[Pkg-samba-maint] [samba] 01/03: Imported Debian patch 2:3.6.6-6+deb7u10
Roberto C. Sanchez
roberto at moszumanska.debian.org
Sat May 20 20:32:00 UTC 2017
This is an automated email from the git hooks/post-receive script.
roberto pushed a commit to branch wheezy
in repository samba.
commit 9168750add015cfba777b7d6a5f35f3fe15efbe3
Merge: a541859 ff4e466
Author: Santiago Ruano Rincón <santiagorr at riseup.net>
Date: Wed Jun 8 20:17:48 2016 +0200
Imported Debian patch 2:3.6.6-6+deb7u10
debian/NEWS | 12 ++---
debian/changelog | 18 ++++++-
debian/patches/821811-rpc_server-regression.patch | 33 +++++++++++++
debian/patches/bug9669_regression.patch | 35 ++++++++++++++
debian/patches/fix_netapp.patch | 33 +++++++++++++
.../patches/netlogon_credentials_regression.patch | 55 ++++++++++++++++++++++
debian/patches/series | 4 ++
7 files changed, 182 insertions(+), 8 deletions(-)
diff --cc debian/NEWS
index 6cc84fe,0000000..f50a5eb
mode 100644,000000..100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@@ -1,165 -1,0 +1,165 @@@
+samba (2:3.6.6-6+deb7u10) wheezy-security; urgency=high
+
+ This Samba security release addresses both Denial of Service and Man in
+ the Middle vulnerabilities.
+
+ A significant number of patches were back-ported, and in some areas
+ of winbindd the behaviour is now more like Samba 4.2 than 3.6
+
+ This new security patch implements new smb.conf options and a
+ number of stricter behaviours to prevent Man in the Middle attacks
+ on our network services, as a client and as a server.
+
+ Between these changes, compatibility with a large number of older
+ software versions has been lost in the default configuration.
+
+ See the release notes in WHATNEW.txt for more information.
+
+
+ Here are some additional hints how to work around the new stricter default behaviors:
+
+ * As a File Server, compatibility with the Linux Kernel cifs
+ client depends on which configuration options are selected, please
+ use "sec=krb5(i)" or "sec=ntlmssp(i)", not "sec=ntlmv2".
+
+ * As a file or printer client and as a domain member, out of the
+ box compatibility with Samba less than 4.0 and other SMB/CIFS
+ servers, depends on support for SMB signing or SMB2 on the
+ server, which is often disabled or absent. You may need to
+ adjust the "client ipc signing" to "no" in these cases.
+
+ However, all of these can be worked around by setting smb.conf
+ options in Samba, see the 4.2.0 and 4.2.11 release notes (because
+ many of the fixes are backported from there) at
+ https://www.samba.org/samba/history/samba-4.2.0.html and
+ https://www.samba.org/samba/history/samba-4.2.11.html and the
+ Samba wiki for details, workarounds and suggested
+ security-improving changes to these and other software packages.
+
+
+ New smb.conf options and defaults:
+
+ * raw NTLMv2 auth = no
+ * allow dcerpc auth level connect = no
+
+
+ Suggested further improvements after patching:
+
+ It is recommended that administrators set these additional options,
+ if compatible with their network environment:
+
+ server signing = mandatory
+ ntlm auth = no
- client signing = mandatory
++ client signing = mandatory
+
+ Without "server signing = mandatory", Man in the Middle attacks
+ are still possible against our file server and
+ classic/NT4-like/Samba3 Domain controller. (It is now enforced on
+ Samba's AD DC.) Note that this has heavy impact on the file server
+ performance, so you need to decide between performance and
+ security. These Man in the Middle attacks for smb file servers are
+ well known for decades.
+
+ Without "ntlm auth = no", there may still be clients not using
+ NTLMv2, and these observed passwords may be brute-forced easily using
+ cloud-computing resources or rainbow tables.
+
- Without "client signing = mandetory" we will not be able to detect
++ Without "client signing = mandatory" we will not be able to detect
+ a MitM attack between our client tools or winbindd and the server or
- AD DC. Later verisions of Samba implement additional features
- to protect these communications. Setting this option may however
- disable connections to servers that have smb signing disabled (the default,
- as above).
++ AD DC. Later versions of Samba implement additional features
++ to protect these communications. Setting this option may however
++ disable connections to servers that have smb signing disabled (the
++ default, as above).
+
+samba (2:3.6.5-2) unstable; urgency=low
+
+ NSS modules have been split out from libpam-winbind to
+ libnss-winbind.
+
+ If Recommends: installs are disabled on your system you may need
+ to manually install the libnss-winbind package after upgrading
+ from former versions of winbind (for instance from squeeze) or
+ from former versions of libpam-winbind.
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 07 May 2012 22:16:32 +0200
+
+samba (2:3.5.11~dfsg-3) unstable; urgency=low
+
+ PAM modules and NSS modules have been split out from the winbind
+ package into libpam-winbind.
+
+ If Recommends: installs are disabled on your system you may need
+ to manually install the libpam-winbind package after upgrading
+ from former versions of winbind (for instance from squeeze)
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 21 Oct 2011 20:00:13 +0000
+
+samba (2:3.4.0-1) unstable; urgency=low
+
+ Default passdb backend changed in samba 3.4.0 and above
+
+ Beginning with samba 3.4.0, the default setting for "passdb
+ backend" changed from "smbpasswd" to "tdbsam".
+
+ If your smb.conf file does not have an explicit mention of
+ "passdb backend" when upgrading from pre-3.4.0 versions of
+ samba, it is likely that users will no longer be able to
+ authenticate.
+
+ As a consequence of all this, if you're upgrading from lenny
+ and have no setting of "passdb backend" in smb.conf, you MUST
+ add "passdb backend = smbpasswd" in order to keep your samba
+ server's behaviour.
+
+ As Debian packages of samba explicitly set "passdb backend = tdbsam"
+ by default since etch, very few users should need to modify their
+ settings.
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 07 Jul 2009 20:42:19 +0200
+
+samba (3.0.27a-2) unstable; urgency=low
+
+ Weak authentication methods are disabled by default
+
+ Beginning with this version, plaintext authentication is disabled for
+ clients and lanman authentication is disabled for both clients and
+ servers. Lanman authentication is not needed for Windows
+ NT/2000/XP/Vista, Mac OS X or Samba, but if you still have Windows
+ 95/98/ME clients (or servers) you may need to set lanman auth (or client
+ lanman auth) to yes in your smb.conf.
+
+ The "lanman auth = no" setting will also cause lanman password hashes to
+ be deleted from smbpasswd and prevent new ones from being written, so
+ that these can't be subjected to brute-force password attacks. This
+ means that re-enabling lanman auth after it has been disabled is more
+ difficult; it is therefore advisable that you re-enable the option as
+ soon as possible if you think you will need to support Win9x clients.
+
+ Client support for plaintext passwords is not needed for recent Windows
+ servers, and in fact this behavior change makes the Samba client behave
+ in a manner consistent with all Windows clients later than Windows 98.
+ However, if you need to connect to a Samba server that does not have
+ encrypted password support enabled, or to another server that does not
+ support NTLM authentication, you will need to set
+ "client plaintext auth = yes" and "client lanman auth = yes" in smb.conf.
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 24 Nov 2007 00:23:37 -0800
+
+samba (3.0.26a-2) unstable; urgency=low
+
+ Default printing system has changed from BSD to CUPS
+
+ Previous versions of this package were configured to use BSD lpr as the
+ default printing system. With this version of Samba, the default has
+ been changed to CUPS for consistency with the current default printer
+ handling in the rest of the system.
+
+ If you wish to continue using the BSD printing interface from Samba, you
+ will need to set "printing = bsd" manually in /etc/samba/smb.conf. If
+ you wish to use CUPS printing but have previously set any of the
+ "print command", "lpq command", or "lprm command" options in smb.conf,
+ you will want to remove these settings from your config. Otherwise, if
+ you have the cupsys package installed, Samba should begin to use it
+ automatically with no action on your part.
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 14 Nov 2007 17:19:36 -0800
diff --cc debian/changelog
index c5596d7,0000000..62dfeda
mode 100644,000000..100644
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,5540 -1,0 +1,5554 @@@
- samba (2:3.6.6-6+deb7u10) UNRELEASED; urgency=medium
++samba (2:3.6.6-6+deb7u10) wheezy-security; urgency=high
+
++ [ Andrew Bartlett ]
+ * Remove patch for CVE-2016-2115 as it causes too much trouble.
+ - The 3.6 client could not talk to the 3.6 server out of the box (ACCESS_DENIED)
+ - Administrators should instead set 'client signing = required' if desired
+ - Closes: #820982
+ * Add NEWS file
+
- -- Andrew Bartlett <abartlet+debian at catalyst.net.nz> Sat, 16 Apr 2016 13:34:20 +1200
++ [ Santiago Ruano Rincón ]
++ * Non-maintainer upload by the LTS Team.
++ * Fix regression introduced by badlock patch in rpc_server. Closes: #821811.
++ * debian/patches/netlogon_credentials_regression.patch: Fix updating
++ netlogon credentials in source3/rpc_client/cli_pipe.c (Impored from
++ Ubuntu).
++ * debian/patches/bug9669_regression.patch: fix a crash when running net rpc
++ join against an older Samba PDC in source3/rpc_client/cli_pipe.c (Imported
++ from Ubuntu).
++ * debian/patches/fix_netapp.patch: don't require NTLMSSP_SIGN for smb
++ connections in source3/libsmb/ntlmssp.c (Imported from Ubuntu).
++ * Thanks to Andreas Schneider.
++
++ -- Santiago Ruano Rincón <santiagorr at riseup.net> Wed, 08 Jun 2016 20:17:48 +0200
+
+samba (2:3.6.6-6+deb7u9) wheezy-security; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * Update CVE patchset for regression fixes
+
+ -- Salvatore Bonaccorso <carnil at debian.org> Tue, 12 Apr 2016 18:34:07 +0200
+
+samba (2:3.6.6-6+deb7u8) wheezy-security; urgency=high
+ * Security update
+ + Fixes:
+ - CVE-2015-5370 (Multiple errors in DCE-RPC code)
+ - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
+ - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
+ - CVE-2016-2112 (LDAP client and server don't enforce integrity)
+ - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
+ - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
+ + The Samba 3.6 patches have been backported by Andreas Schneider
+ (Red Hat) and Ralph Böhme (SerNet). Thanks goes to Stefan Metzmacher
+ for finding and fixing the CVEs in the first place. Thanks for the
+ help with backporting to Günther Deschner (Red Hat) and Aurélien Aptel
+ (SUSE).
+
+ -- Andrew Bartlett <abartlet+debian at catalyst.net.nz> Fri, 08 Apr 2016 16:23:09 +1200
+
+samba (2:3.6.6-6+deb7u7) wheezy-security; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * s3:smbd: fix a corner case of the symlink verification.
+ Address regression introduced by the patch for CVE-2015-5252. For the
+ share path "/", the introduced checks deny all operations in the share.
+ (Closes: #812429)
+ * CVE-2015-7560: Incorrect ACL get/set allowed on symlink path
+
+ -- Salvatore Bonaccorso <carnil at debian.org> Fri, 11 Mar 2016 21:14:09 +0100
+
+samba (2:3.6.6-6+deb7u6) wheezy-security; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * Refresh waf-as-source.patch patch
+ * Add CVE-2015-5252-v3-6-bso11395.patch patch.
+ CVE-2015-5252: Insufficient symlink verification in smbd.
+ * Add CVE-2015-5299-v3-6-bso11529.patch patch.
+ CVE-2015-5299: Missing access control check in shadow copy code.
+ * Add CVE-2015-5296-v3-6-bso11536.patch patch.
+ CVE-2015-5296: Samba client requesting encryption vulnerable to
+ downgrade attack.
+
+ -- Salvatore Bonaccorso <carnil at debian.org> Tue, 22 Dec 2015 08:33:25 +0100
+
+samba (2:3.6.6-6+deb7u5) wheezy-security; urgency=high
+
+ * Security update
+ * CVE-2015-0240: Unauthenticated code execution attack on smbd file
+ services
+
+ -- Ivo De Decker <ivodd at debian.org> Thu, 19 Feb 2015 23:00:48 +0100
+
+samba (2:3.6.6-6+deb7u4) wheezy-security; urgency=high
+
+ * Security update
+ * CVE-2014-0178: Uninitialized memory exposure when handling shadow_copy
+ data
+ * CVE-2014-0244: nmbd denial of service
+ * CVE-2014-3493: smbd denial of service: server crash/memory corruption
+
+ -- Ivo De Decker <ivo.dedecker at ugent.be> Sun, 22 Jun 2014 13:18:03 +0200
+
+samba (2:3.6.6-6+deb7u3) wheezy; urgency=medium
+
+ * Security update
+ * CVE-2012-6150: pam_winbind login without require_membership_of
+ restrictions
+ * CVE-2013-4496: Password lockout not enforced for SAMR password changes
+
+ -- Ivo De Decker <ivo.dedecker at ugent.be> Sun, 13 Apr 2014 20:33:47 +0200
+
+samba (2:3.6.6-6+deb7u2) wheezy-security; urgency=high
+
+ * Security update
+ * CVE-2013-4475: ACLs are not checked on opening an alternate data stream on
+ a file or directory
+ * CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked
+
+ -- Ivo De Decker <ivo.dedecker at ugent.be> Tue, 03 Dec 2013 10:15:06 +0100
+
+samba (2:3.6.6-6+deb7u1) wheezy; urgency=low
+
+ * Security update
+ * CVE-2013-4124: Denial of service - CPU loop and memory allocation
+ Closes: #718781
+
+ -- Ivo De Decker <ivo.dedecker at ugent.be> Thu, 15 Aug 2013 12:06:17 +0200
+
+samba (2:3.6.6-6) unstable; urgency=low
+
+ * Team upload.
+ * Move binary files out of /etc/samba to /var/lib/samba,
+ where they belong according to the FHS:
+ - schannel_store.tdb
+ - idmap2.tdb
+ - MACHINE.sid
+ Closes: #454770
+
+ -- Ivo De Decker <ivo.dedecker at ugent.be> Mon, 15 Apr 2013 23:56:23 +0200
+
+samba (2:3.6.6-5) unstable; urgency=high
+
+ * Security update
+ * CVE-2013-0213: Clickjacking issue in SWAT
+ * CVE-2013-0214: Potential XSRF in SWAT
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 30 Jan 2013 18:49:32 +0100
+
+samba (2:3.6.6-4) unstable; urgency=low
+
+ * Fix printers tdb migration by including an upstream fix
+ from 3.6.7 (upstream bug #9026)
+ Closes: #696675
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 05 Jan 2013 12:42:02 +0100
+
+samba (2:3.6.6-3) unstable; urgency=low
+
+ [ Ansgar Burchardt ]
+ * debian/rules: Use xz compression for binary packages.
+ Closes: #683899
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 05 Aug 2012 12:19:12 +0200
+
+samba (2:3.6.6-2) unstable; urgency=low
+
+ * Restore the DHCP hook.
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 27 Jun 2012 09:31:15 -0700
+
+samba (2:3.6.6-1) unstable; urgency=low
+
+ [ Ivo De Decker ]
+ * Only enable swat in inetd.conf on first install. Closes: #658245
+ * Minor lintian fixes.
+ * Remove DHCP hook. Closes: #652942, #629406, #649100
+ * Don't reload smbd when running from inetd. Closes: #678741
+ * Don't start smbd when guest account doesn't exist. Closes: #653382
+ * Only export public symbols in libsmbclient and libwbclient.
+
+ [ Christian Perrier ]
+ * New upstream version
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 27 Jun 2012 06:03:17 +0200
+
+samba (2:3.6.5-7) unstable; urgency=low
+
+ * Allow installing smbclient package together with newer versions of
+ samba4-clients, which no longer ship the smbclient and nmblookup
+ binaries.
+
+ -- Jelmer Vernooij <jelmer at debian.org> Mon, 11 Jun 2012 13:19:24 +0200
+
+samba (2:3.6.5-6) unstable; urgency=high
+
+ [ Ivo De Decker ]
+ * Update symbols file for linux-only symbols in libsmbclient. This should
+ fix the FTBFS on kfreebsd and hurd. Closes: #676170
+ * Enable ctdb for non-linux archs.
+ * Remove old if-up script during upgrade.
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 06 Jun 2012 19:10:02 +0200
+
+samba (2:3.6.5-5) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Make libpam-winbind depend on libnss-winbind.
+
+ [ Ivo De Decker ]
+ * Update symbols file for libsmbclient and libwbclient0
+ * Add lintian overrides for examples in samba-doc
+ * libpam-winbind: change Depends on libnss-winbind to Recommends
+ * libnss-winbind: Suggests libpam-winbind
+ * Update package description for winbind, libpam-winbind and libnss-winbind
+ to better reflect their content
+ * Backport vfs_shadow_copy2 from master, to allow shadow copy to work
+ without wide links
+
+ [ Luk Claes ]
+ * Ship wbclient.pc file in multiarch safe directory (Closes: #674215).
+
+ [ Sam Morris ]
+ * Add libutil_drop_AI_ADDRCONFIG.patch that allows running nmbd when
+ no network interfaces have been assigned an address, therefore
+ removing the need for an if-up script. Closes: #640668,#640508
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 03 Jun 2012 20:00:56 +0200
+
+samba (2:3.6.5-3) unstable; urgency=low
+
+ [ Luk Claes ]
+ * Ship wbclient.pc so cifs-utils can be built again (Closes: #672733).
+ * Activate parallel building. Might need DEB_BUILD_OPTIONS as usual.
+
+ [ Christian Perrier ]
+ * Add Breaks and Replaces on libpam-winbind for newly created
+ libnss-winbind. Thanks to Colin Watson for pointing this and shame
+ on me for not properly checking the transition. Closes: #673122
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 17 May 2012 10:34:38 +0200
+
+samba (2:3.6.5-2) unstable; urgency=low
+
+ * The yearly "SambaXP bug cleaning party" release. 11 years
+ SambaXP, 20 years Samba and counting...
+ * Make samba-common "Multi-Arch: foreign"
+ * Adapt patch in upstream #7499 and stop nss_wins clobbering other
+ daemon's logfiles. Closes: #598313
+ * Add some mention about some use for the user information in Kerberos
+ environments in the smbspool manpage. Closes: #387266
+ * Drop link to no longer provided "Using Samba" documentation in
+ HTML documentation summary file. Closes: #604768
+ * Provide WHATSNEW.txt in samba-doc too as it is linked from the
+ documentation summary file. Do not compress that file.
+ * Fix link to WHATSNEW.txt in HTML documentation summary file. This
+ is the second part of the fix for #604768
+ * Use lp_state_dir() instead of get_dyn_STATEDIR() in
+ fhs-filespaths.patch as the latter does indeed hardcode the
+ location for passdb.tdb and secrets.tdb to /var/lib/samba
+ (the compile-time option for state directory and NOT the configurable
+ value). This is left to "state directory" instead of "private dir"
+ at least as of now, because if doesn't change anything to the
+ current behaviour, but allows the files' location to be configurable
+ through "state directory" (and not "private dir").
+ Closes: #249873
+ * Disable useless smbtorture4 build. Thanks to Ivo De Decker for the patch.
+ Closes: #670561
+ * Add upstream commit that adds waf source to the buildtools/
+ directory. As upstream will, one day or another, merge this, I
+ prefer this over removing the waf binary and repack upstream
+ tarball.
+ Closes: #654499
+ * Build-Conflict with python-ldb and python-ldb-dev to avoid build
+ failures when some versions of these packages are locally installed.
+ Closes: #657314
+ * Rename fix-samba.ldip-syntax.patch to fix-samba.ldif-syntax.patch
+ * Split NSS modules into a new libnss-winbind binary package.
+ Closes: #646292
+ * Add a NEWS.Debian entry about the libnss-winbind split and, while at
+ it, add an entry for libpam-winbind too (as it will affect upgrades
+ from squeeze).
+ * Drop code that was moving files around in samba.postinst and
+ winbind.postinst for pre-squeeze versions of the package.
+ * Drop code that was modifying a deprecated "passdb backend" setting
+ in smb.conf for pre-squeeze versions of the package (in
+ samba-common.config).
+ * Add Should-Start dependency to winbind init script to guarantee
+ that the samba init script is started before winbind if present.
+ Closes: #638066
+ * Provide a (basic) manpage to smbtorture(1). Closes: #528735
+ * Turkish debconf translation update (Atila KOÇ). Closes: #672447
+ * Drop the code that generates an smbpasswd file from the system's
+ user list. This adds very long delays on systems with many users,
+ including those with external user backends. It also makes much
+ less sense nowadays and the use of libpam-smbpass can easily
+ fill most of the needs. Closes: #671926
+ * Merged from Ubuntu:
+ - Set 'usershare allow guests', so that usershare admins are
+ allowed to create public shares in addition to authenticated
+ ones.
+ - add map to guest = Bad user, maps bad username to guest access.
+ This allows for anonymous user shares. Closes: #672497
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 12 May 2012 14:30:58 +0200
+
+samba (2:3.6.5-1) unstable; urgency=low
+
+ * New upstream release. Fixes CVE-2012-2111: Incorrect permission
+ checks when granting/removing privileges can compromise file
+ server security.
+ * Build-Depend on debhelper >= 9~ (which is in unstable for a few
+ months now)
+ * Use "set -e" in maintainer scripts instead of passing -e in the
+ shebang line
+ * Update Standards to 3.9.3 (checked, no change)
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 01 May 2012 08:07:39 +0200
+
+samba (2:3.6.4-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Two changes in the previous version should indeed read:
+ - samba.postinst: Avoid scary pdbedit warnings on first import.
+ - samba-common.postinst: Add more informative error message for the case
+ where smb.conf was manually deleted.
+ Closes: #664509
+
+ [ Jelmer Vernooij ]
+ * New upstream release.
+ + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
+ beyond of allocated array.
+
+ -- Jelmer Vernooij <jelmer at debian.org> Wed, 11 Apr 2012 23:25:41 +0200
+
+samba (2:3.6.3-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Fix example samba.ldif syntax. Closes: #659963
+ * Set minimal version of tdb ot 1.2.6 in Build-Depends
+ (thanks, backports!)
+ * Lower priority of debconf question to medium after some pondering.
+ After all, we have a sane default. Closes: #662801
+ * Merge some Ubuntu patches:
+ - samba.config: Avoid scary pdbedit warnings on first import.
+ - samba.postinst: Add more informative error message for the case
+ where smb.conf was manually deleted.
+
+ [ Maarten Bezemer ]
+ * Removed references to the testprns command from documentation
+ * Added notes that the smbsh command is not available in this package
+ Closes: #662243
+
+ [ Debconf translations ]
+ * Indonesian (Arief S Fitrianto). Closes: #660312
+ * Slovak (Ivan Masár). Closes: #661125
+
+ [ Steve Langasek ]
+ * Use Debian copyright-format 1.0 in debian/copyright.
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 12 Mar 2012 20:49:24 +0100
+
+samba (2:3.6.3-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * Fixes CVE-2012-0817:
+ The Samba File Serving daemon (smbd) in Samba versions
+ 3.6.0 to 3.6.2 is affected by a memory leak that can
+ cause a server denial of service.
+
+ [ Debconf translations ]
+ * Polish (Michał Kułach). Closes: #657770
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 31 Jan 2012 22:09:39 +0100
+
+samba (2:3.6.2-1) unstable; urgency=low
+
+ * New upstream release
+ * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream)
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 27 Jan 2012 21:38:52 +0100
+
+samba (2:3.6.1-3) unstable; urgency=low
+
+ [ Sam Hartman ]
+ * Increase libkrb5-dev dependency to avoid depending on
+ krb5_locate_kdc, Closes: #650541
+
+ [ Steve Langasek ]
+ * Fix the libpam-winbind description to more accurately identify the
+ protocols being used by nss_wins. Closes: #650091.
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 01 Dec 2011 21:56:52 +0100
+
+samba (2:3.6.1-2) unstable; urgency=low
+
+ * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch
+ * debian/patches/initialize_password_db-null-deref: Avoid null
+ dereference in initialize_password_db(). Closes LP: #829221.
+ * Mark samba-common Multi-Arch: foreign.
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 27 Nov 2011 19:06:39 +0100
+
+samba (2:3.6.1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 22 Oct 2011 10:56:17 +0200
+
+samba (2:3.6.0-1) experimental; urgency=low
+
+ * New upstream release
+ * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1
+ and 3.5.11~dfsg-1
+ * Drop wbc_async.h from libwbclient-dev as, according to upstream's
+ commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is
+ smbtorture3"
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 11 Aug 2011 09:14:53 +0200
+
+samba (2:3.6.0~rc3-1) experimental; urgency=low
+
+ * New upstream version
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 29 Jul 2011 23:11:10 +0200
+
+samba (2:3.6.0~rc2-1) experimental; urgency=low
+
+ * New upstream version
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 07 Jun 2011 23:09:41 +0200
+
+samba (2:3.6.0~rc1-2) experimental; urgency=low
+
+ * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file
+ in an existing directory. Closes: #628121
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 27 May 2011 15:35:44 +0200
+
+samba (2:3.6.0~rc1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 19 May 2011 22:26:08 +0200
+
+samba (2:3.6.0~pre3-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled
+ * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it
+ was forgotten upstream
+ * libwbclient0.symbols: dropped several symbols related to
+ asynchronous actions that weren't working anyway (according
+ to Kai Blin at SambaXP)
+
+ [ Mathieu Parent ]
+ * Build against libctdb-dev (>= 1.10+git20110412) to have required control:
+ CTDB_CONTROL_SCHEDULE_FOR_DELETION.
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 09 May 2011 11:29:52 +0200
+
+samba (2:3.5.11~dfsg-4) unstable; urgency=low
+
+ * Lintian override for libpam-winbind; it's not a shared library so doesn't
+ really need the pre-depends on multiarch-support.
+ * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu.
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 21 Oct 2011 16:01:29 -0700
+
+samba (2:3.5.11~dfsg-3) unstable; urgency=low
+
+ * Split winbind into separate packages, winbind and libpam-winbind,
+ with the latter marked Multi-Arch: same and the former marked
+ Multi-Arch: foreign, so that we can install multiple copies of the
+ pam module and nss modules on the same system.
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 21 Oct 2011 20:00:13 +0000
+
+samba (2:3.5.11~dfsg-2) unstable; urgency=low
+
+ * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally.
+ * Use dh_links instead of manually creating directories and symlinks from
+ debian/rules.
+ * Switch from dh_movefiles to dh_install and adjust for debhelper compat
+ level 7, in preparation for moving to dh(1).
+ * Where possible, use dh_installman and dh_install's support for target
+ directories instead of moving files around in debian/rules.
+ * We don't need to mess with perms on usr/include/libsmbclient.h anymore
+ in debian/rules, the upstream install target gets it right
+ * Use debian/clean instead of removing left-behind files by hand in the
+ clean target
+ * Convert debian/rules to dh(1).
+ * Don't run debconf-updatepo on clean; not worth the divergence in
+ debian/rules anymore :)
+ * Don't install debian/README.build in the package; this is really only
+ relevant in the source.
+ * Bump to debhelper compat level 9 and build libraries for multiarch.
+ * Drop Makefile.internal from libsmbclient-dev examples so that we can mark
+ libsmbclient-dev Multi-Arch: same.
+ * Bump build-depends on debhelper to 8.9.4, so we ensure we have
+ dpkg-buildflags by default and get full build hardening enabled out of
+ the box - critical for a server like samba.
+ * Use DH_ALWAYS_EXCLUDE instead of passing override options to
+ dh_installexamples.
+ * Pass --sourcedirectory=source3 to dh instead of having to pass it to each
+ dh_auto_* command.
+ * Ironically, this means that we have to manually disable dh_auto_test,
+ which now finds the makefile targets but doesn't work unless we build an
+ extra wrapper library into our binaries that we don't want.
+ * Drop a few configure options from debian/rules that shadow the built-in
+ defaults.
+ * debian/libsmbclient.lintian-overrides: yes, we know the package name
+ doesn't match the soname - and it never should until there's an ABI
+ change.
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 07 Oct 2011 21:36:43 -0700
+
+samba (2:3.5.11~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 05 Aug 2011 20:12:01 +0200
+
+samba (2:3.5.10~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+ * Security update, fixing the following issues:
+ - CVE-2011-2694: possible XSS attack in SWAT
+ - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 28 Jul 2011 12:19:01 +0200
+
+samba (2:3.5.9~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+ * Add "--quiet" to start-stop-daemon call in reload target in init
+ script. Closes: #572483
+ * Add examples/LDAP in examples for the samba package. With this,
+ samba.schema will be provided in some way in the package.
+ This very partially addresses #190162
+ * patches/bug_221618_precise-64bit-prototype.patch: precise
+ 64bits prototype in libsmbclient-dev. Closes: #221618
+ * patches/no-unnecessary-cups.patch: dropped after upstream
+ changes to printing code
+ * Update Standards to 3.9.2 (checked, no change)
+ * Add build-arch and build-indep targets in debian/rules
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 18 Jun 2011 07:08:00 +0200
+
+samba (2:3.5.8~dfsg-5) unstable; urgency=low
+
+ * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo
+ in fhs-filespath.patch. Closes: #629183, LP: #789097
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 04 Jun 2011 13:48:32 +0200
+
+samba (2:3.5.8~dfsg-4) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Spanish (Omar Campagne). Closes: #627813
+ * Swedish (Martin Bagge / brother). Closes: #627849
+ * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #627866
+
+ [ Christian Perrier ]
+ * bug_601406_fix-perl-path-in-example.patch: fix path to perl
+ binary in example file. Closes: #601406
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 27 May 2011 12:23:05 +0200
+
+samba (2:3.5.8~dfsg-3) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Italian (Luca Monducci). Closes: #626674
+ * Dutch (Vincent Zweije). Closes: #627519
+ * Czech (Miroslav Kure). Closes: #627442
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 24 May 2011 22:40:04 +0200
+
+samba (2:3.5.8~dfsg-2) unstable; urgency=low
+
+ [ Jelmer Vernooij ]
+ * Add libwbclient-dev package.
+ * Build against external libtdb.
+ * Bump standards version to 3.9.1 (no changes).
+
+ [ Mathieu Parent ]
+ * Builddep on libctdb-dev or ctdb < 1.10
+
+ [ Christian Perrier ]
+ * Use db_settitle in debconf questions and make these
+ titles translatable. Closes: #560318
+ * Test the presence of testparm before trying to use it in init script
+ Closes: #606320
+ * Add cups to Should-{Start,Stop} in LSB headers of
+ samba init script to guarantee that CUPS is started
+ before samba. Closes: #619132
+ * Drop libsmbclient-dev useless dependency on samba-common
+ Closes: #597987
+
+ [ Debconf translations ]
+ * French (Christian Perrier)
+ * Japanese (Kenshi Muto). Closes: #626474
+ * Galician (Miguel Anxo Bouzada). Closes: #626477
+ * Thai (Theppitak Karoonboonyanan). Closes: #626487
+ * Russian (Yuri Kozlov). Closes: #626523
+ * Danish (Joe Hansen). Closes: #626531
+ * Esperanto (Felipe Castro). Closes: #626558
+ * Hebrew (Eran Cohen). Closes: #626638
+ * Bokmål, (Bjørn Steensrud).
+ * Italian (Luca Monducci). Closes: #626674
+ * Finnish (Tapio Lehtonen). Closes: #626890
+ * Portuguese (Miguel Figueiredo). Closes: #627224
+ * German (Holger Wansing). Closes: #627354
+ * Czech (Miroslav Kure). Closes: #627442
+
+ -- Christian Perrier <bubulle at sesostris.kheops.frmug.org> Sun, 22 May 2011 21:15:21 +0200
+
+samba (2:3.5.8~dfsg-1) unstable; urgency=low
+
+ * New upstream release. This fixes the following bugs:
+ - Winbind leaks gids with idmap ldap backend (upstrem #7777)
+ Closes: #613624
+ - printing from Windows 7 fails with 0x000003e6
+ Closes: #617429
+ * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream
+ #7997
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 08 Mar 2011 22:38:32 +0100
+
+samba (2:3.5.7~dfsg-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * Security update, fixing the following issue:
+ - CVE-2011-0719: denial of service by memory corruption
+ * Use architecture wildcard "linux-any" in build dependencies
+ Closes: #563372
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 01 Mar 2011 20:59:34 +0100
+
+samba (2:3.5.6~dfsg-5) unstable; urgency=low
+
+ * Fix FTBFS on Hurd. Closes: #610678
+ * Only try parsing dhcpd.conf is it's not empty,
+ in dhclient-enter-hooks.d/samba. Closes: #594088.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 05 Feb 2011 13:50:22 +0100
+
+samba (2:3.5.6~dfsg-4) unstable; urgency=low
+
+ * Fix pam_winbind file descriptor leak with a patch
+ proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265.
+ Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter
+ confirmed it is not while the patch applied here fixes the file
+ descriptor leak.
+ Closes: #574468
+
+ [ Debconf translations ]
+ * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #607402
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 15 Jan 2011 18:06:22 +0100
+
+samba (2:3.5.6~dfsg-3) unstable; urgency=low
+
+ [ Julien Cristau ]
+ * Bump libwbclient0 shlibs to match the newest version in the symbols file.
+ * Mark libwbclient0 as breaking other samba packages with versions older
+ than 2:3.4.1, as they were linked against libtalloc1 instead of
+ libtalloc2, and the combination causes crashes (closes: #593823).
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 06 Dec 2010 20:14:04 +0100
+
+samba (2:3.5.6~dfsg-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Fix debian/rules update-archs target to not add extra spaces on every
+ invocation...
+
+ [ Debconf translations ]
+ * Catalan (Jordi Mallach). Closes: #601101
+ * Japanese (Kenshi Muto). Closes: #601364
+ * Bulgarian (Damyan Ivanov). Closes: #601366
+ * Hebrew (Omer Zak). Closes: #601633
+ * Kurdish (Erdal Ronahî). Closes: #601719
+ * Dutch (Remco Rijnders). Closes: #602220
+ * Greek (Konstantinos Margaritis).
+
+ [ Christian Perrier ]
+ * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy
+ files from a SMB share using SMB signing.". Backported from
+ to be released 3.5.7 version
+ Closes: #605729
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 04 Dec 2010 07:44:22 +0100
+
+samba (2:3.5.6~dfsg-1) unstable; urgency=low
+
+ * New upstream release. Fixes the following Debian bug:
+ - rpcclient readline segfault. Closes: #597203
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 10 Oct 2010 09:59:37 +0200
+
+samba (2:3.5.5~dfsg-1) unstable; urgency=high
+
+ [ Christian Perrier ]
+ * New upstream release. Security release fixing:
+ - CVE-2019-3069: Buffer overrun vulnerability in sid_parse.
+ Closes: #596891.
+ * Fix comment in swat's postinst. It is not turned off by default
+ Closes: #596040
+ * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst
+
+ [ Steve Langasek ]
+ * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for
+ pam-auth-update. Closes: #594325.
+
+ [ Debconf translations ]
+ * Arabic (Ossama Khayat). Closes: #596164
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 14 Sep 2010 23:03:35 +0200
+
+samba (2:3.5.4~dfsg-2) unstable; urgency=low
+
+ * Release to unstable
+
+ [ Debconf translations ]
+ * Danish (Joe Dalton). Closes: #592789.
+ * Galician (Jorge Barreiro). Closes: #592809
+
+ [ Steve Langasek ]
+ * debian/patches/fhs-filespaths.patch, debian/samba.postinst,
+ debian/winbind.postinst: move some files from /etc/samba to
+ /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb,
+ and idmap2.tdb.
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 07 Sep 2010 17:47:32 +0200
+
+samba (2:3.6.0~pre1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 04 Aug 2010 01:39:11 +0200
+
+samba (2:3.5.4~dfsg-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 29 Jun 2010 22:00:53 +0200
+
+samba (2:3.5.3~dfsg-1) experimental; urgency=low
+
+ * New upstream release. Fixes the following bugs:
+ - smbclient segfaults when used against old samba "security = share"
+ Closes: #574886
+ * Drop duplicate build dependency on ctdb
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 19 May 2010 22:07:49 +0200
+
+samba (2:3.5.2~dfsg-2) experimental; urgency=low
+
+ * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and
+ 2:3.4.7~dfsg-2
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 04 May 2010 17:13:47 +0200
+
+samba (2:3.5.2~dfsg-1) experimental; urgency=low
+
+ * New upstream release
+ * Bugs fixed upstream:
+ - Fix parsing of the gecos field
+ Closes: #460494
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 08 Apr 2010 19:48:07 +0200
+
+samba (2:3.5.1~dfsg-1) experimental; urgency=low
+
+ * New upstream release. Security fix: all smbd processes inherited
+ CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
+ allowed even when permissions should have denied access.
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 09 Mar 2010 10:54:01 +0100
+
+samba (2:3.5.0dfsg-1) experimental; urgency=low
+
+ * New upstream release. Not using "3.5.0~dfsg" as version number
+ because we used a "higher" version number in previous versions.
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 02 Mar 2010 22:03:15 +0100
+
+samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low
+
+ * New upstream release candidate
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 20 Feb 2010 08:36:57 +0100
+
+samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low
+
+ * New upstream pre-release
+ * Use new --with-codepagedir option. Consequently drop
+ codepages-location.patch
+ * Drop "Using Samba" from the samba-doc file list as it was
+ removed upstream.
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 31 Jan 2010 11:53:48 +0100
+
+samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream pre-release
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 15 Jan 2010 23:31:01 +0100
+
+samba (2:3.4.8~dfsg-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Drop the per-release smb.conf templates, only needed for upgrade paths
+ that are no longer supported.
+ * Call /etc/init.d/samba directly from the logrotate script instead of
+ using invoke-rc.d, to address the irony that the only package I work on
+ that *has* a logrotate script is inconsistent with my position in
+ bug #445203.
+ * Fix a bashism in the samba postinst that can cause the package
+ installation to fail under dash. LP: #576307.
+ * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to
+ /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new
+ isc-dhcp-client package. Closes: #585056.
+
+ [ Christian Perrier ]
+ * Don't copy system accounts from /etc/passwd to
+ /var/lib/samba/passdb.tdb. Closes: #502801
+ * Update Standards to 3.9.0 (checked, no change)
+ * Backport patch for upstream bug #7139 to fix "owner of file not
+ available with kerberos"
+ Closes: #586337
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 14 Jul 2010 11:59:28 -0700
+
+samba (2:3.4.8~dfsg-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+ * Bugs fixed upstream:
+ - Fix writing with vfs_full_audit. Closes: #574011
+ * Drop deprecated 'share modes' parameter from default smb.conf
+ Closes: #580561
+ * Enable PIE during configure. Closes: #509135
+ * Avoid winbind's logrotate script to fail when there is no
+ /var/run/samba directory. Closes: #569926
+ * Add explanations about "passdb backend" default setting change
+ Closes: #553904
+
+ [ Debconf translations ]
+ * Spanish (Omar Campagne). Closes: #579011
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 12 May 2010 05:45:52 +0200
+
+samba (2:3.4.7~dfsg-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Drop smbfs package (now provided by cifs-utils as a dummy transition
+ package)
+
+ [ Debconf translations ]
+ * Portuguese (Miguel Figueiredo). Closes: #575958
+
+ [ Steve Langasek ]
+ * winbind.prerm: don't forget to remove the PAM profile on package
+ removal :/
+ * Fix winbind.pam-config to not interfere with password changes for
+ non-winbind accounts. Closes: #573323, LP: #546874.
+ * debian/samba.if-up, debian/rules: add an if-up.d script for samba to
+ try to start nmbd, if it's not running because /etc/init.d/samba ran
+ before the network was up at boot time. Closes: #576415, LP: #462169.
+ * debian/samba.if-up: allow "NetworkManager" as a recognized address
+ family... it's obviously /not/ an address family, but it's what gets
+ sent when using NM, so we'll cope for now.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 17 Apr 2010 07:49:49 +0200
+
+samba (2:3.4.7~dfsg-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Add a PAM profile for pam_winbind. Closes: #566890, LP: #282751.
+ * Add the correct versioned build dependency on libtalloc-dev as
+ we need 2.0.1 to build samba. Closes: #572603
+ * Add avr32 to arches with a build dependency on ctdb. Closes: #572126
+
+ [ Christian Perrier ]
+ * New upstream release. Security fix: all smbd processes inherited
+ CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
+ allowed even when permissions should have denied access.
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 09 Mar 2010 10:52:24 +0100
+
+samba (2:3.4.6~dfsg-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 26 Feb 2010 22:39:50 +0100
+
+samba (2:3.4.5~dfsg-2) unstable; urgency=low
+
+ [ Steve langasek ]
+ * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar"
+ is explicitly allowed by Policy now, and this change introduced a
+ syntax error. Closes: #566946.
+
+ [ Christian Perrier ]
+ * No longer maker (u)mount.cifs setuid root. Add a notice
+ about this in the package's NEWS.Debian file
+ Closes: #567554
+ * Use dh_lintian instead of manual install of lintian overrides
+ * Updated Standards to 3.8.4 (checked, no change)
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 13 Feb 2010 14:36:33 +0100
+
+samba (2:3.4.5~dfsg-1) unstable; urgency=low
+
+ * New upstream release. Bugs fixed by this release:
+ - Memory leak in smbd. Closes: #538819, #558453
+ * Declare a versioned dependency of winbind and samba on libwbclient0
+ Closes: #550481
+ * A few lintian fixes:
+ * Drop /var/run/samba from samba-common. The directory is created
+ by init scripts when needed.
+ * No longer prepend a path to the mksmbpasswd call in samba.postinst.
+ This prevents the local administrator to use a replacement version
+ for some local reason.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 23 Jan 2010 12:16:42 +0100
+
+samba (2:3.4.4~dfsg-1) unstable; urgency=low
+
+ * New upstream version.
+ * Drop all RFC files from upstream source, therefore using a "~dfsg"
+ suffix to upstream version number.
+ * Bugs fixed upstream:
+ - fixed list of workgroup servers in libsmbclient.
+ Closes: #555462, #561148
+ - fixed documentation of the credentials file format in
+ mount.cifs(8). Closes: #552250
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 14 Jan 2010 20:16:34 +0100
+
+samba (2:3.4.3-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Switch to source format 3.0 (quilt)
+ * Better adapt "add machine script" example to adduser
+ Thanks to Heiko Schlittermann for the suggestion
+ Closes: #555466
+
+ [ Steve Langasek ]
+ * The "I hate non-declarative alternatives" upload:
+ - debian/samba{,-common}.prerm: don't call update-alternatives --remove
+ on upgrade, /do/ call it on other invocations of the prerm script. If
+ these tools ever go away, the removal needs to be handled on upgrade by
+ the maintainer scripts of the new package version.
+ - debian/samba{,-common-bin}.postinst: call update-alternatives
+ unconditionally, don't second-guess the maintainer script arguments.
+ - debian/samba.postinst: call update-alternatives after the debconf
+ handling, not before; debconf triggers a re-exec of the script so
+ anything done before invoking debconf is wasted because it will be
+ re-done, and if there's already a debconf frontend running when this
+ is called, the not-redirected update-alternatives output will confuse
+ it. Closes: #558116.
+ - debian/samba-common.prerm: move to samba-common-bin, this is the package
+ that owns these binaries.
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 17 Dec 2009 16:53:13 +0100
+
+samba (2:3.4.3-1) unstable; urgency=low
+
+ * New upstream release. This fixes the following bugs:
+ - Do not attempt to update /etc/mtab if it is
+ a symbolic link. Closes: #408394
+ * Bump Standards-Version to 3.8.3 (checked)
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 31 Oct 2009 14:32:07 +0100
+
+samba (2:3.4.2-1) unstable; urgency=high
+
+ * New upstream release. Security update.
+ * CVE-2009-2813:
+ Connecting to the home share of a user will use the root of the
+ filesystem as the home directory if this user is misconfigured to
+ have an empty home directory in /etc/passwd.
+ * CVE-2009-2948:
+ If mount.cifs is installed as a setuid program, a user can pass it
+ a credential or password path to which he or she does not have
+ access and then use the --verbose option to view the first line of
+ that file.
+ * CVE-2009-2906:
+ Specially crafted SMB requests on authenticated SMB connections
+ can send smbd into a 100% CPU loop, causing a DoS on the Samba
+ server.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 03 Oct 2009 08:30:33 +0200
+
+samba (2:3.4.1-2) unstable; urgency=low
+
+ * ./configure --disable-avahi, to avoid accidentally picking up an avahi
+ dependency when libavahi-common-dev is installed.
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 26 Sep 2009 00:01:12 -0700
+
+samba (2:3.4.1-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. This fixes the following bugs:
+ - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec
+ for the clever analysis and collaboration with upstream.
+ Closes: #541171
+ - Fix password change propagation with ldapsam. Closes: #505215
+ - Source package contains non-free IETF RFC/I-D. Closes: #538034
+ * Turn the build dependency on libreadline5-dev to libreadline-dev
+ to make further binNMUs easier when libreadline soname changes
+ Thanks to Matthias Klose for the suggestion
+
+ [ Steve Langasek ]
+ * Don't build talloctort when using --enable-external-talloc; and don't
+ try to include talloctort in the samba-tools package, since we're
+ building with --enable-external-talloc. :) Closes: #546828.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 21 Sep 2009 22:20:22 -0700
+
+samba (2:3.4.0-5) unstable; urgency=low
+
+ * Move /etc/pam.d/samba back to samba-common, because it's shared with
+ samba4. Closes: #545764.
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 08 Sep 2009 18:43:17 -0700
+
+samba (2:3.4.0-4) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * debian/samba.pamd: include common-session-noninteractive instead of
+ common-session, to avoid pulling in modules specific to interactive
+ logins such as pam_ck_connector.
+ * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the
+ above.
+ * rename debian/samba.pamd to debian/samba.pam and call dh_installpam
+ from debian/rules install, bringing us a smidge closer to a stock
+ debhelper build
+ * don't call pyversions from debian/rules, this throws a useless error
+ message during build.
+ * fix up the list of files that need to be removed by hand in the clean
+ target; the majority of these are now correctly handled upstream.
+ * debian/rules: fix the update-arch target for the case of unversioned
+ build-deps.
+ * Pull avr32 into the list of supported Linux archs. Closes: #543543.
+ * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the
+ patch. Closes: #541367.
+
+ [ Christian Perrier ]
+ * Use DEP-3 for patches meta-information
+
+ [ Steve Langasek ]
+ * Change swat update-inetd call to use --remove only on purge,
+ and --disable on removal.
+ * Add missing build-dependency on pkg-config, needed to fix libtalloc
+ detection
+ * debian/patches/external-talloc-support.patch: fix the Makefile so it
+ works when using external talloc instead of giving a missing-depend
+ error.
+ * debian/patches/autoconf.patch: resurrect this patch, needed for the
+ above.
+ * debian/rules: build with --without-libtalloc
+ --enable-external-libtalloc, also needed to fix the build failure.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 07 Sep 2009 22:58:29 -0700
+
+samba (2:3.4.0-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * debian/control: samba-common-bin has no reason to depend on
+ libpam-modules.
+
+ [ Christian Perrier ]
+ * Fix "invalid argument" when trying to copy a file from smb share
+ Use an upstream patch that will be included in 3.4.1
+ Closes: #536757
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 21 Aug 2009 11:08:43 +0200
+
+samba (2:3.4.0-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * German. Closes: #536433
+
+ [ Steve Langasek ]
+ * Enable the ldap idmap module; thanks to Aaron J. Zirbes. Closes: #536786.
+
+ [ Jelmer Vernooij ]
+ * Properly rename smbstatus.1 for alternatives. Closes: #534772
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 02 Aug 2009 12:20:51 +0200
+
+samba (2:3.4.0-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release: first upload to unstable for 3.4
+ * Correct dependencies for samba-common-bin. Closes: #534595
+
+ [ Debconf translations ]
+ * Czech. Closes: #534793
+ * Russian. Closes: #534796
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 07 Jul 2009 20:42:19 +0200
+
+samba (2:3.4.0~rc1-1) experimental; urgency=low
+
+ * New upstream version. That fixes the following bugs:
+ - Remove pidfile on clean shutdown. Closes: #299433, #454112
+ * Drop swat-de.patch that was applied upstream
+ * Bump debhelper compatibility level to 6 and declare a versioned
+ dependency on debhelper >= 6.0.0
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 20 Jun 2009 18:43:20 +0200
+
+samba (2:3.4.0~pre2-1) experimental; urgency=low
+
+ [ Jelmer Vernooij ]
+ * Split binaries out of samba-common into samba-common-bin.
+ Closes: #524661
+
+ [ Christian Perrier ]
+ * New upstream version. That fixes the following bugs:
+ - Do not limit the number of network interfaces. Closes: #428618
+ - Fix Connect4 in samr.idl. Closes: #526229
+ * "Using samba" is back.
+ * Drop non-linux-ports.patch that was integrated upstream
+ * Drop smbpasswd-syslog.patch that was integrated upstream
+ * Drop smbclient-link.patch that was integrated upstream
+
+ [ Debconf translations ]
+ * Italian. Closes: #529350
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 06 Jun 2009 11:45:35 +0200
+
+samba (2:3.4.0~pre1-1) experimental; urgency=low
+
+ * New upstream pre-release
+ * "Using samba" is dropped from upstream source. Therefore, drop
+ debian/samba-doc.doc-base.samba-using
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 20 May 2009 18:50:35 +0200
+
+samba (2:3.3.6-1) unstable; urgency=high
+
+ * New upstream release. Security release.
+ * CVE 2009-1886: Fix Formatstring vulnerability in smbclient
+ * CVE 2009-1888: Fix uninitialized read of a data value
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 26 Jun 2009 18:21:51 +0200
+
+samba (2:3.3.5-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * debian/patches/undefined-symbols.patch: fix up patch so that it's
+ suitable for submission upstream.
+ * debian/patches/proper-static-lib-linking.patch: apply the rules to
+ vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and
+ rpc_open_tcp.
+
+ [ Debconf translations ]
+ * Italian. Closes: #529350
+
+ [ Christian Perrier ]
+ * New upstream version
+ * Lintian fixes:
+ - Declare versioned dependency on debhelper to fit what we have in
+ debian/compat
+ - samba.postinst: do not call mksmbpasswd with an absolute path
+ * Upgrade Standard to 3.8.2 (checked, no change)
+ * Upgrade debhelper compatibility level to 6
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 20 Jun 2009 08:01:16 +0200
+
+samba (2:3.3.4-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Do no compile with clustering support on non-Linux platforms
+ Closes: #528382
+
+ [ Debconf translations ]
+ * Basque. Closes: #528757
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 16 May 2009 17:31:09 +0200
+
+samba (2:3.3.4-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release:
+ - Fixed daily winbind crash when retrieving users from an ADS server
+ Closes: #522907.
+ * Add idmap_tdb2 module to winbind package
+ * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents
+ VFS modules to properly load. Closes: #524048.
+
+ [ Debconf translations ]
+ * Bengali added.
+
+ [ Steve Langasek ]
+ * Recommend logrotate instead of depending on it. Closes: #504219.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 02 May 2009 10:06:16 +0200
+
+samba (2:3.3.3-1) unstable; urgency=low
+
+ * New upstream release:
+ - Fix map readonly. Closes: #521225
+ - Add missing whitespace in mount.cifs error message. Closes: #517021
+ - Includes our patch to fix detection of GNU ld version. As a
+ consequence, we dropped fix_wrong_gnu_ld_version_check.patch
+ - Fix segfault in lookup_sid. Closes: #521408
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 11 Apr 2009 10:12:23 +0200
+
+samba (2:3.3.2-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * libcap2-dev is only available on Linux, so make this build-dependency
+ conditional. Closes: #519911.
+
+ [ Christian Perrier ]
+ * Switch samba-dbg to "Section: debug"
+ * Update debian/copyright for year 2009. Thanks to debian-devel
+ for the reminder.
+ * Dropping Adam Conrad from Uploaders
+ * Dropping Eloy Paris from Uploaders with special thanks for his tremendous
+ work maintaining the package between 1997 and 2004.
+
+ [ Mathieu Parent ]
+ * ensure clustering is enabled with --with-cluster-support=yes
+ * build-depends on ctdb >= 1.0.73. Closes: #520202.
+ * samba suggests ctdb
+
+ [ Debconf translations ]
+ * Esperanto updated. Closes: #519237.
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 29 Mar 2009 09:23:35 +0200
+
+samba (2:3.3.2-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. Closes: #519626
+ - mounts with -o guest will now automatically try to connect anonymously.
+ Closes: #423971.
+ - fix for brokenness when using 'force group'. Closes: #517760.
+ - fix for saving files on Samba shares using MS Office 2007.
+ LP: #337037.
+ * Re-fix slave links for manual pages in samba-common. Closes: #517204.
+
+ [ Steve Langasek ]
+ * Add missing debhelper token to libpam-smbpass.prerm.
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 15 Mar 2009 12:16:48 +0100
+
+samba (2:3.3.1-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. Closes: #516981
+ Upstream fixes in that release:
+ - Fixed various spelling errors/typos in manpages
+ Closes: #516047
+ - Fix renaming/deleting of files using Windows clients.
+ Closes: #516160
+ - Fix syntax error in mount.cifs(8). Closes: #454799
+ * Use a slave alternative for smbstatus.1 even though that manpage
+ is not provided by samba4
+
+ [ Jelmer Vernooij ]
+ * Fix slave links for manual pages in samba-common. Closes: #517204.
+
+ [ Steve Langasek ]
+ * Add Vcs-{Browser,Svn} fields to debian/control.
+ * When populating the sambashare group, it's not an error if the user
+ simply doesn't exist; test for this case and let the install continue
+ instead of aborting. LP: #206036.
+ * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst,
+ debian/libpam-smbpass.files, debian/rules: provide a config block
+ for the new PAM framework, allowing this PAM module to
+ auto-configure itself
+ * debian/control: make libpam-smbpass depend on
+ libpam-runtime (>= 1.0.1-2ubuntu1) for the above
+ * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix
+ wrong detection of the GNU ld version, so that the symbol export scripts
+ will be properly applied when building.
+ * refresh debian/libsmbclient.symbols for 3.3.1.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 02 Mar 2009 00:30:35 -0800
+
+samba (2:3.3.0-4) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Build-Depend on libcap2-dev. Closes: #515851.
+ * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype
+ for cache_path, which causes nearly undiagnoseable crashes when building
+ with -fPIE, because of a wrong return type! LP: #330626.
+
+ [ Debconf translations ]
+ * Belarusian added. Closes: #516052.
+ * Traditional Chinese updated. Closes: #516594
+ * Swedish updated. Closes: #516681.
+
+ [ Mathieu Parent ]
+ * enable clustering by default (CTDB). Closes: #514050
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 24 Feb 2009 16:58:58 -0800
+
+samba (2:3.3.0-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable.
+ * Make samba conflict with samba4, not with itself.
+
+ [ Debconf translations ]
+ * Vietnamese updated. Closes: #515235.
+ * Slovak updated. Closes: #515240.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 16 Feb 2009 07:15:47 -0800
+
+samba (2:3.3.0-2) unstable; urgency=low
+
+ * Upload to unstable
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 14 Feb 2009 13:38:14 +0100
+
+samba (2:3.2.5-4) unstable; urgency=low
+
+ * Fix segfault whan accessign some NAS devices running old versions of Samba
+ Closes: #500129
+ * Fix process crush when using gethostbyname_r in several threads
+ Closes: #509101, #510450
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 08 Jan 2009 05:59:17 +0100
+
+samba (2:3.2.5-3) unstable; urgency=high
+
+ * Security update
+ * Fix Potential access to "/" in setups with registry shares enabled
+ This fixes CVE-2009-0022, backported from 3.2.7
+ * Fix links in HTML documentation index file.
+ Closes: #508388
+ * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new
+ file in the diff. Thanks to the release managers for spotting it
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 21 Dec 2008 08:09:31 +0100
+
+samba (2:3.2.5-2) unstable; urgency=low
+
+ * Fix typo in bug number in a comment for the default smb.conf file
+ Closes: #507620
+ * Document the need to set appropriate permissions on the printer
+ drivers directory, in the default smb.conf file. Also change
+ the example group from ntadmin to lpadmin
+ Closes: #459243
+ * Add missing rfc2307.so and sfu*.so links that prevent using the
+ 'winbind nss info' feature properly
+ Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for
+ the patch. Closes: #506109
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 13 Dec 2008 13:56:07 +0100
+
+samba (2:3.2.5-1) unstable; urgency=high
+
+ * New upstream version. Security-only release.
+ This addresses CVE-2008-4314: potentially leaking
+ arbitrary memory contents to malicious clients.
+ * Better document cases where using a "master" file for smb.conf
+ is a bad idea. Closes: #483187
+ * Insert example "add machine script" and "add group script" scripts
+ in the default smb.conf. Closes: #349049
+ * Move homepage URL to Homepage filed in debian/control
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 27 Nov 2008 11:36:35 +0100
+
+samba (2:3.3.0-1) experimental; urgency=low
+
+ * New upstream release. Fixes the following bugs:
+ - smb file deletion gvfs. Closes: #510564
+ - smbclient du command does not recuse properly. Closes: #509258
+ - mention possible workgroup field in credential files in mount.cifs(8)
+ Closes: #400734
+ - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init
+ Closes: #489656
+ - describe '-g' option in smbclient man page. Closes: #510812
+ - fix swat status table layout. Closes: #511275
+
+ [ Jelmer Vernooij ]
+ * Use alternatives for the smbstatus, nmblookup, net and
+ testparm binaries and various data files in samba-common
+ to allow installation of Samba 3 together with Samba 4.
+ * Add myself to uploaders.
+
+ [ Christian Perrier ]
+ * Add mbc_getOptionCaseSensitive at Base, smbc_setOptionCaseSensitive at Base,
+ smbc_set_credentials at Base, smbc_urldecode at Base and smbc_urlencode at Base to
+ libsmbclient's symbols file with 3.3.0 as version number
+ * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as
+ version number
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 30 Jan 2009 21:41:49 +0100
+
+samba (2:3.3.0~rc2-4) experimental; urgency=low
+
+ [ Steve Langasek ]
+ * Revert one of the template depersonalization changes from the -2 upload,
+ because it loses important context
+
+ [ Christian Perrier ]
+ * Use double quotation marks in debconf templates
+ * Add 'status" option to init scripts. Thansk to Dustin Kirkland for
+ providing the patch. Closes: #488275
+ * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997
+ * [Lintian] Add ${misc:Depends} to dependencies of binary packages
+ that didn't have it already as we're using debhelper in the source
+ package
+ * [Lintian] Don't ignore errors in swat.postrm
+ * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config
+ and samba-common.config
+ * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5)
+ Closes: #512843
+
+ [ Debconf translations ]
+ * Asturian added. Closes: #511730
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 24 Jan 2009 16:04:57 +0100
+
+samba (2:3.3.0~rc2-3) experimental; urgency=low
+
+ * Fix around the libsmbclient/libsmbclient-dev descriptions, which got
+ swapped in the last upload.
+ * Drop a boilerplate sentence from the samba-common, smbclient, swat,
+ samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions
+ that's not relevant for these packages.
+ * Hyphenate "command-line" in the smbclient short description.
+ * Fix up the smbclient description, which got crossed with the smbfs one.
+ * Fix the smbfs description, which was not actually fixed in the previous
+ upload. Really closes: #496206.
+ * Further minor adjustments to the description of the swat package.
+ * Fix various inaccuracies in the winbind package description.
+ * Clarify in the description that samba-tools are extra, only useful for
+ testing.
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 30 Dec 2008 18:42:05 -0800
+
+samba (2:3.3.0~rc2-2) experimental; urgency=low
+
+ [ Steve Langasek ]
+ * Handle clearing out netbios settings whenever the DHCP server has gone
+ away. Closes: #299618.
+
+ [ Christian Perrier ]
+ * Point the correct document about password encryption in debconf templates
+ Corrected in translations as well. Closes: #502838
+ * Reword debconf templates to avoid mentioning the local host as a "server".
+ Closes: #171177
+ * Use this opportunity for other minor rewording:
+ - replace "SMB" by "SMB/CIFS"
+ - more strongly discouraging the use of plain text passwords
+ - unpersonnalization
+ * Reword the libpam-smbpass package description
+ Thanks to Justin B. Rye for the very useful suggestions
+ Closes: #496196
+ * Improve the package descriptions by rewording the description overhaul
+ Also improve the specific information for samba and samba-dbg
+ Thanks again to Justin B. Rye for the invaluable help
+ Closes: #496200
+ * Improve libsmbclient package description. Closes: #496197
+ * Improve libwbclient0 package description. Closes: #496199
+ * Improve samba-doc package description. Closes: #496202
+ * Improve samba-tools package description. Closes: #496203
+ * Improve samba-common package description. Closes: #496204
+ * Improve smbclient package description. Closes: #496205
+ * Improve smbfs package description. Closes: #496206
+ * Improve swat package description. Closes: #496207
+ * Improve winbind package description. Closes: #496208
+ * Improve samba-doc-pdf package description. Closes: #496211
+ * Update French debconf translation
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 29 Dec 2008 11:50:04 +0100
+
+samba (2:3.3.0~rc2-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 17 Dec 2008 08:22:18 +0100
+
+samba (2:3.3.0~rc1-2) experimental; urgency=low
+
+ * Provide idmap_adex and idmap_hash in winbind.
+ Thanks to Jelmer Jaarsma for reporting and providing a patch
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 04 Dec 2008 19:59:23 +0100
+
+samba (2:3.3.0~rc1-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 28 Nov 2008 10:51:32 +0100
+
+samba (2:3.3.0~pre2-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 07 Nov 2008 20:52:36 +0100
+
+samba (2:3.2.4-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * New upstream release.
+ - debian/rules: we don't need to move cifs.upcall around, it's now
+ installed to the right place upstream.
+ - Fixed in this release:
+ - typo in cifs.upcall.8. Closes: #501499
+
+ [ Christian Perrier ]
+ * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for
+ the patch. Closes: #499359
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 18 Oct 2008 08:20:31 +0200
+
+samba (2:3.2.3-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing
+ this out. Closes: #497857.
+ * Georgian debconf translation added. Closes: #498426
+ * Polish debconf translation added. Thanks to Łukasz Paździora.
+
+ [ Jelmer Vernooij ]
+ * Add ldb-tools to Suggests: of samba. Closes: #488384
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 03 Oct 2008 20:37:19 +0200
+
+samba (2:3.2.3-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Fix FTBFS on GNU/kFreeBSD. Closes: #496880
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 30 Aug 2008 00:46:07 -0700
+
+samba (2:3.2.3-1) unstable; urgency=high
+
+ * High-urgency upload for security fix
+ * New upstream release
+ - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default"
+ Closes: #491881
+ - Fix the default permissions on ldb databases. Addresses
+ CVE-2008-3789; closes: #496073.
+ - debian/rules, debian/smbfs.files: build with cifs.upcall,
+ newly introduced to replace cifs.spnego
+ - debian/rules: no more need to rename libsmbclient.so to
+ libsmbclient.so.0, or libwbclient.so to libwbclient.so.0
+
+ [ Noèl Köthe ]
+ * fixing lintian warning "build-depends-on-1-revision"
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 27 Aug 2008 10:19:59 -0700
+
+samba (2:3.2.1-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Build-depend on keyutils only on the linux archs. Closes: #493401.
+ * New patch debian/patches/shrink-dead-code.patch: throw all .o files into
+ a .a archive as a first pass before linking the final executables, so
+ that the executables don't end up with quite so much unused code bloating
+ the system. Not applied to net or ntlm_auth, which have particularly
+ hairy linking needs. Partially addresses: bug #474543; no code was
+ harmed in the making of this patch.
+ * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports.
+
+ [ Christian Perrier ]
+ * New upstream release
+ - Fix trusted domain handling in Winbindd. Closes: #493752
+ - Fix for print jobs that continued to show as active after printing
+ had completed. Closes: #494899.
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 14 Aug 2008 16:13:24 -0700
+
+samba (2:3.2.0-4) unstable; urgency=low
+
+ * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch
+ that went missing somehow, causing samba to look for secrets.tdb in
+ /etc/samba instead of /var/lib/samba where it's been for years. No
+ migration handling added, because this was only present in unstable for
+ about a day. Thanks to Rick Nelson for pointing this out.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 21 Jul 2008 17:39:48 -0700
+
+samba (2:3.2.0-3) unstable; urgency=low
+
+ * Upload to unstable.
+ * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro
+ and Makefile.in to properly avoid linking .a libraries into other .a
+ libraries, since this bloats the libraries without providing any useful
+ functionality.
+ * Version the build-dependency on libtalloc-dev, to ensure we're building
+ against a package with the right symbols.
+ * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get
+ more fine-grained versioned library dependencies
+ * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols
+ have been added.
+ * Re-add docs/registry to samba-doc, restored upstream
+ * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it
+ belongs according to the FHS. Closes: #454770.
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 20 Jul 2008 15:38:10 -0700
+
+samba (2:3.2.0-2) experimental; urgency=low
+
+ * Fix up the copyright file to correctly document that we're now under
+ GPLv3, not GPLv2.
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 08 Jul 2008 12:21:47 -0700
+
+samba (2:3.2.0-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New samba-tools package to provide all "torture" tools:
+ smbtorture msgtest masktest locktest locktest2 nsstest vfstest
+ pdbtest talloctort replacetort tdbtorture smbconftort
+ * Upgrade Standard to 3.8.0 (checked)
+ * Merged from unstable:
+ * Drop "invalid users = root" from the default smb.conf file
+ as it differs from upstream's behaviour and upstream is fairly
+ noisy about this choice of ours. Closes: #462046
+ * Drop commented "guest account = nobody". This is already upstream's
+ default
+ * Remove versioned Build-Depends when satisfied in etch (actually all
+ versioning in Build-Depends)
+ * Remove Conflicts with non-existing packages
+ * Drop dpkg-dev and binutils from Build-Depends, since the versioned
+ build-dep is no longer needed and these are both Build-Essential
+ * Mini-policy for settings in smb.conf:
+ - don't explicitly set settings to their default value
+ - commented settings with the default value are commented with "#"
+ - commented settings with a non-default value are commented with ";"
+ * Apply this policy to "socket options". Closes: #476104
+ * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
+ libsmbclient.so.0 as upstream doesn't assign versions
+ * Add idmap_*(8) man pages (idea taken from SerNet packages)
+ * Create the entire set of directories needed by clients for
+ Point-and-Click printing (including old clients!) in
+ /var/lib/samba/printers (idea taken from SerNet packages)
+ * Update copyright and README.debian information for current and past
+ maintainers. Remove redundant mention of Tridge (the copyright is enough)
+ * Add doc-base files for samba-doc-pdf. Closes: #451685
+ * add a soft dependency on slapd in init script to allow
+ proper operation when dependency-based boot sequence is enabled.
+ Thanks to Petter Reinholdtsen for reporting and providing a patch
+ Closes: #478800
+ * Rename libcupsys2-dev to libcups2-dev in build dependencies
+ * Localize SWAT in German. Closes: #487681
+
+ [ Debconf translations ]
+ * Merged from unstable:
+ * Kurdish. Closes: #480151
+ * Romanian updated. Closes: #488709.
+
+ [ Steve Langasek ]
+ * New upstream release
+ * Merged from unstable:
+ * debian/patches/no-unnecessary-cups.patch: don't try to connect to a
+ cups server when we know that no printers are configured.
+ Closes: #479512.
+
+ [ Jelmer Vernooij ]
+ * Merged from unstable:
+ * Fix bashism in smbtar. (Closes: #486056)
+
+ [ Peter Eisentraut ]
+ * Merged from unstable:
+ * Removed myself from Uploaders
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 06 Jul 2008 09:59:07 +0200
+
+samba (2:3.2.0~rc2-1) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release
+
+ [ Steve Langasek ]
+ * Enable building of cifs.spnego for the smbfs package, adding a
+ build-dependency on keyutils-dev, to allow kerberos-based authentication
+ of cifs mounts. Closes: #480663, LP: #236830.
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 12 Jun 2008 17:17:38 +0200
+
+samba (2:3.2.0~rc1-2) experimental; urgency=low
+
+ * Reupload to experimental. Sigh.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 31 May 2008 11:08:14 +0200
+
+samba (1:3.2.0~rc1-1) unstable; urgency=low
+
+ * New upstream version
+ * debian/samba-doc.doc-base.samba-using: index file is no named toc.html
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 30 May 2008 20:22:57 +0200
+
+samba (1:3.2.0~pre3-1) experimental; urgency=low
+
+ * New upstream version
+ * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream
+ * docs/registry removed from samba-doc as missing from upstream tarball
+ (upstream bug #5421)
+ * debian/samba-doc.doc-base.samba-using: The index (and only) file
+ is now book.html
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 26 Apr 2008 08:20:21 +0200
+
+samba (1:3.2.0~pre2-2) experimental; urgency=low
+
+ [ Christian Perrier ]
+ * Upload to experimental with an epoch as the earlier version
+ accidentally went to unstable.
+
+ [ Peter Eisentraut ]
+ * Removed myself from Uploaders
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 06 Apr 2008 20:38:35 +0200
+
+samba (3.2.0~pre2-1) unstable; urgency=low
+
+ * New upstream (pre-)release. It closes the following bugs:
+ - typos in net.8. Closes: #460487, #460491
+ - mention insmb.conf(5) that logging still occurs when
+ "syslog only" is enabled and "syslog=0". Closes: #311300
+ - bad link in HTML docs. Closes: #358479
+ - enhance a useless and confusing debug message in pdb_ldap
+ Closes: #448546
+ - mention the correct default debug level in smbclient(1)
+ Closes: #292371
+ - no longer mention that "ip" parameter can use the host name
+ in mount.cifs(8). Closes: #296057
+ - wrong spelling of "its own" in source comments fixed
+ Closes: #448686
+ - fix "ldapsam_getgroup: Did not find group" debug message
+ Closes: #448546
+ - fix smbclient(1): useless use of cat. Closes: #429349
+
+ [ Steve Langasek ]
+ * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from
+ 3.2.0pre2, which ended up with html entity encodings embedded in them
+ by mistake. This patch is expected to go away again for 3.2.0pre3.
+ * fix up the FHS patches for the new upstream release:
+ - debian/patches/fhs-newpaths.patch has been merged upstream, drop it.
+ - debian/patches/fhs-filespaths.patch has been mostly applied; only one
+ path usage remains inconsistent, and a new .tdb has been added with
+ the wrong path so fix this up here too.
+ - debian/patches/fhs-filespaths-debatable.patch: updated for some new
+ uses of lock_path() which we map to cache_path().
+ - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4
+ instead of source/configure.in.
+ * debian/patches/smbstatus-locking.patch: merged upstream
+ * debian/patches/smbpasswd-syslog.patch: updated to account for new
+ calls to logging functions
+ * Handle the new libraries available in samba 3.2: ship libwbclient as a
+ shared library, link against the system libtalloc (adding a
+ build-dependency on libtalloc-dev - which is actually sort of kludgy
+ because this only works as long as the system libtalloc has the same
+ soname as the one within the samba tree, this should be fixed to
+ properly build against the system libtalloc), and suppress generation
+ of the tdb and netapi libraries which aren't useful to us right now.
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 05 Mar 2008 22:45:28 +0100
+
+samba (2:3.0.31-1) unstable; urgency=medium
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 12 Jul 2008 16:57:09 +0200
+
+samba (2:3.0.30-4) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Rename libcupsys2-dev to libcups2-dev in build dependencies
+ * Localize SWAT in German. Closes: #487681
+
+ [ Jelmer Vernooij ]
+ * Fix bashism in smbtar. (Closes: #486056)
+
+ [ Jamie Strandboge ]
+ * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly
+ calculate buffer sizes. This bug was introduced in the fix for
+ CVE-2008-1105. Closes: #488688
+
+ [ Debconf translations ]
+ * Romanian updated. Closes: #488709.
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 06 Jul 2008 11:43:53 +0200
+
+samba (2:3.0.30-3) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * add a soft dependency on slapd in init script to allow
+ proper operation when dependency-based boot sequence is enabled.
+ Thanks to Petter Reinholdtsen for reporting and providing a patch
+ Closes: #478800
+
+ [ Steve Langasek ]
+ * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups
+ server when we know that no printers are configured. Closes: #479512.
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 10 Jun 2008 21:03:51 +0200
+
+samba (2:3.0.30-2) unstable; urgency=high
+
+ * Brown paper bag releae with epoch increased after yet another
+ accidental upload of 3.2.0 to unstable. Sigh and apologies to
+ autobuilders.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 31 May 2008 12:08:50 +0200
+
+samba (1:3.0.30-1) unstable; urgency=high
+
+ * New upstream release: fix a heap overflow when parsing SMB responses in
+ client code. (CVE-2008-1105). Closes: #483410
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 28 May 2008 22:38:44 +0200
+
+samba (1:3.0.29-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 22 May 2008 07:31:55 +0200
+
+samba (1:3.0.28a-3) unstable; urgency=low
+
+ * The "bug hunting at SambaXP" release
+ * Drop "invalid users = root" from the default smb.conf file
+ as it differs from upstream's behaviour and upstream is fairly
+ noisy about this choice of ours. Closes: #462046
+ * Drop commented "guest account = nobody". This is already upstream's
+ default
+ * Remove versioned Build-Depends when satisfied in etch (actually all
+ versioning in Build-Depends)
+ * Remove Conflicts with non-existing packages
+ * Drop dpkg-dev and binutils from Build-Depends, since the versioned
+ build-dep is no longer needed and these are both Build-Essential
+ * Mini-policy for settings in smb.conf:
+ - don't explicitly set settings to their default value
+ - commented settings with the default value are commented with "#"
+ - commented settings with a non-default value are commented with ";"
+ * Apply this policy to "socket options". Closes: #476104
+ * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
+ libsmbclient.so.0 as upstream doesn't assign versions
+ * Add idmap_*(8) man pages (idea taken from SerNet packages)
+ * Create the entire set of directories needed by clients for
+ Point-and-Click printing (including old clients!) in
+ /var/lib/samba/printers (idea taken from SerNet packages)
+ * Update copyright and README.debian information for current and past
+ maintainers. Remove redundant mention of Tridge (the copyright is enough)
+ * Add doc-base files for samba-doc-pdf. Closes: #451685
+ * Kurdish debconf translation. Closes: #480151
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 16 Apr 2008 23:14:46 +0200
+
+samba (1:3.0.28a-2) unstable; urgency=low
+
+ [ Peter Eisentraut ]
+ * Removed myself from Uploaders
+
+ [ Steve Langasek ]
+ * debian/patches/manpage-encoding.patch: fix up the manpage synopses to
+ not use embedded iso8859-1 non-break spaces, there is a roff escape
+ sequence that we should use instead. Closes: #470844.
+
+ [ Christian Perrier ]
+ * Reupload with an epoch to supersede an accidental upload of 3.2.0
+ in unstable
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 05 Apr 2008 11:59:23 +0200
+
+samba (3.0.28a-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream release. This fixes the following Debian bugs:
+ - Prevent nmbd from shutting down when no network
+ interfaces can be located. Closes: #433449
+ * Debian patches dropped as applied upstream:
+ - make-distclean.patch
+ - linux-cifs-user-perms.patch
+ - cifs-umount-same-user.patch
+ - get_global_sam_sid-non-root.patch
+ - chgpasswd.patch
+ - cups.patch
+ * Fix doc-base section from Apps/Net to Network
+ * Fix copyright in debian/copyright
+ * Updated Standards-Version to 3.7.3 (no changes needed)
+ * [Lintian] No longer use -1 revision for the libacl-dev build
+ dependency
+
+ [ Steve Langasek ]
+ * Merge smb.conf changes from Ubuntu:
+ - correct an inconsistency inthe winbind enum comment
+ - correct default and example settings to use the canonical names for all
+ options, rather than historical synonyms
+ - clarify the comment for 'max log size'.
+ Thanks to Chuck Short and Richard Laager.
+ * Add an additional sed command to samba-common.postinst to cleverly
+ pick up any shares that have been appended to the default smb.conf
+ and exclude them from the ucf diff.
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 14 Mar 2008 21:28:16 +0100
+
+samba (3.0.28-4) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Brown paper bag: fix samba-common.files to list all of the smb.conf
+ templates, not just the current one. Closes: #470138.
+ * Drop debian/patches/gcc42-arm-workaround.patch, which should have been
+ dropped in the previous upload
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 09 Mar 2008 04:09:26 -0700
+
+samba (3.0.28-3) unstable; urgency=low
+
+ * Drop the arm optimization workaround, as the compiler is now reported
+ to be fixed.
+ * Add missing eventlogadm(8) manpage.
+ * Refresh the list of Linux architectures from type-handling, to pick up
+ libacl-dev on armel. Closes: #465121.
+ * Convert handling of smb.conf to use ucf, so that we can sanely manage
+ syntax changes going forward.
+ * In the process, fix the dhcp handling to allow proper reconfiguration
+ via debconf.
+
+ [ Debconf translations ]
+ * Indonesian added. Closes: #469976
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 08 Mar 2008 17:11:16 -0800
+
+samba (3.0.28-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Drop some further code in samba-common.postinst that's specific to
+ pre-3.0 upgrades.
+ * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script,
+ so we can use bash array variables and cope with arguments containing
+ embedded spaces (such as share names). Thanks to Julian Gilbey
+ <jdg at debian.org> for the patch. Closes: #457105.
+ * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler
+ problem by building rpc_parse/parse_prs.o with -O0 on this architecture.
+ Thanks to Martin Michlmayr for helping to pin down the problem file.
+ Closes: #445566.
+ * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is
+ a closer approximation of the semantics with cifs.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 05 Jan 2008 09:46:06 +0100
+
+samba (3.0.28-1) unstable; urgency=high
+
+ * New upstream release. Security fix
+ * Fix a remote code execution vulnerability when running as a domain
+ logon server (PDC or BDC). (CVE-2007-6015)
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 11 Dec 2007 00:12:11 +0530
+
+samba (3.0.27a-2) unstable; urgency=low
+
+ * debian/patches/disable-weak-auth.patch: disable plaintext authentication
+ on the client, and lanman authentication on both client and server, by
+ default since these are only needed for Win9x or Samba with encrypted
+ passwords disabled and are potential password attack vectors. This
+ change is backported from Samba 3.2. LP: #163194.
+ * Don't build the userspace tools for the deprecated smbfs kernel driver
+ anymore; instead, use a shell wrapper around mount.cifs that translates
+ option names between the smbfs and cifs drivers.
+ Closes: #169624, #256637, #265468, #289179, #305210, #410075;
+ LP: #29413
+ * debian/panic-action: detect when we're on an Ubuntu system and direct bug
+ reporters to Launchpad instead of to the Debian BTS. Closes: #452940.
+ * debian/samba.init: call log_progress_msg separately for each daemon on
+ stop rather than passing a second arg to log_daemon_msg, for greater
+ compatibility with both Debian and Ubuntu LSB initscript implementations.
+ Closes: #453350.
+ * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of
+ recommends/suggests which is now implemented correctly in apt.
+ Closes: #453144.
+ * Get rid of the build-dependency on type-handling:
+ - add a new target, "update-archs", to be invoked by hand to refresh
+ the list of known Linux architectures for the libacl1-dev
+ build-dep; this avoids the clean target making changes to
+ debian/control
+ - rework the sed line so that it works in-place on debian/control,
+ so we can get rid of debian/control.in as well and just update
+ debian/control directly
+ Closes: #340570.
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 04 Dec 2007 18:35:29 -0800
+
+samba (3.0.27a-1) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * New upstream release
+ - fix regression with smbfs clients, introduced by the security fix in
+ 3.0.27. Closes: #451839.
+ - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream.
+ * Drop the deprecated "printer admin" example from the default smb.conf.
+ Closes: #451273.
+ * Add a *new* debian/patches/cups.patch to *enable* cups as the default
+ printing system, because since the original introduction of this patch
+ in Debian there was a regression upstream that caused cups to never be
+ selected as the default print system.
+ * Set the default value for the workgroup question to "WORKGROUP" in
+ samba-common.templates, not just in the template smb.conf, so that the
+ debconf question comes out right every time; and always treat this
+ as a high-priority debconf question instead of selecting the
+ priority based on whether there's an existing value, since there's
+ now *always* an existing value but the value doesn't tell us
+ anything meaningful about the user's preference. Closes: #451271.
+ * Drop some code from samba.postinst that only applies to upgrades from
+ pre-3.0 (i.e., pre-sarge) packages
+
+ [ Christian Perrier ]
+ * Update the "built by" part of README.debian
+ * Remove the very outdated parts of README.debian
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 23 Nov 2007 13:04:52 -0800
+
+samba (3.0.27-1) unstable; urgency=low
+
+ * New upstream version
+ - fixes a remote code execution vulnerability when running nmbd as a
+ WINS server. (CVE-2007-5398; closes: #451385)
+ - fixes a buffer overflow in nmbd when running as a domain controller
+ during processing of GETDC logon server requests. (CVE-2007-4572)
+
+ [ Steve Langasek ]
+ * fhs.patch: net usershares should also be stored under /var/lib, not under
+ /var/run. No transition handling in maintainer scripts, since this
+ feature is not activated by default.
+ * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid()
+ from smbpasswd -L or pam_smbpass when running as non-root, to avoid a
+ foreseeable panic. Closes: #346547, #450738.
+ * usershare.patch: enable "user shares" by default in the server with a
+ default limit of 100, to support user shares on both upgrades and new
+ installs with no need to munge config files. Thanks to Mathias Gug
+ <mathiaz at ubuntu.com> for the patch. Closes: #443230.
+ * On Ubuntu, support autopopulating the sambashare group using the existing
+ members of the admin group; no equivalent handling is done on Debian,
+ because there doesn't seem to be an appropriate template group we can use
+ that wouldn't be considered a privilege escalation for those users.
+ * Update Samba to explicitly use the C locale when doing password changes,
+ to account for Linux-PAM's recently adopted i18n support.
+ Closes: #451272.
+ * Enforce creation of the pid directory (/var/run/samba) in the samba
+ init script, for compatibility with systems that use a tmpfs for
+ /var/run. Closes: #451270.
+ * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd
+ as the default printing system, as CUPS is now the dominant/default
+ printing system for Linux.
+
+ [ Debconf translations ]
+ * Hebrew added. Closes: #444054
+
+ [ Christian Perrier ]
+ * Split fhs.patch into 3 separate patches to make upstream integration
+ easier:
+ - fhs-newpaths.patch: introduce new paths
+ - fhs-filespaths.patch: assign files to new paths
+ - fhs-assignpaths.patch: assign paths to FHS-compatible locations
+ * Compile with DNS update support. Thanks to Matthias Gug for
+ reporting and contributions from Launchpad's #156686
+ Closes: #449422
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 15 Nov 2007 11:46:17 -0800
+
+samba (3.2.0~pre1-1) experimental; urgency=low
+
+ * New upstream (pre-)release
+
+ [ Steve Langasek ]
+ * fhs.patch: net usershares should also be stored under /var/lib, not under
+ /var/run. No transition handling in maintainer scripts, since this
+ feature is not activated by default.
+ * Update smbstatus-locking.patch to use db_open() instead of
+ tdb_open(), per upstream recommendation.
+ * Use talloc_strdup() and talloc_asprintf() instead of static strings in
+ data_path(), state_path(), and cache_path(), as suggested by Volker
+ Lendecke.
+
+ [ Debconf translations ]
+ * Hebrew added. Closes: #444054
+
+ [ Christian Perrier ]
+ * Split fhs.patch into 4 separate patches to make upstream integration
+ easier:
+ - fhs-newpaths.patch: introduce new paths
+ - fhs-filespaths.patch: assign files to new paths
+ - fhs-filespaths-debatable.patch: assign files to new paths (part that
+ seems more difficult to be integrated upstream)
+ - fhs-assignpaths.patch: assign paths to FHS-compatible locations
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 21 Oct 2007 09:14:42 +0200
+
+samba (3.0.26a-1) unstable; urgency=low
+
+ * New upstream release.
+ * Remove the samba-common/unsupported-passdb debconf template and
+ the associated code in samba-common.postinst, that deals with pre-etch
+ versions transition
+ * Remove the samba/tdbsam template and the remaining line referencing
+ it (for no need) in samba.postinst. That code was removed in 3.0.23c-2
+ and was dealing with pre-3.0 transitions.
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 16 Sep 2007 10:16:29 +0200
+
+samba (3.0.26-1) unstable; urgency=high
+
+ * New upstream release: security update for CVE-2007-4138:
+ incorrect primary group assignment for domain users using the rfc2307 or
+ sfu winbind nss info plugin.
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 11 Sep 2007 19:16:32 +0200
+
+samba (3.0.25c-1) unstable; urgency=low
+
+ [ Noèl Köthe ]
+ * new upstream released from 2007-08-20
+ - added smbfs deprecation information to help and manpage
+ Closes: #360384
+ - fixed winbind leaking file descriptors
+ Closes: #410663
+ - fixed smbpasswd fails with errorcode SUCCESS as normal user
+ Closes: #155345
+
+ [ Christian Perrier ]
+ * Drop the (upstream unmaintained) python bindings (python-samba package)
+ * swat: turn the dependency on samba-doc to a Recommends:
+ Thanks to Peter Eisentraut for dealing with that issue and bringing it
+ back. Closes: #391742
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 26 Aug 2007 14:57:16 +0200
+
+samba (3.0.25b-2) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Don't start nmbd if 'disable netbios' is set in the config.
+ Closes: #429429.
+ * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid,
+ set to those of the invoking user, when called as non-root.
+ Closes: #431661.
+ * Fix up fhs.patch for some new FHS regressions:
+ - make sure all references to winbindd_idmap.tdb look in /var/lib/samba
+ - make sure all references to winbindd_cache.tdb look in /var/cache/samba
+ - share_info.tdb belongs in /var/lib/samba; this is a regression
+ introduced in 3.0.23-1, so fix up this path on samba upgrade
+ - move the ADS "gpo" cache directory to /var/cache/samba
+ - move idmap_cache.tdb to /var/cache/samba, and fix up the path on
+ winbind upgrade
+ * linux-cifs-user-perms.patch: also support setting a default uid and gid
+ value when mount.cifs is called as non-root
+ * cifs-umount-trailing-slashes.patch: canonicalize mount point names when
+ umount.cifs is called, to avoid unnecessarily leaving entries behind in
+ /etc/mtab if invoked with a trailing slash in the mount point name
+ * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check
+ in umount.cifs assumed that errors would return a value > 0, when in fact
+ the return value on failure is -1. Correct this assumption, which was
+ allowing any user to unmount shares mounted by other users.
+ * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog()
+ and closelog(), since this will interfere with syslogging behavior
+ of the calling application. Closes: #434372.
+ * swat should depend only on inet-superserver, not update-inetd, per
+ Marco d'Itri.
+
+ [ Christian Perrier ]
+ * debian/panic-action: bail out if there's no "mail" command
+ Patch from the Ubuntu samba packagers.
+ * debian/smb.conf: use the comment from Ubuntu package for the "valid users"
+ setting of [homes] as a basis for ours. Ubuntu's wording is better.
+
+ [ Peter Eisentraut ]
+ * Don't ignore errors from make distclean, as per lintian check
+
+ [ Debconf translations ]
+ * Gujarati updated. Closes: #436215
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 17 Aug 2007 18:38:58 -0700
+
+samba (3.0.25b-1) unstable; urgency=low
+
+ * New upstream version
+ * Bugs fixed upstream:
+ - correct default mentioned for "store dos attribute" in smb.conf(5)
+ Closes: #367379
+ - fix typo in pdbedit.c. Closes: #421758
+ - fixed crashes in idmap_rid. Closes: #428411
+ - misleading documentation in smb.conf(5). Closes: #218477
+ - don't crash when no eventlog names are defined in smb.conf
+ Closes: #424683
+ - typography errors in manpages. Closes: #427865, #418811
+ - fix compilation and linking of pam_smbpass.so. Closes: #430755
+ * Drop patches that have been applied upstream:
+ - nmbd-signalling.patch
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 27 Jun 2007 15:12:13 +0200
+
+samba (3.0.25a-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Danish updated. Closes: #426773
+
+ [ Christian Perrier ]
+ * Clean out some remaining cruft that is not deleted
+ by "make clean". Taken from Ubuntu patches.
+ * Add missing userspace patches to properly pass uid and gid with 2.6
+ kernels. See #408033 and upstream's #999 for rationale
+ * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue
+ is fixed in 2.4 and 2.6 kernels (2.6 kernels need
+ missing_userspace_bugzilla999.patch, though)
+ Closes: #408033
+ * Add the samba-common and winbind packages to samba-dbg to get
+ debugging symbols for winbindd, net, etc.
+ * Replace all occurrences of ${Source:Version} by ${$binary:Version} in
+ dependencies. All these were Arch:any depending on Arch:any (the only
+ Arch:any depending on Arch:all already used ${source:Version}
+
+ [ Steve Langasek ]
+ * Update samba.config to not override user preference on passdb.tdb
+ creation after initial configuration. Closes: #350926.
+ * Drop the last vestiges of the unified samba.patch; this reverts the
+ change for bug #112195 which it's been determined has no actual security
+ benefits, and drops the fix for bug #106976 which is superseded
+ upstream.
+
+ [ Debconf translations ]
+ * Vietnamese updated. Closes: #426979.
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 13 Jun 2007 15:47:06 +0200
+
+samba (3.0.25a-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream version
+ * Bugs fixed upstream:
+ - password expiration loog on samba domain controllers. Closes: #425083
+ - no more login on samba servers that are members of samba domains
+ Closes: #425680, #426002
+ - users no longer have access according to their secondary groups
+ on shares with "force group". Closes: #424629
+ * Debian packaging fixes:
+ - Enforce building with "--with-ads" and therefore fail
+ when the build can't be done with kerberos support.
+ Closes: #424637
+ - debian/control: wrap long lines in packages' descriptions
+ - uncomment out use of type-handling in the clean target, because
+ type-handling has been fixed to support the new /usr/share/dpkg/ostable
+ - avoid installing extra COPYING files in /usr/share/doc/* (one was
+ installed along with the pcap2nbench example)
+ * Merge Ubuntu changes:
+ - use of PIDDIR instead of hardcoding it in samba.init and winbind.init
+ * Patches to upstream source:
+ - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory
+ instead of the lock directory. Thanks to C. K. Jester-Young for the
+ patch. Closes: #425640
+
+ [ Steve Langasek ]
+ * swat and samba depend on update-inetd instead of on netbase; swat also
+ depends on "openbsd-inetd | inet-superserver", for samba this is only a
+ Suggests.
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 27 May 2007 09:30:02 +0200
+
+samba (3.0.25-1) unstable; urgency=high
+
+ * New upstream version including security fixes
+ * Bugs fixed upstream:
+ - nmbd no longer segfaults on bad interface line
+ Closes: #265577, #386922, #359155, #366800
+ - documentation issues about displaycharset. Closes: #350790
+ - documentation makes it clear that case options such as
+ "default case" can only be set on a per-share basis.
+ Closes: #231229
+ - all occurrences of "encypt" fixed in smb.conf(5)
+ Closes: #408507
+ - two typos on "account" fixed in source/passdb/pdb_ldap.c and
+ source/utils/pdbedit.c. Closes: #402392
+ - no longer panic when using the (deprecated) "only user" option
+ in user level security. Closes: #388282
+ - CVE-2007-2444 (User privilege elevation because of a local SID/Name
+ translation bug)
+ - CVE-2007-2446 (Multiple heap overflows allow remote code execution)
+ - CVE-2007-2447 (Unescaped user input parameters are passed as
+ arguments to /bin/sh allowing for remote command
+ execution)
+
+ [ Debconf translations ]
+ * Marathi added. Closes: #416802
+ * Esperanto added. Closes: #417795.
+ * Basque updated. Closes: #418196.
+ * Wolof updated. Closes: #421636
+
+ [ Christian Perrier ]
+ * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba
+ before running invoke-rc.d. Closes: #414841
+
+ [ Steve Langasek ]
+ * Comment out use of type-handling in the clean target, because
+ type-handling is currently broken in unstable and clean shouldn't be
+ editing debian/control anyway.
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 14 May 2007 10:30:15 +0200
+
+samba (3.0.24-6) unstable; urgency=high
+
+ * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug
+ is still present :/ Fix a missing ] in the regexp for passdb backend
+ checking, really-closes: #415725.
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 24 Mar 2007 03:32:46 -0700
+
+samba (3.0.24-5) unstable; urgency=high
+
+ * The "see what you get for trusting the quality of my packages,
+ release team? Release team, please unblock this package" release.
+ * High-urgency brown-paper-upload for etch-targetted fix for
+ regression introduced in the last version
+
+ [ Steve Langasek ]
+ * Fixed the regexp used for matching broken passdb backend settings,
+ since we were getting false positives on *all* values. :/ The
+ correct match should be: one or more non-space, non-comma
+ characters, followed by a space or a comma, followed by zero or more
+ spaces, followed by one or more non-space characters. Closes: #415725.
+
+ [ Debconf translations ]
+ * Nepali
+ * Korean; closes: #414883.
+ * Russian
+ * Arabic
+ * Portuguese
+ * Greek. Closes: #415122
+ * Norwegian Nynorsk added.
+ * Marathi added. Closes: #416802
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 21 Mar 2007 13:49:46 -0700
+
+samba (3.0.24-4) unstable; urgency=medium
+
+ [ Steve Langasek ]
+ * Documentation fix for a problem affecting upgrades from sarge: if
+ passdb backend is still a comma- or space-separated list after any
+ attempts at automatic fix-ups, throw a debconf error notifying the
+ user that they'll need to fix this manually. Closes: #408981.
+
+ [ Debconf translations ]
+ * French
+ * Spanish
+ * Galician; closes: #414605.
+ * Swedish; closes: #414610.
+ * Brazilian Portuguese; closes: #414603.
+ * German; closes: #414630.
+ * Norwegian Bokmål; closes: #414619.
+ * Bulgarian; closes: #414624.
+ * Romanian; closes: #414629.
+ * Tagalog; closes: #414637.
+ * Khmer; closes: #381833.
+ * Thai; closes: #414664.
+ * Slovak; closes: #414665.
+ * Slovenian
+ * Simplified Chinese; closes: #414671.
+ * Japanese; closes: #414673.
+ * Hungarian; closes: #414677.
+ * Dzongkha; closes: #414680.
+ * Estonian; closes: #414679.
+ * Catalan
+ * Malayalam; closes: #414728
+ * Traditional Chinese; closes: #414730
+ * Turkish
+ * Italian; closes: #414708
+ * Finnish; closes: #414736
+ * Dutch; closes: #414741
+ * Albanian; closes: #414778.
+ * Czech; closes: #414793.
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 13 Mar 2007 16:29:21 -0700
+
+samba (3.0.24-3) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Merge some Ubuntu changes:
+ - do not expose the Samba version anymore
+ - default workgroup set to WORKGROUP (default workgroup of
+ Windows workstations)
+ * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch
+ Closes: #394830
+ * Add commented "winbind enum*" settings in smb.conf
+ This will point users to these important settings which changed
+ their default behaviour between sarge and etch. Closes: #368251
+
+ [ Steve Langasek ]
+ * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first
+ time the script is called if the dhcp client was already running at
+ the time of install, and manually reload samba to get the updated
+ config files read. Thanks to Bas Zoetekouw for the patch.
+ Closes: #407408.
+ * While we're at it, use atomic replace for /etc/samba/dhcp.conf just
+ in case someone else reloads samba while the script is running. Low
+ impact, low-risk change.
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 11 Mar 2007 23:34:10 -0700
+
+samba (3.0.24-2) unstable; urgency=low
+
+ * Re-upload with a proper .orig.tar.gz.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 5 Feb 2007 19:55:34 -0800
+
+samba (3.0.24-1) unstable; urgency=high
+
+ * New upstream release, security update
+ * Fixes for the following security advisories:
+ - Directly affecting Debian:
+ - CVE-2007-0452 (Potential Denial of Service bug in smbd)
+ - Not affecting Debian:
+ - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind
+ NSS library on Solaris)
+ - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin)
+ * Correct paths for the documentation pointers in the default smb.conf
+ file. Thanks to Ted Percival for his care reporting this. Closes: #408898
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 5 Feb 2007 05:27:07 +0100
+
+samba (3.0.23d-4) unstable; urgency=low
+
+ * Debconf translation updates:
+ - Slovenian added.
+
+ -- Christian Perrier <bubulle at debian.org> Wed, 3 Jan 2007 08:43:50 +0100
+
+samba (3.0.23d-3) unstable; urgency=low
+
+ * Debconf translation updates:
+ - Malayalam added. Closes: #403107
+ - Tamil added. Closes: #403353
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 1 Jan 2007 10:17:18 +0100
+
+samba (3.0.23d-2) unstable; urgency=low
+
+ * Build-Conflicts: libfam-dev to avoid problems accessing shares
+ when using GAMIN. Closes: #400617
+ * Lintian fixes:
+ - Run debconf-updatepo in the clean target to ensure up-to-date PO
+ and POT files
+ - debian/patches/no_unbreakable_spaces_in_man.patch:
+ Replace all non-breakable spaces by regular spaces in man pages.
+ They are encoded in ISO-8859-1 which is not recommended in man pages.
+ This should be submitted upstream.
+ - reformat too long lines in package description
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 3 Dec 2006 09:39:29 +0100
+
+samba (3.0.23d-1) unstable; urgency=low
+
+ * new upstream release (2006-11-15)
+
+ [ Noèl Köthe ]
+ * updated documentation.patch for 3.0.23d
+ * updated non-linux-ports.patch for 3.0.23d
+ * updated adapt_machine_creation_script.patch for 3.0.23d
+ * updated autoconf.patch for 3.0.23d
+
+ [ Debconf translations ]
+ * Added Bosnian. Closes: #396634
+ * Added Bulgarian. Closes: #397773
+
+ -- Noèl Köthe <noel at debian.org> Thu, 16 Nov 2006 13:55:26 +0100
+
+samba (3.0.23c-4) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Added Greek.
+ * Added Gujarati. Closes: #394430
+ * Added Korean. Closes: #394509
+ * Added Nepali.
+ * Updated Czech (typo fixed).
+ * Added Wolof. Closes: #396079
+
+ -- Christian Perrier <bubulle at debian.org> Sun, 5 Nov 2006 09:42:40 +0100
+
+samba (3.0.23c-3) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Updated Catalan; thanks to Guillem Jover for his help
+ * Updated Russian.
+ * Updated Spanish. Add a missing word and correct the copyright header
+ * Updated Vietnamese. Closes: #394164
+ * Added Albanian. Closes: #393777
+ * Added Chinese (Traditional).
+ * Added Thai.
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 21 Oct 2006 10:44:11 +0200
+
+samba (3.0.23c-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Updated Swedish. Closes: #386510.
+ * Updated Japanese. Closes: #386534.
+ * Updated Italian. Closes: #386691.
+ * Updated Romanian. Closes: #388254.
+ * Updated German. Closes: #389072.
+ * Updated Brazilian Portuguese. Closes: #389097.
+ * Updated Basque. Closes: #389722.
+ * Updated Turkish. Closes: #390887
+ * Updated Danish. Closes: #390878
+ * Updated German. Closes: #390813
+ * Updated Simplified Chinese. Closes: #390959
+ * Updated Arabic.
+ * Updated Spanish. Closes: #391735
+ * Updated Dutch. Closes: #392082
+ * Added Slovak. Closes: #386847.
+ * Added Finnish. Closes: #390150.
+ * Added Estonian. Closes: #391102.
+ * Added Norwegian Bokmål. Closes: #391692
+ * Added Hungarian. Closes: #391746
+
+ [ Steve Langasek ]
+ * Change the Maintainer field at last to the mailing list... gives
+ our spam rules some testing, in response to popular demand :)
+ * Check for update-inetd on purge before trying to invoke it;
+ closes: #388606.
+
+ [ Peter Eisentraut ]
+ * Make swat binNMU-safe by using ${source:Version} for dependency on
+ samba-doc
+ * Make samba-common owner of /var/{cache,log,run}/samba, let samba and
+ winbind only delete files they know they're exclusive owners of.
+ Closes: #370718.
+ * Use python-central to manage installation of python-samba.
+ Closes: #386499. (patch by Patrick Winnertz)
+ * Use upstream makefile to install Python module.
+ * Build-Depend on python-dev instead of python-all-dev.
+ * Removed old upgrade support.
+ * Remove possibly leftover comma from "passdb backend" setting in
+ smb.conf on upgrade. Closes: ##383307.
+ * Added libpam-smbpass logcheck file by martin f krafft.
+ Closes: #391487, #391916.
+
+ [ Christian Perrier ]
+ * Add LSB info to the init script
+
+ -- Christian Perrier <bubulle at debian.org> Thu, 12 Oct 2006 18:31:46 +0200
+
+samba (3.0.23c-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * New upstream version
+ * Split out samba/run_mode with "__Choices".
+
+ [ Noèl Köthe ]
+ * corrected samba override disparity:
+ samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra.
+
+ [ Debconf translations ]
+ * Updated Galician. Closes: #383001.
+ * Updated Danish. Closes: #383025.
+ * Added Tagalog. Closes: #383039, #383252.
+ * Updated Khmer.
+ * Updated Arabic.
+ * Updated Dzongkha. Closes: #383125.
+ * Updated Vietnamese. Closes: #383126.
+ * Updated Czech. Closes: #384760.
+
+ [ Peter Eisentraut ]
+ * Preseed configure result for method to detect interfaces in
+ debian/config.cache; the test might otherwise fail if there are no
+ interfaces configured at build time. Closes: #382429.
+ * Refined panic-action script text. Closes: #382500.
+
+ -- Noèl Köthe <noel at debian.org> Mon, 04 Sep 2006 12:10:28 +0200
+
+samba (3.0.23b-2) unstable; urgency=low
+
+ [ Debconf translations ]
+ * Updated Romanian. Closes: #382358
+ * Updated Dzongkha. Closes: #382448, #382948
+ * Updated Basque. Closes: #382456
+ * Added Simplified Chinese. Closes: #382489
+
+ [ Peter Eisentraut ]
+ * Remove no longer functioning "guest" value from "passdb backend"
+ setting in smb.conf on upgrade. Closes: #382296
+
+ [ Steve Langasek ]
+ * Drop code and debconf questions specific to upgrades from samba <= 2.2.
+ * Reword some debconf translations as discussed on the list.
+ * Rerun debconf-updatepo.
+ * Switch debian/ca.po to UTF-8.
+ * Restore some reverted strings for Galician, Czech, Brazilian Portuguese,
+ Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese.
+ * Update translations for Brazilian Portuguese, Spanish, French, Italian,
+ Catalan, and Portuguese.
+
+ -- Peter Eisentraut <petere at debian.org> Mon, 14 Aug 2006 19:04:31 +0200
+
+samba (3.0.23b-1) unstable; urgency=low
+
+ * New upstream release
+
+ [ Debconf translations ]
+ * Updated Galician. Closes: #381988
+
+ -- Noèl Köthe <noel at debian.org> Tue, 08 Aug 2006 22:28:00 +0200
+
+samba (3.0.23a-1) unstable; urgency=medium
+
+ * New upstream release
+
+ * Fixes the following Debian bugs:
+ - winbind: panic()s when started outside of a domain context.
+ Closes: #337070
+ - Make smbclient -L use RPC to list shares, fall back to RAP.
+ Closes: #168732
+ - Potential hang in nmbd. Upstream bug #3779. Closes: #367472
+ - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780).
+ Closes: #367507
+ - Erroneous permissions checks after 3.0.10 -> 3.0.14a
+ (upstream #2591). Closes: #307626
+ - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070
+ - ImportError exception raised when trying to import samba.smb
+ (upstream #3567). Closes: #350050
+ - Changed references from pam_pwdb to pam_unix (upstream #3225).
+ Closes: #206672
+ - SWAT segfault (upstream #3702). Closes: #363523
+
+ [ Adam Conrad ]
+ * Fix typo in smb.conf that causes all samba apps to whine.
+ Closes: #369782
+ * Add myself to Uploaders, on the off chance that I might upload.
+
+ [ Debconf translations ]
+ * Add Galician translation of debconf templates. Closes: #361204, #369403
+ * Add Basque translation of debconf templates. Closes: #375104
+ * Add Romanian translation of debconf templates. Closes: #379246
+ * Add Khmer translation of debconf templates. Closes: #381833
+ * Add Dzongkha translation of debconf templates.
+ * Updated Russian. Closes: #369375
+ * Updated Czech. Closes: #369408
+ * Updated Japanese. Closes: #369457
+ * Updated Italian. Closes: #369587
+ * Updated Swedish. Closes: #369730
+ * Updated Dutch. Closes: #376515
+ * Updated Vietnamese. Closes: #381557
+ * Updated French.
+ * Updated Brazilian.
+ * Updated Portuguese. Closes: #372632
+ * Updated Arabic.
+
+ [ Christian Perrier ]
+ * Add dependency on procps for samba, as ps is used in init scripts.
+ Thanks to Bastian Blank for reporting. Closes: #365618
+ * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's
+ Reference
+ * Add support for /etc/default/winbind. Closes: #262313, #374411
+ Thanks to Guido Guenther for the old patch and to Jérôme Warnier
+ for reminding us about it.
+ * Compile with --with-cifsmount which is now needed to properly compile
+ mount.cifs and umount.cifs. See samba bug #3799
+
+ [ Peter Eisentraut ]
+ * Use debian/compat instead of DH_COMPAT
+ * Updated Standards-Version to 3.7.2 (no changes needed)
+ * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the
+ required ldconfig calls appear in the maintainer scripts
+ * Adjusted debian/rules to get 3.0.23rc1 to build
+ * Updated to debhelper level 5
+ * Rearranged dh_strip calls so that build succeeds with
+ DEB_BUILD_OPTIONS=nostrip. Closes: #288995
+ * Create /var/spool/samba and use it as default printer spool.
+ Closes: #275241
+ * Made winbind init script more careful about returning proper exit code
+ * Added winbindd_priv group as owner of winbindd_privileged directory.
+ Closes: #307257
+ * Python transition preparations: renamed package to python-samba,
+ removed hardcoded references to Python version 2.3. Closes: #380939
+ * Removed unwanted swat debconf warning
+ * Put localized swat messages into /usr/share/samba, where swat looks for
+ them. Closes: #376991
+
+ -- Peter Eisentraut <petere at debian.org> Mon, 7 Aug 2006 23:00:49 +0200
+
+samba (3.0.22-1) unstable; urgency=medium
+
+ [ Steve Langasek ]
+ * New upstream release
+ - CAN-2006-1059: fixes an information leak in logfiles of systems using
+ winbind with log level >= 5.
+ * Fix a typo in the default smb.conf (closes: #354495).
+
+ [ Noèl Köthe ]
+ * replacing SMB with SMB/CIFS in the descriptions like
+ named on the samba.org webpage. Closes: #356335
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 12 Mar 2006 22:40:28 +0100
+
+samba (3.0.21c-1) unstable; urgency=low
+
+ * New upstream release
+ * add a few logon-related parameters as good and safe
+ examples for *DC-type settings. Closes: #349051
+ * add an example "add user script". Closes: #349050
+ * drop outdated information from the smbfs package description
+ Closes: #352828
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 25 Feb 2006 11:58:45 +0100
+
+samba (3.0.21b-1) unstable; urgency=low
+
+ * The "Tridge" release: celebrates the 2005 Free Software Award winner
+
+ * New upstream release
+
+ * Upstream bugs fixed by the new upstream release:
+ - Support changing expired passwords in
+ pam_winbindd. Closes: #258302
+ - vfs_full_audit fixes for multiple connections. Closes: #348419
+ - crashes of smbd in security=server mode
+ Closes: #346045, #346069, #350598, #351448
+
+ [ Peter Eisentraut ]
+ * Put correct paths for Debian installations into the man pages, and
+ remove outdated swat setup instructions therein. Closes: #321005
+ * Fix lintian overrides and install them into the right packages.
+ * Remove swat inetd registration in remove, not purge. Closes: #313214
+ * Add findsmb script. Closes: #231806
+ * Fix sonames of libnss_win{bind,s}.so. Closes: #333290
+ * Remove autoconf build dependency.
+ * Remove remnants of old patch system.
+ * Install smbumount setgid root. Closes: #253437
+ * Add watch file.
+ * Activate kernel oplocks. Closes: #218511
+ * Disable PIE compilation. Closes: #346416
+
+ [ Christian Perrier ]
+ * activate building of idmap_rid. Closes: #284681.
+ Thanks to Ubuntu patches
+ * activate building of idmap_ad. Closes: #341814
+ * modify the long description of the libsmbclient-dev package to
+ avoid repeating the long description. Thanks, linda.
+
+ [ Steve Langasek ]
+ * Also enable setresuid()/setresgid() on alpha and sparc now that support
+ for Linux 2.2 is dropped.
+
+ -- Christian Perrier <bubulle at debian.org> Mon, 6 Feb 2006 07:02:20 +0100
+
+samba (3.0.21a-4) unstable; urgency=low
+
+ [ Peter Eisentraut ]
+ * Add umount.cifs. Closes: #340967
+ * Really make mount.cifs and umount.cifs suid root. Closes: #340966
+
+ [ Christian Perrier ]
+ * Add "bind interfaces only" and "interfaces" options (commented)
+ to the default smb.conf file. Closes: #349043
+
+ [ Steve Langasek ]
+ * Add missing changes to source/include/config.h.in into the
+ autoconf.patch, so that samba looks for files in /var/lib/samba like it's
+ supposed to instead of in /var/run/samba! Closes: #349372, #349464.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 23 Jan 2006 00:59:20 -0800
+
+samba (3.0.21a-3) unstable; urgency=low
+
+ * Add Build-Depends on quilt (>= 0.40 as we use quilt.make)
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 21 Jan 2006 23:02:32 +0100
+
+samba (3.0.21a-2) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Switch to quilt for patches management. Refresh all patches so
+ that they apply cleanly. Closes: #345557
+ * debian/patches/adapt_machine_creation_script.patch:
+ - adapt example machine creation script to Debian. Closes: #346234
+ * winbind.dirs:
+ - added /var/run/samba. Closes: #347585
+
+ [ Peter Eisentraut ]
+ * swat.links:
+ - file added. Closes: #346001
+
+ [ Noèl Köthe ]
+ * fixed typo in panic-script. Closes: #348410
+
+ [ Steve Langasek ]
+ * debian/patches/autoconf.patch:
+ - move changes to autogenerated files into their own patch now that we've
+ lost the script that was calling autogen.sh for us; this also helps
+ make debian/rules clean just a little bit cleaner.
+ * debian/patches/fhs.patch:
+ - fix new references to registry.tdb (closes: #348874).
+ - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba
+ where they belong
+
+ -- Christian Perrier <bubulle at debian.org> Fri, 20 Jan 2006 14:20:35 +0100
+
+samba (3.0.21a-1) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * *Really* make samba-doc suggest samba-doc-pdf. This change finally
+ did not make it in the previous release.
+
+ [ Noèl Köthe ]
+ * new upstream release 3.0.21a
+ - removed smbsh.1 from debian/rules
+ - added new smbclient programm smbget (with conflict/replace
+ to existing Debian smbget package)
+ - added libsmbclient.7 to libsmbclient package
+ - added umount.cifs.8 to smbfs package
+ - added pam_winbind.7 to winbind package
+ - added new /usr/bin/eventlogadm to samba package which is
+ documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt
+ - fixed "cd command fails in smbclient". Closes: #307535
+ - fixed "file descriptor leak". Closes: #339564
+ - fixed "smbclient(1) doesn't list same options as
+ smbclient usage statement". Closes: #154184
+ - fixed "typo in smbmount.8". Closes: #260673
+ - fixed "smbmount manual page doesn't have a link to
+ smbumount". Closes: #297535
+ - fixed "smb.conf man page references non-existent
+ BROWSING.txt file". Closes: #316458
+ - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480
+ - fixed "fails to manage groups containing spaces". Closes: #299592
+ - corrected nonpic-libsmbclient.patch to apply
+ - corrected fhs.patch to apply
+ * added myself to Uploaders
+ * Rewording of the panic action script. Closes: #335051
+ * added missing swat translation to swat package
+
+ -- Noèl Köthe <noel at debian.org> Sun, 01 Jan 2006 12:45:33 +0100
+
+samba (3.0.20b-4) unstable; urgency=low
+
+ [ Christian Perrier ]
+ * Remove the smbldap-tools-* directory from the examples of samba-doc
+ as these tools exist as an independent package. Closes: #341934
+ * Swedish debconf translation update. Closes: #342022
+ * Preserve the local admin settings for run_mode in /etc/default/samba
+ when upgrading. Closes: #234038, #267988, #269735
+ * Winbind also must depend on lsb-base. Closes: #343379
+ * Enable swat in inetd when installing it and remove it when
+ uninstalling. Closes: #87905, #230936, #268429
+
+ [ Peter Eisentraut ]
+ * Added separate samba-doc-pdf package, suggested by samba-doc.
+ Closes: #281971
+ * Removed duplicate documentation in swat package, symlinked to
+ samba-doc; swat now depends on samba-doc. Closes: #233447
+
+ -- Christian Perrier <bubulle at debian.org> Tue, 20 Dec 2005 17:08:20 +0100
+
+samba (3.0.20b-3) unstable; urgency=low
+
+ [ Steve Langasek ]
+ * Drop the FHS transition code from the samba postinst, since it's
+ not needed for upgrades from sarge (and most of it not for upgrades
+ from woody).
+
+ [ Noèl Köthe ]
+ * libpam-smbpass dependency on samba-common
+ Closes: #297923
+ * Updated swedish debconf translation. Closes: #335784
+ * Added Recommends: smbldap-tools. Closes: #227675
+
+ [ Peter Eisentraut ]
+ * Added doc-base support. Closes: #55580
+ * Fixed dh_installexamples call so the debian/*.examples files are
+ actually used.
+ * Patched libpam-smbpass README to refer to examples directory.
+ Closes: #215771
+
+ [ Christian Perrier ]
+ * Add a working passwd chat line to the default smb.conf file
+ Closes: #269746
+ * Add the profiles binary and man page to the shipped files. Closes: #225494
+ * Add a dependency on samba-common for winbind and force versions to match
+ Closes: #273007, #264855
+ * Add /var/log/samba to winbind directories. Closes: #340833
+ * Lintian cleaning:
+ - Add a few lintian overrides to avoid lintian complaining
+ for things done on purpose or just because it makes wrong assumptions
+ - Corrected FSF address in debian/copyright
+ - Make swat depend on netbase as it uses update-inetd in its postinst
+ script
+ - Correct shebang lines in config scripts
+ - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc
+ - Minor correction in libsmbclient-dev description to avoid strictly
+ repeating the short description in the long description
+ - Call confmodule in swat.postinst as this is the only way to guarantee
+ that the config script is run in all cases
+
+ -- Christian Perrier <bubulle at debian.org> Sat, 3 Dec 2005 07:30:40 +0100
+
+samba (3.0.20b-2) unstable; urgency=low
+
+ * Don't build with -gstabs any more; -g no longer gives a problematic
+ size hit, and -gstabs is no longer supported on ia64.
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 19 Oct 2005 19:02:44 -0700
+
+samba (3.0.20b-1) unstable; urgency=low
+
+ * Christian Perrier:
+ - Debconf translations:
+ - Added Vietnamese. Closes: #317876
+ - Updated German. Closes: #322907
+ * Steve Langasek:
+ - Use ${misc:Depends} in debian/control instead of depending on
+ debconf directly, allowing use of cdebconf as an alternative.
+ Closes: #332088.
+ * Noèl Köthe
+ - corrected libsmbclient priority to optional. Closes: #310045
+ - corrected the path of ServerType.html in smb.conf. Closes: #296500
+ - updated Standards-Version to 3.6.2 (no changes needed)
+ - added homepage to description
+ - switched init scripts (samba and winbind) to lsb-functions
+ (took patches from ubuntu)
+ - added Swedish. Closes: #331437
+ - removed outdated "guest" value in "passdb backend" in default smb.conf
+ Closes: #289519
+ - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8)
+ is; Replaces: all previous versions of samba. Closes: #253603
+ - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515
+ - support for Windows Vista. Closes: #323489
+ - Mac OS Tiger Problem fixed. Closes: #309836
+ - BUG 2688: re-implement support for the -P (--port) option.
+ Closes: #307746
+ - "man smb.conf" warnings fixed. Closes: #266320
+ - testprns removed by upstream so removed in samba.files
+ - corrected docs/*.pdf names (samba-doc.docs)
+ - corrected diagnosis.html path (samba.docs)
+ - removing patches which are included upstream:
+ dos7-xcopy-always-copies-files.patch
+ (* BUG 2622: Remove DPTR_MASK as it makes no sense.)
+ hide-special-file-fix.patch
+ (* Hide dot files and directory logic fixes.)
+ rap-printing-bigendian.patch
+ (* BUG 1998: Correct byte ordering bug when storing
+ 16-bit RAP print job ids.)
+ smbclient-vfat-loop.patch
+ smbclient-vfat-loop2.patch
+ (* BUG 2698: Fix infinite listing loop in smbclient
+ caused by an invalid character set conversion.)
+ - fixed the following patches which didn't applied cleanly
+ fhs.patch
+ non-linux-ports.patch
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 18 Oct 2005 19:02:21 -0700
+
+samba (3.0.14a-6) unstable; urgency=low
+
+ * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect
+ Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9;
+ add a versioned build-depend accordingly. Closes: #315955
+ * Switch to libreadline5.
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 1 Jul 2005 00:13:12 -0700
+
+samba (3.0.14a-5) unstable; urgency=low
+
+ * Fix libsmbclient.a to be built as non-PIC instead of PIC.
+ Closes: #279243.
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 8 Jun 2005 05:46:52 -0700
+
+samba (3.0.14a-4) unstable; urgency=high
+
+ * Last-minute upload for sarge, because I don't listen to anything
+ that RM guy says
+ * Patch smbmount to strip CAP_UNIX out of the capabilities passed to
+ the kernel when uid, gid, dmask, or fmask options have been
+ specified; this keeps the mount permissions from changing out from
+ under the user when upgrading to a server (or to a kernel) that
+ supports unix extensions. Closes: #310982.
+ * Second patch to smbclient search continuation logic, from upstream:
+ preserve the original UCS2 filename to guard against lossy
+ conversions, and break out if we find ourselves looping.
+ Closes: #311157.
+ * Upstream fix to make print job cancellations work on big-endian
+ systems when talking to RAP-style clients (i.e., smbclient).
+ Closes: #311213.
+ * Add build-dependency on libpopt-dev, so that we consistently use the
+ system popt lib instead of the bundled one.
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 2 Jun 2005 07:02:46 -0700
+
+samba (3.0.14a-3) unstable; urgency=high
+
+ * Urgency set to high for a bug that makes smbclient/libsmbclient
+ /almost/ mostly unusable
+ * Fix smbclient's search continuation logic so that it works correctly
+ against 2K servers offering VFAT-hosted shares; many thanks to
+ Jeremy Allison for the timely upstream fix. Closes: #309798.
+ * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
+ <andrelop at debian.org>. (closes: #308510)
+ * Add Russian debconf translation, thanks to Yuriy Talakan
+ <yt at amur.elektra.ru>. (closes: #310063)
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 26 May 2005 23:37:57 -0700
+
+samba (3.0.14a-2) unstable; urgency=low
+
+ * Point the sense of the file_is_special() check right way around;
+ thanks to Matthijs Mohlmann for catching this. Closes: #305747.
+ * debian/patches/dos7-xcopy-always-copies-files.patch:
+ Fix the MS-DOS 7 XCOPY copying files over and over bug
+ Closes: #309003
+ * Steve Langasek <vorlon at debian.org>:
+ - Add Christian Perrier to Uploaders:. Thanks, Christian :)
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 8 May 2005 04:43:21 -0700
+
+samba (3.0.14a-1) unstable; urgency=low
+
+ * New upstream version
+ - A more complete upstream fix for missing files in file listings,
+ should really give us working (closes: #302771); drop
+ xp-missing-files.patch, which has been superseded.
+ * Use the right path when removing mount.cifs binary in the clean
+ target. Closes: #303318.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 18 Apr 2005 03:22:29 -0700
+
+samba (3.0.11-1) unstable; urgency=high
+
+ * New upstream version
+ - Fixes duplicated entry in swat(8) manpage (closes: #292957).
+ - Fix queue handling so that processes serving print clients don't
+ spin off into infinity and clobber the system (closes: #274969).
+ - Make sure we use C-locale toupper/tolower functions for case
+ conversion, since Turkish pairing rules are incompatible
+ (closes: #286174).
+ * Fix logrotate script to exit true instead of false when nmbd.pid is
+ missing (closes: #287263).
+ * Added Portuguese debconf translation. Thanks to Miguel Figueiredo
+ <elmig at debianpt.org>. (closes: #286375)
+ * Added Italian debconf translation. Thanks to Luca Monducci
+ <luca.mo at tiscali.it>. (closes: #284125)
+ * Add support for building on the Debian BSD and Hurd ports; thanks to
+ Robert Millan for the patch. (closes: #266693)
+ * debian/patches/xp-missing-files.patch: import patch from upstream to
+ fix missing entries in directory listings when talking to WinXP
+ servers (closes: #297771).
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 23 Mar 2005 00:13:16 -0800
+
+samba (3.0.10-1) unstable; urgency=high
+
+ * New upstream release.
+ - CAN-2004-1154: integer overflow can lead to remote code execution
+ by authenticated users; closes: #286023.
+ * High-urgency upload for sarge-targetted RC bugfix.
+ * Sync the fhs.patch to samba 3.0.10.
+ * Install mount.cifs suid root, to make user mounts possible
+ (closes: #283819).
+ * debian/patches/cups.patch: Change the default printing system, so we
+ can compile in CUPS support without making it the default -- CUPS is
+ not a reasonable default on Debian, at least for sarge.
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 17 Dec 2004 11:56:01 -0800
+
+samba (3.0.9-1) unstable; urgency=low
+
+ * New upstream release
+ - Fixes Win9x printing; closes: #283530, #282571, #283818.
+ - Fixes a problem with setting dosmodes on filesystems without ACL
+ support; closes: #283661.
+ - Drop ldapsam_compat.patch, redundant now that a fix is integrated
+ upstream
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 2 Dec 2004 01:11:39 -0800
+
+samba (3.0.8-2) unstable; urgency=low
+
+ * Fix the module paths for python2.3-samba so that "import foo from samba"
+ works, and include the __init__.py glue; closes: #222867).
+ * Enable quota support; closes: #246839.
+ * Fix missing symbols in libsmbclient (and libnss_wins), and add
+ -Wl,-z,defs to the libsmbclient link options to prevent future
+ instances of undefined symbols (closes: #281181).
+ * Fix for the legacy ldapsam_compat backend; thanks to Fabien
+ Chevalier for the patch (closes: #274155).
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 15 Nov 2004 06:54:13 -0800
+
+samba (3.0.8-1) unstable; urgency=high
+
+ * New upstream package. Urgency set to "high" because of a potential
+ Denial of Service vulnerability in previous 3.0.x releases
+ (CAN-2004-0930). (Eloy)
+ * Introduce new -dbg package, so we can make better sense out of the
+ cleverly-supplied backtrace emails. (Vorlon)
+ * Applied patch from Luke Mewburn <luke at mewburn.net> to fix missing
+ lock_path() to state_path() change in the FHS patches. (Eloy)
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 8 Nov 2004 13:39:34 -0500
+
+samba (3.0.7-2) unstable; urgency=high
+
+ * High-urgency upload for sarge-targetted RC fixes.
+ * Use autogen.sh in unpatch-source as well as in patch-source, to get
+ rid of the autom4te.cache cruft.
+ * debian/patches/make-distclean.patch: add some missing files to the
+ distclean target in source/Makefile.in (mostly-fixes: #276203).
+ * Change compile-time default of 'use sendfile' to 'no', since the
+ current Samba implementation is broken (closes: #261917, #275741,
+ #270175).
+ * Add mount.cifs into the smbfs package; thanks to Igor Belyi for
+ showing us just how simple this patch should be. ;) Since cifs is
+ the preferred kernel driver in 2.6, bugs related to smbfs and 2.6
+ are considered closed unless someone can show that they exist with
+ the cifs driver as well (closes: #249890, #269443, #227791, #236869,
+ #260707, #261808, #270175).
+ * Fix FHS migration code so that it only affects upgrades from old
+ package versions, and doesn't cause us to mess with non-standard
+ directories that may have been re-added by the admin
+ (closes: #251858).
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 26 Oct 2004 01:35:23 -0700
+
+samba (3.0.7-1) unstable; urgency=high
+
+ * New upstream release. This release fixes two possible denial of
+ service conditions; one in nmbd and one in smbd. The CVE numbers
+ for these vulnerabilities are:
+
+ CAN-2004-0807 for the smbd DoS
+ CAN-2004-0808 for the nmbd DoS
+
+ Urgency is set to "high" because of these vulnerabilities; so this
+ new release propagates to testing ASAP.
+
+ Thanks to the Samba Team and the Debian Security Team for the
+ heads up.
+ * Remove post-3.0.6 patches that are now in 3.0.7.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 13 Sep 2004 00:53:38 -0400
+
+samba (3.0.6-4) unstable; urgency=low
+
+ * Update LDAP schema (closes: #269797).
+ * Applied a couple of upstream fixes that will be present in Samba 3.0.7.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 7 Sep 2004 15:28:42 -0400
+
+samba (3.0.6-3) unstable; urgency=low
+
+ * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704)
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 25 Aug 2004 01:58:37 -0400
+
+samba (3.0.6-2) unstable; urgency=low
+
+ * Added Danish debconf translation. Thanks to Claus Hindsgaul
+ <claus_h at image.dk>. (closes: #232884)
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 23 Aug 2004 17:24:19 -0400
+
+samba (3.0.6-1) unstable; urgency=low
+
+ * New upstream version.
+ * Incorporate Turkish debconf translation; thanks to Recai Oktas
+ <roktas at omu.edu.tr>. (closes: #252031)
+ * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
+ <andrelop at debian.org>. (closes: #208113)
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 23 Aug 2004 12:34:44 -0400
+
+samba (3.0.5-2) unstable; urgency=high
+
+ * Patches from Fabien Chevalier <fabien.chevalier at supelec.fr>
+ to fix:
+ + libnss_wins crashes other programs (closes: #252591)
+ + Can't list share files/dirs, but can acces deeper files/dirs
+ (closes: #264572)
+ + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871)
+ * Urgency "high" to make it into testing as soon as possible since
+ at least #265871 is pretty bad now that WinXP SP2 has been released.
+ Thanks for the help Fabien! Both Vorlon and I have been very busy
+ lately.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 18 Aug 2004 13:25:41 -0400
+
+samba (3.0.5-1) unstable; urgency=high
+
+ * New upstream version. Urgency "high" because of potential buffer
+ overflows. The security fixes are the only difference between
+ 3.0.4 and 3.0.5.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 22 Jul 2004 08:07:36 -0400
+
+samba (3.0.4-5) unstable; urgency=low
+
+ * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4),
+ not an unversioned libcupsys2-dev. (closes: #250523)
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 25 May 2004 07:43:54 -0400
+
+samba (3.0.4-4) unstable; urgency=low
+
+ * Rebuilt with libcupsys2-gnutls10 for unstable.
+ Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736
+ Closes: #250742, #250733
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 24 May 2004 22:32:52 -0400
+
+samba (3.0.4-3) unstable; urgency=low
+
+ * Color me stupid; I uploaded an experimental version to unstable.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 22 May 2004 00:40:58 -0400
+
+samba (3.0.4-1) unstable; urgency=low
+
+ Eloy:
+
+ * New upstream version.
+ Closes: #247640 (New upstream version available)
+ Closes: #238905 (Printing crash fix)
+ Closes: #247090 (panic in viewing printerqueue)
+
+ Vorlon:
+
+ * Incorporate Catalan debconf translations; thanks to
+ Aleix Badia i Bosch <abadia at ica.es> and the Debian L10n Catalan Team.
+ (closes: #236640)
+ * Incorporate Czech debconf translations; thanks to
+ Miroslav Kure <kurem at upcase.inf.upol.cz> (closes: #236274).
+ * Update libsmbclient shlibs, due to an incompatibility with older
+ versions that prevents gnome-vfs from working correctly
+ (closes: #245869).
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 21 May 2004 11:42:19 -0400
+
+samba (3.0.2a-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 24 Feb 2004 10:30:47 -0500
+
+samba (3.0.2-2) unstable; urgency=high
+
+ * Apply patch from Urban Widmark <urban at teststation.com> to prevent
+ users from mounting remote filesystems containing suid files
+ (closes: 232327). This represents an exploitable security hole on
+ systems running Linux 2.6 kernels.
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 12 Feb 2004 21:38:40 -0600
+
+samba (3.0.2-1) unstable; urgency=high
+
+ * New upstream release.
+ - LaMont Jones: correct false failure LFS test that resulted
+ in _GNU_SOURCE not being defined (thus resulting in strndup()
+ not being defined) (closes: #226694)
+ - Segfault fixes. (closes: #230012) (maybe more, but we need bug
+ reporters to confirm.)
+
+ Urgency "high" due to a password initialization bug that could grant
+ an attacker unauthorized access to a user account created by the
+ mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and
+ workarounds for those not wishing to upgrade (which is a bad idea
+ anyway since this new release fixes lots of other bugs.)
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 8 Feb 2004 10:06:29 -0500
+
+samba (3.0.1-2) unstable; urgency=low
+
+ * Include ntlm_auth's man page.
+ * Don't create directories outside of the source directory during
+ package build time. (closes: #227221, #227238, #225862)
+ * Don't include the "Using Samba" book in the swat package, just a
+ symlink that points to the book included in the samba-doc package.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 13 Jan 2004 13:48:13 -0500
+
+samba (3.0.1-1) unstable; urgency=low
+
+ * New upstream version (closes: #225565)
+ * Add support in the dhcp hook for netbios scope, and handle better
+ the case of multiple DHCP-using interfaces (closes: #224109).
+ * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant
+ tail works. Thanks to Paul Eggert <eggert at twinsun.com>.
+ * Include /usr/bin/ntlm_auth in the winbind package.
+ * Run configure with "--with-piddir=/var/run/samba" since the
+ default got changed to /var/run in this new upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 30 Dec 2003 16:21:31 -0500
+
+samba (3.0.0final-1) unstable; urgency=low
+
+ * It's here, it's here, it's here, Samba 3.0.0 is here!
+ * Incorporate Japanese debconf translations; thanks to Kenshi Muto
+ <kmuto at debian.org>. (closes: #209291)
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 25 Sep 2003 13:39:28 -0400
+
+samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 13 Sep 2003 08:47:56 -0400
+
+samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low
+
+ * New upstream release. Last Release Candidate according to the
+ Samba Team. Samba 3.0.0 is around the corner, in a week or so.
+ - Fixes use of non-PIC code in nss shared libraries (closes: #208773)
+ - 'unix password sync' option now runs the unix password program as
+ root again (closes: #209739).
+ * One-line patch to make packages buildable with distcc (closes: #210227)
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 9 Sep 2003 07:57:16 -0400
+
+samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low
+
+ * New upstream release.
+ * Link against libgnutls7 instead of libgnutls5. (closes: #208151)
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 2 Sep 2003 21:37:13 -0400
+
+samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low
+
+ * New upstream version (skipped samba 3.0.0beta3 due to time
+ constraints.) This ugly version number will go away when the final
+ Samba 3.0.0 is released.
+ * Drag new unpackaged tools into the packages: smbcquotas (smbclient),
+ vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8)
+ manpage (samba). (closes: #151158)
+ * Switch to DH_COMPAT level 4:
+ - no explicit conffile listings needed
+ - the postinst for libsmbclient is now completely autogenerated
+ - use the default init script handling (with support for
+ invoke-rc.d) in debhelper, instead of the currently buggy upgrade
+ path (closes: #185439)
+ - add support for ${misc:Depends} in control for those packages with
+ init scripts
+ * Add versioned dependency on libpam-runtime and change
+ /etc/pam.d/samba to use the new common PAM config blocks.
+ * New python2.3-samba package (old python2.2-samba is no more.)
+ (closes: #206171)
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 25 Aug 2003 17:05:14 -0400
+
+samba (3.0.0beta2-1) unstable; urgency=low
+
+ * New upstream release
+ - The smb.conf(5) manpage documents config options again
+ (closes: #197963).
+ - Handling of winbind/idmap has been restructured; domain members
+ should be able to map domain accounts to local accounts again
+ (closes: #196815).
+ - Use the locale charset for 'display charset' by default
+ (closes: #194406).
+ - Fix for segfault in smbclient when using the -b option
+ (closes: #196833).
+ - Handle an empty 'passdb backend' list gracefully (closes: #193946).
+ * Don't set 'display charset' anymore on upgrade, since this is now
+ grabbed from the locale by default -- a much better option.
+ * Removed time.c.patch which is now in the upstream sources.
+ * Update FHS patch for two new tdb files (netsamlogon_cache.tdb,
+ privilege.tdb).
+ * Remove python-linker.patch, since the Kerberos package has been
+ fixed to no longer use rpath
+ * Remove configure.patch: the hppa glibc bug this was added for is
+ long since fixed, and upstream isn't interested in supporting this
+ kludge.
+ * Update references to missing documentation in sample smb.conf file
+ (closes: #187632).
+ * Fix handling of krb5 link line, building on a patch from Stefan
+ Metzmacher <metze at metzemix.de>.
+ * Add patch so smbclient's tar support works with popt
+ (closes: #194921).
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 2 Jul 2003 20:59:09 -0500
+
+samba (3.0.0beta1-2) unstable; urgency=low
+
+ * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1)
+ to make sure we get the right shlib dependencies (closes: #193149).
+ * Update the dhcp config hooks so they're suitable for sourcing (i.e.,
+ don't call "exit") (closes: #196477).
+ * Bring package into line with current policy by adding support for
+ the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs)
+ by default
+ * Make sure libpam-smbpass is a self-contained DSO.
+ * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite
+ the server list.
+ * Fix python install script to ignore -Wl linker flags, as seen in the
+ output from the latest krb5-config.
+ * Add LDAP and Unicode information about upgrading from 2.2 to
+ README.debian.
+ * Remove dangerous and confusing browse options from the default
+ smb.conf (closes: #198804).
+ * Reorder smb.conf options for clearer grouping, and clarify the
+ comments.
+ * Add a default [print$] share to the sample smb.conf, and create the
+ necessary tree under /var/lib/samba/printers. (closes: #168173)
+ * s/winbind/idmap/ in smb.conf, since the option names have changed.
+ * Fix the patch for postexec handling, so that we chdir("/") at the
+ right time.
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 12 Jun 2003 15:02:00 -0500
+
+samba (3.0.0beta1-1) unstable; urgency=low
+
+ * New upstream version.
+ - fix for empty browselist bug (closes: #194553)
+ - fix for tab completion segfault in smbclient (closes: #194776)
+ - Samba now works as a domain member again without segfaulting
+ (closes: #194134, #194394, #194775)
+ - WinXP machines can join a Samba-controlled domain again
+ (closes: #195362)
+ * Build-depend on python-dev >= 2.2 instead of on just python-dev
+ (without version).
+ * Added Vorlon'n patch to source/lib/time.c to fix #194075.
+ (closes: #194075)
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 8 Jun 2003 22:26:43 -0400
+
+samba (2.999+3.0.alpha24-3) unstable; urgency=low
+
+ * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324)
+ * Rebuild against pristine Kerberos libs, to squelch warnings about
+ versioned symbols. (closes: #194431, #194396)
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 22 May 2003 15:32:00 -0500
+
+samba (2.999+3.0.alpha24-2) unstable; urgency=low
+
+ * Fixed description of the smbfs package. (closes: #194183)
+ * Negate the sense of the unixsam check when upgrading. (closes: #194234)
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 21 May 2003 12:21:53 -0400
+
+samba (2.999+3.0.alpha24-1) unstable; urgency=low
+
+ * New upstream version. (closes: #189354)
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 20 May 2003 13:55:57 -0400
+
+samba (2.999+3.0.alpha23-5) unstable; urgency=low
+
+ * Move the python package from section "net" to section "python".
+ * Make sure we use PIC code for python on all platforms.
+ * French translation of an additional debconf template, courtesy of
+ Christian Perrier <bubulle at debian.org>. (closes: #188832)
+ * Updated Brazilian Portuguese translation from André Luís Lopes
+ <andrelop at ig.com.br>.
+ * s/unixsam/guest/ everywhere, since the unixsam backend is now
+ deprecated. (closes: #190095)
+ * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not
+ only does using /tmp violate SELinux policies, it introduces the
+ possibility of data loss during the final copy if /tmp is a separate
+ filesystem. (closes: #189823)
+ * Pull in fix for SWAT, so that logins work again
+ (closes: #188255, #192077).
+ * Move passdb.tdb into /var/lib/samba, since it's not user-editable.
+ * Make sure with don't ship any .cvsignore files.
+ * Don't ship examples for python2.2-samba and samba-doc in an
+ "examples" directory inside another "examples" directory.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 6 May 2003 12:05:46 -0400
+
+samba (2.999+3.0.alpha23-4) unstable; urgency=low
+
+ * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all
+ non-RPC printing clients are working again.
+ * Change shlibs to 0 instead of 0.1. The library already in the
+ archive is using this soname, and there are no packages depending
+ on libsmbclient, so skip changing the package name for now.
+ (closes: #188661)
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 11 Apr 2003 14:42:00 -0500
+
+samba (2.999+3.0.alpha23-3) unstable; urgency=low
+
+ * Put the Samba Python modules in /usr/lib/python2.2/site-packages/,
+ not in /usr/lib/python2.2/lib-dynload/.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 9 Apr 2003 19:49:25 -0400
+
+samba (2.999+3.0.alpha23-2) unstable; urgency=low
+
+ * New package python2.2-samba that includes the Python modules
+ included in the Samba sources. Feedback on these modules and the new
+ package is welcome, as we (Debian Samba maintainers) don't use them.
+ (closes: #170731, #173322)
+ * Move libsmbclient-dev from section "devel" to "libdevel".
+ * Fix panic action script to give a sensible error message instead of
+ an empty backtrace when we don't have permission to attach to the
+ process. (closes: #188164)
+ * Fix libpam-smbpass so that it really does something. (closes: #178245)
+ * Apply patch to fix printing-related segfaults. (closes: #188076)
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 6 Apr 2003 21:40:33 -0400
+
+samba (2.999+3.0.alpha23-1) unstable; urgency=high
+
+ * new upstream release, includes security fix for DSA-262
+ * tweak the debconf templates to avoid references to specific
+ front-ends (closes: #183718)
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 9 Mar 2003 14:58:00 -0600
+
+samba (2.999+3.0.alpha21-5) unstable; urgency=low
+
+ * touch up the package descriptions a little bit (caps, punctuation)
+ * remove addtosmbpass, which snuck back in when we weren't looking
+ * reverse the position of the wins server tag, after looking more
+ closely at the code (closes: #183061)
+ * fix a glitch in the Spanish .po that rendered it invalid, plus a typo
+ * updated Brazilian Portuguese templates (closes: #183295)
+ * fix a typo in upstream manpage (s/shave/share/) (closes: #180546)
+ * run sed before we run sed, to deal with crazybad special chars
+ in the workgroup name (!) (closes: #176717)
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 1 Mar 2003 15:14:00 -0600
+
+samba (2.999+3.0.alpha21-4) unstable; urgency=low
+
+ * add scripts to samba-common to grab the netbios-name-servers options
+ if we're running a DHCP client (closes: #38413)
+ * major rearrangement of build scripts: install target now operates on
+ debian/tmp, not debian/samba, so we can see when new files are
+ added and decide where to put them; several files that should have
+ been in samba-common but were in samba (for the above reason) --
+ smbcacls, -- have been moved, with a replaces: added.
+ * Fix rc script so that whitespace is consistent between inetd and
+ daemon modes (closes: #174677).
+ * smbclient -M must always connect to port 139, because port 445
+ doesn't support messaging and we can't do the port 135 stuff yet
+ (closes: #175292, #167859).
+ * Import the diff from upstream CVS, which has fixed a few bugs
+ (closes: #178219, #177583, #181467, #181487, #181603, #175864).
+ Remove a few patches of ours which are now superseded.
+ * Add po-debconf support to the tree, for better i18n.
+ * Install the libsmbclient.so symlink in the libsmbclient-dev package,
+ per policy (closes: #181466).
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 27 Dec 2002 00:37:00 -0600
+
+samba (2.999+3.0.alpha21-3) unstable; urgency=low
+
+ * Drop --with-ldapsam from the configure options, since this no longer
+ means what we thought it did. Revert patch for changing the 'passdb
+ backend' defaults.
+ * Add patch from CVS HEAD to fix pdbedit segfault; postinst script
+ should work better now. (Closes: #173936)
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 22 Dec 2002 13:29:00 -0600
+
+samba (2.999+3.0.alpha21-2) unstable; urgency=low
+
+ * add CONFIGDIR to the set of directories exported in the install
+ target, so we don't try to write to /etc/ on the autobuilders.
+ * Reset the default 'passdb backend' value to something sensible, so
+ that we don't unnecessarily break upgrading systems (closes: #173731).
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 20 Dec 2002 09:13:00 -0600
+
+samba (2.999+3.0.alpha21-1) unstable; urgency=low
+
+ * new upstream release, many patches now incorporated upstream
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 16 Dec 2002 23:39:00 -0600
+
+samba (2.999+3.0.alpha20-4) unstable; urgency=low
+
+ * Remove obsolete comments about non-existant LDAP support in the
+ Debian Samba packages. (Closes: #165035)
+ * Apply patch for segfault in pam_smbpass when using the unixsam
+ backend.
+ * Drop support for nmbd in inetd, since it's not supported by
+ upstream and is reported to cause problems (closes: #23243, #137726,
+ 165037).
+ * Clarify example printing configs in smb.conf (closes: #168174).
+ * Make sure nmbd still responds to SIGTERM if it has no interfaces to
+ listen on (closes: #168079).
+ * Fix to get samba working again on 64-bit archs, after a
+ pointer<->int size mismatch bug. Already fixed in upstream CVS.
+ * Merge fix from CVS for broken libsmbclient.h references to internal
+ structures (closes: #162956).
+ * Add a default 'panic action' for Samba that will give us genuinely
+ useful debugging information after a crash.
+ * Fixed correct patch to example configurations in the libpam-smbpass
+ packages (closes: #169350).
+ * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead
+ (closes: #169682).
+ * Only ask the user for permission to edit if there's a chance of us
+ damaging something.
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 18 Nov 2002 19:53:00 -0500
+
+samba (2.999+3.0.alpha20-3) unstable; urgency=low
+
+ * Make sure smbstatus behavior is sane when Samba *has* been started,
+ as well as when it has not (closes: #164179). Thank to Robbert Kouprie
+ <robbert at radium.jvb.tudelft.nl> for this patch.
+ * Not using 'killall' in any of the maintainer scripts (the last one
+ remaining was winbind.logrotate.) We now just use 'kill' to send
+ a SIGHUP to a specific PID (which is stored in a file in
+ /var/run/samba.)
+ * Do not depend on procps because we're not using killall anymore.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 15 Oct 2002 22:15:57 -0400
+
+samba (2.999+3.0.alpha20-2) unstable; urgency=low
+
+ * fix an off-by-one error in smbd/lanman.c, which should shut off the
+ flood of log messages (closes: #157432)
+ * add a --config-cache option to the configure invocation, since
+ autoconf 2.5 doesn't load config.cache by default (closes: #163504)
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 5 Oct 2002 01:40:00 -0500
+
+samba (2.999+3.0.alpha20-1) unstable; urgency=low
+
+ * new upstream release
+ - non-primary groups appear to work again (closes: #161271)
+ * the official beginning of the upstream 3.0 branch
+ * exit without error from smbstatus when no connections have
+ been seen yet (closes: #161489)
+
+ -- Steve Langasek <vorlon at debian.org> Wed, 2 Oct 2002 19:02:00 -0500
+
+samba (2.999+3.0cvs20020906-1) unstable; urgency=low
+
+ * CVS update
+ - domain authentication works again (closes: #158698)
+ * Factor out common code in samba-common.config
+ * Handle character set settings in smb.conf on upgrade
+ (closes: #153913, #158770)
+ * Don't use killall in logrotate script; there are better ways
+ (closes: #160076)
+ * Ignore value of 'hostname lookups' for hosts allow/hosts deny
+ (closes: #154376)
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 7 Sep 2002 11:46:00 -0500
+
+samba (2.999+3.0cvs20020829-1) unstable; urgency=low
+
+ * CVS update.
+ * Move the smb.conf manpage to the samba-common package (closes: #159572)
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 29 Aug 2002 17:53:25 -0500
+
+samba (2.999+3.0cvs20020827-1) unstable; urgency=low
+
+ * CVS update. (Closes: #158508)
+ * Part 1 of 3 of the library separation patch that Vorlon wrote has
+ gone upstream - removed the patch from our patches/ directory.
+ * Debconf note to warn users that their smb.conf will be re-written
+ and changed if they use Swat to maintain it. (Closes: #158479)
+ * Fixed typo in samba.prerm.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 27 Aug 2002 15:23:23 -0400
+
+samba (2.999+3.0cvs20020825-2) unstable; urgency=low
+
+ * scale back the tdbsam migration support, because of undesirable
+ side-effects; now always defaults to 'no'.
+ * strip out hyperactive library dependencies that are only needed by
+ smbd (closes: #155156).
+ * nuke any broken registry.tdb files left by previous CVS snapshots.
+ * support rolling back the smbpasswd->tdbsam conversion on downgrade,
+ since many people are likely to need to downgrade for a while.
+ * remove postrm handling of legacy directories, and add handling of
+ current ones.
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 28 Jul 2002 09:44:24 -0500
+
+samba (2.999+3.0cvs20020825-1) unstable; urgency=low
+
+ * CVS update. These packages are based on Samba 3.0alpha19 + any
+ code commited after 3.0alpha19 was released.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 25 Aug 2002 14:56:46 -0400
+
+samba (2.999+3.0cvs20020723-1) unstable; urgency=medium
+
+ * remove spurious line from samba.config
+ * migrate from smbpasswd to tdbsam
+ * re-add the pdbedit util and manpage
+ * compile in ldapsam support (closes: #146935)
+ * add PRIVATEDIR to the list of vars we override for the install
+ target, so Samba doesn't try to create /etc/samba (closes: #153746).
+ * fix makefile handling of LOGBASEDIR, so that logs always end up in
+ the right place (closes: 153727).
+ * Fixed bug in the FHS migration path that causes nmbd to read its
+ state from one location, but write it out to another. (closes: #154210)
+ * Make sure nmbd is always looking for wins.tdb in the same place.
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 19 Jul 2002 21:38:54 -0500
+
+samba (2.99.cvs.20020713-1) unstable; urgency=low
+
+ * first attempt for 3.0pre.
+ * only post a debconf note about moving logfiles if we're upgrading
+ from a version that had the logfiles in the old location
+ (closes: #152924).
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 13 Jul 2002 12:54:25 -0500
+
+samba (2.2.5-2) unstable; urgency=low
+
+ * No longer ship make_printerdef, which is deprecated. (closes: #63059)
+ * Clean up some empty directories from the samba package.
+ * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860).
+ * Clean up per-package documentation lists, to reduce clutter
+ (closes: #147638).
+ * Make sure we don't ship pdbedit's man page since we are still using
+ smbpasswd passwords. (closes: #152208)
+ * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find
+ it (closes: #148586).
+ * reorder postinst, so that installing samba-common from scratch loads
+ the debconf answers properly (closes: #151985).
+ * add lintian overrides for winbind, to eliminate some noise.
+ * rename pam_smbpass changelog to comply with policy.
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 23 Jun 2002 22:45:04 -0500
+
+samba (2.2.5-1) unstable; urgency=low
+
+ * New upstream release.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 9 Jun 2002 15:49:21 -0400
+
+samba (2.2.4+2.2.5pre1-1) experimental; urgency=low
+
+ * Getting ready for Samba 2.2.5.
+ * Remove patches/parse_spoolss.patch, now included upstream.
+ * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in
+ 2.2.4-1. We don't use POSIX ACL support ourselves, so we'd
+ appreciate reports from those using this feature so we can
+ be sure this works.
+ * Fix the filename-matching algorithm used for smbtar's 'exclude'
+ functionality. (closes: #131571)
+ * Look for secrets.tdb in /var/lib/samba, and handle in the postinst.
+ This is not really a config file, because users don't edit it.
+ (closes: #147429)
+ * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen
+ <Tommi.Komulainen at iki.fi> for the patch. (closes: #144847)
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 28 May 2002 11:33:51 -0400
+
+samba (2.2.4-1) unstable; urgency=low
+
+ * New upstream release (closes: #144713)
+ * Building with POSIX ACL support (closes: #137819)
+ * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055)
+ * Compile with --with-automount, for NIS homedir support (closes: #123396)
+ * Add a proper 'flags' field to the mount entry we write to /etc/mtab;
+ fixes a display bug with mount (closes: #140397)
+ * Added logic to /etc/init.d/samba so a help message is printed out
+ when Samba is running from inetd _and_ we are not booting, i.e. the
+ user called the init script manually. Thanks to Francesco
+ Potorti <pot at gnu.org> for the suggestion on how to implement this.
+ (Closes: #139807, #140204)
+ * samba.postinst: added logic so we don't call /etc/init.d/samba if
+ we are running from inetd (this prevents the stupid help message
+ to be printed during package upgrades if we are running from inetd.)
+ * samba.prerm: idem.
+ * /etc/init.d/samba: delete stale PID files after nmbd and smbd are
+ stopped. This prevents start-stop-daemon from printing an ugly
+ error message when called from '/etc/init.d/samba stop'. I prefer
+ this than running start-stop-daemon with --oknodo because
+ start-stop-daemon might print other important error messages that with
+ --oknodo it would otherwise not print. (Closes: #102187, #109301)
+ * Patch from jerry at samba.org to fix parsing of spoolss structures.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 23 May 2002 23:16:52 -0400
+
+samba (2.2.3a-7) unstable; urgency=medium
+
+ * More README.debian updates.
+ * Neutralize the smb.conf 'lock dir' directive, which doesn't mean
+ what the FHS says it should, and causes us no end of grief.
+ (Closes: #122299)
+ * LPRng-handling patch so that jobs printed to recent versions of
+ LPRng show up properly as 'done' instead of 'paused' in the Windows
+ print queue. Thanks to Jaroslav Serdula <serdula_jaroslav at vse.sk>
+ for this patch. (Closes: #139458)
+ * Applied patch from Urban Widmark <urban at teststation.com>
+ (smbfs upstream maintainer) to add a '-n' option to smbmount
+ that does the same as mount's '-n'. (Closes: #139590)
+ * Minor tweak to unpatch-source so we unpatch sources in the
+ reverse order we patched them.
+ * Don't depend on grep in samba.prerm to determine if Samba was
+ running before the upgrade starts.
+ * Tweak the wording of debconf templates.
+ * Incorporate debconf translations for French, Spanish and Portuguese;
+ thanks to Carlos Valdivia Yagüe <valyag at hotpop.com> (es),
+ Andre Luis Lopes <andrelop at ig.com.br> (pt_BR), and Philippe
+ Batailler and Denis Barbier <barbier at debian.org> (fr).
+ (closes: #142657, #142659, #141551, #141699, #141682)
+ * Fixed symlinks in the swat package so the point to /usr/share/doc/
+ instead of /usr/doc/. Added note to the description of the
+ swat packages that says that samba-doc must be installed for
+ the on-line documentation to work. Thanks to Torne Wuff
+ <torne at wolfpuppy.org.uk>. (Closes: #95437)
+ * 'dh_installinit -n' gives us no initscript handling -- we need to
+ handle all starting and stopping of daemons ourselves, which wasn't
+ happening in the {pre,post}rm scripts.
+ * Vary the priority of the debconf question "Do you want to generate
+ /etc/samba/smbpassd?" depending on whether the file already exists.
+ File exists -> priority 'medium', file does not exist -> priority
+ 'low'. Changed priorities of all other questions from 'high' to 'medium'.
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 20 Apr 2002 17:48:27 -0400
+
+samba (2.2.3a-6) unstable; urgency=low
+
+ * Call db_stop as soon as we're done with debconf in the postinst, to
+ avoid hanging bugs (closes: #137813)
+ * Ony call 'update-inetd --add' on first installation, just as we only
+ call 'update-inetd --remove' on package purge.
+ * Bring our shipped smb.conf closer in line with the upstream
+ defaults: don't twiddle the send/recv buffer sizes, since the Linux
+ kernel already provides a much better default setting
+ (closes: #80966, #80934, #137415, #133477)
+ * Added libnss_wins.so to the winbind package (closes: #137201)
+ * Updates to README.debian.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 12 Mar 2002 10:57:40 -0500
+
+samba (2.2.3a-5) unstable; urgency=low
+
+ * Having multiple workgroup lines in your smb.conf, though wacky, is
+ perfectly valid. Account for this in samba-common.config.
+ (closes: #137157)
+
+ -- Steve Langasek <vorlon at debian.org> Sun, 10 Mar 2002 21:52:51 -0600
+
+samba (2.2.3a-4) unstable; urgency=low
+
+ * Fixed typo in samba.postinst. Cosmetic fixes there as well.
+ * Fix to improper usage of /usr/bin/tr in samba-common config script
+ (closes: #137744)
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 9 Mar 2002 14:14:02 -0500
+
+samba (2.2.3a-3) unstable; urgency=medium
+
+ * Make sure /etc/init.d/samba is executable before calling it
+ in the postinst. Quickly checked all other maintainer scripts
+ to make sure we are not calling an init script if it is not
+ executable. (closes: #137321)
+ * Fix up maintainer scripts to detect if samba was not running before
+ an upgrade. (closes: #33520, #130534)
+ * Make sure /etc/samba/ is included in the samba-common package.
+ Closes: #137157
+
+ -- Steve Langasek <vorlon at debian.org> Fri, 8 Mar 2002 11:13:21 -0500
+
+samba (2.2.3a-2) unstable; urgency=low
+
+ * merge in debconf support:
+ - Moved all smb.conf-related questions to samba-common (smb.conf
+ is part of the samba-common package, not the samba package.)
+ - smb.conf is not a samba-common conffile anymore since it is
+ being managed by debconf. It is ABSOLUTELY necessary to make
+ sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes
+ made via debconf. In other words, any changes made by the user
+ should be honored by the debconf interface.
+ - samba.postinst now moves old log files from /var/log/ to
+ /var/log/samba/. There's a Debconf note that informs the user
+ the log files are stored now in a new location.
+ - debian/control:
+ + Make samba depend on debconf.
+ - New file debian/samba.templates.
+ - New file debian/samba.config.
+ - Re-worked debian/samba.postinst.
+ + Got rid of all /etc/samba/debian_config sillyness.
+ - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces
+ it.
+ - Removed debian/samba.prerm.
+ - Cleaned up /etc/init.d/samba.
+ + Added infrastructure for debconf.
+ + Got rid of all /etc/samba/debian_config sillyness.
+ + Got rid of /etc/samba/smbpasswd conversion stuff for
+ compatibility with versions of Samba < 2.0.0final-2.
+ (closes: #127959, #34408, #113594)
+ * make samba.postinst ignore the absence of /var/log/{s,n}mb*;
+ makes for a clean upgrade path.
+ * Building with MSDFS support (closes: #116793)
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 5 Mar 2002 14:14:33 -0600
+
+samba (2.2.3a-1) unstable; urgency=low
+
+ * New upstream version (closes: #135001)
+ * Potato builds were failing because debian/rules was not creating
+ debian/winbind/etc/logrotate.d/. A user having problems creating
+ Potato packages brought this to my attention. dh_installlogrotate
+ takes care of creating the directory for us, that's why we didn't
+ notice.
+ * Removed code that converts /etc/samba/smbpasswd from an ancient
+ format to the new format of Samba 2.0.0 and later.
+ Closes: #134375 - samba: postinst failed due to missing
+ /usr/bin/convert_smbpasswd.
+ * Re-organized FHS migration code in samba.postinst. Make sure we
+ don't fail when we move files that don't exist.
+ Closes: #133813 - samba: Install failed.
+ * Adding docs. to the libpam-smbpass package.
+ * Remove man pages for findsmb because we are not providing this
+ script.
+ Closes: #134181 - findsmb referenced, but not included.
+ * Removed replace.patch because it is now present upstream.
+ * Added patch from Jerry Carter to fix a problem when saving
+ document preferences for printing from NT clients.
+ * The real winbindd daemon is a forked process so we can't use
+ --make-pidfile when calling start-stop-daemon. Fixed
+ /etc/init.d/winbind to work around the issue. Thanks to
+ Lin Li <linl at xandros.com> for the patience and for reporting
+ the problems. Hopefully I got it right this time.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 20 Feb 2002 18:39:03 -0500
+
+samba (2.2.3-6) unstable; urgency=low
+
+ * Make sure there are actual files in /var/state/samba before trying
+ to move them (Closes: #133534, #133510).
+ * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly
+ again.
+
+ -- Steve Langasek <vorlon at debian.org> Tue, 12 Feb 2002 09:19:29 -0600
+
+samba (2.2.3-5) unstable; urgency=low
+
+ * Whoops, missed a spot on the samba.postinst -- will fail badly if
+ /var/state/samba/ no longer exists. Better get this fix into the
+ next upload. ;) (Closes: #133088)
+ * Regenerate configure only if it is older than configure.in.
+ * Fix smbd handling of network neighborhood lists, which was missed
+ in the FHS conversion (Closes: #133091)
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 9 Feb 2002 16:37:57 -0500
+
+samba (2.2.3-4) unstable; urgency=low
+
+ * FHS cleanup; files in /var are now properly sorted according to
+ their nature. (Closes: #102101)
+ * Remove patches to source/configure, since we now call autoconf to
+ regenerate this file cleanly.
+ * lintian fixes:
+ - Create winbind.conffiles and add /etc/logrotate.d/winbind and
+ /etc/init.d/winbind to it.
+ - Use a relative symlink for /usr/lib/cups/backend/smb.
+ - Removal of a .cvsignore file in the samba-doc package.
+ * winbind.init fixes:
+ - Corrected name of the pid file (Steve)
+ - Make start-stop-daemon create a pid file for winbindd since it
+ does not create one on his own.
+ * #DEBHELPER# is not needed in samba.postinst because we are adding
+ manually everything that debhelper adds automatically. In fact,
+ since we are calling update-rc.d without standard paramaters I
+ think we can't use #DEBHELPER#.
+ * Fix fatal syntax error in samba.prerm.
+
+ -- Steve Langasek <vorlon at debian.org> Thu, 7 Feb 2002 13:12:08 -0500
+
+samba (2.2.3-3) unstable; urgency=low
+
+ * work on lintian-cleanness in the package (wrong permissions,
+ maintainer scripts in need of debhelpering)
+ * /lib/security/pam_smbpass.so is now being included in the
+ libpam-smbpass package only, and not in both the libpam-smbpass and
+ samba packages (which was the case prior to 2.2.3-3.)
+ * Instead of making our patch scripts executable in the rules file
+ we run them through /bin/sh.
+ * New 'winbind' package that has all the winbind stuff that was in the
+ samba package in 2.2.3-2 and before.
+ * Added replace.patch: patch from Jeremy Allison to fix problems when
+ replacing or overwriting files in a Samba share. Patch was sent to
+ the samba mailing list.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 5 Feb 2002 21:12:48 -0500
+
+samba (2.2.3-2) unstable; urgency=low
+
+ * add support to debian/scripts/{patch-source,unpatch-source} for
+ automatic updating and cleaning of <version.h>. This was a request
+ from the Samba Team: they wanted us to clearly mark our packages
+ so it is always known a user is running Samba with (possibly)
+ Debian-specific patches.
+ * Change init.d killscript link to K19samba, so we stop before autofs
+ (closes: 117327)
+ * Make our patch scripts executable in the rules file -- dpkg won't do
+ this for us (closes: #132415).
+
+ -- Steve Langasek <vorlon at debian.org> Mon, 4 Feb 2002 09:51:00 -0600
+
+samba (2.2.3-1) unstable; urgency=low
+
+ * New upstream release (closes: #131228).
+ * Restructured build system that provides DBS-like separation of
+ patches
+ * Fix typo in smbfs description (closes: #116209).
+ * Use killall -q in logrotate.d script, to avoid spurious cron
+ emails (closes: #130100).
+
+ -- Steve Langasek <vorlon at debian.org> Sat, 2 Feb 2002 19:56:18 -0500
+
+samba (2.2.2-12) unstable; urgency=high
+
+ * (Steve) Patch for source/client/client.c.
+ Closes: #86438 smbclient: Transfering several GB causes the average
+ speed to be messed up.
+ * Uploading with urgency=high to expedite the move from unstable
+ to testing because of the security problem fixed in -11.
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 25 Jan 2002 22:31:12 -0500
+
+samba (2.2.2-11) unstable; urgency=low
+
+ * Building with --with-libsmbclient. We have created two new
+ packages: libsmbclient and libsmbclient-dev. Hopefully this
+ will help some people that want to add the capability of
+ speaking SMB to their applications.
+ Closes: #117132 - libsmbclient support library?
+ * (Steve) Make swat do the right thing when reading (parsing)
+ the saved preferences in smb.conf.
+ Closes: #55617 swat mutilates the linpopup message command.
+ * Updated README.Debian. Updated descriptions in debian/control.
+ * Remembered to bump up version number in source/include/version.h
+ (need to automate this or else I'll keep forgetting.)
+ * (Steve) one liner for source/web/diagnose.c.
+ Closes: #106976 - smbd/nmbd not running message with swat/linuxconf.
+ * Added '|| true' to the post-rotate script so logrotate doesn't
+ fail if either nmbd or smbd is not running.
+ Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process.
+ * Fixed incorrect file locations in swat's man page and added a
+ Debian-specific note to /usr/share/doc/swat/README.
+ Closes: #71586 swat: needs documentation fixes for debian.
+ * smbmount in the smbfs package does not have the setuid bit set.
+ Apparently, smbmount uses libsmb without checking the environment.
+ Thanks to Christian Jaeger <christian.jaeger at sl.ethz.ch> for
+ finding the local root exploit.
+ * Applied old patch from Jerry) Carter" <jerry at samba.org> to correct
+ the following two problems in Samba 2.2.2:
+ - %U and %G could not be used in services names
+ in smb.conf.
+ - %G would fail to be expanded in an "include = ..."
+ line.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 19 Jan 2002 21:35:26 -0500
+
+samba (2.2.2-10) unstable; urgency=low
+
+ * (Steve) Add missing manual pages.
+ Closes: Bug#128928: missing manpages in smbfs.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 13 Jan 2002 14:39:55 -0500
+
+samba (2.2.2-9) unstable; urgency=low
+
+ * (Steve) Fix broken URL's in HTML docs.
+ Closes: Bug#17741: bad links in html docs (at last!!!)
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 11 Jan 2002 13:37:07 -0500
+
+samba (2.2.2-8) unstable; urgency=low
+
+ * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in
+ debian/control so rpcclient.1, which was in samba-2.2.2-5, does not
+ cause problems now that it is part of smbclient (>= 2.2.2-6). Closes:
+ Closes: Bug#128684: error upgrading smbclient in sid.
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 11 Jan 2002 11:42:40 -0500
+
+samba (2.2.2-7) unstable; urgency=low
+
+ * (Steve) Patch to make behavior honor what the docs. say about "hosts allow"
+ taking precedence over "hosts deny".
+ Closes: Bug#49249: swat: error with host deny ?!
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 10 Jan 2002 12:36:58 -0500
+
+samba (2.2.2-6) unstable; urgency=low
+
+ * (Steve) Adds manpage for rpcclient to the proper file,
+ removes smbtorture from the distro because this tool isn't intended for
+ widespread consumption.
+ Closes: #63057 - no manual page for smbtorture.
+ * (Steve) Removed -gnu from the configure arguments (--build, --host) in
+ debian/rules so config.sub is able to properly create the host and target
+ tuples.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 9 Jan 2002 14:39:51 -0500
+
+samba (2.2.2-5) unstable; urgency=low
+
+ * Fixes from vorlon:
+ * Use /usr/bin/pager instead of more.
+ Closes: #125603: smbclient violates pager policy.
+ * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd
+ a SIGHUP to have the log files reopened, fixes to
+ /etc/logrotate.d/samba.
+ Closes: #127897: log file rotation.
+ Closes: #118277: /etc/logrotate.d/samba not listed in conffiles.
+ * s/covert/convert/.
+ Closes: #121653 probable typo in install message.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 6 Jan 2002 03:14:58 -0500
+
+samba (2.2.2-4) unstable; urgency=low
+
+ * Applied patch from Steve to work around problem in glibc that affects the
+ HPPA architecure. The patch detects the error condition at configure time
+ and compiles without LFS support if necessary.
+ Closes: Bug#126763: samba completely broken on hppa.
+ * Including unicode_map.1251.
+ Closes: Bug#126719: samba-common: unicode_map.1251 missing.
+ * Updated smbd daemon version to match Debian package version.
+ Closes: Bug#127199: Package version and smbd daemon version don't match.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 31 Dec 2001 14:32:47 -0500
+
+samba (2.2.2-3) unstable; urgency=low
+
+ * Added some spaces in package description in debian/control.
+ Closes: #120730 - missing spaces in package description for nice
+ alignment.
+ * Spelling fixes.
+ Closes: #125328, #125329, #125330, #125367, #125365, #125403.
+ * Steve Langasek <vorlon at debian.org> is the co-maintainer of the Debian
+ Samba packages!!! Added him to the uploaders field in debian/control.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 18 Dec 2001 00:54:25 -0500
+
+samba (2.2.2-2) unstable; urgency=low
+
+ * Backed out changes to source/filename.c per Andrew Tridgell's request.
+ This changes were introduced in 2.2.1a-7 as an attempt to fix #47493.
+ Tridge found out that they break smbd.
+ * Changed version number in source/includes/version.h so it is clear that
+ this is a version of Samba packaged for Debian. This is another request from
+ Tridge and will help the Samba Team to get bogus bug reports.
+ * Added Samba-HOWTO-Collection.pdf and other README files to the
+ /usr/share/doc/<package>/ directories.
+ * Installing libnss_winbind.so and pam_winbind.so.
+ Closes: #116790: nss and pam modules for winbind missing.
+ * Removed user-emacs-settings from changelog.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 29 Oct 2001 19:16:26 -0500
+
+samba (2.2.2-1) unstable; urgency=low
+
+ * New upstream version.
+ * Temporary fix for #113763 (Steve Langasek)
+ * Quick hack to avoid smbmount reveal password length. Please note
+ that even with this hack there is a small window when password is
+ completely visible with 'ps aux'. There are other methods that should
+ be used to automate mounting of SMB shares.
+ Closes: #112195: smbmount-2.2.x reveals password length.
+ * Applied patch from Steve Langasek <vorlon at debian.org> to prevent
+ forcing use of setresuid() in Sparc.
+ Closes: #112779: samba build forces use of setresuid, which causes
+ smbd to fail on Sparc.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 15 Oct 2001 10:26:10 -0400
+
+samba (2.2.1a-9) unstable; urgency=low
+
+ * Replaced $(LD) with $(CC) all the way through source/Makefile.
+ Closes: #111036: ld shouldn't be used to link shlibs.
+ * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and
+ sgml as well.)
+ Closes: #110963: smb.conf: mail should be /usr/bin/mail.
+ * Documented better smbclient's -W behavior. Patch from Steve
+ Langasek.
+ Closes: #53672: smbclient: -W flag is interpreted as domain, not
+ workgroup.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 4 Sep 2001 23:10:41 -0400
+
+samba (2.2.1a-8) unstable; urgency=low
+
+ * Set some reasonable default perms for the samba logdir (again,
+ thanks to vorlon :-)
+ Closes: #72529: insecure permissions on log files.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 26 Aug 2001 15:40:47 -0400
+
+samba (2.2.1a-7) unstable; urgency=low
+
+ * Another attempt at fixing #47493. Patch from Steve Langasek
+ <vorlon at netexpress.net>. Let's keep our fingers crossed Steve!
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 26 Aug 2001 13:37:06 -0400
+
+samba (2.2.1a-6) unstable; urgency=low
+
+ * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing
+ smbd to die with signal 11 under some unidentified situations.
+ Closes: #109774: Latest debian version breaks printer driver download.
+ Closes: #109946: not all files appear in samba-exported directories.
+ * Another patch from Steve Langasek. This one adds quotes around
+ printer names for print systems it's reasonable for Debian to
+ support. Together with the patch in #29957 (see changelog for
+ 2.2.1a-4), this should take care of the problems with multi-word
+ printer names in Samba.
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 24 Aug 2001 21:12:27 -0400
+
+samba (2.2.1a-5) unstable; urgency=low
+
+ * Important changes that affect how Samba is built on Debian
+ machines are implemented in this release. All of this changes
+ were suggested by the energetic Steve Langasek <vorlon at debian.org>,
+ and his arguments were so sound and reasonable that I decided
+ to implement them. Here's Steve's original changelog:
+
+ * Fix up the build system to avoid needing to run configure
+ as root to answer questions we already know the answers to.
+ * In the process, make surprising progress towards being able to
+ cross-compile the samba packages.
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 24 Aug 2001 01:08:06 -0400
+
+samba (2.2.1a-4) unstable; urgency=low
+
+ * Fixed typo in smbmount's mount page.
+ Closes: #109317: smbfs: mistype in smbmount manpage.
+ * Included symlink to smbspool to better support CUPS printing.
+ Closes: #109509: include symlink for cups samba support.
+ * Applied patch from Steve Langasek <vorlon at netexpress.net> to
+ fix bug #29957.
+ Closes: #29957: samba strips trailing " from strings in smb.conf.
+ * First attempt at fixing #47493. Another patch from Steve "I want
+ a bug-free Samba" Langasek.
+ Closes: #47493: Samba doesn't handle ':' in dir names right.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 21 Aug 2001 23:26:38 -0400
+
+samba (2.2.1a-3) unstable; urgency=low
+
+ * Steve Langasek <vorlon at netexpress.net> has been hard at work in
+ the last few days looking at the long list of open bugs filed
+ against the Samba packages. I don't know how to thank him. It's been
+ a pleasure working with Steve, and all the fixes, patches, etc. in
+ this release come from him. The bug list is greatly reduced thanks
+ to Steve's efforts.
+ * Steve's additions/modifications/patches/etc. are:
+ - New package that (libpam-smbpass) provides pam_smbpass. Before, this
+ was provided in another package but now the sources are part of
+ the Samba sources so we can start providing it from here.
+ Closes: #107043 - pam_smbpass now present in Samba source,
+ should be built from there
+ - Patch to source/smbd/service.c that allows admins to call
+ /bin/umount from the root postexec of a Samba share.
+ Closes: #40561 - samba pre/postexec commands do not work.
+ - Clear TMPDIR before starting smbd in /etc/init.d/samba.
+ Closes: #51295 - Problems with Samba and TMPDIR.
+ - Correction to documentation of "guest only".
+ Closes #38282 - "guest only" share still requires a password.
+ * Applied patch from Santiago Vila <sanvila at unex.es> to convert
+ /usr/sbin/mksmbpasswd from a shell script into a real awk script.
+ Sorry it took so long, Santiago; I hadn't realized you even
+ provided a patch :-)
+ Closes: #77891 - mksmbpasswd could be a real awk script.
+ * Updated description of the smbfs and smbclient packages. Also have
+ each package recommend the other.
+ Closes: #108650: Should suggest or recommend smbfs.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 13 Aug 2001 22:21:55 -0400
+
+samba (2.2.1a-2) unstable; urgency=low
+
+ * Build-depends: depend on debhelper (>=2.0.103).
+ Closes: #105795: Build-Depends are wrong.
+ * Run samba's preinst and postinst scripts without -e so failed commands
+ do not abort installation.
+ Closes: #106384: postinstall crashes abnormally. (And really closes
+ #104471.)
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 26 Jul 2001 00:30:37 -0400
+
+samba (2.2.1a-1) unstable; urgency=low
+
+ * New upstream version.
+ * Make sure samba's postinst script exits with a zero status.
+ Closes: #104471: Samba postinst problem.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 12 Jul 2001 21:55:21 -0400
+
+samba (2.2.1-1) unstable; urgency=low
+
+ * New upstream version.
+ Closes: #103339: config.guess and config.sub update required.
+ Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to
+ incompatibility with PAM.
+ Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2.
+ Closes: #95777: Samba 2.2 is unable to join or authenticate against
+ Samba 2.2 PDC domain.
+ Closes: #68842: samba should use PAM for password changing (I
+ haven't personally tried this one, but it's been
+ advertised this works.)
+ Closes: #102506: PAM account checking fails.
+ Closes: #102518: Complains about unknown paramter "obey pam
+ restrictions"
+ Closes: #94774: Build failure on PARISC machines.
+ * Moved away from /etc/cron.weekly/samba for log file rotation.
+ Now using logrotate.
+ Closes: #95548: typo in /etc/cron.weekly/samba.
+ Closes: #74951: nmbd does not rename its log file.
+ * Removed Debian-specific addtosmbpass.8 man page since this script
+ is not longer provided upstream. Users should use the smbpasswd
+ program instead.
+ * Updated sample /etc/samba/smb.conf to reflect the recent changes
+ affecting handling of PAM authentication. Also updated
+ /etc/pam.d/samba.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 11 Jul 2001 00:44:14 -0400
+
+samba (2.2.0.final.a-1) unstable; urgency=high
+
+ * New upstream version (contains security fix from DSA-065-1.)
+ Closes: #97241: samba 2.2.0 fails to process hostnames in
+ "hosts allow" config line.
+ * Removed Debian-specific addtosmbpass.8 man page since this script
+ is not longer provided upstream. Users should use the smbpasswd
+ program instead.
+ Closes: #98365: addtosmbpass is missing from 2.2.0.final-2.
+ * Updated sample /etc/samba/smb.conf to reflect the recent changes
+ affecting handling of PAM authentication. Also updated
+ /etc/pam.d/samba.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 24 Jun 2001 11:11:59 -0400
+
+samba (2.2.0.final-2) unstable; urgency=low
+
+ * Added libcupsys2-dev to Build-Depends.
+ * Samba depends now (again) on netbase so update-inetd is always
+ available for the Samba maintainer scripts.
+ Closes: #86063: Fails to uninstall if inetd is not installed.
+ * Updated source/config.{sub,guess} so ARM built doesn't fail.
+ Closes: #94480: config.sub out of date; can't build on arm.
+ Closes: #85801: config.sub/guess out of date.
+ * Not using brace expansion, i.e. {foo,bar} in any of the maintainers
+ scripts nor in debian/rules.
+ Closes: #88007: samba postrm has is not POSIX sh compliant.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 21 Apr 2001 17:27:18 -0400
+
+samba (2.2.0.final-1) unstable; urgency=low
+
+ * New upstream release. Lots of new things. See WHATSNEW.txt.
+ * Goofy version number because of my stupidity when assigning version
+ numbers to the CVS packages I have been uploading to experimental.
+ Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release
+ will follow soon.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 17 Apr 2001 22:58:14 -0400
+
+samba (2.2.0.cvs20010416-1) experimental; urgency=low
+
+ * CVS update.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 16 Apr 2001 21:25:15 -0400
+
+samba (2.2.0.cvs20010410-1) experimental; urgency=low
+
+ * CVS update.
+ * Added libreadline4-dev to Build-Depends.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 10 Apr 2001 16:53:45 -0400
+
+samba (2.2.0.cvs20010407-1) experimental; urgency=low
+
+ * CVS update. Includes what is in 2.2.0alpha3.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 7 Apr 2001 16:00:33 -0400
+
+samba (2.2.0.cvs20010316-1) experimental; urgency=low
+
+ * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch
+ from Samba CVS.
+ * Not compiling rpctorture as it has compile errors. Change in
+ debian/rules.
+ * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now
+ the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is
+ needed to use smbfs. Updated debian/control, debian/rules and
+ README.Debian to reflect this change.
+ * Added to swat a versioned dependency on samba (so a user is forced to
+ install a new version of swat each time a new version of samba is
+ installed.)
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 18 Mar 2001 14:21:14 -0500
+
+samba (2.0.7-5) unstable; urgency=medium
+
+ * Transition from suidmanager to dpkg-statoverride.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 18 Jan 2001 23:51:56 -0500
+
+samba (2.0.7-4) unstable; urgency=medium
+
+ * Applied Urban Widmark <urban at teststation.com> fixes to smbmount. Urban
+ is the maintainer of the smbfs in the kernel and of the userland
+ utilities.
+ * Links to HTML documents are correct now.
+ Closes: #69439: swat: Broken help file symlinks
+ Closes: #72615: samba-doc directory changed: removed htmldocs from path
+ Closes: #75847: swat: Wrong symlink
+ Closes: #66857: Wrong links to html documents.
+ Closes: #77912: misplaced documentation symlinks for swat
+ * Building Samba with CUPS support. For this I reverted the change to
+ source/configure.in that I did in 2.0.7-3 and re-ran autoconf.
+ Closes: #59038: samba: not compiled with cups support.
+ * Fix against previous known/unknown user time difference patch to swat
+ (make username / password lookups take the same time.) Remove CGI
+ logging code in Swat.
+ Closes: #76341 - Security holes in swat
+ * Updated Build-depends.
+ * Updated debian/copyright to refer to the correct location of the GPL.
+ * debian/rules: changed DESTDIR to `pwd`/debian/samba (was
+ `pwd`/debian/tmp.)
+ * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some
+ strange reason dh_installdirs is not creating debian/tmp/ so I needed
+ to tweak everything to install stuff in debian/samba rather than in
+ debian/tmp.)
+ * debian/control: changed section of samba-docs to 'doc' (was 'docs')
+ * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules
+ and source/scripts/installswat.sh.)
+ * Fixed (by tweaking debian/rules)
+ /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid.
+ * Added "Provides: samba-client" to smbclient's section in control.
+ Closes: #71143: smbclient: Smbclient should provide samba-client.
+ * Fix for desired_access being zero in map_share_mode() (patch to
+ source/smbd/nttrans.c.) Thanks to Gary Wilson
+ <wilsong at sergievsky.cpmc.columbia.edu> for bringing this patch to my
+ attention.
+ * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and
+ 2.2.x kernels even when the build is done in a system running
+ a 2.2.x kernel.
+ Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but
+ doesnt depend on it.
+ Closes: #72758: README.Debian should comment on 2.0.x kernels.
+ Closes: #56935: Samba 2.0.6 and Kernel 2.0.x.
+ Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info.
+ Closes: #60580: samba: failed to set gid.
+ Closes: #64280: Samba panics, can't set gid.
+ Closes: #66816: Must deal with brokenness under 2.0.x.
+ Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK.
+ Closes: #69735: PANIC: failed to set gid
+ Closes: #66122: "smbclient -L localhost -U%" returns with "tree
+ connect failed: code 0".
+ Closes: #57637: Samba says tree connect error.
+ Closes: #58015: potato samba wins support is broken.
+ * Fixed comments in sample smb.conf to point to the correct location.
+ Closes: #69578: comments in smb.conf points to wrong path.
+ * Move codepages from /etc/samba/codepages/ to
+ /usr/share/samba/codepages/.
+ Closes: #63813: samba; codepages should go in /usr/lib.
+ * Moved /var/samba/ to /var/state/samba/.
+ Closes: #49011: samba package not FHS compliant.
+ * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain()
+ is found.
+ Closes: #44558: netgroup support missing in samba 2.0.5a-1.
+ * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and
+ --exec. Got rid of --exec so --pidfile works.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 11 Jan 2001 00:15:57 -0500
+
+samba (2.0.7-3) frozen unstable; urgency=high
+
+ * Release manager: this closes a RC bug.
+ * Commented out the section in source/configure.in that auto-detects
+ CUPS support and then ran autoconf to generate a new configure
+ script. This was done to prevent machines that have libcupsys-dev
+ installed from detecting CUPS support and adding an unwanted
+ dependency on libcupsys. This way the whole printing system
+ won't break on upgrades. CUPS support should be added after
+ Potato is released.
+ Closes: #65185: samba-common: Upgrading removes printing system.
+ Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys.
+ * Updated README.debian.
+ Closes: #64594: Old README.Debian in /usr/share/doc/samba.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 20 Jun 2000 19:16:04 -0400
+
+samba (2.0.7-2) frozen unstable; urgency=high
+
+ * Release manager: this closes RC bug #63839 that prevents Samba
+ to be built from source.
+ * Fixed a stupid typo in debian/rules that was preventing Samba
+ to be built from source.
+ Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir)
+ * I forgot to mention that O'Reilly's book "Using Samba" was donated
+ to the Open Source community. The book was included in Samba 2.0.7
+ in HTML format and is part of the Debian Samba package since
+ Samba 2.0.7-1.
+ * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help
+ files were supposed to be provided in both the swat and the samba-doc
+ packages. This duplication was a waste of space. Starting with
+ Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML
+ files are included only in samba-doc, and are accessed via symlinks
+ from within swat.
+ Closes: #58810: superfluous files in swat?
+ * Added a 'echo "."' to /etc/init.d/samba in the reload) section.
+ Closes: #63394: "echo ." missing in reload section of init.d script
+ * Fixed typo in docs/htmldocs/using_samba/ch06_05.html.
+ Closes: #64344: typo "encrypted passwords"
+ * Cleaned up samba's postrm script so important common files aren't
+ deleted when samba is purged. Created a samba-common.postrm script.
+ Closes: #62675: purging samba removes /etc/samba/smb.conf.
+ Closes: #63386: samba --purge removes /etc/samba dir even though
+ smbclient/smbfs/samba-common packages are still installed
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 3 May 2000 02:42:07 -0400
+
+samba (2.0.7-1) frozen unstable; urgency=low
+
+ * New upstream version. Dear Release Manager: please allow this
+ package to go to frozen as it contains fixes to a _lot_ of problems.
+ You can take a look at all the problems fixed by this release in
+ the official upstream announcement at
+ http://us1.samba.org/samba/whatsnew/samba-2.0.7.html.
+ * Added --with-utmp to add utmp support to smbd (this is new in Samba
+ 2.0.7)
+ * Closes: #62148 - samba not rotating filled logs.
+ * Closes: #56711: Samba doesn't manage well long share name (please note
+ that it's possible to connect to shares with names longer than
+ 14 characters but the share will be listed with a name truncated to
+ 13 characters.)
+ * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67).
+ Closes: #50907 - logon path not working.
+ This is not a bug, it's just Samba doing the same thing an NT server
+ does. See WHATSNEW.txt and smb.conf's man page for details.
+ * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper
+ is not supported anymore.)
+ * Closes: #58994 swat: typo in swat description.
+ * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware
+ problems, person that reported the bug never came back.)
+ Closes: #54398 - smbadduser fails, looks for ypcat.
+ * Fixed swat's man page to include Debian specific installation
+ instructions. There's not necessary to edit /etc/services or
+ /etc/inetd.conf.
+ (Closes: #58616 - incomplete install config && incorrect installation
+ instructions.)
+ * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat
+ to look for smbd and nmbd in the wrong place when requested to start or
+ stop smbd or nmbd.
+ (Closes: #55028 - swat can't start samba servers.)
+ * Closes: #37274: smbclient does not honour pot. (Tested and seems to be
+ working now.)
+ * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492,
+ #50479, #39818, #54383, #59411.
+ (please re-open any of this if the problem still exists - I was unable
+ to confirm any of this because I could never reproduce them.)
+ Closes: #56699 - Samba's nmbd causes random kernel oops several
+ times in a row.
+ Closes: #62185 - nmbd's forking until no more file descriptors are
+ available.
+ Closes: #56247 - session setup failed: ERRSRV - ERRbadpw.
+ Closes: #52218 - Either wins proxy does not work, or I don't understand
+ it.
+ Closes: #43492 - intermittent problem changing password.
+ Closes: #50479 - Can't access windows 2000 shares with samba.
+ Closes: #39818 - samba-common: Upgrading Samba from the Slink version.
+ Closes: #54383 - samba-common: Missing /etc/smb.conf.
+ Closes: #59411 - smbclient: cannot browse Win2k shares.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 27 Apr 2000 16:07:45 -0400
+
+samba (2.0.6-5) frozen unstable; urgency=low
+
+ * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries
+ in this package are broken unless libcupsys1 is installed.
+ samba-common has a "grave" bug because of this. Instead of adding
+ libcupsys1 to the Depends: list of each package in debian/control
+ I investigated why dh_shlibs was not picking the dependency
+ automatically. It turns out that it's probably a bug in libcupsys1
+ because the format of its shlibs file is not correct. I fixed that
+ file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are
+ picked correctly. I'll talk to the libcupsys1 maintainer.
+
+ I think the addition of CUPS support to Samba is a big change that
+ should not go into Frozen. So, I decided to back up the addition
+ of CUPS support I did in 2.0.6-4 to minimize problems. I'll add
+ CUPS support again when I start working on Samba for Woody.
+ (Closes: #59337 - samba-common has a missing dependency)
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 1 Mar 2000 08:40:02 -0500
+
+samba (2.0.6-4) frozen unstable; urgency=low
+
+ * It seems that sometimes nmbd or smbd are not killed when upgrading.
+ I think it is because in samba's prerm script I was calling
+ start-stop-daemon with the --pidfile switch and in old versions of
+ Samba the nmbd and smbd daemons did not store their PIDs in a file in
+ /var/samba/. I changed debian/samba.prerm so the existence of the
+ PID files is checked before calling "start-stop-daemon --pidfile ..."
+ If the PID files do not exist then start-stop-daemon is called
+ without the --pidfile parameter.
+ (Closes: #58058 - upgrade from slink went badly)
+ * Fixed typo in description of swat package in debian/control.
+ * Installed libcupsys1-dev so the configure script picks up CUPS
+ and Samba is compiled with CUPS support. Also added libcupsys1 to
+ the Depends: list of package samba in debian/control.
+ (Closes: #59038 - samba not compiled with cups support)
+ * Added a small paragraph to debian/README.debian warning about possible
+ problems with the WINS code in Samba 2.0.6.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 28 Feb 2000 14:00:42 -0500
+
+samba (2.0.6-3) frozen unstable; urgency=low
+
+ * Applied patch posted by Jeremy Allison to the samba mailing list
+ that should take care of the internal errors reported in bug #52698
+ (release-critical). Wichert: please test as I never could reproduce
+ it here.
+ (Closes: #52698 - samba gets interbal errors)
+ * Moved samba-docs to the 'docs' section.
+ (Closes: #51077 - samba-doc: wrong section)
+ * Added reload capability to /etc/init.d/samba (only for smbd because
+ nmbd does not support reloading after receiving a signal).
+ (Closes: #50954 - patch to add reload support to /etc/init.d/samba)
+ * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so
+ Unix password syncronization works with the passwd program currently
+ in Potato. Thanks to Augustin Luton <aluton at hybrigenics.fr> for
+ the correct chat script.
+ * Stole source/lib/util_sec.c from the CVS tree of what will become
+ Samba 2.0.7 or whatever so we can use the same binaries under
+ both 2.0.x and 2.2.x kernels.
+ (Closes: #51331 - PANIC: failed to set gid)
+ * smbadduser is now provided as an example and it's customized for Debian.
+ I am not providing this script in /usr/sbin/ because then I would need
+ a dependency on csh, something that I don't want to do.
+ (Closes: #51697, #54052)
+ * Fixed the short description of the smbfs package in debian/control.
+ (Closes: 53534 - one-line description out of date).
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 23 Nov 1999 16:32:12 -0500
+
+samba (2.0.6-2) unstable; urgency=low
+
+ * samba-common now depends on libpam-modules (not on libpam-pwdb, which
+ I have been told is obsolete). I modified /etc/pam.d/samba accordingly
+ to reflect the change.
+ (Closes: Bug#50722: pam pwdb dependence?).
+ * The old /etc/pam.d/samba file which had references to pam_pwdb caused
+ smbd to die with a signal 11. The new /etc/pam.d/samba file fixes
+ this problem.
+ (Closes: #50876, #50838, #50698)
+ * Compiled with syslog support (use at your own risk: syslog support
+ is still experimental in Samba). I added the parameters "syslog = 0"
+ and "syslog only = no" to the sample smb.conf to avoid pestering
+ users that do not want Samba to log through syslog.
+ (Closes: Bug#50703 - syslog only option doesn't work)
+ * Removed the stupid code in the smbmount wrapper script that tries
+ to load the smbfs module if smbfs is not listed in /proc/filesystems.
+ (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled
+ as a module in the kernel)
+ * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so
+ 'mount -t smb ...' works just as 'mount -t smbfs ...'.
+ (Closes: Bug#50763 - 'mount -t smb' doesn't work)
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 20 Nov 1999 18:53:35 -0500
+
+samba (2.0.6-1) unstable; urgency=low
+
+ * Samba 2.0.6 has been released. This is the first try of the Debian
+ Samba packages. I know for sure that smbd won't work properly on
+ 2.0.x kernels because the patch that Wichert sent me does not apply
+ to the new source/lib/util_sec.c in Samba 2.0.6. That file was
+ completely re-written by Tridge.
+ * Updated README.Debian.
+ * A new client utility called smbspool appeared in Samba 2.0.6. I added
+ this utility to the smbclient package, although I haven't tried it yet.
+ * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount.
+ This is to be able to type "mouont -t smbfs ...". This symlink goes
+ in the smbfs package, of course.
+ * This new release should close the following bugs (some of these
+ are fixed for sure in this new upstream release, some others I could
+ not reproduce but I believe they are fixed if they were real bugs.
+ As always, please feel free to re-open the bugs if the problem is not
+ solved).
+ Closes: Bug#33240: icmp mask needs a bug workaround.
+ Closes: Bug#37692: samba: Has problems detecting interfaces.
+ Closes: Bug#38988: samba: Truly bizzare behavour from nmbd.
+ Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast
+ properly.
+ Closes: Bug#44131: smbfs: no longer possible to set file and
+ directory-modes.
+ Closes: Bug#46992: smbmount-2.2.x manpage wrong.
+ Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline.
+ Closes: Bug#46605: smbmnt segfaults.
+ Closes: Bug#48186: smbmount.
+ Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included].
+ Closes: Bug#47332: smbmount: could -f and -P be added back?
+ * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM
+ module). To succesfully add PAM support, I created /etc/pam.d/samba and
+ added this file as a conffile for the samba-common package. I also made
+ samba-common depend on libpam-pwdb.
+ * Added simple man pages for the wrapper scripts smbmount and smbmount.
+ (Closes: Bug#44705 - Missing smbmount man page)
+ * Installed libreadlineg2-dev in my system so smbclient now has a
+ "history" command and libreadline support :-)
+ * This time I did add a check to the smbmount wrapper script to see if
+ the kernel has support for smbfs, as suggested by Jeroen Schaap
+ <J.Schaap at physiology.medfac.leidenuniv.nl>. I mentioned in the changelog
+ for samba-2.0.5a-3 that I did this but I forgot at the end.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 11 Nov 1999 12:08:15 -0500
+
+samba (2.0.5a-5) unstable; urgency=low
+
+ * I am sorry to report that the smbwrapper package is gone for the
+ moment. The reason for this is twofold: first of all, smbwrapper
+ is completely broken in Samba-2.0.5a (it compiles but it doesn't
+ run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second,
+ when I asked Andrew Tridgell (father of Samba) about the state of
+ smbwrapper he told me that Ulrich Drepper (head of the glibc project)
+ broke on purpose the glibc stuff in which smbwrapper is based.
+ Consequently, Tridge recommended me to compile Samba without
+ support for smbwrapper. When, I have no idea. Sorry folks. Here is
+ the original message I received from Andrew:
+
+ > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's
+ > smbwrapper doesn't even compile under glibc2.1.
+
+ yep, Ulrich deliberately broke it. It won't get fixed till glibc
+ allows the sorts of games it plays to work again. I suggest you turn
+ it off in your build scripts until that gets sorted out.
+
+ * Swat's file are now in /usr/share/samba/ instead of
+ /usr/lib/samba/ (bug #49011).
+ * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011).
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 2 Nov 1999 12:59:13 -0500
+
+samba (2.0.5a-4) unstable; urgency=low
+
+ * Applied patch from our fearless leader (Wichert) to fix the darn bug
+ that prevents Samba to work on 2.0.x kernels if it was compiled
+ in a system running a 2.2.x kernel. This closes #40645 (build uses
+ setresuid which doesn't work under 2.0.34 (does apparently under
+ 2.2.x) ).
+ * Fixed the entry that swat's postinst script adds to /etc/inetd.conf
+ so it is '#<off># swat\t\tstream\ttcp\tnowait.400 ...' instead of
+ '#<off>#swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused
+ 'update-inetd --enable swat' to leave the entry for swat disabled.
+ Thanks to Dave Burchell <burchell at inetnebr.com> for finding out
+ this problem. This closes #48762 (swat uses non-standard syntax to
+ comment out inetd.conf entry).
+ * /usr/sbin/swat does not think anymore that the smbd daemon lives
+ in /usr/local/samba/bin/. To fix this I am running now source/configure
+ with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba
+ 'swat' fails: incorrect hardwired path in the binary).
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 31 Oct 1999 03:42:38 -0500
+
+samba (2.0.5a-3) unstable; urgency=low
+
+ * I am pretty darn busy with my MBA, I apologize for the long time it's
+ taking to squash bugs in the Samba packages.
+ * Built with debhelper v2 for FHS compliancy. Changed a couple of
+ things in debian/rules to accomodate for the new place for the docs.
+ I also had to change debian/{samba.postinst,samba.prerm,swat.postinst}
+ to make sure that the symlink from /usr/doc/xxx exists and points to
+ /usr/share/doc/xxx (the reason for this is that I am not letting
+ debhelper to create these scripts for me automatically).
+ * Built with latest libc6.
+ * smbfs: finally, the nasty bug that causes smbmount to die after
+ a while is gone thanks to Ben Tilly <Ben_Tilly at trepp.com>.
+ The problem was just a typo in source/client/smbmount.c.
+ This closes grave bug #42764 (smbmount dies) and #43341
+ (smbfs-2.2.x won't function after a while).
+ * Fixed the smbmount wrapper script to eliminate a bashism (closes
+ #45202 - "wrapper scripts use $* instead of "$@") and to recognize
+ 2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize
+ kernel 2.3.x").
+ * Added a check to the smbmount wrapper script to see if the
+ kernel has support for smbfs, as suggested by Jeroen Schaap
+ <J.Schaap at physiology.medfac.leidenuniv.nl>.
+ * swat's man page is now part of the swat package, not of the samba
+ package. This closes #44808 (Samba has a man page for swat, but
+ the binary is not included).
+ * The interface program smbrun is not longer needed by smbd because
+ of the availability of execl() under Linux. Because of this, the
+ smbrun is not even being compiled. Since there is no need for smbrun
+ now, the smbrun man page was taken out of the samba package. This
+ closes #45266 (/usr/bin/smbrun missing).
+ * smbpasswd is now part of the samba-common package, and not part of
+ the samba package. This is to let administrators that do not want
+ to install a full Samba server administer passwords in remote
+ machines. This closes bug #42624 (smbpasswd should be included in
+ smbclient). This bug report also suggests that swat becomes part of
+ the samba package, that smbfs becomes part of the smbclient package,
+ and that the binary smbpasswd becomes part of the smbclient package.
+ I moved smbpasswd to the samba-common package but I am reluctant to
+ do the other things the bug report suggests.
+ * In order to keep dpkg happy when moving smbpasswd from the samba
+ package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)"
+ in the control section of the samba-common package and a
+ "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the
+ samba package (in debian.control).
+ * Samba is now being compiled with the "--with-netatalk" option. This
+ closes #47480 (Could samba be compiled with the --with-netatalk option).
+ * All packages that depend on samba-common have a versioned dependency
+ now. This was accomplished by adding "(= ${Source-Version})" to the
+ relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho
+ <gaia at iki.fi> for the hint. This closes #42985 (samba should probably
+ have a versioned depends on samba-common).
+ * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all
+ the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file).
+ * Added the smbadduser helper script to the samba package. This closes
+ #44480 (Samba doesn't come with the smbadduser program).
+ * Applied patch from szasz at triton.sch.bme.hu that prevents smbmount
+ to leave an entry in /etc/mtab for a share that could not be mounted
+ because of invalid user of password. The patch also allows smbumount
+ to unmount the share in the event that something goes wrong with the
+ smbmount process. This closes bug #48613 (Mount/umount problems +
+ patch) as well as #44130 (failed mount is still mounted).
+ * smbmount-2.2.x is now setuid root. This is needed for the patch
+ applied above to be effective. If smbmount-2.2.x is not setuid root
+ then an entry will be left in /etc/mtab even when the mount
+ fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid
+ for this to work.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 27 Oct 1999 10:36:13 -0400
+
+samba (2.0.5a-2) unstable; urgency=low
+
+ * This version is basically the same as 2.0.5a-1 but it was compiled
+ on a Potato system with glibc2.1. See below the change log for 2.0.5a-1
+ for more information.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 27 Jul 1999 02:25:29 -0400
+
+samba (2.0.5a-1) stable; urgency=high
+
+ * I'm back from the Honey Moon. We are pretty busy because we are moving
+ to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still
+ have plenty of things to pack and to do. Samba 2.0.5 was released
+ while I was in the Honey Moon and it is just now (almost 3 AM) when
+ I have time to package it.
+ * Because of the security problems fixed in 2.0.5, this upload goes
+ to both stable and unstable (the Security Team asked for this).
+ * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will
+ be compiled on a Potato system.
+ * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common
+ section in debian/control (as suggested by Steve Haslam
+ <araqnid at debian.org>) to fix the problems that appear when upgrading
+ from the Samba package in Slink. Please test this as I am completely
+ unable to do so. This should fix bug #39818 (Upgrading Samba from the
+ Slink version).
+ * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in
+ order to have defined several socket options when compiling with
+ Linux 2.2.x kernel headers - the fix is now upstream.
+ * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command
+ line syntax similar to the one used by the old smbmount (for 2.0.x
+ kernels). This means that the wrapper script is no longer necessary
+ so I removed it. In its place there is a simple wrapper script that
+ calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is
+ running.
+ * Because of the wedding, the Honey Moon, and our move to Pittsburgh,
+ I can't work on fixing other bugs in this release.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 27 Jul 1999 02:18:51 -0400
+
+samba (2.0.4b-3) unstable; urgency=low
+
+ * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files
+ and because of this /usr/bin/smbumount was part of the samba package
+ instead of part of the smbfs package.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 1 Jul 1999 01:51:24 -0400
+
+samba (2.0.4b-2) unstable; urgency=low
+
+ * Dark (and archive maintainers): please remove from Potato the smbfsx
+ binary package and also the old source package for smbfs. smbfs and
+ smbfsx have been merged starting with this version.
+ * Merged the old smbfs package with Samba. Now there is only one package
+ for the smbfs utilities and is called "smbfs". The package smbfsx
+ does not exist any more and this new smbfs package must be used
+ for both 2.0.x and > 2.1.x kernels.
+ * A wrapper script was added to handle the syntax change in smbmount
+ in the new smbfs utilities (required for kernels > 2.1.70). The
+ home page for this script is http://www.wittsend.com/mhw/smbmount.html.
+ Please _note_ that this will change (for good) in Samba 2.0.5 :-)
+ * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x
+ or smbumount-2.0.x depending on the kernel currently running.
+ * Not using -t for savelog in cron.weekly script.
+ * Recompiled without libreadlineg-dev (Samba does not seem to be using
+ it so unnecessary dependencies are produced).
+ * glibc2.1 build.
+ * Removed smbpasswd.8 man page from the debian/ directory because it is
+ now being provided upstream.
+ * Got rid of the ugly hack I put in source/lib/util_sock.c to have
+ IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the
+ autoconf stuff to #include <netinet/ip.h>. I've sent the patch to
+ Jeremy Allison so we have this upstream.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 28 Jun 1999 17:47:19 -0400
+
+samba (2.0.4b-1) unstable; urgency=low
+
+ * New upstream release. This release fixes the following Debian bugs:
+ #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and
+ #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy
+ Allison released Samba 2.0.4 and found out that there were a couple
+ of minor bugs so he released 2.0.4a. Then he found out about more
+ serious bugs and released 2.0.4b. I have built this package several
+ times between yesterday and today because of this. Now I am releasing
+ the Debian packages for Samba with what I believe will be the latest
+ release the Samba Team will make at least in the next 4 days (Jeremy
+ is taking a short vacation).
+ * Still compiling against glibc2.0 (sorry about that :-)
+ * Hacked source/smbwrapper/smbsh.c to fix the problem
+ of smbsh not finding the shared library smbwrapper.so. It looks
+ now in /usr/lib/samba/ for this file. This fixes #32971, #32989,
+ #33278, #34911 and #36317.
+ * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf
+ and /etc/samba/codepages/. This fixes #33128 (smbmount complains about
+ missing /etc/smb.conf).
+ * Package swat does not depend on httpd anymore (there's no need to).
+ This fixes #35795 (swat requires httpd).
+ * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and
+ smbumount-2.2.x. Same applies to the man pages.
+ * Changed minor type in smbmount's man page (changed "\"" by "\'"). This
+ fixes #34070 (wrong quotes in manpage).
+ * Used Fabrizio Polacco's <fpolacco at icenet.fi> procedure to create the
+ Debian package for Samba. This closes #35781 (samba has no pristine
+ source).
+ * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only
+ if the size of either is different than 0. Also, added comments at the
+ beginning of this script to explain how rotation of log files works in
+ Samba. Thanks to ujr at physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler)
+ for the suggestions. This closes #37490 (cron.weekly script rotates not
+ used [sn]mb.old files). As I side effect, this should also close
+ #31462 (still trouble with /etc/cron.weekly/samba).
+ * Check for old /etc/pam.d/samba file which is not provided by this version
+ of the Debian Samba package but was provided in older versions. If this
+ file exists we delete it. We check for this in the postinst. This closes
+ #37356 (samba put stuff in pam.d that pam complains about) and #34312
+ (libpam0g: questions during upgrade).
+ * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done
+ in the postinst script. This closes #35730 (Security problem with
+ /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1).
+ * I have just checked and it looks like #28748 (smbfsx doesn't "return ")
+ has been fixed. This might have been fixed since a long time ago.
+ * Long long standing bug #18488 (smbclient: internal tar is broken) is
+ closed in this release of Samba. The bug might have been closed for a
+ long long time, but I did not check for this before.
+ * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY"
+ message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works),
+ #34148 (warnings from smbd) and #35333 (samba warnings).
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 20 May 1999 00:35:57 -0400
+
+samba (2.0.3-1) unstable; urgency=low
+
+ * New upstream version.
+ * Removed the convert_smbpasswd.pl program I created and put in
+ /usr/doc/samba/ because there's a convert_smbpasswd script in the
+ upstream sources that does the same thing. I modified the postinst
+ script to use this script instead of the one I created.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 28 Feb 1999 01:35:37 -0400
+
+samba (2.0.2-2) unstable; urgency=low
+
+ * Updated the README.Debian file.
+ * Updated the description of the samba package in the control file.
+ * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now
+ installed setuid root as they should be. This was done by doing a
+ a "chmod u+s" for each binary in debian/rules and by creating the
+ file debian/smbfsx.suid.
+ * Minor patch to source/client/smbumount.c to allow normal users
+ to umount what they have mounted (problem was a kernel vs. libc6
+ size mismatch). I sent the patch upstream.
+ * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is
+ created.
+ * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to
+ debian/smbwrapper/usr/lib/samba/.
+ * Hacked source/smbwrapper/smbsh.c to fix the problem
+ of smbsh not finding the shared library smbwrapper.so.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 11 Feb 1999 18:11:34 -0400
+
+samba (2.0.2-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 11 Feb 1999 01:35:51 -0400
+
+samba (2.0.1-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 6 Feb 1999 06:51:18 -0400
+
+samba (2.0.0final-4) unstable; urgency=low
+
+ * The samba postinst made an unwarranted assumption that the file
+ /etc/samba/smbpasswd exists. If the file did not exist (which is
+ perfectly valid) the postinst will fail. This fixes #32953.
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 5 Feb 1999 23:32:46 -0400
+
+samba (2.0.0final-3) unstable; urgency=low
+
+ * Added to debian/control a "Depends: ${shlibs:Depends}" line for the
+ samba-common package so dependencies for this package are set
+ correctly (thanks to Dark for pointing this out).
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 4 Feb 1999 09:45:21 -0400
+
+samba (2.0.0final-2) unstable; urgency=low
+
+ * Finally!!! The first upload to unstable. Sorry for the delay folks
+ but I have been quite busy lately :-) Another reason for the delay
+ is that I wanted to ease the migration from Samba 1.9.18p10 and
+ before to Samba 2.0.0. I changed the location of the config. files
+ from /etc/ to /etc/samba/ and this made things a little bit harder.
+ * This package needs 2.2 kernel headers to compile (well, this is
+ true for the smbfsx package, all others compile fine with 2.0 kernel
+ headers).
+ * Created a preinst script for the samba package to take care of the
+ location migration of smb.conf (from /etc/ to /etc/samba/). The
+ preinst script also takes care of moving /etc/smbpasswd to its new
+ location (/etc/samba/).
+ * Created postinst and postrm scripts to add/remove an entry for swat
+ in /etc/inetd.conf.
+ * I had forgotten to install the sambaconfig script so I changed
+ debian/rules to install this script.
+ * Added a postrm script for the samba package (I had forgotten to add
+ this script to the new Samba packages after the migration from 1.9.18
+ to 2.0.0).
+ * Created a small Perl script that is called from the samba postinst
+ to convert the smbpasswd from the old format used in version prior
+ to 2.0.0 to the new one used in 2.0.0 and beyond.
+ * The upgrade process should be automatically now. Please let me know
+ of any problems you encounter.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 23 Jan 1999 09:34:10 -0400
+
+samba (2.0.0final-1) experimental; urgency=low
+
+ * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable
+ because I still have to work out the migration from the old
+ samba packages to the new ones. I also need to work more on the
+ new swat package.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 14 Jan 1999 22:40:02 -0400
+
+samba (2.0.0beta5-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 5 Jan 1999 00:37:57 -0400
+
+samba (2.0.0beta4-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 23 Dec 1998 18:37:45 -0400
+
+samba (2.0.0beta3-1) experimental; urgency=low
+
+ * New upstream version.
+ * I have just realized that the documentation patches (for man pages)
+ that I used for the 1.9.18 release are not longer necessary because
+ there was a major re-write of all the Samba documentation that added
+ the missing bits of information. So, I have just removed these minor
+ patches.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 8 Dec 1998 12:00:30 -0400
+
+samba (2.0.0beta2-1) experimental; urgency=low
+
+ * New upstream version.
+ * This new version fixes the potential security problem that
+ was posted to debian-private (using the "message command" parameter
+ to execute arbitrary commands from messages sent from LinPopUp).
+ * Changed /etc/init.d/samba to use one of the variables stored in
+ /etc/samba/debian_config to know how Samba is being run (from inetd or
+ as daemons) instead of grepping /etc/inetd.conf which may not exist
+ if the user is running xinetd (this fixes bug #29687 - assumes using
+ vanilla inetd)
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 23 Nov 1998 23:32:03 -0400
+
+samba (2.0.0beta1-1) experimental; urgency=low
+
+ * First beta release of the samba-2.0.0 code. Before the beta I was
+ working with sources downloaded directly from the CVS server. This
+ package goes into experimental and I plan to release the new
+ samba to unstable as soon as it gets out of beta.
+ * Created several packages out of the Samba sources. They are:
+ samba (nmbd and smbd daemons + related programs), smbclient (FTP
+ like command line utility to retrieve files from SMB servers),
+ swat (Samba Web Administration Tool), samba-common (common files
+ used by samba, smbclient and swat), smbfsx (smbfs utilities for
+ kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation).
+ * Refreshed debian/samba-doc.docs so recently added docs. are
+ installed in the samba-doc package. New additions include man
+ pages in the /usr/doc/samba-doc/htmldocs/ directory.
+ * Deleted Debian specific nmblookup(1) man page as it is now upstream.
+ * Added smbtorture to smbclient package.
+ * Moved rpcclient from the samba package to the smbclient package.
+ * The Samba daemons (nmbd and smbd) now create a PID file so I changed
+ all calls to start-stop-daemon to use the PID file.
+ * Fixed debian/rules to install mksmbpasswd (fixes #27655).
+ * Modified /etc/init.d/samba so nmbd is started without the -a (append
+ to the log file instead of overwrite) switch. The new behavior of
+ nmbd is to NOT overwrite log files, so the -a switch can be deleted
+ safely.
+ * Moved from debstd to debhelper.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 1 Oct 1998 08:37:41 -0400
+
+samba (1.9.18p10-5) frozen unstable; urgency=high
+
+ * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than
+ the one I was trying to fix: in /etc/init.d/samba I got rid of the test
+ that tells us whether the Samba daemons are running from inetd or as
+ standalone daemons. I corrected the problem by editing again
+ /etc/init.d/samba to uncomment the test.
+ * Wishlist bug #28298 (typos in samba) was fixed.
+ * Wishlist bug #28309 (typos in smb.conf) was fixed.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 28 Oct 1998 09:11:47 -0400
+
+samba (1.9.18p10-4) unstable; urgency=low
+
+ * Minor patch to debian/rules to delete *substvars instead of only
+ substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz
+ <dmj at andrew.cmu.edu> for this).
+ * Small patch to source/shmem_sysv.c that eases compilation under
+ glibc-2.1 (thanks to Daniel <dmj at andrew.cmu.edu> for this).
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 17 Sep 1998 15:33:49 -0400
+
+samba (1.9.18p10-3) unstable; urgency=low
+
+ * Patched smbclient again to fix minor formatting problem introduced
+ by Magosanyi Arpad's smbclient patch.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 3 Sep 1998 11:03:23 -0400
+
+samba (1.9.18p10-2) unstable; urgency=low
+
+ * Sync'ed include files for the smbfs utilities with the ones in
+ kernel 2.1.119.
+ * Added to the /usr/doc/samba/examples/ directory a new script called
+ wins2dns (courtesy of Jason Gunthorpe <jgg at deltatee.com>) that
+ generates BIND sonze files for hosts in the WINS database.
+ * Patched smbclient to include enhancements by Magosanyi Arpad
+ <mag at bunuel.tii.matav.hu> that make scripting easier.
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 28 Aug 1998 13:34:54 -0400
+
+samba (1.9.18p10-1) stable unstable; urgency=low
+
+ * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
+ description of what has changed). I built a 1.9.18p9-1 but I
+ never released it because an obscure bug was found just a couple
+ of days before the official release, so the Samba Team stopped
+ the rollover of 1.9.18p9.
+ * Updated documentation (new files were added to the docs/ directory
+ that were not installed in /usr/doc/samba/).
+ * Fixed long standing bug #7695 (smb.conf's man page doesn't document
+ 'printing=lprng') - I made a couple of changes to the man page to
+ include references to lprng.
+ * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it
+ is necessary to make samba suggest psmisc just because the postinst
+ script mentions to call killall. So, I removed all references to
+ "killall" in the scripts.
+ * Fixes bug #25999 (Samba does not by default work with unix password
+ sync): I added the "passwd program" and "passwd chat" parameters to
+ the sample smb.conf to reflect the Debian environment.
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 21 Aug 1998 08:59:18 -0400
+
+samba (1.9.18p9-1) unstable; urgency=low
+
+ * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
+ description of what has changed).
+ * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is
+ now part of the new upstream version.
+ * Corrected small typo in addtosmbpass' man page (fixes #25629).
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 11 Aug 1998 08:53:08 -0400
+
+samba (1.9.18p8-2) frozen unstable; urgency=medium
+
+ * Applied patch received from Jeremy Allison (Samba Team) that fixes
+ "grave" bug #23903 (samba maps username before authenicating with
+ NT password server).
+ * Added a "sleep 2" between "start-stop-daemon --stop" and
+ "start-stop-daemon --start" in /etc/init.d/samba so when this script
+ is called with the "restart" parameter the Samba daemons are restarted
+ properly. This fixes bug #24211 (init.d script doesn't restart).
+ * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to
+ avoid annoying warning messages.
+ * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096
+ and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't
+ find who sent this suggestion to me. If you are listening, drop me a
+ note and I'll put your name here :-)
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 29 Jun 1998 08:45:01 -0400
+
+samba (1.9.18p8-1) frozen unstable; urgency=low
+
+ * New upstream release that fixes _lots_ of "ugly" bugs. The list of
+ fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt).
+ * Fixed postinst to quote arguments to if [ arg .. ] constructs
+ (fixes #22881).
+ * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing
+ list) that solves a problem with username maps (the Samba Team did
+ not catch this problem before final 1.9.18p8).
+ * Made /etc/init.d/samba to print out a warning when Samba is running
+ from inetd and the user runs /etc/init.d/samba to start|stop|restart
+ Samba (there's no point on doing this because inetd will start the
+ daemons again when there is traffic on UDP port 137-139).
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 13 Jun 1998 00:18:25 -0400
+
+samba (1.9.18p7-4) frozen unstable; urgency=medium
+
+ * Fixes the serious problem of having the WINS name server
+ database getting deleted at boot time. That happened because the
+ WINS database was being stored under /var/lock/samba/ and all files
+ under /var/lock/ are deleted at boot time. The place where the WINS
+ database is stored was moved to /var/samba/.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 18 May 1998 20:24:29 -0400
+
+samba (1.9.18p7-3) stable; urgency=high
+
+ * Libc5 version for Bo (stable) that fixes the recently reported
+ security hole.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 18 May 1998 20:19:33 -0400
+
+samba (1.9.18p7-2) frozen unstable; urgency=low
+
+ * Added patches from the non-mantainer upload that make us able
+ to compile Samba on Alpha systems. This fixes bug #22379.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 13 May 1998 20:38:51 -0400
+
+samba (1.9.18p7-1) frozen unstable; urgency=low
+
+ * New upstream release (just bug fixes, no new functionality).
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 13 May 1998 11:47:32 -0400
+
+samba (1.9.18p6-2) frozen unstable; urgency=low
+
+ * Uploaded to frozen (I forgot to upload last version to frozen
+ so it got installed only in unstable).
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 12 May 1998 18:10:17 -0400
+
+samba (1.9.18p6-1.1) unstable; urgency=low
+
+ * non-maintainer upload for Alpha
+ * patch needed for source/quota.c (_syscall4() confusion)
+
+ -- Paul Slootman <paul at debian.org> Tue, 12 May 1998 20:39:13 +0200
+
+samba (1.9.18p6-1) unstable; urgency=low
+
+ * New upstream release that fixes a possible buffer overflow.
+ This security hole was reported on BugTraq by Drago. The
+ previous Debian version (1.9.18p5-1) was not released because
+ 1.9.18p5 and 1.9.18p6 were released very closely.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 11 May 1998 20:28:33 -0400
+
+samba (1.9.18p5-1) unstable; urgency=low
+
+ * New upstream release (no new funcionality, just bug fixes - see
+ /usr/doc/samba/WHATSNEW.txt.gz).
+ * Backed off Debian patches that were added upstream.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 11 May 1998 08:43:53 -0400
+
+samba (1.9.18p4-2) frozen unstable; urgency=low
+
+ * Patched smbclient(1) man page to not reference the unsopported
+ -A parameter (fixes #6863).
+ * Changes to start nmbd with the -a option (in /etc/init.d/samba
+ and in the entry added to /etc/inetd.conf).
+ * Fixed typo in sample smb.conf (fixes #21484).
+ * Fixed yet another typo in sample smb.conf (fixes #21447).
+
+ -- Eloy A. Paris <peloy at debian.org> Fri, 17 Apr 1998 22:19:23 -0400
+
+samba (1.9.18p4-1) frozen unstable; urgency=low
+
+ * New upstream version that fixes several bugs.
+ * New scheme for keeping track of Debian specific configuration.
+ This new scheme fixes bug #18624 (Samba always asks the user about
+ configuration options). New scheme stores Debian specific
+ configuration information in /etc/samba/debian_config.
+ * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the
+ new configuration scheme.
+ * Moved required kernel 2.1.x include files inside the source tree
+ so I don't have to do very nasty things like creating crazy
+ symlinks in /usr/include to make this package compile. This
+ allows non-root users to build the package and fixes bug
+ #20104.
+ * Fixed address of the FSF in /usr/doc/samba/copyright (problem
+ reported by lintian).
+ * The /etc/init.d/samba script now supports the force-reload
+ argument, as required by the policy (problem reported by lintian).
+ * Added a "rm /etc/cron.weekly/samba" at the end of the postinst.
+ * Now the samba package can be installed even if no nmbd or smbd processes
+ are running. This fixes the following bugs: #8917, #9334, #10268,
+ #10411, #11146 and #13387.
+ * Provides the original README in /usr/doc/samba. This fixes bug #9693.
+ * Added a --no-reload option to sambaconfig to not reload Samba
+ after configuration.
+ * Created man pages for sambaconfig(8), addtosmbpass(8),
+ mksmbpasswd(8) and nmblookup(1).
+ * Corrected small typo in sample /etc/smb.conf.
+ * Added two new parameters to /etc/smb.conf: "preserver case" and
+ "short preserve case".
+ * "rm -Rf /var/lock/samba" in postrm when package is being purged.
+ * Patched upstream source (nmbd.c) to not overwrite log files when
+ nmbd is called with the -a parameter (fixes #17704: nmbd ignores
+ -a option).
+ * /etc/init.d/samba now starts the nmbd daemon with the -a parameter
+ to not overwrite log files.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 23 Mar 1998 21:22:03 -0400
+
+samba (1.9.18p3-1) unstable; urgency=low
+
+ * New upstream version.
+ * Oppsss!!! I really screwed it up (actually, debstd did).
+ 1.9.18p2-2 still contained man pages (smbmount and smbumount) part
+ of other packages. This version does have this corrected. If not,
+ I no longer deserve to be a Debian developer! So, this version
+ fixes bug #18438 and some of the bugs I claimed to fix in
+ 1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd
+ with -m in debian/rules (man pages are installed by "make install"
+ so it's a bad idea to re-install man pages with debstd).
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 23 Feb 1998 17:32:42 -0400
+
+samba (1.9.18p2-2) unstable; urgency=low
+
+ * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided
+ a man page for smbmount, which conflicts with package smbfs. This
+ was solved by creating a multi-binary package that produces
+ package samba and new package smbfsx.
+ * Fixes bug #18000 (typo in postinst).
+ * Fixes bug #17958 (postinst asks obsolete question). Actually,
+ the question is still asked, but only if Samba is run as daemons.
+ * Created a multi-binary package from the Samba sources: package
+ samba and new package smbfsx which provides SMB mount utilities
+ for kernels > 2.1.70.
+
+ -- Eloy A. Paris <peloy at debian.org> Mon, 9 Feb 1998 19:47:05 -0400
+
+samba (1.9.18p2-1) unstable; urgency=low
+
+ * New upstream version.
+ * Removed /etc/cron.weekly/samba because Samba does not handle well
+ rotation of log files (if the log file is rotated Samba will
+ continue to log to the rotated file, instead of the just created
+ one). In any case, Samba will rotate log files after an specific
+ file size.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 27 Jan 1998 22:34:27 -0400
+
+samba (1.9.18p1-2) unstable; urgency=low
+
+ * Created a multi-binary package out of the Samba sources to provide
+ packages samba and smbfsx (userland utilities to work with
+ smbfs with kernels > 2.1.x.
+
+ -- Eloy A. Paris <peloy at debian.org> Sat, 17 Jan 1998 09:23:48 -0400
+
+samba (1.9.18p1-1) unstable; urgency=low
+
+ * New upstream version.
+ * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in
+ /var/backups/smbpasswd.bak.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 14 Jan 1998 13:40:56 -0400
+
+samba (1.9.18alpha14-1) unstable; urgency=low
+
+ * New upstream version.
+ * Added a note to the postinst script telling the user that he/she
+ needs to run smbpasswd manually after creating a new /etc/smbpasswd
+ from /etc/passwd.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 23 Dec 1997 23:44:37 -0400
+
+samba (1.9.18alpha13-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 16 Dec 1997 13:02:32 -0400
+
+samba (1.9.18alpha12-1) unstable; urgency=low
+
+ * New upstream version.
+ * Conflicts with the sambades package because the new Samba 1.9.18
+ series do not depend on the DES libraries to support encrypted
+ passwords.
+ * Added parameter "encrypt passwords = yes" to /etc/smb.conf.
+ * Compiled with support for quotas in disk_free().
+ * Home directories are now exported read only by default.
+ * Re-worked debian/rules.
+ * Re-worked sample smb.conf.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 4 Dec 1997 22:50:34 -0400
+
+samba (1.9.17p4-1) unstable; urgency=low
+
+ * New upstream version.
+ * Made /etc/smb.conf readable by everybody because some Samba utilities
+ will fail otherwise when run by non-root users.
+ * Dropped PAM support while the PAM libraries are ported to libc6.
+
+ -- Eloy A. Paris <peloy at debian.org> Tue, 21 Oct 1997 18:08:49 -0400
+
+samba (1.9.17p3-1) unstable; urgency=low
+
+ * New upstream version.
+ * Made /etc/smb.conf readable only by root as suggested by smbd's man page.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 15 Oct 1997 09:21:25 -0400
+
+samba (1.9.17p2-2) unstable; urgency=low
+
+ * Running Samba as daemons instead of from inetd.
+ * Removing netbios entries in /etc/inetd.conf.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 9 Oct 1997 23:37:25 -0400
+
+samba (1.9.17p2-1) unstable; urgency=low
+
+ * New upstream version that fixes a serious security hole.
+ * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because
+ these patches are now part of the upstream release.
+
+ -- Eloy A. Paris <peloy at debian.org> Sun, 28 Sep 1997 22:54:33 -0400
+
+samba (1.9.17p1-1) unstable; urgency=low
+
+ * New upstream version.
+ * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up
+ compiler warnings.
+ * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings.
+ * Included crypt.h to have function prototype for crypt().
+ * Included netinet/tcp.h to have some socket options included.
+ * Included netinet/ip.h to have some socket options included.
+ * Linking with libcrypt (LIBM='... -lcrypt'). Without including this
+ library smbd generates a seg. fault when authenticating users (?).
+
+ -- Eloy A. Paris <debian.org> Wed, 10 Sep 1997 22:09:18 -0400
+
+samba (1.9.17-1) unstable; urgency=low
+
+ * New upstream version (called the "Browse Fix Release")
+ * Added the option --oknodo to the start-stop-daemon invocation in prerm
+ script. This was because the prerm was failing because start-stop-daemon
+ was returning an error code if no nmbd or smbd daemons were found
+ to kill.
+ * The function yp_get_default_domain(), referenced in three source
+ files was part of libc5 but with libc6 (glibc2) it has been moved
+ to libnss_nis. Since the linker was unable to find the function
+ I had to add LIBSM='-lnss_nis' to debian/rules.
+ * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules
+ because compiling was failing because of conflicts with glibc2.
+ * Patched source/includes.h to include termios.h if GLIBC2 is defined.
+
+ -- Eloy A. Paris <peloy at debian.org> Wed, 27 Aug 1997 08:39:32 -0400
+
+samba (1.9.17alpha5-1) unstable; urgency=low
+
+ * New upstream version.
+
+ -- Eloy A. Paris <peloy at debian.org> Thu, 14 Aug 1997 18:05:02 -0400
+
+samba (1.9.16p11-3) unstable; urgency=low
+
+ * Fixed accidental omission of /etc/pam.d/samba.
+
+ -- Klee Dienes <klee at debian.org> Sat, 15 Mar 1997 22:31:26 -0500
+
+samba (1.9.16p11-2) unstable; urgency=low
+
+ * Recompiled against newer PAM libraries.
+ * Added /etc/pam.d/samba.
+
+ -- Klee Dienes <klee at debian.org> Sat, 8 Mar 1997 01:16:28 -0500
+
+samba (1.9.16p11-1) unstable; urgency=low
+
+ * New upstream release.
+ * Added PAM support.
+
+ -- Klee Dienes <klee at debian.org> Tue, 25 Feb 1997 18:00:12 -0500
+
+samba (1.9.16p9-2) unstable; urgency=low
+
+ * minor packaging changes
+
+ -- Klee Dienes <klee at sauron.sedona.com> Sun, 3 Nov 1996 11:45:37 -0700
+
+samba (1.9.16p9-1) unstable; urgency=low
+
+ * upgraded to new upstream version
+
+ -- Klee Dienes <klee at sauron.sedona.com> Sat, 26 Oct 1996 21:38:20 -0700
+
+1.9.16alpha10-1:
+ 960714
+ * Removed Package_Revision from control file.
+ * Removed -m486 compiler option.
+ * Added Architecture, Section and Priority fields to control file.
+ * Upgraded to latest upstream version.
+ * Uses update-inetd now.
+ * Added shadow passwords support.
+ * Fixed Bug#1946: nmbd won't browse
+
+1.9.15p4-1:
+ 951128
+ * Upgraded to latest upstream version.
+ * Fixed many bugs.
+ * Adds Master Browsing support.
+ * Converted to ELF.
+ * Fixed bug #1825 - nmbd is now killed when removing samba.
+
+1.9.14-1:
+ 950926 Andrew Howell <andrew at it.com.au>
+ * Upgraded to latest version.
+ * Fixed Bug #1139 - samba won't print
+
+1.9.14alpha5-1:
+ * Fixes killing of inetd problem in debian.postint and debian.postrm
+
+1.9.14alpha5-0:
+ 950704 Andrew Howell <andrew at it.com.au>
+ * Taken over samba package from Bruce Perens.
+ * Upgraded to newest version of samba.
+
+1.9.02-1:
+ 9-January-1994 Bruce Perens <Bruce at Pixar.com>
+ * Added Debian GNU/Linux package maintenance system files, and
+ configured for Debian systems.
diff --cc debian/patches/821811-rpc_server-regression.patch
index 0000000,0000000..ca8b966
new file mode 100644
--- /dev/null
+++ b/debian/patches/821811-rpc_server-regression.patch
@@@ -1,0 -1,0 +1,33 @@@
++From: Andreas Schneider <asn at samba.org>
++Date: Fri, 15 Apr 2016 09:56:08 +0000 (+0200)
++Subject: s3:rpc_server: Fix a regression verifying the security trailer
++X-Git-Url: https://git.samba.org/?p=asn%2Fsamba.git;a=commitdiff_plain;h=82fa625540abf8b8ec23d43c41e2ca906a9928a5;hp=ea6f2386611d0a4edd65962a59b3448be976c1bb
++
++s3:rpc_server: Fix a regression verifying the security trailer
++
++We do not support header signing so we should not check verify it if a
++client sends the flag.
++
++Signed-off-by: Andreas Schneider <asn at samba.org>
++Reviewed-by: Guenther Deschner <gd at samba.org>
++---
++
++--- a/source3/rpc_server/srv_pipe.c
+++++ b/source3/rpc_server/srv_pipe.c
++@@ -1748,7 +1748,6 @@
++ {
++ TALLOC_CTX *frame = talloc_stackframe();
++ struct dcerpc_sec_verification_trailer *vt = NULL;
++- const uint32_t bitmask1 = 0;
++ const struct dcerpc_sec_vt_pcontext pcontext = {
++ .abstract_syntax = pipe_fns->syntax,
++ .transfer_syntax = ndr_transfer_syntax,
++@@ -1769,7 +1768,7 @@
++ goto done;
++ }
++
++- ret = dcerpc_sec_verification_trailer_check(vt, &bitmask1,
+++ ret = dcerpc_sec_verification_trailer_check(vt, NULL,
++ &pcontext, &header2);
++ done:
++ TALLOC_FREE(frame);
diff --cc debian/patches/bug9669_regression.patch
index 0000000,0000000..f961e60
new file mode 100644
--- /dev/null
+++ b/debian/patches/bug9669_regression.patch
@@@ -1,0 -1,0 +1,35 @@@
++From 0abef6992dc342d443137f8a2ac6c01f490cecee Mon Sep 17 00:00:00 2001
++From: Christian Ambach <ambi at samba.org>
++Date: Wed, 20 Feb 2013 16:59:05 +0100
++Subject: [PATCH] s3:rpc_client fix a crash
++
++state->cli->dc does not have to be set (e.g. when running
++net rpc join against an older Samba PDC), so check it before dereferencing it
++
++This fixes Bug 9669 - net rpc join crashes against a Samba 3.0.33 PDC
++
++Bug: https://bugzilla.samba.org/show_bug.cgi?id=9669
++
++Signed-off-by: Christian Ambach <ambi at samba.org>
++Reviewed-by: Andreas Schneider <asn at samba.org>
++
++Autobuild-User(master): Christian Ambach <ambi at samba.org>
++Autobuild-Date(master): Wed Feb 20 19:00:52 CET 2013 on sn-devel-104
++(cherry picked from commit 3d29bb2d37b02909ecb500e864f3c13e06957a86)
++
++(cherry picked from commit ff658bb36c28c9db91fc80a68725e893ffe300aa)
++---
++ source3/rpc_client/cli_pipe.c | 2 +-
++ 1 file changed, 1 insertion(+), 1 deletion(-)
++
++--- a/source3/rpc_client/cli_pipe.c
+++++ b/source3/rpc_client/cli_pipe.c
++@@ -2273,7 +2273,7 @@
++ status = dcerpc_netr_LogonGetCapabilities_r_recv(subreq, talloc_tos());
++ TALLOC_FREE(subreq);
++ if (NT_STATUS_EQUAL(status, NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE)) {
++- if (state->cli->dc->negotiate_flags &
+++ if (state->cli->dc && state->cli->dc->negotiate_flags &
++ NETLOGON_NEG_SUPPORTS_AES) {
++ DEBUG(5, ("AES is not supported and the error was %s\n",
++ nt_errstr(status)));
diff --cc debian/patches/fix_netapp.patch
index 0000000,0000000..256b18c
new file mode 100644
--- /dev/null
+++ b/debian/patches/fix_netapp.patch
@@@ -1,0 -1,0 +1,33 @@@
++Decription: Fix compatibility with NetAPP NAS
++Origin: backport, https://git.samba.org/?p=samba.git;a=commit;h=d97b347d041f9b5c0aa71f35526cbefd56f3500b
++Bug: https://bugzilla.samba.org/show_bug.cgi?id=11850
++Bug-Ubuntu: https://bugs.launchpad.net/samba/+bug/1576109
++
++--- a/source3/libsmb/ntlmssp.c
+++++ b/source3/libsmb/ntlmssp.c
++@@ -206,7 +206,11 @@
++ * also add NTLMSSP_NEGOTIATE_SEAL here. JRA.
++ */
++ if (in_list("NTLMSSP_FEATURE_SESSION_KEY", feature_list, True)) {
++- ntlmssp_state->required_flags |= NTLMSSP_NEGOTIATE_SIGN;
+++ /*
+++ * We don't require this here as some servers (e.g. NetAPP)
+++ * doesn't support this.
+++ */
+++ ntlmssp_state->neg_flags |= NTLMSSP_NEGOTIATE_SIGN;
++ }
++ if (in_list("NTLMSSP_FEATURE_SIGN", feature_list, True)) {
++ ntlmssp_state->required_flags |= NTLMSSP_NEGOTIATE_SIGN;
++@@ -231,7 +235,11 @@
++ {
++ /* As per JRA's comment above */
++ if (feature & NTLMSSP_FEATURE_SESSION_KEY) {
++- ntlmssp_state->required_flags |= NTLMSSP_NEGOTIATE_SIGN;
+++ /*
+++ * We don't require this here as some servers (e.g. NetAPP)
+++ * doesn't support this.
+++ */
+++ ntlmssp_state->neg_flags |= NTLMSSP_NEGOTIATE_SIGN;
++ }
++ if (feature & NTLMSSP_FEATURE_SIGN) {
++ ntlmssp_state->required_flags |= NTLMSSP_NEGOTIATE_SIGN;
diff --cc debian/patches/netlogon_credentials_regression.patch
index 0000000,0000000..57ec576
new file mode 100644
--- /dev/null
+++ b/debian/patches/netlogon_credentials_regression.patch
@@@ -1,0 -1,0 +1,55 @@@
++From 2d0424e7bb2c30bf9049529b207c73b55370dfc8 Mon Sep 17 00:00:00 2001
++From: Andreas Schneider <asn at samba.org>
++Date: Tue, 10 Jan 2012 16:38:16 +0100
++Subject: [PATCH] s3-rpc_client: Fix updating netlogon credentials.
++MIME-Version: 1.0
++Content-Type: text/plain; charset=utf8
++Content-Transfer-Encoding: 8bit
++
++Signed-off-by: Günther Deschner <gd at samba.org>
++(cherry picked from commit 33206b1e240e55acedad606aed4f1952f7496b35)
++---
++ source3/rpc_client/cli_pipe.c | 15 +++++++--------
++ 1 file changed, 7 insertions(+), 8 deletions(-)
++
++Index: samba-3.6.25/source3/rpc_client/cli_pipe.c
++===================================================================
++--- samba-3.6.25.orig/source3/rpc_client/cli_pipe.c 2016-05-03 12:36:52.810453161 -0400
+++++ samba-3.6.25/source3/rpc_client/cli_pipe.c 2016-05-03 12:36:52.806453162 -0400
++@@ -2268,9 +2268,6 @@
++ struct rpc_pipe_bind_state *state =
++ tevent_req_data(req,
++ struct rpc_pipe_bind_state);
++- struct schannel_state *schannel_auth =
++- talloc_get_type_abort(state->cli->auth->auth_ctx,
++- struct schannel_state);
++ NTSTATUS status;
++
++ status = dcerpc_netr_LogonGetCapabilities_r_recv(subreq, talloc_tos());
++@@ -2328,8 +2325,8 @@
++ return;
++ }
++
++- TALLOC_FREE(schannel_auth->creds);
++- schannel_auth->creds = talloc_steal(state->cli, state->creds);
+++ TALLOC_FREE(state->cli->dc);
+++ state->cli->dc = talloc_steal(state->cli, state->creds);
++
++ if (!NT_STATUS_IS_OK(state->r.out.result)) {
++ DEBUG(0, ("dcerpc_netr_LogonGetCapabilities_r_recv failed with %s\n",
++@@ -3526,10 +3523,12 @@
++ * The credentials on a new netlogon pipe are the ones we are passed
++ * in - copy them over
++ */
++- result->dc = netlogon_creds_copy(result, *pdc);
++ if (result->dc == NULL) {
++- TALLOC_FREE(result);
++- return NT_STATUS_NO_MEMORY;
+++ result->dc = netlogon_creds_copy(result, *pdc);
+++ if (result->dc == NULL) {
+++ TALLOC_FREE(result);
+++ return NT_STATUS_NO_MEMORY;
+++ }
++ }
++
++ DEBUG(10,("cli_rpc_pipe_open_schannel_with_key: opened pipe %s to machine %s "
diff --cc debian/patches/series
index 0ec3153,0000000..22a24a2
mode 100644,000000..100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@@ -1,50 -1,0 +1,54 @@@
+documentation.patch
+documentation2.patch
+fhs-filespaths.patch
+installswat.sh.patch
+pam-examples.patch
+README_nosmbldap-tools.patch
+smbclient-pager.patch
+undefined-symbols.patch
+VERSION.patch
+usershare.patch
+smbtar-bashism.patch
+autoconf.patch
+dont-build-VFS-examples.patch
+bug_221618_precise-64bit-prototype.patch
+bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch
+bug_387266_upstream_4104_mention-kerberos-in-smbspool-manpage.patch
+bug_604768_upstream_7826_drop-using-samba-link.patch
+bug_604768_upstream_7826_fix-WHATSNEW-link.patch
+waf-as-source.patch
+smbtorture-manpage.patch
+libutil_drop_AI_ADDRCONFIG.patch
+shadow_copy2_backport.patch
+only_export_public_symbols.patch
+0001-ndr-fix-push-pull-DATA_BLOB-with-NDR_NOALIGN.patch
+security-CVE-2013-0213.patch
+security-CVE-2013-0214.patch
+security-CVE-2013-4124.patch
+security-CVE-2013-4475.patch
+security-CVE-2013-4408.patch
+security-CVE-2012-6150.patch
+security-CVE-2013-4496.patch
+security-CVE-2014-0178.patch
+security-CVE-2014-0244.patch
+security-CVE-2014-3493.patch
+security-CVE-2015-0240.patch
+CVE-2015-5252-v3-6-bso11395.patch
+CVE-2015-5299-v3-6-bso11529.patch
+CVE-2015-5296-v3-6-bso11536.patch
+s3-smbd-fix-a-corner-case-of-the-symlink-verificatio.patch
+CVE-2015-7560-v3-6.patch
+0001-s4-torture-let-torture_suite_add_ndr_pull_test-alway.patch
+CVE-preparation-v3-6.patch
+really-move-bitmap.c.patch
+CVE-2016-2110-v3-6.patch
+CVE-2016-2111-v3-6.patch
+CVE-2016-2112-v3-6.patch
+CVE-2016-2118-v3-6.patch
+CVE-2015-5370-v3-6.patch
+0001-pidl-Add-skip-option-to-elements.patch
+0001-PIDL-fix-parsing-linemarkers-in-preprocessor-output.patch
++821811-rpc_server-regression.patch
++netlogon_credentials_regression.patch
++bug9669_regression.patch
++fix_netapp.patch
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git
More information about the Pkg-samba-maint
mailing list