samba (3.0.28a-1ubuntu4.4) hardy-security; urgency=low * RELIABILITY UPDATE: the patch for CVE-2008-1105 introduced a regression with certain client and server interactions with large file sizes. * debian/patches/security-CVE-2008-1105_pt2.patch: adjust cli_negprot() to properly calculate buffer sizes * References LP: #241448 https://bugzilla.samba.org/show_bug.cgi?id=5517 -- Jamie Strandboge Sat, 28 Jun 2008 09:34:21 -0400 samba (3.0.28a-1ubuntu4.3) hardy-proposed; urgency=low * debian/patches/disable-weak-auth.patch: roll back the change to the client defaults of disallowing negotiation of lanman authentication, since this causes usability problems for libsmbclient-based clients that can't present meaningful error messages to the user. Still disallow the plaintext authentication method, which is much less likely to be used on NASes of any sort and age. LP: #209520. -- Steve Langasek Thu, 19 Jun 2008 17:20:13 +0000 samba (3.0.28a-1ubuntu4.2) hardy-security; urgency=low * SECURITY UPDATE: heap overflow when processing crafted SMB responses * debian/patches/security-CVE-2008-1105.patch: update util_sock.c to require specifying the buffer size and update client.c, smbctool.c, smbfilter.c, and process.c for these changes * References: CVE-2008-1105 LP: #235912 -- Jamie Strandboge Tue, 17 Jun 2008 12:47:38 -0400 samba (3.0.28a-1ubuntu4.1) hardy-proposed; urgency=low * debian/patches/fix-server-signature.patch: - Fix for nautlius sharing issues with Windows 2003. Patch taken from http://git.samba.org/?p=samba.git;a=commit;h=67f90361a07841972a01a4faf575da25ebbbb29c (LP: #217137) -- Chuck Short Tue, 03 Jun 2008 08:42:42 -0400 samba (3.0.28a-1ubuntu4) hardy; urgency=low [ Mathias Gug ] * debian/samba-common.postinst: Fix upgrade from a first installation done with feisty, edgy or dapper. (LP: #201059). * debian/smb.conf.feisty: Add default smb.conf shipped in feisty. [ Steve Langasek ] * When populating the new sambashare group, it's not an error if the user simply doesn't exist; test for this case and let the install continue instead of aborting. LP: #206036. -- Steve Langasek Wed, 02 Apr 2008 21:07:11 +0000 samba (3.0.28a-1ubuntu3) hardy; urgency=low * debian/patches/fix-smbprinting-os2.patch - Fixes printing large documents from OS/2. (LP: #60931) -- Chuck Short Fri, 28 Mar 2008 08:37:31 -0400 samba (3.0.28a-1ubuntu2) hardy; urgency=low * debian/smb.conf - Add map to guest = Bad user, maps bad username to guest access. (LP: #32067) -- Chuck Short Thu, 27 Mar 2008 14:24:13 -0400 samba (3.0.28a-1ubuntu1) hardy; urgency=low * Merge from Debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] shares, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * debian/winbind.files: - include additional files * debian/patches/fix-documentation.patch: - fix typos in net(8) and smb.conf(5) man pages * debian/mksambapasswd.awk: - Don't add user with UID less than 1000 to smbpasswd. * debian/samba.init: - add 'status' option for LSB conformance. * Updated control version. * Set Ubuntu maintainer address. * Dropped changes: * debian/samba.if-up: this ifup hook isn't actually needed with current Samba. * Set 'usershare allow guests' by in the default smb.conf, so that usershare admins are allowed to create public shares too, not just authenticated ones (e.g., via nautilus-share). LP: #204703. -- Steve Langasek Tue, 25 Mar 2008 19:53:09 +0000 samba (3.0.28a-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. This fixes the following Debian bugs: - Prevent nmbd from shutting down when no network interfaces can be located. Closes: #433449 * Debian patches dropped as applied upstream: - make-distclean.patch - linux-cifs-user-perms.patch - cifs-umount-same-user.patch - get_global_sam_sid-non-root.patch - chgpasswd.patch - cups.patch * Fix doc-base section from Apps/Net to Network * Fix copyright in debian/copyright * Updated Standards-Version to 3.7.3 (no changes needed) * [Lintian] No longer use -1 revision for the libacl-dev build dependency [ Steve Langasek ] * Merge smb.conf changes from Ubuntu: - correct an inconsistency inthe winbind enum comment - correct default and example settings to use the canonical names for all options, rather than historical synonyms - clarify the comment for 'max log size'. Thanks to Chuck Short and Richard Laager. * Add an additional sed command to samba-common.postinst to cleverly pick up any shares that have been appended to the default smb.conf and exclude them from the ucf diff. -- Christian Perrier Fri, 14 Mar 2008 21:28:16 +0100 samba (3.0.28a-0ubuntu3) hardy; urgency=low * But smbpasswd-syslog does need updated for the new upstream release, overlooked in the previous upload. Merge the version from Debian svn. -- Steve Langasek Fri, 14 Mar 2008 07:40:06 +0000 samba (3.0.28a-0ubuntu2) hardy; urgency=low * Re-enable the smbpasswd-syslog patch; this was not really merged upstream. -- Steve Langasek Fri, 14 Mar 2008 05:35:20 +0000 samba (3.0.28a-0ubuntu1) hardy; urgency=low [Chuck Short] * New upstream release. This fixes the following Ubuntu bugs. - Prevent nmbd from shutting down when no network interfaces can be located. (LP: #180493) - Fixes I/O errors on access to SMB shares of OS/2. (LP: #112839) * Dropped patches: - make-distclean.patch - linux-cifs-user-perms.patch - cifs-umount-same-user.patch - get_global_sam_sid-non-root.patch - chgpasswd.patch - cups.patch - samba-syslog.patch * debian/mksambapasswd.awk - Don't add user with UID less than 1000 to smbpasswd. (LP: #199412) * debian/samba.if-up - ifup hook to reload samba once the interfaces comes up. (LP: #180493) * Updated control version. [Nicolas Valcárcel] * debian/patches/fix-documentation.patch - Fixed some escape typos in smb.conf(5) manpage. (LP: #182571) [Shawn Smith] * debian/samba.init - Samba init script does not conform to the LSP specification; it needs a status section (LP: #39157) -- Chuck Short Tue, 11 Mar 2008 14:21:29 -0400 samba (3.0.28-4ubuntu1) hardy; urgency=low * Merge from Debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - correct winbind enum comment inconsistency. - correct configuration directive inconsistences. - clarify comment for max log size. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * debian/winbind.files: - include additional files * debian/patches/fix-documentation.patch: - fix typo in net(8) man pages * Set Ubuntu maintainer address. * Dropped changes: - default passwd chat value is modified; the default password sync chat script from Debian now works out of the box. LP: #50624. -- Steve Langasek Sun, 09 Mar 2008 12:44:53 +0000 samba (3.0.28-4) unstable; urgency=low [ Steve Langasek ] * Brown paper bag: fix samba-common.files to list all of the smb.conf templates, not just the current one. Closes: #470138. * Drop debian/patches/gcc42-arm-workaround.patch, which should have been dropped in the previous upload -- Steve Langasek Sun, 09 Mar 2008 04:09:26 -0700 samba (3.0.28-3) unstable; urgency=low * Drop the arm optimization workaround, as the compiler is now reported to be fixed. * Add missing eventlogadm(8) manpage. * Refresh the list of Linux architectures from type-handling, to pick up libacl-dev on armel. Closes: #465121. * Convert handling of smb.conf to use ucf, so that we can sanely manage syntax changes going forward. * In the process, fix the dhcp handling to allow proper reconfiguration via debconf. [ Debconf translations ] * Indonesian added. Closes: #469976 -- Steve Langasek Sat, 08 Mar 2008 17:11:16 -0800 samba (3.0.28-2) unstable; urgency=low [ Steve Langasek ] * Drop some further code in samba-common.postinst that's specific to pre-3.0 upgrades. * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script, so we can use bash array variables and cope with arguments containing embedded spaces (such as share names). Thanks to Julian Gilbey for the patch. Closes: #457105. * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler problem by building rpc_parse/parse_prs.o with -O0 on this architecture. Thanks to Martin Michlmayr for helping to pin down the problem file. Closes: #445566. * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is a closer approximation of the semantics with cifs. -- Christian Perrier Sat, 05 Jan 2008 09:46:06 +0100 samba (3.0.28-1ubuntu3) hardy; urgency=low * Added additional files to winbind.files. (LP: #156468) * Deleted winbind enum comment inconsistency. Thanks to Richard Laager for the patches. (LP: #182569) * Deleted configuration directive inconsistences. Thanks to Richard Laager for the patches. (LP: #182567) * Fixed typo on net(8) man pages using fix-documentation.patch. (LP: #182570) * Clarrified comment for max log size. Thanks to Richard Laager for the patches. (LP: #182566) -- Chuck Short Tue, 22 Jan 2008 09:53:52 -0500 samba (3.0.28-1ubuntu2) hardy; urgency=low * Fixed incorrect line in debian/patches/VERSION.patch -- Rick Clark Sat, 15 Dec 2007 11:03:39 -0500 samba (3.0.28-1ubuntu1) hardy; urgency=low * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - default passwd chat value is modified * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * Set Ubuntu maintainer address. -- Rick Clark Thu, 13 Dec 2007 08:44:33 -0500 samba (3.0.28-1) unstable; urgency=high * New upstream release. Security fix * Fix a remote code execution vulnerability when running as a domain logon server (PDC or BDC). (CVE-2007-6015) -- Christian Perrier Tue, 11 Dec 2007 00:12:11 +0530 samba (3.0.27a-2ubuntu1) hardy; urgency=low * Merge from debian unstable (LP: #174296), remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - default passwd chat value is modified * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * Set Ubuntu maintainer address. -- Steve Langasek Wed, 05 Dec 2007 16:14:20 -0800 samba (3.0.27a-2) unstable; urgency=low * debian/patches/disable-weak-auth.patch: disable plaintext authentication on the client, and lanman authentication on both client and server, by default since these are only needed for Win9x or Samba with encrypted passwords disabled and are potential password attack vectors. This change is backported from Samba 3.2. LP: #163194. * Don't build the userspace tools for the deprecated smbfs kernel driver anymore; instead, use a shell wrapper around mount.cifs that translates option names between the smbfs and cifs drivers. Closes: #169624, #256637, #265468, #289179, #305210, #410075; LP: #29413 * debian/panic-action: detect when we're on an Ubuntu system and direct bug reporters to Launchpad instead of to the Debian BTS. Closes: #452940. * debian/samba.init: call log_progress_msg separately for each daemon on stop rather than passing a second arg to log_daemon_msg, for greater compatibility with both Debian and Ubuntu LSB initscript implementations. Closes: #453350. * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of recommends/suggests which is now implemented correctly in apt. Closes: #453144. * Get rid of the build-dependency on type-handling: - add a new target, "update-archs", to be invoked by hand to refresh the list of known Linux architectures for the libacl1-dev build-dep; this avoids the clean target making changes to debian/control - rework the sed line so that it works in-place on debian/control, so we can get rid of debian/control.in as well and just update debian/control directly Closes: #340570. -- Steve Langasek Tue, 04 Dec 2007 18:35:29 -0800 samba (3.0.27a-1ubuntu1) hardy; urgency=low * Merge from debian unstable (LP: #165072), remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/control: - Remove type-handling (not used in Ubuntu) * debian/rules: - Remove type-handling. * debian/samba.init: - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't say specifically which daemons we're handling. (LP #25803) * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - default passwd chat value is modified * debian/panic-action: - Alter the panic-action script to link to the samba bug reporting page on Launchpad. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * Set Ubuntu maintainer address. * Bugs fixed in Debian: - Enable net usershare (LP: #128548) * Ubuntu patches merged in Debian: * debian/smb.conf: - "printer admin" is a deprecated option, and is dropped completely from the examples. * debian/samba-common.templates: - Default workgroup value is now set to WORKGROUP; this is a change from previous Ubuntu versions which used MSHOME, but is consistent with the Samba upstream defaults and the default behavior for most versions of Windows. * Ubuntu patches dropped: * debian/rules: - Samba should not use --error-handler=true for its init script. * debian/samba-common.templates, debian/po/*.po: - unnecessary divergence from Debian debconf template which resulted in fuzzy translations; this is cleaned up now -- Steve Langasek Sun, 25 Nov 2007 12:56:27 -0800 samba (3.0.27a-1) unstable; urgency=low [ Steve Langasek ] * New upstream release - fix regression with smbfs clients, introduced by the security fix in 3.0.27. Closes: #451839. - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream. * Drop the deprecated "printer admin" example from the default smb.conf. Closes: #451273. * Add a *new* debian/patches/cups.patch to *enable* cups as the default printing system, because since the original introduction of this patch in Debian there was a regression upstream that caused cups to never be selected as the default print system. * Set the default value for the workgroup question to "WORKGROUP" in samba-common.templates, not just in the template smb.conf, so that the debconf question comes out right every time; and always treat this as a high-priority debconf question instead of selecting the priority based on whether there's an existing value, since there's now *always* an existing value but the value doesn't tell us anything meaningful about the user's preference. Closes: #451271. * Drop some code from samba.postinst that only applies to upgrades from pre-3.0 (i.e., pre-sarge) packages [ Christian Perrier ] * Update the "built by" part of README.debian * Remove the very outdated parts of README.debian -- Steve Langasek Fri, 23 Nov 2007 13:04:52 -0800 samba (3.0.27-1) unstable; urgency=low * New upstream version - fixes a remote code execution vulnerability when running nmbd as a WINS server. (CVE-2007-5398; closes: #451385) - fixes a buffer overflow in nmbd when running as a domain controller during processing of GETDC logon server requests. (CVE-2007-4572) [ Steve Langasek ] * fhs.patch: net usershares should also be stored under /var/lib, not under /var/run. No transition handling in maintainer scripts, since this feature is not activated by default. * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid() from smbpasswd -L or pam_smbpass when running as non-root, to avoid a foreseeable panic. Closes: #346547, #450738. * usershare.patch: enable "user shares" by default in the server with a default limit of 100, to support user shares on both upgrades and new installs with no need to munge config files. Thanks to Mathias Gug for the patch. Closes: #443230. * On Ubuntu, support autopopulating the sambashare group using the existing members of the admin group; no equivalent handling is done on Debian, because there doesn't seem to be an appropriate template group we can use that wouldn't be considered a privilege escalation for those users. * Update Samba to explicitly use the C locale when doing password changes, to account for Linux-PAM's recently adopted i18n support. Closes: #451272. * Enforce creation of the pid directory (/var/run/samba) in the samba init script, for compatibility with systems that use a tmpfs for /var/run. Closes: #451270. * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd as the default printing system, as CUPS is now the dominant/default printing system for Linux. [ Debconf translations ] * Hebrew added. Closes: #444054 [ Christian Perrier ] * Split fhs.patch into 3 separate patches to make upstream integration easier: - fhs-newpaths.patch: introduce new paths - fhs-filespaths.patch: assign files to new paths - fhs-assignpaths.patch: assign paths to FHS-compatible locations * Compile with DNS update support. Thanks to Matthias Gug for reporting and contributions from Launchpad's #156686 Closes: #449422 -- Steve Langasek Thu, 15 Nov 2007 11:46:17 -0800 samba (3.0.26a-1ubuntu2) gutsy; urgency=low * debian/patches/chgpasswd.patch: - Also set the locale to 'C' when using PAM for password changes, since the PAM conversation is equally affected by PAM l10n support (LP: #139265). -- Steve Langasek Tue, 02 Oct 2007 13:54:23 -0700 samba (3.0.26a-1ubuntu1) gutsy; urgency=low * debian/patches/chgpasswd.patch: - Set locale to 'C' while calling the passwd change program * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/control: - Remove typehandling (not used in Ubuntu) * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/rules: - Remove type-handling. * debian/samba.init: - Make sure $PIDDIR exists (/var/run is a tmpfs) - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't say specifically which daemons we're handling. (LP #25803) * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. * debian/panic-action: - Bail out if there's no "mail" command. - Alter the panic-action script to link to the samba bug reporting page on Launchpad. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed -- Andrew Mitchell Mon, 17 Sep 2007 15:58:10 +1200 samba (3.0.26a-1) unstable; urgency=low * New upstream release. * Remove the samba-common/unsupported-passdb debconf template and the associated code in samba-common.postinst, that deals with pre-etch versions transition * Remove the samba/tdbsam template and the remaining line referencing it (for no need) in samba.postinst. That code was removed in 3.0.23c-2 and was dealing with pre-3.0 transitions. -- Christian Perrier Sun, 16 Sep 2007 10:16:29 +0200 samba (3.0.26-1) unstable; urgency=high * New upstream release: security update for CVE-2007-4138: incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin. -- Christian Perrier Tue, 11 Sep 2007 19:16:32 +0200 samba (3.0.25c-1) unstable; urgency=low [ Noèl Köthe ] * new upstream released from 2007-08-20 - added smbfs deprecation information to help and manpage Closes: #360384 - fixed winbind leaking file descriptors Closes: #410663 - fixed smbpasswd fails with errorcode SUCCESS as normal user Closes: #155345 [ Christian Perrier ] * Drop the (upstream unmaintained) python bindings (python-samba package) * swat: turn the dependency on samba-doc to a Recommends: Thanks to Peter Eisentraut for dealing with that issue and bringing it back. Closes: #391742 -- Christian Perrier Sun, 26 Aug 2007 14:57:16 +0200 samba (3.0.25b-2) unstable; urgency=low [ Steve Langasek ] * Don't start nmbd if 'disable netbios' is set in the config. Closes: #429429. * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid, set to those of the invoking user, when called as non-root. Closes: #431661. * Fix up fhs.patch for some new FHS regressions: - make sure all references to winbindd_idmap.tdb look in /var/lib/samba - make sure all references to winbindd_cache.tdb look in /var/cache/samba - share_info.tdb belongs in /var/lib/samba; this is a regression introduced in 3.0.23-1, so fix up this path on samba upgrade - move the ADS "gpo" cache directory to /var/cache/samba - move idmap_cache.tdb to /var/cache/samba, and fix up the path on winbind upgrade * linux-cifs-user-perms.patch: also support setting a default uid and gid value when mount.cifs is called as non-root * cifs-umount-trailing-slashes.patch: canonicalize mount point names when umount.cifs is called, to avoid unnecessarily leaving entries behind in /etc/mtab if invoked with a trailing slash in the mount point name * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check in umount.cifs assumed that errors would return a value > 0, when in fact the return value on failure is -1. Correct this assumption, which was allowing any user to unmount shares mounted by other users. * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog() and closelog(), since this will interfere with syslogging behavior of the calling application. Closes: #434372. * swat should depend only on inet-superserver, not update-inetd, per Marco d'Itri. [ Christian Perrier ] * debian/panic-action: bail out if there's no "mail" command Patch from the Ubuntu samba packagers. * debian/smb.conf: use the comment from Ubuntu package for the "valid users" setting of [homes] as a basis for ours. Ubuntu's wording is better. [ Peter Eisentraut ] * Don't ignore errors from make distclean, as per lintian check [ Debconf translations ] * Gujarati updated. Closes: #436215 -- Steve Langasek Fri, 17 Aug 2007 18:38:58 -0700 samba (3.0.25b-1ubuntu4) gutsy; urgency=low * debian/rules: - add error-handler=true to samba dh_installinit. Fixes LP: #85194. -- Mathias Gug Fri, 17 Aug 2007 12:11:45 -0400 samba (3.0.25b-1ubuntu3) gutsy; urgency=low * Build depend on libacl1-dev on lpia. -- Matthias Klose Tue, 14 Aug 2007 10:26:58 +0000 samba (3.0.25b-1ubuntu2) gutsy; urgency=low * debian/smb.conf: - Fix 'valid users =' option in smb.conf. LP: #131419. -- Mathias Gug Thu, 09 Aug 2007 21:39:54 -0400 samba (3.0.25b-1ubuntu1) gutsy; urgency=low * Dropped patches: + debian/patches/ubuntu-auxsrc.patch: - ntlm_auth_proto.h, smbadduser, gen-8bit-gap.sh are all autogenerated at build time. * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/control: - Remove typehandling (not used in Ubuntu) - Added Conflicts/Replaces on python2.4-samba. * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/rules: - Remove type-handling. * debian/samba.init: - Make sure $PIDDIR exists (/var/run is a tmpfs) - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't say specifically which daemons we're handling. (LP #25803) * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. * debian/panic-action: - Bail out if there's no "mail" command. - Alter the panic-action script to link to the samba bug reporting page on Launchpad. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed -- Soren Hansen Mon, 16 Jul 2007 10:58:21 +0200 samba (3.0.25b-1) unstable; urgency=low * New upstream version * Bugs fixed upstream: - correct default mentioned for "store dos attribute" in smb.conf(5) Closes: #367379 - fix typo in pdbedit.c. Closes: #421758 - fixed crashes in idmap_rid. Closes: #428411 - misleading documentation in smb.conf(5). Closes: #218477 - don't crash when no eventlog names are defined in smb.conf Closes: #424683 - typography errors in manpages. Closes: #427865, #418811 - fix compilation and linking of pam_smbpass.so. Closes: #430755 * Drop patches that have been applied upstream: - nmbd-signalling.patch -- Christian Perrier Wed, 27 Jun 2007 15:12:13 +0200 samba (3.0.25a-2) unstable; urgency=low [ Debconf translations ] * Danish updated. Closes: #426773 [ Christian Perrier ] * Clean out some remaining cruft that is not deleted by "make clean". Taken from Ubuntu patches. * Add missing userspace patches to properly pass uid and gid with 2.6 kernels. See #408033 and upstream's #999 for rationale * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue is fixed in 2.4 and 2.6 kernels (2.6 kernels need missing_userspace_bugzilla999.patch, though) Closes: #408033 * Add the samba-common and winbind packages to samba-dbg to get debugging symbols for winbindd, net, etc. * Replace all occurrences of ${Source:Version} by ${$binary:Version} in dependencies. All these were Arch:any depending on Arch:any (the only Arch:any depending on Arch:all already used ${source:Version} [ Steve Langasek ] * Update samba.config to not override user preference on passdb.tdb creation after initial configuration. Closes: #350926. * Drop the last vestiges of the unified samba.patch; this reverts the change for bug #112195 which it's been determined has no actual security benefits, and drops the fix for bug #106976 which is superseded upstream. [ Debconf translations ] * Vietnamese updated. Closes: #426979. -- Christian Perrier Wed, 13 Jun 2007 15:47:06 +0200 samba (3.0.25a-1) unstable; urgency=low [ Christian Perrier ] * New upstream version * Bugs fixed upstream: - password expiration loog on samba domain controllers. Closes: #425083 - no more login on samba servers that are members of samba domains Closes: #425680, #426002 - users no longer have access according to their secondary groups on shares with "force group". Closes: #424629 * Debian packaging fixes: - Enforce building with "--with-ads" and therefore fail when the build can't be done with kerberos support. Closes: #424637 - debian/control: wrap long lines in packages' descriptions - uncomment out use of type-handling in the clean target, because type-handling has been fixed to support the new /usr/share/dpkg/ostable - avoid installing extra COPYING files in /usr/share/doc/* (one was installed along with the pcap2nbench example) * Merge Ubuntu changes: - use of PIDDIR instead of hardcoding it in samba.init and winbind.init * Patches to upstream source: - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory instead of the lock directory. Thanks to C. K. Jester-Young for the patch. Closes: #425640 [ Steve Langasek ] * swat and samba depend on update-inetd instead of on netbase; swat also depends on "openbsd-inetd | inet-superserver", for samba this is only a Suggests. -- Christian Perrier Sun, 27 May 2007 09:30:02 +0200 samba (3.0.25-1ubuntu1) gutsy; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) -- Andrew Mitchell Sun, 20 May 2007 21:43:26 +1200 samba (3.0.25-1) unstable; urgency=high * New upstream version including security fixes * Bugs fixed upstream: - nmbd no longer segfaults on bad interface line Closes: #265577, #386922, #359155, #366800 - documentation issues about displaycharset. Closes: #350790 - documentation makes it clear that case options such as "default case" can only be set on a per-share basis. Closes: #231229 - all occurrences of "encypt" fixed in smb.conf(5) Closes: #408507 - two typos on "account" fixed in source/passdb/pdb_ldap.c and source/utils/pdbedit.c. Closes: #402392 - no longer panic when using the (deprecated) "only user" option in user level security. Closes: #388282 - CVE-2007-2444 (User privilege elevation because of a local SID/Name translation bug) - CVE-2007-2446 (Multiple heap overflows allow remote code execution) - CVE-2007-2447 (Unescaped user input parameters are passed as arguments to /bin/sh allowing for remote command execution) [ Debconf translations ] * Marathi added. Closes: #416802 * Esperanto added. Closes: #417795. * Basque updated. Closes: #418196. * Wolof updated. Closes: #421636 [ Christian Perrier ] * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba before running invoke-rc.d. Closes: #414841 [ Steve Langasek ] * Comment out use of type-handling in the clean target, because type-handling is currently broken in unstable and clean shouldn't be editing debian/control anyway. -- Christian Perrier Mon, 14 May 2007 10:30:15 +0200 samba (3.0.24-6ubuntu1) gutsy; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) -- Kees Cook Tue, 08 May 2007 05:18:16 -0700 samba (3.0.24-6) unstable; urgency=high * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug is still present :/ Fix a missing ] in the regexp for passdb backend checking, really-closes: #415725. -- Steve Langasek Sat, 24 Mar 2007 03:32:46 -0700 samba (3.0.24-5) unstable; urgency=high * The "see what you get for trusting the quality of my packages, release team? Release team, please unblock this package" release. * High-urgency brown-paper-upload for etch-targetted fix for regression introduced in the last version [ Steve Langasek ] * Fixed the regexp used for matching broken passdb backend settings, since we were getting false positives on *all* values. :/ The correct match should be: one or more non-space, non-comma characters, followed by a space or a comma, followed by zero or more spaces, followed by one or more non-space characters. Closes: #415725. [ Debconf translations ] * Nepali * Korean; closes: #414883. * Russian * Arabic * Portuguese * Greek. Closes: #415122 * Norwegian Nynorsk added. * Marathi added. Closes: #416802 -- Steve Langasek Wed, 21 Mar 2007 13:49:46 -0700 samba (3.0.24-4) unstable; urgency=medium [ Steve Langasek ] * Documentation fix for a problem affecting upgrades from sarge: if passdb backend is still a comma- or space-separated list after any attempts at automatic fix-ups, throw a debconf error notifying the user that they'll need to fix this manually. Closes: #408981. [ Debconf translations ] * French * Spanish * Galician; closes: #414605. * Swedish; closes: #414610. * Brazilian Portuguese; closes: #414603. * German; closes: #414630. * Norwegian Bokmål; closes: #414619. * Bulgarian; closes: #414624. * Romanian; closes: #414629. * Tagalog; closes: #414637. * Khmer; closes: #381833. * Thai; closes: #414664. * Slovak; closes: #414665. * Slovenian * Simplified Chinese; closes: #414671. * Japanese; closes: #414673. * Hungarian; closes: #414677. * Dzongkha; closes: #414680. * Estonian; closes: #414679. * Catalan * Malayalam; closes: #414728 * Traditional Chinese; closes: #414730 * Turkish * Italian; closes: #414708 * Finnish; closes: #414736 * Dutch; closes: #414741 * Albanian; closes: #414778. * Czech; closes: #414793. -- Steve Langasek Tue, 13 Mar 2007 16:29:21 -0700 samba (3.0.24-3) unstable; urgency=low [ Christian Perrier ] * Merge some Ubuntu changes: - do not expose the Samba version anymore - default workgroup set to WORKGROUP (default workgroup of Windows workstations) * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch Closes: #394830 * Add commented "winbind enum*" settings in smb.conf This will point users to these important settings which changed their default behaviour between sarge and etch. Closes: #368251 [ Steve Langasek ] * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first time the script is called if the dhcp client was already running at the time of install, and manually reload samba to get the updated config files read. Thanks to Bas Zoetekouw for the patch. Closes: #407408. * While we're at it, use atomic replace for /etc/samba/dhcp.conf just in case someone else reloads samba while the script is running. Low impact, low-risk change. -- Steve Langasek Sun, 11 Mar 2007 23:34:10 -0700 samba (3.0.24-2ubuntu1) feisty; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) * Really drop debian/patches/ubuntu-fix-ldap.patch: - Fixed upstream, see Debian #274155 -- Kees Cook Tue, 6 Feb 2007 20:58:01 -0800 samba (3.0.24-2) unstable; urgency=low * Re-upload with a proper .orig.tar.gz. -- Steve Langasek Mon, 5 Feb 2007 19:55:34 -0800 samba (3.0.24-1) unstable; urgency=high * New upstream release, security update * Fixes for the following security advisories: - Directly affecting Debian: - CVE-2007-0452 (Potential Denial of Service bug in smbd) - Not affecting Debian: - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind NSS library on Solaris) - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin) * Correct paths for the documentation pointers in the default smb.conf file. Thanks to Ted Percival for his care reporting this. Closes: #408898 -- Christian Perrier Mon, 5 Feb 2007 05:27:07 +0100 samba (3.0.23d-4) unstable; urgency=low * Debconf translation updates: - Slovenian added. -- Christian Perrier Wed, 3 Jan 2007 08:43:50 +0100 samba (3.0.23d-3) unstable; urgency=low * Debconf translation updates: - Malayalam added. Closes: #403107 - Tamil added. Closes: #403353 -- Christian Perrier Mon, 1 Jan 2007 10:17:18 +0100 samba (3.0.23d-2ubuntu2) feisty; urgency=low * Rebuild for python2.5 as the default python version. -- Matthias Klose Fri, 12 Jan 2007 13:18:25 +0000 samba (3.0.23d-2ubuntu1) feisty; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) * debian/patches/ubuntu-fix-ldap.patch: - fix LDAP backend, see Ubuntu #1905, Debian #274155 -- Michael Vogt Mon, 18 Dec 2006 13:31:09 +0100 samba (3.0.23d-2) unstable; urgency=low * Build-Conflicts: libfam-dev to avoid problems accessing shares when using GAMIN. Closes: #400617 * Lintian fixes: - Run debconf-updatepo in the clean target to ensure up-to-date PO and POT files - debian/patches/no_unbreakable_spaces_in_man.patch: Replace all non-breakable spaces by regular spaces in man pages. They are encoded in ISO-8859-1 which is not recommended in man pages. This should be submitted upstream. - reformat too long lines in package description -- Christian Perrier Sun, 3 Dec 2006 09:39:29 +0100 samba (3.0.23d-1ubuntu3) feisty; urgency=low * added depends on update-inetd -- Michael Vogt Thu, 14 Dec 2006 18:59:14 +0100 samba (3.0.23d-1ubuntu2) feisty; urgency=low * Remove type-handling from build-deps, it's not in Ubuntu main. (It was already disabled in the rules file. -- Tollef Fog Heen Tue, 12 Dec 2006 14:42:23 +0100 samba (3.0.23d-1ubuntu1) feisty; urgency=low * Merge from debian unstable. * Drop python2.4-samba, replace with python-samba. Added Conflicts/Replaces on python2.4-samba * Drop track-connection-dos.patch, ubuntu-winbind-panic.patch, ubuntu-fix-ldap.patch, ubuntu-setlocale.patch, ubuntu-setlocale-fixes.patch * Remaining Ubuntu changes: - Revert Debian's installation of mount.cifs and umount.cifs as suid - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) - Kept ubuntu-auxsrc.patch: some auxilliary sources (undocumented in previous changelogs) - Set default workgroup to MSHOME -- Andrew Mitchell Tue, 28 Nov 2006 20:14:37 +1300 samba (3.0.23d-1) unstable; urgency=low * new upstream release (2006-11-15) [ Noèl Köthe ] * updated documentation.patch for 3.0.23d * updated non-linux-ports.patch for 3.0.23d * updated adapt_machine_creation_script.patch for 3.0.23d * updated autoconf.patch for 3.0.23d [ Debconf translations ] * Added Bosnian. Closes: #396634 * Added Bulgarian. Closes: #397773 -- Noèl Köthe Thu, 16 Nov 2006 13:55:26 +0100 samba (3.0.23c-4) unstable; urgency=low [ Debconf translations ] * Added Greek. * Added Gujarati. Closes: #394430 * Added Korean. Closes: #394509 * Added Nepali. * Updated Czech (typo fixed). * Added Wolof. Closes: #396079 -- Christian Perrier Sun, 5 Nov 2006 09:42:40 +0100 samba (3.0.23c-3) unstable; urgency=low [ Debconf translations ] * Updated Catalan; thanks to Guillem Jover for his help * Updated Russian. * Updated Spanish. Add a missing word and correct the copyright header * Updated Vietnamese. Closes: #394164 * Added Albanian. Closes: #393777 * Added Chinese (Traditional). * Added Thai. -- Christian Perrier Sat, 21 Oct 2006 10:44:11 +0200 samba (3.0.23c-2) unstable; urgency=low [ Debconf translations ] * Updated Swedish. Closes: #386510. * Updated Japanese. Closes: #386534. * Updated Italian. Closes: #386691. * Updated Romanian. Closes: #388254. * Updated German. Closes: #389072. * Updated Brazilian Portuguese. Closes: #389097. * Updated Basque. Closes: #389722. * Updated Turkish. Closes: #390887 * Updated Danish. Closes: #390878 * Updated German. Closes: #390813 * Updated Simplified Chinese. Closes: #390959 * Updated Arabic. * Updated Spanish. Closes: #391735 * Updated Dutch. Closes: #392082 * Added Slovak. Closes: #386847. * Added Finnish. Closes: #390150. * Added Estonian. Closes: #391102. * Added Norwegian Bokmål. Closes: #391692 * Added Hungarian. Closes: #391746 [ Steve Langasek ] * Change the Maintainer field at last to the mailing list... gives our spam rules some testing, in response to popular demand :) * Check for update-inetd on purge before trying to invoke it; closes: #388606. [ Peter Eisentraut ] * Make swat binNMU-safe by using ${source:Version} for dependency on samba-doc * Make samba-common owner of /var/{cache,log,run}/samba, let samba and winbind only delete files they know they're exclusive owners of. Closes: #370718. * Use python-central to manage installation of python-samba. Closes: #386499. (patch by Patrick Winnertz) * Use upstream makefile to install Python module. * Build-Depend on python-dev instead of python-all-dev. * Removed old upgrade support. * Remove possibly leftover comma from "passdb backend" setting in smb.conf on upgrade. Closes: ##383307. * Added libpam-smbpass logcheck file by martin f krafft. Closes: #391487, #391916. [ Christian Perrier ] * Add LSB info to the init script -- Christian Perrier Thu, 12 Oct 2006 18:31:46 +0200 samba (3.0.23c-1) unstable; urgency=low [ Christian Perrier ] * New upstream version * Split out samba/run_mode with "__Choices". [ Noèl Köthe ] * corrected samba override disparity: samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra. [ Debconf translations ] * Updated Galician. Closes: #383001. * Updated Danish. Closes: #383025. * Added Tagalog. Closes: #383039, #383252. * Updated Khmer. * Updated Arabic. * Updated Dzongkha. Closes: #383125. * Updated Vietnamese. Closes: #383126. * Updated Czech. Closes: #384760. [ Peter Eisentraut ] * Preseed configure result for method to detect interfaces in debian/config.cache; the test might otherwise fail if there are no interfaces configured at build time. Closes: #382429. * Refined panic-action script text. Closes: #382500. -- Noèl Köthe Mon, 04 Sep 2006 12:10:28 +0200 samba (3.0.23b-2) unstable; urgency=low [ Debconf translations ] * Updated Romanian. Closes: #382358 * Updated Dzongkha. Closes: #382448, #382948 * Updated Basque. Closes: #382456 * Added Simplified Chinese. Closes: #382489 [ Peter Eisentraut ] * Remove no longer functioning "guest" value from "passdb backend" setting in smb.conf on upgrade. Closes: #382296 [ Steve Langasek ] * Drop code and debconf questions specific to upgrades from samba <= 2.2. * Reword some debconf translations as discussed on the list. * Rerun debconf-updatepo. * Switch debian/ca.po to UTF-8. * Restore some reverted strings for Galician, Czech, Brazilian Portuguese, Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese. * Update translations for Brazilian Portuguese, Spanish, French, Italian, Catalan, and Portuguese. -- Peter Eisentraut Mon, 14 Aug 2006 19:04:31 +0200 samba (3.0.23b-1) unstable; urgency=low * New upstream release [ Debconf translations ] * Updated Galician. Closes: #381988 -- Noèl Köthe Tue, 08 Aug 2006 22:28:00 +0200 samba (3.0.23a-1) unstable; urgency=medium * New upstream release * Fixes the following Debian bugs: - winbind: panic()s when started outside of a domain context. Closes: #337070 - Make smbclient -L use RPC to list shares, fall back to RAP. Closes: #168732 - Potential hang in nmbd. Upstream bug #3779. Closes: #367472 - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780). Closes: #367507 - Erroneous permissions checks after 3.0.10 -> 3.0.14a (upstream #2591). Closes: #307626 - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070 - ImportError exception raised when trying to import samba.smb (upstream #3567). Closes: #350050 - Changed references from pam_pwdb to pam_unix (upstream #3225). Closes: #206672 - SWAT segfault (upstream #3702). Closes: #363523 [ Adam Conrad ] * Fix typo in smb.conf that causes all samba apps to whine. Closes: #369782 * Add myself to Uploaders, on the off chance that I might upload. [ Debconf translations ] * Add Galician translation of debconf templates. Closes: #361204, #369403 * Add Basque translation of debconf templates. Closes: #375104 * Add Romanian translation of debconf templates. Closes: #379246 * Add Khmer translation of debconf templates. Closes: #381833 * Add Dzongkha translation of debconf templates. * Updated Russian. Closes: #369375 * Updated Czech. Closes: #369408 * Updated Japanese. Closes: #369457 * Updated Italian. Closes: #369587 * Updated Swedish. Closes: #369730 * Updated Dutch. Closes: #376515 * Updated Vietnamese. Closes: #381557 * Updated French. * Updated Brazilian. * Updated Portuguese. Closes: #372632 * Updated Arabic. [ Christian Perrier ] * Add dependency on procps for samba, as ps is used in init scripts. Thanks to Bastian Blank for reporting. Closes: #365618 * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's Reference * Add support for /etc/default/winbind. Closes: #262313, #374411 Thanks to Guido Guenther for the old patch and to Jérôme Warnier for reminding us about it. * Compile with --with-cifsmount which is now needed to properly compile mount.cifs and umount.cifs. See samba bug #3799 [ Peter Eisentraut ] * Use debian/compat instead of DH_COMPAT * Updated Standards-Version to 3.7.2 (no changes needed) * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the required ldconfig calls appear in the maintainer scripts * Adjusted debian/rules to get 3.0.23rc1 to build * Updated to debhelper level 5 * Rearranged dh_strip calls so that build succeeds with DEB_BUILD_OPTIONS=nostrip. Closes: #288995 * Create /var/spool/samba and use it as default printer spool. Closes: #275241 * Made winbind init script more careful about returning proper exit code * Added winbindd_priv group as owner of winbindd_privileged directory. Closes: #307257 * Python transition preparations: renamed package to python-samba, removed hardcoded references to Python version 2.3. Closes: #380939 * Removed unwanted swat debconf warning * Put localized swat messages into /usr/share/samba, where swat looks for them. Closes: #376991 -- Peter Eisentraut Mon, 7 Aug 2006 23:00:49 +0200 samba (3.0.22-1ubuntu4) edgy; urgency=low * SECURITY UPDATE: Remote DoS. * Add debian/patches/track_connection_dos.patch: - Limit active connections to 2048 to avoid DoS due to unbound array growing when tracking active connections. - CVE-2006-3403 -- Martin Pitt Tue, 11 Jul 2006 13:14:27 +0200 samba (3.0.22-1ubuntu3) dapper; urgency=low * Config file changes only in this upload; no destabilising code changes. * Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) * Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. * Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. -- Adam Conrad Wed, 17 May 2006 18:29:00 +1000 samba (3.0.22-1ubuntu2) dapper; urgency=low * After much faff about fixing this properly and getting fixes submitted upstream (some of which has happened), I've concluded that getting every case_tables usage in the code nailed down before release just isn't going to happen, so applying a more global bandaid (ubuntu-setlocale-fixes.patch) instead to stop the SEGVs completely (closes: launchpad.net/{39990,39484,39956}) * Snag a patch from upstream SVN to stop winbindd from panicking when not joined to a domain (closes: launchpad.net/32614) * Mangle patch fuzz for previous patch to make it apply cleanly. -- Adam Conrad Tue, 16 May 2006 22:36:17 +1000 samba (3.0.22-1ubuntu1) dapper; urgency=low * Sync with Debian's new upstream (UVF exception granted by mdz) to resolve the information disclosure vuln reported in CVE-2006-1059 * Make the panic-action script check for 'mail' before it goes about trying to backtrace crashes and mail to root (launchpad.net/32987) * Include patch from upstream to purge setlocale calls from the client library, so we don't break the desktop locale (launchpad.net/28603) * Make the samba and winbind init scripts more robust in the face of a tmpfs /var/run, creating directories as we go (launchpad.net/33389) * Fix up syntax error in the default config file (launchpad.net/37965) -- Adam Conrad Sun, 2 Apr 2006 22:09:41 +1000 samba (3.0.22-1) unstable; urgency=medium [ Steve Langasek ] * New upstream release - CAN-2006-1059: fixes an information leak in logfiles of systems using winbind with log level >= 5. * Fix a typo in the default smb.conf (closes: #354495). [ Noèl Köthe ] * replacing SMB with SMB/CIFS in the descriptions like named on the samba.org webpage. Closes: #356335 -- Steve Langasek Sun, 12 Mar 2006 22:40:28 +0100 samba (3.0.21c-1ubuntu1) dapper; urgency=low * Merge with Debian for new upstream bugfixes, UVF exception by mdz. * Remove dapper->dapper upgrade hack, which should be a non-issue now. -- Adam Conrad Fri, 24 Mar 2006 02:59:17 +1100 samba (3.0.21c-1) unstable; urgency=low * New upstream release * add a few logon-related parameters as good and safe examples for *DC-type settings. Closes: #349051 * add an example "add user script". Closes: #349050 * drop outdated information from the smbfs package description Closes: #352828 -- Christian Perrier Sat, 25 Feb 2006 11:58:45 +0100 samba (3.0.21b-1ubuntu2) dapper; urgency=low * Due to a misplaced file in older samba packages, temporarily make python2.4-samba Replace samba for smooth dapper->dapper upgrades. -- Adam Conrad Thu, 23 Feb 2006 20:33:34 +1100 samba (3.0.21b-1ubuntu1) dapper; urgency=low * Sync with Debian's new upstream release (UVF exception granted by Colin), which fixes several nasty crashes, as well as a vicious memory leak in winbind that can OOM a machine within days (Closes: launchpad.net/32440) * Resolve some fairly scary merge conflicts from Debian's switch to quilt. * Revert Debian's installation of mount.cifs and umount.cifs as suid until Martin Pitt and I have had a chance to review/discuss this for Ubuntu. -- Adam Conrad Thu, 23 Feb 2006 15:23:37 +1100 samba (3.0.21b-1) unstable; urgency=low * The "Tridge" release: celebrates the 2005 Free Software Award winner * New upstream release * Upstream bugs fixed by the new upstream release: - Support changing expired passwords in pam_winbindd. Closes: #258302 - vfs_full_audit fixes for multiple connections. Closes: #348419 - crashes of smbd in security=server mode Closes: #346045, #346069, #350598, #351448 [ Peter Eisentraut ] * Put correct paths for Debian installations into the man pages, and remove outdated swat setup instructions therein. Closes: #321005 * Fix lintian overrides and install them into the right packages. * Remove swat inetd registration in remove, not purge. Closes: #313214 * Add findsmb script. Closes: #231806 * Fix sonames of libnss_win{bind,s}.so. Closes: #333290 * Remove autoconf build dependency. * Remove remnants of old patch system. * Install smbumount setgid root. Closes: #253437 * Add watch file. * Activate kernel oplocks. Closes: #218511 * Disable PIE compilation. Closes: #346416 [ Christian Perrier ] * activate building of idmap_rid. Closes: #284681. Thanks to Ubuntu patches * activate building of idmap_ad. Closes: #341814 * modify the long description of the libsmbclient-dev package to avoid repeating the long description. Thanks, linda. [ Steve Langasek ] * Also enable setresuid()/setresgid() on alpha and sparc now that support for Linux 2.2 is dropped. -- Christian Perrier Mon, 6 Feb 2006 07:02:20 +0100 samba (3.0.21a-4) unstable; urgency=low [ Peter Eisentraut ] * Add umount.cifs. Closes: #340967 * Really make mount.cifs and umount.cifs suid root. Closes: #340966 [ Christian Perrier ] * Add "bind interfaces only" and "interfaces" options (commented) to the default smb.conf file. Closes: #349043 [ Steve Langasek ] * Add missing changes to source/include/config.h.in into the autoconf.patch, so that samba looks for files in /var/lib/samba like it's supposed to instead of in /var/run/samba! Closes: #349372, #349464. -- Steve Langasek Mon, 23 Jan 2006 00:59:20 -0800 samba (3.0.21a-3) unstable; urgency=low * Add Build-Depends on quilt (>= 0.40 as we use quilt.make) -- Christian Perrier Sat, 21 Jan 2006 23:02:32 +0100 samba (3.0.21a-2) unstable; urgency=low [ Christian Perrier ] * Switch to quilt for patches management. Refresh all patches so that they apply cleanly. Closes: #345557 * debian/patches/adapt_machine_creation_script.patch: - adapt example machine creation script to Debian. Closes: #346234 * winbind.dirs: - added /var/run/samba. Closes: #347585 [ Peter Eisentraut ] * swat.links: - file added. Closes: #346001 [ Noèl Köthe ] * fixed typo in panic-script. Closes: #348410 [ Steve Langasek ] * debian/patches/autoconf.patch: - move changes to autogenerated files into their own patch now that we've lost the script that was calling autogen.sh for us; this also helps make debian/rules clean just a little bit cleaner. * debian/patches/fhs.patch: - fix new references to registry.tdb (closes: #348874). - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba where they belong -- Christian Perrier Fri, 20 Jan 2006 14:20:35 +0100 samba (3.0.21a-1ubuntu1) dapper; urgency=low * Resyncronise with Debian, resolving many merge conflicts (#20710) * Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. * Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * Enable the idmap_rid.so backend plugin for winbind (Ubuntu #12797) -- Adam Conrad Tue, 3 Jan 2006 13:56:26 +1000 samba (3.0.21a-1) unstable; urgency=low [ Christian Perrier ] * *Really* make samba-doc suggest samba-doc-pdf. This change finally did not make it in the previous release. [ Noèl Köthe ] * new upstream release 3.0.21a - removed smbsh.1 from debian/rules - added new smbclient programm smbget (with conflict/replace to existing Debian smbget package) - added libsmbclient.7 to libsmbclient package - added umount.cifs.8 to smbfs package - added pam_winbind.7 to winbind package - added new /usr/bin/eventlogadm to samba package which is documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt - fixed "cd command fails in smbclient". Closes: #307535 - fixed "file descriptor leak". Closes: #339564 - fixed "smbclient(1) doesn't list same options as smbclient usage statement". Closes: #154184 - fixed "typo in smbmount.8". Closes: #260673 - fixed "smbmount manual page doesn't have a link to smbumount". Closes: #297535 - fixed "smb.conf man page references non-existent BROWSING.txt file". Closes: #316458 - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480 - fixed "fails to manage groups containing spaces". Closes: #299592 - corrected nonpic-libsmbclient.patch to apply - corrected fhs.patch to apply * added myself to Uploaders * Rewording of the panic action script. Closes: #335051 * added missing swat translation to swat package -- Noèl Köthe Sun, 01 Jan 2006 12:45:33 +0100 samba (3.0.20b-4) unstable; urgency=low [ Christian Perrier ] * Remove the smbldap-tools-* directory from the examples of samba-doc as these tools exist as an independent package. Closes: #341934 * Swedish debconf translation update. Closes: #342022 * Preserve the local admin settings for run_mode in /etc/default/samba when upgrading. Closes: #234038, #267988, #269735 * Winbind also must depend on lsb-base. Closes: #343379 * Enable swat in inetd when installing it and remove it when uninstalling. Closes: #87905, #230936, #268429 [ Peter Eisentraut ] * Added separate samba-doc-pdf package, suggested by samba-doc. Closes: #281971 * Removed duplicate documentation in swat package, symlinked to samba-doc; swat now depends on samba-doc. Closes: #233447 -- Christian Perrier Tue, 20 Dec 2005 17:08:20 +0100 samba (3.0.20b-3) unstable; urgency=low [ Steve Langasek ] * Drop the FHS transition code from the samba postinst, since it's not needed for upgrades from sarge (and most of it not for upgrades from woody). [ Noèl Köthe ] * libpam-smbpass dependency on samba-common Closes: #297923 * Updated swedish debconf translation. Closes: #335784 * Added Recommends: smbldap-tools. Closes: #227675 [ Peter Eisentraut ] * Added doc-base support. Closes: #55580 * Fixed dh_installexamples call so the debian/*.examples files are actually used. * Patched libpam-smbpass README to refer to examples directory. Closes: #215771 [ Christian Perrier ] * Add a working passwd chat line to the default smb.conf file Closes: #269746 * Add the profiles binary and man page to the shipped files. Closes: #225494 * Add a dependency on samba-common for winbind and force versions to match Closes: #273007, #264855 * Add /var/log/samba to winbind directories. Closes: #340833 * Lintian cleaning: - Add a few lintian overrides to avoid lintian complaining for things done on purpose or just because it makes wrong assumptions - Corrected FSF address in debian/copyright - Make swat depend on netbase as it uses update-inetd in its postinst script - Correct shebang lines in config scripts - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc - Minor correction in libsmbclient-dev description to avoid strictly repeating the short description in the long description - Call confmodule in swat.postinst as this is the only way to guarantee that the config script is run in all cases -- Christian Perrier Sat, 3 Dec 2005 07:30:40 +0100 samba (3.0.20b-2ubuntu1) dapper; urgency=low * Resynchronise with Debian. -- Michael Vogt Mon, 14 Nov 2005 11:11:28 +0100 samba (3.0.20b-2) unstable; urgency=low * Don't build with -gstabs any more; -g no longer gives a problematic size hit, and -gstabs is no longer supported on ia64. -- Steve Langasek Wed, 19 Oct 2005 19:02:44 -0700 samba (3.0.20b-1) unstable; urgency=low * Christian Perrier: - Debconf translations: - Added Vietnamese. Closes: #317876 - Updated German. Closes: #322907 * Steve Langasek: - Use ${misc:Depends} in debian/control instead of depending on debconf directly, allowing use of cdebconf as an alternative. Closes: #332088. * Noèl Köthe - corrected libsmbclient priority to optional. Closes: #310045 - corrected the path of ServerType.html in smb.conf. Closes: #296500 - updated Standards-Version to 3.6.2 (no changes needed) - added homepage to description - switched init scripts (samba and winbind) to lsb-functions (took patches from ubuntu) - added Swedish. Closes: #331437 - removed outdated "guest" value in "passdb backend" in default smb.conf Closes: #289519 - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8) is; Replaces: all previous versions of samba. Closes: #253603 - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515 - support for Windows Vista. Closes: #323489 - Mac OS Tiger Problem fixed. Closes: #309836 - BUG 2688: re-implement support for the -P (--port) option. Closes: #307746 - "man smb.conf" warnings fixed. Closes: #266320 - testprns removed by upstream so removed in samba.files - corrected docs/*.pdf names (samba-doc.docs) - corrected diagnosis.html path (samba.docs) - removing patches which are included upstream: dos7-xcopy-always-copies-files.patch (* BUG 2622: Remove DPTR_MASK as it makes no sense.) hide-special-file-fix.patch (* Hide dot files and directory logic fixes.) rap-printing-bigendian.patch (* BUG 1998: Correct byte ordering bug when storing 16-bit RAP print job ids.) smbclient-vfat-loop.patch smbclient-vfat-loop2.patch (* BUG 2698: Fix infinite listing loop in smbclient caused by an invalid character set conversion.) - fixed the following patches which didn't applied cleanly fhs.patch non-linux-ports.patch -- Steve Langasek Tue, 18 Oct 2005 19:02:21 -0700 samba (3.0.14a-6ubuntu1) breezy; urgency=low * Resynchronise with Debian, resolving merge conflicts (#12360) -- Adam Conrad Thu, 21 Jul 2005 17:53:23 +0000 samba (3.0.14a-6) unstable; urgency=low * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9; add a versioned build-depend accordingly. Closes: #315955 * Switch to libreadline5. -- Steve Langasek Fri, 1 Jul 2005 00:13:12 -0700 samba (3.0.14a-5ubuntu1) breezy; urgency=low * Resynchronise with Debian (closes Ubuntu bugs #11662 and #3134) * Add --oknodo to the start-stop-daemon call in our init script, so we don't fail when trying to start an already started service (#11600) -- Adam Conrad Wed, 29 Jun 2005 05:58:13 +0000 samba (3.0.14a-5) unstable; urgency=low * Fix libsmbclient.a to be built as non-PIC instead of PIC. Closes: #279243. -- Steve Langasek Wed, 8 Jun 2005 05:46:52 -0700 samba (3.0.14a-4ubuntu1) breezy; urgency=low * Resynchronise with Debian, resolving merge conflicts. -- Adam Conrad Fri, 3 Jun 2005 05:45:34 +0000 samba (3.0.14a-4) unstable; urgency=high * Last-minute upload for sarge, because I don't listen to anything that RM guy says * Patch smbmount to strip CAP_UNIX out of the capabilities passed to the kernel when uid, gid, dmask, or fmask options have been specified; this keeps the mount permissions from changing out from under the user when upgrading to a server (or to a kernel) that supports unix extensions. Closes: #310982. * Second patch to smbclient search continuation logic, from upstream: preserve the original UCS2 filename to guard against lossy conversions, and break out if we find ourselves looping. Closes: #311157. * Upstream fix to make print job cancellations work on big-endian systems when talking to RAP-style clients (i.e., smbclient). Closes: #311213. * Add build-dependency on libpopt-dev, so that we consistently use the system popt lib instead of the bundled one. -- Steve Langasek Thu, 2 Jun 2005 07:02:46 -0700 samba (3.0.14a-3ubuntu3) breezy; urgency=low * Use -g instead of -gstabs on powerpc64-linux-gnu and ia64-linux-gnu, which should finally fix that pesky ia64 build failure. -- Adam Conrad Sat, 28 May 2005 08:41:21 +0000 samba (3.0.14a-3ubuntu2) breezy; urgency=low * Reverse the sense of LaMont's dpkg-architecture patch to minimise our diff against upstream and get us building on ia64 again. -- Adam Conrad Sat, 28 May 2005 07:12:39 +0000 samba (3.0.14a-3ubuntu1) breezy; urgency=low * Resynchronise with Debian (Ubuntu #10966) * Give winbind a dependency on samba-common (Ubuntu #9156) -- Adam Conrad Fri, 27 May 2005 15:39:48 +0000 samba (3.0.14a-3) unstable; urgency=high * Urgency set to high for a bug that makes smbclient/libsmbclient /almost/ mostly unusable * Fix smbclient's search continuation logic so that it works correctly against 2K servers offering VFAT-hosted shares; many thanks to Jeremy Allison for the timely upstream fix. Closes: #309798. * Update pt_BR debconf translation. Thanks to Andre Luis Lopes . (closes: #308510) * Add Russian debconf translation, thanks to Yuriy Talakan . (closes: #310063) -- Steve Langasek Thu, 26 May 2005 23:37:57 -0700 samba (3.0.14a-2) unstable; urgency=low * Point the sense of the file_is_special() check right way around; thanks to Matthijs Mohlmann for catching this. Closes: #305747. * debian/patches/dos7-xcopy-always-copies-files.patch: Fix the MS-DOS 7 XCOPY copying files over and over bug Closes: #309003 * Steve Langasek : - Add Christian Perrier to Uploaders:. Thanks, Christian :) -- Steve Langasek Sun, 8 May 2005 04:43:21 -0700 samba (3.0.14a-1ubuntu2) breezy; urgency=low * dpkg changes cleanup. -- LaMont Jones Mon, 23 May 2005 21:55:07 -0600 samba (3.0.14a-1ubuntu1) breezy; urgency=low * Resynchronise with Debian; fixing merge conflicts. * Drop patches/gcc4-fix.patch, which was fixed differently upstream. * Remove patches/krb.patch, which was integrated upstream. * Drop patches/samba-client-no-auto-anon.patch, included upstream. * Disable the use of type-handling, which we don't ship in main. -- Adam Conrad Thu, 12 May 2005 07:01:56 +0000 samba (3.0.14a-1) unstable; urgency=low * New upstream version - A more complete upstream fix for missing files in file listings, should really give us working (closes: #302771); drop xp-missing-files.patch, which has been superseded. * Use the right path when removing mount.cifs binary in the clean target. Closes: #303318. -- Steve Langasek Mon, 18 Apr 2005 03:22:29 -0700 samba (3.0.11-1) unstable; urgency=high * New upstream version - Fixes duplicated entry in swat(8) manpage (closes: #292957). - Fix queue handling so that processes serving print clients don't spin off into infinity and clobber the system (closes: #274969). - Make sure we use C-locale toupper/tolower functions for case conversion, since Turkish pairing rules are incompatible (closes: #286174). * Fix logrotate script to exit true instead of false when nmbd.pid is missing (closes: #287263). * Added Portuguese debconf translation. Thanks to Miguel Figueiredo . (closes: #286375) * Added Italian debconf translation. Thanks to Luca Monducci . (closes: #284125) * Add support for building on the Debian BSD and Hurd ports; thanks to Robert Millan for the patch. (closes: #266693) * debian/patches/xp-missing-files.patch: import patch from upstream to fix missing entries in directory listings when talking to WinXP servers (closes: #297771). -- Steve Langasek Wed, 23 Mar 2005 00:13:16 -0800 samba (3.0.10-1ubuntu4) breezy; urgency=low * debian/patches/gcc4-fix.patch: Fix FTBFS with gcc 4.0. (#9047) -- Martin Pitt Fri, 15 Apr 2005 09:14:57 +0000 samba (3.0.10-1ubuntu3) hoary; urgency=low * debian/patches/krb.patch: - patch to use kerberos by default if the authentication succeeds, but fall back to the normal methods if not. Fix the kerberos support for gnomevfs (Hoary: #7357). -- Sebastien Bacher Tue, 22 Mar 2005 12:43:19 +0100 samba (3.0.10-1ubuntu2) hoary; urgency=low * debian/patches/samba-client-no-auto-anon.patch: - propogate an error back to the caller, instead of automatic Guest login (Hoary: #5425). -- Sebastien Bacher Sun, 23 Jan 2005 14:06:48 +0100 samba (3.0.10-1ubuntu1) hoary; urgency=low * Merged new Debian version * Dropped patch ubuntu-debconfpo.patch, it did not actually change anything * Since the debian/ directory now contains Ubuntu specific changes anyway, the following Ubuntu specific patches which only touched debian/ were statically applied and deleted; this will make manual merges much harder, but is apparently what my fellow developers like to have: + ubuntu-debconf-dhcp3.patch + ubuntu-defaultworkgroup.patch + ubuntu-lsbinit.patch + ubuntu-smbmount-nosuid.patch + ubuntu-branding.patch (only the debian/ parts; dropped unnecessary version.h patch) -- Martin Pitt Wed, 5 Jan 2005 14:03:21 +0100 samba (3.0.10-1) unstable; urgency=high * New upstream release. - CAN-2004-1154: integer overflow can lead to remote code execution by authenticated users; closes: #286023. * High-urgency upload for sarge-targetted RC bugfix. * Sync the fhs.patch to samba 3.0.10. * Install mount.cifs suid root, to make user mounts possible (closes: #283819). * debian/patches/cups.patch: Change the default printing system, so we can compile in CUPS support without making it the default -- CUPS is not a reasonable default on Debian, at least for sarge. -- Steve Langasek Fri, 17 Dec 2004 11:56:01 -0800 samba (3.0.9-1ubuntu2) hoary; urgency=low * Build python2.4-samba package. -- Matthias Klose Thu, 16 Dec 2004 13:44:41 +0100 samba (3.0.9-1ubuntu1) hoary; urgency=low * Resynchronise with Debian. -- Scott James Remnant Sat, 04 Dec 2004 12:48:02 +0000 samba (3.0.9-1) unstable; urgency=low * New upstream release - Fixes Win9x printing; closes: #283530, #282571, #283818. - Fixes a problem with setting dosmodes on filesystems without ACL support; closes: #283661. - Drop ldapsam_compat.patch, redundant now that a fix is integrated upstream -- Steve Langasek Thu, 2 Dec 2004 01:11:39 -0800 samba (3.0.8-2ubuntu1) hoary; urgency=low * Resynchronise with Debian. -- LaMont Jones Mon, 22 Nov 2004 20:55:18 -0700 samba (3.0.8-2) unstable; urgency=low * Fix the module paths for python2.3-samba so that "import foo from samba" works, and include the __init__.py glue; closes: #222867). * Enable quota support; closes: #246839. * Fix missing symbols in libsmbclient (and libnss_wins), and add -Wl,-z,defs to the libsmbclient link options to prevent future instances of undefined symbols (closes: #281181). * Fix for the legacy ldapsam_compat backend; thanks to Fabien Chevalier for the patch (closes: #274155). -- Steve Langasek Mon, 15 Nov 2004 06:54:13 -0800 samba (3.0.8-1ubuntu1) hoary; urgency=low * SECURITY UPDATE: new upstream version fixes CAN-2004-0882 (QFILEPATHINFO unicode filename buffer overflow). * Manual merge with the Debian version. * Reorganized the Ubuntu changes as proper patches prefixed with ubuntu- to ease further merges: - ubuntu-auxsrc: some auxilliary sources (undocumented in previous changelogs) - ubuntu-branding: put "Ubuntu" everywhere :-) - ubuntu-debconf-dhcp3: undocumented debconf magic - ubuntu-debconfpo: updated da, tr, pt_br debconf translations - ubuntu-defaultworkgroup: set debconf default workgroup to "MSHOME" - ubuntu-fix-ldap: fix LDAP backend, see Ubuntu #1905, Debian #274155 - ubuntu-lsbinit: nice init scripts - ubuntu-smbmount-nosuid: don't install smbmount and smbumount suid root * All other patches have been adopted by Debian/Upstream. -- Martin Pitt Thu, 18 Nov 2004 12:20:48 +0100 samba (3.0.8-1) unstable; urgency=high * New upstream package. Urgency set to "high" because of a potential Denial of Service vulnerability in previous 3.0.x releases (CAN-2004-0930). (Eloy) * Introduce new -dbg package, so we can make better sense out of the cleverly-supplied backtrace emails. (Vorlon) * Applied patch from Luke Mewburn to fix missing lock_path() to state_path() change in the FHS patches. (Eloy) -- Eloy A. Paris Mon, 8 Nov 2004 13:39:34 -0500 samba (3.0.7-2ubuntu1) hoary; urgency=low * Resynchronise with Debian. * Deleted source/autom4te.cache/ to clean up the debian diff.gz. -- Martin Pitt Thu, 11 Nov 2004 12:22:59 +0100 samba (3.0.7-2) unstable; urgency=high * High-urgency upload for sarge-targetted RC fixes. * Use autogen.sh in unpatch-source as well as in patch-source, to get rid of the autom4te.cache cruft. * debian/patches/make-distclean.patch: add some missing files to the distclean target in source/Makefile.in (mostly-fixes: #276203). * Change compile-time default of 'use sendfile' to 'no', since the current Samba implementation is broken (closes: #261917, #275741, #270175). * Add mount.cifs into the smbfs package; thanks to Igor Belyi for showing us just how simple this patch should be. ;) Since cifs is the preferred kernel driver in 2.6, bugs related to smbfs and 2.6 are considered closed unless someone can show that they exist with the cifs driver as well (closes: #249890, #269443, #227791, #236869, #260707, #261808, #270175). * Fix FHS migration code so that it only affects upgrades from old package versions, and doesn't cause us to mess with non-standard directories that may have been re-added by the admin (closes: #251858). -- Steve Langasek Tue, 26 Oct 2004 01:35:23 -0700 samba (3.0.7-1ubuntu7) hoary; urgency=low * SECURITY UPDATE for Hoary. See previous changelog. -- Martin Pitt Tue, 9 Nov 2004 23:56:27 +0100 samba (3.0.7-1ubuntu6.1) warty-security; urgency=low * SECURITY UPDATE: fix potential remote Denial of Service * Added patch CAN-2004-0930: A remote attacker could cause and smbd process to consume abnormal amounts of system resources due to an input validation error when matching filenames containing wildcard characters. * References: CAN-2004-0930 http://www.securityfocus.com/archive/1/380551 -- Martin Pitt Mon, 8 Nov 2004 19:34:54 +0100 samba (3.0.7-1ubuntu6) warty; urgency=low * Added patch prefer_device_uri: change smbspool to prefer DEVICE_URI over argv[0] to make printing work with the CUPS changes for CAN-2004-0923 (this removed authentication tokens from argv[0]). (Warty bug #2389) -- Martin Pitt Fri, 15 Oct 2004 12:31:58 +0200 samba (3.0.7-1ubuntu5) warty; urgency=low * Set server string = %h (Samba, Ubuntu). (Closes: #1761). -- Matthias Klose Sat, 2 Oct 2004 12:56:44 +0200 samba (3.0.7-1ubuntu4) warty; urgency=low * Apply patch from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=274155 to fix ldap backend. (Closes: #1905/#274155) -- Fabio M. Di Nitto Thu, 30 Sep 2004 05:33:12 +0200 samba (3.0.7-1ubuntu3) warty; urgency=low * Apply patch from https://bugzilla.ubuntu.com/show_bug.cgi?id=1805 and start shipping mount.cifs. (Closes: #1805/#227791) * Set sendfile default to no, reverting upstream change: svn diff -r 1262:1312 \ svn://svnanon.samba.org/samba/trunk/source/param/loadparm.c (Closes: #1433/#261917) -- Fabio M. Di Nitto Wed, 29 Sep 2004 11:06:54 +0200 samba (3.0.7-1ubuntu2) warty; urgency=low * debian/samba-common.conf: Fix uncommented 'fi' -- Jeff Waugh Tue, 14 Sep 2004 09:57:03 +1000 samba (3.0.7-1ubuntu1) warty; urgency=low * Merge Ubuntu changes from 3.0.6-3ubuntu4 * New upstream closes (Warty #1199) CAN-2004-0807 and CAN-2004-0808 -- Thom May Mon, 13 Sep 2004 19:56:19 +0100 samba (3.0.7-1) unstable; urgency=high * New upstream release. This release fixes two possible denial of service conditions; one in nmbd and one in smbd. The CVE numbers for these vulnerabilities are: CAN-2004-0807 for the smbd DoS CAN-2004-0808 for the nmbd DoS Urgency is set to "high" because of these vulnerabilities; so this new release propagates to testing ASAP. Thanks to the Samba Team and the Debian Security Team for the heads up. * Remove post-3.0.6 patches that are now in 3.0.7. -- Eloy A. Paris Mon, 13 Sep 2004 00:53:38 -0400 samba (3.0.6-4) unstable; urgency=low * Update LDAP schema (closes: #269797). * Applied a couple of upstream fixes that will be present in Samba 3.0.7. -- Eloy A. Paris Tue, 7 Sep 2004 15:28:42 -0400 samba (3.0.6-3ubuntu4) warty; urgency=low * Change 3.0.6-Debian to 3.0.6-Ubuntu. (Closes: #1185) (debian/patches/VERSION.patch) -- Fabio M. Di Nitto Mon, 13 Sep 2004 10:44:28 +0200 samba (3.0.6-3ubuntu3) warty; urgency=low * debian/winbind.init,samba.init: prettified initscripts * debian/control: versioned depend on lsb-base -- Nathaniel McCallum Fri, 10 Sep 2004 13:43:24 -0400 samba (3.0.6-3ubuntu2) warty; urgency=low * Fix duplicate attribute numbers in example LDAP schema (Warty #1070). -- Daniel Stone Wed, 8 Sep 2004 23:16:29 +1000 samba (3.0.6-3ubuntu1) warty; urgency=low * Merge Ubuntu changes from 3.0.5-1ubuntu2 * New upstream release fixes Warty#676, fixing compatibility with WinXP SP2 -- Matt Zimmerman Thu, 26 Aug 2004 12:36:42 -0700 samba (3.0.6-3) unstable; urgency=low * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704) -- Eloy A. Paris Wed, 25 Aug 2004 01:58:37 -0400 samba (3.0.6-2) unstable; urgency=low * Added Danish debconf translation. Thanks to Claus Hindsgaul . (closes: #232884) -- Eloy A. Paris Mon, 23 Aug 2004 17:24:19 -0400 samba (3.0.6-1) unstable; urgency=low * New upstream version. * Incorporate Turkish debconf translation; thanks to Recai Oktas . (closes: #252031) * Update pt_BR debconf translation. Thanks to Andre Luis Lopes . (closes: #208113) -- Eloy A. Paris Mon, 23 Aug 2004 12:34:44 -0400 samba (3.0.5-2) unstable; urgency=high * Patches from Fabien Chevalier to fix: + libnss_wins crashes other programs (closes: #252591) + Can't list share files/dirs, but can acces deeper files/dirs (closes: #264572) + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871) * Urgency "high" to make it into testing as soon as possible since at least #265871 is pretty bad now that WinXP SP2 has been released. Thanks for the help Fabien! Both Vorlon and I have been very busy lately. -- Eloy A. Paris Wed, 18 Aug 2004 13:25:41 -0400 samba (3.0.5-1ubuntu2) warty; urgency=low * Don't install smbmnt and smbumount suid root since GNOME does not require it (it uses libsmbclient) -- Martin Pitt Tue, 10 Aug 2004 17:46:25 +0200 samba (3.0.5-1ubuntu1) warty; urgency=low * Port of warty specific changes from previous version. * Set default WORKGROUP to MSHOME. (debian/samba-common.templates) * Set WINS settings priority to medium. (debian/samba-common.config) -- Fabio M. Di Nitto Fri, 23 Jul 2004 07:35:14 +0200 samba (3.0.5-1) unstable; urgency=high * New upstream version. Urgency "high" because of potential buffer overflows. The security fixes are the only difference between 3.0.4 and 3.0.5. -- Eloy A. Paris Thu, 22 Jul 2004 08:07:36 -0400 samba (3.0.4-5) unstable; urgency=low * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4), not an unversioned libcupsys2-dev. (closes: #250523) -- Eloy A. Paris Tue, 25 May 2004 07:43:54 -0400 samba (3.0.4-4) unstable; urgency=low * Rebuilt with libcupsys2-gnutls10 for unstable. Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736 Closes: #250742, #250733 -- Eloy A. Paris Mon, 24 May 2004 22:32:52 -0400 samba (3.0.4-3) unstable; urgency=low * Color me stupid; I uploaded an experimental version to unstable. -- Eloy A. Paris Sat, 22 May 2004 00:40:58 -0400 samba (3.0.4-1) unstable; urgency=low Eloy: * New upstream version. Closes: #247640 (New upstream version available) Closes: #238905 (Printing crash fix) Closes: #247090 (panic in viewing printerqueue) Vorlon: * Incorporate Catalan debconf translations; thanks to Aleix Badia i Bosch and the Debian L10n Catalan Team. (closes: #236640) * Incorporate Czech debconf translations; thanks to Miroslav Kure (closes: #236274). * Update libsmbclient shlibs, due to an incompatibility with older versions that prevents gnome-vfs from working correctly (closes: #245869). -- Eloy A. Paris Fri, 21 May 2004 11:42:19 -0400 samba (3.0.2a-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Tue, 24 Feb 2004 10:30:47 -0500 samba (3.0.2-2) unstable; urgency=high * Apply patch from Urban Widmark to prevent users from mounting remote filesystems containing suid files (closes: 232327). This represents an exploitable security hole on systems running Linux 2.6 kernels. -- Steve Langasek Thu, 12 Feb 2004 21:38:40 -0600 samba (3.0.2-1) unstable; urgency=high * New upstream release. - LaMont Jones: correct false failure LFS test that resulted in _GNU_SOURCE not being defined (thus resulting in strndup() not being defined) (closes: #226694) - Segfault fixes. (closes: #230012) (maybe more, but we need bug reporters to confirm.) Urgency "high" due to a password initialization bug that could grant an attacker unauthorized access to a user account created by the mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and workarounds for those not wishing to upgrade (which is a bad idea anyway since this new release fixes lots of other bugs.) -- Eloy A. Paris Sun, 8 Feb 2004 10:06:29 -0500 samba (3.0.1-2) unstable; urgency=low * Include ntlm_auth's man page. * Don't create directories outside of the source directory during package build time. (closes: #227221, #227238, #225862) * Don't include the "Using Samba" book in the swat package, just a symlink that points to the book included in the samba-doc package. -- Eloy A. Paris Tue, 13 Jan 2004 13:48:13 -0500 samba (3.0.1-1) unstable; urgency=low * New upstream version (closes: #225565) * Add support in the dhcp hook for netbios scope, and handle better the case of multiple DHCP-using interfaces (closes: #224109). * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant tail works. Thanks to Paul Eggert . * Include /usr/bin/ntlm_auth in the winbind package. * Run configure with "--with-piddir=/var/run/samba" since the default got changed to /var/run in this new upstream version. -- Eloy A. Paris Tue, 30 Dec 2003 16:21:31 -0500 samba (3.0.0final-1) unstable; urgency=low * It's here, it's here, it's here, Samba 3.0.0 is here! * Incorporate Japanese debconf translations; thanks to Kenshi Muto . (closes: #209291) -- Eloy A. Paris Thu, 25 Sep 2003 13:39:28 -0400 samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Sat, 13 Sep 2003 08:47:56 -0400 samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low * New upstream release. Last Release Candidate according to the Samba Team. Samba 3.0.0 is around the corner, in a week or so. - Fixes use of non-PIC code in nss shared libraries (closes: #208773) - 'unix password sync' option now runs the unix password program as root again (closes: #209739). * One-line patch to make packages buildable with distcc (closes: #210227) -- Eloy A. Paris Tue, 9 Sep 2003 07:57:16 -0400 samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low * New upstream release. * Link against libgnutls7 instead of libgnutls5. (closes: #208151) -- Eloy A. Paris Tue, 2 Sep 2003 21:37:13 -0400 samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low * New upstream version (skipped samba 3.0.0beta3 due to time constraints.) This ugly version number will go away when the final Samba 3.0.0 is released. * Drag new unpackaged tools into the packages: smbcquotas (smbclient), vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8) manpage (samba). (closes: #151158) * Switch to DH_COMPAT level 4: - no explicit conffile listings needed - the postinst for libsmbclient is now completely autogenerated - use the default init script handling (with support for invoke-rc.d) in debhelper, instead of the currently buggy upgrade path (closes: #185439) - add support for ${misc:Depends} in control for those packages with init scripts * Add versioned dependency on libpam-runtime and change /etc/pam.d/samba to use the new common PAM config blocks. * New python2.3-samba package (old python2.2-samba is no more.) (closes: #206171) -- Eloy A. Paris Mon, 25 Aug 2003 17:05:14 -0400 samba (3.0.0beta2-1) unstable; urgency=low * New upstream release - The smb.conf(5) manpage documents config options again (closes: #197963). - Handling of winbind/idmap has been restructured; domain members should be able to map domain accounts to local accounts again (closes: #196815). - Use the locale charset for 'display charset' by default (closes: #194406). - Fix for segfault in smbclient when using the -b option (closes: #196833). - Handle an empty 'passdb backend' list gracefully (closes: #193946). * Don't set 'display charset' anymore on upgrade, since this is now grabbed from the locale by default -- a much better option. * Removed time.c.patch which is now in the upstream sources. * Update FHS patch for two new tdb files (netsamlogon_cache.tdb, privilege.tdb). * Remove python-linker.patch, since the Kerberos package has been fixed to no longer use rpath * Remove configure.patch: the hppa glibc bug this was added for is long since fixed, and upstream isn't interested in supporting this kludge. * Update references to missing documentation in sample smb.conf file (closes: #187632). * Fix handling of krb5 link line, building on a patch from Stefan Metzmacher . * Add patch so smbclient's tar support works with popt (closes: #194921). -- Steve Langasek Wed, 2 Jul 2003 20:59:09 -0500 samba (3.0.0beta1-2) unstable; urgency=low * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1) to make sure we get the right shlib dependencies (closes: #193149). * Update the dhcp config hooks so they're suitable for sourcing (i.e., don't call "exit") (closes: #196477). * Bring package into line with current policy by adding support for the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs) by default * Make sure libpam-smbpass is a self-contained DSO. * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite the server list. * Fix python install script to ignore -Wl linker flags, as seen in the output from the latest krb5-config. * Add LDAP and Unicode information about upgrading from 2.2 to README.debian. * Remove dangerous and confusing browse options from the default smb.conf (closes: #198804). * Reorder smb.conf options for clearer grouping, and clarify the comments. * Add a default [print$] share to the sample smb.conf, and create the necessary tree under /var/lib/samba/printers. (closes: #168173) * s/winbind/idmap/ in smb.conf, since the option names have changed. * Fix the patch for postexec handling, so that we chdir("/") at the right time. -- Steve Langasek Thu, 12 Jun 2003 15:02:00 -0500 samba (3.0.0beta1-1) unstable; urgency=low * New upstream version. - fix for empty browselist bug (closes: #194553) - fix for tab completion segfault in smbclient (closes: #194776) - Samba now works as a domain member again without segfaulting (closes: #194134, #194394, #194775) - WinXP machines can join a Samba-controlled domain again (closes: #195362) * Build-depend on python-dev >= 2.2 instead of on just python-dev (without version). * Added Vorlon'n patch to source/lib/time.c to fix #194075. (closes: #194075) -- Eloy A. Paris Sun, 8 Jun 2003 22:26:43 -0400 samba (2.999+3.0.alpha24-3) unstable; urgency=low * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324) * Rebuild against pristine Kerberos libs, to squelch warnings about versioned symbols. (closes: #194431, #194396) -- Steve Langasek Thu, 22 May 2003 15:32:00 -0500 samba (2.999+3.0.alpha24-2) unstable; urgency=low * Fixed description of the smbfs package. (closes: #194183) * Negate the sense of the unixsam check when upgrading. (closes: #194234) -- Steve Langasek Wed, 21 May 2003 12:21:53 -0400 samba (2.999+3.0.alpha24-1) unstable; urgency=low * New upstream version. (closes: #189354) -- Eloy A. Paris Tue, 20 May 2003 13:55:57 -0400 samba (2.999+3.0.alpha23-5) unstable; urgency=low * Move the python package from section "net" to section "python". * Make sure we use PIC code for python on all platforms. * French translation of an additional debconf template, courtesy of Christian Perrier . (closes: #188832) * Updated Brazilian Portuguese translation from André Luís Lopes . * s/unixsam/guest/ everywhere, since the unixsam backend is now deprecated. (closes: #190095) * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not only does using /tmp violate SELinux policies, it introduces the possibility of data loss during the final copy if /tmp is a separate filesystem. (closes: #189823) * Pull in fix for SWAT, so that logins work again (closes: #188255, #192077). * Move passdb.tdb into /var/lib/samba, since it's not user-editable. * Make sure with don't ship any .cvsignore files. * Don't ship examples for python2.2-samba and samba-doc in an "examples" directory inside another "examples" directory. -- Eloy A. Paris Tue, 6 May 2003 12:05:46 -0400 samba (2.999+3.0.alpha23-4) unstable; urgency=low * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all non-RPC printing clients are working again. * Change shlibs to 0 instead of 0.1. The library already in the archive is using this soname, and there are no packages depending on libsmbclient, so skip changing the package name for now. (closes: #188661) -- Steve Langasek Fri, 11 Apr 2003 14:42:00 -0500 samba (2.999+3.0.alpha23-3) unstable; urgency=low * Put the Samba Python modules in /usr/lib/python2.2/site-packages/, not in /usr/lib/python2.2/lib-dynload/. -- Eloy A. Paris Wed, 9 Apr 2003 19:49:25 -0400 samba (2.999+3.0.alpha23-2) unstable; urgency=low * New package python2.2-samba that includes the Python modules included in the Samba sources. Feedback on these modules and the new package is welcome, as we (Debian Samba maintainers) don't use them. (closes: #170731, #173322) * Move libsmbclient-dev from section "devel" to "libdevel". * Fix panic action script to give a sensible error message instead of an empty backtrace when we don't have permission to attach to the process. (closes: #188164) * Fix libpam-smbpass so that it really does something. (closes: #178245) * Apply patch to fix printing-related segfaults. (closes: #188076) -- Eloy A. Paris Sun, 6 Apr 2003 21:40:33 -0400 samba (2.999+3.0.alpha23-1) unstable; urgency=high * new upstream release, includes security fix for DSA-262 * tweak the debconf templates to avoid references to specific front-ends (closes: #183718) -- Steve Langasek Sun, 9 Mar 2003 14:58:00 -0600 samba (2.999+3.0.alpha21-5) unstable; urgency=low * touch up the package descriptions a little bit (caps, punctuation) * remove addtosmbpass, which snuck back in when we weren't looking * reverse the position of the wins server tag, after looking more closely at the code (closes: #183061) * fix a glitch in the Spanish .po that rendered it invalid, plus a typo * updated Brazilian Portuguese templates (closes: #183295) * fix a typo in upstream manpage (s/shave/share/) (closes: #180546) * run sed before we run sed, to deal with crazybad special chars in the workgroup name (!) (closes: #176717) -- Steve Langasek Sat, 1 Mar 2003 15:14:00 -0600 samba (2.999+3.0.alpha21-4) unstable; urgency=low * add scripts to samba-common to grab the netbios-name-servers options if we're running a DHCP client (closes: #38413) * major rearrangement of build scripts: install target now operates on debian/tmp, not debian/samba, so we can see when new files are added and decide where to put them; several files that should have been in samba-common but were in samba (for the above reason) -- smbcacls, -- have been moved, with a replaces: added. * Fix rc script so that whitespace is consistent between inetd and daemon modes (closes: #174677). * smbclient -M must always connect to port 139, because port 445 doesn't support messaging and we can't do the port 135 stuff yet (closes: #175292, #167859). * Import the diff from upstream CVS, which has fixed a few bugs (closes: #178219, #177583, #181467, #181487, #181603, #175864). Remove a few patches of ours which are now superseded. * Add po-debconf support to the tree, for better i18n. * Install the libsmbclient.so symlink in the libsmbclient-dev package, per policy (closes: #181466). -- Steve Langasek Fri, 27 Dec 2002 00:37:00 -0600 samba (2.999+3.0.alpha21-3) unstable; urgency=low * Drop --with-ldapsam from the configure options, since this no longer means what we thought it did. Revert patch for changing the 'passdb backend' defaults. * Add patch from CVS HEAD to fix pdbedit segfault; postinst script should work better now. (Closes: #173936) -- Steve Langasek Sun, 22 Dec 2002 13:29:00 -0600 samba (2.999+3.0.alpha21-2) unstable; urgency=low * add CONFIGDIR to the set of directories exported in the install target, so we don't try to write to /etc/ on the autobuilders. * Reset the default 'passdb backend' value to something sensible, so that we don't unnecessarily break upgrading systems (closes: #173731). -- Steve Langasek Fri, 20 Dec 2002 09:13:00 -0600 samba (2.999+3.0.alpha21-1) unstable; urgency=low * new upstream release, many patches now incorporated upstream -- Steve Langasek Mon, 16 Dec 2002 23:39:00 -0600 samba (2.999+3.0.alpha20-4) unstable; urgency=low * Remove obsolete comments about non-existant LDAP support in the Debian Samba packages. (Closes: #165035) * Apply patch for segfault in pam_smbpass when using the unixsam backend. * Drop support for nmbd in inetd, since it's not supported by upstream and is reported to cause problems (closes: #23243, #137726, 165037). * Clarify example printing configs in smb.conf (closes: #168174). * Make sure nmbd still responds to SIGTERM if it has no interfaces to listen on (closes: #168079). * Fix to get samba working again on 64-bit archs, after a pointer<->int size mismatch bug. Already fixed in upstream CVS. * Merge fix from CVS for broken libsmbclient.h references to internal structures (closes: #162956). * Add a default 'panic action' for Samba that will give us genuinely useful debugging information after a crash. * Fixed correct patch to example configurations in the libpam-smbpass packages (closes: #169350). * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead (closes: #169682). * Only ask the user for permission to edit if there's a chance of us damaging something. -- Steve Langasek Mon, 18 Nov 2002 19:53:00 -0500 samba (2.999+3.0.alpha20-3) unstable; urgency=low * Make sure smbstatus behavior is sane when Samba *has* been started, as well as when it has not (closes: #164179). Thank to Robbert Kouprie for this patch. * Not using 'killall' in any of the maintainer scripts (the last one remaining was winbind.logrotate.) We now just use 'kill' to send a SIGHUP to a specific PID (which is stored in a file in /var/run/samba.) * Do not depend on procps because we're not using killall anymore. -- Eloy A. Paris Tue, 15 Oct 2002 22:15:57 -0400 samba (2.999+3.0.alpha20-2) unstable; urgency=low * fix an off-by-one error in smbd/lanman.c, which should shut off the flood of log messages (closes: #157432) * add a --config-cache option to the configure invocation, since autoconf 2.5 doesn't load config.cache by default (closes: #163504) -- Steve Langasek Sat, 5 Oct 2002 01:40:00 -0500 samba (2.999+3.0.alpha20-1) unstable; urgency=low * new upstream release - non-primary groups appear to work again (closes: #161271) * the official beginning of the upstream 3.0 branch * exit without error from smbstatus when no connections have been seen yet (closes: #161489) -- Steve Langasek Wed, 2 Oct 2002 19:02:00 -0500 samba (2.999+3.0cvs20020906-1) unstable; urgency=low * CVS update - domain authentication works again (closes: #158698) * Factor out common code in samba-common.config * Handle character set settings in smb.conf on upgrade (closes: #153913, #158770) * Don't use killall in logrotate script; there are better ways (closes: #160076) * Ignore value of 'hostname lookups' for hosts allow/hosts deny (closes: #154376) -- Steve Langasek Sat, 7 Sep 2002 11:46:00 -0500 samba (2.999+3.0cvs20020829-1) unstable; urgency=low * CVS update. * Move the smb.conf manpage to the samba-common package (closes: #159572) -- Steve Langasek Thu, 29 Aug 2002 17:53:25 -0500 samba (2.999+3.0cvs20020827-1) unstable; urgency=low * CVS update. (Closes: #158508) * Part 1 of 3 of the library separation patch that Vorlon wrote has gone upstream - removed the patch from our patches/ directory. * Debconf note to warn users that their smb.conf will be re-written and changed if they use Swat to maintain it. (Closes: #158479) * Fixed typo in samba.prerm. -- Eloy A. Paris Tue, 27 Aug 2002 15:23:23 -0400 samba (2.999+3.0cvs20020825-2) unstable; urgency=low * scale back the tdbsam migration support, because of undesirable side-effects; now always defaults to 'no'. * strip out hyperactive library dependencies that are only needed by smbd (closes: #155156). * nuke any broken registry.tdb files left by previous CVS snapshots. * support rolling back the smbpasswd->tdbsam conversion on downgrade, since many people are likely to need to downgrade for a while. * remove postrm handling of legacy directories, and add handling of current ones. -- Steve Langasek Sun, 28 Jul 2002 09:44:24 -0500 samba (2.999+3.0cvs20020825-1) unstable; urgency=low * CVS update. These packages are based on Samba 3.0alpha19 + any code commited after 3.0alpha19 was released. -- Eloy A. Paris Sun, 25 Aug 2002 14:56:46 -0400 samba (2.999+3.0cvs20020723-1) unstable; urgency=medium * remove spurious line from samba.config * migrate from smbpasswd to tdbsam * re-add the pdbedit util and manpage * compile in ldapsam support (closes: #146935) * add PRIVATEDIR to the list of vars we override for the install target, so Samba doesn't try to create /etc/samba (closes: #153746). * fix makefile handling of LOGBASEDIR, so that logs always end up in the right place (closes: 153727). * Fixed bug in the FHS migration path that causes nmbd to read its state from one location, but write it out to another. (closes: #154210) * Make sure nmbd is always looking for wins.tdb in the same place. -- Steve Langasek Fri, 19 Jul 2002 21:38:54 -0500 samba (2.99.cvs.20020713-1) unstable; urgency=low * first attempt for 3.0pre. * only post a debconf note about moving logfiles if we're upgrading from a version that had the logfiles in the old location (closes: #152924). -- Steve Langasek Sat, 13 Jul 2002 12:54:25 -0500 samba (2.2.5-2) unstable; urgency=low * No longer ship make_printerdef, which is deprecated. (closes: #63059) * Clean up some empty directories from the samba package. * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860). * Clean up per-package documentation lists, to reduce clutter (closes: #147638). * Make sure we don't ship pdbedit's man page since we are still using smbpasswd passwords. (closes: #152208) * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find it (closes: #148586). * reorder postinst, so that installing samba-common from scratch loads the debconf answers properly (closes: #151985). * add lintian overrides for winbind, to eliminate some noise. * rename pam_smbpass changelog to comply with policy. -- Steve Langasek Sun, 23 Jun 2002 22:45:04 -0500 samba (2.2.5-1) unstable; urgency=low * New upstream release. -- Eloy A. Paris Sun, 9 Jun 2002 15:49:21 -0400 samba (2.2.4+2.2.5pre1-1) experimental; urgency=low * Getting ready for Samba 2.2.5. * Remove patches/parse_spoolss.patch, now included upstream. * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in 2.2.4-1. We don't use POSIX ACL support ourselves, so we'd appreciate reports from those using this feature so we can be sure this works. * Fix the filename-matching algorithm used for smbtar's 'exclude' functionality. (closes: #131571) * Look for secrets.tdb in /var/lib/samba, and handle in the postinst. This is not really a config file, because users don't edit it. (closes: #147429) * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen for the patch. (closes: #144847) -- Eloy A. Paris Tue, 28 May 2002 11:33:51 -0400 samba (2.2.4-1) unstable; urgency=low * New upstream release (closes: #144713) * Building with POSIX ACL support (closes: #137819) * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055) * Compile with --with-automount, for NIS homedir support (closes: #123396) * Add a proper 'flags' field to the mount entry we write to /etc/mtab; fixes a display bug with mount (closes: #140397) * Added logic to /etc/init.d/samba so a help message is printed out when Samba is running from inetd _and_ we are not booting, i.e. the user called the init script manually. Thanks to Francesco Potorti for the suggestion on how to implement this. (Closes: #139807, #140204) * samba.postinst: added logic so we don't call /etc/init.d/samba if we are running from inetd (this prevents the stupid help message to be printed during package upgrades if we are running from inetd.) * samba.prerm: idem. * /etc/init.d/samba: delete stale PID files after nmbd and smbd are stopped. This prevents start-stop-daemon from printing an ugly error message when called from '/etc/init.d/samba stop'. I prefer this than running start-stop-daemon with --oknodo because start-stop-daemon might print other important error messages that with --oknodo it would otherwise not print. (Closes: #102187, #109301) * Patch from jerry@samba.org to fix parsing of spoolss structures. -- Eloy A. Paris Thu, 23 May 2002 23:16:52 -0400 samba (2.2.3a-7) unstable; urgency=medium * More README.debian updates. * Neutralize the smb.conf 'lock dir' directive, which doesn't mean what the FHS says it should, and causes us no end of grief. (Closes: #122299) * LPRng-handling patch so that jobs printed to recent versions of LPRng show up properly as 'done' instead of 'paused' in the Windows print queue. Thanks to Jaroslav Serdula for this patch. (Closes: #139458) * Applied patch from Urban Widmark (smbfs upstream maintainer) to add a '-n' option to smbmount that does the same as mount's '-n'. (Closes: #139590) * Minor tweak to unpatch-source so we unpatch sources in the reverse order we patched them. * Don't depend on grep in samba.prerm to determine if Samba was running before the upgrade starts. * Tweak the wording of debconf templates. * Incorporate debconf translations for French, Spanish and Portuguese; thanks to Carlos Valdivia Yagüe (es), Andre Luis Lopes (pt_BR), and Philippe Batailler and Denis Barbier (fr). (closes: #142657, #142659, #141551, #141699, #141682) * Fixed symlinks in the swat package so the point to /usr/share/doc/ instead of /usr/doc/. Added note to the description of the swat packages that says that samba-doc must be installed for the on-line documentation to work. Thanks to Torne Wuff . (Closes: #95437) * 'dh_installinit -n' gives us no initscript handling -- we need to handle all starting and stopping of daemons ourselves, which wasn't happening in the {pre,post}rm scripts. * Vary the priority of the debconf question "Do you want to generate /etc/samba/smbpassd?" depending on whether the file already exists. File exists -> priority 'medium', file does not exist -> priority 'low'. Changed priorities of all other questions from 'high' to 'medium'. -- Steve Langasek Sat, 20 Apr 2002 17:48:27 -0400 samba (2.2.3a-6) unstable; urgency=low * Call db_stop as soon as we're done with debconf in the postinst, to avoid hanging bugs (closes: #137813) * Ony call 'update-inetd --add' on first installation, just as we only call 'update-inetd --remove' on package purge. * Bring our shipped smb.conf closer in line with the upstream defaults: don't twiddle the send/recv buffer sizes, since the Linux kernel already provides a much better default setting (closes: #80966, #80934, #137415, #133477) * Added libnss_wins.so to the winbind package (closes: #137201) * Updates to README.debian. -- Eloy A. Paris Tue, 12 Mar 2002 10:57:40 -0500 samba (2.2.3a-5) unstable; urgency=low * Having multiple workgroup lines in your smb.conf, though wacky, is perfectly valid. Account for this in samba-common.config. (closes: #137157) -- Steve Langasek Sun, 10 Mar 2002 21:52:51 -0600 samba (2.2.3a-4) unstable; urgency=low * Fixed typo in samba.postinst. Cosmetic fixes there as well. * Fix to improper usage of /usr/bin/tr in samba-common config script (closes: #137744) -- Steve Langasek Sat, 9 Mar 2002 14:14:02 -0500 samba (2.2.3a-3) unstable; urgency=medium * Make sure /etc/init.d/samba is executable before calling it in the postinst. Quickly checked all other maintainer scripts to make sure we are not calling an init script if it is not executable. (closes: #137321) * Fix up maintainer scripts to detect if samba was not running before an upgrade. (closes: #33520, #130534) * Make sure /etc/samba/ is included in the samba-common package. Closes: #137157 -- Steve Langasek Fri, 8 Mar 2002 11:13:21 -0500 samba (2.2.3a-2) unstable; urgency=low * merge in debconf support: - Moved all smb.conf-related questions to samba-common (smb.conf is part of the samba-common package, not the samba package.) - smb.conf is not a samba-common conffile anymore since it is being managed by debconf. It is ABSOLUTELY necessary to make sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes made via debconf. In other words, any changes made by the user should be honored by the debconf interface. - samba.postinst now moves old log files from /var/log/ to /var/log/samba/. There's a Debconf note that informs the user the log files are stored now in a new location. - debian/control: + Make samba depend on debconf. - New file debian/samba.templates. - New file debian/samba.config. - Re-worked debian/samba.postinst. + Got rid of all /etc/samba/debian_config sillyness. - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces it. - Removed debian/samba.prerm. - Cleaned up /etc/init.d/samba. + Added infrastructure for debconf. + Got rid of all /etc/samba/debian_config sillyness. + Got rid of /etc/samba/smbpasswd conversion stuff for compatibility with versions of Samba < 2.0.0final-2. (closes: #127959, #34408, #113594) * make samba.postinst ignore the absence of /var/log/{s,n}mb*; makes for a clean upgrade path. * Building with MSDFS support (closes: #116793) -- Steve Langasek Tue, 5 Mar 2002 14:14:33 -0600 samba (2.2.3a-1) unstable; urgency=low * New upstream version (closes: #135001) * Potato builds were failing because debian/rules was not creating debian/winbind/etc/logrotate.d/. A user having problems creating Potato packages brought this to my attention. dh_installlogrotate takes care of creating the directory for us, that's why we didn't notice. * Removed code that converts /etc/samba/smbpasswd from an ancient format to the new format of Samba 2.0.0 and later. Closes: #134375 - samba: postinst failed due to missing /usr/bin/convert_smbpasswd. * Re-organized FHS migration code in samba.postinst. Make sure we don't fail when we move files that don't exist. Closes: #133813 - samba: Install failed. * Adding docs. to the libpam-smbpass package. * Remove man pages for findsmb because we are not providing this script. Closes: #134181 - findsmb referenced, but not included. * Removed replace.patch because it is now present upstream. * Added patch from Jerry Carter to fix a problem when saving document preferences for printing from NT clients. * The real winbindd daemon is a forked process so we can't use --make-pidfile when calling start-stop-daemon. Fixed /etc/init.d/winbind to work around the issue. Thanks to Lin Li for the patience and for reporting the problems. Hopefully I got it right this time. -- Eloy A. Paris Wed, 20 Feb 2002 18:39:03 -0500 samba (2.2.3-6) unstable; urgency=low * Make sure there are actual files in /var/state/samba before trying to move them (Closes: #133534, #133510). * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly again. -- Steve Langasek Tue, 12 Feb 2002 09:19:29 -0600 samba (2.2.3-5) unstable; urgency=low * Whoops, missed a spot on the samba.postinst -- will fail badly if /var/state/samba/ no longer exists. Better get this fix into the next upload. ;) (Closes: #133088) * Regenerate configure only if it is older than configure.in. * Fix smbd handling of network neighborhood lists, which was missed in the FHS conversion (Closes: #133091) -- Eloy A. Paris Sat, 9 Feb 2002 16:37:57 -0500 samba (2.2.3-4) unstable; urgency=low * FHS cleanup; files in /var are now properly sorted according to their nature. (Closes: #102101) * Remove patches to source/configure, since we now call autoconf to regenerate this file cleanly. * lintian fixes: - Create winbind.conffiles and add /etc/logrotate.d/winbind and /etc/init.d/winbind to it. - Use a relative symlink for /usr/lib/cups/backend/smb. - Removal of a .cvsignore file in the samba-doc package. * winbind.init fixes: - Corrected name of the pid file (Steve) - Make start-stop-daemon create a pid file for winbindd since it does not create one on his own. * #DEBHELPER# is not needed in samba.postinst because we are adding manually everything that debhelper adds automatically. In fact, since we are calling update-rc.d without standard paramaters I think we can't use #DEBHELPER#. * Fix fatal syntax error in samba.prerm. -- Steve Langasek Thu, 7 Feb 2002 13:12:08 -0500 samba (2.2.3-3) unstable; urgency=low * work on lintian-cleanness in the package (wrong permissions, maintainer scripts in need of debhelpering) * /lib/security/pam_smbpass.so is now being included in the libpam-smbpass package only, and not in both the libpam-smbpass and samba packages (which was the case prior to 2.2.3-3.) * Instead of making our patch scripts executable in the rules file we run them through /bin/sh. * New 'winbind' package that has all the winbind stuff that was in the samba package in 2.2.3-2 and before. * Added replace.patch: patch from Jeremy Allison to fix problems when replacing or overwriting files in a Samba share. Patch was sent to the samba mailing list. -- Eloy A. Paris Tue, 5 Feb 2002 21:12:48 -0500 samba (2.2.3-2) unstable; urgency=low * add support to debian/scripts/{patch-source,unpatch-source} for automatic updating and cleaning of . This was a request from the Samba Team: they wanted us to clearly mark our packages so it is always known a user is running Samba with (possibly) Debian-specific patches. * Change init.d killscript link to K19samba, so we stop before autofs (closes: 117327) * Make our patch scripts executable in the rules file -- dpkg won't do this for us (closes: #132415). -- Steve Langasek Mon, 4 Feb 2002 09:51:00 -0600 samba (2.2.3-1) unstable; urgency=low * New upstream release (closes: #131228). * Restructured build system that provides DBS-like separation of patches * Fix typo in smbfs description (closes: #116209). * Use killall -q in logrotate.d script, to avoid spurious cron emails (closes: #130100). -- Steve Langasek Sat, 2 Feb 2002 19:56:18 -0500 samba (2.2.2-12) unstable; urgency=high * (Steve) Patch for source/client/client.c. Closes: #86438 smbclient: Transfering several GB causes the average speed to be messed up. * Uploading with urgency=high to expedite the move from unstable to testing because of the security problem fixed in -11. -- Eloy A. Paris Fri, 25 Jan 2002 22:31:12 -0500 samba (2.2.2-11) unstable; urgency=low * Building with --with-libsmbclient. We have created two new packages: libsmbclient and libsmbclient-dev. Hopefully this will help some people that want to add the capability of speaking SMB to their applications. Closes: #117132 - libsmbclient support library? * (Steve) Make swat do the right thing when reading (parsing) the saved preferences in smb.conf. Closes: #55617 swat mutilates the linpopup message command. * Updated README.Debian. Updated descriptions in debian/control. * Remembered to bump up version number in source/include/version.h (need to automate this or else I'll keep forgetting.) * (Steve) one liner for source/web/diagnose.c. Closes: #106976 - smbd/nmbd not running message with swat/linuxconf. * Added '|| true' to the post-rotate script so logrotate doesn't fail if either nmbd or smbd is not running. Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process. * Fixed incorrect file locations in swat's man page and added a Debian-specific note to /usr/share/doc/swat/README. Closes: #71586 swat: needs documentation fixes for debian. * smbmount in the smbfs package does not have the setuid bit set. Apparently, smbmount uses libsmb without checking the environment. Thanks to Christian Jaeger for finding the local root exploit. * Applied old patch from Jerry) Carter" to correct the following two problems in Samba 2.2.2: - %U and %G could not be used in services names in smb.conf. - %G would fail to be expanded in an "include = ..." line. -- Eloy A. Paris Sat, 19 Jan 2002 21:35:26 -0500 samba (2.2.2-10) unstable; urgency=low * (Steve) Add missing manual pages. Closes: Bug#128928: missing manpages in smbfs. -- Eloy A. Paris Sun, 13 Jan 2002 14:39:55 -0500 samba (2.2.2-9) unstable; urgency=low * (Steve) Fix broken URL's in HTML docs. Closes: Bug#17741: bad links in html docs (at last!!!) -- Eloy A. Paris Fri, 11 Jan 2002 13:37:07 -0500 samba (2.2.2-8) unstable; urgency=low * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in debian/control so rpcclient.1, which was in samba-2.2.2-5, does not cause problems now that it is part of smbclient (>= 2.2.2-6). Closes: Closes: Bug#128684: error upgrading smbclient in sid. -- Eloy A. Paris Fri, 11 Jan 2002 11:42:40 -0500 samba (2.2.2-7) unstable; urgency=low * (Steve) Patch to make behavior honor what the docs. say about "hosts allow" taking precedence over "hosts deny". Closes: Bug#49249: swat: error with host deny ?! -- Eloy A. Paris Thu, 10 Jan 2002 12:36:58 -0500 samba (2.2.2-6) unstable; urgency=low * (Steve) Adds manpage for rpcclient to the proper file, removes smbtorture from the distro because