all, we have a sane default. Closes: #662801 * Merge some Ubuntu patches: - samba.config: Avoid scary pdbedit warnings on first import. - samba.postinst: Add more informative error message for the case where smb.conf was manually deleted. [ Maarten Bezemer ] * Removed references to the testprns command from documentation * Added notes that the smbsh command is not available in this package Closes: #662243 [ Debconf translations ] * Indonesian (Arief S Fitrianto). Closes: #660312 * Slovak (Ivan Masár). Closes: #661125 [ Steve Langasek ] * Use Debian copyright-format 1.0 in debian/copyright. -- Christian Perrier Mon, 12 Mar 2012 20:49:24 +0100 samba (2:3.6.3-1) unstable; urgency=low [ Christian Perrier ] * New upstream release * Fixes CVE-2012-0817: The Samba File Serving daemon (smbd) in Samba versions 3.6.0 to 3.6.2 is affected by a memory leak that can cause a server denial of service. [ Debconf translations ] * Polish (Michał Kułach). Closes: #657770 -- Christian Perrier Tue, 31 Jan 2012 22:09:39 +0100 samba (2:3.6.2-1) unstable; urgency=low * New upstream release * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream) -- Christian Perrier Fri, 27 Jan 2012 21:38:52 +0100 samba (2:3.6.1-3) unstable; urgency=low [ Sam Hartman ] * Increase libkrb5-dev dependency to avoid depending on krb5_locate_kdc, Closes: #650541 [ Steve Langasek ] * Fix the libpam-winbind description to more accurately identify the protocols being used by nss_wins. Closes: #650091. -- Christian Perrier Thu, 01 Dec 2011 21:56:52 +0100 samba (2:3.6.1-2) unstable; urgency=low * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch * debian/patches/initialize_password_db-null-deref: Avoid null dereference in initialize_password_db(). Closes LP: #829221. * Mark samba-common Multi-Arch: foreign. -- Christian Perrier Sun, 27 Nov 2011 19:06:39 +0100 samba (2:3.6.1-1) experimental; urgency=low * New upstream release -- Christian Perrier Sat, 22 Oct 2011 10:56:17 +0200 samba (2:3.6.0-1) experimental; urgency=low * New upstream release * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1 and 3.5.11~dfsg-1 * Drop wbc_async.h from libwbclient-dev as, according to upstream's commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is smbtorture3" -- Christian Perrier Thu, 11 Aug 2011 09:14:53 +0200 samba (2:3.6.0~rc3-1) experimental; urgency=low * New upstream version -- Christian Perrier Fri, 29 Jul 2011 23:11:10 +0200 samba (2:3.6.0~rc2-1) experimental; urgency=low * New upstream version -- Christian Perrier Tue, 07 Jun 2011 23:09:41 +0200 samba (2:3.6.0~rc1-2) experimental; urgency=low * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file in an existing directory. Closes: #628121 -- Christian Perrier Fri, 27 May 2011 15:35:44 +0200 samba (2:3.6.0~rc1-1) experimental; urgency=low * New upstream release -- Christian Perrier Thu, 19 May 2011 22:26:08 +0200 samba (2:3.6.0~pre3-1) experimental; urgency=low [ Christian Perrier ] * New upstream release * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it was forgotten upstream * libwbclient0.symbols: dropped several symbols related to asynchronous actions that weren't working anyway (according to Kai Blin at SambaXP) [ Mathieu Parent ] * Build against libctdb-dev (>= 1.10+git20110412) to have required control: CTDB_CONTROL_SCHEDULE_FOR_DELETION. -- Christian Perrier Mon, 09 May 2011 11:29:52 +0200 samba (2:3.5.11~dfsg-4) unstable; urgency=low * Lintian override for libpam-winbind; it's not a shared library so doesn't really need the pre-depends on multiarch-support. * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu. -- Steve Langasek Fri, 21 Oct 2011 16:01:29 -0700 samba (2:3.5.11~dfsg-3) unstable; urgency=low * Split winbind into separate packages, winbind and libpam-winbind, with the latter marked Multi-Arch: same and the former marked Multi-Arch: foreign, so that we can install multiple copies of the pam module and nss modules on the same system. -- Steve Langasek Fri, 21 Oct 2011 20:00:13 +0000 samba (2:3.5.11~dfsg-2) unstable; urgency=low * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally. * Use dh_links instead of manually creating directories and symlinks from debian/rules. * Switch from dh_movefiles to dh_install and adjust for debhelper compat level 7, in preparation for moving to dh(1). * Where possible, use dh_installman and dh_install's support for target directories instead of moving files around in debian/rules. * We don't need to mess with perms on usr/include/libsmbclient.h anymore in debian/rules, the upstream install target gets it right * Use debian/clean instead of removing left-behind files by hand in the clean target * Convert debian/rules to dh(1). * Don't run debconf-updatepo on clean; not worth the divergence in debian/rules anymore :) * Don't install debian/README.build in the package; this is really only relevant in the source. * Bump to debhelper compat level 9 and build libraries for multiarch. * Drop Makefile.internal from libsmbclient-dev examples so that we can mark libsmbclient-dev Multi-Arch: same. * Bump build-depends on debhelper to 8.9.4, so we ensure we have dpkg-buildflags by default and get full build hardening enabled out of the box - critical for a server like samba. * Use DH_ALWAYS_EXCLUDE instead of passing override options to dh_installexamples. * Pass --sourcedirectory=source3 to dh instead of having to pass it to each dh_auto_* command. * Ironically, this means that we have to manually disable dh_auto_test, which now finds the makefile targets but doesn't work unless we build an extra wrapper library into our binaries that we don't want. * Drop a few configure options from debian/rules that shadow the built-in defaults. * debian/libsmbclient.lintian-overrides: yes, we know the package name doesn't match the soname - and it never should until there's an ABI change. -- Steve Langasek Fri, 07 Oct 2011 21:36:43 -0700 samba (2:3.5.11~dfsg-1) unstable; urgency=low * New upstream release -- Christian Perrier Fri, 05 Aug 2011 20:12:01 +0200 samba (2:3.5.10~dfsg-1) unstable; urgency=low * New upstream release * Security update, fixing the following issues: - CVE-2011-2694: possible XSS attack in SWAT - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT -- Christian Perrier Thu, 28 Jul 2011 12:19:01 +0200 samba (2:3.5.9~dfsg-1) unstable; urgency=low * New upstream release * Add "--quiet" to start-stop-daemon call in reload target in init script. Closes: #572483 * Add examples/LDAP in examples for the samba package. With this, samba.schema will be provided in some way in the package. This very partially addresses #190162 * patches/bug_221618_precise-64bit-prototype.patch: precise 64bits prototype in libsmbclient-dev. Closes: #221618 * patches/no-unnecessary-cups.patch: dropped after upstream changes to printing code * Update Standards to 3.9.2 (checked, no change) * Add build-arch and build-indep targets in debian/rules -- Christian Perrier Sat, 18 Jun 2011 07:08:00 +0200 samba (2:3.5.8~dfsg-5) unstable; urgency=low * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo in fhs-filespath.patch. Closes: #629183, LP: #789097 -- Christian Perrier Sat, 04 Jun 2011 13:48:32 +0200 samba (2:3.5.8~dfsg-4) unstable; urgency=low [ Debconf translations ] * Spanish (Omar Campagne). Closes: #627813 * Swedish (Martin Bagge / brother). Closes: #627849 * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #627866 [ Christian Perrier ] * bug_601406_fix-perl-path-in-example.patch: fix path to perl binary in example file. Closes: #601406 -- Christian Perrier Fri, 27 May 2011 12:23:05 +0200 samba (2:3.5.8~dfsg-3) unstable; urgency=low [ Debconf translations ] * Italian (Luca Monducci). Closes: #626674 * Dutch (Vincent Zweije). Closes: #627519 * Czech (Miroslav Kure). Closes: #627442 -- Christian Perrier Tue, 24 May 2011 22:40:04 +0200 samba (2:3.5.8~dfsg-2) unstable; urgency=low [ Jelmer Vernooij ] * Add libwbclient-dev package. * Build against external libtdb. * Bump standards version to 3.9.1 (no changes). [ Mathieu Parent ] * Builddep on libctdb-dev or ctdb < 1.10 [ Christian Perrier ] * Use db_settitle in debconf questions and make these titles translatable. Closes: #560318 * Test the presence of testparm before trying to use it in init script Closes: #606320 * Add cups to Should-{Start,Stop} in LSB headers of samba init script to guarantee that CUPS is started before samba. Closes: #619132 * Drop libsmbclient-dev useless dependency on samba-common Closes: #597987 [ Debconf translations ] * French (Christian Perrier) * Japanese (Kenshi Muto). Closes: #626474 * Galician (Miguel Anxo Bouzada). Closes: #626477 * Thai (Theppitak Karoonboonyanan). Closes: #626487 * Russian (Yuri Kozlov). Closes: #626523 * Danish (Joe Hansen). Closes: #626531 * Esperanto (Felipe Castro). Closes: #626558 * Hebrew (Eran Cohen). Closes: #626638 * Bokmål, (Bjørn Steensrud). * Italian (Luca Monducci). Closes: #626674 * Finnish (Tapio Lehtonen). Closes: #626890 * Portuguese (Miguel Figueiredo). Closes: #627224 * German (Holger Wansing). Closes: #627354 * Czech (Miroslav Kure). Closes: #627442 -- Christian Perrier Sun, 22 May 2011 21:15:21 +0200 samba (2:3.5.8~dfsg-1) unstable; urgency=low * New upstream release. This fixes the following bugs: - Winbind leaks gids with idmap ldap backend (upstrem #7777) Closes: #613624 - printing from Windows 7 fails with 0x000003e6 Closes: #617429 * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream #7997 -- Christian Perrier Tue, 08 Mar 2011 22:38:32 +0100 samba (2:3.5.7~dfsg-1) unstable; urgency=low [ Christian Perrier ] * New upstream release * Security update, fixing the following issue: - CVE-2011-0719: denial of service by memory corruption * Use architecture wildcard "linux-any" in build dependencies Closes: #563372 -- Christian Perrier Tue, 01 Mar 2011 20:59:34 +0100 samba (2:3.5.6~dfsg-5) unstable; urgency=low * Fix FTBFS on Hurd. Closes: #610678 * Only try parsing dhcpd.conf is it's not empty, in dhclient-enter-hooks.d/samba. Closes: #594088. -- Christian Perrier Sat, 05 Feb 2011 13:50:22 +0100 samba (2:3.5.6~dfsg-4) unstable; urgency=low * Fix pam_winbind file descriptor leak with a patch proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265. Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter confirmed it is not while the patch applied here fixes the file descriptor leak. Closes: #574468 [ Debconf translations ] * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #607402 -- Christian Perrier Sat, 15 Jan 2011 18:06:22 +0100 samba (2:3.5.6~dfsg-3) unstable; urgency=low [ Julien Cristau ] * Bump libwbclient0 shlibs to match the newest version in the symbols file. * Mark libwbclient0 as breaking other samba packages with versions older than 2:3.4.1, as they were linked against libtalloc1 instead of libtalloc2, and the combination causes crashes (closes: #593823). -- Christian Perrier Mon, 06 Dec 2010 20:14:04 +0100 samba (2:3.5.6~dfsg-2) unstable; urgency=low [ Steve Langasek ] * Fix debian/rules update-archs target to not add extra spaces on every invocation... [ Debconf translations ] * Catalan (Jordi Mallach). Closes: #601101 * Japanese (Kenshi Muto). Closes: #601364 * Bulgarian (Damyan Ivanov). Closes: #601366 * Hebrew (Omer Zak). Closes: #601633 * Kurdish (Erdal Ronahî). Closes: #601719 * Dutch (Remco Rijnders). Closes: #602220 * Greek (Konstantinos Margaritis). [ Christian Perrier ] * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy files from a SMB share using SMB signing.". Backported from to be released 3.5.7 version Closes: #605729 -- Christian Perrier Sat, 04 Dec 2010 07:44:22 +0100 samba (2:3.5.6~dfsg-1) unstable; urgency=low * New upstream release. Fixes the following Debian bug: - rpcclient readline segfault. Closes: #597203 -- Christian Perrier Sun, 10 Oct 2010 09:59:37 +0200 samba (2:3.5.5~dfsg-1) unstable; urgency=high [ Christian Perrier ] * New upstream release. Security release fixing: - CVE-2019-3069: Buffer overrun vulnerability in sid_parse. Closes: #596891. * Fix comment in swat's postinst. It is not turned off by default Closes: #596040 * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst [ Steve Langasek ] * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for pam-auth-update. Closes: #594325. [ Debconf translations ] * Arabic (Ossama Khayat). Closes: #596164 -- Christian Perrier Tue, 14 Sep 2010 23:03:35 +0200 samba (2:3.5.4~dfsg-2) unstable; urgency=low * Release to unstable [ Debconf translations ] * Danish (Joe Dalton). Closes: #592789. * Galician (Jorge Barreiro). Closes: #592809 [ Steve Langasek ] * debian/patches/fhs-filespaths.patch, debian/samba.postinst, debian/winbind.postinst: move some files from /etc/samba to /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb, and idmap2.tdb. -- Christian Perrier Tue, 07 Sep 2010 17:47:32 +0200 samba (2:3.6.0~pre1-1) experimental; urgency=low * New upstream release -- Christian Perrier Wed, 04 Aug 2010 01:39:11 +0200 samba (2:3.5.4~dfsg-1) experimental; urgency=low * New upstream release -- Christian Perrier Tue, 29 Jun 2010 22:00:53 +0200 samba (2:3.5.3~dfsg-1) experimental; urgency=low * New upstream release. Fixes the following bugs: - smbclient segfaults when used against old samba "security = share" Closes: #574886 * Drop duplicate build dependency on ctdb -- Christian Perrier Wed, 19 May 2010 22:07:49 +0200 samba (2:3.5.2~dfsg-2) experimental; urgency=low * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and 2:3.4.7~dfsg-2 -- Christian Perrier Tue, 04 May 2010 17:13:47 +0200 samba (2:3.5.2~dfsg-1) experimental; urgency=low * New upstream release * Bugs fixed upstream: - Fix parsing of the gecos field Closes: #460494 -- Christian Perrier Thu, 08 Apr 2010 19:48:07 +0200 samba (2:3.5.1~dfsg-1) experimental; urgency=low * New upstream release. Security fix: all smbd processes inherited CAP_DAC_OVERRIDE capabilities, allowing all file system access to be allowed even when permissions should have denied access. -- Christian Perrier Tue, 09 Mar 2010 10:54:01 +0100 samba (2:3.5.0dfsg-1) experimental; urgency=low * New upstream release. Not using "3.5.0~dfsg" as version number because we used a "higher" version number in previous versions. -- Christian Perrier Tue, 02 Mar 2010 22:03:15 +0100 samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low * New upstream release candidate -- Christian Perrier Sat, 20 Feb 2010 08:36:57 +0100 samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low * New upstream pre-release * Use new --with-codepagedir option. Consequently drop codepages-location.patch * Drop "Using Samba" from the samba-doc file list as it was removed upstream. -- Christian Perrier Sun, 31 Jan 2010 11:53:48 +0100 samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low [ Christian Perrier ] * New upstream pre-release -- Christian Perrier Fri, 15 Jan 2010 23:31:01 +0100 samba (2:3.4.8~dfsg-2) unstable; urgency=low [ Steve Langasek ] * Drop the per-release smb.conf templates, only needed for upgrade paths that are no longer supported. * Call /etc/init.d/samba directly from the logrotate script instead of using invoke-rc.d, to address the irony that the only package I work on that *has* a logrotate script is inconsistent with my position in bug #445203. * Fix a bashism in the samba postinst that can cause the package installation to fail under dash. LP: #576307. * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new isc-dhcp-client package. Closes: #585056. [ Christian Perrier ] * Don't copy system accounts from /etc/passwd to /var/lib/samba/passdb.tdb. Closes: #502801 * Update Standards to 3.9.0 (checked, no change) * Backport patch for upstream bug #7139 to fix "owner of file not available with kerberos" Closes: #586337 -- Steve Langasek Wed, 14 Jul 2010 11:59:28 -0700 samba (2:3.4.8~dfsg-1) unstable; urgency=low [ Christian Perrier ] * New upstream release * Bugs fixed upstream: - Fix writing with vfs_full_audit. Closes: #574011 * Drop deprecated 'share modes' parameter from default smb.conf Closes: #580561 * Enable PIE during configure. Closes: #509135 * Avoid winbind's logrotate script to fail when there is no /var/run/samba directory. Closes: #569926 * Add explanations about "passdb backend" default setting change Closes: #553904 [ Debconf translations ] * Spanish (Omar Campagne). Closes: #579011 -- Christian Perrier Wed, 12 May 2010 05:45:52 +0200 samba (2:3.4.7~dfsg-2) unstable; urgency=low [ Christian Perrier ] * Drop smbfs package (now provided by cifs-utils as a dummy transition package) [ Debconf translations ] * Portuguese (Miguel Figueiredo). Closes: #575958 [ Steve Langasek ] * winbind.prerm: don't forget to remove the PAM profile on package removal :/ * Fix winbind.pam-config to not interfere with password changes for non-winbind accounts. Closes: #573323, LP: #546874. * debian/samba.if-up, debian/rules: add an if-up.d script for samba to try to start nmbd, if it's not running because /etc/init.d/samba ran before the network was up at boot time. Closes: #576415, LP: #462169. * debian/samba.if-up: allow "NetworkManager" as a recognized address family... it's obviously /not/ an address family, but it's what gets sent when using NM, so we'll cope for now. -- Christian Perrier Sat, 17 Apr 2010 07:49:49 +0200 samba (2:3.4.7~dfsg-1) unstable; urgency=low [ Steve Langasek ] * Add a PAM profile for pam_winbind. Closes: #566890, LP: #282751. * Add the correct versioned build dependency on libtalloc-dev as we need 2.0.1 to build samba. Closes: #572603 * Add avr32 to arches with a build dependency on ctdb. Closes: #572126 [ Christian Perrier ] * New upstream release. Security fix: all smbd processes inherited CAP_DAC_OVERRIDE capabilities, allowing all file system access to be allowed even when permissions should have denied access. -- Christian Perrier Tue, 09 Mar 2010 10:52:24 +0100 samba (2:3.4.6~dfsg-1) unstable; urgency=low * New upstream release -- Christian Perrier Fri, 26 Feb 2010 22:39:50 +0100 samba (2:3.4.5~dfsg-2) unstable; urgency=low [ Steve langasek ] * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar" is explicitly allowed by Policy now, and this change introduced a syntax error. Closes: #566946. [ Christian Perrier ] * No longer maker (u)mount.cifs setuid root. Add a notice about this in the package's NEWS.Debian file Closes: #567554 * Use dh_lintian instead of manual install of lintian overrides * Updated Standards to 3.8.4 (checked, no change) -- Christian Perrier Sat, 13 Feb 2010 14:36:33 +0100 samba (2:3.4.5~dfsg-1) unstable; urgency=low * New upstream release. Bugs fixed by this release: - Memory leak in smbd. Closes: #538819, #558453 * Declare a versioned dependency of winbind and samba on libwbclient0 Closes: #550481 * A few lintian fixes: * Drop /var/run/samba from samba-common. The directory is created by init scripts when needed. * No longer prepend a path to the mksmbpasswd call in samba.postinst. This prevents the local administrator to use a replacement version for some local reason. -- Christian Perrier Sat, 23 Jan 2010 12:16:42 +0100 samba (2:3.4.4~dfsg-1) unstable; urgency=low * New upstream version. * Drop all RFC files from upstream source, therefore using a "~dfsg" suffix to upstream version number. * Bugs fixed upstream: - fixed list of workgroup servers in libsmbclient. Closes: #555462, #561148 - fixed documentation of the credentials file format in mount.cifs(8). Closes: #552250 -- Christian Perrier Thu, 14 Jan 2010 20:16:34 +0100 samba (2:3.4.3-2) unstable; urgency=low [ Christian Perrier ] * Switch to source format 3.0 (quilt) * Better adapt "add machine script" example to adduser Thanks to Heiko Schlittermann for the suggestion Closes: #555466 [ Steve Langasek ] * The "I hate non-declarative alternatives" upload: - debian/samba{,-common}.prerm: don't call update-alternatives --remove on upgrade, /do/ call it on other invocations of the prerm script. If these tools ever go away, the removal needs to be handled on upgrade by the maintainer scripts of the new package version. - debian/samba{,-common-bin}.postinst: call update-alternatives unconditionally, don't second-guess the maintainer script arguments. - debian/samba.postinst: call update-alternatives after the debconf handling, not before; debconf triggers a re-exec of the script so anything done before invoking debconf is wasted because it will be re-done, and if there's already a debconf frontend running when this is called, the not-redirected update-alternatives output will confuse it. Closes: #558116. - debian/samba-common.prerm: move to samba-common-bin, this is the package that owns these binaries. -- Christian Perrier Thu, 17 Dec 2009 16:53:13 +0100 samba (2:3.4.3-1) unstable; urgency=low * New upstream release. This fixes the following bugs: - Do not attempt to update /etc/mtab if it is a symbolic link. Closes: #408394 * Bump Standards-Version to 3.8.3 (checked) -- Christian Perrier Sat, 31 Oct 2009 14:32:07 +0100 samba (2:3.4.2-1) unstable; urgency=high * New upstream release. Security update. * CVE-2009-2813: Connecting to the home share of a user will use the root of the filesystem as the home directory if this user is misconfigured to have an empty home directory in /etc/passwd. * CVE-2009-2948: If mount.cifs is installed as a setuid program, a user can pass it a credential or password path to which he or she does not have access and then use the --verbose option to view the first line of that file. * CVE-2009-2906: Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% CPU loop, causing a DoS on the Samba server. -- Christian Perrier Sat, 03 Oct 2009 08:30:33 +0200 samba (2:3.4.1-2) unstable; urgency=low * ./configure --disable-avahi, to avoid accidentally picking up an avahi dependency when libavahi-common-dev is installed. -- Steve Langasek Sat, 26 Sep 2009 00:01:12 -0700 samba (2:3.4.1-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. This fixes the following bugs: - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec for the clever analysis and collaboration with upstream. Closes: #541171 - Fix password change propagation with ldapsam. Closes: #505215 - Source package contains non-free IETF RFC/I-D. Closes: #538034 * Turn the build dependency on libreadline5-dev to libreadline-dev to make further binNMUs easier when libreadline soname changes Thanks to Matthias Klose for the suggestion [ Steve Langasek ] * Don't build talloctort when using --enable-external-talloc; and don't try to include talloctort in the samba-tools package, since we're building with --enable-external-talloc. :) Closes: #546828. -- Steve Langasek Mon, 21 Sep 2009 22:20:22 -0700 samba (2:3.4.0-5) unstable; urgency=low * Move /etc/pam.d/samba back to samba-common, because it's shared with samba4. Closes: #545764. -- Steve Langasek Tue, 08 Sep 2009 18:43:17 -0700 samba (2:3.4.0-4) unstable; urgency=low [ Steve Langasek ] * debian/samba.pamd: include common-session-noninteractive instead of common-session, to avoid pulling in modules specific to interactive logins such as pam_ck_connector. * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the above. * rename debian/samba.pamd to debian/samba.pam and call dh_installpam from debian/rules install, bringing us a smidge closer to a stock debhelper build * don't call pyversions from debian/rules, this throws a useless error message during build. * fix up the list of files that need to be removed by hand in the clean target; the majority of these are now correctly handled upstream. * debian/rules: fix the update-arch target for the case of unversioned build-deps. * Pull avr32 into the list of supported Linux archs. Closes: #543543. * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the patch. Closes: #541367. [ Christian Perrier ] * Use DEP-3 for patches meta-information [ Steve Langasek ] * Change swat update-inetd call to use --remove only on purge, and --disable on removal. * Add missing build-dependency on pkg-config, needed to fix libtalloc detection * debian/patches/external-talloc-support.patch: fix the Makefile so it works when using external talloc instead of giving a missing-depend error. * debian/patches/autoconf.patch: resurrect this patch, needed for the above. * debian/rules: build with --without-libtalloc --enable-external-libtalloc, also needed to fix the build failure. -- Steve Langasek Mon, 07 Sep 2009 22:58:29 -0700 samba (2:3.4.0-3) unstable; urgency=low [ Steve Langasek ] * debian/control: samba-common-bin has no reason to depend on libpam-modules. [ Christian Perrier ] * Fix "invalid argument" when trying to copy a file from smb share Use an upstream patch that will be included in 3.4.1 Closes: #536757 -- Christian Perrier Fri, 21 Aug 2009 11:08:43 +0200 samba (2:3.4.0-2) unstable; urgency=low [ Debconf translations ] * German. Closes: #536433 [ Steve Langasek ] * Enable the ldap idmap module; thanks to Aaron J. Zirbes. Closes: #536786. [ Jelmer Vernooij ] * Properly rename smbstatus.1 for alternatives. Closes: #534772 -- Christian Perrier Sun, 02 Aug 2009 12:20:51 +0200 samba (2:3.4.0-1) unstable; urgency=low [ Christian Perrier ] * New upstream release: first upload to unstable for 3.4 * Correct dependencies for samba-common-bin. Closes: #534595 [ Debconf translations ] * Czech. Closes: #534793 * Russian. Closes: #534796 -- Christian Perrier Tue, 07 Jul 2009 20:42:19 +0200 samba (2:3.4.0~rc1-1) experimental; urgency=low * New upstream version. That fixes the following bugs: - Remove pidfile on clean shutdown. Closes: #299433, #454112 * Drop swat-de.patch that was applied upstream * Bump debhelper compatibility level to 6 and declare a versioned dependency on debhelper >= 6.0.0 -- Christian Perrier Sat, 20 Jun 2009 18:43:20 +0200 samba (2:3.4.0~pre2-1) experimental; urgency=low [ Jelmer Vernooij ] * Split binaries out of samba-common into samba-common-bin. Closes: #524661 [ Christian Perrier ] * New upstream version. That fixes the following bugs: - Do not limit the number of network interfaces. Closes: #428618 - Fix Connect4 in samr.idl. Closes: #526229 * "Using samba" is back. * Drop non-linux-ports.patch that was integrated upstream * Drop smbpasswd-syslog.patch that was integrated upstream * Drop smbclient-link.patch that was integrated upstream [ Debconf translations ] * Italian. Closes: #529350 -- Christian Perrier Sat, 06 Jun 2009 11:45:35 +0200 samba (2:3.4.0~pre1-1) experimental; urgency=low * New upstream pre-release * "Using samba" is dropped from upstream source. Therefore, drop debian/samba-doc.doc-base.samba-using -- Christian Perrier Wed, 20 May 2009 18:50:35 +0200 samba (2:3.3.6-1) unstable; urgency=high * New upstream release. Security release. * CVE 2009-1886: Fix Formatstring vulnerability in smbclient * CVE 2009-1888: Fix uninitialized read of a data value -- Christian Perrier Fri, 26 Jun 2009 18:21:51 +0200 samba (2:3.3.5-1) unstable; urgency=low [ Steve Langasek ] * debian/patches/undefined-symbols.patch: fix up patch so that it's suitable for submission upstream. * debian/patches/proper-static-lib-linking.patch: apply the rules to vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and rpc_open_tcp. [ Debconf translations ] * Italian. Closes: #529350 [ Christian Perrier ] * New upstream version * Lintian fixes: - Declare versioned dependency on debhelper to fit what we have in debian/compat - samba.postinst: do not call mksmbpasswd with an absolute path * Upgrade Standard to 3.8.2 (checked, no change) * Upgrade debhelper compatibility level to 6 -- Christian Perrier Sat, 20 Jun 2009 08:01:16 +0200 samba (2:3.3.4-2) unstable; urgency=low [ Christian Perrier ] * Do no compile with clustering support on non-Linux platforms Closes: #528382 [ Debconf translations ] * Basque. Closes: #528757 -- Christian Perrier Sat, 16 May 2009 17:31:09 +0200 samba (2:3.3.4-1) unstable; urgency=low [ Christian Perrier ] * New upstream release: - Fixed daily winbind crash when retrieving users from an ADS server Closes: #522907. * Add idmap_tdb2 module to winbind package * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents VFS modules to properly load. Closes: #524048. [ Debconf translations ] * Bengali added. [ Steve Langasek ] * Recommend logrotate instead of depending on it. Closes: #504219. -- Christian Perrier Sat, 02 May 2009 10:06:16 +0200 samba (2:3.3.3-1) unstable; urgency=low * New upstream release: - Fix map readonly. Closes: #521225 - Add missing whitespace in mount.cifs error message. Closes: #517021 - Includes our patch to fix detection of GNU ld version. As a consequence, we dropped fix_wrong_gnu_ld_version_check.patch - Fix segfault in lookup_sid. Closes: #521408 -- Christian Perrier Sat, 11 Apr 2009 10:12:23 +0200 samba (2:3.3.2-2) unstable; urgency=low [ Steve Langasek ] * libcap2-dev is only available on Linux, so make this build-dependency conditional. Closes: #519911. [ Christian Perrier ] * Switch samba-dbg to "Section: debug" * Update debian/copyright for year 2009. Thanks to debian-devel for the reminder. * Dropping Adam Conrad from Uploaders * Dropping Eloy Paris from Uploaders with special thanks for his tremendous work maintaining the package between 1997 and 2004. [ Mathieu Parent ] * ensure clustering is enabled with --with-cluster-support=yes * build-depends on ctdb >= 1.0.73. Closes: #520202. * samba suggests ctdb [ Debconf translations ] * Esperanto updated. Closes: #519237. -- Christian Perrier Sun, 29 Mar 2009 09:23:35 +0200 samba (2:3.3.2-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. Closes: #519626 - mounts with -o guest will now automatically try to connect anonymously. Closes: #423971. - fix for brokenness when using 'force group'. Closes: #517760. - fix for saving files on Samba shares using MS Office 2007. LP: #337037. * Re-fix slave links for manual pages in samba-common. Closes: #517204. [ Steve Langasek ] * Add missing debhelper token to libpam-smbpass.prerm. -- Christian Perrier Sun, 15 Mar 2009 12:16:48 +0100 samba (2:3.3.1-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. Closes: #516981 Upstream fixes in that release: - Fixed various spelling errors/typos in manpages Closes: #516047 - Fix renaming/deleting of files using Windows clients. Closes: #516160 - Fix syntax error in mount.cifs(8). Closes: #454799 * Use a slave alternative for smbstatus.1 even though that manpage is not provided by samba4 [ Jelmer Vernooij ] * Fix slave links for manual pages in samba-common. Closes: #517204. [ Steve Langasek ] * Add Vcs-{Browser,Svn} fields to debian/control. * When populating the sambashare group, it's not an error if the user simply doesn't exist; test for this case and let the install continue instead of aborting. LP: #206036. * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.files, debian/rules: provide a config block for the new PAM framework, allowing this PAM module to auto-configure itself * debian/control: make libpam-smbpass depend on libpam-runtime (>= 1.0.1-2ubuntu1) for the above * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix wrong detection of the GNU ld version, so that the symbol export scripts will be properly applied when building. * refresh debian/libsmbclient.symbols for 3.3.1. -- Steve Langasek Mon, 02 Mar 2009 00:30:35 -0800 samba (2:3.3.0-4) unstable; urgency=low [ Steve Langasek ] * Build-Depend on libcap2-dev. Closes: #515851. * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype for cache_path, which causes nearly undiagnoseable crashes when building with -fPIE, because of a wrong return type! LP: #330626. [ Debconf translations ] * Belarusian added. Closes: #516052. * Traditional Chinese updated. Closes: #516594 * Swedish updated. Closes: #516681. [ Mathieu Parent ] * enable clustering by default (CTDB). Closes: #514050 -- Steve Langasek Tue, 24 Feb 2009 16:58:58 -0800 samba (2:3.3.0-3) unstable; urgency=low [ Steve Langasek ] * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable. * Make samba conflict with samba4, not with itself. [ Debconf translations ] * Vietnamese updated. Closes: #515235. * Slovak updated. Closes: #515240. -- Steve Langasek Mon, 16 Feb 2009 07:15:47 -0800 samba (2:3.3.0-2) unstable; urgency=low * Upload to unstable -- Christian Perrier Sat, 14 Feb 2009 13:38:14 +0100 samba (2:3.2.5-4) unstable; urgency=low * Fix segfault whan accessign some NAS devices running old versions of Samba Closes: #500129 * Fix process crush when using gethostbyname_r in several threads Closes: #509101, #510450 -- Christian Perrier Thu, 08 Jan 2009 05:59:17 +0100 samba (2:3.2.5-3) unstable; urgency=high * Security update * Fix Potential access to "/" in setups with registry shares enabled This fixes CVE-2009-0022, backported from 3.2.7 * Fix links in HTML documentation index file. Closes: #508388 * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new file in the diff. Thanks to the release managers for spotting it -- Christian Perrier Sun, 21 Dec 2008 08:09:31 +0100 samba (2:3.2.5-2) unstable; urgency=low * Fix typo in bug number in a comment for the default smb.conf file Closes: #507620 * Document the need to set appropriate permissions on the printer drivers directory, in the default smb.conf file. Also change the example group from ntadmin to lpadmin Closes: #459243 * Add missing rfc2307.so and sfu*.so links that prevent using the 'winbind nss info' feature properly Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for the patch. Closes: #506109 -- Christian Perrier Sat, 13 Dec 2008 13:56:07 +0100 samba (2:3.2.5-1) unstable; urgency=high * New upstream version. Security-only release. This addresses CVE-2008-4314: potentially leaking arbitrary memory contents to malicious clients. * Better document cases where using a "master" file for smb.conf is a bad idea. Closes: #483187 * Insert example "add machine script" and "add group script" scripts in the default smb.conf. Closes: #349049 * Move homepage URL to Homepage filed in debian/control -- Christian Perrier Thu, 27 Nov 2008 11:36:35 +0100 samba (2:3.3.0-1) experimental; urgency=low * New upstream release. Fixes the following bugs: - smb file deletion gvfs. Closes: #510564 - smbclient du command does not recuse properly. Closes: #509258 - mention possible workgroup field in credential files in mount.cifs(8) Closes: #400734 - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init Closes: #489656 - describe '-g' option in smbclient man page. Closes: #510812 - fix swat status table layout. Closes: #511275 [ Jelmer Vernooij ] * Use alternatives for the smbstatus, nmblookup, net and testparm binaries and various data files in samba-common to allow installation of Samba 3 together with Samba 4. * Add myself to uploaders. [ Christian Perrier ] * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base, smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to libsmbclient's symbols file with 3.3.0 as version number * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as version number -- Christian Perrier Fri, 30 Jan 2009 21:41:49 +0100 samba (2:3.3.0~rc2-4) experimental; urgency=low [ Steve Langasek ] * Revert one of the template depersonalization changes from the -2 upload, because it loses important context [ Christian Perrier ] * Use double quotation marks in debconf templates * Add 'status" option to init scripts. Thansk to Dustin Kirkland for providing the patch. Closes: #488275 * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997 * [Lintian] Add ${misc:Depends} to dependencies of binary packages that didn't have it already as we're using debhelper in the source package * [Lintian] Don't ignore errors in swat.postrm * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config and samba-common.config * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5) Closes: #512843 [ Debconf translations ] * Asturian added. Closes: #511730 -- Christian Perrier Sat, 24 Jan 2009 16:04:57 +0100 samba (2:3.3.0~rc2-3) experimental; urgency=low * Fix around the libsmbclient/libsmbclient-dev descriptions, which got swapped in the last upload. * Drop a boilerplate sentence from the samba-common, smbclient, swat, samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions that's not relevant for these packages. * Hyphenate "command-line" in the smbclient short description. * Fix up the smbclient description, which got crossed with the smbfs one. * Fix the smbfs description, which was not actually fixed in the previous upload. Really closes: #496206. * Further minor adjustments to the description of the swat package. * Fix various inaccuracies in the winbind package description. * Clarify in the description that samba-tools are extra, only useful for testing. -- Steve Langasek Tue, 30 Dec 2008 18:42:05 -0800 samba (2:3.3.0~rc2-2) experimental; urgency=low [ Steve Langasek ] * Handle clearing out netbios settings whenever the DHCP server has gone away. Closes: #299618. [ Christian Perrier ] * Point the correct document about password encryption in debconf templates Corrected in translations as well. Closes: #502838 * Reword debconf templates to avoid mentioning the local host as a "server". Closes: #171177 * Use this opportunity for other minor rewording: - replace "SMB" by "SMB/CIFS" - more strongly discouraging the use of plain text passwords - unpersonnalization * Reword the libpam-smbpass package description Thanks to Justin B. Rye for the very useful suggestions Closes: #496196 * Improve the package descriptions by rewording the description overhaul Also improve the specific information for samba and samba-dbg Thanks again to Justin B. Rye for the invaluable help Closes: #496200 * Improve libsmbclient package description. Closes: #496197 * Improve libwbclient0 package description. Closes: #496199 * Improve samba-doc package description. Closes: #496202 * Improve samba-tools package description. Closes: #496203 * Improve samba-common package description. Closes: #496204 * Improve smbclient package description. Closes: #496205 * Improve smbfs package description. Closes: #496206 * Improve swat package description. Closes: #496207 * Improve winbind package description. Closes: #496208 * Improve samba-doc-pdf package description. Closes: #496211 * Update French debconf translation -- Christian Perrier Mon, 29 Dec 2008 11:50:04 +0100 samba (2:3.3.0~rc2-1) experimental; urgency=low * New upstream release -- Christian Perrier Wed, 17 Dec 2008 08:22:18 +0100 samba (2:3.3.0~rc1-2) experimental; urgency=low * Provide idmap_adex and idmap_hash in winbind. Thanks to Jelmer Jaarsma for reporting and providing a patch -- Christian Perrier Thu, 04 Dec 2008 19:59:23 +0100 samba (2:3.3.0~rc1-1) experimental; urgency=low * New upstream release -- Christian Perrier Fri, 28 Nov 2008 10:51:32 +0100 samba (2:3.3.0~pre2-1) experimental; urgency=low * New upstream release. -- Christian Perrier Fri, 07 Nov 2008 20:52:36 +0100 samba (2:3.2.4-1) unstable; urgency=low [ Steve Langasek ] * New upstream release. - debian/rules: we don't need to move cifs.upcall around, it's now installed to the right place upstream. - Fixed in this release: - typo in cifs.upcall.8. Closes: #501499 [ Christian Perrier ] * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for the patch. Closes: #499359 -- Christian Perrier Sat, 18 Oct 2008 08:20:31 +0200 samba (2:3.2.3-3) unstable; urgency=low [ Steve Langasek ] * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing this out. Closes: #497857. * Georgian debconf translation added. Closes: #498426 * Polish debconf translation added. Thanks to Łukasz Paździora. [ Jelmer Vernooij ] * Add ldb-tools to Suggests: of samba. Closes: #488384 -- Christian Perrier Fri, 03 Oct 2008 20:37:19 +0200 samba (2:3.2.3-2) unstable; urgency=low [ Christian Perrier ] * Fix FTBFS on GNU/kFreeBSD. Closes: #496880 -- Steve Langasek Sat, 30 Aug 2008 00:46:07 -0700 samba (2:3.2.3-1) unstable; urgency=high * High-urgency upload for security fix * New upstream release - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default" Closes: #491881 - Fix the default permissions on ldb databases. Addresses CVE-2008-3789; closes: #496073. - debian/rules, debian/smbfs.files: build with cifs.upcall, newly introduced to replace cifs.spnego - debian/rules: no more need to rename libsmbclient.so to libsmbclient.so.0, or libwbclient.so to libwbclient.so.0 [ Noèl Köthe ] * fixing lintian warning "build-depends-on-1-revision" -- Steve Langasek Wed, 27 Aug 2008 10:19:59 -0700 samba (2:3.2.1-1) unstable; urgency=low [ Steve Langasek ] * Build-depend on keyutils only on the linux archs. Closes: #493401. * New patch debian/patches/shrink-dead-code.patch: throw all .o files into a .a archive as a first pass before linking the final executables, so that the executables don't end up with quite so much unused code bloating the system. Not applied to net or ntlm_auth, which have particularly hairy linking needs. Partially addresses: bug #474543; no code was harmed in the making of this patch. * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports. [ Christian Perrier ] * New upstream release - Fix trusted domain handling in Winbindd. Closes: #493752 - Fix for print jobs that continued to show as active after printing had completed. Closes: #494899. -- Steve Langasek Thu, 14 Aug 2008 16:13:24 -0700 samba (2:3.2.0-4) unstable; urgency=low * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch that went missing somehow, causing samba to look for secrets.tdb in /etc/samba instead of /var/lib/samba where it's been for years. No migration handling added, because this was only present in unstable for about a day. Thanks to Rick Nelson for pointing this out. -- Steve Langasek Mon, 21 Jul 2008 17:39:48 -0700 samba (2:3.2.0-3) unstable; urgency=low * Upload to unstable. * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro and Makefile.in to properly avoid linking .a libraries into other .a libraries, since this bloats the libraries without providing any useful functionality. * Version the build-dependency on libtalloc-dev, to ensure we're building against a package with the right symbols. * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get more fine-grained versioned library dependencies * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols have been added. * Re-add docs/registry to samba-doc, restored upstream * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it belongs according to the FHS. Closes: #454770. -- Steve Langasek Sun, 20 Jul 2008 15:38:10 -0700 samba (2:3.2.0-2) experimental; urgency=low * Fix up the copyright file to correctly document that we're now under GPLv3, not GPLv2. -- Steve Langasek Tue, 08 Jul 2008 12:21:47 -0700 samba (2:3.2.0-1) experimental; urgency=low [ Christian Perrier ] * New samba-tools package to provide all "torture" tools: smbtorture msgtest masktest locktest locktest2 nsstest vfstest pdbtest talloctort replacetort tdbtorture smbconftort * Upgrade Standard to 3.8.0 (checked) * Merged from unstable: * Drop "invalid users = root" from the default smb.conf file as it differs from upstream's behaviour and upstream is fairly noisy about this choice of ours. Closes: #462046 * Drop commented "guest account = nobody". This is already upstream's default * Remove versioned Build-Depends when satisfied in etch (actually all versioning in Build-Depends) * Remove Conflicts with non-existing packages * Drop dpkg-dev and binutils from Build-Depends, since the versioned build-dep is no longer needed and these are both Build-Essential * Mini-policy for settings in smb.conf: - don't explicitly set settings to their default value - commented settings with the default value are commented with "#" - commented settings with a non-default value are commented with ";" * Apply this policy to "socket options". Closes: #476104 * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical libsmbclient.so.0 as upstream doesn't assign versions * Add idmap_*(8) man pages (idea taken from SerNet packages) * Create the entire set of directories needed by clients for Point-and-Click printing (including old clients!) in /var/lib/samba/printers (idea taken from SerNet packages) * Update copyright and README.debian information for current and past maintainers. Remove redundant mention of Tridge (the copyright is enough) * Add doc-base files for samba-doc-pdf. Closes: #451685 * add a soft dependency on slapd in init script to allow proper operation when dependency-based boot sequence is enabled. Thanks to Petter Reinholdtsen for reporting and providing a patch Closes: #478800 * Rename libcupsys2-dev to libcups2-dev in build dependencies * Localize SWAT in German. Closes: #487681 [ Debconf translations ] * Merged from unstable: * Kurdish. Closes: #480151 * Romanian updated. Closes: #488709. [ Steve Langasek ] * New upstream release * Merged from unstable: * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups server when we know that no printers are configured. Closes: #479512. [ Jelmer Vernooij ] * Merged from unstable: * Fix bashism in smbtar. (Closes: #486056) [ Peter Eisentraut ] * Merged from unstable: * Removed myself from Uploaders -- Christian Perrier Sun, 06 Jul 2008 09:59:07 +0200 samba (2:3.2.0~rc2-1) experimental; urgency=low [ Christian Perrier ] * New upstream release [ Steve Langasek ] * Enable building of cifs.spnego for the smbfs package, adding a build-dependency on keyutils-dev, to allow kerberos-based authentication of cifs mounts. Closes: #480663, LP: #236830. -- Christian Perrier Thu, 12 Jun 2008 17:17:38 +0200 samba (2:3.2.0~rc1-2) experimental; urgency=low * Reupload to experimental. Sigh. -- Christian Perrier Sat, 31 May 2008 11:08:14 +0200 samba (1:3.2.0~rc1-1) unstable; urgency=low * New upstream version * debian/samba-doc.doc-base.samba-using: index file is no named toc.html -- Christian Perrier Fri, 30 May 2008 20:22:57 +0200 samba (1:3.2.0~pre3-1) experimental; urgency=low * New upstream version * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream * docs/registry removed from samba-doc as missing from upstream tarball (upstream bug #5421) * debian/samba-doc.doc-base.samba-using: The index (and only) file is now book.html -- Christian Perrier Sat, 26 Apr 2008 08:20:21 +0200 samba (1:3.2.0~pre2-2) experimental; urgency=low [ Christian Perrier ] * Upload to experimental with an epoch as the earlier version accidentally went to unstable. [ Peter Eisentraut ] * Removed myself from Uploaders -- Christian Perrier Sun, 06 Apr 2008 20:38:35 +0200 samba (3.2.0~pre2-1) unstable; urgency=low * New upstream (pre-)release. It closes the following bugs: - typos in net.8. Closes: #460487, #460491 - mention insmb.conf(5) that logging still occurs when "syslog only" is enabled and "syslog=0". Closes: #311300 - bad link in HTML docs. Closes: #358479 - enhance a useless and confusing debug message in pdb_ldap Closes: #448546 - mention the correct default debug level in smbclient(1) Closes: #292371 - no longer mention that "ip" parameter can use the host name in mount.cifs(8). Closes: #296057 - wrong spelling of "its own" in source comments fixed Closes: #448686 - fix "ldapsam_getgroup: Did not find group" debug message Closes: #448546 - fix smbclient(1): useless use of cat. Closes: #429349 [ Steve Langasek ] * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from 3.2.0pre2, which ended up with html entity encodings embedded in them by mistake. This patch is expected to go away again for 3.2.0pre3. * fix up the FHS patches for the new upstream release: - debian/patches/fhs-newpaths.patch has been merged upstream, drop it. - debian/patches/fhs-filespaths.patch has been mostly applied; only one path usage remains inconsistent, and a new .tdb has been added with the wrong path so fix this up here too. - debian/patches/fhs-filespaths-debatable.patch: updated for some new uses of lock_path() which we map to cache_path(). - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4 instead of source/configure.in. * debian/patches/smbstatus-locking.patch: merged upstream * debian/patches/smbpasswd-syslog.patch: updated to account for new calls to logging functions * Handle the new libraries available in samba 3.2: ship libwbclient as a shared library, link against the system libtalloc (adding a build-dependency on libtalloc-dev - which is actually sort of kludgy because this only works as long as the system libtalloc has the same soname as the one within the samba tree, this should be fixed to properly build against the system libtalloc), and suppress generation of the tdb and netapi libraries which aren't useful to us right now. -- Christian Perrier Wed, 05 Mar 2008 22:45:28 +0100 samba (2:3.0.31-1) unstable; urgency=medium * New upstream release -- Christian Perrier Sat, 12 Jul 2008 16:57:09 +0200 samba (2:3.0.30-4) unstable; urgency=low [ Christian Perrier ] * Rename libcupsys2-dev to libcups2-dev in build dependencies * Localize SWAT in German. Closes: #487681 [ Jelmer Vernooij ] * Fix bashism in smbtar. (Closes: #486056) [ Jamie Strandboge ] * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly calculate buffer sizes. This bug was introduced in the fix for CVE-2008-1105. Closes: #488688 [ Debconf translations ] * Romanian updated. Closes: #488709. -- Christian Perrier Sun, 06 Jul 2008 11:43:53 +0200 samba (2:3.0.30-3) unstable; urgency=low [ Christian Perrier ] * add a soft dependency on slapd in init script to allow proper operation when dependency-based boot sequence is enabled. Thanks to Petter Reinholdtsen for reporting and providing a patch Closes: #478800 [ Steve Langasek ] * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups server when we know that no printers are configured. Closes: #479512. -- Christian Perrier Tue, 10 Jun 2008 21:03:51 +0200 samba (2:3.0.30-2) unstable; urgency=high * Brown paper bag releae with epoch increased after yet another accidental upload of 3.2.0 to unstable. Sigh and apologies to autobuilders. -- Christian Perrier Sat, 31 May 2008 12:08:50 +0200 samba (1:3.0.30-1) unstable; urgency=high * New upstream release: fix a heap overflow when parsing SMB responses in client code. (CVE-2008-1105). Closes: #483410 -- Christian Perrier Wed, 28 May 2008 22:38:44 +0200 samba (1:3.0.29-1) unstable; urgency=low * New upstream release -- Christian Perrier Thu, 22 May 2008 07:31:55 +0200 samba (1:3.0.28a-3) unstable; urgency=low * The "bug hunting at SambaXP" release * Drop "invalid users = root" from the default smb.conf file as it differs from upstream's behaviour and upstream is fairly noisy about this choice of ours. Closes: #462046 * Drop commented "guest account = nobody". This is already upstream's default * Remove versioned Build-Depends when satisfied in etch (actually all versioning in Build-Depends) * Remove Conflicts with non-existing packages * Drop dpkg-dev and binutils from Build-Depends, since the versioned build-dep is no longer needed and these are both Build-Essential * Mini-policy for settings in smb.conf: - don't explicitly set settings to their default value - commented settings with the default value are commented with "#" - commented settings with a non-default value are commented with ";" * Apply this policy to "socket options". Closes: #476104 * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical libsmbclient.so.0 as upstream doesn't assign versions * Add idmap_*(8) man pages (idea taken from SerNet packages) * Create the entire set of directories needed by clients for Point-and-Click printing (including old clients!) in /var/lib/samba/printers (idea taken from SerNet packages) * Update copyright and README.debian information for current and past maintainers. Remove redundant mention of Tridge (the copyright is enough) * Add doc-base files for samba-doc-pdf. Closes: #451685 * Kurdish debconf translation. Closes: #480151 -- Christian Perrier Wed, 16 Apr 2008 23:14:46 +0200 samba (1:3.0.28a-2) unstable; urgency=low [ Peter Eisentraut ] * Removed myself from Uploaders [ Steve Langasek ] * debian/patches/manpage-encoding.patch: fix up the manpage synopses to not use embedded iso8859-1 non-break spaces, there is a roff escape sequence that we should use instead. Closes: #470844. [ Christian Perrier ] * Reupload with an epoch to supersede an accidental upload of 3.2.0 in unstable -- Christian Perrier Sat, 05 Apr 2008 11:59:23 +0200 samba (3.0.28a-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. This fixes the following Debian bugs: - Prevent nmbd from shutting down when no network interfaces can be located. Closes: #433449 * Debian patches dropped as applied upstream: - make-distclean.patch - linux-cifs-user-perms.patch - cifs-umount-same-user.patch - get_global_sam_sid-non-root.patch - chgpasswd.patch - cups.patch * Fix doc-base section from Apps/Net to Network * Fix copyright in debian/copyright * Updated Standards-Version to 3.7.3 (no changes needed) * [Lintian] No longer use -1 revision for the libacl-dev build dependency [ Steve Langasek ] * Merge smb.conf changes from Ubuntu: - correct an inconsistency inthe winbind enum comment - correct default and example settings to use the canonical names for all options, rather than historical synonyms - clarify the comment for 'max log size'. Thanks to Chuck Short and Richard Laager. * Add an additional sed command to samba-common.postinst to cleverly pick up any shares that have been appended to the default smb.conf and exclude them from the ucf diff. -- Christian Perrier Fri, 14 Mar 2008 21:28:16 +0100 samba (3.0.28-4) unstable; urgency=low [ Steve Langasek ] * Brown paper bag: fix samba-common.files to list all of the smb.conf templates, not just the current one. Closes: #470138. * Drop debian/patches/gcc42-arm-workaround.patch, which should have been dropped in the previous upload -- Steve Langasek Sun, 09 Mar 2008 04:09:26 -0700 samba (3.0.28-3) unstable; urgency=low * Drop the arm optimization workaround, as the compiler is now reported to be fixed. * Add missing eventlogadm(8) manpage. * Refresh the list of Linux architectures from type-handling, to pick up libacl-dev on armel. Closes: #465121. * Convert handling of smb.conf to use ucf, so that we can sanely manage syntax changes going forward. * In the process, fix the dhcp handling to allow proper reconfiguration via debconf. [ Debconf translations ] * Indonesian added. Closes: #469976 -- Steve Langasek Sat, 08 Mar 2008 17:11:16 -0800 samba (3.0.28-2) unstable; urgency=low [ Steve Langasek ] * Drop some further code in samba-common.postinst that's specific to pre-3.0 upgrades. * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script, so we can use bash array variables and cope with arguments containing embedded spaces (such as share names). Thanks to Julian Gilbey for the patch. Closes: #457105. * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler problem by building rpc_parse/parse_prs.o with -O0 on this architecture. Thanks to Martin Michlmayr for helping to pin down the problem file. Closes: #445566. * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is a closer approximation of the semantics with cifs. -- Christian Perrier Sat, 05 Jan 2008 09:46:06 +0100 samba (3.0.28-1) unstable; urgency=high * New upstream release. Security fix * Fix a remote code execution vulnerability when running as a domain logon server (PDC or BDC). (CVE-2007-6015) -- Christian Perrier Tue, 11 Dec 2007 00:12:11 +0530 samba (3.0.27a-2) unstable; urgency=low * debian/patches/disable-weak-auth.patch: disable plaintext authentication on the client, and lanman authentication on both client and server, by default since these are only needed for Win9x or Samba with encrypted passwords disabled and are potential password attack vectors. This change is backported from Samba 3.2. LP: #163194. * Don't build the userspace tools for the deprecated smbfs kernel driver anymore; instead, use a shell wrapper around mount.cifs that translates option names between the smbfs and cifs drivers. Closes: #169624, #256637, #265468, #289179, #305210, #410075; LP: #29413 * debian/panic-action: detect when we're on an Ubuntu system and direct bug reporters to Launchpad instead of to the Debian BTS. Closes: #452940. * debian/samba.init: call log_progress_msg separately for each daemon on stop rather than passing a second arg to log_daemon_msg, for greater compatibility with both Debian and Ubuntu LSB initscript implementations. Closes: #453350. * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of recommends/suggests which is now implemented correctly in apt. Closes: #453144. * Get rid of the build-dependency on type-handling: - add a new target, "update-archs", to be invoked by hand to refresh the list of known Linux architectures for the libacl1-dev build-dep; this avoids the clean target making changes to debian/control - rework the sed line so that it works in-place on debian/control, so we can get rid of debian/control.in as well and just update debian/control directly Closes: #340570. -- Steve Langasek Tue, 04 Dec 2007 18:35:29 -0800 samba (3.0.27a-1) unstable; urgency=low [ Steve Langasek ] * New upstream release - fix regression with smbfs clients, introduced by the security fix in 3.0.27. Closes: #451839. - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream. * Drop the deprecated "printer admin" example from the default smb.conf. Closes: #451273. * Add a *new* debian/patches/cups.patch to *enable* cups as the default printing system, because since the original introduction of this patch in Debian there was a regression upstream that caused cups to never be selected as the default print system. * Set the default value for the workgroup question to "WORKGROUP" in samba-common.templates, not just in the template smb.conf, so that the debconf question comes out right every time; and always treat this as a high-priority debconf question instead of selecting the priority based on whether there's an existing value, since there's now *always* an existing value but the value doesn't tell us anything meaningful about the user's preference. Closes: #451271. * Drop some code from samba.postinst that only applies to upgrades from pre-3.0 (i.e., pre-sarge) packages [ Christian Perrier ] * Update the "built by" part of README.debian * Remove the very outdated parts of README.debian -- Steve Langasek Fri, 23 Nov 2007 13:04:52 -0800 samba (3.0.27-1) unstable; urgency=low * New upstream version - fixes a remote code execution vulnerability when running nmbd as a WINS server. (CVE-2007-5398; closes: #451385) - fixes a buffer overflow in nmbd when running as a domain controller during processing of GETDC logon server requests. (CVE-2007-4572) [ Steve Langasek ] * fhs.patch: net usershares should also be stored under /var/lib, not under /var/run. No transition handling in maintainer scripts, since this feature is not activated by default. * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid() from smbpasswd -L or pam_smbpass when running as non-root, to avoid a foreseeable panic. Closes: #346547, #450738. * usershare.patch: enable "user shares" by default in the server with a default limit of 100, to support user shares on both upgrades and new installs with no need to munge config files. Thanks to Mathias Gug for the patch. Closes: #443230. * On Ubuntu, support autopopulating the sambashare group using the existing members of the admin group; no equivalent handling is done on Debian, because there doesn't seem to be an appropriate template group we can use that wouldn't be considered a privilege escalation for those users. * Update Samba to explicitly use the C locale when doing password changes, to account for Linux-PAM's recently adopted i18n support. Closes: #451272. * Enforce creation of the pid directory (/var/run/samba) in the samba init script, for compatibility with systems that use a tmpfs for /var/run. Closes: #451270. * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd as the default printing system, as CUPS is now the dominant/default printing system for Linux. [ Debconf translations ] * Hebrew added. Closes: #444054 [ Christian Perrier ] * Split fhs.patch into 3 separate patches to make upstream integration easier: - fhs-newpaths.patch: introduce new paths - fhs-filespaths.patch: assign files to new paths - fhs-assignpaths.patch: assign paths to FHS-compatible locations * Compile with DNS update support. Thanks to Matthias Gug for reporting and contributions from Launchpad's #156686 Closes: #449422 -- Steve Langasek Thu, 15 Nov 2007 11:46:17 -0800 samba (3.2.0~pre1-1) experimental; urgency=low * New upstream (pre-)release [ Steve Langasek ] * fhs.patch: net usershares should also be stored under /var/lib, not under /var/run. No transition handling in maintainer scripts, since this feature is not activated by default. * Update smbstatus-locking.patch to use db_open() instead of tdb_open(), per upstream recommendation. * Use talloc_strdup() and talloc_asprintf() instead of static strings in data_path(), state_path(), and cache_path(), as suggested by Volker Lendecke. [ Debconf translations ] * Hebrew added. Closes: #444054 [ Christian Perrier ] * Split fhs.patch into 4 separate patches to make upstream integration easier: - fhs-newpaths.patch: introduce new paths - fhs-filespaths.patch: assign files to new paths - fhs-filespaths-debatable.patch: assign files to new paths (part that seems more difficult to be integrated upstream) - fhs-assignpaths.patch: assign paths to FHS-compatible locations -- Christian Perrier Sun, 21 Oct 2007 09:14:42 +0200 samba (3.0.26a-1) unstable; urgency=low * New upstream release. * Remove the samba-common/unsupported-passdb debconf template and the associated code in samba-common.postinst, that deals with pre-etch versions transition * Remove the samba/tdbsam template and the remaining line referencing it (for no need) in samba.postinst. That code was removed in 3.0.23c-2 and was dealing with pre-3.0 transitions. -- Christian Perrier Sun, 16 Sep 2007 10:16:29 +0200 samba (3.0.26-1) unstable; urgency=high * New upstream release: security update for CVE-2007-4138: incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin. -- Christian Perrier Tue, 11 Sep 2007 19:16:32 +0200 samba (3.0.25c-1) unstable; urgency=low [ Noèl Köthe ] * new upstream released from 2007-08-20 - added smbfs deprecation information to help and manpage Closes: #360384 - fixed winbind leaking file descriptors Closes: #410663 - fixed smbpasswd fails with errorcode SUCCESS as normal user Closes: #155345 [ Christian Perrier ] * Drop the (upstream unmaintained) python bindings (python-samba package) * swat: turn the dependency on samba-doc to a Recommends: Thanks to Peter Eisentraut for dealing with that issue and bringing it back. Closes: #391742 -- Christian Perrier Sun, 26 Aug 2007 14:57:16 +0200 samba (3.0.25b-2) unstable; urgency=low [ Steve Langasek ] * Don't start nmbd if 'disable netbios' is set in the config. Closes: #429429. * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid, set to those of the invoking user, when called as non-root. Closes: #431661. * Fix up fhs.patch for some new FHS regressions: - make sure all references to winbindd_idmap.tdb look in /var/lib/samba - make sure all references to winbindd_cache.tdb look in /var/cache/samba - share_info.tdb belongs in /var/lib/samba; this is a regression introduced in 3.0.23-1, so fix up this path on samba upgrade - move the ADS "gpo" cache directory to /var/cache/samba - move idmap_cache.tdb to /var/cache/samba, and fix up the path on winbind upgrade * linux-cifs-user-perms.patch: also support setting a default uid and gid value when mount.cifs is called as non-root * cifs-umount-trailing-slashes.patch: canonicalize mount point names when umount.cifs is called, to avoid unnecessarily leaving entries behind in /etc/mtab if invoked with a trailing slash in the mount point name * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check in umount.cifs assumed that errors would return a value > 0, when in fact the return value on failure is -1. Correct this assumption, which was allowing any user to unmount shares mounted by other users. * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog() and closelog(), since this will interfere with syslogging behavior of the calling application. Closes: #434372. * swat should depend only on inet-superserver, not update-inetd, per Marco d'Itri. [ Christian Perrier ] * debian/panic-action: bail out if there's no "mail" command Patch from the Ubuntu samba packagers. * debian/smb.conf: use the comment from Ubuntu package for the "valid users" setting of [homes] as a basis for ours. Ubuntu's wording is better. [ Peter Eisentraut ] * Don't ignore errors from make distclean, as per lintian check [ Debconf translations ] * Gujarati updated. Closes: #436215 -- Steve Langasek Fri, 17 Aug 2007 18:38:58 -0700 samba (3.0.25b-1) unstable; urgency=low * New upstream version * Bugs fixed upstream: - correct default mentioned for "store dos attribute" in smb.conf(5) Closes: #367379 - fix typo in pdbedit.c. Closes: #421758 - fixed crashes in idmap_rid. Closes: #428411 - misleading documentation in smb.conf(5). Closes: #218477 - don't crash when no eventlog names are defined in smb.conf Closes: #424683 - typography errors in manpages. Closes: #427865, #418811 - fix compilation and linking of pam_smbpass.so. Closes: #430755 * Drop patches that have been applied upstream: - nmbd-signalling.patch -- Christian Perrier Wed, 27 Jun 2007 15:12:13 +0200 samba (3.0.25a-2) unstable; urgency=low [ Debconf translations ] * Danish updated. Closes: #426773 [ Christian Perrier ] * Clean out some remaining cruft that is not deleted by "make clean". Taken from Ubuntu patches. * Add missing userspace patches to properly pass uid and gid with 2.6 kernels. See #408033 and upstream's #999 for rationale * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue is fixed in 2.4 and 2.6 kernels (2.6 kernels need missing_userspace_bugzilla999.patch, though) Closes: #408033 * Add the samba-common and winbind packages to samba-dbg to get debugging symbols for winbindd, net, etc. * Replace all occurrences of ${Source:Version} by ${$binary:Version} in dependencies. All these were Arch:any depending on Arch:any (the only Arch:any depending on Arch:all already used ${source:Version} [ Steve Langasek ] * Update samba.config to not override user preference on passdb.tdb creation after initial configuration. Closes: #350926. * Drop the last vestiges of the unified samba.patch; this reverts the change for bug #112195 which it's been determined has no actual security benefits, and drops the fix for bug #106976 which is superseded upstream. [ Debconf translations ] * Vietnamese updated. Closes: #426979. -- Christian Perrier Wed, 13 Jun 2007 15:47:06 +0200 samba (3.0.25a-1) unstable; urgency=low [ Christian Perrier ] * New upstream version * Bugs fixed upstream: - password expiration loog on samba domain controllers. Closes: #425083 - no more login on samba servers that are members of samba domains Closes: #425680, #426002 - users no longer have access according to their secondary groups on shares with "force group". Closes: #424629 * Debian packaging fixes: - Enforce building with "--with-ads" and therefore fail when the build can't be done with kerberos support. Closes: #424637 - debian/control: wrap long lines in packages' descriptions - uncomment out use of type-handling in the clean target, because type-handling has been fixed to support the new /usr/share/dpkg/ostable - avoid installing extra COPYING files in /usr/share/doc/* (one was installed along with the pcap2nbench example) * Merge Ubuntu changes: - use of PIDDIR instead of hardcoding it in samba.init and winbind.init * Patches to upstream source: - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory instead of the lock directory. Thanks to C. K. Jester-Young for the patch. Closes: #425640 [ Steve Langasek ] * swat and samba depend on update-inetd instead of on netbase; swat also depends on "openbsd-inetd | inet-superserver", for samba this is only a Suggests. -- Christian Perrier Sun, 27 May 2007 09:30:02 +0200 samba (3.0.25-1) unstable; urgency=high * New upstream version including security fixes * Bugs fixed upstream: - nmbd no longer segfaults on bad interface line Closes: #265577, #386922, #359155, #366800 - documentation issues about displaycharset. Closes: #350790 - documentation makes it clear that case options such as "default case" can only be set on a per-share basis. Closes: #231229 - all occurrences of "encypt" fixed in smb.conf(5) Closes: #408507 - two typos on "account" fixed in source/passdb/pdb_ldap.c and source/utils/pdbedit.c. Closes: #402392 - no longer panic when using the (deprecated) "only user" option in user level security. Closes: #388282 - CVE-2007-2444 (User privilege elevation because of a local SID/Name translation bug) - CVE-2007-2446 (Multiple heap overflows allow remote code execution) - CVE-2007-2447 (Unescaped user input parameters are passed as arguments to /bin/sh allowing for remote command execution) [ Debconf translations ] * Marathi added. Closes: #416802 * Esperanto added. Closes: #417795. * Basque updated. Closes: #418196. * Wolof updated. Closes: #421636 [ Christian Perrier ] * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba before running invoke-rc.d. Closes: #414841 [ Steve Langasek ] * Comment out use of type-handling in the clean target, because type-handling is currently broken in unstable and clean shouldn't be editing debian/control anyway. -- Christian Perrier Mon, 14 May 2007 10:30:15 +0200 samba (3.0.24-6) unstable; urgency=high * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug is still present :/ Fix a missing ] in the regexp for passdb backend checking, really-closes: #415725. -- Steve Langasek Sat, 24 Mar 2007 03:32:46 -0700 samba (3.0.24-5) unstable; urgency=high * The "see what you get for trusting the quality of my packages, release team? Release team, please unblock this package" release. * High-urgency brown-paper-upload for etch-targetted fix for regression introduced in the last version [ Steve Langasek ] * Fixed the regexp used for matching broken passdb backend settings, since we were getting false positives on *all* values. :/ The correct match should be: one or more non-space, non-comma characters, followed by a space or a comma, followed by zero or more spaces, followed by one or more non-space characters. Closes: #415725. [ Debconf translations ] * Nepali * Korean; closes: #414883. * Russian * Arabic * Portuguese * Greek. Closes: #415122 * Norwegian Nynorsk added. * Marathi added. Closes: #416802 -- Steve Langasek Wed, 21 Mar 2007 13:49:46 -0700 samba (3.0.24-4) unstable; urgency=medium [ Steve Langasek ] * Documentation fix for a problem affecting upgrades from sarge: if passdb backend is still a comma- or space-separated list after any attempts at automatic fix-ups, throw a debconf error notifying the user that they'll need to fix this manually. Closes: #408981. [ Debconf translations ] * French * Spanish * Galician; closes: #414605. * Swedish; closes: #414610. * Brazilian Portuguese; closes: #414603. * German; closes: #414630. * Norwegian Bokmål; closes: #414619. * Bulgarian; closes: #414624. * Romanian; closes: #414629. * Tagalog; closes: #414637. * Khmer; closes: #381833. * Thai; closes: #414664. * Slovak; closes: #414665. * Slovenian * Simplified Chinese; closes: #414671. * Japanese; closes: #414673. * Hungarian; closes: #414677. * Dzongkha; closes: #414680. * Estonian; closes: #414679. * Catalan * Malayalam; closes: #414728 * Traditional Chinese; closes: #414730 * Turkish * Italian; closes: #414708 * Finnish; closes: #414736 * Dutch; closes: #414741 * Albanian; closes: #414778. * Czech; closes: #414793. -- Steve Langasek Tue, 13 Mar 2007 16:29:21 -0700 samba (3.0.24-3) unstable; urgency=low [ Christian Perrier ] * Merge some Ubuntu changes: - do not expose the Samba version anymore - default workgroup set to WORKGROUP (default workgroup of Windows workstations) * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch Closes: #394830 * Add commented "winbind enum*" settings in smb.conf This will point users to these important settings which changed their default behaviour between sarge and etch. Closes: #368251 [ Steve Langasek ] * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first time the script is called if the dhcp client was already running at the time of install, and manually reload samba to get the updated config files read. Thanks to Bas Zoetekouw for the patch. Closes: #407408. * While we're at it, use atomic replace for /etc/samba/dhcp.conf just in case someone else reloads samba while the script is running. Low impact, low-risk change. -- Steve Langasek Sun, 11 Mar 2007 23:34:10 -0700 samba (3.0.24-2) unstable; urgency=low * Re-upload with a proper .orig.tar.gz. -- Steve Langasek Mon, 5 Feb 2007 19:55:34 -0800 samba (3.0.24-1) unstable; urgency=high * New upstream release, security update * Fixes for the following security advisories: - Directly affecting Debian: - CVE-2007-0452 (Potential Denial of Service bug in smbd) - Not affecting Debian: - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind NSS library on Solaris) - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin) * Correct paths for the documentation pointers in the default smb.conf file. Thanks to Ted Percival for his care reporting this. Closes: #408898 -- Christian Perrier Mon, 5 Feb 2007 05:27:07 +0100 samba (3.0.23d-4) unstable; urgency=low * Debconf translation updates: - Slovenian added. -- Christian Perrier Wed, 3 Jan 2007 08:43:50 +0100 samba (3.0.23d-3) unstable; urgency=low * Debconf translation updates: - Malayalam added. Closes: #403107 - Tamil added. Closes: #403353 -- Christian Perrier Mon, 1 Jan 2007 10:17:18 +0100 samba (3.0.23d-2) unstable; urgency=low * Build-Conflicts: libfam-dev to avoid problems accessing shares when using GAMIN. Closes: #400617 * Lintian fixes: - Run debconf-updatepo in the clean target to ensure up-to-date PO and POT files - debian/patches/no_unbreakable_spaces_in_man.patch: Replace all non-breakable spaces by regular spaces in man pages. They are encoded in ISO-8859-1 which is not recommended in man pages. This should be submitted upstream. - reformat too long lines in package description -- Christian Perrier Sun, 3 Dec 2006 09:39:29 +0100 samba (3.0.23d-1) unstable; urgency=low * new upstream release (2006-11-15) [ Noèl Köthe ] * updated documentation.patch for 3.0.23d * updated non-linux-ports.patch for 3.0.23d * updated adapt_machine_creation_script.patch for 3.0.23d * updated autoconf.patch for 3.0.23d [ Debconf translations ] * Added Bosnian. Closes: #396634 * Added Bulgarian. Closes: #397773 -- Noèl Köthe Thu, 16 Nov 2006 13:55:26 +0100 samba (3.0.23c-4) unstable; urgency=low [ Debconf translations ] * Added Greek. * Added Gujarati. Closes: #394430 * Added Korean. Closes: #394509 * Added Nepali. * Updated Czech (typo fixed). * Added Wolof. Closes: #396079 -- Christian Perrier Sun, 5 Nov 2006 09:42:40 +0100 samba (3.0.23c-3) unstable; urgency=low [ Debconf translations ] * Updated Catalan; thanks to Guillem Jover for his help * Updated Russian. * Updated Spanish. Add a missing word and correct the copyright header * Updated Vietnamese. Closes: #394164 * Added Albanian. Closes: #393777 * Added Chinese (Traditional). * Added Thai. -- Christian Perrier Sat, 21 Oct 2006 10:44:11 +0200 samba (3.0.23c-2) unstable; urgency=low [ Debconf translations ] * Updated Swedish. Closes: #386510. * Updated Japanese. Closes: #386534. * Updated Italian. Closes: #386691. * Updated Romanian. Closes: #388254. * Updated German. Closes: #389072. * Updated Brazilian Portuguese. Closes: #389097. * Updated Basque. Closes: #389722. * Updated Turkish. Closes: #390887 * Updated Danish. Closes: #390878 * Updated German. Closes: #390813 * Updated Simplified Chinese. Closes: #390959 * Updated Arabic. * Updated Spanish. Closes: #391735 * Updated Dutch. Closes: #392082 * Added Slovak. Closes: #386847. * Added Finnish. Closes: #390150. * Added Estonian. Closes: #391102. * Added Norwegian Bokmål. Closes: #391692 * Added Hungarian. Closes: #391746 [ Steve Langasek ] * Change the Maintainer field at last to the mailing list... gives our spam rules some testing, in response to popular demand :) * Check for update-inetd on purge before trying to invoke it; closes: #388606. [ Peter Eisentraut ] * Make swat binNMU-safe by using ${source:Version} for dependency on samba-doc * Make samba-common owner of /var/{cache,log,run}/samba, let samba and winbind only delete files they know they're exclusive owners of. Closes: #370718. * Use python-central to manage installation of python-samba. Closes: #386499. (patch by Patrick Winnertz) * Use upstream makefile to install Python module. * Build-Depend on python-dev instead of python-all-dev. * Removed old upgrade support. * Remove possibly leftover comma from "passdb backend" setting in smb.conf on upgrade. Closes: ##383307. * Added libpam-smbpass logcheck file by martin f krafft. Closes: #391487, #391916. [ Christian Perrier ] * Add LSB info to the init script -- Christian Perrier Thu, 12 Oct 2006 18:31:46 +0200 samba (3.0.23c-1) unstable; urgency=low [ Christian Perrier ] * New upstream version * Split out samba/run_mode with "__Choices". [ Noèl Köthe ] * corrected samba override disparity: samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra. [ Debconf translations ] * Updated Galician. Closes: #383001. * Updated Danish. Closes: #383025. * Added Tagalog. Closes: #383039, #383252. * Updated Khmer. * Updated Arabic. * Updated Dzongkha. Closes: #383125. * Updated Vietnamese. Closes: #383126. * Updated Czech. Closes: #384760. [ Peter Eisentraut ] * Preseed configure result for method to detect interfaces in debian/config.cache; the test might otherwise fail if there are no interfaces configured at build time. Closes: #382429. * Refined panic-action script text. Closes: #382500. -- Noèl Köthe Mon, 04 Sep 2006 12:10:28 +0200 samba (3.0.23b-2) unstable; urgency=low [ Debconf translations ] * Updated Romanian. Closes: #382358 * Updated Dzongkha. Closes: #382448, #382948 * Updated Basque. Closes: #382456 * Added Simplified Chinese. Closes: #382489 [ Peter Eisentraut ] * Remove no longer functioning "guest" value from "passdb backend" setting in smb.conf on upgrade. Closes: #382296 [ Steve Langasek ] * Drop code and debconf questions specific to upgrades from samba <= 2.2. * Reword some debconf translations as discussed on the list. * Rerun debconf-updatepo. * Switch debian/ca.po to UTF-8. * Restore some reverted strings for Galician, Czech, Brazilian Portuguese, Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese. * Update translations for Brazilian Portuguese, Spanish, French, Italian, Catalan, and Portuguese. -- Peter Eisentraut Mon, 14 Aug 2006 19:04:31 +0200 samba (3.0.23b-1) unstable; urgency=low * New upstream release [ Debconf translations ] * Updated Galician. Closes: #381988 -- Noèl Köthe Tue, 08 Aug 2006 22:28:00 +0200 samba (3.0.23a-1) unstable; urgency=medium * New upstream release * Fixes the following Debian bugs: - winbind: panic()s when started outside of a domain context. Closes: #337070 - Make smbclient -L use RPC to list shares, fall back to RAP. Closes: #168732 - Potential hang in nmbd. Upstream bug #3779. Closes: #367472 - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780). Closes: #367507 - Erroneous permissions checks after 3.0.10 -> 3.0.14a (upstream #2591). Closes: #307626 - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070 - ImportError exception raised when trying to import samba.smb (upstream #3567). Closes: #350050 - Changed references from pam_pwdb to pam_unix (upstream #3225). Closes: #206672 - SWAT segfault (upstream #3702). Closes: #363523 [ Adam Conrad ] * Fix typo in smb.conf that causes all samba apps to whine. Closes: #369782 * Add myself to Uploaders, on the off chance that I might upload. [ Debconf translations ] * Add Galician translation of debconf templates. Closes: #361204, #369403 * Add Basque translation of debconf templates. Closes: #375104 * Add Romanian translation of debconf templates. Closes: #379246 * Add Khmer translation of debconf templates. Closes: #381833 * Add Dzongkha translation of debconf templates. * Updated Russian. Closes: #369375 * Updated Czech. Closes: #369408 * Updated Japanese. Closes: #369457 * Updated Italian. Closes: #369587 * Updated Swedish. Closes: #369730 * Updated Dutch. Closes: #376515 * Updated Vietnamese. Closes: #381557 * Updated French. * Updated Brazilian. * Updated Portuguese. Closes: #372632 * Updated Arabic. [ Christian Perrier ] * Add dependency on procps for samba, as ps is used in init scripts. Thanks to Bastian Blank for reporting. Closes: #365618 * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's Reference * Add support for /etc/default/winbind. Closes: #262313, #374411 Thanks to Guido Guenther for the old patch and to Jérôme Warnier for reminding us about it. * Compile with --with-cifsmount which is now needed to properly compile mount.cifs and umount.cifs. See samba bug #3799 [ Peter Eisentraut ] * Use debian/compat instead of DH_COMPAT * Updated Standards-Version to 3.7.2 (no changes needed) * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the required ldconfig calls appear in the maintainer scripts * Adjusted debian/rules to get 3.0.23rc1 to build * Updated to debhelper level 5 * Rearranged dh_strip calls so that build succeeds with DEB_BUILD_OPTIONS=nostrip. Closes: #288995 * Create /var/spool/samba and use it as default printer spool. Closes: #275241 * Made winbind init script more careful about returning proper exit code * Added winbindd_priv group as owner of winbindd_privileged directory. Closes: #307257 * Python transition preparations: renamed package to python-samba, removed hardcoded references to Python version 2.3. Closes: #380939 * Removed unwanted swat debconf warning * Put localized swat messages into /usr/share/samba, where swat looks for them. Closes: #376991 -- Peter Eisentraut Mon, 7 Aug 2006 23:00:49 +0200 samba (3.0.22-1) unstable; urgency=medium [ Steve Langasek ] * New upstream release - CAN-2006-1059: fixes an information leak in logfiles of systems using winbind with log level >= 5. * Fix a typo in the default smb.conf (closes: #354495). [ Noèl Köthe ] * replacing SMB with SMB/CIFS in the descriptions like named on the samba.org webpage. Closes: #356335 -- Steve Langasek Sun, 12 Mar 2006 22:40:28 +0100 samba (3.0.21c-1) unstable; urgency=low * New upstream release * add a few logon-related parameters as good and safe examples for *DC-type settings. Closes: #349051 * add an example "add user script". Closes: #349050 * drop outdated information from the smbfs package description Closes: #352828 -- Christian Perrier Sat, 25 Feb 2006 11:58:45 +0100 samba (3.0.21b-1) unstable; urgency=low * The "Tridge" release: celebrates the 2005 Free Software Award winner * New upstream release * Upstream bugs fixed by the new upstream release: - Support changing expired passwords in pam_winbindd. Closes: #258302 - vfs_full_audit fixes for multiple connections. Closes: #348419 - crashes of smbd in security=server mode Closes: #346045, #346069, #350598, #351448 [ Peter Eisentraut ] * Put correct paths for Debian installations into the man pages, and remove outdated swat setup instructions therein. Closes: #321005 * Fix lintian overrides and install them into the right packages. * Remove swat inetd registration in remove, not purge. Closes: #313214 * Add findsmb script. Closes: #231806 * Fix sonames of libnss_win{bind,s}.so. Closes: #333290 * Remove autoconf build dependency. * Remove remnants of old patch system. * Install smbumount setgid root. Closes: #253437 * Add watch file. * Activate kernel oplocks. Closes: #218511 * Disable PIE compilation. Closes: #346416 [ Christian Perrier ] * activate building of idmap_rid. Closes: #284681. Thanks to Ubuntu patches * activate building of idmap_ad. Closes: #341814 * modify the long description of the libsmbclient-dev package to avoid repeating the long description. Thanks, linda. [ Steve Langasek ] * Also enable setresuid()/setresgid() on alpha and sparc now that support for Linux 2.2 is dropped. -- Christian Perrier Mon, 6 Feb 2006 07:02:20 +0100 samba (3.0.21a-4) unstable; urgency=low [ Peter Eisentraut ] * Add umount.cifs. Closes: #340967 * Really make mount.cifs and umount.cifs suid root. Closes: #340966 [ Christian Perrier ] * Add "bind interfaces only" and "interfaces" options (commented) to the default smb.conf file. Closes: #349043 [ Steve Langasek ] * Add missing changes to source/include/config.h.in into the autoconf.patch, so that samba looks for files in /var/lib/samba like it's supposed to instead of in /var/run/samba! Closes: #349372, #349464. -- Steve Langasek Mon, 23 Jan 2006 00:59:20 -0800 samba (3.0.21a-3) unstable; urgency=low * Add Build-Depends on quilt (>= 0.40 as we use quilt.make) -- Christian Perrier Sat, 21 Jan 2006 23:02:32 +0100 samba (3.0.21a-2) unstable; urgency=low [ Christian Perrier ] * Switch to quilt for patches management. Refresh all patches so that they apply cleanly. Closes: #345557 * debian/patches/adapt_machine_creation_script.patch: - adapt example machine creation script to Debian. Closes: #346234 * winbind.dirs: - added /var/run/samba. Closes: #347585 [ Peter Eisentraut ] * swat.links: - file added. Closes: #346001 [ Noèl Köthe ] * fixed typo in panic-script. Closes: #348410 [ Steve Langasek ] * debian/patches/autoconf.patch: - move changes to autogenerated files into their own patch now that we've lost the script that was calling autogen.sh for us; this also helps make debian/rules clean just a little bit cleaner. * debian/patches/fhs.patch: - fix new references to registry.tdb (closes: #348874). - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba where they belong -- Christian Perrier Fri, 20 Jan 2006 14:20:35 +0100 samba (3.0.21a-1) unstable; urgency=low [ Christian Perrier ] * *Really* make samba-doc suggest samba-doc-pdf. This change finally did not make it in the previous release. [ Noèl Köthe ] * new upstream release 3.0.21a - removed smbsh.1 from debian/rules - added new smbclient programm smbget (with conflict/replace to existing Debian smbget package) - added libsmbclient.7 to libsmbclient package - added umount.cifs.8 to smbfs package - added pam_winbind.7 to winbind package - added new /usr/bin/eventlogadm to samba package which is documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt - fixed "cd command fails in smbclient". Closes: #307535 - fixed "file descriptor leak". Closes: #339564 - fixed "smbclient(1) doesn't list same options as smbclient usage statement". Closes: #154184 - fixed "typo in smbmount.8". Closes: #260673 - fixed "smbmount manual page doesn't have a link to smbumount". Closes: #297535 - fixed "smb.conf man page references non-existent BROWSING.txt file". Closes: #316458 - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480 - fixed "fails to manage groups containing spaces". Closes: #299592 - corrected nonpic-libsmbclient.patch to apply - corrected fhs.patch to apply * added myself to Uploaders * Rewording of the panic action script. Closes: #335051 * added missing swat translation to swat package -- Noèl Köthe Sun, 01 Jan 2006 12:45:33 +0100 samba (3.0.20b-4) unstable; urgency=low [ Christian Perrier ] * Remove the smbldap-tools-* directory from the examples of samba-doc as these tools exist as an independent package. Closes: #341934 * Swedish debconf translation update. Closes: #342022 * Preserve the local admin settings for run_mode in /etc/default/samba when upgrading. Closes: #234038, #267988, #269735 * Winbind also must depend on lsb-base. Closes: #343379 * Enable swat in inetd when installing it and remove it when uninstalling. Closes: #87905, #230936, #268429 [ Peter Eisentraut ] * Added separate samba-doc-pdf package, suggested by samba-doc. Closes: #281971 * Removed duplicate documentation in swat package, symlinked to samba-doc; swat now depends on samba-doc. Closes: #233447 -- Christian Perrier Tue, 20 Dec 2005 17:08:20 +0100 samba (3.0.20b-3) unstable; urgency=low [ Steve Langasek ] * Drop the FHS transition code from the samba postinst, since it's not needed for upgrades from sarge (and most of it not for upgrades from woody). [ Noèl Köthe ] * libpam-smbpass dependency on samba-common Closes: #297923 * Updated swedish debconf translation. Closes: #335784 * Added Recommends: smbldap-tools. Closes: #227675 [ Peter Eisentraut ] * Added doc-base support. Closes: #55580 * Fixed dh_installexamples call so the debian/*.examples files are actually used. * Patched libpam-smbpass README to refer to examples directory. Closes: #215771 [ Christian Perrier ] * Add a working passwd chat line to the default smb.conf file Closes: #269746 * Add the profiles binary and man page to the shipped files. Closes: #225494 * Add a dependency on samba-common for winbind and force versions to match Closes: #273007, #264855 * Add /var/log/samba to winbind directories. Closes: #340833 * Lintian cleaning: - Add a few lintian overrides to avoid lintian complaining for things done on purpose or just because it makes wrong assumptions - Corrected FSF address in debian/copyright - Make swat depend on netbase as it uses update-inetd in its postinst script - Correct shebang lines in config scripts - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc - Minor correction in libsmbclient-dev description to avoid strictly repeating the short description in the long description - Call confmodule in swat.postinst as this is the only way to guarantee that the config script is run in all cases -- Christian Perrier Sat, 3 Dec 2005 07:30:40 +0100 samba (3.0.20b-2) unstable; urgency=low * Don't build with -gstabs any more; -g no longer gives a problematic size hit, and -gstabs is no longer supported on ia64. -- Steve Langasek Wed, 19 Oct 2005 19:02:44 -0700 samba (3.0.20b-1) unstable; urgency=low * Christian Perrier: - Debconf translations: - Added Vietnamese. Closes: #317876 - Updated German. Closes: #322907 * Steve Langasek: - Use ${misc:Depends} in debian/control instead of depending on debconf directly, allowing use of cdebconf as an alternative. Closes: #332088. * Noèl Köthe - corrected libsmbclient priority to optional. Closes: #310045 - corrected the path of ServerType.html in smb.conf. Closes: #296500 - updated Standards-Version to 3.6.2 (no changes needed) - added homepage to description - switched init scripts (samba and winbind) to lsb-functions (took patches from ubuntu) - added Swedish. Closes: #331437 - removed outdated "guest" value in "passdb backend" in default smb.conf Closes: #289519 - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8) is; Replaces: all previous versions of samba. Closes: #253603 - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515 - support for Windows Vista. Closes: #323489 - Mac OS Tiger Problem fixed. Closes: #309836 - BUG 2688: re-implement support for the -P (--port) option. Closes: #307746 - "man smb.conf" warnings fixed. Closes: #266320 - testprns removed by upstream so removed in samba.files - corrected docs/*.pdf names (samba-doc.docs) - corrected diagnosis.html path (samba.docs) - removing patches which are included upstream: dos7-xcopy-always-copies-files.patch (* BUG 2622: Remove DPTR_MASK as it makes no sense.) hide-special-file-fix.patch (* Hide dot files and directory logic fixes.) rap-printing-bigendian.patch (* BUG 1998: Correct byte ordering bug when storing 16-bit RAP print job ids.) smbclient-vfat-loop.patch smbclient-vfat-loop2.patch (* BUG 2698: Fix infinite listing loop in smbclient caused by an invalid character set conversion.) - fixed the following patches which didn't applied cleanly fhs.patch non-linux-ports.patch -- Steve Langasek Tue, 18 Oct 2005 19:02:21 -0700 samba (3.0.14a-6) unstable; urgency=low * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9; add a versioned build-depend accordingly. Closes: #315955 * Switch to libreadline5. -- Steve Langasek Fri, 1 Jul 2005 00:13:12 -0700 samba (3.0.14a-5) unstable; urgency=low * Fix libsmbclient.a to be built as non-PIC instead of PIC. Closes: #279243. -- Steve Langasek Wed, 8 Jun 2005 05:46:52 -0700 samba (3.0.14a-4) unstable; urgency=high * Last-minute upload for sarge, because I don't listen to anything that RM guy says * Patch smbmount to strip CAP_UNIX out of the capabilities passed to the kernel when uid, gid, dmask, or fmask options have been specified; this keeps the mount permissions from changing out from under the user when upgrading to a server (or to a kernel) that supports unix extensions. Closes: #310982. * Second patch to smbclient search continuation logic, from upstream: preserve the original UCS2 filename to guard against lossy conversions, and break out if we find ourselves looping. Closes: #311157. * Upstream fix to make print job cancellations work on big-endian systems when talking to RAP-style clients (i.e., smbclient). Closes: #311213. * Add build-dependency on libpopt-dev, so that we consistently use the system popt lib instead of the bundled one. -- Steve Langasek Thu, 2 Jun 2005 07:02:46 -0700 samba (3.0.14a-3) unstable; urgency=high * Urgency set to high for a bug that makes smbclient/libsmbclient /almost/ mostly unusable * Fix smbclient's search continuation logic so that it works correctly against 2K servers offering VFAT-hosted shares; many thanks to Jeremy Allison for the timely upstream fix. Closes: #309798. * Update pt_BR debconf translation. Thanks to Andre Luis Lopes . (closes: #308510) * Add Russian debconf translation, thanks to Yuriy Talakan . (closes: #310063) -- Steve Langasek Thu, 26 May 2005 23:37:57 -0700 samba (3.0.14a-2) unstable; urgency=low * Point the sense of the file_is_special() check right way around; thanks to Matthijs Mohlmann for catching this. Closes: #305747. * debian/patches/dos7-xcopy-always-copies-files.patch: Fix the MS-DOS 7 XCOPY copying files over and over bug Closes: #309003 * Steve Langasek : - Add Christian Perrier to Uploaders:. Thanks, Christian :) -- Steve Langasek Sun, 8 May 2005 04:43:21 -0700 samba (3.0.14a-1) unstable; urgency=low * New upstream version - A more complete upstream fix for missing files in file listings, should really give us working (closes: #302771); drop xp-missing-files.patch, which has been superseded. * Use the right path when removing mount.cifs binary in the clean target. Closes: #303318. -- Steve Langasek Mon, 18 Apr 2005 03:22:29 -0700 samba (3.0.11-1) unstable; urgency=high * New upstream version - Fixes duplicated entry in swat(8) manpage (closes: #292957). - Fix queue handling so that processes serving print clients don't spin off into infinity and clobber the system (closes: #274969). - Make sure we use C-locale toupper/tolower functions for case conversion, since Turkish pairing rules are incompatible (closes: #286174). * Fix logrotate script to exit true instead of false when nmbd.pid is missing (closes: #287263). * Added Portuguese debconf translation. Thanks to Miguel Figueiredo . (closes: #286375) * Added Italian debconf translation. Thanks to Luca Monducci . (closes: #284125) * Add support for building on the Debian BSD and Hurd ports; thanks to Robert Millan for the patch. (closes: #266693) * debian/patches/xp-missing-files.patch: import patch from upstream to fix missing entries in directory listings when talking to WinXP servers (closes: #297771). -- Steve Langasek Wed, 23 Mar 2005 00:13:16 -0800 samba (3.0.10-1) unstable; urgency=high * New upstream release. - CAN-2004-1154: integer overflow can lead to remote code execution by authenticated users; closes: #286023. * High-urgency upload for sarge-targetted RC bugfix. * Sync the fhs.patch to samba 3.0.10. * Install mount.cifs suid root, to make user mounts possible (closes: #283819). * debian/patches/cups.patch: Change the default printing system, so we can compile in CUPS support without making it the default -- CUPS is not a reasonable default on Debian, at least for sarge. -- Steve Langasek Fri, 17 Dec 2004 11:56:01 -0800 samba (3.0.9-1) unstable; urgency=low * New upstream release - Fixes Win9x printing; closes: #283530, #282571, #283818. - Fixes a problem with setting dosmodes on filesystems without ACL support; closes: #283661. - Drop ldapsam_compat.patch, redundant now that a fix is integrated upstream -- Steve Langasek Thu, 2 Dec 2004 01:11:39 -0800 samba (3.0.8-2) unstable; urgency=low * Fix the module paths for python2.3-samba so that "import foo from samba" works, and include the __init__.py glue; closes: #222867). * Enable quota support; closes: #246839. * Fix missing symbols in libsmbclient (and libnss_wins), and add -Wl,-z,defs to the libsmbclient link options to prevent future instances of undefined symbols (closes: #281181). * Fix for the legacy ldapsam_compat backend; thanks to Fabien Chevalier for the patch (closes: #274155). -- Steve Langasek Mon, 15 Nov 2004 06:54:13 -0800 samba (3.0.8-1) unstable; urgency=high * New upstream package. Urgency set to "high" because of a potential Denial of Service vulnerability in previous 3.0.x releases (CAN-2004-0930). (Eloy) * Introduce new -dbg package, so we can make better sense out of the cleverly-supplied backtrace emails. (Vorlon) * Applied patch from Luke Mewburn to fix missing lock_path() to state_path() change in the FHS patches. (Eloy) -- Eloy A. Paris Mon, 8 Nov 2004 13:39:34 -0500 samba (3.0.7-2) unstable; urgency=high * High-urgency upload for sarge-targetted RC fixes. * Use autogen.sh in unpatch-source as well as in patch-source, to get rid of the autom4te.cache cruft. * debian/patches/make-distclean.patch: add some missing files to the distclean target in source/Makefile.in (mostly-fixes: #276203). * Change compile-time default of 'use sendfile' to 'no', since the current Samba implementation is broken (closes: #261917, #275741, #270175). * Add mount.cifs into the smbfs package; thanks to Igor Belyi for showing us just how simple this patch should be. ;) Since cifs is the preferred kernel driver in 2.6, bugs related to smbfs and 2.6 are considered closed unless someone can show that they exist with the cifs driver as well (closes: #249890, #269443, #227791, #236869, #260707, #261808, #270175). * Fix FHS migration code so that it only affects upgrades from old package versions, and doesn't cause us to mess with non-standard directories that may have been re-added by the admin (closes: #251858). -- Steve Langasek Tue, 26 Oct 2004 01:35:23 -0700 samba (3.0.7-1) unstable; urgency=high * New upstream release. This release fixes two possible denial of service conditions; one in nmbd and one in smbd. The CVE numbers for these vulnerabilities are: CAN-2004-0807 for the smbd DoS CAN-2004-0808 for the nmbd DoS Urgency is set to "high" because of these vulnerabilities; so this new release propagates to testing ASAP. Thanks to the Samba Team and the Debian Security Team for the heads up. * Remove post-3.0.6 patches that are now in 3.0.7. -- Eloy A. Paris Mon, 13 Sep 2004 00:53:38 -0400 samba (3.0.6-4) unstable; urgency=low * Update LDAP schema (closes: #269797). * Applied a couple of upstream fixes that will be present in Samba 3.0.7. -- Eloy A. Paris Tue, 7 Sep 2004 15:28:42 -0400 samba (3.0.6-3) unstable; urgency=low * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704) -- Eloy A. Paris Wed, 25 Aug 2004 01:58:37 -0400 samba (3.0.6-2) unstable; urgency=low * Added Danish debconf translation. Thanks to Claus Hindsgaul . (closes: #232884) -- Eloy A. Paris Mon, 23 Aug 2004 17:24:19 -0400 samba (3.0.6-1) unstable; urgency=low * New upstream version. * Incorporate Turkish debconf translation; thanks to Recai Oktas . (closes: #252031) * Update pt_BR debconf translation. Thanks to Andre Luis Lopes . (closes: #208113) -- Eloy A. Paris Mon, 23 Aug 2004 12:34:44 -0400 samba (3.0.5-2) unstable; urgency=high * Patches from Fabien Chevalier to fix: + libnss_wins crashes other programs (closes: #252591) + Can't list share files/dirs, but can acces deeper files/dirs (closes: #264572) + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871) * Urgency "high" to make it into testing as soon as possible since at least #265871 is pretty bad now that WinXP SP2 has been released. Thanks for the help Fabien! Both Vorlon and I have been very busy lately. -- Eloy A. Paris Wed, 18 Aug 2004 13:25:41 -0400 samba (3.0.5-1) unstable; urgency=high * New upstream version. Urgency "high" because of potential buffer overflows. The security fixes are the only difference between 3.0.4 and 3.0.5. -- Eloy A. Paris Thu, 22 Jul 2004 08:07:36 -0400 samba (3.0.4-5) unstable; urgency=low * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4), not an unversioned libcupsys2-dev. (closes: #250523) -- Eloy A. Paris Tue, 25 May 2004 07:43:54 -0400 samba (3.0.4-4) unstable; urgency=low * Rebuilt with libcupsys2-gnutls10 for unstable. Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736 Closes: #250742, #250733 -- Eloy A. Paris Mon, 24 May 2004 22:32:52 -0400 samba (3.0.4-3) unstable; urgency=low * Color me stupid; I uploaded an experimental version to unstable. -- Eloy A. Paris Sat, 22 May 2004 00:40:58 -0400 samba (3.0.4-1) unstable; urgency=low Eloy: * New upstream version. Closes: #247640 (New upstream version available) Closes: #238905 (Printing crash fix) Closes: #247090 (panic in viewing printerqueue) Vorlon: * Incorporate Catalan debconf translations; thanks to Aleix Badia i Bosch and the Debian L10n Catalan Team. (closes: #236640) * Incorporate Czech debconf translations; thanks to Miroslav Kure (closes: #236274). * Update libsmbclient shlibs, due to an incompatibility with older versions that prevents gnome-vfs from working correctly (closes: #245869). -- Eloy A. Paris Fri, 21 May 2004 11:42:19 -0400 samba (3.0.2a-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Tue, 24 Feb 2004 10:30:47 -0500 samba (3.0.2-2) unstable; urgency=high * Apply patch from Urban Widmark to prevent users from mounting remote filesystems containing suid files (closes: 232327). This represents an exploitable security hole on systems running Linux 2.6 kernels. -- Steve Langasek Thu, 12 Feb 2004 21:38:40 -0600 samba (3.0.2-1) unstable; urgency=high * New upstream release. - LaMont Jones: correct false failure LFS test that resulted in _GNU_SOURCE not being defined (thus resulting in strndup() not being defined) (closes: #226694) - Segfault fixes. (closes: #230012) (maybe more, but we need bug reporters to confirm.) Urgency "high" due to a password initialization bug that could grant an attacker unauthorized access to a user account created by the mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and workarounds for those not wishing to upgrade (which is a bad idea anyway since this new release fixes lots of other bugs.) -- Eloy A. Paris Sun, 8 Feb 2004 10:06:29 -0500 samba (3.0.1-2) unstable; urgency=low * Include ntlm_auth's man page. * Don't create directories outside of the source directory during package build time. (closes: #227221, #227238, #225862) * Don't include the "Using Samba" book in the swat package, just a symlink that points to the book included in the samba-doc package. -- Eloy A. Paris Tue, 13 Jan 2004 13:48:13 -0500 samba (3.0.1-1) unstable; urgency=low * New upstream version (closes: #225565) * Add support in the dhcp hook for netbios scope, and handle better the case of multiple DHCP-using interfaces (closes: #224109). * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant tail works. Thanks to Paul Eggert . * Include /usr/bin/ntlm_auth in the winbind package. * Run configure with "--with-piddir=/var/run/samba" since the default got changed to /var/run in this new upstream version. -- Eloy A. Paris Tue, 30 Dec 2003 16:21:31 -0500 samba (3.0.0final-1) unstable; urgency=low * It's here, it's here, it's here, Samba 3.0.0 is here! * Incorporate Japanese debconf translations; thanks to Kenshi Muto . (closes: #209291) -- Eloy A. Paris Thu, 25 Sep 2003 13:39:28 -0400 samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Sat, 13 Sep 2003 08:47:56 -0400 samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low * New upstream release. Last Release Candidate according to the Samba Team. Samba 3.0.0 is around the corner, in a week or so. - Fixes use of non-PIC code in nss shared libraries (closes: #208773) - 'unix password sync' option now runs the unix password program as root again (closes: #209739). * One-line patch to make packages buildable with distcc (closes: #210227) -- Eloy A. Paris Tue, 9 Sep 2003 07:57:16 -0400 samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low * New upstream release. * Link against libgnutls7 instead of libgnutls5. (closes: #208151) -- Eloy A. Paris Tue, 2 Sep 2003 21:37:13 -0400 samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low * New upstream version (skipped samba 3.0.0beta3 due to time constraints.) This ugly version number will go away when the final Samba 3.0.0 is released. * Drag new unpackaged tools into the packages: smbcquotas (smbclient), vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8) manpage (samba). (closes: #151158) * Switch to DH_COMPAT level 4: - no explicit conffile listings needed - the postinst for libsmbclient is now completely autogenerated - use the default init script handling (with support for invoke-rc.d) in debhelper, instead of the currently buggy upgrade path (closes: #185439) - add support for ${misc:Depends} in control for those packages with init scripts * Add versioned dependency on libpam-runtime and change /etc/pam.d/samba to use the new common PAM config blocks. * New python2.3-samba package (old python2.2-samba is no more.) (closes: #206171) -- Eloy A. Paris Mon, 25 Aug 2003 17:05:14 -0400 samba (3.0.0beta2-1) unstable; urgency=low * New upstream release - The smb.conf(5) manpage documents config options again (closes: #197963). - Handling of winbind/idmap has been restructured; domain members should be able to map domain accounts to local accounts again (closes: #196815). - Use the locale charset for 'display charset' by default (closes: #194406). - Fix for segfault in smbclient when using the -b option (closes: #196833). - Handle an empty 'passdb backend' list gracefully (closes: #193946). * Don't set 'display charset' anymore on upgrade, since this is now grabbed from the locale by default -- a much better option. * Removed time.c.patch which is now in the upstream sources. * Update FHS patch for two new tdb files (netsamlogon_cache.tdb, privilege.tdb). * Remove python-linker.patch, since the Kerberos package has been fixed to no longer use rpath * Remove configure.patch: the hppa glibc bug this was added for is long since fixed, and upstream isn't interested in supporting this kludge. * Update references to missing documentation in sample smb.conf file (closes: #187632). * Fix handling of krb5 link line, building on a patch from Stefan Metzmacher . * Add patch so smbclient's tar support works with popt (closes: #194921). -- Steve Langasek Wed, 2 Jul 2003 20:59:09 -0500 samba (3.0.0beta1-2) unstable; urgency=low * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1) to make sure we get the right shlib dependencies (closes: #193149). * Update the dhcp config hooks so they're suitable for sourcing (i.e., don't call "exit") (closes: #196477). * Bring package into line with current policy by adding support for the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs) by default * Make sure libpam-smbpass is a self-contained DSO. * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite the server list. * Fix python install script to ignore -Wl linker flags, as seen in the output from the latest krb5-config. * Add LDAP and Unicode information about upgrading from 2.2 to README.debian. * Remove dangerous and confusing browse options from the default smb.conf (closes: #198804). * Reorder smb.conf options for clearer grouping, and clarify the comments. * Add a default [print$] share to the sample smb.conf, and create the necessary tree under /var/lib/samba/printers. (closes: #168173) * s/winbind/idmap/ in smb.conf, since the option names have changed. * Fix the patch for postexec handling, so that we chdir("/") at the right time. -- Steve Langasek Thu, 12 Jun 2003 15:02:00 -0500 samba (3.0.0beta1-1) unstable; urgency=low * New upstream version. - fix for empty browselist bug (closes: #194553) - fix for tab completion segfault in smbclient (closes: #194776) - Samba now works as a domain member again without segfaulting (closes: #194134, #194394, #194775) - WinXP machines can join a Samba-controlled domain again (closes: #195362) * Build-depend on python-dev >= 2.2 instead of on just python-dev (without version). * Added Vorlon'n patch to source/lib/time.c to fix #194075. (closes: #194075) -- Eloy A. Paris Sun, 8 Jun 2003 22:26:43 -0400 samba (2.999+3.0.alpha24-3) unstable; urgency=low * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324) * Rebuild against pristine Kerberos libs, to squelch warnings about versioned symbols. (closes: #194431, #194396) -- Steve Langasek Thu, 22 May 2003 15:32:00 -0500 samba (2.999+3.0.alpha24-2) unstable; urgency=low * Fixed description of the smbfs package. (closes: #194183) * Negate the sense of the unixsam check when upgrading. (closes: #194234) -- Steve Langasek Wed, 21 May 2003 12:21:53 -0400 samba (2.999+3.0.alpha24-1) unstable; urgency=low * New upstream version. (closes: #189354) -- Eloy A. Paris Tue, 20 May 2003 13:55:57 -0400 samba (2.999+3.0.alpha23-5) unstable; urgency=low * Move the python package from section "net" to section "python". * Make sure we use PIC code for python on all platforms. * French translation of an additional debconf template, courtesy of Christian Perrier . (closes: #188832) * Updated Brazilian Portuguese translation from André Luís Lopes . * s/unixsam/guest/ everywhere, since the unixsam backend is now deprecated. (closes: #190095) * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not only does using /tmp violate SELinux policies, it introduces the possibility of data loss during the final copy if /tmp is a separate filesystem. (closes: #189823) * Pull in fix for SWAT, so that logins work again (closes: #188255, #192077). * Move passdb.tdb into /var/lib/samba, since it's not user-editable. * Make sure with don't ship any .cvsignore files. * Don't ship examples for python2.2-samba and samba-doc in an "examples" directory inside another "examples" directory. -- Eloy A. Paris Tue, 6 May 2003 12:05:46 -0400 samba (2.999+3.0.alpha23-4) unstable; urgency=low * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all non-RPC printing clients are working again. * Change shlibs to 0 instead of 0.1. The library already in the archive is using this soname, and there are no packages depending on libsmbclient, so skip changing the package name for now. (closes: #188661) -- Steve Langasek Fri, 11 Apr 2003 14:42:00 -0500 samba (2.999+3.0.alpha23-3) unstable; urgency=low * Put the Samba Python modules in /usr/lib/python2.2/site-packages/, not in /usr/lib/python2.2/lib-dynload/. -- Eloy A. Paris Wed, 9 Apr 2003 19:49:25 -0400 samba (2.999+3.0.alpha23-2) unstable; urgency=low * New package python2.2-samba that includes the Python modules included in the Samba sources. Feedback on these modules and the new package is welcome, as we (Debian Samba maintainers) don't use them. (closes: #170731, #173322) * Move libsmbclient-dev from section "devel" to "libdevel". * Fix panic action script to give a sensible error message instead of an empty backtrace when we don't have permission to attach to the process. (closes: #188164) * Fix libpam-smbpass so that it really does something. (closes: #178245) * Apply patch to fix printing-related segfaults. (closes: #188076) -- Eloy A. Paris Sun, 6 Apr 2003 21:40:33 -0400 samba (2.999+3.0.alpha23-1) unstable; urgency=high * new upstream release, includes security fix for DSA-262 * tweak the debconf templates to avoid references to specific front-ends (closes: #183718) -- Steve Langasek Sun, 9 Mar 2003 14:58:00 -0600 samba (2.999+3.0.alpha21-5) unstable; urgency=low * touch up the package descriptions a little bit (caps, punctuation) * remove addtosmbpass, which snuck back in when we weren't looking * reverse the position of the wins server tag, after looking more closely at the code (closes: #183061) * fix a glitch in the Spanish .po that rendered it invalid, plus a typo * updated Brazilian Portuguese templates (closes: #183295) * fix a typo in upstream manpage (s/shave/share/) (closes: #180546) * run sed before we run sed, to deal with crazybad special chars in the workgroup name (!) (closes: #176717) -- Steve Langasek Sat, 1 Mar 2003 15:14:00 -0600 samba (2.999+3.0.alpha21-4) unstable; urgency=low * add scripts to samba-common to grab the netbios-name-servers options if we're running a DHCP client (closes: #38413) * major rearrangement of build scripts: install target now operates on debian/tmp, not debian/samba, so we can see when new files are added and decide where to put them; several files that should have been in samba-common but were in samba (for the above reason) -- smbcacls, -- have been moved, with a replaces: added. * Fix rc script so that whitespace is consistent between inetd and daemon modes (closes: #174677). * smbclient -M must always connect to port 139, because port 445 doesn't support messaging and we can't do the port 135 stuff yet (closes: #175292, #167859). * Import the diff from upstream CVS, which has fixed a few bugs (closes: #178219, #177583, #181467, #181487, #181603, #175864). Remove a few patches of ours which are now superseded. * Add po-debconf support to the tree, for better i18n. * Install the libsmbclient.so symlink in the libsmbclient-dev package, per policy (closes: #181466). -- Steve Langasek Fri, 27 Dec 2002 00:37:00 -0600 samba (2.999+3.0.alpha21-3) unstable; urgency=low * Drop --with-ldapsam from the configure options, since this no longer means what we thought it did. Revert patch for changing the 'passdb backend' defaults. * Add patch from CVS HEAD to fix pdbedit segfault; postinst script should work better now. (Closes: #173936) -- Steve Langasek Sun, 22 Dec 2002 13:29:00 -0600 samba (2.999+3.0.alpha21-2) unstable; urgency=low * add CONFIGDIR to the set of directories exported in the install target, so we don't try to write to /etc/ on the autobuilders. * Reset the default 'passdb backend' value to something sensible, so that we don't unnecessarily break upgrading systems (closes: #173731). -- Steve Langasek Fri, 20 Dec 2002 09:13:00 -0600 samba (2.999+3.0.alpha21-1) unstable; urgency=low * new upstream release, many patches now incorporated upstream -- Steve Langasek Mon, 16 Dec 2002 23:39:00 -0600 samba (2.999+3.0.alpha20-4) unstable; urgency=low * Remove obsolete comments about non-existant LDAP support in the Debian Samba packages. (Closes: #165035) * Apply patch for segfault in pam_smbpass when using the unixsam backend. * Drop support for nmbd in inetd, since it's not supported by upstream and is reported to cause problems (closes: #23243, #137726, 165037). * Clarify example printing configs in smb.conf (closes: #168174). * Make sure nmbd still responds to SIGTERM if it has no interfaces to listen on (closes: #168079). * Fix to get samba working again on 64-bit archs, after a pointer<->int size mismatch bug. Already fixed in upstream CVS. * Merge fix from CVS for broken libsmbclient.h references to internal structures (closes: #162956). * Add a default 'panic action' for Samba that will give us genuinely useful debugging information after a crash. * Fixed correct patch to example configurations in the libpam-smbpass packages (closes: #169350). * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead (closes: #169682). * Only ask the user for permission to edit if there's a chance of us damaging something. -- Steve Langasek Mon, 18 Nov 2002 19:53:00 -0500 samba (2.999+3.0.alpha20-3) unstable; urgency=low * Make sure smbstatus behavior is sane when Samba *has* been started, as well as when it has not (closes: #164179). Thank to Robbert Kouprie for this patch. * Not using 'killall' in any of the maintainer scripts (the last one remaining was winbind.logrotate.) We now just use 'kill' to send a SIGHUP to a specific PID (which is stored in a file in /var/run/samba.) * Do not depend on procps because we're not using killall anymore. -- Eloy A. Paris Tue, 15 Oct 2002 22:15:57 -0400 samba (2.999+3.0.alpha20-2) unstable; urgency=low * fix an off-by-one error in smbd/lanman.c, which should shut off the flood of log messages (closes: #157432) * add a --config-cache option to the configure invocation, since autoconf 2.5 doesn't load config.cache by default (closes: #163504) -- Steve Langasek Sat, 5 Oct 2002 01:40:00 -0500 samba (2.999+3.0.alpha20-1) unstable; urgency=low * new upstream release - non-primary groups appear to work again (closes: #161271) * the official beginning of the upstream 3.0 branch * exit without error from smbstatus when no connections have been seen yet (closes: #161489) -- Steve Langasek Wed, 2 Oct 2002 19:02:00 -0500 samba (2.999+3.0cvs20020906-1) unstable; urgency=low * CVS update - domain authentication works again (closes: #158698) * Factor out common code in samba-common.config * Handle character set settings in smb.conf on upgrade (closes: #153913, #158770) * Don't use killall in logrotate script; there are better ways (closes: #160076) * Ignore value of 'hostname lookups' for hosts allow/hosts deny (closes: #154376) -- Steve Langasek Sat, 7 Sep 2002 11:46:00 -0500 samba (2.999+3.0cvs20020829-1) unstable; urgency=low * CVS update. * Move the smb.conf manpage to the samba-common package (closes: #159572) -- Steve Langasek Thu, 29 Aug 2002 17:53:25 -0500 samba (2.999+3.0cvs20020827-1) unstable; urgency=low * CVS update. (Closes: #158508) * Part 1 of 3 of the library separation patch that Vorlon wrote has gone upstream - removed the patch from our patches/ directory. * Debconf note to warn users that their smb.conf will be re-written and changed if they use Swat to maintain it. (Closes: #158479) * Fixed typo in samba.prerm. -- Eloy A. Paris Tue, 27 Aug 2002 15:23:23 -0400 samba (2.999+3.0cvs20020825-2) unstable; urgency=low * scale back the tdbsam migration support, because of undesirable side-effects; now always defaults to 'no'. * strip out hyperactive library dependencies that are only needed by smbd (closes: #155156). * nuke any broken registry.tdb files left by previous CVS snapshots. * support rolling back the smbpasswd->tdbsam conversion on downgrade, since many people are likely to need to downgrade for a while. * remove postrm handling of legacy directories, and add handling of current ones. -- Steve Langasek Sun, 28 Jul 2002 09:44:24 -0500 samba (2.999+3.0cvs20020825-1) unstable; urgency=low * CVS update. These packages are based on Samba 3.0alpha19 + any code commited after 3.0alpha19 was released. -- Eloy A. Paris Sun, 25 Aug 2002 14:56:46 -0400 samba (2.999+3.0cvs20020723-1) unstable; urgency=medium * remove spurious line from samba.config * migrate from smbpasswd to tdbsam * re-add the pdbedit util and manpage * compile in ldapsam support (closes: #146935) * add PRIVATEDIR to the list of vars we override for the install target, so Samba doesn't try to create /etc/samba (closes: #153746). * fix makefile handling of LOGBASEDIR, so that logs always end up in the right place (closes: 153727). * Fixed bug in the FHS migration path that causes nmbd to read its state from one location, but write it out to another. (closes: #154210) * Make sure nmbd is always looking for wins.tdb in the same place. -- Steve Langasek Fri, 19 Jul 2002 21:38:54 -0500 samba (2.99.cvs.20020713-1) unstable; urgency=low * first attempt for 3.0pre. * only post a debconf note about moving logfiles if we're upgrading from a version that had the logfiles in the old location (closes: #152924). -- Steve Langasek Sat, 13 Jul 2002 12:54:25 -0500 samba (2.2.5-2) unstable; urgency=low * No longer ship make_printerdef, which is deprecated. (closes: #63059) * Clean up some empty directories from the samba package. * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860). * Clean up per-package documentation lists, to reduce clutter (closes: #147638). * Make sure we don't ship pdbedit's man page since we are still using smbpasswd passwords. (closes: #152208) * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find it (closes: #148586). * reorder postinst, so that installing samba-common from scratch loads the debconf answers properly (closes: #151985). * add lintian overrides for winbind, to eliminate some noise. * rename pam_smbpass changelog to comply with policy. -- Steve Langasek Sun, 23 Jun 2002 22:45:04 -0500 samba (2.2.5-1) unstable; urgency=low * New upstream release. -- Eloy A. Paris Sun, 9 Jun 2002 15:49:21 -0400 samba (2.2.4+2.2.5pre1-1) experimental; urgency=low * Getting ready for Samba 2.2.5. * Remove patches/parse_spoolss.patch, now included upstream. * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in 2.2.4-1. We don't use POSIX ACL support ourselves, so we'd appreciate reports from those using this feature so we can be sure this works. * Fix the filename-matching algorithm used for smbtar's 'exclude' functionality. (closes: #131571) * Look for secrets.tdb in /var/lib/samba, and handle in the postinst. This is not really a config file, because users don't edit it. (closes: #147429) * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen for the patch. (closes: #144847) -- Eloy A. Paris Tue, 28 May 2002 11:33:51 -0400 samba (2.2.4-1) unstable; urgency=low * New upstream release (closes: #144713) * Building with POSIX ACL support (closes: #137819) * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055) * Compile with --with-automount, for NIS homedir support (closes: #123396) * Add a proper 'flags' field to the mount entry we write to /etc/mtab; fixes a display bug with mount (closes: #140397) * Added logic to /etc/init.d/samba so a help message is printed out when Samba is running from inetd _and_ we are not booting, i.e. the user called the init script manually. Thanks to Francesco Potorti for the suggestion on how to implement this. (Closes: #139807, #140204) * samba.postinst: added logic so we don't call /etc/init.d/samba if we are running from inetd (this prevents the stupid help message to be printed during package upgrades if we are running from inetd.) * samba.prerm: idem. * /etc/init.d/samba: delete stale PID files after nmbd and smbd are stopped. This prevents start-stop-daemon from printing an ugly error message when called from '/etc/init.d/samba stop'. I prefer this than running start-stop-daemon with --oknodo because start-stop-daemon might print other important error messages that with --oknodo it would otherwise not print. (Closes: #102187, #109301) * Patch from jerry@samba.org to fix parsing of spoolss structures. -- Eloy A. Paris Thu, 23 May 2002 23:16:52 -0400 samba (2.2.3a-7) unstable; urgency=medium * More README.debian updates. * Neutralize the smb.conf 'lock dir' directive, which doesn't mean what the FHS says it should, and causes us no end of grief. (Closes: #122299) * LPRng-handling patch so that jobs printed to recent versions of LPRng show up properly as 'done' instead of 'paused' in the Windows print queue. Thanks to Jaroslav Serdula for this patch. (Closes: #139458) * Applied patch from Urban Widmark (smbfs upstream maintainer) to add a '-n' option to smbmount that does the same as mount's '-n'. (Closes: #139590) * Minor tweak to unpatch-source so we unpatch sources in the reverse order we patched them. * Don't depend on grep in samba.prerm to determine if Samba was running before the upgrade starts. * Tweak the wording of debconf templates. * Incorporate debconf translations for French, Spanish and Portuguese; thanks to Carlos Valdivia Yagüe (es), Andre Luis Lopes (pt_BR), and Philippe Batailler and Denis Barbier (fr). (closes: #142657, #142659, #141551, #141699, #141682) * Fixed symlinks in the swat package so the point to /usr/share/doc/ instead of /usr/doc/. Added note to the description of the swat packages that says that samba-doc must be installed for the on-line documentation to work. Thanks to Torne Wuff . (Closes: #95437) * 'dh_installinit -n' gives us no initscript handling -- we need to handle all starting and stopping of daemons ourselves, which wasn't happening in the {pre,post}rm scripts. * Vary the priority of the debconf question "Do you want to generate /etc/samba/smbpassd?" depending on whether the file already exists. File exists -> priority 'medium', file does not exist -> priority 'low'. Changed priorities of all other questions from 'high' to 'medium'. -- Steve Langasek Sat, 20 Apr 2002 17:48:27 -0400 samba (2.2.3a-6) unstable; urgency=low * Call db_stop as soon as we're done with debconf in the postinst, to avoid hanging bugs (closes: #137813) * Ony call 'update-inetd --add' on first installation, just as we only call 'update-inetd --remove' on package purge. * Bring our shipped smb.conf closer in line with the upstream defaults: don't twiddle the send/recv buffer sizes, since the Linux kernel already provides a much better default setting (closes: #80966, #80934, #137415, #133477) * Added libnss_wins.so to the winbind package (closes: #137201) * Updates to README.debian. -- Eloy A. Paris Tue, 12 Mar 2002 10:57:40 -0500 samba (2.2.3a-5) unstable; urgency=low * Having multiple workgroup lines in your smb.conf, though wacky, is perfectly valid. Account for this in samba-common.config. (closes: #137157) -- Steve Langasek Sun, 10 Mar 2002 21:52:51 -0600 samba (2.2.3a-4) unstable; urgency=low * Fixed typo in samba.postinst. Cosmetic fixes there as well. * Fix to improper usage of /usr/bin/tr in samba-common config script (closes: #137744) -- Steve Langasek Sat, 9 Mar 2002 14:14:02 -0500 samba (2.2.3a-3) unstable; urgency=medium * Make sure /etc/init.d/samba is executable before calling it in the postinst. Quickly checked all other maintainer scripts to make sure we are not calling an init script if it is not executable. (closes: #137321) * Fix up maintainer scripts to detect if samba was not running before an upgrade. (closes: #33520, #130534) * Make sure /etc/samba/ is included in the samba-common package. Closes: #137157 -- Steve Langasek Fri, 8 Mar 2002 11:13:21 -0500 samba (2.2.3a-2) unstable; urgency=low * merge in debconf support: - Moved all smb.conf-related questions to samba-common (smb.conf is part of the samba-common package, not the samba package.) - smb.conf is not a samba-common conffile anymore since it is being managed by debconf. It is ABSOLUTELY necessary to make sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes made via debconf. In other words, any changes made by the user should be honored by the debconf interface. - samba.postinst now moves old log files from /var/log/ to /var/log/samba/. There's a Debconf note that informs the user the log files are stored now in a new location. - debian/control: + Make samba depend on debconf. - New file debian/samba.templates. - New file debian/samba.config. - Re-worked debian/samba.postinst. + Got rid of all /etc/samba/debian_config sillyness. - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces it. - Removed debian/samba.prerm. - Cleaned up /etc/init.d/samba. + Added infrastructure for debconf. + Got rid of all /etc/samba/debian_config sillyness. + Got rid of /etc/samba/smbpasswd conversion stuff for compatibility with versions of Samba < 2.0.0final-2. (closes: #127959, #34408, #113594) * make samba.postinst ignore the absence of /var/log/{s,n}mb*; makes for a clean upgrade path. * Building with MSDFS support (closes: #116793) -- Steve Langasek Tue, 5 Mar 2002 14:14:33 -0600 samba (2.2.3a-1) unstable; urgency=low * New upstream version (closes: #135001) * Potato builds were failing because debian/rules was not creating debian/winbind/etc/logrotate.d/. A user having problems creating Potato packages brought this to my attention. dh_installlogrotate takes care of creating the directory for us, that's why we didn't notice. * Removed code that converts /etc/samba/smbpasswd from an ancient format to the new format of Samba 2.0.0 and later. Closes: #134375 - samba: postinst failed due to missing /usr/bin/convert_smbpasswd. * Re-organized FHS migration code in samba.postinst. Make sure we don't fail when we move files that don't exist. Closes: #133813 - samba: Install failed. * Adding docs. to the libpam-smbpass package. * Remove man pages for findsmb because we are not providing this script. Closes: #134181 - findsmb referenced, but not included. * Removed replace.patch because it is now present upstream. * Added patch from Jerry Carter to fix a problem when saving document preferences for printing from NT clients. * The real winbindd daemon is a forked process so we can't use --make-pidfile when calling start-stop-daemon. Fixed /etc/init.d/winbind to work around the issue. Thanks to Lin Li for the patience and for reporting the problems. Hopefully I got it right this time. -- Eloy A. Paris Wed, 20 Feb 2002 18:39:03 -0500 samba (2.2.3-6) unstable; urgency=low * Make sure there are actual files in /var/state/samba before trying to move them (Closes: #133534, #133510). * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly again. -- Steve Langasek Tue, 12 Feb 2002 09:19:29 -0600 samba (2.2.3-5) unstable; urgency=low * Whoops, missed a spot on the samba.postinst -- will fail badly if /var/state/samba/ no longer exists. Better get this fix into the next upload. ;) (Closes: #133088) * Regenerate configure only if it is older than configure.in. * Fix smbd handling of network neighborhood lists, which was missed in the FHS conversion (Closes: #133091) -- Eloy A. Paris Sat, 9 Feb 2002 16:37:57 -0500 samba (2.2.3-4) unstable; urgency=low * FHS cleanup; files in /var are now properly sorted according to their nature. (Closes: #102101) * Remove patches to source/configure, since we now call autoconf to regenerate this file cleanly. * lintian fixes: - Create winbind.conffiles and add /etc/logrotate.d/winbind and /etc/init.d/winbind to it. - Use a relative symlink for /usr/lib/cups/backend/smb. - Removal of a .cvsignore file in the samba-doc package. * winbind.init fixes: - Corrected name of the pid file (Steve) - Make start-stop-daemon create a pid file for winbindd since it does not create one on his own. * #DEBHELPER# is not needed in samba.postinst because we are adding manually everything that debhelper adds automatically. In fact, since we are calling update-rc.d without standard paramaters I think we can't use #DEBHELPER#. * Fix fatal syntax error in samba.prerm. -- Steve Langasek Thu, 7 Feb 2002 13:12:08 -0500 samba (2.2.3-3) unstable; urgency=low * work on lintian-cleanness in the package (wrong permissions, maintainer scripts in need of debhelpering) * /lib/security/pam_smbpass.so is now being included in the libpam-smbpass package only, and not in both the libpam-smbpass and samba packages (which was the case prior to 2.2.3-3.) * Instead of making our patch scripts executable in the rules file we run them through /bin/sh. * New 'winbind' package that has all the winbind stuff that was in the samba package in 2.2.3-2 and before. * Added replace.patch: patch from Jeremy Allison to fix problems when replacing or overwriting files in a Samba share. Patch was sent to the samba mailing list. -- Eloy A. Paris Tue, 5 Feb 2002 21:12:48 -0500 samba (2.2.3-2) unstable; urgency=low * add support to debian/scripts/{patch-source,unpatch-source} for automatic updating and cleaning of . This was a request from the Samba Team: they wanted us to clearly mark our packages so it is always known a user is running Samba with (possibly) Debian-specific patches. * Change init.d killscript link to K19samba, so we stop before autofs (closes: 117327) * Make our patch scripts executable in the rules file -- dpkg won't do this for us (closes: #132415). -- Steve Langasek Mon, 4 Feb 2002 09:51:00 -0600 samba (2.2.3-1) unstable; urgency=low * New upstream release (closes: #131228). * Restructured build system that provides DBS-like separation of patches * Fix typo in smbfs description (closes: #116209). * Use killall -q in logrotate.d script, to avoid spurious cron emails (closes: #130100). -- Steve Langasek Sat, 2 Feb 2002 19:56:18 -0500 samba (2.2.2-12) unstable; urgency=high * (Steve) Patch for source/client/client.c. Closes: #86438 smbclient: Transfering several GB causes the average speed to be messed up. * Uploading with urgency=high to expedite the move from unstable to testing because of the security problem fixed in -11. -- Eloy A. Paris Fri, 25 Jan 2002 22:31:12 -0500 samba (2.2.2-11) unstable; urgency=low * Building with --with-libsmbclient. We have created two new packages: libsmbclient and libsmbclient-dev. Hopefully this will help some people that want to add the capability of speaking SMB to their applications. Closes: #117132 - libsmbclient support library? * (Steve) Make swat do the right thing when reading (parsing) the saved preferences in smb.conf. Closes: #55617 swat mutilates the linpopup message command. * Updated README.Debian. Updated descriptions in debian/control. * Remembered to bump up version number in source/include/version.h (need to automate this or else I'll keep forgetting.) * (Steve) one liner for source/web/diagnose.c. Closes: #106976 - smbd/nmbd not running message with swat/linuxconf. * Added '|| true' to the post-rotate script so logrotate doesn't fail if either nmbd or smbd is not running. Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process. * Fixed incorrect file locations in swat's man page and added a Debian-specific note to /usr/share/doc/swat/README. Closes: #71586 swat: needs documentation fixes for debian. * smbmount in the smbfs package does not have the setuid bit set. Apparently, smbmount uses libsmb without checking the environment. Thanks to Christian Jaeger for finding the local root exploit. * Applied old patch from Jerry) Carter" to correct the following two problems in Samba 2.2.2: - %U and %G could not be used in services names in smb.conf. - %G would fail to be expanded in an "include = ..." line. -- Eloy A. Paris Sat, 19 Jan 2002 21:35:26 -0500 samba (2.2.2-10) unstable; urgency=low * (Steve) Add missing manual pages. Closes: Bug#128928: missing manpages in smbfs. -- Eloy A. Paris Sun, 13 Jan 2002 14:39:55 -0500 samba (2.2.2-9) unstable; urgency=low * (Steve) Fix broken URL's in HTML docs. Closes: Bug#17741: bad links in html docs (at last!!!) -- Eloy A. Paris Fri, 11 Jan 2002 13:37:07 -0500 samba (2.2.2-8) unstable; urgency=low * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in debian/control so rpcclient.1, which was in samba-2.2.2-5, does not cause problems now that it is part of smbclient (>= 2.2.2-6). Closes: Closes: Bug#128684: error upgrading smbclient in sid. -- Eloy A. Paris Fri, 11 Jan 2002 11:42:40 -0500 samba (2.2.2-7) unstable; urgency=low * (Steve) Patch to make behavior honor what the docs. say about "hosts allow" taking precedence over "hosts deny". Closes: Bug#49249: swat: error with host deny ?! -- Eloy A. Paris Thu, 10 Jan 2002 12:36:58 -0500 samba (2.2.2-6) unstable; urgency=low * (Steve) Adds manpage for rpcclient to the proper file, removes smbtorture from the distro because this tool isn't intended for widespread consumption. Closes: #63057 - no manual page for smbtorture. * (Steve) Removed -gnu from the configure arguments (--build, --host) in debian/rules so config.sub is able to properly create the host and target tuples. -- Eloy A. Paris Wed, 9 Jan 2002 14:39:51 -0500 samba (2.2.2-5) unstable; urgency=low * Fixes from vorlon: * Use /usr/bin/pager instead of more. Closes: #125603: smbclient violates pager policy. * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd a SIGHUP to have the log files reopened, fixes to /etc/logrotate.d/samba. Closes: #127897: log file rotation. Closes: #118277: /etc/logrotate.d/samba not listed in conffiles. * s/covert/convert/. Closes: #121653 probable typo in install message. -- Eloy A. Paris Sun, 6 Jan 2002 03:14:58 -0500 samba (2.2.2-4) unstable; urgency=low * Applied patch from Steve to work around problem in glibc that affects the HPPA architecure. The patch detects the error condition at configure time and compiles without LFS support if necessary. Closes: Bug#126763: samba completely broken on hppa. * Including unicode_map.1251. Closes: Bug#126719: samba-common: unicode_map.1251 missing. * Updated smbd daemon version to match Debian package version. Closes: Bug#127199: Package version and smbd daemon version don't match. -- Eloy A. Paris Mon, 31 Dec 2001 14:32:47 -0500 samba (2.2.2-3) unstable; urgency=low * Added some spaces in package description in debian/control. Closes: #120730 - missing spaces in package description for nice alignment. * Spelling fixes. Closes: #125328, #125329, #125330, #125367, #125365, #125403. * Steve Langasek is the co-maintainer of the Debian Samba packages!!! Added him to the uploaders field in debian/control. -- Eloy A. Paris Tue, 18 Dec 2001 00:54:25 -0500 samba (2.2.2-2) unstable; urgency=low * Backed out changes to source/filename.c per Andrew Tridgell's request. This changes were introduced in 2.2.1a-7 as an attempt to fix #47493. Tridge found out that they break smbd. * Changed version number in source/includes/version.h so it is clear that this is a version of Samba packaged for Debian. This is another request from Tridge and will help the Samba Team to get bogus bug reports. * Added Samba-HOWTO-Collection.pdf and other README files to the /usr/share/doc// directories. * Installing libnss_winbind.so and pam_winbind.so. Closes: #116790: nss and pam modules for winbind missing. * Removed user-emacs-settings from changelog. -- Eloy A. Paris Mon, 29 Oct 2001 19:16:26 -0500 samba (2.2.2-1) unstable; urgency=low * New upstream version. * Temporary fix for #113763 (Steve Langasek) * Quick hack to avoid smbmount reveal password length. Please note that even with this hack there is a small window when password is completely visible with 'ps aux'. There are other methods that should be used to automate mounting of SMB shares. Closes: #112195: smbmount-2.2.x reveals password length. * Applied patch from Steve Langasek to prevent forcing use of setresuid() in Sparc. Closes: #112779: samba build forces use of setresuid, which causes smbd to fail on Sparc. -- Eloy A. Paris Mon, 15 Oct 2001 10:26:10 -0400 samba (2.2.1a-9) unstable; urgency=low * Replaced $(LD) with $(CC) all the way through source/Makefile. Closes: #111036: ld shouldn't be used to link shlibs. * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and sgml as well.) Closes: #110963: smb.conf: mail should be /usr/bin/mail. * Documented better smbclient's -W behavior. Patch from Steve Langasek. Closes: #53672: smbclient: -W flag is interpreted as domain, not workgroup. -- Eloy A. Paris Tue, 4 Sep 2001 23:10:41 -0400 samba (2.2.1a-8) unstable; urgency=low * Set some reasonable default perms for the samba logdir (again, thanks to vorlon :-) Closes: #72529: insecure permissions on log files. -- Eloy A. Paris Sun, 26 Aug 2001 15:40:47 -0400 samba (2.2.1a-7) unstable; urgency=low * Another attempt at fixing #47493. Patch from Steve Langasek . Let's keep our fingers crossed Steve! -- Eloy A. Paris Sun, 26 Aug 2001 13:37:06 -0400 samba (2.2.1a-6) unstable; urgency=low * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing smbd to die with signal 11 under some unidentified situations. Closes: #109774: Latest debian version breaks printer driver download. Closes: #109946: not all files appear in samba-exported directories. * Another patch from Steve Langasek. This one adds quotes around printer names for print systems it's reasonable for Debian to support. Together with the patch in #29957 (see changelog for 2.2.1a-4), this should take care of the problems with multi-word printer names in Samba. -- Eloy A. Paris Fri, 24 Aug 2001 21:12:27 -0400 samba (2.2.1a-5) unstable; urgency=low * Important changes that affect how Samba is built on Debian machines are implemented in this release. All of this changes were suggested by the energetic Steve Langasek , and his arguments were so sound and reasonable that I decided to implement them. Here's Steve's original changelog: * Fix up the build system to avoid needing to run configure as root to answer questions we already know the answers to. * In the process, make surprising progress towards being able to cross-compile the samba packages. -- Eloy A. Paris Fri, 24 Aug 2001 01:08:06 -0400 samba (2.2.1a-4) unstable; urgency=low * Fixed typo in smbmount's mount page. Closes: #109317: smbfs: mistype in smbmount manpage. * Included symlink to smbspool to better support CUPS printing. Closes: #109509: include symlink for cups samba support. * Applied patch from Steve Langasek to fix bug #29957. Closes: #29957: samba strips trailing " from strings in smb.conf. * First attempt at fixing #47493. Another patch from Steve "I want a bug-free Samba" Langasek. Closes: #47493: Samba doesn't handle ':' in dir names right. -- Eloy A. Paris Tue, 21 Aug 2001 23:26:38 -0400 samba (2.2.1a-3) unstable; urgency=low * Steve Langasek has been hard at work in the last few days looking at the long list of open bugs filed against the Samba packages. I don't know how to thank him. It's been a pleasure working with Steve, and all the fixes, patches, etc. in this release come from him. The bug list is greatly reduced thanks to Steve's efforts. * Steve's additions/modifications/patches/etc. are: - New package that (libpam-smbpass) provides pam_smbpass. Before, this was provided in another package but now the sources are part of the Samba sources so we can start providing it from here. Closes: #107043 - pam_smbpass now present in Samba source, should be built from there - Patch to source/smbd/service.c that allows admins to call /bin/umount from the root postexec of a Samba share. Closes: #40561 - samba pre/postexec commands do not work. - Clear TMPDIR before starting smbd in /etc/init.d/samba. Closes: #51295 - Problems with Samba and TMPDIR. - Correction to documentation of "guest only". Closes #38282 - "guest only" share still requires a password. * Applied patch from Santiago Vila to convert /usr/sbin/mksmbpasswd from a shell script into a real awk script. Sorry it took so long, Santiago; I hadn't realized you even provided a patch :-) Closes: #77891 - mksmbpasswd could be a real awk script. * Updated description of the smbfs and smbclient packages. Also have each package recommend the other. Closes: #108650: Should suggest or recommend smbfs. -- Eloy A. Paris Mon, 13 Aug 2001 22:21:55 -0400 samba (2.2.1a-2) unstable; urgency=low * Build-depends: depend on debhelper (>=2.0.103). Closes: #105795: Build-Depends are wrong. * Run samba's preinst and postinst scripts without -e so failed commands do not abort installation. Closes: #106384: postinstall crashes abnormally. (And really closes #104471.) -- Eloy A. Paris Thu, 26 Jul 2001 00:30:37 -0400 samba (2.2.1a-1) unstable; urgency=low * New upstream version. * Make sure samba's postinst script exits with a zero status. Closes: #104471: Samba postinst problem. -- Eloy A. Paris Thu, 12 Jul 2001 21:55:21 -0400 samba (2.2.1-1) unstable; urgency=low * New upstream version. Closes: #103339: config.guess and config.sub update required. Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to incompatibility with PAM. Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2. Closes: #95777: Samba 2.2 is unable to join or authenticate against Samba 2.2 PDC domain. Closes: #68842: samba should use PAM for password changing (I haven't personally tried this one, but it's been advertised this works.) Closes: #102506: PAM account checking fails. Closes: #102518: Complains about unknown paramter "obey pam restrictions" Closes: #94774: Build failure on PARISC machines. * Moved away from /etc/cron.weekly/samba for log file rotation. Now using logrotate. Closes: #95548: typo in /etc/cron.weekly/samba. Closes: #74951: nmbd does not rename its log file. * Removed Debian-specific addtosmbpass.8 man page since this script is not longer provided upstream. Users should use the smbpasswd program instead. * Updated sample /etc/samba/smb.conf to reflect the recent changes affecting handling of PAM authentication. Also updated /etc/pam.d/samba. -- Eloy A. Paris Wed, 11 Jul 2001 00:44:14 -0400 samba (2.2.0.final.a-1) unstable; urgency=high * New upstream version (contains security fix from DSA-065-1.) Closes: #97241: samba 2.2.0 fails to process hostnames in "hosts allow" config line. * Removed Debian-specific addtosmbpass.8 man page since this script is not longer provided upstream. Users should use the smbpasswd program instead. Closes: #98365: addtosmbpass is missing from 2.2.0.final-2. * Updated sample /etc/samba/smb.conf to reflect the recent changes affecting handling of PAM authentication. Also updated /etc/pam.d/samba. -- Eloy A. Paris Sun, 24 Jun 2001 11:11:59 -0400 samba (2.2.0.final-2) unstable; urgency=low * Added libcupsys2-dev to Build-Depends. * Samba depends now (again) on netbase so update-inetd is always available for the Samba maintainer scripts. Closes: #86063: Fails to uninstall if inetd is not installed. * Updated source/config.{sub,guess} so ARM built doesn't fail. Closes: #94480: config.sub out of date; can't build on arm. Closes: #85801: config.sub/guess out of date. * Not using brace expansion, i.e. {foo,bar} in any of the maintainers scripts nor in debian/rules. Closes: #88007: samba postrm has is not POSIX sh compliant. -- Eloy A. Paris Sat, 21 Apr 2001 17:27:18 -0400 samba (2.2.0.final-1) unstable; urgency=low * New upstream release. Lots of new things. See WHATSNEW.txt. * Goofy version number because of my stupidity when assigning version numbers to the CVS packages I have been uploading to experimental. Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release will follow soon. -- Eloy A. Paris Tue, 17 Apr 2001 22:58:14 -0400 samba (2.2.0.cvs20010416-1) experimental; urgency=low * CVS update. -- Eloy A. Paris Mon, 16 Apr 2001 21:25:15 -0400 samba (2.2.0.cvs20010410-1) experimental; urgency=low * CVS update. * Added libreadline4-dev to Build-Depends. -- Eloy A. Paris Tue, 10 Apr 2001 16:53:45 -0400 samba (2.2.0.cvs20010407-1) experimental; urgency=low * CVS update. Includes what is in 2.2.0alpha3. -- Eloy A. Paris Sat, 7 Apr 2001 16:00:33 -0400 samba (2.2.0.cvs20010316-1) experimental; urgency=low * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch from Samba CVS. * Not compiling rpctorture as it has compile errors. Change in debian/rules. * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is needed to use smbfs. Updated debian/control, debian/rules and README.Debian to reflect this change. * Added to swat a versioned dependency on samba (so a user is forced to install a new version of swat each time a new version of samba is installed.) -- Eloy A. Paris Sun, 18 Mar 2001 14:21:14 -0500 samba (2.0.7-5) unstable; urgency=medium * Transition from suidmanager to dpkg-statoverride. -- Eloy A. Paris Thu, 18 Jan 2001 23:51:56 -0500 samba (2.0.7-4) unstable; urgency=medium * Applied Urban Widmark fixes to smbmount. Urban is the maintainer of the smbfs in the kernel and of the userland utilities. * Links to HTML documents are correct now. Closes: #69439: swat: Broken help file symlinks Closes: #72615: samba-doc directory changed: removed htmldocs from path Closes: #75847: swat: Wrong symlink Closes: #66857: Wrong links to html documents. Closes: #77912: misplaced documentation symlinks for swat * Building Samba with CUPS support. For this I reverted the change to source/configure.in that I did in 2.0.7-3 and re-ran autoconf. Closes: #59038: samba: not compiled with cups support. * Fix against previous known/unknown user time difference patch to swat (make username / password lookups take the same time.) Remove CGI logging code in Swat. Closes: #76341 - Security holes in swat * Updated Build-depends. * Updated debian/copyright to refer to the correct location of the GPL. * debian/rules: changed DESTDIR to `pwd`/debian/samba (was `pwd`/debian/tmp.) * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some strange reason dh_installdirs is not creating debian/tmp/ so I needed to tweak everything to install stuff in debian/samba rather than in debian/tmp.) * debian/control: changed section of samba-docs to 'doc' (was 'docs') * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules and source/scripts/installswat.sh.) * Fixed (by tweaking debian/rules) /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid. * Added "Provides: samba-client" to smbclient's section in control. Closes: #71143: smbclient: Smbclient should provide samba-client. * Fix for desired_access being zero in map_share_mode() (patch to source/smbd/nttrans.c.) Thanks to Gary Wilson for bringing this patch to my attention. * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and 2.2.x kernels even when the build is done in a system running a 2.2.x kernel. Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but doesnt depend on it. Closes: #72758: README.Debian should comment on 2.0.x kernels. Closes: #56935: Samba 2.0.6 and Kernel 2.0.x. Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info. Closes: #60580: samba: failed to set gid. Closes: #64280: Samba panics, can't set gid. Closes: #66816: Must deal with brokenness under 2.0.x. Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK. Closes: #69735: PANIC: failed to set gid Closes: #66122: "smbclient -L localhost -U%" returns with "tree connect failed: code 0". Closes: #57637: Samba says tree connect error. Closes: #58015: potato samba wins support is broken. * Fixed comments in sample smb.conf to point to the correct location. Closes: #69578: comments in smb.conf points to wrong path. * Move codepages from /etc/samba/codepages/ to /usr/share/samba/codepages/. Closes: #63813: samba; codepages should go in /usr/lib. * Moved /var/samba/ to /var/state/samba/. Closes: #49011: samba package not FHS compliant. * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain() is found. Closes: #44558: netgroup support missing in samba 2.0.5a-1. * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and --exec. Got rid of --exec so --pidfile works. -- Eloy A. Paris Thu, 11 Jan 2001 00:15:57 -0500 samba (2.0.7-3) frozen unstable; urgency=high * Release manager: this closes a RC bug. * Commented out the section in source/configure.in that auto-detects CUPS support and then ran autoconf to generate a new configure script. This was done to prevent machines that have libcupsys-dev installed from detecting CUPS support and adding an unwanted dependency on libcupsys. This way the whole printing system won't break on upgrades. CUPS support should be added after Potato is released. Closes: #65185: samba-common: Upgrading removes printing system. Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys. * Updated README.debian. Closes: #64594: Old README.Debian in /usr/share/doc/samba. -- Eloy A. Paris Tue, 20 Jun 2000 19:16:04 -0400 samba (2.0.7-2) frozen unstable; urgency=high * Release manager: this closes RC bug #63839 that prevents Samba to be built from source. * Fixed a stupid typo in debian/rules that was preventing Samba to be built from source. Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir) * I forgot to mention that O'Reilly's book "Using Samba" was donated to the Open Source community. The book was included in Samba 2.0.7 in HTML format and is part of the Debian Samba package since Samba 2.0.7-1. * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help files were supposed to be provided in both the swat and the samba-doc packages. This duplication was a waste of space. Starting with Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML files are included only in samba-doc, and are accessed via symlinks from within swat. Closes: #58810: superfluous files in swat? * Added a 'echo "."' to /etc/init.d/samba in the reload) section. Closes: #63394: "echo ." missing in reload section of init.d script * Fixed typo in docs/htmldocs/using_samba/ch06_05.html. Closes: #64344: typo "encrypted passwords" * Cleaned up samba's postrm script so important common files aren't deleted when samba is purged. Created a samba-common.postrm script. Closes: #62675: purging samba removes /etc/samba/smb.conf. Closes: #63386: samba --purge removes /etc/samba dir even though smbclient/smbfs/samba-common packages are still installed -- Eloy A. Paris Wed, 3 May 2000 02:42:07 -0400 samba (2.0.7-1) frozen unstable; urgency=low * New upstream version. Dear Release Manager: please allow this package to go to frozen as it contains fixes to a _lot_ of problems. You can take a look at all the problems fixed by this release in the official upstream announcement at http://us1.samba.org/samba/whatsnew/samba-2.0.7.html. * Added --with-utmp to add utmp support to smbd (this is new in Samba 2.0.7) * Closes: #62148 - samba not rotating filled logs. * Closes: #56711: Samba doesn't manage well long share name (please note that it's possible to connect to shares with names longer than 14 characters but the share will be listed with a name truncated to 13 characters.) * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67). Closes: #50907 - logon path not working. This is not a bug, it's just Samba doing the same thing an NT server does. See WHATSNEW.txt and smb.conf's man page for details. * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper is not supported anymore.) * Closes: #58994 swat: typo in swat description. * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware problems, person that reported the bug never came back.) Closes: #54398 - smbadduser fails, looks for ypcat. * Fixed swat's man page to include Debian specific installation instructions. There's not necessary to edit /etc/services or /etc/inetd.conf. (Closes: #58616 - incomplete install config && incorrect installation instructions.) * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat to look for smbd and nmbd in the wrong place when requested to start or stop smbd or nmbd. (Closes: #55028 - swat can't start samba servers.) * Closes: #37274: smbclient does not honour pot. (Tested and seems to be working now.) * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492, #50479, #39818, #54383, #59411. (please re-open any of this if the problem still exists - I was unable to confirm any of this because I could never reproduce them.) Closes: #56699 - Samba's nmbd causes random kernel oops several times in a row. Closes: #62185 - nmbd's forking until no more file descriptors are available. Closes: #56247 - session setup failed: ERRSRV - ERRbadpw. Closes: #52218 - Either wins proxy does not work, or I don't understand it. Closes: #43492 - intermittent problem changing password. Closes: #50479 - Can't access windows 2000 shares with samba. Closes: #39818 - samba-common: Upgrading Samba from the Slink version. Closes: #54383 - samba-common: Missing /etc/smb.conf. Closes: #59411 - smbclient: cannot browse Win2k shares. -- Eloy A. Paris Thu, 27 Apr 2000 16:07:45 -0400 samba (2.0.6-5) frozen unstable; urgency=low * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries in this package are broken unless libcupsys1 is installed. samba-common has a "grave" bug because of this. Instead of adding libcupsys1 to the Depends: list of each package in debian/control I investigated why dh_shlibs was not picking the dependency automatically. It turns out that it's probably a bug in libcupsys1 because the format of its shlibs file is not correct. I fixed that file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are picked correctly. I'll talk to the libcupsys1 maintainer. I think the addition of CUPS support to Samba is a big change that should not go into Frozen. So, I decided to back up the addition of CUPS support I did in 2.0.6-4 to minimize problems. I'll add CUPS support again when I start working on Samba for Woody. (Closes: #59337 - samba-common has a missing dependency) -- Eloy A. Paris Wed, 1 Mar 2000 08:40:02 -0500 samba (2.0.6-4) frozen unstable; urgency=low * It seems that sometimes nmbd or smbd are not killed when upgrading. I think it is because in samba's prerm script I was calling start-stop-daemon with the --pidfile switch and in old versions of Samba the nmbd and smbd daemons did not store their PIDs in a file in /var/samba/. I changed debian/samba.prerm so the existence of the PID files is checked before calling "start-stop-daemon --pidfile ..." If the PID files do not exist then start-stop-daemon is called without the --pidfile parameter. (Closes: #58058 - upgrade from slink went badly) * Fixed typo in description of swat package in debian/control. * Installed libcupsys1-dev so the configure script picks up CUPS and Samba is compiled with CUPS support. Also added libcupsys1 to the Depends: list of package samba in debian/control. (Closes: #59038 - samba not compiled with cups support) * Added a small paragraph to debian/README.debian warning about possible problems with the WINS code in Samba 2.0.6. -- Eloy A. Paris Mon, 28 Feb 2000 14:00:42 -0500 samba (2.0.6-3) frozen unstable; urgency=low * Applied patch posted by Jeremy Allison to the samba mailing list that should take care of the internal errors reported in bug #52698 (release-critical). Wichert: please test as I never could reproduce it here. (Closes: #52698 - samba gets interbal errors) * Moved samba-docs to the 'docs' section. (Closes: #51077 - samba-doc: wrong section) * Added reload capability to /etc/init.d/samba (only for smbd because nmbd does not support reloading after receiving a signal). (Closes: #50954 - patch to add reload support to /etc/init.d/samba) * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so Unix password syncronization works with the passwd program currently in Potato. Thanks to Augustin Luton for the correct chat script. * Stole source/lib/util_sec.c from the CVS tree of what will become Samba 2.0.7 or whatever so we can use the same binaries under both 2.0.x and 2.2.x kernels. (Closes: #51331 - PANIC: failed to set gid) * smbadduser is now provided as an example and it's customized for Debian. I am not providing this script in /usr/sbin/ because then I would need a dependency on csh, something that I don't want to do. (Closes: #51697, #54052) * Fixed the short description of the smbfs package in debian/control. (Closes: 53534 - one-line description out of date). -- Eloy A. Paris Tue, 23 Nov 1999 16:32:12 -0500 samba (2.0.6-2) unstable; urgency=low * samba-common now depends on libpam-modules (not on libpam-pwdb, which I have been told is obsolete). I modified /etc/pam.d/samba accordingly to reflect the change. (Closes: Bug#50722: pam pwdb dependence?). * The old /etc/pam.d/samba file which had references to pam_pwdb caused smbd to die with a signal 11. The new /etc/pam.d/samba file fixes this problem. (Closes: #50876, #50838, #50698) * Compiled with syslog support (use at your own risk: syslog support is still experimental in Samba). I added the parameters "syslog = 0" and "syslog only = no" to the sample smb.conf to avoid pestering users that do not want Samba to log through syslog. (Closes: Bug#50703 - syslog only option doesn't work) * Removed the stupid code in the smbmount wrapper script that tries to load the smbfs module if smbfs is not listed in /proc/filesystems. (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled as a module in the kernel) * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so 'mount -t smb ...' works just as 'mount -t smbfs ...'. (Closes: Bug#50763 - 'mount -t smb' doesn't work) -- Eloy A. Paris Sat, 20 Nov 1999 18:53:35 -0500 samba (2.0.6-1) unstable; urgency=low * Samba 2.0.6 has been released. This is the first try of the Debian Samba packages. I know for sure that smbd won't work properly on 2.0.x kernels because the patch that Wichert sent me does not apply to the new source/lib/util_sec.c in Samba 2.0.6. That file was completely re-written by Tridge. * Updated README.Debian. * A new client utility called smbspool appeared in Samba 2.0.6. I added this utility to the smbclient package, although I haven't tried it yet. * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount. This is to be able to type "mouont -t smbfs ...". This symlink goes in the smbfs package, of course. * This new release should close the following bugs (some of these are fixed for sure in this new upstream release, some others I could not reproduce but I believe they are fixed if they were real bugs. As always, please feel free to re-open the bugs if the problem is not solved). Closes: Bug#33240: icmp mask needs a bug workaround. Closes: Bug#37692: samba: Has problems detecting interfaces. Closes: Bug#38988: samba: Truly bizzare behavour from nmbd. Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast properly. Closes: Bug#44131: smbfs: no longer possible to set file and directory-modes. Closes: Bug#46992: smbmount-2.2.x manpage wrong. Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline. Closes: Bug#46605: smbmnt segfaults. Closes: Bug#48186: smbmount. Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included]. Closes: Bug#47332: smbmount: could -f and -P be added back? * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM module). To succesfully add PAM support, I created /etc/pam.d/samba and added this file as a conffile for the samba-common package. I also made samba-common depend on libpam-pwdb. * Added simple man pages for the wrapper scripts smbmount and smbmount. (Closes: Bug#44705 - Missing smbmount man page) * Installed libreadlineg2-dev in my system so smbclient now has a "history" command and libreadline support :-) * This time I did add a check to the smbmount wrapper script to see if the kernel has support for smbfs, as suggested by Jeroen Schaap . I mentioned in the changelog for samba-2.0.5a-3 that I did this but I forgot at the end. -- Eloy A. Paris Thu, 11 Nov 1999 12:08:15 -0500 samba (2.0.5a-5) unstable; urgency=low * I am sorry to report that the smbwrapper package is gone for the moment. The reason for this is twofold: first of all, smbwrapper is completely broken in Samba-2.0.5a (it compiles but it doesn't run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second, when I asked Andrew Tridgell (father of Samba) about the state of smbwrapper he told me that Ulrich Drepper (head of the glibc project) broke on purpose the glibc stuff in which smbwrapper is based. Consequently, Tridge recommended me to compile Samba without support for smbwrapper. When, I have no idea. Sorry folks. Here is the original message I received from Andrew: > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's > smbwrapper doesn't even compile under glibc2.1. yep, Ulrich deliberately broke it. It won't get fixed till glibc allows the sorts of games it plays to work again. I suggest you turn it off in your build scripts until that gets sorted out. * Swat's file are now in /usr/share/samba/ instead of /usr/lib/samba/ (bug #49011). * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011). -- Eloy A. Paris Tue, 2 Nov 1999 12:59:13 -0500 samba (2.0.5a-4) unstable; urgency=low * Applied patch from our fearless leader (Wichert) to fix the darn bug that prevents Samba to work on 2.0.x kernels if it was compiled in a system running a 2.2.x kernel. This closes #40645 (build uses setresuid which doesn't work under 2.0.34 (does apparently under 2.2.x) ). * Fixed the entry that swat's postinst script adds to /etc/inetd.conf so it is '## swat\t\tstream\ttcp\tnowait.400 ...' instead of '##swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused 'update-inetd --enable swat' to leave the entry for swat disabled. Thanks to Dave Burchell for finding out this problem. This closes #48762 (swat uses non-standard syntax to comment out inetd.conf entry). * /usr/sbin/swat does not think anymore that the smbd daemon lives in /usr/local/samba/bin/. To fix this I am running now source/configure with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba 'swat' fails: incorrect hardwired path in the binary). -- Eloy A. Paris Sun, 31 Oct 1999 03:42:38 -0500 samba (2.0.5a-3) unstable; urgency=low * I am pretty darn busy with my MBA, I apologize for the long time it's taking to squash bugs in the Samba packages. * Built with debhelper v2 for FHS compliancy. Changed a couple of things in debian/rules to accomodate for the new place for the docs. I also had to change debian/{samba.postinst,samba.prerm,swat.postinst} to make sure that the symlink from /usr/doc/xxx exists and points to /usr/share/doc/xxx (the reason for this is that I am not letting debhelper to create these scripts for me automatically). * Built with latest libc6. * smbfs: finally, the nasty bug that causes smbmount to die after a while is gone thanks to Ben Tilly . The problem was just a typo in source/client/smbmount.c. This closes grave bug #42764 (smbmount dies) and #43341 (smbfs-2.2.x won't function after a while). * Fixed the smbmount wrapper script to eliminate a bashism (closes #45202 - "wrapper scripts use $* instead of "$@") and to recognize 2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize kernel 2.3.x"). * Added a check to the smbmount wrapper script to see if the kernel has support for smbfs, as suggested by Jeroen Schaap . * swat's man page is now part of the swat package, not of the samba package. This closes #44808 (Samba has a man page for swat, but the binary is not included). * The interface program smbrun is not longer needed by smbd because of the availability of execl() under Linux. Because of this, the smbrun is not even being compiled. Since there is no need for smbrun now, the smbrun man page was taken out of the samba package. This closes #45266 (/usr/bin/smbrun missing). * smbpasswd is now part of the samba-common package, and not part of the samba package. This is to let administrators that do not want to install a full Samba server administer passwords in remote machines. This closes bug #42624 (smbpasswd should be included in smbclient). This bug report also suggests that swat becomes part of the samba package, that smbfs becomes part of the smbclient package, and that the binary smbpasswd becomes part of the smbclient package. I moved smbpasswd to the samba-common package but I am reluctant to do the other things the bug report suggests. * In order to keep dpkg happy when moving smbpasswd from the samba package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)" in the control section of the samba-common package and a "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the samba package (in debian.control). * Samba is now being compiled with the "--with-netatalk" option. This closes #47480 (Could samba be compiled with the --with-netatalk option). * All packages that depend on samba-common have a versioned dependency now. This was accomplished by adding "(= ${Source-Version})" to the relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho for the hint. This closes #42985 (samba should probably have a versioned depends on samba-common). * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file). * Added the smbadduser helper script to the samba package. This closes #44480 (Samba doesn't come with the smbadduser program). * Applied patch from szasz@triton.sch.bme.hu that prevents smbmount to leave an entry in /etc/mtab for a share that could not be mounted because of invalid user of password. The patch also allows smbumount to unmount the share in the event that something goes wrong with the smbmount process. This closes bug #48613 (Mount/umount problems + patch) as well as #44130 (failed mount is still mounted). * smbmount-2.2.x is now setuid root. This is needed for the patch applied above to be effective. If smbmount-2.2.x is not setuid root then an entry will be left in /etc/mtab even when the mount fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid for this to work. -- Eloy A. Paris Wed, 27 Oct 1999 10:36:13 -0400 samba (2.0.5a-2) unstable; urgency=low * This version is basically the same as 2.0.5a-1 but it was compiled on a Potato system with glibc2.1. See below the change log for 2.0.5a-1 for more information. -- Eloy A. Paris Tue, 27 Jul 1999 02:25:29 -0400 samba (2.0.5a-1) stable; urgency=high * I'm back from the Honey Moon. We are pretty busy because we are moving to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still have plenty of things to pack and to do. Samba 2.0.5 was released while I was in the Honey Moon and it is just now (almost 3 AM) when I have time to package it. * Because of the security problems fixed in 2.0.5, this upload goes to both stable and unstable (the Security Team asked for this). * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will be compiled on a Potato system. * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common section in debian/control (as suggested by Steve Haslam ) to fix the problems that appear when upgrading from the Samba package in Slink. Please test this as I am completely unable to do so. This should fix bug #39818 (Upgrading Samba from the Slink version). * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in order to have defined several socket options when compiling with Linux 2.2.x kernel headers - the fix is now upstream. * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command line syntax similar to the one used by the old smbmount (for 2.0.x kernels). This means that the wrapper script is no longer necessary so I removed it. In its place there is a simple wrapper script that calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is running. * Because of the wedding, the Honey Moon, and our move to Pittsburgh, I can't work on fixing other bugs in this release. -- Eloy A. Paris Tue, 27 Jul 1999 02:18:51 -0400 samba (2.0.4b-3) unstable; urgency=low * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files and because of this /usr/bin/smbumount was part of the samba package instead of part of the smbfs package. -- Eloy A. Paris Thu, 1 Jul 1999 01:51:24 -0400 samba (2.0.4b-2) unstable; urgency=low * Dark (and archive maintainers): please remove from Potato the smbfsx binary package and also the old source package for smbfs. smbfs and smbfsx have been merged starting with this version. * Merged the old smbfs package with Samba. Now there is only one package for the smbfs utilities and is called "smbfs". The package smbfsx does not exist any more and this new smbfs package must be used for both 2.0.x and > 2.1.x kernels. * A wrapper script was added to handle the syntax change in smbmount in the new smbfs utilities (required for kernels > 2.1.70). The home page for this script is http://www.wittsend.com/mhw/smbmount.html. Please _note_ that this will change (for good) in Samba 2.0.5 :-) * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x or smbumount-2.0.x depending on the kernel currently running. * Not using -t for savelog in cron.weekly script. * Recompiled without libreadlineg-dev (Samba does not seem to be using it so unnecessary dependencies are produced). * glibc2.1 build. * Removed smbpasswd.8 man page from the debian/ directory because it is now being provided upstream. * Got rid of the ugly hack I put in source/lib/util_sock.c to have IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the autoconf stuff to #include . I've sent the patch to Jeremy Allison so we have this upstream. -- Eloy A. Paris Mon, 28 Jun 1999 17:47:19 -0400 samba (2.0.4b-1) unstable; urgency=low * New upstream release. This release fixes the following Debian bugs: #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy Allison released Samba 2.0.4 and found out that there were a couple of minor bugs so he released 2.0.4a. Then he found out about more serious bugs and released 2.0.4b. I have built this package several times between yesterday and today because of this. Now I am releasing the Debian packages for Samba with what I believe will be the latest release the Samba Team will make at least in the next 4 days (Jeremy is taking a short vacation). * Still compiling against glibc2.0 (sorry about that :-) * Hacked source/smbwrapper/smbsh.c to fix the problem of smbsh not finding the shared library smbwrapper.so. It looks now in /usr/lib/samba/ for this file. This fixes #32971, #32989, #33278, #34911 and #36317. * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf and /etc/samba/codepages/. This fixes #33128 (smbmount complains about missing /etc/smb.conf). * Package swat does not depend on httpd anymore (there's no need to). This fixes #35795 (swat requires httpd). * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and smbumount-2.2.x. Same applies to the man pages. * Changed minor type in smbmount's man page (changed "\"" by "\'"). This fixes #34070 (wrong quotes in manpage). * Used Fabrizio Polacco's procedure to create the Debian package for Samba. This closes #35781 (samba has no pristine source). * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only if the size of either is different than 0. Also, added comments at the beginning of this script to explain how rotation of log files works in Samba. Thanks to ujr@physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler) for the suggestions. This closes #37490 (cron.weekly script rotates not used [sn]mb.old files). As I side effect, this should also close #31462 (still trouble with /etc/cron.weekly/samba). * Check for old /etc/pam.d/samba file which is not provided by this version of the Debian Samba package but was provided in older versions. If this file exists we delete it. We check for this in the postinst. This closes #37356 (samba put stuff in pam.d that pam complains about) and #34312 (libpam0g: questions during upgrade). * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done in the postinst script. This closes #35730 (Security problem with /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1). * I have just checked and it looks like #28748 (smbfsx doesn't "return ") has been fixed. This might have been fixed since a long time ago. * Long long standing bug #18488 (smbclient: internal tar is broken) is closed in this release of Samba. The bug might have been closed for a long long time, but I did not check for this before. * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY" message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works), #34148 (warnings from smbd) and #35333 (samba warnings). -- Eloy A. Paris Thu, 20 May 1999 00:35:57 -0400 samba (2.0.3-1) unstable; urgency=low * New upstream version. * Removed the convert_smbpasswd.pl program I created and put in /usr/doc/samba/ because there's a convert_smbpasswd script in the upstream sources that does the same thing. I modified the postinst script to use this script instead of the one I created. -- Eloy A. Paris Sun, 28 Feb 1999 01:35:37 -0400 samba (2.0.2-2) unstable; urgency=low * Updated the README.Debian file. * Updated the description of the samba package in the control file. * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now installed setuid root as they should be. This was done by doing a a "chmod u+s" for each binary in debian/rules and by creating the file debian/smbfsx.suid. * Minor patch to source/client/smbumount.c to allow normal users to umount what they have mounted (problem was a kernel vs. libc6 size mismatch). I sent the patch upstream. * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is created. * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to debian/smbwrapper/usr/lib/samba/. * Hacked source/smbwrapper/smbsh.c to fix the problem of smbsh not finding the shared library smbwrapper.so. -- Eloy A. Paris Thu, 11 Feb 1999 18:11:34 -0400 samba (2.0.2-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Thu, 11 Feb 1999 01:35:51 -0400 samba (2.0.1-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Sat, 6 Feb 1999 06:51:18 -0400 samba (2.0.0final-4) unstable; urgency=low * The samba postinst made an unwarranted assumption that the file /etc/samba/smbpasswd exists. If the file did not exist (which is perfectly valid) the postinst will fail. This fixes #32953. -- Eloy A. Paris Fri, 5 Feb 1999 23:32:46 -0400 samba (2.0.0final-3) unstable; urgency=low * Added to debian/control a "Depends: ${shlibs:Depends}" line for the samba-common package so dependencies for this package are set correctly (thanks to Dark for pointing this out). -- Eloy A. Paris Thu, 4 Feb 1999 09:45:21 -0400 samba (2.0.0final-2) unstable; urgency=low * Finally!!! The first upload to unstable. Sorry for the delay folks but I have been quite busy lately :-) Another reason for the delay is that I wanted to ease the migration from Samba 1.9.18p10 and before to Samba 2.0.0. I changed the location of the config. files from /etc/ to /etc/samba/ and this made things a little bit harder. * This package needs 2.2 kernel headers to compile (well, this is true for the smbfsx package, all others compile fine with 2.0 kernel headers). * Created a preinst script for the samba package to take care of the location migration of smb.conf (from /etc/ to /etc/samba/). The preinst script also takes care of moving /etc/smbpasswd to its new location (/etc/samba/). * Created postinst and postrm scripts to add/remove an entry for swat in /etc/inetd.conf. * I had forgotten to install the sambaconfig script so I changed debian/rules to install this script. * Added a postrm script for the samba package (I had forgotten to add this script to the new Samba packages after the migration from 1.9.18 to 2.0.0). * Created a small Perl script that is called from the samba postinst to convert the smbpasswd from the old format used in version prior to 2.0.0 to the new one used in 2.0.0 and beyond. * The upgrade process should be automatically now. Please let me know of any problems you encounter. -- Eloy A. Paris Sat, 23 Jan 1999 09:34:10 -0400 samba (2.0.0final-1) experimental; urgency=low * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable because I still have to work out the migration from the old samba packages to the new ones. I also need to work more on the new swat package. -- Eloy A. Paris Thu, 14 Jan 1999 22:40:02 -0400 samba (2.0.0beta5-1) experimental; urgency=low * New upstream version. -- Eloy A. Paris Tue, 5 Jan 1999 00:37:57 -0400 samba (2.0.0beta4-1) experimental; urgency=low * New upstream version. -- Eloy A. Paris Wed, 23 Dec 1998 18:37:45 -0400 samba (2.0.0beta3-1) experimental; urgency=low * New upstream version. * I have just realized that the documentation patches (for man pages) that I used for the 1.9.18 release are not longer necessary because there was a major re-write of all the Samba documentation that added the missing bits of information. So, I have just removed these minor patches. -- Eloy A. Paris Tue, 8 Dec 1998 12:00:30 -0400 samba (2.0.0beta2-1) experimental; urgency=low * New upstream version. * This new version fixes the potential security problem that was posted to debian-private (using the "message command" parameter to execute arbitrary commands from messages sent from LinPopUp). * Changed /etc/init.d/samba to use one of the variables stored in /etc/samba/debian_config to know how Samba is being run (from inetd or as daemons) instead of grepping /etc/inetd.conf which may not exist if the user is running xinetd (this fixes bug #29687 - assumes using vanilla inetd) -- Eloy A. Paris Mon, 23 Nov 1998 23:32:03 -0400 samba (2.0.0beta1-1) experimental; urgency=low * First beta release of the samba-2.0.0 code. Before the beta I was working with sources downloaded directly from the CVS server. This package goes into experimental and I plan to release the new samba to unstable as soon as it gets out of beta. * Created several packages out of the Samba sources. They are: samba (nmbd and smbd daemons + related programs), smbclient (FTP like command line utility to retrieve files from SMB servers), swat (Samba Web Administration Tool), samba-common (common files used by samba, smbclient and swat), smbfsx (smbfs utilities for kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation). * Refreshed debian/samba-doc.docs so recently added docs. are installed in the samba-doc package. New additions include man pages in the /usr/doc/samba-doc/htmldocs/ directory. * Deleted Debian specific nmblookup(1) man page as it is now upstream. * Added smbtorture to smbclient package. * Moved rpcclient from the samba package to the smbclient package. * The Samba daemons (nmbd and smbd) now create a PID file so I changed all calls to start-stop-daemon to use the PID file. * Fixed debian/rules to install mksmbpasswd (fixes #27655). * Modified /etc/init.d/samba so nmbd is started without the -a (append to the log file instead of overwrite) switch. The new behavior of nmbd is to NOT overwrite log files, so the -a switch can be deleted safely. * Moved from debstd to debhelper. -- Eloy A. Paris Thu, 1 Oct 1998 08:37:41 -0400 samba (1.9.18p10-5) frozen unstable; urgency=high * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than the one I was trying to fix: in /etc/init.d/samba I got rid of the test that tells us whether the Samba daemons are running from inetd or as standalone daemons. I corrected the problem by editing again /etc/init.d/samba to uncomment the test. * Wishlist bug #28298 (typos in samba) was fixed. * Wishlist bug #28309 (typos in smb.conf) was fixed. -- Eloy A. Paris Wed, 28 Oct 1998 09:11:47 -0400 samba (1.9.18p10-4) unstable; urgency=low * Minor patch to debian/rules to delete *substvars instead of only substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz for this). * Small patch to source/shmem_sysv.c that eases compilation under glibc-2.1 (thanks to Daniel for this). -- Eloy A. Paris Thu, 17 Sep 1998 15:33:49 -0400 samba (1.9.18p10-3) unstable; urgency=low * Patched smbclient again to fix minor formatting problem introduced by Magosanyi Arpad's smbclient patch. -- Eloy A. Paris Thu, 3 Sep 1998 11:03:23 -0400 samba (1.9.18p10-2) unstable; urgency=low * Sync'ed include files for the smbfs utilities with the ones in kernel 2.1.119. * Added to the /usr/doc/samba/examples/ directory a new script called wins2dns (courtesy of Jason Gunthorpe ) that generates BIND sonze files for hosts in the WINS database. * Patched smbclient to include enhancements by Magosanyi Arpad that make scripting easier. -- Eloy A. Paris Fri, 28 Aug 1998 13:34:54 -0400 samba (1.9.18p10-1) stable unstable; urgency=low * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a description of what has changed). I built a 1.9.18p9-1 but I never released it because an obscure bug was found just a couple of days before the official release, so the Samba Team stopped the rollover of 1.9.18p9. * Updated documentation (new files were added to the docs/ directory that were not installed in /usr/doc/samba/). * Fixed long standing bug #7695 (smb.conf's man page doesn't document 'printing=lprng') - I made a couple of changes to the man page to include references to lprng. * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it is necessary to make samba suggest psmisc just because the postinst script mentions to call killall. So, I removed all references to "killall" in the scripts. * Fixes bug #25999 (Samba does not by default work with unix password sync): I added the "passwd program" and "passwd chat" parameters to the sample smb.conf to reflect the Debian environment. -- Eloy A. Paris Fri, 21 Aug 1998 08:59:18 -0400 samba (1.9.18p9-1) unstable; urgency=low * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a description of what has changed). * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is now part of the new upstream version. * Corrected small typo in addtosmbpass' man page (fixes #25629). -- Eloy A. Paris Tue, 11 Aug 1998 08:53:08 -0400 samba (1.9.18p8-2) frozen unstable; urgency=medium * Applied patch received from Jeremy Allison (Samba Team) that fixes "grave" bug #23903 (samba maps username before authenicating with NT password server). * Added a "sleep 2" between "start-stop-daemon --stop" and "start-stop-daemon --start" in /etc/init.d/samba so when this script is called with the "restart" parameter the Samba daemons are restarted properly. This fixes bug #24211 (init.d script doesn't restart). * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to avoid annoying warning messages. * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096 and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't find who sent this suggestion to me. If you are listening, drop me a note and I'll put your name here :-) -- Eloy A. Paris Mon, 29 Jun 1998 08:45:01 -0400 samba (1.9.18p8-1) frozen unstable; urgency=low * New upstream release that fixes _lots_ of "ugly" bugs. The list of fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt). * Fixed postinst to quote arguments to if [ arg .. ] constructs (fixes #22881). * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing list) that solves a problem with username maps (the Samba Team did not catch this problem before final 1.9.18p8). * Made /etc/init.d/samba to print out a warning when Samba is running from inetd and the user runs /etc/init.d/samba to start|stop|restart Samba (there's no point on doing this because inetd will start the daemons again when there is traffic on UDP port 137-139). -- Eloy A. Paris Sat, 13 Jun 1998 00:18:25 -0400 samba (1.9.18p7-4) frozen unstable; urgency=medium * Fixes the serious problem of having the WINS name server database getting deleted at boot time. That happened because the WINS database was being stored under /var/lock/samba/ and all files under /var/lock/ are deleted at boot time. The place where the WINS database is stored was moved to /var/samba/. -- Eloy A. Paris Mon, 18 May 1998 20:24:29 -0400 samba (1.9.18p7-3) stable; urgency=high * Libc5 version for Bo (stable) that fixes the recently reported security hole. -- Eloy A. Paris Mon, 18 May 1998 20:19:33 -0400 samba (1.9.18p7-2) frozen unstable; urgency=low * Added patches from the non-mantainer upload that make us able to compile Samba on Alpha systems. This fixes bug #22379. -- Eloy A. Paris Wed, 13 May 1998 20:38:51 -0400 samba (1.9.18p7-1) frozen unstable; urgency=low * New upstream release (just bug fixes, no new functionality). -- Eloy A. Paris Wed, 13 May 1998 11:47:32 -0400 samba (1.9.18p6-2) frozen unstable; urgency=low * Uploaded to frozen (I forgot to upload last version to frozen so it got installed only in unstable). -- Eloy A. Paris Tue, 12 May 1998 18:10:17 -0400 samba (1.9.18p6-1.1) unstable; urgency=low * non-maintainer upload for Alpha * patch needed for source/quota.c (_syscall4() confusion) -- Paul Slootman Tue, 12 May 1998 20:39:13 +0200 samba (1.9.18p6-1) unstable; urgency=low * New upstream release that fixes a possible buffer overflow. This security hole was reported on BugTraq by Drago. The previous Debian version (1.9.18p5-1) was not released because 1.9.18p5 and 1.9.18p6 were released very closely. -- Eloy A. Paris Mon, 11 May 1998 20:28:33 -0400 samba (1.9.18p5-1) unstable; urgency=low * New upstream release (no new funcionality, just bug fixes - see /usr/doc/samba/WHATSNEW.txt.gz). * Backed off Debian patches that were added upstream. -- Eloy A. Paris Mon, 11 May 1998 08:43:53 -0400 samba (1.9.18p4-2) frozen unstable; urgency=low * Patched smbclient(1) man page to not reference the unsopported -A parameter (fixes #6863). * Changes to start nmbd with the -a option (in /etc/init.d/samba and in the entry added to /etc/inetd.conf). * Fixed typo in sample smb.conf (fixes #21484). * Fixed yet another typo in sample smb.conf (fixes #21447). -- Eloy A. Paris Fri, 17 Apr 1998 22:19:23 -0400 samba (1.9.18p4-1) frozen unstable; urgency=low * New upstream version that fixes several bugs. * New scheme for keeping track of Debian specific configuration. This new scheme fixes bug #18624 (Samba always asks the user about configuration options). New scheme stores Debian specific configuration information in /etc/samba/debian_config. * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the new configuration scheme. * Moved required kernel 2.1.x include files inside the source tree so I don't have to do very nasty things like creating crazy symlinks in /usr/include to make this package compile. This allows non-root users to build the package and fixes bug #20104. * Fixed address of the FSF in /usr/doc/samba/copyright (problem reported by lintian). * The /etc/init.d/samba script now supports the force-reload argument, as required by the policy (problem reported by lintian). * Added a "rm /etc/cron.weekly/samba" at the end of the postinst. * Now the samba package can be installed even if no nmbd or smbd processes are running. This fixes the following bugs: #8917, #9334, #10268, #10411, #11146 and #13387. * Provides the original README in /usr/doc/samba. This fixes bug #9693. * Added a --no-reload option to sambaconfig to not reload Samba after configuration. * Created man pages for sambaconfig(8), addtosmbpass(8), mksmbpasswd(8) and nmblookup(1). * Corrected small typo in sample /etc/smb.conf. * Added two new parameters to /etc/smb.conf: "preserver case" and "short preserve case". * "rm -Rf /var/lock/samba" in postrm when package is being purged. * Patched upstream source (nmbd.c) to not overwrite log files when nmbd is called with the -a parameter (fixes #17704: nmbd ignores -a option). * /etc/init.d/samba now starts the nmbd daemon with the -a parameter to not overwrite log files. -- Eloy A. Paris Mon, 23 Mar 1998 21:22:03 -0400 samba (1.9.18p3-1) unstable; urgency=low * New upstream version. * Oppsss!!! I really screwed it up (actually, debstd did). 1.9.18p2-2 still contained man pages (smbmount and smbumount) part of other packages. This version does have this corrected. If not, I no longer deserve to be a Debian developer! So, this version fixes bug #18438 and some of the bugs I claimed to fix in 1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd with -m in debian/rules (man pages are installed by "make install" so it's a bad idea to re-install man pages with debstd). -- Eloy A. Paris Mon, 23 Feb 1998 17:32:42 -0400 samba (1.9.18p2-2) unstable; urgency=low * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided a man page for smbmount, which conflicts with package smbfs. This was solved by creating a multi-binary package that produces package samba and new package smbfsx. * Fixes bug #18000 (typo in postinst). * Fixes bug #17958 (postinst asks obsolete question). Actually, the question is still asked, but only if Samba is run as daemons. * Created a multi-binary package from the Samba sources: package samba and new package smbfsx which provides SMB mount utilities for kernels > 2.1.70. -- Eloy A. Paris Mon, 9 Feb 1998 19:47:05 -0400 samba (1.9.18p2-1) unstable; urgency=low * New upstream version. * Removed /etc/cron.weekly/samba because Samba does not handle well rotation of log files (if the log file is rotated Samba will continue to log to the rotated file, instead of the just created one). In any case, Samba will rotate log files after an specific file size. -- Eloy A. Paris Tue, 27 Jan 1998 22:34:27 -0400 samba (1.9.18p1-2) unstable; urgency=low * Created a multi-binary package out of the Samba sources to provide packages samba and smbfsx (userland utilities to work with smbfs with kernels > 2.1.x. -- Eloy A. Paris Sat, 17 Jan 1998 09:23:48 -0400 samba (1.9.18p1-1) unstable; urgency=low * New upstream version. * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in /var/backups/smbpasswd.bak. -- Eloy A. Paris Wed, 14 Jan 1998 13:40:56 -0400 samba (1.9.18alpha14-1) unstable; urgency=low * New upstream version. * Added a note to the postinst script telling the user that he/she needs to run smbpasswd manually after creating a new /etc/smbpasswd from /etc/passwd. -- Eloy A. Paris Tue, 23 Dec 1997 23:44:37 -0400 samba (1.9.18alpha13-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Tue, 16 Dec 1997 13:02:32 -0400 samba (1.9.18alpha12-1) unstable; urgency=low * New upstream version. * Conflicts with the sambades package because the new Samba 1.9.18 series do not depend on the DES libraries to support encrypted passwords. * Added parameter "encrypt passwords = yes" to /etc/smb.conf. * Compiled with support for quotas in disk_free(). * Home directories are now exported read only by default. * Re-worked debian/rules. * Re-worked sample smb.conf. -- Eloy A. Paris Thu, 4 Dec 1997 22:50:34 -0400 samba (1.9.17p4-1) unstable; urgency=low * New upstream version. * Made /etc/smb.conf readable by everybody because some Samba utilities will fail otherwise when run by non-root users. * Dropped PAM support while the PAM libraries are ported to libc6. -- Eloy A. Paris Tue, 21 Oct 1997 18:08:49 -0400 samba (1.9.17p3-1) unstable; urgency=low * New upstream version. * Made /etc/smb.conf readable only by root as suggested by smbd's man page. -- Eloy A. Paris Wed, 15 Oct 1997 09:21:25 -0400 samba (1.9.17p2-2) unstable; urgency=low * Running Samba as daemons instead of from inetd. * Removing netbios entries in /etc/inetd.conf. -- Eloy A. Paris Thu, 9 Oct 1997 23:37:25 -0400 samba (1.9.17p2-1) unstable; urgency=low * New upstream version that fixes a serious security hole. * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because these patches are now part of the upstream release. -- Eloy A. Paris Sun, 28 Sep 1997 22:54:33 -0400 samba (1.9.17p1-1) unstable; urgency=low * New upstream version. * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up compiler warnings. * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings. * Included crypt.h to have function prototype for crypt(). * Included netinet/tcp.h to have some socket options included. * Included netinet/ip.h to have some socket options included. * Linking with libcrypt (LIBM='... -lcrypt'). Without including this library smbd generates a seg. fault when authenticating users (?). -- Eloy A. Paris Wed, 10 Sep 1997 22:09:18 -0400 samba (1.9.17-1) unstable; urgency=low * New upstream version (called the "Browse Fix Release") * Added the option --oknodo to the start-stop-daemon invocation in prerm script. This was because the prerm was failing because start-stop-daemon was returning an error code if no nmbd or smbd daemons were found to kill. * The function yp_get_default_domain(), referenced in three source files was part of libc5 but with libc6 (glibc2) it has been moved to libnss_nis. Since the linker was unable to find the function I had to add LIBSM='-lnss_nis' to debian/rules. * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules because compiling was failing because of conflicts with glibc2. * Patched source/includes.h to include termios.h if GLIBC2 is defined. -- Eloy A. Paris Wed, 27 Aug 1997 08:39:32 -0400 samba (1.9.17alpha5-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Thu, 14 Aug 1997 18:05:02 -0400 samba (1.9.16p11-3) unstable; urgency=low * Fixed accidental omission of /etc/pam.d/samba. -- Klee Dienes Sat, 15 Mar 1997 22:31:26 -0500 samba (1.9.16p11-2) unstable; urgency=low * Recompiled against newer PAM libraries. * Added /etc/pam.d/samba. -- Klee Dienes Sat, 8 Mar 1997 01:16:28 -0500 samba (1.9.16p11-1) unstable; urgency=low * New upstream release. * Added PAM support. -- Klee Dienes Tue, 25 Feb 1997 18:00:12 -0500 samba (1.9.16p9-2) unstable; urgency=low * minor packaging changes -- Klee Dienes Sun, 3 Nov 1996 11:45:37 -0700 samba (1.9.16p9-1) unstable; urgency=low * upgraded to new upstream version -- Klee Dienes Sat, 26 Oct 1996 21:38:20 -0700 1.9.16alpha10-1: 960714 * Removed Package_Revision from control file. * Removed -m486 compiler option. * Added Architecture, Section and Priority fields to control file. * Upgraded to latest upstream version. * Uses update-inetd now. * Added shadow passwords support. * Fixed Bug#1946: nmbd won't browse 1.9.15p4-1: 951128 * Upgraded to latest upstream version. * Fixed many bugs. * Adds Master Browsing support. * Converted to ELF. * Fixed bug #1825 - nmbd is now killed when removing samba. 1.9.14-1: 950926 Andrew Howell * Upgraded to latest version. * Fixed Bug #1139 - samba won't print 1.9.14alpha5-1: * Fixes killing of inetd problem in debian.postint and debian.postrm 1.9.14alpha5-0: 950704 Andrew Howell * Taken over samba package from Bruce Perens. * Upgraded to newest version of samba. 1.9.02-1: 9-January-1994 Bruce Perens * Added Debian GNU/Linux package maintenance system files, and configured for Debian systems.