samba (2:3.6.25-0ubuntu0.12.04.4) precise-security; urgency=medium * SECURITY REGRESSION: compatibility with NetAPP SAN (LP: #1576109) - debian/patches/fix_netapp.patch: don't require NTLMSSP_SIGN for smb connections in source3/libsmb/ntlmssp.c. * SECURITY REGRESSION: compatibility with 3.6 servers (LP: #1574403) - debian/patches/relax_client_ipc_signing.patch: relax the "client ipc signing" parameter to "auto" so a 3.6 client can still connect to a 3.6 server. Administrators in environments that exclusively connect to more recent servers might want to manually configure this back to "mandatory". -- Marc Deslauriers Thu, 12 May 2016 11:51:56 -0400 samba (2:3.6.25-0ubuntu0.12.04.3) precise-security; urgency=medium * SECURITY REGRESSION: Add additional backported commits to fix regressions in the previous security updates. (LP: #1577739) - debian/patches/security_trailer_regression.patch: fix a regression verifying the security trailer in source3/rpc_server/srv_pipe.c. - debian/patches/bug9669_regression.patch: fix a crash when running net rpc join against an older Samba PDC in source3/rpc_client/cli_pipe.c. - debian/patches/netlogon_credentials_regression.patch: fix updating netlogon credentials in source3/rpc_client/cli_pipe.c. - Thanks to Andreas Schneider for the additional backports to Samba 3.6! -- Marc Deslauriers Tue, 03 May 2016 12:51:09 -0400 samba (2:3.6.25-0ubuntu0.12.04.2) precise-security; urgency=medium * SECURITY UPDATE: fix multiple security issues - debian/patches/CVE-preparation-v3-6.patch: code changes required for security patches. - debian/patches/CVE-2016-2110-v3-6.patch: Man in the middle attacks possible with NTLMSSP. - debian/patches/CVE-2016-2111-v3-6.patch: NETLOGON Spoofing Vulnerability. - debian/patches/CVE-2016-2112-v3-6.patch: The LDAP client and server don't enforce integrity protection. - debian/patches/CVE-2016-2115-v3-6.patch: SMB client connections for IPC traffic are not integrity protected. - debian/patches/CVE-2016-2118-v3-6.patch: SAMR and LSA man in the middle attacks possible. - debian/patches/CVE-2015-5370-v3-6.patch: Multiple errors in DCE-RPC code - Thanks to Andreas Schneider, Ralph Böhme, Stefan Metzmacher, Günther Deschner and Aurélien Aptel for the patch backports to Samba 3.6! * Updated to upstream 3.6.25 - Removed upstreamed patches: initialize_password_db-null-deref, fix-samba.ldip-syntax.patch, CVE-2012-1182-1.patch, CVE-2012-1182-2.patch, CVE-2012-2111.patch, lp_970679_fix-large-groups.patch, net-rpc-share-allowedusers-with-2008r2.patch, lp_967410_fix-cups-printer-not-added-to-registry.patch, lp_1016895_setgroups_3.5.patch, winbind-kerberos-refresh.patch, CVE-2013-0454.patch, lp_1003296_fix-login-with-expiring-user-passwords.patch, CVE-2013-4124.patch, CVE-2013-4475.patch, CVE-2012-6150.patch, CVE-2013-4408.patch, CVE-2013-4496.patch, CVE-2014-0244.patch, CVE-2014-3493.patch, CVE-2015-0240.patch, security-CVE-2013-0213.patch, security-CVE-2013-0214.patch. - debian/rules: don't build external libtevent - debian/rules: add idl_full to dh_auto_build -- Marc Deslauriers Tue, 12 Apr 2016 07:21:15 -0400 samba (2:3.6.3-2ubuntu2.17) precise-security; urgency=medium * SECURITY UPDATE: incorrect ACL get/set allowed on symlink path - debian/patches/CVE-2015-7560.patch: properly handle symlinks in source3/smbd/nttrans.c, source3/smbd/trans2.c. - CVE-2015-7560 * SECURITY UPDATE: clickjacking vulnerability in SWAT - debian/patches/security-CVE-2013-0213.patch: use X-Frame-Options header in source3/web/swat.c. - CVE-2013-0213 * SECURITY UPDATE: CSRF vulnerability in SWAT - debian/patches/security-CVE-2013-0214.patch: use additional nonce on XSRF protection in source3/web/cgi.c, source3/web/swat.c, source3/web/swat_proto.h. - CVE-2013-0214 -- Marc Deslauriers Mon, 07 Mar 2016 07:13:51 -0500 samba (2:3.6.3-2ubuntu2.14) precise-security; urgency=medium * Fixes regression introduced by debian/patches/CVE-2015-5252.patch. (LP: #1545750) -- Dariusz Gadomski Mon, 15 Feb 2016 15:43:57 +0100 samba (2:3.6.3-2ubuntu2.13) precise-security; urgency=medium * SECURITY UPDATE: file-access restrictions bypass via symlink - debian/patches/CVE-2015-5252.patch: validate matching component in source3/smbd/vfs.c. - CVE-2015-5252 * SECURITY UPDATE: man-in-the-middle attack via encrypted-to-unencrypted downgrade - debian/patches/CVE-2015-5296.patch: force signing in source3/libsmb/clidfs.c, source3/libsmb/libsmb_server.c. - CVE-2015-5296 * SECURITY UPDATE: snapshot access via shadow copy directory - debian/patches/CVE-2015-5299.patch: fix missing access checks in source3/modules/vfs_shadow_copy2.c. - CVE-2015-5299 * SECURITY UPDATE: information leak via incorrect string length handling - debian/patches/CVE-2015-5330.patch: fix string length handling in lib/util/charset/charset.h, lib/util/charset/codepoints.c, lib/util/charset/util_unistr.c, source3/lib/util_str.c. - CVE-2015-5330 -- Marc Deslauriers Mon, 04 Jan 2016 14:50:47 -0500 samba (2:3.6.3-2ubuntu2.12) precise-security; urgency=medium * SECURITY UPDATE: code execution vulnerability in smbd daemon - debian/patches/CVE-2015-0240.patch: don't call talloc_free on an uninitialized pointer and don't dereference a NULL pointer in source3/rpc_server/netlogon/srv_netlog_nt.c, initialize creds_out in libcli/auth/schannel_state_tdb.c. - CVE-2015-0240 -- Marc Deslauriers Mon, 23 Feb 2015 10:29:50 -0500 samba (2:3.6.3-2ubuntu2.11) precise-security; urgency=medium * SECURITY UPDATE: denial of service on nmbd malformed packet - debian/patches/CVE-2014-0244.patch: return on EWOULDBLOCK/EAGAIN in source3/lib/system.c. - CVE-2014-0244 * SECURITY UPDATE: denial of service via bad unicode conversion - debian/patches/CVE-2014-3493.patch: refactor code in source3/lib/charcnv.c, change return code checks in source3/libsmb/clirap.c, source3/smbd/lanman.c. - CVE-2014-3493 -- Marc Deslauriers Mon, 23 Jun 2014 15:02:25 -0400 samba (2:3.6.3-2ubuntu2.10) precise-security; urgency=medium * SECURITY UPDATE: Password lockout not enforced for SAMR password changes - debian/patches/CVE-2013-4496.patch: refactor password lockout code in source3/auth/check_samsec.c, source3/rpc_server/samr/srv_samr_chgpasswd.c, source3/rpc_server/samr/srv_samr_nt.c, source3/smbd/lanman.c, source4/rpc_server/samr/samr_password.c, source4/torture/rpc/samr.c. - CVE-2013-4496 -- Marc Deslauriers Mon, 17 Mar 2014 08:54:32 -0400 samba (2:3.6.3-2ubuntu2.9) precise-security; urgency=low * SECURITY UPDATE: file restrictions bypass via alternate data streams - debian/patches/CVE-2013-4475.patch: properly check base file access in source3/smbd/open.c. - CVE-2013-4475 * SECURITY UPDATE: pam_winbind access restriction bypass via invalid group names - debian/patches/CVE-2012-6150.patch: ensure valid groups in nsswitch/pam_winbind.c. - CVE-2012-6150 * SECURITY UPDATE: arbitrary code execution via incorrect DCE-RPC fragment length field checking - debian/patches/CVE-2013-4408.patch: apply massive upstream fix to lib/async_req/async_sock.c, libcli/util/tstream.c, librpc/idl/dcerpc.idl, librpc/rpc/dcerpc_util.c, librpc/rpc/rpc_common.h, nsswitch/libwbclient/wbc_sid.c, nsswitch/wbinfo.c, source3/lib/netapi/{group,localgroup,user}.c, source3/lib/util_tsock.c, source3/libnet/libnet_join.c, source3/librpc/rpc/dcerpc_helpers.c, source3/rpc_client/{cli_lsarpc,cli_pipe}.c, source3/rpc_server/netlogon/srv_netlog_nt.c, source3/rpcclient/{cmd_lsarpc,cmd_samr}.c, source3/smbd/lanman.c, source3/utils/net_rpc.c, source3/utils/net_rpc_join.c, source3/winbindd/{wb_lookupsids,winbindd_msrpc,winbindd_rpc}.c, source4/libcli/util/clilsa.c, source4/libnet/{groupinfo,groupman, libnet_join,libnet_lookup,libnet_passwd,userinfo,userman}.c, source4/librpc/rpc/{dcerpc,dcerpc_smb,dcerpc_smb2,dcerpc_sock}.c, source4/winbind/wb_async_helpers.c. - CVE-2013-4408 -- Marc Deslauriers Mon, 09 Dec 2013 11:07:25 -0500 samba (2:3.6.3-2ubuntu2.8) precise-security; urgency=low * SECURITY UPDATE: denial of service via integer wrap in EA list reading - debian/patches/CVE-2013-4124.patch: check offsets in source3/smbd/nttrans.c. - CVE-2013-4124 -- Marc Deslauriers Mon, 23 Sep 2013 15:03:56 -0400 samba (2:3.6.3-2ubuntu2.7) precise-proposed; urgency=low * Fix login with expiring user passwords (LP: #1003296) - Fixed in Samba 3.6.9 (Samba bug: 9013) -- Bryan Quigley Wed, 10 Jul 2013 12:25:17 -0400 samba (2:3.6.3-2ubuntu2.6) precise-security; urgency=low * SECURITY UPDATE: incorrect privileges in SMB2 shares - debian/patches/CVE-2013-0454.patch: fix incorrect assignment instead of check in source3/smbd/conn.c. - CVE-2013-0454 -- Marc Deslauriers Tue, 16 Apr 2013 08:49:26 -0400 samba (2:3.6.3-2ubuntu2.5) precise; urgency=low * d/patches/winbind-kerberos-refresh.patch: correctly cache credentials for automatic Kerberos ticket renewal (LP: #1037055). -- Robie Basak Wed, 20 Mar 2013 07:48:57 +0000 samba (2:3.6.3-2ubuntu2.4) precise; urgency=low [ Olly Betts ] * Change "net share allowedusers" to use RPC call that works with Microsoft Windows 2008 r2. (LP: #1061244) [ Louis Bouchard ] * Fix issue with Windows XP / 7 (LP: #967410) where a USB connected printer shared on Ubuntu cannot be added to Windows using the "Find a printer in the directory" functionalty. [ Adam Conrad ] * Cherrypick patch from upstream to resolve a SIGABRT when passing setgroups a -1 gid, fixing samba with 3.5 kernels (LP: #1016895) -- Adam Conrad Tue, 19 Feb 2013 22:22:12 -0700 samba (2:3.6.3-2ubuntu2.3) precise-proposed; urgency=low * d/samba.nmbd.upstart: Ignore the return code of testparm in pre-start; it's used to query the configuration NOT to validate it in this context which generates alot of bug reports for unrelated configuration issues (LP: #791944). -- James Page Fri, 08 Jun 2012 14:31:57 +0100 samba (2:3.6.3-2ubuntu2.2) precise-proposed; urgency=low * Fix issue with winbind crashing when trying to access groups containing more than 1000 members (LP: #970679): - d/patches/lp_970679_fix-large-groups.patch: Cherry picked patch from upstream VCS which ensures that large hunk handling in winbind works with talloc preventing crashes. * d/samba.install: Restore missing ufw profile (LP: #999764). * d/samba-common-bin.install: Restore missing apport hook (LP: #999764). -- James Page Wed, 16 May 2012 13:10:02 +0100 samba (2:3.6.3-2ubuntu2.1) precise-security; urgency=low * SECURITY UPDATE: Authenticated user can take ownership of arbitrary files and directories - debian/patches/CVE-2012-2111.patch: Remove excessive permissions granted in account related Local Security Authority remote procedure calls. Based on upstream patch. - CVE-2012-2111 -- Tyler Hicks Tue, 24 Apr 2012 15:49:30 -0500 samba (2:3.6.3-2ubuntu2) precise-proposed; urgency=low * SECURITY UPDATE: Unauthenticated remote code execution via RPC calls (LP: #978458) - debian/patches/CVE-2012-1182-1.patch: Fix PIDL compiler to generate code that uses the same value for array allocation and array length checks. Based on upstream patch. - debian/patches/CVE-2012-1182-2.patch: Regenerate PIDL generated files with the patched PIDL compiler - CVE-2012-1182 -- Tyler Hicks Thu, 12 Apr 2012 05:28:44 -0500 samba (2:3.6.3-2ubuntu1) precise; urgency=low * Merge from Debian testing. (LP: #958534) Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/patches/error-trans.fix-276472: - Add the translation of Unix Error code -ENOTSUP to NT Error Code - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/control: - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. + debian/samba.logrotate, debian/samba-common.dhcp, debian/samba.if-up: - Make them upstart compatible + debian/patches/fix-debuglevel-name-conflict.patch: don't use 'debug_level' as a global variable name in an NSS module. -- Maarten Bezemer Sun, 18 Mar 2012 13:49:29 +0100 samba (2:3.6.3-2) unstable; urgency=low [ Christian Perrier ] * Fix example samba.ldif syntax. Closes: #659963 * Set minimal version of tdb ot 1.2.6 in Build-Depends (thanks, backports!) * Lower priority of debconf question to medium after some pondering. After all, we have a sane default. Closes: #662801 * Merge some Ubuntu patches: - samba.config: Avoid scary pdbedit warnings on first import. - samba.postinst: Add more informative error message for the case where smb.conf was manually deleted. [ Maarten Bezemer ] * Removed references to the testprns command from documentation * Added notes that the smbsh command is not available in this package Closes: #662243 [ Debconf translations ] * Indonesian (Arief S Fitrianto). Closes: #660312 * Slovak (Ivan Masár). Closes: #661125 [ Steve Langasek ] * Use Debian copyright-format 1.0 in debian/copyright. -- Christian Perrier Mon, 12 Mar 2012 20:49:24 +0100 samba (2:3.6.3-1ubuntu1) precise; urgency=low * Merge from Debian testing. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/patches/error-trans.fix-276472: - Add the translation of Unix Error code -ENOTSUP to NT Error Code - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/control: - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. + debian/samba.logrotate, debian/samba-common.dhcp, debian/samba.if-up: - Make them upstart compatible + debian/samba.postinst: - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/patches/fix-debuglevel-name-conflict.patch: don't use 'debug_level' as a global variable name in an NSS module. * Dropped: - debian/patches/fix-samba-printer-browsing.patch: No longer needed. -- Chuck Short Tue, 21 Feb 2012 09:06:34 -0500 samba (2:3.6.3-1) unstable; urgency=low [ Christian Perrier ] * New upstream release * Fixes CVE-2012-0817: The Samba File Serving daemon (smbd) in Samba versions 3.6.0 to 3.6.2 is affected by a memory leak that can cause a server denial of service. [ Debconf translations ] * Polish (Michał Kułach). Closes: #657770 -- Christian Perrier Tue, 31 Jan 2012 22:09:39 +0100 samba (2:3.6.2-1) unstable; urgency=low * New upstream release * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream) -- Christian Perrier Fri, 27 Jan 2012 21:38:52 +0100 samba (2:3.6.1-3ubuntu3) precise; urgency=low * debian/patches/fix-samba-printer-browsing.patch: Fix samba printer browsing crasher. (LP: #911888) -- Chuck Short Mon, 23 Jan 2012 10:47:41 -0500 samba (2:3.6.1-3ubuntu2) precise; urgency=low * Add missing Multi-Arch: foreign flag on samba-common. * Drop unnecessary delta on debian/samba.dirs. -- Steve Langasek Tue, 03 Jan 2012 05:14:18 +0000 samba (2:3.6.1-3ubuntu1) precise; urgency=low * Merge from Debian testing. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/patches/error-trans.fix-276472: - Add the translation of Unix Error code -ENOTSUP to NT Error Code - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/control: - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. + debian/samba.logrotate, debian/samba-common.dhcp, debian/samba.if-up: - Make them upstart compatible + debian/samba.postinst: - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/patches/fix-debuglevel-name-conflict.patch: don't use 'debug_level' as a global variable name in an NSS module + Dropped: - debian/patches/error-trans.fix-276472 - debian/patches/fix-debuglevel-name-conflict.patch -- Chuck Short Wed, 21 Dec 2011 13:18:04 +0000 samba (2:3.6.1-3) unstable; urgency=low [ Sam Hartman ] * Increase libkrb5-dev dependency to avoid depending on krb5_locate_kdc, Closes: #650541 [ Steve Langasek ] * Fix the libpam-winbind description to more accurately identify the protocols being used by nss_wins. Closes: #650091. -- Christian Perrier Thu, 01 Dec 2011 21:56:52 +0100 samba (2:3.6.1-2) unstable; urgency=low * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch * debian/patches/initialize_password_db-null-deref: Avoid null dereference in initialize_password_db(). Closes LP: #829221. * Mark samba-common Multi-Arch: foreign. -- Christian Perrier Sun, 27 Nov 2011 19:06:39 +0100 samba (2:3.6.1-1) experimental; urgency=low * New upstream release -- Christian Perrier Sat, 22 Oct 2011 10:56:17 +0200 samba (2:3.6.0-1) experimental; urgency=low * New upstream release * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1 and 3.5.11~dfsg-1 * Drop wbc_async.h from libwbclient-dev as, according to upstream's commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is smbtorture3" -- Christian Perrier Thu, 11 Aug 2011 09:14:53 +0200 samba (2:3.6.0~rc3-1) experimental; urgency=low * New upstream version -- Christian Perrier Fri, 29 Jul 2011 23:11:10 +0200 samba (2:3.6.0~rc2-1) experimental; urgency=low * New upstream version -- Christian Perrier Tue, 07 Jun 2011 23:09:41 +0200 samba (2:3.6.0~rc1-2) experimental; urgency=low * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file in an existing directory. Closes: #628121 -- Christian Perrier Fri, 27 May 2011 15:35:44 +0200 samba (2:3.6.0~rc1-1) experimental; urgency=low * New upstream release -- Christian Perrier Thu, 19 May 2011 22:26:08 +0200 samba (2:3.6.0~pre3-1) experimental; urgency=low [ Christian Perrier ] * New upstream release * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it was forgotten upstream * libwbclient0.symbols: dropped several symbols related to asynchronous actions that weren't working anyway (according to Kai Blin at SambaXP) [ Mathieu Parent ] * Build against libctdb-dev (>= 1.10+git20110412) to have required control: CTDB_CONTROL_SCHEDULE_FOR_DELETION. -- Christian Perrier Mon, 09 May 2011 11:29:52 +0200 samba (2:3.5.11~dfsg-4ubuntu4) precise; urgency=low * fix LP: #907227 - Bump build dependency on libkrb5-dev to (>= 1.10+dfsg~) to make sure we're not getting any private symbols (see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650541) - update debian/changelog * Mark Debian Vcs-* entries as XS-Debian-Vcs-* - update debian/control -- Micah Gersten Wed, 21 Dec 2011 03:45:34 -0600 samba (2:3.5.11~dfsg-4ubuntu3) precise; urgency=low * Rebuild with dpkg 1.16.1.1ubuntu2 to restore full hardening support. -- Colin Watson Tue, 01 Nov 2011 17:19:39 -0400 samba (2:3.5.11~dfsg-4ubuntu2) precise; urgency=low * debian/samba.if-up: fix an overlooked syntax error in the hook. LP: #881579. -- Steve Langasek Thu, 27 Oct 2011 21:45:32 +0000 samba (2:3.5.11~dfsg-4ubuntu1) precise; urgency=low * Merge from Debian unstable, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/patches/error-trans.fix-276472: - Add the translation of Unix Error code -ENOTSUP to NT Error Code - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/control: - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. + debian/samba.logrotate, debian/samba-common.dhcp, debian/samba.if-up: - Make them upstart compatible + debian/samba.postinst: - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/patches/fix-debuglevel-name-conflict.patch: don't use 'debug_level' as a global variable name in an NSS module * Dropped changes, included in Debian: + debian/rules: - Add BIND_NOW to maximize benefit of RELRO hardening. * Mark samba-common Multi-Arch: foreign. -- Steve Langasek Thu, 27 Oct 2011 18:15:44 +0000 samba (2:3.5.11~dfsg-4) unstable; urgency=low * Lintian override for libpam-winbind; it's not a shared library so doesn't really need the pre-depends on multiarch-support. * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu. -- Steve Langasek Fri, 21 Oct 2011 16:01:29 -0700 samba (2:3.5.11~dfsg-3) unstable; urgency=low * Split winbind into separate packages, winbind and libpam-winbind, with the latter marked Multi-Arch: same and the former marked Multi-Arch: foreign, so that we can install multiple copies of the pam module and nss modules on the same system. -- Steve Langasek Fri, 21 Oct 2011 20:00:13 +0000 samba (2:3.5.11~dfsg-2ubuntu3) precise; urgency=low * Cherry-pick winbind multiarch support from Debian svn. -- Steve Langasek Fri, 21 Oct 2011 23:02:15 +0000 samba (2:3.5.11~dfsg-2ubuntu2) precise; urgency=low * Drop the added Breaks on cups, since it's a breaks against a specific version of cups from the long-gone maverick devel cycle. * Add tdb-tools Recommends, somehow dropped in a merge; trivial package size and already in main, so doesn't look like there's a reason to diverge. * Drop conflicts on likewise-open, only relevant for upgrades from hardy. * Use the new 'DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow' method of requesting bindnow. * Drop unnecessary change to debian/samba-common.dhcp. * Stop removing /etc/network/if-up.d/samba in the samba preinst, the package is just going to add it right back since we still ship it. * Improvements to debian/samba.if-up: - revert wrong fix for bug #659499; there's no way the error message could have come from this version of the script, we aren't invoking /etc/init.d/samba. - use invoke-rc.d to start nmbd, so that we don't start it out in case there's (somehow) a policy against it in place - dump stderr from the 'status' command, which we don't care about - if 'invoke-rc.d nmbd start' fails, return the error instead of silently suppressing it. * Use 'reload' instead of looking at PID files in debian/samba.logrotate. -- Steve Langasek Fri, 21 Oct 2011 22:50:05 +0000 samba (2:3.5.11~dfsg-2ubuntu1) precise; urgency=low * Merge from debian testing. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/patches/error-trans.fix-276472: - Add the translation of Unix Error code -ENOTSUP to NT Error Code - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cups breaks to push the package to also upgrade cups (LP: #639768) + debian/rules: - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. + debian/samba.postinst: - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + debian/patches/fix-debuglevel-name-conflict.patch: Re-add patch that got dropped. -- Chuck Short Tue, 18 Oct 2011 05:34:47 +0000 samba (2:3.5.11~dfsg-2) unstable; urgency=low * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally. * Use dh_links instead of manually creating directories and symlinks from debian/rules. * Switch from dh_movefiles to dh_install and adjust for debhelper compat level 7, in preparation for moving to dh(1). * Where possible, use dh_installman and dh_install's support for target directories instead of moving files around in debian/rules. * We don't need to mess with perms on usr/include/libsmbclient.h anymore in debian/rules, the upstream install target gets it right * Use debian/clean instead of removing left-behind files by hand in the clean target * Convert debian/rules to dh(1). * Don't run debconf-updatepo on clean; not worth the divergence in debian/rules anymore :) * Don't install debian/README.build in the package; this is really only relevant in the source. * Bump to debhelper compat level 9 and build libraries for multiarch. * Drop Makefile.internal from libsmbclient-dev examples so that we can mark libsmbclient-dev Multi-Arch: same. * Bump build-depends on debhelper to 8.9.4, so we ensure we have dpkg-buildflags by default and get full build hardening enabled out of the box - critical for a server like samba. * Use DH_ALWAYS_EXCLUDE instead of passing override options to dh_installexamples. * Pass --sourcedirectory=source3 to dh instead of having to pass it to each dh_auto_* command. * Ironically, this means that we have to manually disable dh_auto_test, which now finds the makefile targets but doesn't work unless we build an extra wrapper library into our binaries that we don't want. * Drop a few configure options from debian/rules that shadow the built-in defaults. * debian/libsmbclient.lintian-overrides: yes, we know the package name doesn't match the soname - and it never should until there's an ABI change. -- Steve Langasek Fri, 07 Oct 2011 21:36:43 -0700 samba (2:3.5.11~dfsg-1ubuntu2) oneiric; urgency=low * debian/patches/fix-debuglevel-name-conflict.patch: Re-add patch that was mistakenly dropped. (LP: #529714) -- Chuck Short Fri, 30 Sep 2011 13:08:34 -0400 samba (2:3.5.11~dfsg-1ubuntu1) oneiric; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/patches/error-trans.fix-276472: - Add the translation of Unix Error code -ENOTSUP to NT Error Code - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cups breaks to push the package to also upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. -- Marc Deslauriers Thu, 11 Aug 2011 12:52:17 -0400 samba (2:3.5.11~dfsg-1) unstable; urgency=low * New upstream release -- Christian Perrier Fri, 05 Aug 2011 20:12:01 +0200 samba (2:3.5.10~dfsg-1) unstable; urgency=low * New upstream release * Security update, fixing the following issues: - CVE-2011-2694: possible XSS attack in SWAT - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT -- Christian Perrier Thu, 28 Jul 2011 12:19:01 +0200 samba (2:3.5.9~dfsg-1ubuntu1) oneiric; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + Dropped: - debian/patches/fix-upstream-lp-738968.patch: Fixed upstream. - debian/patches/fix-debuglevel-name-conflict.patch: Fixed upstream. -- Chuck Short Sat, 18 Jun 2011 18:12:40 +0100 samba (2:3.5.9~dfsg-1) unstable; urgency=low * New upstream release * Add "--quiet" to start-stop-daemon call in reload target in init script. Closes: #572483 * Add examples/LDAP in examples for the samba package. With this, samba.schema will be provided in some way in the package. This very partially addresses #190162 * patches/bug_221618_precise-64bit-prototype.patch: precise 64bits prototype in libsmbclient-dev. Closes: #221618 * patches/no-unnecessary-cups.patch: dropped after upstream changes to printing code * Update Standards to 3.9.2 (checked, no change) * Add build-arch and build-indep targets in debian/rules -- Christian Perrier Sat, 18 Jun 2011 07:08:00 +0200 samba (2:3.5.8~dfsg-5ubuntu2) oneiric; urgency=low * debian/samba-common.dhcp: revert wrong check for executability of /etc/init/smbd.conf. With the previous change, samba would *never* be signalled for the config file update. -- Steve Langasek Sun, 12 Jun 2011 20:54:42 +0000 samba (2:3.5.8~dfsg-5ubuntu1) oneiric; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + debian/patches/fix-upstream-lp-738968.patch: Fix connection to EMC Celerra NAS version 5.6.50. (LP: #738968) + debian/patches/fix-debuglevel-name-conflict.patch: Fix issue with the "debug_level" variable name in libnss_wins.so conflicting with the "debug_level" global variable that some applications. (LP: #529714) -- Chuck Short Sun, 05 Jun 2011 00:14:16 +0100 samba (2:3.5.8~dfsg-5) unstable; urgency=low * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo in fhs-filespath.patch. Closes: #629183, LP: #789097 -- Christian Perrier Sat, 04 Jun 2011 13:48:32 +0200 samba (2:3.5.8~dfsg-4) unstable; urgency=low [ Debconf translations ] * Spanish (Omar Campagne). Closes: #627813 * Swedish (Martin Bagge / brother). Closes: #627849 * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #627866 [ Christian Perrier ] * bug_601406_fix-perl-path-in-example.patch: fix path to perl binary in example file. Closes: #601406 -- Christian Perrier Fri, 27 May 2011 12:23:05 +0200 samba (2:3.5.8~dfsg-3) unstable; urgency=low [ Debconf translations ] * Italian (Luca Monducci). Closes: #626674 * Dutch (Vincent Zweije). Closes: #627519 * Czech (Miroslav Kure). Closes: #627442 -- Christian Perrier Tue, 24 May 2011 22:40:04 +0200 samba (2:3.5.8~dfsg-2ubuntu1) oneiric; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + debian/patches/fix-upstream-lp-738968.patch: Fix connection to EMC Celerra NAS version 5.6.50. (LP: #738968) + debian/patches/fix-debuglevel-name-conflict.patch: Fix issue with the "debug_level" variable name in libnss_wins.so conflicting with the "debug_level" global variable that some applications. (LP: #529714) -- Chuck Short Tue, 24 May 2011 19:56:36 +0100 samba (2:3.5.8~dfsg-2) unstable; urgency=low [ Jelmer Vernooij ] * Add libwbclient-dev package. * Build against external libtdb. * Bump standards version to 3.9.1 (no changes). [ Mathieu Parent ] * Builddep on libctdb-dev or ctdb < 1.10 [ Christian Perrier ] * Use db_settitle in debconf questions and make these titles translatable. Closes: #560318 * Test the presence of testparm before trying to use it in init script Closes: #606320 * Add cups to Should-{Start,Stop} in LSB headers of samba init script to guarantee that CUPS is started before samba. Closes: #619132 * Drop libsmbclient-dev useless dependency on samba-common Closes: #597987 [ Debconf translations ] * French (Christian Perrier) * Japanese (Kenshi Muto). Closes: #626474 * Galician (Miguel Anxo Bouzada). Closes: #626477 * Thai (Theppitak Karoonboonyanan). Closes: #626487 * Russian (Yuri Kozlov). Closes: #626523 * Danish (Joe Hansen). Closes: #626531 * Esperanto (Felipe Castro). Closes: #626558 * Hebrew (Eran Cohen). Closes: #626638 * Bokmål, (Bjørn Steensrud). * Italian (Luca Monducci). Closes: #626674 * Finnish (Tapio Lehtonen). Closes: #626890 * Portuguese (Miguel Figueiredo). Closes: #627224 * German (Holger Wansing). Closes: #627354 * Czech (Miroslav Kure). Closes: #627442 -- Christian Perrier Sun, 22 May 2011 21:15:21 +0200 samba (2:3.5.8~dfsg-1ubuntu2.2) natty-proposed; urgency=low * debian/patches/fix-debuglevel-name-conflict.patch: + Fix issue with the "debug_level" variable name in libnss_wins.so conflicting with the "debug_level" global variable that some applications use (LP: #529714) -- Chow Loong Jin Mon, 02 May 2011 21:30:54 +0800 samba (2:3.5.8~dfsg-1ubuntu2.1) natty-proposed; urgency=low * debian/samba.smbd.upstart: Do not attempt to start smbd until network device is up, previously smbd was starting too early and often failing. (LP: #771305) -- Dave Walker (Daviey) Thu, 28 Apr 2011 10:45:32 +0100 samba (2:3.5.8~dfsg-1ubuntu2) natty; urgency=low * debian/patches/fix-upstream-lp-738968.patch: Fix connection to EMC Celerra NAS version 5.6.50. (LP: #738968) -- Chuck Short Wed, 06 Apr 2011 12:56:42 -0400 samba (2:3.5.8~dfsg-1ubuntu1) natty; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + Dropped: - debian/patches/fix-windows7-print-connection.patch: Merged upstream. - debian/patches/security-CVE-2011-0719.patch: Merged upstream. -- Chuck Short Thu, 10 Mar 2011 10:03:01 -0500 samba (2:3.5.8~dfsg-1) unstable; urgency=low * New upstream release. This fixes the following bugs: - Winbind leaks gids with idmap ldap backend (upstrem #7777) Closes: #613624 - printing from Windows 7 fails with 0x000003e6 Closes: #617429 * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream #7997 -- Christian Perrier Tue, 08 Mar 2011 22:38:32 +0100 samba (2:3.5.7~dfsg-1) unstable; urgency=low [ Christian Perrier ] * New upstream release * Security update, fixing the following issue: - CVE-2011-0719: denial of service by memory corruption * Use architecture wildcard "linux-any" in build dependencies Closes: #563372 -- Christian Perrier Tue, 01 Mar 2011 20:59:34 +0100 samba (2:3.5.6~dfsg-5ubuntu3) natty; urgency=low * debian/patches/fix-windows7-print-connection.patch: Fix error "0x000003e6" when trying to connect a Windows 7 printer to a domain. (LP: #674216) * debian/samba-common.dhcp: Take in account of the upstart script. (LP: #652065) -- Chuck Short Wed, 02 Mar 2011 16:05:41 -0500 samba (2:3.5.6~dfsg-5ubuntu2) natty; urgency=low * SECURITY UPDATE: denial of service via missing range checks on file descriptors - debian/patches/security-CVE-2011-0719.patch: validate miscellaneous file descriptors. - CVE-2011-0719 -- Marc Deslauriers Mon, 28 Feb 2011 14:35:24 -0500 samba (2:3.5.6~dfsg-5ubuntu1) natty; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. -- Chuck Short Sun, 06 Feb 2011 20:49:57 +0000 samba (2:3.5.6~dfsg-5) unstable; urgency=low * Fix FTBFS on Hurd. Closes: #610678 * Only try parsing dhcpd.conf is it's not empty, in dhclient-enter-hooks.d/samba. Closes: #594088. -- Christian Perrier Sat, 05 Feb 2011 13:50:22 +0100 samba (2:3.5.6~dfsg-4ubuntu3) natty; urgency=low * Fix exit code of pre-start script in nmbd upstart script. (LP: #707563) * Skip testparm run if smb.conf does not exist in nmbd upstart script. -- Jelmer Vernooij Tue, 25 Jan 2011 15:16:31 -0800 samba (2:3.5.6~dfsg-4ubuntu2) natty; urgency=low * debian/samba.nmbd.upstart: create /var/run/samba directory before running testparm. Fixes start-up of nmb after boot. (LP: #596064) Thanks to Jelmer Vernooij. -- Chuck Short Tue, 25 Jan 2011 10:09:33 -0500 samba (2:3.5.6~dfsg-4ubuntu1) natty; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. -- Chuck Short Sat, 15 Jan 2011 23:22:36 +0000 samba (2:3.5.6~dfsg-4) unstable; urgency=low * Fix pam_winbind file descriptor leak with a patch proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265. Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter confirmed it is not while the patch applied here fixes the file descriptor leak. Closes: #574468 [ Debconf translations ] * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #607402 -- Christian Perrier Sat, 15 Jan 2011 18:06:22 +0100 samba (2:3.5.6~dfsg-3ubuntu3) natty; urgency=low * debian/samba.if-up: Only run if /etc/init.d/smbd is installed. (LP: #659499) -- Chuck Short Tue, 04 Jan 2011 09:11:45 -0500 samba (2:3.5.6~dfsg-3ubuntu2) natty; urgency=low * debian/source_samba.py: resolve some inconsistencies in key names -- Brian Murray Mon, 20 Dec 2010 13:37:26 -0800 samba (2:3.5.6~dfsg-3ubuntu1) natty; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + Dropped: - debian/patches/fix-lpbug-393012.patch: Dropped in favor of debian's patch. -- Chuck Short Wed, 08 Dec 2010 00:16:04 +0000 samba (2:3.5.6~dfsg-3) unstable; urgency=low [ Julien Cristau ] * Bump libwbclient0 shlibs to match the newest version in the symbols file. * Mark libwbclient0 as breaking other samba packages with versions older than 2:3.4.1, as they were linked against libtalloc1 instead of libtalloc2, and the combination causes crashes (closes: #593823). -- Christian Perrier Mon, 06 Dec 2010 20:14:04 +0100 samba (2:3.5.6~dfsg-2) unstable; urgency=low [ Steve Langasek ] * Fix debian/rules update-archs target to not add extra spaces on every invocation... [ Debconf translations ] * Catalan (Jordi Mallach). Closes: #601101 * Japanese (Kenshi Muto). Closes: #601364 * Bulgarian (Damyan Ivanov). Closes: #601366 * Hebrew (Omer Zak). Closes: #601633 * Kurdish (Erdal Ronahî). Closes: #601719 * Dutch (Remco Rijnders). Closes: #602220 * Greek (Konstantinos Margaritis). [ Christian Perrier ] * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy files from a SMB share using SMB signing.". Backported from to be released 3.5.7 version Closes: #605729 -- Christian Perrier Sat, 04 Dec 2010 07:44:22 +0100 samba (2:3.5.6~dfsg-1ubuntu2) natty; urgency=low * debian/patches/fix-lpbug-393012.patch: Fix for "invalid arguement" when copying file from windows using nautilus. (LP: #393012) -- Chuck Short Fri, 26 Nov 2010 10:00:08 -0500 samba (2:3.5.6~dfsg-1ubuntu1) natty; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. - Add cuups breaks to push the package to aslo upgrade cups (LP: #639768) + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + Dropped: - debian/patches/security-CVE-2010-3069.patch: No longer needed. -- Chuck Short Tue, 12 Oct 2010 12:14:52 +0100 samba (2:3.5.6~dfsg-1) unstable; urgency=low * New upstream release. Fixes the following Debian bug: - rpcclient readline segfault. Closes: #597203 -- Christian Perrier Sun, 10 Oct 2010 09:59:37 +0200 samba (2:3.5.5~dfsg-1) unstable; urgency=high [ Christian Perrier ] * New upstream release. Security release fixing: - CVE-2019-3069: Buffer overrun vulnerability in sid_parse. Closes: #596891. * Fix comment in swat's postinst. It is not turned off by default Closes: #596040 * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst [ Steve Langasek ] * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for pam-auth-update. Closes: #594325. [ Debconf translations ] * Arabic (Ossama Khayat). Closes: #596164 -- Christian Perrier Tue, 14 Sep 2010 23:03:35 +0200 samba (2:3.5.4~dfsg-2) unstable; urgency=low * Release to unstable [ Debconf translations ] * Danish (Joe Dalton). Closes: #592789. * Galician (Jorge Barreiro). Closes: #592809 [ Steve Langasek ] * debian/patches/fhs-filespaths.patch, debian/samba.postinst, debian/winbind.postinst: move some files from /etc/samba to /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb, and idmap2.tdb. -- Christian Perrier Tue, 07 Sep 2010 17:47:32 +0200 samba (2:3.6.0~pre1-1) experimental; urgency=low * New upstream release -- Christian Perrier Wed, 04 Aug 2010 01:39:11 +0200 samba (2:3.5.4~dfsg-1ubuntu8) maverick; urgency=low * debian/samba.if-up: We dont use init scripts in samba anymore. (LP: #654556) -- Chuck Short Mon, 04 Oct 2010 09:50:26 -0400 samba (2:3.5.4~dfsg-1ubuntu7) maverick; urgency=low * debian/control: Add cups breaks to push the package manager to also upgrade cups (LP: #639768). -- Mathias Gug Thu, 16 Sep 2010 12:19:11 -0400 samba (2:3.5.4~dfsg-1ubuntu6) maverick; urgency=low [ Philip Muskovac ] * Fix typo in apport hook (LP: #623798) -- Mathias Gug Wed, 15 Sep 2010 20:18:59 -0400 samba (2:3.5.4~dfsg-1ubuntu5) maverick; urgency=low * SECURITY UPDATE: denial of service and possible arbitrary code execution via large number of SID sub authorities - debian/patches/security-CVE-2010-3069.patch: limit number of SID sub authorities in libcli/security/dom_sid.*, source3/lib/util_sid.c, source3/libads/ldap.c, source3/libsmb/cliquota.c, source3/smbd/nttrans.c. - CVE-2010-3069 -- Marc Deslauriers Tue, 14 Sep 2010 09:20:45 -0400 samba (2:3.5.4~dfsg-1ubuntu4) maverick; urgency=low * Fix a typo in debian/smb.conf introduced in a previous merge that causes 3-way-merge to fail gratuitously for anyone who has enabled the [homes] share. -- Steve Langasek Fri, 10 Sep 2010 11:52:45 +0000 samba (2:3.5.4~dfsg-1ubuntu3) maverick; urgency=low * Add the translation of Unix Error code -ENOTSUP to NT Error Code NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error. (LP: #276472) -- Surbhi Palande Mon, 16 Aug 2010 15:09:30 +0300 samba (2:3.5.4~dfsg-1ubuntu2) maverick; urgency=low * Resync with debian: + debian/control: Update standards version to 3.9.0. + debian/samba-common.links: Add symlink from /etc/dhcp/dhclient-enter-hooks.d to /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new isc-dhcp-client package. -- Chuck Short Thu, 15 Jul 2010 13:26:21 -0400 samba (2:3.5.4~dfsg-1ubuntu1) maverick; urgency=low * Merge from Debian experimental, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksmbpasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against or suggest ctdb. - Add dependency on samba-common-bin to samba. + debian/rules: - enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Switch to upstart: - Add debian/samba.{nmbd,smbd}.upstart. - Don't ship the /etc/network/if-up.d file. + debian/samba.postinst: - Fixed bashism. - Avoid scary pdbedit warnings on first import. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted + debian/samba.logrotate: Make it upstart compatible + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. + Drop the per-release smb.conf templates, only needed for upgrade paths that are no longer supported. * Drop undocumented, unused debian/docs. * Drop contentless debian/README.Debian. * Readd tdbtorture, which was dropped without explanation * Fix up BIND_NOW handling to not clobber other LDFLAGS from dpkg-buildflags, and to pass the value to configure as intended. -- Steve Langasek Tue, 13 Jul 2010 20:05:30 +0000 samba (2:3.5.4~dfsg-1) experimental; urgency=low * New upstream release -- Christian Perrier Tue, 29 Jun 2010 22:00:53 +0200 samba (2:3.5.4~dfsg-0ubuntu1) maverick; urgency=low * New upstream release, major enhancements: + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap (bug #7448). + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507). * Refreshed patches. -- Chuck Short Wed, 23 Jun 2010 09:33:36 -0400 samba (2:3.5.3~dfsg-1) experimental; urgency=low * New upstream release. Fixes the following bugs: - smbclient segfaults when used against old samba "security = share" Closes: #574886 * Drop duplicate build dependency on ctdb -- Christian Perrier Wed, 19 May 2010 22:07:49 +0200 samba (2:3.5.3~dfsg-0ubuntu4) maverick; urgency=low * debian/control: Add dependency of samba-common-bin to samba. (LP: #572410) -- Chuck Short Fri, 11 Jun 2010 08:44:13 -0400 samba (2:3.5.3~dfsg-0ubuntu3) maverick; urgency=low * debian/source_samba.py: if /etc/samba/smb.conf is missing, pop up a message for why this is not a bug, and end run. (LP: #591043) -- C de-Avillez Mon, 07 Jun 2010 19:06:51 -0500 samba (2:3.5.3~dfsg-0ubuntu2) maverick; urgency=low * debian/control: Drop ctdb build dependency again, it's not in main. -- Martin Pitt Tue, 01 Jun 2010 08:17:20 +0200 samba (2:3.5.3~dfsg-0ubuntu1) maverick; urgency=low * New upstream release, major enhancements: + Fix MS-DFS functionality (bug #7339). + Fix a Winbind crash when scanning trusts (bug #7389). + Fix problems with SIGCHLD handling in Winbind (bug #7317). * Refreshed patches. -- Chuck Short Thu, 20 May 2010 11:04:36 -0400 samba (2:3.5.2~dfsg-2ubuntu1) maverick; urgency=low * Merge from Debian Experimental, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in additon to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.conf: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libswbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb, since its not in main yet. + debian/rules: - Enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile. - debian/rules, debian/samba.dirs, debian/samba.files: install + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + Dropped: - debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported from Samba 3.5.x (LP: #182572) [Chuck Short] * Removed unsupported smb.conf files. * debian/samba.postinst: Fixed bashism. (LP: #576307) -- Chuck Short Fri, 07 May 2010 14:40:42 -0400 samba (2:3.5.2~dfsg-2) experimental; urgency=low * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and 2:3.4.7~dfsg-2 -- Christian Perrier Tue, 04 May 2010 17:13:47 +0200 samba (2:3.5.2~dfsg-1) experimental; urgency=low * New upstream release * Bugs fixed upstream: - Fix parsing of the gecos field Closes: #460494 -- Christian Perrier Thu, 08 Apr 2010 19:48:07 +0200 samba (2:3.5.1~dfsg-1) experimental; urgency=low * New upstream release. Security fix: all smbd processes inherited CAP_DAC_OVERRIDE capabilities, allowing all file system access to be allowed even when permissions should have denied access. -- Christian Perrier Tue, 09 Mar 2010 10:54:01 +0100 samba (2:3.5.0dfsg-1) experimental; urgency=low * New upstream release. Not using "3.5.0~dfsg" as version number because we used a "higher" version number in previous versions. -- Christian Perrier Tue, 02 Mar 2010 22:03:15 +0100 samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low * New upstream release candidate -- Christian Perrier Sat, 20 Feb 2010 08:36:57 +0100 samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low * New upstream pre-release * Use new --with-codepagedir option. Consequently drop codepages-location.patch * Drop "Using Samba" from the samba-doc file list as it was removed upstream. -- Christian Perrier Sun, 31 Jan 2010 11:53:48 +0100 samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low [ Christian Perrier ] * New upstream pre-release -- Christian Perrier Fri, 15 Jan 2010 23:31:01 +0100 samba (2:3.4.8~dfsg-2) unstable; urgency=low [ Steve Langasek ] * Drop the per-release smb.conf templates, only needed for upgrade paths that are no longer supported. * Call /etc/init.d/samba directly from the logrotate script instead of using invoke-rc.d, to address the irony that the only package I work on that *has* a logrotate script is inconsistent with my position in bug #445203. * Fix a bashism in the samba postinst that can cause the package installation to fail under dash. LP: #576307. * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new isc-dhcp-client package. Closes: #585056. [ Christian Perrier ] * Don't copy system accounts from /etc/passwd to /var/lib/samba/passdb.tdb. Closes: #502801 * Update Standards to 3.9.0 (checked, no change) * Backport patch for upstream bug #7139 to fix "owner of file not available with kerberos" Closes: #586337 -- Steve Langasek Wed, 14 Jul 2010 11:59:28 -0700 samba (2:3.4.8~dfsg-1) unstable; urgency=low [ Christian Perrier ] * New upstream release * Bugs fixed upstream: - Fix writing with vfs_full_audit. Closes: #574011 * Drop deprecated 'share modes' parameter from default smb.conf Closes: #580561 * Enable PIE during configure. Closes: #509135 * Avoid winbind's logrotate script to fail when there is no /var/run/samba directory. Closes: #569926 * Add explanations about "passdb backend" default setting change Closes: #553904 [ Debconf translations ] * Spanish (Omar Campagne). Closes: #579011 -- Christian Perrier Wed, 12 May 2010 05:45:52 +0200 samba (2:3.4.7~dfsg-2ubuntu1) maverick; urgency=low * Merge from Debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in additon to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.conf: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libswbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb, since its not in main yet. + debian/rules: - Enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile. - debian/rules, debian/samba.dirs, debian/samba.files: install + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported from Samba 3.5.x (LP: #182572)\ + debian/samba.postinst: Avoid scary pdbedit warnings on first import. (LP: #24741) + debian/samba.logrotate: Make it upstart compatible (LP: #529290) + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. (LP: #507374) + Don't ship the /etc/samba/if-up files, we use upstart. -- Chuck Short Wed, 05 May 2010 03:25:03 +0100 samba (2:3.4.7~dfsg-2) unstable; urgency=low [ Christian Perrier ] * Drop smbfs package (now provided by cifs-utils as a dummy transition package) [ Debconf translations ] * Portuguese (Miguel Figueiredo). Closes: #575958 [ Steve Langasek ] * winbind.prerm: don't forget to remove the PAM profile on package removal :/ * Fix winbind.pam-config to not interfere with password changes for non-winbind accounts. Closes: #573323, LP: #546874. * debian/samba.if-up, debian/rules: add an if-up.d script for samba to try to start nmbd, if it's not running because /etc/init.d/samba ran before the network was up at boot time. Closes: #576415, LP: #462169. * debian/samba.if-up: allow "NetworkManager" as a recognized address family... it's obviously /not/ an address family, but it's what gets sent when using NM, so we'll cope for now. -- Christian Perrier Sat, 17 Apr 2010 07:49:49 +0200 samba (2:3.4.7~dfsg-1ubuntu3) lucid; urgency=low * debian/winbind.pam-config: Fix potential breakage with stacking of lower-priority modules in common-passwd (LP: #556996) -- Thierry Carrez Fri, 09 Apr 2010 16:50:07 +0200 samba (2:3.4.7~dfsg-1ubuntu2) lucid; urgency=low * debian/winbind.pam-config: Fix password PAM profile for winbind, thanks to Steve Langasek for investigation and fix (LP: #546874) * debian/winbind.prerm, debian/winbind.postinst: Enable and disable winbind PAM profile on package install/removal (LP: #556342) -- Thierry Carrez Tue, 06 Apr 2010 11:59:54 +0200 samba (2:3.4.7~dfsg-1ubuntu1) lucid; urgency=low * Merge from debian testing. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in additon to authenticated ones. - add map to guest = Bad user, maps bad username to gues access. + debian/samba-common.conf: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libswbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb, since its not in main yet. + debian/rules: - Enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile. - debian/rules, debian/samba.dirs, debian/samba.files: install + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + debian/control: Recommend keyutils for smbfs (LP: #493565) + debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported from Samba 3.5.x (LP: #182572) + debian/samba.postinst: Avoid scary pdbedit warnings on first import. (LP: #24741) + debian/samba.logrotate: Make it upstart compatible (LP: #529290) + debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. (LP: #507374) + Dropped: debian/patches/debian/patches/security-CVE-2010-0728.patch: Included upstream. -- Chuck Short Fri, 19 Mar 2010 21:17:40 +0000 samba (2:3.4.7~dfsg-1) unstable; urgency=low [ Steve Langasek ] * Add a PAM profile for pam_winbind. Closes: #566890, LP: #282751. * Add the correct versioned build dependency on libtalloc-dev as we need 2.0.1 to build samba. Closes: #572603 * Add avr32 to arches with a build dependency on ctdb. Closes: #572126 [ Christian Perrier ] * New upstream release. Security fix: all smbd processes inherited CAP_DAC_OVERRIDE capabilities, allowing all file system access to be allowed even when permissions should have denied access. -- Christian Perrier Tue, 09 Mar 2010 10:52:24 +0100 samba (2:3.4.6~dfsg-1ubuntu3) lucid; urgency=low [Thierry Carrez] * debian/samba.postinst: Avoid scary pdbedit warnings on first import (LP: #24741) [Chuck Short] * debian/samba.logrotate: Make it upstart compatible (LP: #529290) * debian/samba-common.dhcp: Fix typo to get a proper parsing in /etc/samba/dhcp. (LP: #507374) -- Thierry Carrez Thu, 11 Mar 2010 13:57:06 +0100 samba (2:3.4.6~dfsg-1ubuntu2) lucid; urgency=low * SECURITY UPDATE: permission bypass via incorrect CAP_DAC_OVERRIDE handling. - debian/patches/security-CVE-2010-0728.patch: fix capability handling in source3/{include/smb.h,lib/system.c,smbd/server.c}. - CVE-2010-0728 * Removed patches: - debian/patches/debian-changes-2:3.4.5~dfsg-2ubuntu2: merge error - debian/patches/debian-changes-2:3.4.6~dfsg-1ubuntu1: merge error -- Marc Deslauriers Mon, 08 Mar 2010 17:50:57 -0500 samba (2:3.4.6~dfsg-1ubuntu1) lucid; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in additon to authenticated ones. - add map to guest = Bad user, maps bad username to gues access. + debian/samba-common.conf: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libswbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb, since its not in main yet. + debian/rules: - Enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile. - debian/rules, debian/samba.dirs, debian/samba.files: install + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + debian/control: Recommend keyutils for smbfs (LP: #493565) + Switch to upstart: - Switch smbd and nmbd over to upstart jobs, to ensure nmbd starts reliably after the network is up. LP: #523868. + debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported from Samba 3.5.x. (LP: #182572) + debian/patches/security-CVE-2009-3297.patch: validate mount point and perform mount in "." to prevent race in source3/client/mount.cifs.c (CVE-2009-3297) -- Chuck Short Wed, 03 Mar 2010 10:52:13 -0500 samba (2:3.4.6~dfsg-1) unstable; urgency=low * New upstream release -- Christian Perrier Fri, 26 Feb 2010 22:39:50 +0100 samba (2:3.4.5~dfsg-2ubuntu4) lucid; urgency=low * debian/patches/ubuntu-gecos-fix.patch: Fix gecos parsing backported from Samba 3.5.x. (LP: #182572) -- Chuck Short Wed, 03 Mar 2010 09:35:26 -0500 samba (2:3.4.5~dfsg-2ubuntu3) lucid; urgency=low * debian/source_samba.py: - Fixed crashing apport hook. (LP: #526663) - Add more options to list of samba client (LP: #526666) -- Chuck Short Fri, 26 Feb 2010 09:10:02 -0500 samba (2:3.4.5~dfsg-2ubuntu2) lucid; urgency=low * Switch smbd and nmbd over to upstart jobs, to ensure nmbd starts reliably after the network is up. LP: #523868. * Remove /etc/network/if-up.d/samba on upgrade, superseded by the above. -- Steve Langasek Thu, 18 Feb 2010 12:51:45 +0000 samba (2:3.4.5~dfsg-2ubuntu1) lucid; urgency=low * Merge from debian unstable. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in additon to authenticated ones. - add map to guest = Bad user, maps bad username to gues access. + debian/samba-common.conf: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libswbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb, since its not in main yet. + debian/rules: - Enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile. - debian/rules, debian/samba.dirs, debian/samba.files: install + Add apport hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + debian/rules, debian/samba.if-up: allow "NetworkManager" as a recognized address family... it's obviously /not/ an address family, but it's what gets sent when using NM, so we'll cope for now. (LP: #462169). Taken from karmic-proposed. + debian/control: Recommend keyutils for smbfs (LP: #493565) + debian/patches/security-CVE-2009-3297.patch: add back in as it was incorrectly removed in last merge + Removed patches: - debian/patches/debian-changes-2:3.4.3-2ubuntu1: merge mistake - debian/patches/debian-changes-2:3.4.5~dfsg-1ubuntu1: merge mistake - debian/patches/net-usershare-list-3.4.0.patch: not used - debian/patches/fix-crash-when-loading-interfaces.patch: not used - debian/patches/fix-upstream-6680.patch: not used - debian/patches/fix-password-expiry-calculation.patch: not used -- Marc Deslauriers Tue, 16 Feb 2010 19:23:34 -0500 samba (2:3.4.5~dfsg-2) unstable; urgency=low [ Steve langasek ] * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar" is explicitly allowed by Policy now, and this change introduced a syntax error. Closes: #566946. [ Christian Perrier ] * No longer maker (u)mount.cifs setuid root. Add a notice about this in the package's NEWS.Debian file Closes: #567554 * Use dh_lintian instead of manual install of lintian overrides * Updated Standards to 3.8.4 (checked, no change) -- Christian Perrier Sat, 13 Feb 2010 14:36:33 +0100 samba (2:3.4.5~dfsg-1ubuntu2) lucid; urgency=low * debian/source_samba.py: Typo and grammar fixes for the apport hook. -- Brian Murray Tue, 09 Feb 2010 11:57:20 -0800 samba (2:3.4.5~dfsg-1ubuntu1) lucid; urgency=low * Merge from debian testing. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in additon to authenticated ones. - add map to guest = Bad user, maps bad username to gues access. + debian/samba-common.conf: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libswbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb, since its not in main yet. + debian/rules: - Enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile. - debian/rules, debian/samba.dirs, debian/samba.files: install + Add apoort hook: - Created debian/source_samba.py. - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install + debian/rules, debian/samba.if-up: allow "NetworkManager" as a recognized address family... it's obviously /not/ an address family, but it's what gets sent when using NM, so we'll cope for now. (LP: #462169). Taken from karmic-proposed. + debian/control: Recommend keyutils for smbfs (LP: #493565) + Dropped patches: - debian/patches/security-CVE-2009-3297.patch: No longer needed - debian/patches/fix-too-many-open-files.patch: No longer needed -- Chuck Short Fri, 29 Jan 2010 06:16:15 +0000 samba (2:3.4.5~dfsg-1) unstable; urgency=low * New upstream release. Bugs fixed by this release: - Memory leak in smbd. Closes: #538819, #558453 * Declare a versioned dependency of winbind and samba on libwbclient0 Closes: #550481 * A few lintian fixes: * Drop /var/run/samba from samba-common. The directory is created by init scripts when needed. * No longer prepend a path to the mksmbpasswd call in samba.postinst. This prevents the local administrator to use a replacement version for some local reason. -- Christian Perrier Sat, 23 Jan 2010 12:16:42 +0100 samba (2:3.4.4~dfsg-1) unstable; urgency=low * New upstream version. * Drop all RFC files from upstream source, therefore using a "~dfsg" suffix to upstream version number. * Bugs fixed upstream: - fixed list of workgroup servers in libsmbclient. Closes: #555462, #561148 - fixed documentation of the credentials file format in mount.cifs(8). Closes: #552250 -- Christian Perrier Thu, 14 Jan 2010 20:16:34 +0100 samba (2:3.4.3-2ubuntu3) lucid; urgency=low * SECURITY UPDATE: privilege escalation via mount.cifs race - debian/patches/security-CVE-2009-3297.patch: validate mount point and perform mount in "." to prevent race in source3/client/mount.cifs.c. - CVE-2009-3297 -- Marc Deslauriers Thu, 28 Jan 2010 15:21:15 -0500 samba (2:3.4.3-2ubuntu2) lucid; urgency=low * debian/rules, debian/samba.if-up: allow "NetworkManager" as a recognized address family... it's obviously /not/ an address family, but it's what gets sent when using NM, so we'll cope for now. (LP: #462169). Taken from karmic-proposed. * debian/control: Recommend keyutils for smbfs (LP: #493565) * debian/patches/series, debian/patches/fix-too-many-open-files.patch: Windows 7 needs the Windows server open file handle number of 16384 handles. (LP: #462172) -- Chuck Short Tue, 19 Jan 2010 12:54:46 -0500 samba (2:3.4.3-2ubuntu1) lucid; urgency=low * Merge from debian testing. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in additon to authenticated ones. - add map to guest = Bad user, maps bad username to gues access. + debian/samba-common.conf: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libswbclient0 replace/conflickt with hardy's likewise-open. - Don't build against ctdb. - Build-depend on libreadline-dev instead of libreadline5-dev. + debian/rules: - Enable "native" PIE hardening. - Add BIND_NOW to maximize benefit of RELRO hardening. + Add ufw integration: - Created debian/samba.ufw.profile. - debian/rules, debian/samba.dirs, debian/samba.files: install -- Chuck Short Mon, 28 Dec 2009 05:02:32 +0000 samba (2:3.4.3-2) unstable; urgency=low [ Christian Perrier ] * Switch to source format 3.0 (quilt) * Better adapt "add machine script" example to adduser Thanks to Heiko Schlittermann for the suggestion Closes: #555466 [ Steve Langasek ] * The "I hate non-declarative alternatives" upload: - debian/samba{,-common}.prerm: don't call update-alternatives --remove on upgrade, /do/ call it on other invocations of the prerm script. If these tools ever go away, the removal needs to be handled on upgrade by the maintainer scripts of the new package version. - debian/samba{,-common-bin}.postinst: call update-alternatives unconditionally, don't second-guess the maintainer script arguments. - debian/samba.postinst: call update-alternatives after the debconf handling, not before; debconf triggers a re-exec of the script so anything done before invoking debconf is wasted because it will be re-done, and if there's already a debconf frontend running when this is called, the not-redirected update-alternatives output will confuse it. Closes: #558116. - debian/samba-common.prerm: move to samba-common-bin, this is the package that owns these binaries. -- Christian Perrier Thu, 17 Dec 2009 16:53:13 +0100 samba (2:3.4.3-1ubuntu2) lucid; urgency=low * debian/rules: add BIND_NOW to maximize benefit of RELRO hardening. -- Kees Cook Sun, 20 Dec 2009 23:56:17 -0800 samba (2:3.4.3-1ubuntu1) lucid; urgency=low * Merge from debian testing. Remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu + debian/smb.conf: - Add "(Samaba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. - Build-depend on libreadline-dev instead of libreadline5-dev. + debian/rules: - enable "native" PIE hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install + Dropped: - debian/patches/fix-smbclient-long-names.patch: Already upstream. -- Chuck Short Mon, 23 Nov 2009 23:28:03 +0000 samba (2:3.4.3-1) unstable; urgency=low * New upstream release. This fixes the following bugs: - Do not attempt to update /etc/mtab if it is a symbolic link. Closes: #408394 * Bump Standards-Version to 3.8.3 (checked) -- Christian Perrier Sat, 31 Oct 2009 14:32:07 +0100 samba (2:3.4.2-1ubuntu1) lucid; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu + debian/smb.conf: - Add "(Samaba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. - Build-depend on libreadline-dev instead of libreadline5-dev. + debian/rules: - enable "native" PIE hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install + debian/patches/fix-smbclient-long-names.patch: Samba shares with more than 12 characters are not displayed. (LP: #449735) + Dropped: - debian/patches/536757.patch: Already upstream - debian/patches/net-usershare-list-3.4.0.patch: Already upstream - debian/patches/fix-crash-when-loading-interfaces.patch: Already upstream - debian/patches/fix-upstream-6680.patch: Already upstream - debian/patches/security-CVE-2009-2813.patch: Already upstream - debian/patches/security-CVE-2009-2948.patch: Already upstream - debian/patches/security-CVE-2009-2906.patch: Already upstream -- Chuck Short Wed, 21 Oct 2009 22:14:57 +0100 samba (2:3.4.2-1) unstable; urgency=high * New upstream release. Security update. * CVE-2009-2813: Connecting to the home share of a user will use the root of the filesystem as the home directory if this user is misconfigured to have an empty home directory in /etc/passwd. * CVE-2009-2948: If mount.cifs is installed as a setuid program, a user can pass it a credential or password path to which he or she does not have access and then use the --verbose option to view the first line of that file. * CVE-2009-2906: Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% CPU loop, causing a DoS on the Samba server. -- Christian Perrier Sat, 03 Oct 2009 08:30:33 +0200 samba (2:3.4.1-2) unstable; urgency=low * ./configure --disable-avahi, to avoid accidentally picking up an avahi dependency when libavahi-common-dev is installed. -- Steve Langasek Sat, 26 Sep 2009 00:01:12 -0700 samba (2:3.4.1-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. This fixes the following bugs: - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec for the clever analysis and collaboration with upstream. Closes: #541171 - Fix password change propagation with ldapsam. Closes: #505215 - Source package contains non-free IETF RFC/I-D. Closes: #538034 * Turn the build dependency on libreadline5-dev to libreadline-dev to make further binNMUs easier when libreadline soname changes Thanks to Matthias Klose for the suggestion [ Steve Langasek ] * Don't build talloctort when using --enable-external-talloc; and don't try to include talloctort in the samba-tools package, since we're building with --enable-external-talloc. :) Closes: #546828. -- Steve Langasek Mon, 21 Sep 2009 22:20:22 -0700 samba (2:3.4.0-5) unstable; urgency=low * Move /etc/pam.d/samba back to samba-common, because it's shared with samba4. Closes: #545764. -- Steve Langasek Tue, 08 Sep 2009 18:43:17 -0700 samba (2:3.4.0-4) unstable; urgency=low [ Steve Langasek ] * debian/samba.pamd: include common-session-noninteractive instead of common-session, to avoid pulling in modules specific to interactive logins such as pam_ck_connector. * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the above. * rename debian/samba.pamd to debian/samba.pam and call dh_installpam from debian/rules install, bringing us a smidge closer to a stock debhelper build * don't call pyversions from debian/rules, this throws a useless error message during build. * fix up the list of files that need to be removed by hand in the clean target; the majority of these are now correctly handled upstream. * debian/rules: fix the update-arch target for the case of unversioned build-deps. * Pull avr32 into the list of supported Linux archs. Closes: #543543. * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the patch. Closes: #541367. [ Christian Perrier ] * Use DEP-3 for patches meta-information [ Steve Langasek ] * Change swat update-inetd call to use --remove only on purge, and --disable on removal. * Add missing build-dependency on pkg-config, needed to fix libtalloc detection * debian/patches/external-talloc-support.patch: fix the Makefile so it works when using external talloc instead of giving a missing-depend error. * debian/patches/autoconf.patch: resurrect this patch, needed for the above. * debian/rules: build with --without-libtalloc --enable-external-libtalloc, also needed to fix the build failure. -- Steve Langasek Mon, 07 Sep 2009 22:58:29 -0700 samba (2:3.4.0-3ubuntu5) karmic; urgency=low * SECURITY UPDATE: whole filesystem share via user with no home directory - debian/patches/security-CVE-2009-2813.patch: make sure home directory is set in source3/param/loadparm.c, source3/smbd/service.c. - CVE-2009-2813 * SECURITY UPDATE: credentials file disclosure and unauthorized usage via setuid mount.cifs - debian/patches/security-CVE-2009-2948.patch: don't open credentials file if user doesn't have permission, and don't print password when using verbose option in source3/client/mount.cifs.c. - CVE-2009-2948 * SECURITY UPDATE: denial of service via unexpected oplock break notification reply - debian/patches/security-CVE-2009-2906.patch: track messages already processed in source3/include/smb.h, source3/smbd/process.c. - CVE-2009-2906 -- Marc Deslauriers Thu, 01 Oct 2009 08:20:29 -0400 samba (2:3.4.0-3ubuntu4) karmic; urgency=low * Build-depend on libreadline-dev instead of libreadline5-dev. -- Matthias Klose Sat, 19 Sep 2009 22:16:40 +0200 samba (2:3.4.0-3ubuntu3) karmic; urgency=low * Fix FTBFS: fix libtalloc detection. (cherry picked from Debian) + debian/control: Add pkg-config as a dependency, needed to fix libtalloc detection + debian/patches/external-talloc-support.patch: fix the Makefile so it works when using external talloc instead of giving a missing-depend error. + debian/patches/autoconf.pach: Resurrect needed to fix the libtalloc errors. + debian/rules: build with --without-libtalloc and --enale-external-libtalloc * debian/patches/fix-crash-when-loading-interfaces.patch: Fix segfault when loading some wonky configuration files. (LP: #421419) -- Chuck Short Fri, 18 Sep 2009 08:29:06 -0400 samba (2:3.4.0-3ubuntu2) karmic; urgency=low * Apply patch for "net usershare list" to stop it from crashing (LP: #423854) -- Mike Pontillo Thu, 03 Sep 2009 23:45:05 -0700 samba (2:3.4.0-3ubuntu1) karmic; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samaba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = $s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests' so that usershare admins are allowed to create public shares to authenticated ones. - Add 'map to gues = Bad user', maps bad username to guest access. + debian/samba-common.conf: - Do not change priority to hight if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted. (LP: #312449) + debian/mksambapasswd.awk: Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. - Add suggests keyutils for smbfs. (LP: #300221) + debian/rules: - enable "native" PIE hardening. - remove --with-ctdb and --with-cluster-support=yes + Add ufw integration: - Created debian/samba.ufw profile. - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw. -- Chuck Short Fri, 21 Aug 2009 21:13:10 +0100 samba (2:3.4.0-3) unstable; urgency=low [ Steve Langasek ] * debian/control: samba-common-bin has no reason to depend on libpam-modules. [ Christian Perrier ] * Fix "invalid argument" when trying to copy a file from smb share Use an upstream patch that will be included in 3.4.1 Closes: #536757 -- Christian Perrier Fri, 21 Aug 2009 11:08:43 +0200 samba (2:3.4.0-2) unstable; urgency=low [ Debconf translations ] * German. Closes: #536433 [ Steve Langasek ] * Enable the ldap idmap module; thanks to Aaron J. Zirbes. Closes: #536786. [ Jelmer Vernooij ] * Properly rename smbstatus.1 for alternatives. Closes: #534772 -- Christian Perrier Sun, 02 Aug 2009 12:20:51 +0200 samba (2:3.4.0-1ubuntu2) karmic; urgency=low * debian/control: Suggest ufw, (LP: #399468) -- Chuck Short Wed, 15 Jul 2009 10:01:41 -0400 samba (2:3.4.0-1ubuntu1) karmic; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - Add "(Samaba, Ubuntu)" to server string. - Comment out the default [homes] share, and add a comment about "valid users = $s" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests' so that usershare admins are allowed to create public shares to authenticated ones. - Add 'map to gues = Bad user', maps bad username to guest access. + debian/samba-common.conf: - Do not change priority to hight if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted. (LP: #312449) + debian/mksambapasswd.awk: Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. - Add suggests keyutils for smbfs. (LP: #300221) + debian/rules: - enable "native" PIE hardening. - remove --with-ctdb and --with-cluster-support=yes + Add ufw integration: - Created debian/samba.ufw profile. - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suffest ufw + Dropped: - debian/patches/fix-password-expiry-calculation.patch: Already upstream. -- Chuck Short Wed, 08 Jul 2009 07:02:37 +0100 samba (2:3.4.0-1) unstable; urgency=low [ Christian Perrier ] * New upstream release: first upload to unstable for 3.4 * Correct dependencies for samba-common-bin. Closes: #534595 [ Debconf translations ] * Czech. Closes: #534793 * Russian. Closes: #534796 -- Christian Perrier Tue, 07 Jul 2009 20:42:19 +0200 samba (2:3.4.0~rc1-1) experimental; urgency=low * New upstream version. That fixes the following bugs: - Remove pidfile on clean shutdown. Closes: #299433, #454112 * Drop swat-de.patch that was applied upstream * Bump debhelper compatibility level to 6 and declare a versioned dependency on debhelper >= 6.0.0 -- Christian Perrier Sat, 20 Jun 2009 18:43:20 +0200 samba (2:3.4.0~pre2-1) experimental; urgency=low [ Jelmer Vernooij ] * Split binaries out of samba-common into samba-common-bin. Closes: #524661 [ Christian Perrier ] * New upstream version. That fixes the following bugs: - Do not limit the number of network interfaces. Closes: #428618 - Fix Connect4 in samr.idl. Closes: #526229 * "Using samba" is back. * Drop non-linux-ports.patch that was integrated upstream * Drop smbpasswd-syslog.patch that was integrated upstream * Drop smbclient-link.patch that was integrated upstream [ Debconf translations ] * Italian. Closes: #529350 -- Christian Perrier Sat, 06 Jun 2009 11:45:35 +0200 samba (2:3.4.0~pre1-1) experimental; urgency=low * New upstream pre-release * "Using samba" is dropped from upstream source. Therefore, drop debian/samba-doc.doc-base.samba-using -- Christian Perrier Wed, 20 May 2009 18:50:35 +0200 samba (2:3.3.6-1) unstable; urgency=high * New upstream release. Security release. * CVE 2009-1886: Fix Formatstring vulnerability in smbclient * CVE 2009-1888: Fix uninitialized read of a data value -- Christian Perrier Fri, 26 Jun 2009 18:21:51 +0200 samba (2:3.3.5-1ubuntu4) karmic; urgency=low * No really rix it. -- Chuck Short Mon, 29 Jun 2009 11:09:56 -0400 samba (2:3.3.5-1ubuntu3) karmic; urgency=low * Really add patch. -- Chuck Short Mon, 29 Jun 2009 09:38:14 -0400 samba (2:3.3.5-1ubuntu2) karmic; urgency=low * debian/patches/fix-password-expiry-calculation.patch: Use correct value for password expiry calculation (LP: #393450) -- Chuck Short Mon, 29 Jun 2009 09:15:13 -0400 samba (2:3.3.5-1ubuntu1) karmic; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests' so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to gues access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use prioity medium instead of hight for the workgroup question. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted (LP: #312449) + debian/mksambapasswd.awk: Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. - Add suggests keyutils for smbfs. (LP: #300221) + debian/rules: - enable "native" PIE hardening. - remove --with-ctdb and --with-cluster-support=yes + Add ufw integration: - Created debian/samba.ufw profile. - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba sugguest ufw -- Chuck Short Sun, 21 Jun 2009 02:53:22 +0100 samba (2:3.3.5-1) unstable; urgency=low [ Steve Langasek ] * debian/patches/undefined-symbols.patch: fix up patch so that it's suitable for submission upstream. * debian/patches/proper-static-lib-linking.patch: apply the rules to vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and rpc_open_tcp. [ Debconf translations ] * Italian. Closes: #529350 [ Christian Perrier ] * New upstream version * Lintian fixes: - Declare versioned dependency on debhelper to fit what we have in debian/compat - samba.postinst: do not call mksmbpasswd with an absolute path * Upgrade Standard to 3.8.2 (checked, no change) * Upgrade debhelper compatibility level to 6 -- Christian Perrier Sat, 20 Jun 2009 08:01:16 +0200 samba (2:3.3.4-2ubuntu1) karmic; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted (LP: #312449) + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. - Add suggests keyutils for smbfs. (LP: #300221) + debian/rules: - enable "native" PIE hardening. - remove --with-ctdb and --with-cluster-support=yes + Add ufw integration: - Created debian/samba.ufw profile. - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba sugguest ufw. * Dropped patches: + debian/patches/fix-upstream-bug-6186.patch: Merged upstream -- Andrew Mitchell Mon, 18 May 2009 13:26:04 +1200 samba (2:3.3.4-2) unstable; urgency=low [ Christian Perrier ] * Do no compile with clustering support on non-Linux platforms Closes: #528382 [ Debconf translations ] * Basque. Closes: #528757 -- Christian Perrier Sat, 16 May 2009 17:31:09 +0200 samba (2:3.3.4-1) unstable; urgency=low [ Christian Perrier ] * New upstream release: - Fixed daily winbind crash when retrieving users from an ADS server Closes: #522907. * Add idmap_tdb2 module to winbind package * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents VFS modules to properly load. Closes: #524048. [ Debconf translations ] * Bengali added. [ Steve Langasek ] * Recommend logrotate instead of depending on it. Closes: #504219. -- Christian Perrier Sat, 02 May 2009 10:06:16 +0200 samba (2:3.3.3-1) unstable; urgency=low * New upstream release: - Fix map readonly. Closes: #521225 - Add missing whitespace in mount.cifs error message. Closes: #517021 - Includes our patch to fix detection of GNU ld version. As a consequence, we dropped fix_wrong_gnu_ld_version_check.patch - Fix segfault in lookup_sid. Closes: #521408 -- Christian Perrier Sat, 11 Apr 2009 10:12:23 +0200 samba (2:3.3.2-2) unstable; urgency=low [ Steve Langasek ] * libcap2-dev is only available on Linux, so make this build-dependency conditional. Closes: #519911. [ Christian Perrier ] * Switch samba-dbg to "Section: debug" * Update debian/copyright for year 2009. Thanks to debian-devel for the reminder. * Dropping Adam Conrad from Uploaders * Dropping Eloy Paris from Uploaders with special thanks for his tremendous work maintaining the package between 1997 and 2004. [ Mathieu Parent ] * ensure clustering is enabled with --with-cluster-support=yes * build-depends on ctdb >= 1.0.73. Closes: #520202. * samba suggests ctdb [ Debconf translations ] * Esperanto updated. Closes: #519237. -- Christian Perrier Sun, 29 Mar 2009 09:23:35 +0200 samba (2:3.3.2-1ubuntu3) jaunty; urgency=low [Thierry Carrez] * debian/samba-common.postinst: Add more informative error message for the case where smb.conf was manually deleted (LP: #312449) [Chuck Short] * debian/control: Add suggests keyutils for smbfs. (LP: #300221) -- Chuck Short Fri, 27 Mar 2009 10:46:15 -0400 samba (2:3.3.2-1ubuntu2) jaunty; urgency=low * debian/patches/fix-upstream-bug-6186.patch: Fix for data loss with roaming profiles. (https://bugzilla.samba.org/show_bug.cgi?id=6186) -- Chuck Short Thu, 26 Mar 2009 07:52:14 -0400 samba (2:3.3.2-1ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. * debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. * debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. * debian/rules: - enable "native" PIE hardening. * Add ufw integration: - Created debian/samba.ufw profile. - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/contorl: have samba sugguest ufw. -- Chuck Short Mon, 16 Mar 2009 06:05:47 +0000 samba (2:3.3.2-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. Closes: #519626 - mounts with -o guest will now automatically try to connect anonymously. Closes: #423971. - fix for brokenness when using 'force group'. Closes: #517760. - fix for saving files on Samba shares using MS Office 2007. LP: #337037. * Re-fix slave links for manual pages in samba-common. Closes: #517204. [ Steve Langasek ] * Add missing debhelper token to libpam-smbpass.prerm. -- Christian Perrier Sun, 15 Mar 2009 12:16:48 +0100 samba (2:3.3.1-1ubuntu1) jaunty; urgency=low * Merge from Debian unstable (LP: #337094), remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libwbclient0 replace/conflict with hardy's likewise-open. - Don't build against ctdb. + debian/rules: - enable "native" PIE hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw * Dropped changes, merged in Debian: + debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.prerm, debian/libpam-smbpass.files, debian/rules: - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. + debian/control: - Provide a config block for the new PAM framework to auto-configure itself + debian/samba.postinst: - When populating the new sambashare group, it is not an error if the user simply does not exist; test for this case and let the install continue instead of aborting. + debian/winbind.files: - include additional files -- Steve Langasek Tue, 03 Mar 2009 22:02:23 +0000 samba (2:3.3.1-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. Closes: #516981 Upstream fixes in that release: - Fixed various spelling errors/typos in manpages Closes: #516047 - Fix renaming/deleting of files using Windows clients. Closes: #516160 - Fix syntax error in mount.cifs(8). Closes: #454799 * Use a slave alternative for smbstatus.1 even though that manpage is not provided by samba4 [ Jelmer Vernooij ] * Fix slave links for manual pages in samba-common. Closes: #517204. [ Steve Langasek ] * Add Vcs-{Browser,Svn} fields to debian/control. * When populating the sambashare group, it's not an error if the user simply doesn't exist; test for this case and let the install continue instead of aborting. LP: #206036. * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.files, debian/rules: provide a config block for the new PAM framework, allowing this PAM module to auto-configure itself * debian/control: make libpam-smbpass depend on libpam-runtime (>= 1.0.1-2ubuntu1) for the above * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix wrong detection of the GNU ld version, so that the symbol export scripts will be properly applied when building. * refresh debian/libsmbclient.symbols for 3.3.1. -- Steve Langasek Mon, 02 Mar 2009 00:30:35 -0800 samba (2:3.3.0-4ubuntu2) jaunty; urgency=low * debian/rules, debian/control: Remove ctdb support. -- Chuck Short Fri, 27 Feb 2009 08:03:01 -0500 samba (2:3.3.0-4ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allows to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba.postinst: - When populating the new sambashare group, it is not an error if the user simply does not exist; test for this case and let the install continue instead of aborting. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID to less than a 1000 to smbpasswd. + debian/control: - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. - Make libwbclient0 replace/conflict with hardy's likewise-open. + debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.prerm, debian/libpam-smbpass.files, debian/rules: - Provide a config block for the new PAM framework to auto-configure itself + debian/rules: - enable "native" PIE hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + debian/patches/last-char-truncation.patch: - Fix compatibility issue with NAS boxes still using Samba 2.2 and earlier. + debian/winbind.files: - include additional files + Fixes LP: #330626. -- Chuck Short Wed, 25 Feb 2009 10:56:23 +0000 samba (2:3.3.0-4) unstable; urgency=low [ Steve Langasek ] * Build-Depend on libcap2-dev. Closes: #515851. * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype for cache_path, which causes nearly undiagnoseable crashes when building with -fPIE, because of a wrong return type! LP: #330626. [ Debconf translations ] * Belarusian added. Closes: #516052. * Traditional Chinese updated. Closes: #516594 * Swedish updated. Closes: #516681. [ Mathieu Parent ] * enable clustering by default (CTDB). Closes: #514050 -- Steve Langasek Tue, 24 Feb 2009 16:58:58 -0800 samba (2:3.3.0-3ubuntu2) jaunty; urgency=low * Drop debian/patches/last-char-truncation.patch, which is applied upstream. -- Steve Langasek Tue, 17 Feb 2009 07:32:55 +0000 samba (2:3.3.0-3ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba.postinst: - When populating the new samabshare group, it is not an error if the user simply does not exist; test for this case and let the install continue instead of aborting. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. - Make libwbclient0 replace/conflict with hardy's likewise-open. + debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.prerm, debian/libpam-smbpass.files, debian/rules: - Provide a config block for the new PAM framework to auto-configure itself + debian/rules: - enable "native" PIE hardening. + Add ufw integration: - Created debian/samba.ufw.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + debian/patches/last-char-truncation.patch: - Fix compatibility issue with NAS boxes still using Samba 2.2 and earlier. + debian/winbind.files: - include additional files * Merged changes: + debian/control: - Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. + debian/samba.init: - Add a 'status' action. + debian/winbind.init: - Add a PID variable and a 'status' action. * Fixes LP: #328874. -- Steve Langasek Tue, 17 Feb 2009 07:00:42 +0000 samba (2:3.3.0-3) unstable; urgency=low [ Steve Langasek ] * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable. * Make samba conflict with samba4, not with itself. [ Debconf translations ] * Vietnamese updated. Closes: #515235. * Slovak updated. Closes: #515240. -- Steve Langasek Mon, 16 Feb 2009 07:15:47 -0800 samba (2:3.3.0-2) unstable; urgency=low * Upload to unstable -- Christian Perrier Sat, 14 Feb 2009 13:38:14 +0100 samba (2:3.3.0-1) experimental; urgency=low * New upstream release. Fixes the following bugs: - smb file deletion gvfs. Closes: #510564 - smbclient du command does not recuse properly. Closes: #509258 - mention possible workgroup field in credential files in mount.cifs(8) Closes: #400734 - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init Closes: #489656 - describe '-g' option in smbclient man page. Closes: #510812 - fix swat status table layout. Closes: #511275 [ Jelmer Vernooij ] * Use alternatives for the smbstatus, nmblookup, net and testparm binaries and various data files in samba-common to allow installation of Samba 3 together with Samba 4. * Add myself to uploaders. [ Christian Perrier ] * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base, smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to libsmbclient's symbols file with 3.3.0 as version number * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as version number -- Christian Perrier Fri, 30 Jan 2009 21:41:49 +0100 samba (2:3.3.0~rc2-4) experimental; urgency=low [ Steve Langasek ] * Revert one of the template depersonalization changes from the -2 upload, because it loses important context [ Christian Perrier ] * Use double quotation marks in debconf templates * Add 'status" option to init scripts. Thansk to Dustin Kirkland for providing the patch. Closes: #488275 * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997 * [Lintian] Add ${misc:Depends} to dependencies of binary packages that didn't have it already as we're using debhelper in the source package * [Lintian] Don't ignore errors in swat.postrm * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config and samba-common.config * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5) Closes: #512843 [ Debconf translations ] * Asturian added. Closes: #511730 -- Christian Perrier Sat, 24 Jan 2009 16:04:57 +0100 samba (2:3.3.0~rc2-3) experimental; urgency=low * Fix around the libsmbclient/libsmbclient-dev descriptions, which got swapped in the last upload. * Drop a boilerplate sentence from the samba-common, smbclient, swat, samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions that's not relevant for these packages. * Hyphenate "command-line" in the smbclient short description. * Fix up the smbclient description, which got crossed with the smbfs one. * Fix the smbfs description, which was not actually fixed in the previous upload. Really closes: #496206. * Further minor adjustments to the description of the swat package. * Fix various inaccuracies in the winbind package description. * Clarify in the description that samba-tools are extra, only useful for testing. -- Steve Langasek Tue, 30 Dec 2008 18:42:05 -0800 samba (2:3.3.0~rc2-2) experimental; urgency=low [ Steve Langasek ] * Handle clearing out netbios settings whenever the DHCP server has gone away. Closes: #299618. [ Christian Perrier ] * Point the correct document about password encryption in debconf templates Corrected in translations as well. Closes: #502838 * Reword debconf templates to avoid mentioning the local host as a "server". Closes: #171177 * Use this opportunity for other minor rewording: - replace "SMB" by "SMB/CIFS" - more strongly discouraging the use of plain text passwords - unpersonnalization * Reword the libpam-smbpass package description Thanks to Justin B. Rye for the very useful suggestions Closes: #496196 * Improve the package descriptions by rewording the description overhaul Also improve the specific information for samba and samba-dbg Thanks again to Justin B. Rye for the invaluable help Closes: #496200 * Improve libsmbclient package description. Closes: #496197 * Improve libwbclient0 package description. Closes: #496199 * Improve samba-doc package description. Closes: #496202 * Improve samba-tools package description. Closes: #496203 * Improve samba-common package description. Closes: #496204 * Improve smbclient package description. Closes: #496205 * Improve smbfs package description. Closes: #496206 * Improve swat package description. Closes: #496207 * Improve winbind package description. Closes: #496208 * Improve samba-doc-pdf package description. Closes: #496211 * Update French debconf translation -- Christian Perrier Mon, 29 Dec 2008 11:50:04 +0100 samba (2:3.3.0~rc2-1) experimental; urgency=low * New upstream release -- Christian Perrier Wed, 17 Dec 2008 08:22:18 +0100 samba (2:3.3.0~rc1-2) experimental; urgency=low * Provide idmap_adex and idmap_hash in winbind. Thanks to Jelmer Jaarsma for reporting and providing a patch -- Christian Perrier Thu, 04 Dec 2008 19:59:23 +0100 samba (2:3.3.0~rc1-1) experimental; urgency=low * New upstream release -- Christian Perrier Fri, 28 Nov 2008 10:51:32 +0100 samba (2:3.3.0~pre2-1) experimental; urgency=low * New upstream release. -- Christian Perrier Fri, 07 Nov 2008 20:52:36 +0100 samba (2:3.2.5-4ubuntu1) jaunty; urgency=low * Merge from Debian unstable, remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] share, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - Set 'usershare allow guests', so that usershare admins are allowed to create public shares in addition to authenticated ones. - add map to guest = Bad user, maps bad username to guest access. + debian/samba.postinst: - When populating the new samabshare group, it is not an error if the user simply does not exist; test for this case and let the install continue instead of aborting. + debian/samba-common.config: - Do not change priority to high if dhclient3 is installed. - Use priority medium instead of high for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. - Make libwbclient0 replace/conflict with hardy's likewise-open. + debian/samba.init: - Add a 'status' action. + debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.prerm, debian/libpam-smbpass.files, debian/rules: - Provide a config block for the new PAM framework to auto-configure itself + debian/rules: - enable "native" PIE hardening. + Add ufw integration: - Created debian/samba.uwf.profile - debian/rules, debian/samba.dirs, debian/samba.files: install profile - debian/control: have samba suggest ufw + debian/patches/last-char-truncation.patch: - Fix compatibility issue with NAS boxes still using Samba 2.2 and earlier. + debian/winbind.files: - include additional files + debian/winbind.init: - Add a PID variable and a 'status' action. * Dropped changes: - don't worry about handling upgrades from feisty or edgy, since users should have upgraded to the hardy version first so this transition is now finished. * Fixes LP: #264943 and LP: #286119. -- Steve Langasek Wed, 28 Jan 2009 02:35:42 +0000 samba (2:3.2.5-4) unstable; urgency=low * Fix segfault whan accessign some NAS devices running old versions of Samba Closes: #500129 * Fix process crush when using gethostbyname_r in several threads Closes: #509101, #510450 -- Christian Perrier Thu, 08 Jan 2009 05:59:17 +0100 samba (2:3.2.5-3ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - setup SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - add comment on the default [homes] share, and add a comment about "valid user = %s" to show users how to restrict access to \\share\username to only username. - add map to guest = Bad user, maps bad username to guest access. (LP:#32067) + debian/samba-common.postinst: - Fix upgrade from a first installation done with fiesty, edgy, or dapper. (LP: #201059) - When populating the new samabshare group, it is not an error if the user simply does not exist; test for this case and let the isntall continue instead of aborting. (LP: #206036) + debian/samba-common.conf: - Do not change priority to HIH if dhclient3 is installed. - Use priority medium instead of HIGH for the workgroun question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. + debian/samba.init: - Add a pid variable and a 'status' action. + debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.files, debian/rules: - Provide a config block for the new PAM framework to auto-configure itself + debian/rules: - enable "native" PIE hardening. + Add ufw integration (thanks Nicolas Valcárcel) (LP: #261544): - Created debian/samba.uwf.profile - debian/rules: install profile - debian/control: have samaba suggest ufw + debian/patches/last-char-truncation.patch: - Fix compatibility issue with NAS boxes still using Samba 2.2 and before. (fixes LP: #282298) -- Chuck Short Mon, 05 Jan 2009 23:56:54 +0000 samba (2:3.2.5-3) unstable; urgency=high * Security update * Fix Potential access to "/" in setups with registry shares enabled This fixes CVE-2009-0022, backported from 3.2.7 * Fix links in HTML documentation index file. Closes: #508388 * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new file in the diff. Thanks to the release managers for spotting it -- Christian Perrier Sun, 21 Dec 2008 08:09:31 +0100 samba (2:3.2.5-2ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf - add "(Samba, Ubuntu)" to server string. - add comment on the default [homes] share, and add a comment about "valid user = %s" to show users how to restrict access to \\share\username to only username. - add map to guest = Bad user, maps bad username to guest access. (LP: #32067) + debian/samba-common.postinst: - Fix upgrade from a first installation done with fiesty, edgy, or dapper. (LP: #201059) - When populating the new samabshare group, it is not an error if the user simply does not exist; test for this case and let the install continue instead of aborting. (LP: #206036) + debian/samba-common.config: - Do not change priority to HIGH if dhclient3 is installed. - Use priority medium instad of HIGH for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. + debian/samba.init: - Add a pid variable and a 'status' action. + debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.files, debian/rules: - Provide a config block for the new PAM framework to auto-configure itself. + debian/rules: - enable "native" PIE hardening. + Add ufw integration (thanks Nicolas Valcárcel) (LP: #261544): - Created debian/samba.ufw.profile. - debian/rules: install profile - debian/control: have samba suggest ufw + debian/patches/last-char-truncation.patch: - Fix compatibility issue with NAS boxes still using Samba 2.2 or before (fixes LP: #282298) -- Chuck Short Sat, 13 Dec 2008 23:03:22 +0000 samba (2:3.2.5-2) unstable; urgency=low * Fix typo in bug number in a comment for the default smb.conf file Closes: #507620 * Document the need to set appropriate permissions on the printer drivers directory, in the default smb.conf file. Also change the example group from ntadmin to lpadmin Closes: #459243 * Add missing rfc2307.so and sfu*.so links that prevent using the 'winbind nss info' feature properly Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for the patch. Closes: #506109 -- Christian Perrier Sat, 13 Dec 2008 13:56:07 +0100 samba (2:3.2.5-1ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - add comment on the default [homes] shares, and add a comment about "valid user = %s" to show users how to restrict access to \\share\username to only username. - add map to guest = Bad user, maps bad username to guess access. (LP: #32067) + debian/samba-common.postinst: - Fix upgrade from a first installation done with feisty, edgy, or dapper. (LP: #201059) + debian/samba-common.config: - Do not change priority to HIGH if dhclient3 is installed. - Use priority medium insteam of HIGH for the worgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Depen on lsb-base >= 3.2-14, which has the status_of_proc() function. - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. + debian/samba.postinst: - When populating the new sambashare group, it is not an error if the user simply does not exist; test for this case and let the install continue instead of aborting. (LP: #206036) + debian/samba.init: - Replace previous 'status' gathering mechanism with the common one now provided by status_of_proc(). (LP: #247087) + debian/winbind.init: - Add a pid variable and a 'status' action. + debian/libpam-smbpass.pam-config, debian/libpam-smbpassw.postinst, debian/libpam-smbpass.files, debian/rules: - Provide a config block for the new PAM framework, allowing this PAM module to auto-configure itself. + debian/rules: - enable "native" PIE hardening. + Add ufw integration (thanks Nicolas Valcárcel) (LP: #261544): - Created debian/samba.ufw.profile. - debian/rules: install profile - debian/control: have samba suggest ufw + debian/patches/last-char-truncation.patch: - Fix compatibility issue with NAS boxes still using Samba 2.2 or before (fixes LP: #282298) + Dropped bian/patches/security-CVE-2008-4314.patch - Due to new upstream version. -- Chuck Short Thu, 27 Nov 2008 22:56:41 +0000 samba (2:3.2.5-1) unstable; urgency=high * New upstream version. Security-only release. This addresses CVE-2008-4314: potentially leaking arbitrary memory contents to malicious clients. * Better document cases where using a "master" file for smb.conf is a bad idea. Closes: #483187 * Insert example "add machine script" and "add group script" scripts in the default smb.conf. Closes: #349049 * Move homepage URL to Homepage filed in debian/control -- Christian Perrier Thu, 27 Nov 2008 11:36:35 +0100 samba (2:3.3.0-1) experimental; urgency=low * New upstream release. Fixes the following bugs: - smb file deletion gvfs. Closes: #510564 - smbclient du command does not recuse properly. Closes: #509258 - mention possible workgroup field in credential files in mount.cifs(8) Closes: #400734 - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init Closes: #489656 - describe '-g' option in smbclient man page. Closes: #510812 - fix swat status table layout. Closes: #511275 [ Jelmer Vernooij ] * Use alternatives for the smbstatus, nmblookup, net and testparm binaries and various data files in samba-common to allow installation of Samba 3 together with Samba 4. * Add myself to uploaders. [ Christian Perrier ] * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base, smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to libsmbclient's symbols file with 3.3.0 as version number * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as version number -- Christian Perrier Fri, 30 Jan 2009 21:41:49 +0100 samba (2:3.3.0~rc2-4) experimental; urgency=low [ Steve Langasek ] * Revert one of the template depersonalization changes from the -2 upload, because it loses important context [ Christian Perrier ] * Use double quotation marks in debconf templates * Add 'status" option to init scripts. Thansk to Dustin Kirkland for providing the patch. Closes: #488275 * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997 * [Lintian] Add ${misc:Depends} to dependencies of binary packages that didn't have it already as we're using debhelper in the source package * [Lintian] Don't ignore errors in swat.postrm * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config and samba-common.config * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5) Closes: #512843 [ Debconf translations ] * Asturian added. Closes: #511730 -- Christian Perrier Sat, 24 Jan 2009 16:04:57 +0100 samba (2:3.3.0~rc2-3) experimental; urgency=low * Fix around the libsmbclient/libsmbclient-dev descriptions, which got swapped in the last upload. * Drop a boilerplate sentence from the samba-common, smbclient, swat, samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions that's not relevant for these packages. * Hyphenate "command-line" in the smbclient short description. * Fix up the smbclient description, which got crossed with the smbfs one. * Fix the smbfs description, which was not actually fixed in the previous upload. Really closes: #496206. * Further minor adjustments to the description of the swat package. * Fix various inaccuracies in the winbind package description. * Clarify in the description that samba-tools are extra, only useful for testing. -- Steve Langasek Tue, 30 Dec 2008 18:42:05 -0800 samba (2:3.3.0~rc2-2) experimental; urgency=low [ Steve Langasek ] * Handle clearing out netbios settings whenever the DHCP server has gone away. Closes: #299618. [ Christian Perrier ] * Point the correct document about password encryption in debconf templates Corrected in translations as well. Closes: #502838 * Reword debconf templates to avoid mentioning the local host as a "server". Closes: #171177 * Use this opportunity for other minor rewording: - replace "SMB" by "SMB/CIFS" - more strongly discouraging the use of plain text passwords - unpersonnalization * Reword the libpam-smbpass package description Thanks to Justin B. Rye for the very useful suggestions Closes: #496196 * Improve the package descriptions by rewording the description overhaul Also improve the specific information for samba and samba-dbg Thanks again to Justin B. Rye for the invaluable help Closes: #496200 * Improve libsmbclient package description. Closes: #496197 * Improve libwbclient0 package description. Closes: #496199 * Improve samba-doc package description. Closes: #496202 * Improve samba-tools package description. Closes: #496203 * Improve samba-common package description. Closes: #496204 * Improve smbclient package description. Closes: #496205 * Improve smbfs package description. Closes: #496206 * Improve swat package description. Closes: #496207 * Improve winbind package description. Closes: #496208 * Improve samba-doc-pdf package description. Closes: #496211 * Update French debconf translation -- Christian Perrier Mon, 29 Dec 2008 11:50:04 +0100 samba (2:3.3.0~rc2-1) experimental; urgency=low * New upstream release -- Christian Perrier Wed, 17 Dec 2008 08:22:18 +0100 samba (2:3.3.0~rc1-2) experimental; urgency=low * Provide idmap_adex and idmap_hash in winbind. Thanks to Jelmer Jaarsma for reporting and providing a patch -- Christian Perrier Thu, 04 Dec 2008 19:59:23 +0100 samba (2:3.3.0~rc1-1) experimental; urgency=low * New upstream release -- Christian Perrier Fri, 28 Nov 2008 10:51:32 +0100 samba (2:3.3.0~pre2-1) experimental; urgency=low * New upstream release. -- Christian Perrier Fri, 07 Nov 2008 20:52:36 +0100 samba (2:3.2.4-1ubuntu3) jaunty; urgency=low * SECURITY UPDATE: potential arbitrary memory leak and crash via secondary trans, trans2 and nttrans requests. - debian/patches/security-CVE-2008-4314.patch: fix the offset checks in the trans routines in source/smbd/{ipc.c,nttrans.c,trans2.c}. - CVE-2008-4314 -- Marc Deslauriers Fri, 21 Nov 2008 14:45:51 -0500 samba (2:3.2.4-1ubuntu2) jaunty; urgency=low * debian/patches/last-char-truncation.patch: Fix compatibility issue with NAS boxes still using Samba 2.2 or before (fixes LP: #282298) -- Thierry Carrez Mon, 17 Nov 2008 16:17:26 +0000 samba (2:3.2.4-1ubuntu1) jaunty; urgency=low * Merge from debian unstable, remaining changes: + debian/patches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu + debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - add comment on the default [homes] shares, and add a comment about "valid user = %s" to show users how to restrict access to \\server\unserane to only username. - add map to guest = Bad user, maps bad username to guest access. (LP: #32067) + debian/samba-common.postinst: - Fix upgrade from a first installation done with feisty, edgy, or dapper. (LP: #201059) - When populating the new sambashare group, it is not an error if the user simply does not exist; test for this case and let the install continue instead of aborting. (LP: #206036) + debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed. - use priorotiy medium instead of HIGH for the workgroup question. + debian/mksambapasswd.awk: - Do not add user with UID less than 1000 to smbpasswd. + debian/control: - Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. - Make libpam-smbpasswd depend on libpam-runtime to allow libpam-smbpasswd for auto-configuration. + debian/samba.init: - Replace previous 'status' gathering mechanism with the common one now provided by status_of_proc() (LP: #247087). + debian/winbind.init: - Add a pid variable and a 'status' action. + debian/libpam-smbpass.pam-config, debian/libpam-smbpassw.postinst, debian/libpam-smbpass.files, debian/rules: - provide a config block for the new PAM framework, allowing this PAM module to auto-configure itself. + debian/libpam-smbpass.prerm: - call pam-auth-update --remoove on removal, to clean up after ourselves. + debian/rules: - enable "native" PIE hardening + Add ufw integration (thanks Nicolas Valcárcel) (LP: #261544) - Created debian/samaba.ufw.profile. - debian/rules: install profile - debian/control: have samba suggest ufw -- Chuck Short Wed, 05 Nov 2008 03:24:52 +0000 samba (2:3.2.4-1) unstable; urgency=low [ Steve Langasek ] * New upstream release. - debian/rules: we don't need to move cifs.upcall around, it's now installed to the right place upstream. - Fixed in this release: - typo in cifs.upcall.8. Closes: #501499 [ Christian Perrier ] * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for the patch. Closes: #499359 -- Christian Perrier Sat, 18 Oct 2008 08:20:31 +0200 samba (2:3.2.3-3) unstable; urgency=low [ Steve Langasek ] * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing this out. Closes: #497857. * Georgian debconf translation added. Closes: #498426 * Polish debconf translation added. Thanks to Łukasz Paździora. [ Jelmer Vernooij ] * Add ldb-tools to Suggests: of samba. Closes: #488384 -- Christian Perrier Fri, 03 Oct 2008 20:37:19 +0200 samba (2:3.2.3-2) unstable; urgency=low [ Christian Perrier ] * Fix FTBFS on GNU/kFreeBSD. Closes: #496880 -- Steve Langasek Sat, 30 Aug 2008 00:46:07 -0700 samba (2:3.2.3-1ubuntu3) intrepid; urgency=low * Fix pam-smbpass.so crashing because it misses /var/lib/samba (LP: #260687) - debian/samba-common.dirs: create /var/lib/samba in samba-common - debian/samba.postrm: don't completely remove /var/lib/samba on purge (just let samba-common postrm do it) -- Thierry Carrez Fri, 10 Oct 2008 11:24:48 +0200 samba (2:3.2.3-1ubuntu2) intrepid; urgency=low * Make libwbclient0 replace/conflict with hardy's likewise-open (LP: #254434) -- Thierry Carrez Fri, 12 Sep 2008 14:30:00 +0200 samba (2:3.2.3-1ubuntu1) intrepid; urgency=low * Merge from debian unstable, remaining changes: - debian/patches/VERSION.patch: + set SAMBA_VERSION_SUFFIX to Ubuntu. - debian/smb.conf: + add "(Samba, Ubuntu)" to server string. + comment on the default [homes] shares, and add a comment about "valid user = %s" to show users how to restrict access to \\server\username to only username. + add map to guest = Bad user, maps bad username to guest access. (LP: #32067) - debian/samba-common.postinst: + Fix upgrade from a first installation done with feisty, edgy, or dapper. (LP: #201059) + When populating the new sambashare group, it's not an error if the user simply doesn't exist; test for this case and the install continue instead of aborting. (LP: #206036) - debian/samba-common.config: + do not change priority to HIGH if dhclient3 is installed. + use priority medium instead of HIGH for the workgroup question. - debian/winbind.files: + include additional files - debian/mksambapasswd.awk: + Don't add user with UID less than 1000 to smbpasswd. - debian/control: + Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. + Make libpam-smbpass depend on libpam-runtime for allowing libpam-smbpasss to auto-configure itself. - debian/samba.init: + Replace the previous 'status' gathering mechanism with the common one now provided by status_of_proc() (LP: #247087). - debian/winbind.init: + Add a pid variable and a 'status' action. - debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.files, debian/rules: provide a config block for the new PAM framework, allowing his PAM module to auto-configure itself. - debian/libpam-smbpass.prerm: call pam-auth-update --remove on removal, to clean up after ourselves. - debian/rules: enable "native" PIE hardening. [Jamie Strandboge] * Add ufw integration (thanks Nicolas Valcárcel) (LP: #261544) - Created debian/samba.ufw.profile - debian/rules: install profile - debian/control: have samba Suggests ufw -- Chuck Short Wed, 27 Aug 2008 23:57:11 +0100 samba (2:3.2.3-1) unstable; urgency=high * High-urgency upload for security fix * New upstream release - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default" Closes: #491881 - Fix the default permissions on ldb databases. Addresses CVE-2008-3789; closes: #496073. - debian/rules, debian/smbfs.files: build with cifs.upcall, newly introduced to replace cifs.spnego - debian/rules: no more need to rename libsmbclient.so to libsmbclient.so.0, or libwbclient.so to libwbclient.so.0 [ Noèl Köthe ] * fixing lintian warning "build-depends-on-1-revision" -- Steve Langasek Wed, 27 Aug 2008 10:19:59 -0700 samba (2:3.2.1-1ubuntu5) intrepid; urgency=low * debian/{control,rules}: revert sledge-hammer PIE approach. * debian/rules: enable "native" PIE hardening. -- Kees Cook Tue, 26 Aug 2008 10:59:10 -0700 samba (2:3.2.1-1ubuntu4) intrepid; urgency=low * debian/{control,rules}: enable PIE hardening -- Kees Cook Mon, 25 Aug 2008 14:40:21 -0700 samba (2:3.2.1-1ubuntu3) intrepid; urgency=low * debian/libpam-smbpass.prerm: call pam-auth-update --remove on removal, to clean up after ourselves. -- Steve Langasek Fri, 22 Aug 2008 00:07:04 +0000 samba (2:3.2.1-1ubuntu2) intrepid; urgency=low * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst, debian/libpam-smbpass.files, debian/rules: provide a config block for the new PAM framework, allowing this PAM module to auto-configure itself * debian/control: make libpam-smbpass depend on libpam-runtime (>= 1.0.1-2ubuntu1) for the above -- Steve Langasek Thu, 21 Aug 2008 01:45:12 +0000 samba (2:3.2.1-1ubuntu1) intrepid; urgency=low * Merge from debian unstable, remaining changes: - debian/patches/VERSION.patch: + set SAMBA_VERSION_SUFFIX to Ubuntu. - debian/smb.conf: + add "(Samba, Ubuntu)" to server string. + comment on the default [homes] shares, and add a comment about "valid user = %s" to show users how to restrict access to \\server\username to only username. + add map to guest = Bad user, maps bad username to guess access. (LP: #32067) - debian/samba-common.postinst: + Fix upgrade from a first installation done with feisty, edgy, or dapper. (LP: #201059) + When populating the new sambashare group, it's not an error if the user simply doesn't exist; test for this care and let the install continue instead of aborting. (LP: #206036) - debian/samba-common.config: + do not change priority ti HIGH if dhclient3 is installed + use priority medium instead of HIGH for the workgroup question. - debian/winbind.files: + include additional files - debian/mksambapasswd.awk: + Don't add user with UID less than 1000 to smpasswd. - debian/control: + Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. - debian/samba.init: + Replace the previous 'status' gathering mechanism with the common one now provided by status_of_proc() (LP: #247087). - debian/winbind.init: Add a pid variable and a 'status' action. -- Chuck Short Fri, 15 Aug 2008 11:49:41 +0100 samba (2:3.2.1-1) unstable; urgency=low [ Steve Langasek ] * Build-depend on keyutils only on the linux archs. Closes: #493401. * New patch debian/patches/shrink-dead-code.patch: throw all .o files into a .a archive as a first pass before linking the final executables, so that the executables don't end up with quite so much unused code bloating the system. Not applied to net or ntlm_auth, which have particularly hairy linking needs. Partially addresses: bug #474543; no code was harmed in the making of this patch. * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports. [ Christian Perrier ] * New upstream release - Fix trusted domain handling in Winbindd. Closes: #493752 - Fix for print jobs that continued to show as active after printing had completed. Closes: #494899. -- Steve Langasek Thu, 14 Aug 2008 16:13:24 -0700 samba (2:3.2.0-4ubuntu3) intrepid; urgency=low * debian/winbind.init: Fixed error in init script. (LP: #253910) -- Chuck Short Fri, 01 Aug 2008 14:01:09 +0000 samba (2:3.2.0-4ubuntu2) intrepid; urgency=low * debian/control: Depend on lsb-base >= 3.2-14, which has the status_of_proc() function. * debian/samba.init: Replace the previous 'status' gathering mechanism with the common one now provided by status_of_proc() (LP: #247087). * debian/winbind.init: Add a pid variable and a 'status' action. -- Dustin Kirkland Mon, 28 Jul 2008 15:55:45 -0500 samba (2:3.2.0-4ubuntu1) intrepid; urgency=low * Merge from debian unstable, remaining changes: * debian/patpches/VERSION.patch: - set SAMBA_VERSION_SUFFIX to Ubuntu. * debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment on the default [homes] shares, and add a comment about "valid user = %s" to show users how to restrict access to \\server\username to only username. - add map to guest = Bad user, maps bad username to guest access. (LP: #32067) * debian/samba-common.postinst: - Fix upgrad from a first installation done with feisty, edgy, or dapper. (LP: #201059) - When populating the new sambashare group, it's not an error if the user simply doesn't exist; test for this case and let the install continue instead of aborting. (LP: #206036) * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is instaleld - use priority medium instead of HIGH for the workgroup question * debian/winbind.files: - include additional files * debian/mksambapasswd.awk: - Don't add user with UID less than 1000 to smbpasswd. -- Chuck Short Tue, 22 Jul 2008 13:45:10 +0100 samba (2:3.2.0-4) unstable; urgency=low * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch that went missing somehow, causing samba to look for secrets.tdb in /etc/samba instead of /var/lib/samba where it's been for years. No migration handling added, because this was only present in unstable for about a day. Thanks to Rick Nelson for pointing this out. -- Steve Langasek Mon, 21 Jul 2008 17:39:48 -0700 samba (2:3.2.0-3ubuntu1) intrepid; urgency=low * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu. * debian/smb.conf - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] shares, and add a comment about "valid user = %s" to show users how to restrict access to \\server\username to only username. - add map to guest = Bad user, maps bad username to guest access. (LP: #32067) * debian/samba-common.postinst: - Fix upgrade from a first installation done with feisty, edgy, or dapper. (LP: #201059) - When population the new sambashare group, it's not an error if the user simply doesn't exist; test for this case and the install continue instead of aborting. (LP: #206036) * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - used priority medium instaed of high for the workgroup question * debian/winbind.files: - include additional files * debian/mksambapasswd.awk: - Don't add user with UID less than 1000 to smbpasswd. * Dropped changes: - Dropped debian/patches/upstream_bug5517.patch. Already applied upstream. - Dropped debian/patches/disable-weak-auth.patch. Already applied upstream. - Dropped debian/patches/fix-server-signature.patch. Already appled upstream. - Dropped debian/patches/fix-documentation.patch. Already applied upstream. -- Chuck Short Mon, 21 Jul 2008 12:51:37 +0100 samba (2:3.2.0-3) unstable; urgency=low * Upload to unstable. * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro and Makefile.in to properly avoid linking .a libraries into other .a libraries, since this bloats the libraries without providing any useful functionality. * Version the build-dependency on libtalloc-dev, to ensure we're building against a package with the right symbols. * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get more fine-grained versioned library dependencies * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols have been added. * Re-add docs/registry to samba-doc, restored upstream * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it belongs according to the FHS. Closes: #454770. -- Steve Langasek Sun, 20 Jul 2008 15:38:10 -0700 samba (2:3.2.0-2) experimental; urgency=low * Fix up the copyright file to correctly document that we're now under GPLv3, not GPLv2. -- Steve Langasek Tue, 08 Jul 2008 12:21:47 -0700 samba (2:3.2.0-1) experimental; urgency=low [ Christian Perrier ] * New samba-tools package to provide all "torture" tools: smbtorture msgtest masktest locktest locktest2 nsstest vfstest pdbtest talloctort replacetort tdbtorture smbconftort * Upgrade Standard to 3.8.0 (checked) * Merged from unstable: * Drop "invalid users = root" from the default smb.conf file as it differs from upstream's behaviour and upstream is fairly noisy about this choice of ours. Closes: #462046 * Drop commented "guest account = nobody". This is already upstream's default * Remove versioned Build-Depends when satisfied in etch (actually all versioning in Build-Depends) * Remove Conflicts with non-existing packages * Drop dpkg-dev and binutils from Build-Depends, since the versioned build-dep is no longer needed and these are both Build-Essential * Mini-policy for settings in smb.conf: - don't explicitly set settings to their default value - commented settings with the default value are commented with "#" - commented settings with a non-default value are commented with ";" * Apply this policy to "socket options". Closes: #476104 * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical libsmbclient.so.0 as upstream doesn't assign versions * Add idmap_*(8) man pages (idea taken from SerNet packages) * Create the entire set of directories needed by clients for Point-and-Click printing (including old clients!) in /var/lib/samba/printers (idea taken from SerNet packages) * Update copyright and README.debian information for current and past maintainers. Remove redundant mention of Tridge (the copyright is enough) * Add doc-base files for samba-doc-pdf. Closes: #451685 * add a soft dependency on slapd in init script to allow proper operation when dependency-based boot sequence is enabled. Thanks to Petter Reinholdtsen for reporting and providing a patch Closes: #478800 * Rename libcupsys2-dev to libcups2-dev in build dependencies * Localize SWAT in German. Closes: #487681 [ Debconf translations ] * Merged from unstable: * Kurdish. Closes: #480151 * Romanian updated. Closes: #488709. [ Steve Langasek ] * New upstream release * Merged from unstable: * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups server when we know that no printers are configured. Closes: #479512. [ Jelmer Vernooij ] * Merged from unstable: * Fix bashism in smbtar. (Closes: #486056) [ Peter Eisentraut ] * Merged from unstable: * Removed myself from Uploaders -- Christian Perrier Sun, 06 Jul 2008 09:59:07 +0200 samba (2:3.2.0~rc2-1) experimental; urgency=low [ Christian Perrier ] * New upstream release [ Steve Langasek ] * Enable building of cifs.spnego for the smbfs package, adding a build-dependency on keyutils-dev, to allow kerberos-based authentication of cifs mounts. Closes: #480663, LP: #236830. -- Christian Perrier Thu, 12 Jun 2008 17:17:38 +0200 samba (2:3.2.0~rc1-2) experimental; urgency=low * Reupload to experimental. Sigh. -- Christian Perrier Sat, 31 May 2008 11:08:14 +0200 samba (2:3.0.31-1) unstable; urgency=medium * New upstream release -- Christian Perrier Sat, 12 Jul 2008 16:57:09 +0200 samba (2:3.0.30-4) unstable; urgency=low [ Christian Perrier ] * Rename libcupsys2-dev to libcups2-dev in build dependencies * Localize SWAT in German. Closes: #487681 [ Jelmer Vernooij ] * Fix bashism in smbtar. (Closes: #486056) [ Jamie Strandboge ] * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly calculate buffer sizes. This bug was introduced in the fix for CVE-2008-1105. Closes: #488688 [ Debconf translations ] * Romanian updated. Closes: #488709. -- Christian Perrier Sun, 06 Jul 2008 11:43:53 +0200 samba (2:3.0.30-3) unstable; urgency=low [ Christian Perrier ] * add a soft dependency on slapd in init script to allow proper operation when dependency-based boot sequence is enabled. Thanks to Petter Reinholdtsen for reporting and providing a patch Closes: #478800 [ Steve Langasek ] * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups server when we know that no printers are configured. Closes: #479512. -- Christian Perrier Tue, 10 Jun 2008 21:03:51 +0200 samba (2:3.0.30-2ubuntu3) intrepid; urgency=low * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly calculate buffer sizes. This bug was introduced in the fix for CVE-2008-1105 * References LP: #241448 https://bugzilla.samba.org/show_bug.cgi?id=5517 -- Jamie Strandboge Mon, 30 Jun 2008 09:17:40 -0400 samba (2:3.0.30-2ubuntu2) intrepid; urgency=low * Fix spelling of "unsuccessful" in debian/smb.conf (LP: #225661) -- Nathan Handler Sun, 22 Jun 2008 12:41:05 -0500 samba (2:3.0.30-2ubuntu1) intrepid; urgency=low * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch - set SAMABA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] shares, and a comment about "valid users = %S to show users how to restrict access to \\server\useranem to only username. - Add map to guest = Bad user, maps bad username to guest access. (LP: #32067) * debian/samba-common.postinst: - Fix upgrade from a first installation done with feisty, edgy, or dapper. (LP: #201059) - When populating the new sambashare group, it's not an error if the user simply doesn't exist; test for this case and the install continue instead of aborting. (LP: #206036) * debian/smba-common.config: - do not change priority to HIGH if dhclient3 is installed - used priority medium instead of high for the workgroup question * debian/winbind.files - insclude additional files * debian/patches/fix-documentation.patch: - fix typos in net(8) and smb.conf(5) man pages * debian/mksambapasswd.awk: - Don't add user with UID less than 1000 to smbpasswd. * debian/samba.init: - add 'status' option for LSB conformance. * Updated control version. * Dropped Changes: - Dropped debian/patches/fix-smbprinting-os2.patch. Accepted upstream. - Dropped debian/patches/fix-documentation.patch. Accepted upstream. -- Chuck Short Mon, 02 Jun 2008 09:01:46 -0500 samba (2:3.0.30-2) unstable; urgency=high * Brown paper bag releae with epoch increased after yet another accidental upload of 3.2.0 to unstable. Sigh and apologies to autobuilders. -- Christian Perrier Sat, 31 May 2008 12:08:50 +0200 samba (1:3.2.0~rc1-1) unstable; urgency=low * New upstream version * debian/samba-doc.doc-base.samba-using: index file is no named toc.html -- Christian Perrier Fri, 30 May 2008 20:22:57 +0200 samba (1:3.2.0~pre3-1) experimental; urgency=low * New upstream version * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream * docs/registry removed from samba-doc as missing from upstream tarball (upstream bug #5421) * debian/samba-doc.doc-base.samba-using: The index (and only) file is now book.html -- Christian Perrier Sat, 26 Apr 2008 08:20:21 +0200 samba (1:3.2.0~pre2-2) experimental; urgency=low [ Christian Perrier ] * Upload to experimental with an epoch as the earlier version accidentally went to unstable. [ Peter Eisentraut ] * Removed myself from Uploaders -- Christian Perrier Sun, 06 Apr 2008 20:38:35 +0200 samba (1:3.0.30-1) unstable; urgency=high * New upstream release: fix a heap overflow when parsing SMB responses in client code. (CVE-2008-1105). Closes: #483410 -- Christian Perrier Wed, 28 May 2008 22:38:44 +0200 samba (1:3.0.29-1) unstable; urgency=low * New upstream release -- Christian Perrier Thu, 22 May 2008 07:31:55 +0200 samba (1:3.0.28a-3) unstable; urgency=low * The "bug hunting at SambaXP" release * Drop "invalid users = root" from the default smb.conf file as it differs from upstream's behaviour and upstream is fairly noisy about this choice of ours. Closes: #462046 * Drop commented "guest account = nobody". This is already upstream's default * Remove versioned Build-Depends when satisfied in etch (actually all versioning in Build-Depends) * Remove Conflicts with non-existing packages * Drop dpkg-dev and binutils from Build-Depends, since the versioned build-dep is no longer needed and these are both Build-Essential * Mini-policy for settings in smb.conf: - don't explicitly set settings to their default value - commented settings with the default value are commented with "#" - commented settings with a non-default value are commented with ";" * Apply this policy to "socket options". Closes: #476104 * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical libsmbclient.so.0 as upstream doesn't assign versions * Add idmap_*(8) man pages (idea taken from SerNet packages) * Create the entire set of directories needed by clients for Point-and-Click printing (including old clients!) in /var/lib/samba/printers (idea taken from SerNet packages) * Update copyright and README.debian information for current and past maintainers. Remove redundant mention of Tridge (the copyright is enough) * Add doc-base files for samba-doc-pdf. Closes: #451685 * Kurdish debconf translation. Closes: #480151 -- Christian Perrier Wed, 16 Apr 2008 23:14:46 +0200 samba (1:3.0.28a-2) unstable; urgency=low [ Peter Eisentraut ] * Removed myself from Uploaders [ Steve Langasek ] * debian/patches/manpage-encoding.patch: fix up the manpage synopses to not use embedded iso8859-1 non-break spaces, there is a roff escape sequence that we should use instead. Closes: #470844. [ Christian Perrier ] * Reupload with an epoch to supersede an accidental upload of 3.2.0 in unstable -- Christian Perrier Sat, 05 Apr 2008 11:59:23 +0200 samba (3.2.0~pre2-1) unstable; urgency=low * New upstream (pre-)release. It closes the following bugs: - typos in net.8. Closes: #460487, #460491 - mention insmb.conf(5) that logging still occurs when "syslog only" is enabled and "syslog=0". Closes: #311300 - bad link in HTML docs. Closes: #358479 - enhance a useless and confusing debug message in pdb_ldap Closes: #448546 - mention the correct default debug level in smbclient(1) Closes: #292371 - no longer mention that "ip" parameter can use the host name in mount.cifs(8). Closes: #296057 - wrong spelling of "its own" in source comments fixed Closes: #448686 - fix "ldapsam_getgroup: Did not find group" debug message Closes: #448546 - fix smbclient(1): useless use of cat. Closes: #429349 [ Steve Langasek ] * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from 3.2.0pre2, which ended up with html entity encodings embedded in them by mistake. This patch is expected to go away again for 3.2.0pre3. * fix up the FHS patches for the new upstream release: - debian/patches/fhs-newpaths.patch has been merged upstream, drop it. - debian/patches/fhs-filespaths.patch has been mostly applied; only one path usage remains inconsistent, and a new .tdb has been added with the wrong path so fix this up here too. - debian/patches/fhs-filespaths-debatable.patch: updated for some new uses of lock_path() which we map to cache_path(). - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4 instead of source/configure.in. * debian/patches/smbstatus-locking.patch: merged upstream * debian/patches/smbpasswd-syslog.patch: updated to account for new calls to logging functions * Handle the new libraries available in samba 3.2: ship libwbclient as a shared library, link against the system libtalloc (adding a build-dependency on libtalloc-dev - which is actually sort of kludgy because this only works as long as the system libtalloc has the same soname as the one within the samba tree, this should be fixed to properly build against the system libtalloc), and suppress generation of the tdb and netapi libraries which aren't useful to us right now. -- Christian Perrier Wed, 05 Mar 2008 22:45:28 +0100 samba (2:3.0.31-1) unstable; urgency=medium * New upstream release -- Christian Perrier Sat, 12 Jul 2008 16:57:09 +0200 samba (2:3.0.30-4) unstable; urgency=low [ Christian Perrier ] * Rename libcupsys2-dev to libcups2-dev in build dependencies * Localize SWAT in German. Closes: #487681 [ Jelmer Vernooij ] * Fix bashism in smbtar. (Closes: #486056) [ Jamie Strandboge ] * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly calculate buffer sizes. This bug was introduced in the fix for CVE-2008-1105. Closes: #488688 [ Debconf translations ] * Romanian updated. Closes: #488709. -- Christian Perrier Sun, 06 Jul 2008 11:43:53 +0200 samba (2:3.0.30-3) unstable; urgency=low [ Christian Perrier ] * add a soft dependency on slapd in init script to allow proper operation when dependency-based boot sequence is enabled. Thanks to Petter Reinholdtsen for reporting and providing a patch Closes: #478800 [ Steve Langasek ] * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups server when we know that no printers are configured. Closes: #479512. -- Christian Perrier Tue, 10 Jun 2008 21:03:51 +0200 samba (2:3.0.30-2) unstable; urgency=high * Brown paper bag releae with epoch increased after yet another accidental upload of 3.2.0 to unstable. Sigh and apologies to autobuilders. -- Christian Perrier Sat, 31 May 2008 12:08:50 +0200 samba (1:3.0.30-1) unstable; urgency=high * New upstream release: fix a heap overflow when parsing SMB responses in client code. (CVE-2008-1105). Closes: #483410 -- Christian Perrier Wed, 28 May 2008 22:38:44 +0200 samba (1:3.0.29-1) unstable; urgency=low * New upstream release -- Christian Perrier Thu, 22 May 2008 07:31:55 +0200 samba (1:3.0.28a-3) unstable; urgency=low * The "bug hunting at SambaXP" release * Drop "invalid users = root" from the default smb.conf file as it differs from upstream's behaviour and upstream is fairly noisy about this choice of ours. Closes: #462046 * Drop commented "guest account = nobody". This is already upstream's default * Remove versioned Build-Depends when satisfied in etch (actually all versioning in Build-Depends) * Remove Conflicts with non-existing packages * Drop dpkg-dev and binutils from Build-Depends, since the versioned build-dep is no longer needed and these are both Build-Essential * Mini-policy for settings in smb.conf: - don't explicitly set settings to their default value - commented settings with the default value are commented with "#" - commented settings with a non-default value are commented with ";" * Apply this policy to "socket options". Closes: #476104 * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical libsmbclient.so.0 as upstream doesn't assign versions * Add idmap_*(8) man pages (idea taken from SerNet packages) * Create the entire set of directories needed by clients for Point-and-Click printing (including old clients!) in /var/lib/samba/printers (idea taken from SerNet packages) * Update copyright and README.debian information for current and past maintainers. Remove redundant mention of Tridge (the copyright is enough) * Add doc-base files for samba-doc-pdf. Closes: #451685 * Kurdish debconf translation. Closes: #480151 -- Christian Perrier Wed, 16 Apr 2008 23:14:46 +0200 samba (1:3.0.28a-2) unstable; urgency=low [ Peter Eisentraut ] * Removed myself from Uploaders [ Steve Langasek ] * debian/patches/manpage-encoding.patch: fix up the manpage synopses to not use embedded iso8859-1 non-break spaces, there is a roff escape sequence that we should use instead. Closes: #470844. [ Christian Perrier ] * Reupload with an epoch to supersede an accidental upload of 3.2.0 in unstable -- Christian Perrier Sat, 05 Apr 2008 11:59:23 +0200 samba (3.2.0~pre1-1) experimental; urgency=low * New upstream (pre-)release [ Steve Langasek ] * fhs.patch: net usershares should also be stored under /var/lib, not under /var/run. No transition handling in maintainer scripts, since this feature is not activated by default. * Update smbstatus-locking.patch to use db_open() instead of tdb_open(), per upstream recommendation. * Use talloc_strdup() and talloc_asprintf() instead of static strings in data_path(), state_path(), and cache_path(), as suggested by Volker Lendecke. [ Debconf translations ] * Hebrew added. Closes: #444054 [ Christian Perrier ] * Split fhs.patch into 4 separate patches to make upstream integration easier: - fhs-newpaths.patch: introduce new paths - fhs-filespaths.patch: assign files to new paths - fhs-filespaths-debatable.patch: assign files to new paths (part that seems more difficult to be integrated upstream) - fhs-assignpaths.patch: assign paths to FHS-compatible locations -- Christian Perrier Sun, 21 Oct 2007 09:14:42 +0200 samba (3.0.28a-1ubuntu4) hardy; urgency=low [ Mathias Gug ] * debian/samba-common.postinst: Fix upgrade from a first installation done with feisty, edgy or dapper. (LP: #201059). * debian/smb.conf.feisty: Add default smb.conf shipped in feisty. [ Steve Langasek ] * When populating the new sambashare group, it's not an error if the user simply doesn't exist; test for this case and let the install continue instead of aborting. LP: #206036. -- Steve Langasek Wed, 02 Apr 2008 21:07:11 +0000 samba (3.0.28a-1ubuntu3) hardy; urgency=low * debian/patches/fix-smbprinting-os2.patch - Fixes printing large documents from OS/2. (LP: #60931) -- Chuck Short Fri, 28 Mar 2008 08:37:31 -0400 samba (3.0.28a-1ubuntu2) hardy; urgency=low * debian/smb.conf - Add map to guest = Bad user, maps bad username to guest access. (LP: #32067) -- Chuck Short Thu, 27 Mar 2008 14:24:13 -0400 samba (3.0.28a-1ubuntu1) hardy; urgency=low * Merge from Debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] shares, and add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * debian/winbind.files: - include additional files * debian/patches/fix-documentation.patch: - fix typos in net(8) and smb.conf(5) man pages * debian/mksambapasswd.awk: - Don't add user with UID less than 1000 to smbpasswd. * debian/samba.init: - add 'status' option for LSB conformance. * Updated control version. * Set Ubuntu maintainer address. * Dropped changes: * debian/samba.if-up: this ifup hook isn't actually needed with current Samba. * Set 'usershare allow guests' by in the default smb.conf, so that usershare admins are allowed to create public shares too, not just authenticated ones (e.g., via nautilus-share). LP: #204703. -- Steve Langasek Tue, 25 Mar 2008 19:53:09 +0000 samba (3.0.28a-1) unstable; urgency=low [ Christian Perrier ] * New upstream release. This fixes the following Debian bugs: - Prevent nmbd from shutting down when no network interfaces can be located. Closes: #433449 * Debian patches dropped as applied upstream: - make-distclean.patch - linux-cifs-user-perms.patch - cifs-umount-same-user.patch - get_global_sam_sid-non-root.patch - chgpasswd.patch - cups.patch * Fix doc-base section from Apps/Net to Network * Fix copyright in debian/copyright * Updated Standards-Version to 3.7.3 (no changes needed) * [Lintian] No longer use -1 revision for the libacl-dev build dependency [ Steve Langasek ] * Merge smb.conf changes from Ubuntu: - correct an inconsistency inthe winbind enum comment - correct default and example settings to use the canonical names for all options, rather than historical synonyms - clarify the comment for 'max log size'. Thanks to Chuck Short and Richard Laager. * Add an additional sed command to samba-common.postinst to cleverly pick up any shares that have been appended to the default smb.conf and exclude them from the ucf diff. -- Christian Perrier Fri, 14 Mar 2008 21:28:16 +0100 samba (3.0.28a-0ubuntu3) hardy; urgency=low * But smbpasswd-syslog does need updated for the new upstream release, overlooked in the previous upload. Merge the version from Debian svn. -- Steve Langasek Fri, 14 Mar 2008 07:40:06 +0000 samba (3.0.28a-0ubuntu2) hardy; urgency=low * Re-enable the smbpasswd-syslog patch; this was not really merged upstream. -- Steve Langasek Fri, 14 Mar 2008 05:35:20 +0000 samba (3.0.28a-0ubuntu1) hardy; urgency=low [Chuck Short] * New upstream release. This fixes the following Ubuntu bugs. - Prevent nmbd from shutting down when no network interfaces can be located. (LP: #180493) - Fixes I/O errors on access to SMB shares of OS/2. (LP: #112839) * Dropped patches: - make-distclean.patch - linux-cifs-user-perms.patch - cifs-umount-same-user.patch - get_global_sam_sid-non-root.patch - chgpasswd.patch - cups.patch - samba-syslog.patch * debian/mksambapasswd.awk - Don't add user with UID less than 1000 to smbpasswd. (LP: #199412) * debian/samba.if-up - ifup hook to reload samba once the interfaces comes up. (LP: #180493) * Updated control version. [Nicolas Valcárcel] * debian/patches/fix-documentation.patch - Fixed some escape typos in smb.conf(5) manpage. (LP: #182571) [Shawn Smith] * debian/samba.init - Samba init script does not conform to the LSP specification; it needs a status section (LP: #39157) -- Chuck Short Tue, 11 Mar 2008 14:21:29 -0400 samba (3.0.28-4ubuntu1) hardy; urgency=low * Merge from Debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - add "(Samba, Ubuntu)" to server string. - comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - correct winbind enum comment inconsistency. - correct configuration directive inconsistences. - clarify comment for max log size. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * debian/winbind.files: - include additional files * debian/patches/fix-documentation.patch: - fix typo in net(8) man pages * Set Ubuntu maintainer address. * Dropped changes: - default passwd chat value is modified; the default password sync chat script from Debian now works out of the box. LP: #50624. -- Steve Langasek Sun, 09 Mar 2008 12:44:53 +0000 samba (3.0.28-4) unstable; urgency=low [ Steve Langasek ] * Brown paper bag: fix samba-common.files to list all of the smb.conf templates, not just the current one. Closes: #470138. * Drop debian/patches/gcc42-arm-workaround.patch, which should have been dropped in the previous upload -- Steve Langasek Sun, 09 Mar 2008 04:09:26 -0700 samba (3.0.28-3) unstable; urgency=low * Drop the arm optimization workaround, as the compiler is now reported to be fixed. * Add missing eventlogadm(8) manpage. * Refresh the list of Linux architectures from type-handling, to pick up libacl-dev on armel. Closes: #465121. * Convert handling of smb.conf to use ucf, so that we can sanely manage syntax changes going forward. * In the process, fix the dhcp handling to allow proper reconfiguration via debconf. [ Debconf translations ] * Indonesian added. Closes: #469976 -- Steve Langasek Sat, 08 Mar 2008 17:11:16 -0800 samba (3.0.28-2) unstable; urgency=low [ Steve Langasek ] * Drop some further code in samba-common.postinst that's specific to pre-3.0 upgrades. * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script, so we can use bash array variables and cope with arguments containing embedded spaces (such as share names). Thanks to Julian Gilbey for the patch. Closes: #457105. * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler problem by building rpc_parse/parse_prs.o with -O0 on this architecture. Thanks to Martin Michlmayr for helping to pin down the problem file. Closes: #445566. * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is a closer approximation of the semantics with cifs. -- Christian Perrier Sat, 05 Jan 2008 09:46:06 +0100 samba (3.0.28-1ubuntu3) hardy; urgency=low * Added additional files to winbind.files. (LP: #156468) * Deleted winbind enum comment inconsistency. Thanks to Richard Laager for the patches. (LP: #182569) * Deleted configuration directive inconsistences. Thanks to Richard Laager for the patches. (LP: #182567) * Fixed typo on net(8) man pages using fix-documentation.patch. (LP: #182570) * Clarrified comment for max log size. Thanks to Richard Laager for the patches. (LP: #182566) -- Chuck Short Tue, 22 Jan 2008 09:53:52 -0500 samba (3.0.28-1ubuntu2) hardy; urgency=low * Fixed incorrect line in debian/patches/VERSION.patch -- Rick Clark Sat, 15 Dec 2007 11:03:39 -0500 samba (3.0.28-1ubuntu1) hardy; urgency=low * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - default passwd chat value is modified * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * Set Ubuntu maintainer address. -- Rick Clark Thu, 13 Dec 2007 08:44:33 -0500 samba (3.0.28-1) unstable; urgency=high * New upstream release. Security fix * Fix a remote code execution vulnerability when running as a domain logon server (PDC or BDC). (CVE-2007-6015) -- Christian Perrier Tue, 11 Dec 2007 00:12:11 +0530 samba (3.0.27a-2ubuntu1) hardy; urgency=low * Merge from debian unstable (LP: #174296), remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - default passwd chat value is modified * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * Set Ubuntu maintainer address. -- Steve Langasek Wed, 05 Dec 2007 16:14:20 -0800 samba (3.0.27a-2) unstable; urgency=low * debian/patches/disable-weak-auth.patch: disable plaintext authentication on the client, and lanman authentication on both client and server, by default since these are only needed for Win9x or Samba with encrypted passwords disabled and are potential password attack vectors. This change is backported from Samba 3.2. LP: #163194. * Don't build the userspace tools for the deprecated smbfs kernel driver anymore; instead, use a shell wrapper around mount.cifs that translates option names between the smbfs and cifs drivers. Closes: #169624, #256637, #265468, #289179, #305210, #410075; LP: #29413 * debian/panic-action: detect when we're on an Ubuntu system and direct bug reporters to Launchpad instead of to the Debian BTS. Closes: #452940. * debian/samba.init: call log_progress_msg separately for each daemon on stop rather than passing a second arg to log_daemon_msg, for greater compatibility with both Debian and Ubuntu LSB initscript implementations. Closes: #453350. * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of recommends/suggests which is now implemented correctly in apt. Closes: #453144. * Get rid of the build-dependency on type-handling: - add a new target, "update-archs", to be invoked by hand to refresh the list of known Linux architectures for the libacl1-dev build-dep; this avoids the clean target making changes to debian/control - rework the sed line so that it works in-place on debian/control, so we can get rid of debian/control.in as well and just update debian/control directly Closes: #340570. -- Steve Langasek Tue, 04 Dec 2007 18:35:29 -0800 samba (3.0.27a-1ubuntu1) hardy; urgency=low * Merge from debian unstable (LP: #165072), remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/control: - Remove type-handling (not used in Ubuntu) * debian/rules: - Remove type-handling. * debian/samba.init: - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't say specifically which daemons we're handling. (LP #25803) * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. - default passwd chat value is modified * debian/panic-action: - Alter the panic-action script to link to the samba bug reporting page on Launchpad. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * Set Ubuntu maintainer address. * Bugs fixed in Debian: - Enable net usershare (LP: #128548) * Ubuntu patches merged in Debian: * debian/smb.conf: - "printer admin" is a deprecated option, and is dropped completely from the examples. * debian/samba-common.templates: - Default workgroup value is now set to WORKGROUP; this is a change from previous Ubuntu versions which used MSHOME, but is consistent with the Samba upstream defaults and the default behavior for most versions of Windows. * Ubuntu patches dropped: * debian/rules: - Samba should not use --error-handler=true for its init script. * debian/samba-common.templates, debian/po/*.po: - unnecessary divergence from Debian debconf template which resulted in fuzzy translations; this is cleaned up now -- Steve Langasek Sun, 25 Nov 2007 12:56:27 -0800 samba (3.0.27a-1) unstable; urgency=low [ Steve Langasek ] * New upstream release - fix regression with smbfs clients, introduced by the security fix in 3.0.27. Closes: #451839. - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream. * Drop the deprecated "printer admin" example from the default smb.conf. Closes: #451273. * Add a *new* debian/patches/cups.patch to *enable* cups as the default printing system, because since the original introduction of this patch in Debian there was a regression upstream that caused cups to never be selected as the default print system. * Set the default value for the workgroup question to "WORKGROUP" in samba-common.templates, not just in the template smb.conf, so that the debconf question comes out right every time; and always treat this as a high-priority debconf question instead of selecting the priority based on whether there's an existing value, since there's now *always* an existing value but the value doesn't tell us anything meaningful about the user's preference. Closes: #451271. * Drop some code from samba.postinst that only applies to upgrades from pre-3.0 (i.e., pre-sarge) packages [ Christian Perrier ] * Update the "built by" part of README.debian * Remove the very outdated parts of README.debian -- Steve Langasek Fri, 23 Nov 2007 13:04:52 -0800 samba (3.0.27-1) unstable; urgency=low * New upstream version - fixes a remote code execution vulnerability when running nmbd as a WINS server. (CVE-2007-5398; closes: #451385) - fixes a buffer overflow in nmbd when running as a domain controller during processing of GETDC logon server requests. (CVE-2007-4572) [ Steve Langasek ] * fhs.patch: net usershares should also be stored under /var/lib, not under /var/run. No transition handling in maintainer scripts, since this feature is not activated by default. * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid() from smbpasswd -L or pam_smbpass when running as non-root, to avoid a foreseeable panic. Closes: #346547, #450738. * usershare.patch: enable "user shares" by default in the server with a default limit of 100, to support user shares on both upgrades and new installs with no need to munge config files. Thanks to Mathias Gug for the patch. Closes: #443230. * On Ubuntu, support autopopulating the sambashare group using the existing members of the admin group; no equivalent handling is done on Debian, because there doesn't seem to be an appropriate template group we can use that wouldn't be considered a privilege escalation for those users. * Update Samba to explicitly use the C locale when doing password changes, to account for Linux-PAM's recently adopted i18n support. Closes: #451272. * Enforce creation of the pid directory (/var/run/samba) in the samba init script, for compatibility with systems that use a tmpfs for /var/run. Closes: #451270. * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd as the default printing system, as CUPS is now the dominant/default printing system for Linux. [ Debconf translations ] * Hebrew added. Closes: #444054 [ Christian Perrier ] * Split fhs.patch into 3 separate patches to make upstream integration easier: - fhs-newpaths.patch: introduce new paths - fhs-filespaths.patch: assign files to new paths - fhs-assignpaths.patch: assign paths to FHS-compatible locations * Compile with DNS update support. Thanks to Matthias Gug for reporting and contributions from Launchpad's #156686 Closes: #449422 -- Steve Langasek Thu, 15 Nov 2007 11:46:17 -0800 samba (3.2.0~pre1-1) experimental; urgency=low * New upstream (pre-)release [ Steve Langasek ] * fhs.patch: net usershares should also be stored under /var/lib, not under /var/run. No transition handling in maintainer scripts, since this feature is not activated by default. * Update smbstatus-locking.patch to use db_open() instead of tdb_open(), per upstream recommendation. * Use talloc_strdup() and talloc_asprintf() instead of static strings in data_path(), state_path(), and cache_path(), as suggested by Volker Lendecke. [ Debconf translations ] * Hebrew added. Closes: #444054 [ Christian Perrier ] * Split fhs.patch into 4 separate patches to make upstream integration easier: - fhs-newpaths.patch: introduce new paths - fhs-filespaths.patch: assign files to new paths - fhs-filespaths-debatable.patch: assign files to new paths (part that seems more difficult to be integrated upstream) - fhs-assignpaths.patch: assign paths to FHS-compatible locations -- Christian Perrier Sun, 21 Oct 2007 09:14:42 +0200 samba (3.0.26a-1ubuntu2) gutsy; urgency=low * debian/patches/chgpasswd.patch: - Also set the locale to 'C' when using PAM for password changes, since the PAM conversation is equally affected by PAM l10n support (LP: #139265). -- Steve Langasek Tue, 02 Oct 2007 13:54:23 -0700 samba (3.0.26a-1ubuntu1) gutsy; urgency=low * debian/patches/chgpasswd.patch: - Set locale to 'C' while calling the passwd change program * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/control: - Remove typehandling (not used in Ubuntu) * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/rules: - Remove type-handling. * debian/samba.init: - Make sure $PIDDIR exists (/var/run is a tmpfs) - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't say specifically which daemons we're handling. (LP #25803) * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. * debian/panic-action: - Bail out if there's no "mail" command. - Alter the panic-action script to link to the samba bug reporting page on Launchpad. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed -- Andrew Mitchell Mon, 17 Sep 2007 15:58:10 +1200 samba (3.0.26a-1) unstable; urgency=low * New upstream release. * Remove the samba-common/unsupported-passdb debconf template and the associated code in samba-common.postinst, that deals with pre-etch versions transition * Remove the samba/tdbsam template and the remaining line referencing it (for no need) in samba.postinst. That code was removed in 3.0.23c-2 and was dealing with pre-3.0 transitions. -- Christian Perrier Sun, 16 Sep 2007 10:16:29 +0200 samba (3.0.26-1) unstable; urgency=high * New upstream release: security update for CVE-2007-4138: incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin. -- Christian Perrier Tue, 11 Sep 2007 19:16:32 +0200 samba (3.0.25c-1) unstable; urgency=low [ Noèl Köthe ] * new upstream released from 2007-08-20 - added smbfs deprecation information to help and manpage Closes: #360384 - fixed winbind leaking file descriptors Closes: #410663 - fixed smbpasswd fails with errorcode SUCCESS as normal user Closes: #155345 [ Christian Perrier ] * Drop the (upstream unmaintained) python bindings (python-samba package) * swat: turn the dependency on samba-doc to a Recommends: Thanks to Peter Eisentraut for dealing with that issue and bringing it back. Closes: #391742 -- Christian Perrier Sun, 26 Aug 2007 14:57:16 +0200 samba (3.0.25b-2) unstable; urgency=low [ Steve Langasek ] * Don't start nmbd if 'disable netbios' is set in the config. Closes: #429429. * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid, set to those of the invoking user, when called as non-root. Closes: #431661. * Fix up fhs.patch for some new FHS regressions: - make sure all references to winbindd_idmap.tdb look in /var/lib/samba - make sure all references to winbindd_cache.tdb look in /var/cache/samba - share_info.tdb belongs in /var/lib/samba; this is a regression introduced in 3.0.23-1, so fix up this path on samba upgrade - move the ADS "gpo" cache directory to /var/cache/samba - move idmap_cache.tdb to /var/cache/samba, and fix up the path on winbind upgrade * linux-cifs-user-perms.patch: also support setting a default uid and gid value when mount.cifs is called as non-root * cifs-umount-trailing-slashes.patch: canonicalize mount point names when umount.cifs is called, to avoid unnecessarily leaving entries behind in /etc/mtab if invoked with a trailing slash in the mount point name * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check in umount.cifs assumed that errors would return a value > 0, when in fact the return value on failure is -1. Correct this assumption, which was allowing any user to unmount shares mounted by other users. * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog() and closelog(), since this will interfere with syslogging behavior of the calling application. Closes: #434372. * swat should depend only on inet-superserver, not update-inetd, per Marco d'Itri. [ Christian Perrier ] * debian/panic-action: bail out if there's no "mail" command Patch from the Ubuntu samba packagers. * debian/smb.conf: use the comment from Ubuntu package for the "valid users" setting of [homes] as a basis for ours. Ubuntu's wording is better. [ Peter Eisentraut ] * Don't ignore errors from make distclean, as per lintian check [ Debconf translations ] * Gujarati updated. Closes: #436215 -- Steve Langasek Fri, 17 Aug 2007 18:38:58 -0700 samba (3.0.25b-1ubuntu4) gutsy; urgency=low * debian/rules: - add error-handler=true to samba dh_installinit. Fixes LP: #85194. -- Mathias Gug Fri, 17 Aug 2007 12:11:45 -0400 samba (3.0.25b-1ubuntu3) gutsy; urgency=low * Build depend on libacl1-dev on lpia. -- Matthias Klose Tue, 14 Aug 2007 10:26:58 +0000 samba (3.0.25b-1ubuntu2) gutsy; urgency=low * debian/smb.conf: - Fix 'valid users =' option in smb.conf. LP: #131419. -- Mathias Gug Thu, 09 Aug 2007 21:39:54 -0400 samba (3.0.25b-1ubuntu1) gutsy; urgency=low * Dropped patches: + debian/patches/ubuntu-auxsrc.patch: - ntlm_auth_proto.h, smbadduser, gen-8bit-gap.sh are all autogenerated at build time. * Merge from debian unstable, remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/control: - Remove typehandling (not used in Ubuntu) - Added Conflicts/Replaces on python2.4-samba. * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/rules: - Remove type-handling. * debian/samba.init: - Make sure $PIDDIR exists (/var/run is a tmpfs) - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't say specifically which daemons we're handling. (LP #25803) * debian/smb.conf: - Add "(Samba, Ubuntu)" to server string. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about "valid users = %S" to show users how to restrict access to \\server\username to only username. * debian/panic-action: - Bail out if there's no "mail" command. - Alter the panic-action script to link to the samba bug reporting page on Launchpad. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed -- Soren Hansen Mon, 16 Jul 2007 10:58:21 +0200 samba (3.0.25b-1) unstable; urgency=low * New upstream version * Bugs fixed upstream: - correct default mentioned for "store dos attribute" in smb.conf(5) Closes: #367379 - fix typo in pdbedit.c. Closes: #421758 - fixed crashes in idmap_rid. Closes: #428411 - misleading documentation in smb.conf(5). Closes: #218477 - don't crash when no eventlog names are defined in smb.conf Closes: #424683 - typography errors in manpages. Closes: #427865, #418811 - fix compilation and linking of pam_smbpass.so. Closes: #430755 * Drop patches that have been applied upstream: - nmbd-signalling.patch -- Christian Perrier Wed, 27 Jun 2007 15:12:13 +0200 samba (3.0.25a-2) unstable; urgency=low [ Debconf translations ] * Danish updated. Closes: #426773 [ Christian Perrier ] * Clean out some remaining cruft that is not deleted by "make clean". Taken from Ubuntu patches. * Add missing userspace patches to properly pass uid and gid with 2.6 kernels. See #408033 and upstream's #999 for rationale * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue is fixed in 2.4 and 2.6 kernels (2.6 kernels need missing_userspace_bugzilla999.patch, though) Closes: #408033 * Add the samba-common and winbind packages to samba-dbg to get debugging symbols for winbindd, net, etc. * Replace all occurrences of ${Source:Version} by ${$binary:Version} in dependencies. All these were Arch:any depending on Arch:any (the only Arch:any depending on Arch:all already used ${source:Version} [ Steve Langasek ] * Update samba.config to not override user preference on passdb.tdb creation after initial configuration. Closes: #350926. * Drop the last vestiges of the unified samba.patch; this reverts the change for bug #112195 which it's been determined has no actual security benefits, and drops the fix for bug #106976 which is superseded upstream. [ Debconf translations ] * Vietnamese updated. Closes: #426979. -- Christian Perrier Wed, 13 Jun 2007 15:47:06 +0200 samba (3.0.25a-1) unstable; urgency=low [ Christian Perrier ] * New upstream version * Bugs fixed upstream: - password expiration loog on samba domain controllers. Closes: #425083 - no more login on samba servers that are members of samba domains Closes: #425680, #426002 - users no longer have access according to their secondary groups on shares with "force group". Closes: #424629 * Debian packaging fixes: - Enforce building with "--with-ads" and therefore fail when the build can't be done with kerberos support. Closes: #424637 - debian/control: wrap long lines in packages' descriptions - uncomment out use of type-handling in the clean target, because type-handling has been fixed to support the new /usr/share/dpkg/ostable - avoid installing extra COPYING files in /usr/share/doc/* (one was installed along with the pcap2nbench example) * Merge Ubuntu changes: - use of PIDDIR instead of hardcoding it in samba.init and winbind.init * Patches to upstream source: - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory instead of the lock directory. Thanks to C. K. Jester-Young for the patch. Closes: #425640 [ Steve Langasek ] * swat and samba depend on update-inetd instead of on netbase; swat also depends on "openbsd-inetd | inet-superserver", for samba this is only a Suggests. -- Christian Perrier Sun, 27 May 2007 09:30:02 +0200 samba (3.0.25-1ubuntu1) gutsy; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) -- Andrew Mitchell Sun, 20 May 2007 21:43:26 +1200 samba (3.0.25-1) unstable; urgency=high * New upstream version including security fixes * Bugs fixed upstream: - nmbd no longer segfaults on bad interface line Closes: #265577, #386922, #359155, #366800 - documentation issues about displaycharset. Closes: #350790 - documentation makes it clear that case options such as "default case" can only be set on a per-share basis. Closes: #231229 - all occurrences of "encypt" fixed in smb.conf(5) Closes: #408507 - two typos on "account" fixed in source/passdb/pdb_ldap.c and source/utils/pdbedit.c. Closes: #402392 - no longer panic when using the (deprecated) "only user" option in user level security. Closes: #388282 - CVE-2007-2444 (User privilege elevation because of a local SID/Name translation bug) - CVE-2007-2446 (Multiple heap overflows allow remote code execution) - CVE-2007-2447 (Unescaped user input parameters are passed as arguments to /bin/sh allowing for remote command execution) [ Debconf translations ] * Marathi added. Closes: #416802 * Esperanto added. Closes: #417795. * Basque updated. Closes: #418196. * Wolof updated. Closes: #421636 [ Christian Perrier ] * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba before running invoke-rc.d. Closes: #414841 [ Steve Langasek ] * Comment out use of type-handling in the clean target, because type-handling is currently broken in unstable and clean shouldn't be editing debian/control anyway. -- Christian Perrier Mon, 14 May 2007 10:30:15 +0200 samba (3.0.24-6ubuntu1) gutsy; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) -- Kees Cook Tue, 08 May 2007 05:18:16 -0700 samba (3.0.24-6) unstable; urgency=high * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug is still present :/ Fix a missing ] in the regexp for passdb backend checking, really-closes: #415725. -- Steve Langasek Sat, 24 Mar 2007 03:32:46 -0700 samba (3.0.24-5) unstable; urgency=high * The "see what you get for trusting the quality of my packages, release team? Release team, please unblock this package" release. * High-urgency brown-paper-upload for etch-targetted fix for regression introduced in the last version [ Steve Langasek ] * Fixed the regexp used for matching broken passdb backend settings, since we were getting false positives on *all* values. :/ The correct match should be: one or more non-space, non-comma characters, followed by a space or a comma, followed by zero or more spaces, followed by one or more non-space characters. Closes: #415725. [ Debconf translations ] * Nepali * Korean; closes: #414883. * Russian * Arabic * Portuguese * Greek. Closes: #415122 * Norwegian Nynorsk added. * Marathi added. Closes: #416802 -- Steve Langasek Wed, 21 Mar 2007 13:49:46 -0700 samba (3.0.24-4) unstable; urgency=medium [ Steve Langasek ] * Documentation fix for a problem affecting upgrades from sarge: if passdb backend is still a comma- or space-separated list after any attempts at automatic fix-ups, throw a debconf error notifying the user that they'll need to fix this manually. Closes: #408981. [ Debconf translations ] * French * Spanish * Galician; closes: #414605. * Swedish; closes: #414610. * Brazilian Portuguese; closes: #414603. * German; closes: #414630. * Norwegian Bokmål; closes: #414619. * Bulgarian; closes: #414624. * Romanian; closes: #414629. * Tagalog; closes: #414637. * Khmer; closes: #381833. * Thai; closes: #414664. * Slovak; closes: #414665. * Slovenian * Simplified Chinese; closes: #414671. * Japanese; closes: #414673. * Hungarian; closes: #414677. * Dzongkha; closes: #414680. * Estonian; closes: #414679. * Catalan * Malayalam; closes: #414728 * Traditional Chinese; closes: #414730 * Turkish * Italian; closes: #414708 * Finnish; closes: #414736 * Dutch; closes: #414741 * Albanian; closes: #414778. * Czech; closes: #414793. -- Steve Langasek Tue, 13 Mar 2007 16:29:21 -0700 samba (3.0.24-3) unstable; urgency=low [ Christian Perrier ] * Merge some Ubuntu changes: - do not expose the Samba version anymore - default workgroup set to WORKGROUP (default workgroup of Windows workstations) * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch Closes: #394830 * Add commented "winbind enum*" settings in smb.conf This will point users to these important settings which changed their default behaviour between sarge and etch. Closes: #368251 [ Steve Langasek ] * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first time the script is called if the dhcp client was already running at the time of install, and manually reload samba to get the updated config files read. Thanks to Bas Zoetekouw for the patch. Closes: #407408. * While we're at it, use atomic replace for /etc/samba/dhcp.conf just in case someone else reloads samba while the script is running. Low impact, low-risk change. -- Steve Langasek Sun, 11 Mar 2007 23:34:10 -0700 samba (3.0.24-2ubuntu1) feisty; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) * Really drop debian/patches/ubuntu-fix-ldap.patch: - Fixed upstream, see Debian #274155 -- Kees Cook Tue, 6 Feb 2007 20:58:01 -0800 samba (3.0.24-2) unstable; urgency=low * Re-upload with a proper .orig.tar.gz. -- Steve Langasek Mon, 5 Feb 2007 19:55:34 -0800 samba (3.0.24-1) unstable; urgency=high * New upstream release, security update * Fixes for the following security advisories: - Directly affecting Debian: - CVE-2007-0452 (Potential Denial of Service bug in smbd) - Not affecting Debian: - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind NSS library on Solaris) - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin) * Correct paths for the documentation pointers in the default smb.conf file. Thanks to Ted Percival for his care reporting this. Closes: #408898 -- Christian Perrier Mon, 5 Feb 2007 05:27:07 +0100 samba (3.0.23d-4) unstable; urgency=low * Debconf translation updates: - Slovenian added. -- Christian Perrier Wed, 3 Jan 2007 08:43:50 +0100 samba (3.0.23d-3) unstable; urgency=low * Debconf translation updates: - Malayalam added. Closes: #403107 - Tamil added. Closes: #403353 -- Christian Perrier Mon, 1 Jan 2007 10:17:18 +0100 samba (3.0.23d-2ubuntu2) feisty; urgency=low * Rebuild for python2.5 as the default python version. -- Matthias Klose Fri, 12 Jan 2007 13:18:25 +0000 samba (3.0.23d-2ubuntu1) feisty; urgency=low * Merge from debian unstable, remaining changes: * debian/smb.conf: - Do not show the version number by default - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. * debian/panic-action: - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script * debian/samba-common.templates: - Set default workgroup to MSHOME * debian/control: - remove typehandling - add update-inetd to Depends * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed * debian/samba.init: - use of PIDDIR instead of hardcoding it - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * debian/rules: - remove type-handling - properly clean on make clean - do not install mount.cifs and umount.cifs as suid * debian/patches/ubuntu-auxsrc.patch: - some auxilliary sources (undocumented in previous changelogs) * debian/patches/ubuntu-fix-ldap.patch: - fix LDAP backend, see Ubuntu #1905, Debian #274155 -- Michael Vogt Mon, 18 Dec 2006 13:31:09 +0100 samba (3.0.23d-2) unstable; urgency=low * Build-Conflicts: libfam-dev to avoid problems accessing shares when using GAMIN. Closes: #400617 * Lintian fixes: - Run debconf-updatepo in the clean target to ensure up-to-date PO and POT files - debian/patches/no_unbreakable_spaces_in_man.patch: Replace all non-breakable spaces by regular spaces in man pages. They are encoded in ISO-8859-1 which is not recommended in man pages. This should be submitted upstream. - reformat too long lines in package description -- Christian Perrier Sun, 3 Dec 2006 09:39:29 +0100 samba (3.0.23d-1ubuntu3) feisty; urgency=low * added depends on update-inetd -- Michael Vogt Thu, 14 Dec 2006 18:59:14 +0100 samba (3.0.23d-1ubuntu2) feisty; urgency=low * Remove type-handling from build-deps, it's not in Ubuntu main. (It was already disabled in the rules file. -- Tollef Fog Heen Tue, 12 Dec 2006 14:42:23 +0100 samba (3.0.23d-1ubuntu1) feisty; urgency=low * Merge from debian unstable. * Drop python2.4-samba, replace with python-samba. Added Conflicts/Replaces on python2.4-samba * Drop track-connection-dos.patch, ubuntu-winbind-panic.patch, ubuntu-fix-ldap.patch, ubuntu-setlocale.patch, ubuntu-setlocale-fixes.patch * Remaining Ubuntu changes: - Revert Debian's installation of mount.cifs and umount.cifs as suid - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) - Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. - Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. - Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. Modify text to more closely match the Debian script - Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) - Kept ubuntu-auxsrc.patch: some auxilliary sources (undocumented in previous changelogs) - Set default workgroup to MSHOME -- Andrew Mitchell Tue, 28 Nov 2006 20:14:37 +1300 samba (3.0.23d-1) unstable; urgency=low * new upstream release (2006-11-15) [ Noèl Köthe ] * updated documentation.patch for 3.0.23d * updated non-linux-ports.patch for 3.0.23d * updated adapt_machine_creation_script.patch for 3.0.23d * updated autoconf.patch for 3.0.23d [ Debconf translations ] * Added Bosnian. Closes: #396634 * Added Bulgarian. Closes: #397773 -- Noèl Köthe Thu, 16 Nov 2006 13:55:26 +0100 samba (3.0.23c-4) unstable; urgency=low [ Debconf translations ] * Added Greek. * Added Gujarati. Closes: #394430 * Added Korean. Closes: #394509 * Added Nepali. * Updated Czech (typo fixed). * Added Wolof. Closes: #396079 -- Christian Perrier Sun, 5 Nov 2006 09:42:40 +0100 samba (3.0.23c-3) unstable; urgency=low [ Debconf translations ] * Updated Catalan; thanks to Guillem Jover for his help * Updated Russian. * Updated Spanish. Add a missing word and correct the copyright header * Updated Vietnamese. Closes: #394164 * Added Albanian. Closes: #393777 * Added Chinese (Traditional). * Added Thai. -- Christian Perrier Sat, 21 Oct 2006 10:44:11 +0200 samba (3.0.23c-2) unstable; urgency=low [ Debconf translations ] * Updated Swedish. Closes: #386510. * Updated Japanese. Closes: #386534. * Updated Italian. Closes: #386691. * Updated Romanian. Closes: #388254. * Updated German. Closes: #389072. * Updated Brazilian Portuguese. Closes: #389097. * Updated Basque. Closes: #389722. * Updated Turkish. Closes: #390887 * Updated Danish. Closes: #390878 * Updated German. Closes: #390813 * Updated Simplified Chinese. Closes: #390959 * Updated Arabic. * Updated Spanish. Closes: #391735 * Updated Dutch. Closes: #392082 * Added Slovak. Closes: #386847. * Added Finnish. Closes: #390150. * Added Estonian. Closes: #391102. * Added Norwegian Bokmål. Closes: #391692 * Added Hungarian. Closes: #391746 [ Steve Langasek ] * Change the Maintainer field at last to the mailing list... gives our spam rules some testing, in response to popular demand :) * Check for update-inetd on purge before trying to invoke it; closes: #388606. [ Peter Eisentraut ] * Make swat binNMU-safe by using ${source:Version} for dependency on samba-doc * Make samba-common owner of /var/{cache,log,run}/samba, let samba and winbind only delete files they know they're exclusive owners of. Closes: #370718. * Use python-central to manage installation of python-samba. Closes: #386499. (patch by Patrick Winnertz) * Use upstream makefile to install Python module. * Build-Depend on python-dev instead of python-all-dev. * Removed old upgrade support. * Remove possibly leftover comma from "passdb backend" setting in smb.conf on upgrade. Closes: ##383307. * Added libpam-smbpass logcheck file by martin f krafft. Closes: #391487, #391916. [ Christian Perrier ] * Add LSB info to the init script -- Christian Perrier Thu, 12 Oct 2006 18:31:46 +0200 samba (3.0.23c-1) unstable; urgency=low [ Christian Perrier ] * New upstream version * Split out samba/run_mode with "__Choices". [ Noèl Köthe ] * corrected samba override disparity: samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra. [ Debconf translations ] * Updated Galician. Closes: #383001. * Updated Danish. Closes: #383025. * Added Tagalog. Closes: #383039, #383252. * Updated Khmer. * Updated Arabic. * Updated Dzongkha. Closes: #383125. * Updated Vietnamese. Closes: #383126. * Updated Czech. Closes: #384760. [ Peter Eisentraut ] * Preseed configure result for method to detect interfaces in debian/config.cache; the test might otherwise fail if there are no interfaces configured at build time. Closes: #382429. * Refined panic-action script text. Closes: #382500. -- Noèl Köthe Mon, 04 Sep 2006 12:10:28 +0200 samba (3.0.23b-2) unstable; urgency=low [ Debconf translations ] * Updated Romanian. Closes: #382358 * Updated Dzongkha. Closes: #382448, #382948 * Updated Basque. Closes: #382456 * Added Simplified Chinese. Closes: #382489 [ Peter Eisentraut ] * Remove no longer functioning "guest" value from "passdb backend" setting in smb.conf on upgrade. Closes: #382296 [ Steve Langasek ] * Drop code and debconf questions specific to upgrades from samba <= 2.2. * Reword some debconf translations as discussed on the list. * Rerun debconf-updatepo. * Switch debian/ca.po to UTF-8. * Restore some reverted strings for Galician, Czech, Brazilian Portuguese, Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese. * Update translations for Brazilian Portuguese, Spanish, French, Italian, Catalan, and Portuguese. -- Peter Eisentraut Mon, 14 Aug 2006 19:04:31 +0200 samba (3.0.23b-1) unstable; urgency=low * New upstream release [ Debconf translations ] * Updated Galician. Closes: #381988 -- Noèl Köthe Tue, 08 Aug 2006 22:28:00 +0200 samba (3.0.23a-1) unstable; urgency=medium * New upstream release * Fixes the following Debian bugs: - winbind: panic()s when started outside of a domain context. Closes: #337070 - Make smbclient -L use RPC to list shares, fall back to RAP. Closes: #168732 - Potential hang in nmbd. Upstream bug #3779. Closes: #367472 - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780). Closes: #367507 - Erroneous permissions checks after 3.0.10 -> 3.0.14a (upstream #2591). Closes: #307626 - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070 - ImportError exception raised when trying to import samba.smb (upstream #3567). Closes: #350050 - Changed references from pam_pwdb to pam_unix (upstream #3225). Closes: #206672 - SWAT segfault (upstream #3702). Closes: #363523 [ Adam Conrad ] * Fix typo in smb.conf that causes all samba apps to whine. Closes: #369782 * Add myself to Uploaders, on the off chance that I might upload. [ Debconf translations ] * Add Galician translation of debconf templates. Closes: #361204, #369403 * Add Basque translation of debconf templates. Closes: #375104 * Add Romanian translation of debconf templates. Closes: #379246 * Add Khmer translation of debconf templates. Closes: #381833 * Add Dzongkha translation of debconf templates. * Updated Russian. Closes: #369375 * Updated Czech. Closes: #369408 * Updated Japanese. Closes: #369457 * Updated Italian. Closes: #369587 * Updated Swedish. Closes: #369730 * Updated Dutch. Closes: #376515 * Updated Vietnamese. Closes: #381557 * Updated French. * Updated Brazilian. * Updated Portuguese. Closes: #372632 * Updated Arabic. [ Christian Perrier ] * Add dependency on procps for samba, as ps is used in init scripts. Thanks to Bastian Blank for reporting. Closes: #365618 * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's Reference * Add support for /etc/default/winbind. Closes: #262313, #374411 Thanks to Guido Guenther for the old patch and to Jérôme Warnier for reminding us about it. * Compile with --with-cifsmount which is now needed to properly compile mount.cifs and umount.cifs. See samba bug #3799 [ Peter Eisentraut ] * Use debian/compat instead of DH_COMPAT * Updated Standards-Version to 3.7.2 (no changes needed) * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the required ldconfig calls appear in the maintainer scripts * Adjusted debian/rules to get 3.0.23rc1 to build * Updated to debhelper level 5 * Rearranged dh_strip calls so that build succeeds with DEB_BUILD_OPTIONS=nostrip. Closes: #288995 * Create /var/spool/samba and use it as default printer spool. Closes: #275241 * Made winbind init script more careful about returning proper exit code * Added winbindd_priv group as owner of winbindd_privileged directory. Closes: #307257 * Python transition preparations: renamed package to python-samba, removed hardcoded references to Python version 2.3. Closes: #380939 * Removed unwanted swat debconf warning * Put localized swat messages into /usr/share/samba, where swat looks for them. Closes: #376991 -- Peter Eisentraut Mon, 7 Aug 2006 23:00:49 +0200 samba (3.0.22-1ubuntu4) edgy; urgency=low * SECURITY UPDATE: Remote DoS. * Add debian/patches/track_connection_dos.patch: - Limit active connections to 2048 to avoid DoS due to unbound array growing when tracking active connections. - CVE-2006-3403 -- Martin Pitt Tue, 11 Jul 2006 13:14:27 +0200 samba (3.0.22-1ubuntu3) dapper; urgency=low * Config file changes only in this upload; no destabilising code changes. * Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (closes: launchpad.net/27608) * Add a "valid users = %S" stanza to the commented-out [homes] section, to show users how to restrict access to \\server\username to only username. * Change the (commented-out) "printer admin" example to use "@lpadmin" instead of "@ntadmin", since the lpadmin group is used for spool admin. -- Adam Conrad Wed, 17 May 2006 18:29:00 +1000 samba (3.0.22-1ubuntu2) dapper; urgency=low * After much faff about fixing this properly and getting fixes submitted upstream (some of which has happened), I've concluded that getting every case_tables usage in the code nailed down before release just isn't going to happen, so applying a more global bandaid (ubuntu-setlocale-fixes.patch) instead to stop the SEGVs completely (closes: launchpad.net/{39990,39484,39956}) * Snag a patch from upstream SVN to stop winbindd from panicking when not joined to a domain (closes: launchpad.net/32614) * Mangle patch fuzz for previous patch to make it apply cleanly. -- Adam Conrad Tue, 16 May 2006 22:36:17 +1000 samba (3.0.22-1ubuntu1) dapper; urgency=low * Sync with Debian's new upstream (UVF exception granted by mdz) to resolve the information disclosure vuln reported in CVE-2006-1059 * Make the panic-action script check for 'mail' before it goes about trying to backtrace crashes and mail to root (launchpad.net/32987) * Include patch from upstream to purge setlocale calls from the client library, so we don't break the desktop locale (launchpad.net/28603) * Make the samba and winbind init scripts more robust in the face of a tmpfs /var/run, creating directories as we go (launchpad.net/33389) * Fix up syntax error in the default config file (launchpad.net/37965) -- Adam Conrad Sun, 2 Apr 2006 22:09:41 +1000 samba (3.0.22-1) unstable; urgency=medium [ Steve Langasek ] * New upstream release - CAN-2006-1059: fixes an information leak in logfiles of systems using winbind with log level >= 5. * Fix a typo in the default smb.conf (closes: #354495). [ Noèl Köthe ] * replacing SMB with SMB/CIFS in the descriptions like named on the samba.org webpage. Closes: #356335 -- Steve Langasek Sun, 12 Mar 2006 22:40:28 +0100 samba (3.0.21c-1ubuntu1) dapper; urgency=low * Merge with Debian for new upstream bugfixes, UVF exception by mdz. * Remove dapper->dapper upgrade hack, which should be a non-issue now. -- Adam Conrad Fri, 24 Mar 2006 02:59:17 +1100 samba (3.0.21c-1) unstable; urgency=low * New upstream release * add a few logon-related parameters as good and safe examples for *DC-type settings. Closes: #349051 * add an example "add user script". Closes: #349050 * drop outdated information from the smbfs package description Closes: #352828 -- Christian Perrier Sat, 25 Feb 2006 11:58:45 +0100 samba (3.0.21b-1ubuntu2) dapper; urgency=low * Due to a misplaced file in older samba packages, temporarily make python2.4-samba Replace samba for smooth dapper->dapper upgrades. -- Adam Conrad Thu, 23 Feb 2006 20:33:34 +1100 samba (3.0.21b-1ubuntu1) dapper; urgency=low * Sync with Debian's new upstream release (UVF exception granted by Colin), which fixes several nasty crashes, as well as a vicious memory leak in winbind that can OOM a machine within days (Closes: launchpad.net/32440) * Resolve some fairly scary merge conflicts from Debian's switch to quilt. * Revert Debian's installation of mount.cifs and umount.cifs as suid until Martin Pitt and I have had a chance to review/discuss this for Ubuntu. -- Adam Conrad Thu, 23 Feb 2006 15:23:37 +1100 samba (3.0.21b-1) unstable; urgency=low * The "Tridge" release: celebrates the 2005 Free Software Award winner * New upstream release * Upstream bugs fixed by the new upstream release: - Support changing expired passwords in pam_winbindd. Closes: #258302 - vfs_full_audit fixes for multiple connections. Closes: #348419 - crashes of smbd in security=server mode Closes: #346045, #346069, #350598, #351448 [ Peter Eisentraut ] * Put correct paths for Debian installations into the man pages, and remove outdated swat setup instructions therein. Closes: #321005 * Fix lintian overrides and install them into the right packages. * Remove swat inetd registration in remove, not purge. Closes: #313214 * Add findsmb script. Closes: #231806 * Fix sonames of libnss_win{bind,s}.so. Closes: #333290 * Remove autoconf build dependency. * Remove remnants of old patch system. * Install smbumount setgid root. Closes: #253437 * Add watch file. * Activate kernel oplocks. Closes: #218511 * Disable PIE compilation. Closes: #346416 [ Christian Perrier ] * activate building of idmap_rid. Closes: #284681. Thanks to Ubuntu patches * activate building of idmap_ad. Closes: #341814 * modify the long description of the libsmbclient-dev package to avoid repeating the long description. Thanks, linda. [ Steve Langasek ] * Also enable setresuid()/setresgid() on alpha and sparc now that support for Linux 2.2 is dropped. -- Christian Perrier Mon, 6 Feb 2006 07:02:20 +0100 samba (3.0.21a-4) unstable; urgency=low [ Peter Eisentraut ] * Add umount.cifs. Closes: #340967 * Really make mount.cifs and umount.cifs suid root. Closes: #340966 [ Christian Perrier ] * Add "bind interfaces only" and "interfaces" options (commented) to the default smb.conf file. Closes: #349043 [ Steve Langasek ] * Add missing changes to source/include/config.h.in into the autoconf.patch, so that samba looks for files in /var/lib/samba like it's supposed to instead of in /var/run/samba! Closes: #349372, #349464. -- Steve Langasek Mon, 23 Jan 2006 00:59:20 -0800 samba (3.0.21a-3) unstable; urgency=low * Add Build-Depends on quilt (>= 0.40 as we use quilt.make) -- Christian Perrier Sat, 21 Jan 2006 23:02:32 +0100 samba (3.0.21a-2) unstable; urgency=low [ Christian Perrier ] * Switch to quilt for patches management. Refresh all patches so that they apply cleanly. Closes: #345557 * debian/patches/adapt_machine_creation_script.patch: - adapt example machine creation script to Debian. Closes: #346234 * winbind.dirs: - added /var/run/samba. Closes: #347585 [ Peter Eisentraut ] * swat.links: - file added. Closes: #346001 [ Noèl Köthe ] * fixed typo in panic-script. Closes: #348410 [ Steve Langasek ] * debian/patches/autoconf.patch: - move changes to autogenerated files into their own patch now that we've lost the script that was calling autogen.sh for us; this also helps make debian/rules clean just a little bit cleaner. * debian/patches/fhs.patch: - fix new references to registry.tdb (closes: #348874). - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba where they belong -- Christian Perrier Fri, 20 Jan 2006 14:20:35 +0100 samba (3.0.21a-1ubuntu1) dapper; urgency=low * Resyncronise with Debian, resolving many merge conflicts (#20710) * Alter the panic-action script to encourage users to report their bugs in Ubuntu packages to Ubuntu, rather than reporting to Debian. * Munge our init script to deal with the fact that our implementation (or lack thereof) of log_daemon_msg and log_progress_msg differs from Debian's implementation of the same (Ubuntu #19691) * Enable the idmap_rid.so backend plugin for winbind (Ubuntu #12797) -- Adam Conrad Tue, 3 Jan 2006 13:56:26 +1000 samba (3.0.21a-1) unstable; urgency=low [ Christian Perrier ] * *Really* make samba-doc suggest samba-doc-pdf. This change finally did not make it in the previous release. [ Noèl Köthe ] * new upstream release 3.0.21a - removed smbsh.1 from debian/rules - added new smbclient programm smbget (with conflict/replace to existing Debian smbget package) - added libsmbclient.7 to libsmbclient package - added umount.cifs.8 to smbfs package - added pam_winbind.7 to winbind package - added new /usr/bin/eventlogadm to samba package which is documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt - fixed "cd command fails in smbclient". Closes: #307535 - fixed "file descriptor leak". Closes: #339564 - fixed "smbclient(1) doesn't list same options as smbclient usage statement". Closes: #154184 - fixed "typo in smbmount.8". Closes: #260673 - fixed "smbmount manual page doesn't have a link to smbumount". Closes: #297535 - fixed "smb.conf man page references non-existent BROWSING.txt file". Closes: #316458 - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480 - fixed "fails to manage groups containing spaces". Closes: #299592 - corrected nonpic-libsmbclient.patch to apply - corrected fhs.patch to apply * added myself to Uploaders * Rewording of the panic action script. Closes: #335051 * added missing swat translation to swat package -- Noèl Köthe Sun, 01 Jan 2006 12:45:33 +0100 samba (3.0.20b-4) unstable; urgency=low [ Christian Perrier ] * Remove the smbldap-tools-* directory from the examples of samba-doc as these tools exist as an independent package. Closes: #341934 * Swedish debconf translation update. Closes: #342022 * Preserve the local admin settings for run_mode in /etc/default/samba when upgrading. Closes: #234038, #267988, #269735 * Winbind also must depend on lsb-base. Closes: #343379 * Enable swat in inetd when installing it and remove it when uninstalling. Closes: #87905, #230936, #268429 [ Peter Eisentraut ] * Added separate samba-doc-pdf package, suggested by samba-doc. Closes: #281971 * Removed duplicate documentation in swat package, symlinked to samba-doc; swat now depends on samba-doc. Closes: #233447 -- Christian Perrier Tue, 20 Dec 2005 17:08:20 +0100 samba (3.0.20b-3) unstable; urgency=low [ Steve Langasek ] * Drop the FHS transition code from the samba postinst, since it's not needed for upgrades from sarge (and most of it not for upgrades from woody). [ Noèl Köthe ] * libpam-smbpass dependency on samba-common Closes: #297923 * Updated swedish debconf translation. Closes: #335784 * Added Recommends: smbldap-tools. Closes: #227675 [ Peter Eisentraut ] * Added doc-base support. Closes: #55580 * Fixed dh_installexamples call so the debian/*.examples files are actually used. * Patched libpam-smbpass README to refer to examples directory. Closes: #215771 [ Christian Perrier ] * Add a working passwd chat line to the default smb.conf file Closes: #269746 * Add the profiles binary and man page to the shipped files. Closes: #225494 * Add a dependency on samba-common for winbind and force versions to match Closes: #273007, #264855 * Add /var/log/samba to winbind directories. Closes: #340833 * Lintian cleaning: - Add a few lintian overrides to avoid lintian complaining for things done on purpose or just because it makes wrong assumptions - Corrected FSF address in debian/copyright - Make swat depend on netbase as it uses update-inetd in its postinst script - Correct shebang lines in config scripts - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc - Minor correction in libsmbclient-dev description to avoid strictly repeating the short description in the long description - Call confmodule in swat.postinst as this is the only way to guarantee that the config script is run in all cases -- Christian Perrier Sat, 3 Dec 2005 07:30:40 +0100 samba (3.0.20b-2ubuntu1) dapper; urgency=low * Resynchronise with Debian. -- Michael Vogt Mon, 14 Nov 2005 11:11:28 +0100 samba (3.0.20b-2) unstable; urgency=low * Don't build with -gstabs any more; -g no longer gives a problematic size hit, and -gstabs is no longer supported on ia64. -- Steve Langasek Wed, 19 Oct 2005 19:02:44 -0700 samba (3.0.20b-1) unstable; urgency=low * Christian Perrier: - Debconf translations: - Added Vietnamese. Closes: #317876 - Updated German. Closes: #322907 * Steve Langasek: - Use ${misc:Depends} in debian/control instead of depending on debconf directly, allowing use of cdebconf as an alternative. Closes: #332088. * Noèl Köthe - corrected libsmbclient priority to optional. Closes: #310045 - corrected the path of ServerType.html in smb.conf. Closes: #296500 - updated Standards-Version to 3.6.2 (no changes needed) - added homepage to description - switched init scripts (samba and winbind) to lsb-functions (took patches from ubuntu) - added Swedish. Closes: #331437 - removed outdated "guest" value in "passdb backend" in default smb.conf Closes: #289519 - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8) is; Replaces: all previous versions of samba. Closes: #253603 - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515 - support for Windows Vista. Closes: #323489 - Mac OS Tiger Problem fixed. Closes: #309836 - BUG 2688: re-implement support for the -P (--port) option. Closes: #307746 - "man smb.conf" warnings fixed. Closes: #266320 - testprns removed by upstream so removed in samba.files - corrected docs/*.pdf names (samba-doc.docs) - corrected diagnosis.html path (samba.docs) - removing patches which are included upstream: dos7-xcopy-always-copies-files.patch (* BUG 2622: Remove DPTR_MASK as it makes no sense.) hide-special-file-fix.patch (* Hide dot files and directory logic fixes.) rap-printing-bigendian.patch (* BUG 1998: Correct byte ordering bug when storing 16-bit RAP print job ids.) smbclient-vfat-loop.patch smbclient-vfat-loop2.patch (* BUG 2698: Fix infinite listing loop in smbclient caused by an invalid character set conversion.) - fixed the following patches which didn't applied cleanly fhs.patch non-linux-ports.patch -- Steve Langasek Tue, 18 Oct 2005 19:02:21 -0700 samba (3.0.14a-6ubuntu1) breezy; urgency=low * Resynchronise with Debian, resolving merge conflicts (#12360) -- Adam Conrad Thu, 21 Jul 2005 17:53:23 +0000 samba (3.0.14a-6) unstable; urgency=low * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9; add a versioned build-depend accordingly. Closes: #315955 * Switch to libreadline5. -- Steve Langasek Fri, 1 Jul 2005 00:13:12 -0700 samba (3.0.14a-5ubuntu1) breezy; urgency=low * Resynchronise with Debian (closes Ubuntu bugs #11662 and #3134) * Add --oknodo to the start-stop-daemon call in our init script, so we don't fail when trying to start an already started service (#11600) -- Adam Conrad Wed, 29 Jun 2005 05:58:13 +0000 samba (3.0.14a-5) unstable; urgency=low * Fix libsmbclient.a to be built as non-PIC instead of PIC. Closes: #279243. -- Steve Langasek Wed, 8 Jun 2005 05:46:52 -0700 samba (3.0.14a-4ubuntu1) breezy; urgency=low * Resynchronise with Debian, resolving merge conflicts. -- Adam Conrad Fri, 3 Jun 2005 05:45:34 +0000 samba (3.0.14a-4) unstable; urgency=high * Last-minute upload for sarge, because I don't listen to anything that RM guy says * Patch smbmount to strip CAP_UNIX out of the capabilities passed to the kernel when uid, gid, dmask, or fmask options have been specified; this keeps the mount permissions from changing out from under the user when upgrading to a server (or to a kernel) that supports unix extensions. Closes: #310982. * Second patch to smbclient search continuation logic, from upstream: preserve the original UCS2 filename to guard against lossy conversions, and break out if we find ourselves looping. Closes: #311157. * Upstream fix to make print job cancellations work on big-endian systems when talking to RAP-style clients (i.e., smbclient). Closes: #311213. * Add build-dependency on libpopt-dev, so that we consistently use the system popt lib instead of the bundled one. -- Steve Langasek Thu, 2 Jun 2005 07:02:46 -0700 samba (3.0.14a-3ubuntu3) breezy; urgency=low * Use -g instead of -gstabs on powerpc64-linux-gnu and ia64-linux-gnu, which should finally fix that pesky ia64 build failure. -- Adam Conrad Sat, 28 May 2005 08:41:21 +0000 samba (3.0.14a-3ubuntu2) breezy; urgency=low * Reverse the sense of LaMont's dpkg-architecture patch to minimise our diff against upstream and get us building on ia64 again. -- Adam Conrad Sat, 28 May 2005 07:12:39 +0000 samba (3.0.14a-3ubuntu1) breezy; urgency=low * Resynchronise with Debian (Ubuntu #10966) * Give winbind a dependency on samba-common (Ubuntu #9156) -- Adam Conrad Fri, 27 May 2005 15:39:48 +0000 samba (3.0.14a-3) unstable; urgency=high * Urgency set to high for a bug that makes smbclient/libsmbclient /almost/ mostly unusable * Fix smbclient's search continuation logic so that it works correctly against 2K servers offering VFAT-hosted shares; many thanks to Jeremy Allison for the timely upstream fix. Closes: #309798. * Update pt_BR debconf translation. Thanks to Andre Luis Lopes . (closes: #308510) * Add Russian debconf translation, thanks to Yuriy Talakan . (closes: #310063) -- Steve Langasek Thu, 26 May 2005 23:37:57 -0700 samba (3.0.14a-2) unstable; urgency=low * Point the sense of the file_is_special() check right way around; thanks to Matthijs Mohlmann for catching this. Closes: #305747. * debian/patches/dos7-xcopy-always-copies-files.patch: Fix the MS-DOS 7 XCOPY copying files over and over bug Closes: #309003 * Steve Langasek : - Add Christian Perrier to Uploaders:. Thanks, Christian :) -- Steve Langasek Sun, 8 May 2005 04:43:21 -0700 samba (3.0.14a-1ubuntu2) breezy; urgency=low * dpkg changes cleanup. -- LaMont Jones Mon, 23 May 2005 21:55:07 -0600 samba (3.0.14a-1ubuntu1) breezy; urgency=low * Resynchronise with Debian; fixing merge conflicts. * Drop patches/gcc4-fix.patch, which was fixed differently upstream. * Remove patches/krb.patch, which was integrated upstream. * Drop patches/samba-client-no-auto-anon.patch, included upstream. * Disable the use of type-handling, which we don't ship in main. -- Adam Conrad Thu, 12 May 2005 07:01:56 +0000 samba (3.0.14a-1) unstable; urgency=low * New upstream version - A more complete upstream fix for missing files in file listings, should really give us working (closes: #302771); drop xp-missing-files.patch, which has been superseded. * Use the right path when removing mount.cifs binary in the clean target. Closes: #303318. -- Steve Langasek Mon, 18 Apr 2005 03:22:29 -0700 samba (3.0.11-1) unstable; urgency=high * New upstream version - Fixes duplicated entry in swat(8) manpage (closes: #292957). - Fix queue handling so that processes serving print clients don't spin off into infinity and clobber the system (closes: #274969). - Make sure we use C-locale toupper/tolower functions for case conversion, since Turkish pairing rules are incompatible (closes: #286174). * Fix logrotate script to exit true instead of false when nmbd.pid is missing (closes: #287263). * Added Portuguese debconf translation. Thanks to Miguel Figueiredo . (closes: #286375) * Added Italian debconf translation. Thanks to Luca Monducci . (closes: #284125) * Add support for building on the Debian BSD and Hurd ports; thanks to Robert Millan for the patch. (closes: #266693) * debian/patches/xp-missing-files.patch: import patch from upstream to fix missing entries in directory listings when talking to WinXP servers (closes: #297771). -- Steve Langasek Wed, 23 Mar 2005 00:13:16 -0800 samba (3.0.10-1ubuntu4) breezy; urgency=low * debian/patches/gcc4-fix.patch: Fix FTBFS with gcc 4.0. (#9047) -- Martin Pitt Fri, 15 Apr 2005 09:14:57 +0000 samba (3.0.10-1ubuntu3) hoary; urgency=low * debian/patches/krb.patch: - patch to use kerberos by default if the authentication succeeds, but fall back to the normal methods if not. Fix the kerberos support for gnomevfs (Hoary: #7357). -- Sebastien Bacher Tue, 22 Mar 2005 12:43:19 +0100 samba (3.0.10-1ubuntu2) hoary; urgency=low * debian/patches/samba-client-no-auto-anon.patch: - propogate an error back to the caller, instead of automatic Guest login (Hoary: #5425). -- Sebastien Bacher Sun, 23 Jan 2005 14:06:48 +0100 samba (3.0.10-1ubuntu1) hoary; urgency=low * Merged new Debian version * Dropped patch ubuntu-debconfpo.patch, it did not actually change anything * Since the debian/ directory now contains Ubuntu specific changes anyway, the following Ubuntu specific patches which only touched debian/ were statically applied and deleted; this will make manual merges much harder, but is apparently what my fellow developers like to have: + ubuntu-debconf-dhcp3.patch + ubuntu-defaultworkgroup.patch + ubuntu-lsbinit.patch + ubuntu-smbmount-nosuid.patch + ubuntu-branding.patch (only the debian/ parts; dropped unnecessary version.h patch) -- Martin Pitt Wed, 5 Jan 2005 14:03:21 +0100 samba (3.0.10-1) unstable; urgency=high * New upstream release. - CAN-2004-1154: integer overflow can lead to remote code execution by authenticated users; closes: #286023. * High-urgency upload for sarge-targetted RC bugfix. * Sync the fhs.patch to samba 3.0.10. * Install mount.cifs suid root, to make user mounts possible (closes: #283819). * debian/patches/cups.patch: Change the default printing system, so we can compile in CUPS support without making it the default -- CUPS is not a reasonable default on Debian, at least for sarge. -- Steve Langasek Fri, 17 Dec 2004 11:56:01 -0800 samba (3.0.9-1ubuntu2) hoary; urgency=low * Build python2.4-samba package. -- Matthias Klose Thu, 16 Dec 2004 13:44:41 +0100 samba (3.0.9-1ubuntu1) hoary; urgency=low * Resynchronise with Debian. -- Scott James Remnant Sat, 04 Dec 2004 12:48:02 +0000 samba (3.0.9-1) unstable; urgency=low * New upstream release - Fixes Win9x printing; closes: #283530, #282571, #283818. - Fixes a problem with setting dosmodes on filesystems without ACL support; closes: #283661. - Drop ldapsam_compat.patch, redundant now that a fix is integrated upstream -- Steve Langasek Thu, 2 Dec 2004 01:11:39 -0800 samba (3.0.8-2ubuntu1) hoary; urgency=low * Resynchronise with Debian. -- LaMont Jones Mon, 22 Nov 2004 20:55:18 -0700 samba (3.0.8-2) unstable; urgency=low * Fix the module paths for python2.3-samba so that "import foo from samba" works, and include the __init__.py glue; closes: #222867). * Enable quota support; closes: #246839. * Fix missing symbols in libsmbclient (and libnss_wins), and add -Wl,-z,defs to the libsmbclient link options to prevent future instances of undefined symbols (closes: #281181). * Fix for the legacy ldapsam_compat backend; thanks to Fabien Chevalier for the patch (closes: #274155). -- Steve Langasek Mon, 15 Nov 2004 06:54:13 -0800 samba (3.0.8-1ubuntu1) hoary; urgency=low * SECURITY UPDATE: new upstream version fixes CAN-2004-0882 (QFILEPATHINFO unicode filename buffer overflow). * Manual merge with the Debian version. * Reorganized the Ubuntu changes as proper patches prefixed with ubuntu- to ease further merges: - ubuntu-auxsrc: some auxilliary sources (undocumented in previous changelogs) - ubuntu-branding: put "Ubuntu" everywhere :-) - ubuntu-debconf-dhcp3: undocumented debconf magic - ubuntu-debconfpo: updated da, tr, pt_br debconf translations - ubuntu-defaultworkgroup: set debconf default workgroup to "MSHOME" - ubuntu-fix-ldap: fix LDAP backend, see Ubuntu #1905, Debian #274155 - ubuntu-lsbinit: nice init scripts - ubuntu-smbmount-nosuid: don't install smbmount and smbumount suid root * All other patches have been adopted by Debian/Upstream. -- Martin Pitt Thu, 18 Nov 2004 12:20:48 +0100 samba (3.0.8-1) unstable; urgency=high * New upstream package. Urgency set to "high" because of a potential Denial of Service vulnerability in previous 3.0.x releases (CAN-2004-0930). (Eloy) * Introduce new -dbg package, so we can make better sense out of the cleverly-supplied backtrace emails. (Vorlon) * Applied patch from Luke Mewburn to fix missing lock_path() to state_path() change in the FHS patches. (Eloy) -- Eloy A. Paris Mon, 8 Nov 2004 13:39:34 -0500 samba (3.0.7-2ubuntu1) hoary; urgency=low * Resynchronise with Debian. * Deleted source/autom4te.cache/ to clean up the debian diff.gz. -- Martin Pitt Thu, 11 Nov 2004 12:22:59 +0100 samba (3.0.7-2) unstable; urgency=high * High-urgency upload for sarge-targetted RC fixes. * Use autogen.sh in unpatch-source as well as in patch-source, to get rid of the autom4te.cache cruft. * debian/patches/make-distclean.patch: add some missing files to the distclean target in source/Makefile.in (mostly-fixes: #276203). * Change compile-time default of 'use sendfile' to 'no', since the current Samba implementation is broken (closes: #261917, #275741, #270175). * Add mount.cifs into the smbfs package; thanks to Igor Belyi for showing us just how simple this patch should be. ;) Since cifs is the preferred kernel driver in 2.6, bugs related to smbfs and 2.6 are considered closed unless someone can show that they exist with the cifs driver as well (closes: #249890, #269443, #227791, #236869, #260707, #261808, #270175). * Fix FHS migration code so that it only affects upgrades from old package versions, and doesn't cause us to mess with non-standard directories that may have been re-added by the admin (closes: #251858). -- Steve Langasek Tue, 26 Oct 2004 01:35:23 -0700 samba (3.0.7-1ubuntu7) hoary; urgency=low * SECURITY UPDATE for Hoary. See previous changelog. -- Martin Pitt Tue, 9 Nov 2004 23:56:27 +0100 samba (3.0.7-1ubuntu6.1) warty-security; urgency=low * SECURITY UPDATE: fix potential remote Denial of Service * Added patch CAN-2004-0930: A remote attacker could cause and smbd process to consume abnormal amounts of system resources due to an input validation error when matching filenames containing wildcard characters. * References: CAN-2004-0930 http://www.securityfocus.com/archive/1/380551 -- Martin Pitt Mon, 8 Nov 2004 19:34:54 +0100 samba (3.0.7-1ubuntu6) warty; urgency=low * Added patch prefer_device_uri: change smbspool to prefer DEVICE_URI over argv[0] to make printing work with the CUPS changes for CAN-2004-0923 (this removed authentication tokens from argv[0]). (Warty bug #2389) -- Martin Pitt Fri, 15 Oct 2004 12:31:58 +0200 samba (3.0.7-1ubuntu5) warty; urgency=low * Set server string = %h (Samba, Ubuntu). (Closes: #1761). -- Matthias Klose Sat, 2 Oct 2004 12:56:44 +0200 samba (3.0.7-1ubuntu4) warty; urgency=low * Apply patch from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=274155 to fix ldap backend. (Closes: #1905/#274155) -- Fabio M. Di Nitto Thu, 30 Sep 2004 05:33:12 +0200 samba (3.0.7-1ubuntu3) warty; urgency=low * Apply patch from https://bugzilla.ubuntu.com/show_bug.cgi?id=1805 and start shipping mount.cifs. (Closes: #1805/#227791) * Set sendfile default to no, reverting upstream change: svn diff -r 1262:1312 \ svn://svnanon.samba.org/samba/trunk/source/param/loadparm.c (Closes: #1433/#261917) -- Fabio M. Di Nitto Wed, 29 Sep 2004 11:06:54 +0200 samba (3.0.7-1ubuntu2) warty; urgency=low * debian/samba-common.conf: Fix uncommented 'fi' -- Jeff Waugh Tue, 14 Sep 2004 09:57:03 +1000 samba (3.0.7-1ubuntu1) warty; urgency=low * Merge Ubuntu changes from 3.0.6-3ubuntu4 * New upstream closes (Warty #1199) CAN-2004-0807 and CAN-2004-0808 -- Thom May Mon, 13 Sep 2004 19:56:19 +0100 samba (3.0.7-1) unstable; urgency=high * New upstream release. This release fixes two possible denial of service conditions; one in nmbd and one in smbd. The CVE numbers for these vulnerabilities are: CAN-2004-0807 for the smbd DoS CAN-2004-0808 for the nmbd DoS Urgency is set to "high" because of these vulnerabilities; so this new release propagates to testing ASAP. Thanks to the Samba Team and the Debian Security Team for the heads up. * Remove post-3.0.6 patches that are now in 3.0.7. -- Eloy A. Paris Mon, 13 Sep 2004 00:53:38 -0400 samba (3.0.6-4) unstable; urgency=low * Update LDAP schema (closes: #269797). * Applied a couple of upstream fixes that will be present in Samba 3.0.7. -- Eloy A. Paris Tue, 7 Sep 2004 15:28:42 -0400 samba (3.0.6-3ubuntu4) warty; urgency=low * Change 3.0.6-Debian to 3.0.6-Ubuntu. (Closes: #1185) (debian/patches/VERSION.patch) -- Fabio M. Di Nitto Mon, 13 Sep 2004 10:44:28 +0200 samba (3.0.6-3ubuntu3) warty; urgency=low * debian/winbind.init,samba.init: prettified initscripts * debian/control: versioned depend on lsb-base -- Nathaniel McCallum Fri, 10 Sep 2004 13:43:24 -0400 samba (3.0.6-3ubuntu2) warty; urgency=low * Fix duplicate attribute numbers in example LDAP schema (Warty #1070). -- Daniel Stone Wed, 8 Sep 2004 23:16:29 +1000 samba (3.0.6-3ubuntu1) warty; urgency=low * Merge Ubuntu changes from 3.0.5-1ubuntu2 * New upstream release fixes Warty#676, fixing compatibility with WinXP SP2 -- Matt Zimmerman Thu, 26 Aug 2004 12:36:42 -0700 samba (3.0.6-3) unstable; urgency=low * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704) -- Eloy A. Paris Wed, 25 Aug 2004 01:58:37 -0400 samba (3.0.6-2) unstable; urgency=low * Added Danish debconf translation. Thanks to Claus Hindsgaul . (closes: #232884) -- Eloy A. Paris Mon, 23 Aug 2004 17:24:19 -0400 samba (3.0.6-1) unstable; urgency=low * New upstream version. * Incorporate Turkish debconf translation; thanks to Recai Oktas . (closes: #252031) * Update pt_BR debconf translation. Thanks to Andre Luis Lopes . (closes: #208113) -- Eloy A. Paris Mon, 23 Aug 2004 12:34:44 -0400 samba (3.0.5-2) unstable; urgency=high * Patches from Fabien Chevalier to fix: + libnss_wins crashes other programs (closes: #252591) + Can't list share files/dirs, but can acces deeper files/dirs (closes: #264572) + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871) * Urgency "high" to make it into testing as soon as possible since at least #265871 is pretty bad now that WinXP SP2 has been released. Thanks for the help Fabien! Both Vorlon and I have been very busy lately. -- Eloy A. Paris Wed, 18 Aug 2004 13:25:41 -0400 samba (3.0.5-1ubuntu2) warty; urgency=low * Don't install smbmnt and smbumount suid root since GNOME does not require it (it uses libsmbclient) -- Martin Pitt Tue, 10 Aug 2004 17:46:25 +0200 samba (3.0.5-1ubuntu1) warty; urgency=low * Port of warty specific changes from previous version. * Set default WORKGROUP to MSHOME. (debian/samba-common.templates) * Set WINS settings priority to medium. (debian/samba-common.config) -- Fabio M. Di Nitto Fri, 23 Jul 2004 07:35:14 +0200 samba (3.0.5-1) unstable; urgency=high * New upstream version. Urgency "high" because of potential buffer overflows. The security fixes are the only difference between 3.0.4 and 3.0.5. -- Eloy A. Paris Thu, 22 Jul 2004 08:07:36 -0400 samba (3.0.4-5) unstable; urgency=low * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4), not an unversioned libcupsys2-dev. (closes: #250523) -- Eloy A. Paris Tue, 25 May 2004 07:43:54 -0400 samba (3.0.4-4) unstable; urgency=low * Rebuilt with libcupsys2-gnutls10 for unstable. Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736 Closes: #250742, #250733 -- Eloy A. Paris Mon, 24 May 2004 22:32:52 -0400 samba (3.0.4-3) unstable; urgency=low * Color me stupid; I uploaded an experimental version to unstable. -- Eloy A. Paris Sat, 22 May 2004 00:40:58 -0400 samba (3.0.4-1) unstable; urgency=low Eloy: * New upstream version. Closes: #247640 (New upstream version available) Closes: #238905 (Printing crash fix) Closes: #247090 (panic in viewing printerqueue) Vorlon: * Incorporate Catalan debconf translations; thanks to Aleix Badia i Bosch and the Debian L10n Catalan Team. (closes: #236640) * Incorporate Czech debconf translations; thanks to Miroslav Kure (closes: #236274). * Update libsmbclient shlibs, due to an incompatibility with older versions that prevents gnome-vfs from working correctly (closes: #245869). -- Eloy A. Paris Fri, 21 May 2004 11:42:19 -0400 samba (3.0.2a-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Tue, 24 Feb 2004 10:30:47 -0500 samba (3.0.2-2) unstable; urgency=high * Apply patch from Urban Widmark to prevent users from mounting remote filesystems containing suid files (closes: 232327). This represents an exploitable security hole on systems running Linux 2.6 kernels. -- Steve Langasek Thu, 12 Feb 2004 21:38:40 -0600 samba (3.0.2-1) unstable; urgency=high * New upstream release. - LaMont Jones: correct false failure LFS test that resulted in _GNU_SOURCE not being defined (thus resulting in strndup() not being defined) (closes: #226694) - Segfault fixes. (closes: #230012) (maybe more, but we need bug reporters to confirm.) Urgency "high" due to a password initialization bug that could grant an attacker unauthorized access to a user account created by the mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and workarounds for those not wishing to upgrade (which is a bad idea anyway since this new release fixes lots of other bugs.) -- Eloy A. Paris Sun, 8 Feb 2004 10:06:29 -0500 samba (3.0.1-2) unstable; urgency=low * Include ntlm_auth's man page. * Don't create directories outside of the source directory during package build time. (closes: #227221, #227238, #225862) * Don't include the "Using Samba" book in the swat package, just a symlink that points to the book included in the samba-doc package. -- Eloy A. Paris Tue, 13 Jan 2004 13:48:13 -0500 samba (3.0.1-1) unstable; urgency=low * New upstream version (closes: #225565) * Add support in the dhcp hook for netbios scope, and handle better the case of multiple DHCP-using interfaces (closes: #224109). * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant tail works. Thanks to Paul Eggert . * Include /usr/bin/ntlm_auth in the winbind package. * Run configure with "--with-piddir=/var/run/samba" since the default got changed to /var/run in this new upstream version. -- Eloy A. Paris Tue, 30 Dec 2003 16:21:31 -0500 samba (3.0.0final-1) unstable; urgency=low * It's here, it's here, it's here, Samba 3.0.0 is here! * Incorporate Japanese debconf translations; thanks to Kenshi Muto . (closes: #209291) -- Eloy A. Paris Thu, 25 Sep 2003 13:39:28 -0400 samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Sat, 13 Sep 2003 08:47:56 -0400 samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low * New upstream release. Last Release Candidate according to the Samba Team. Samba 3.0.0 is around the corner, in a week or so. - Fixes use of non-PIC code in nss shared libraries (closes: #208773) - 'unix password sync' option now runs the unix password program as root again (closes: #209739). * One-line patch to make packages buildable with distcc (closes: #210227) -- Eloy A. Paris Tue, 9 Sep 2003 07:57:16 -0400 samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low * New upstream release. * Link against libgnutls7 instead of libgnutls5. (closes: #208151) -- Eloy A. Paris Tue, 2 Sep 2003 21:37:13 -0400 samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low * New upstream version (skipped samba 3.0.0beta3 due to time constraints.) This ugly version number will go away when the final Samba 3.0.0 is released. * Drag new unpackaged tools into the packages: smbcquotas (smbclient), vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8) manpage (samba). (closes: #151158) * Switch to DH_COMPAT level 4: - no explicit conffile listings needed - the postinst for libsmbclient is now completely autogenerated - use the default init script handling (with support for invoke-rc.d) in debhelper, instead of the currently buggy upgrade path (closes: #185439) - add support for ${misc:Depends} in control for those packages with init scripts * Add versioned dependency on libpam-runtime and change /etc/pam.d/samba to use the new common PAM config blocks. * New python2.3-samba package (old python2.2-samba is no more.) (closes: #206171) -- Eloy A. Paris Mon, 25 Aug 2003 17:05:14 -0400 samba (3.0.0beta2-1) unstable; urgency=low * New upstream release - The smb.conf(5) manpage documents config options again (closes: #197963). - Handling of winbind/idmap has been restructured; domain members should be able to map domain accounts to local accounts again (closes: #196815). - Use the locale charset for 'display charset' by default (closes: #194406). - Fix for segfault in smbclient when using the -b option (closes: #196833). - Handle an empty 'passdb backend' list gracefully (closes: #193946). * Don't set 'display charset' anymore on upgrade, since this is now grabbed from the locale by default -- a much better option. * Removed time.c.patch which is now in the upstream sources. * Update FHS patch for two new tdb files (netsamlogon_cache.tdb, privilege.tdb). * Remove python-linker.patch, since the Kerberos package has been fixed to no longer use rpath * Remove configure.patch: the hppa glibc bug this was added for is long since fixed, and upstream isn't interested in supporting this kludge. * Update references to missing documentation in sample smb.conf file (closes: #187632). * Fix handling of krb5 link line, building on a patch from Stefan Metzmacher . * Add patch so smbclient's tar support works with popt (closes: #194921). -- Steve Langasek Wed, 2 Jul 2003 20:59:09 -0500 samba (3.0.0beta1-2) unstable; urgency=low * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1) to make sure we get the right shlib dependencies (closes: #193149). * Update the dhcp config hooks so they're suitable for sourcing (i.e., don't call "exit") (closes: #196477). * Bring package into line with current policy by adding support for the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs) by default * Make sure libpam-smbpass is a self-contained DSO. * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite the server list. * Fix python install script to ignore -Wl linker flags, as seen in the output from the latest krb5-config. * Add LDAP and Unicode information about upgrading from 2.2 to README.debian. * Remove dangerous and confusing browse options from the default smb.conf (closes: #198804). * Reorder smb.conf options for clearer grouping, and clarify the comments. * Add a default [print$] share to the sample smb.conf, and create the necessary tree under /var/lib/samba/printers. (closes: #168173) * s/winbind/idmap/ in smb.conf, since the option names have changed. * Fix the patch for postexec handling, so that we chdir("/") at the right time. -- Steve Langasek Thu, 12 Jun 2003 15:02:00 -0500 samba (3.0.0beta1-1) unstable; urgency=low * New upstream version. - fix for empty browselist bug (closes: #194553) - fix for tab completion segfault in smbclient (closes: #194776) - Samba now works as a domain member again without segfaulting (closes: #194134, #194394, #194775) - WinXP machines can join a Samba-controlled domain again (closes: #195362) * Build-depend on python-dev >= 2.2 instead of on just python-dev (without version). * Added Vorlon'n patch to source/lib/time.c to fix #194075. (closes: #194075) -- Eloy A. Paris Sun, 8 Jun 2003 22:26:43 -0400 samba (2.999+3.0.alpha24-3) unstable; urgency=low * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324) * Rebuild against pristine Kerberos libs, to squelch warnings about versioned symbols. (closes: #194431, #194396) -- Steve Langasek Thu, 22 May 2003 15:32:00 -0500 samba (2.999+3.0.alpha24-2) unstable; urgency=low * Fixed description of the smbfs package. (closes: #194183) * Negate the sense of the unixsam check when upgrading. (closes: #194234) -- Steve Langasek Wed, 21 May 2003 12:21:53 -0400 samba (2.999+3.0.alpha24-1) unstable; urgency=low * New upstream version. (closes: #189354) -- Eloy A. Paris Tue, 20 May 2003 13:55:57 -0400 samba (2.999+3.0.alpha23-5) unstable; urgency=low * Move the python package from section "net" to section "python". * Make sure we use PIC code for python on all platforms. * French translation of an additional debconf template, courtesy of Christian Perrier . (closes: #188832) * Updated Brazilian Portuguese translation from André Luís Lopes . * s/unixsam/guest/ everywhere, since the unixsam backend is now deprecated. (closes: #190095) * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not only does using /tmp violate SELinux policies, it introduces the possibility of data loss during the final copy if /tmp is a separate filesystem. (closes: #189823) * Pull in fix for SWAT, so that logins work again (closes: #188255, #192077). * Move passdb.tdb into /var/lib/samba, since it's not user-editable. * Make sure with don't ship any .cvsignore files. * Don't ship examples for python2.2-samba and samba-doc in an "examples" directory inside another "examples" directory. -- Eloy A. Paris Tue, 6 May 2003 12:05:46 -0400 samba (2.999+3.0.alpha23-4) unstable; urgency=low * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all non-RPC printing clients are working again. * Change shlibs to 0 instead of 0.1. The library already in the archive is using this soname, and there are no packages depending on libsmbclient, so skip changing the package name for now. (closes: #188661) -- Steve Langasek Fri, 11 Apr 2003 14:42:00 -0500 samba (2.999+3.0.alpha23-3) unstable; urgency=low * Put the Samba Python modules in /usr/lib/python2.2/site-packages/, not in /usr/lib/python2.2/lib-dynload/. -- Eloy A. Paris Wed, 9 Apr 2003 19:49:25 -0400 samba (2.999+3.0.alpha23-2) unstable; urgency=low * New package python2.2-samba that includes the Python modules included in the Samba sources. Feedback on these modules and the new package is welcome, as we (Debian Samba maintainers) don't use them. (closes: #170731, #173322) * Move libsmbclient-dev from section "devel" to "libdevel". * Fix panic action script to give a sensible error message instead of an empty backtrace when we don't have permission to attach to the process. (closes: #188164) * Fix libpam-smbpass so that it really does something. (closes: #178245) * Apply patch to fix printing-related segfaults. (closes: #188076) -- Eloy A. Paris Sun, 6 Apr 2003 21:40:33 -0400 samba (2.999+3.0.alpha23-1) unstable; urgency=high * new upstream release, includes security fix for DSA-262 * tweak the debconf templates to avoid references to specific front-ends (closes: #183718) -- Steve Langasek Sun, 9 Mar 2003 14:58:00 -0600 samba (2.999+3.0.alpha21-5) unstable; urgency=low * touch up the package descriptions a little bit (caps, punctuation) * remove addtosmbpass, which snuck back in when we weren't looking * reverse the position of the wins server tag, after looking more closely at the code (closes: #183061) * fix a glitch in the Spanish .po that rendered it invalid, plus a typo * updated Brazilian Portuguese templates (closes: #183295) * fix a typo in upstream manpage (s/shave/share/) (closes: #180546) * run sed before we run sed, to deal with crazybad special chars in the workgroup name (!) (closes: #176717) -- Steve Langasek Sat, 1 Mar 2003 15:14:00 -0600 samba (2.999+3.0.alpha21-4) unstable; urgency=low * add scripts to samba-common to grab the netbios-name-servers options if we're running a DHCP client (closes: #38413) * major rearrangement of build scripts: install target now operates on debian/tmp, not debian/samba, so we can see when new files are added and decide where to put them; several files that should have been in samba-common but were in samba (for the above reason) -- smbcacls, -- have been moved, with a replaces: added. * Fix rc script so that whitespace is consistent between inetd and daemon modes (closes: #174677). * smbclient -M must always connect to port 139, because port 445 doesn't support messaging and we can't do the port 135 stuff yet (closes: #175292, #167859). * Import the diff from upstream CVS, which has fixed a few bugs (closes: #178219, #177583, #181467, #181487, #181603, #175864). Remove a few patches of ours which are now superseded. * Add po-debconf support to the tree, for better i18n. * Install the libsmbclient.so symlink in the libsmbclient-dev package, per policy (closes: #181466). -- Steve Langasek Fri, 27 Dec 2002 00:37:00 -0600 samba (2.999+3.0.alpha21-3) unstable; urgency=low * Drop --with-ldapsam from the configure options, since this no longer means what we thought it did. Revert patch for changing the 'passdb backend' defaults. * Add patch from CVS HEAD to fix pdbedit segfault; postinst script should work better now. (Closes: #173936) -- Steve Langasek Sun, 22 Dec 2002 13:29:00 -0600 samba (2.999+3.0.alpha21-2) unstable; urgency=low * add CONFIGDIR to the set of directories exported in the install target, so we don't try to write to /etc/ on the autobuilders. * Reset the default 'passdb backend' value to something sensible, so that we don't unnecessarily break upgrading systems (closes: #173731). -- Steve Langasek Fri, 20 Dec 2002 09:13:00 -0600 samba (2.999+3.0.alpha21-1) unstable; urgency=low * new upstream release, many patches now incorporated upstream -- Steve Langasek Mon, 16 Dec 2002 23:39:00 -0600 samba (2.999+3.0.alpha20-4) unstable; urgency=low * Remove obsolete comments about non-existant LDAP support in the Debian Samba packages. (Closes: #165035) * Apply patch for segfault in pam_smbpass when using the unixsam backend. * Drop support for nmbd in inetd, since it's not supported by upstream and is reported to cause problems (closes: #23243, #137726, 165037). * Clarify example printing configs in smb.conf (closes: #168174). * Make sure nmbd still responds to SIGTERM if it has no interfaces to listen on (closes: #168079). * Fix to get samba working again on 64-bit archs, after a pointer<->int size mismatch bug. Already fixed in upstream CVS. * Merge fix from CVS for broken libsmbclient.h references to internal structures (closes: #162956). * Add a default 'panic action' for Samba that will give us genuinely useful debugging information after a crash. * Fixed correct patch to example configurations in the libpam-smbpass packages (closes: #169350). * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead (closes: #169682). * Only ask the user for permission to edit if there's a chance of us damaging something. -- Steve Langasek Mon, 18 Nov 2002 19:53:00 -0500 samba (2.999+3.0.alpha20-3) unstable; urgency=low * Make sure smbstatus behavior is sane when Samba *has* been started, as well as when it has not (closes: #164179). Thank to Robbert Kouprie for this patch. * Not using 'killall' in any of the maintainer scripts (the last one remaining was winbind.logrotate.) We now just use 'kill' to send a SIGHUP to a specific PID (which is stored in a file in /var/run/samba.) * Do not depend on procps because we're not using killall anymore. -- Eloy A. Paris Tue, 15 Oct 2002 22:15:57 -0400 samba (2.999+3.0.alpha20-2) unstable; urgency=low * fix an off-by-one error in smbd/lanman.c, which should shut off the flood of log messages (closes: #157432) * add a --config-cache option to the configure invocation, since autoconf 2.5 doesn't load config.cache by default (closes: #163504) -- Steve Langasek Sat, 5 Oct 2002 01:40:00 -0500 samba (2.999+3.0.alpha20-1) unstable; urgency=low * new upstream release - non-primary groups appear to work again (closes: #161271) * the official beginning of the upstream 3.0 branch * exit without error from smbstatus when no connections have been seen yet (closes: #161489) -- Steve Langasek Wed, 2 Oct 2002 19:02:00 -0500 samba (2.999+3.0cvs20020906-1) unstable; urgency=low * CVS update - domain authentication works again (closes: #158698) * Factor out common code in samba-common.config * Handle character set settings in smb.conf on upgrade (closes: #153913, #158770) * Don't use killall in logrotate script; there are better ways (closes: #160076) * Ignore value of 'hostname lookups' for hosts allow/hosts deny (closes: #154376) -- Steve Langasek Sat, 7 Sep 2002 11:46:00 -0500 samba (2.999+3.0cvs20020829-1) unstable; urgency=low * CVS update. * Move the smb.conf manpage to the samba-common package (closes: #159572) -- Steve Langasek Thu, 29 Aug 2002 17:53:25 -0500 samba (2.999+3.0cvs20020827-1) unstable; urgency=low * CVS update. (Closes: #158508) * Part 1 of 3 of the library separation patch that Vorlon wrote has gone upstream - removed the patch from our patches/ directory. * Debconf note to warn users that their smb.conf will be re-written and changed if they use Swat to maintain it. (Closes: #158479) * Fixed typo in samba.prerm. -- Eloy A. Paris Tue, 27 Aug 2002 15:23:23 -0400 samba (2.999+3.0cvs20020825-2) unstable; urgency=low * scale back the tdbsam migration support, because of undesirable side-effects; now always defaults to 'no'. * strip out hyperactive library dependencies that are only needed by smbd (closes: #155156). * nuke any broken registry.tdb files left by previous CVS snapshots. * support rolling back the smbpasswd->tdbsam conversion on downgrade, since many people are likely to need to downgrade for a while. * remove postrm handling of legacy directories, and add handling of current ones. -- Steve Langasek Sun, 28 Jul 2002 09:44:24 -0500 samba (2.999+3.0cvs20020825-1) unstable; urgency=low * CVS update. These packages are based on Samba 3.0alpha19 + any code commited after 3.0alpha19 was released. -- Eloy A. Paris Sun, 25 Aug 2002 14:56:46 -0400 samba (2.999+3.0cvs20020723-1) unstable; urgency=medium * remove spurious line from samba.config * migrate from smbpasswd to tdbsam * re-add the pdbedit util and manpage * compile in ldapsam support (closes: #146935) * add PRIVATEDIR to the list of vars we override for the install target, so Samba doesn't try to create /etc/samba (closes: #153746). * fix makefile handling of LOGBASEDIR, so that logs always end up in the right place (closes: 153727). * Fixed bug in the FHS migration path that causes nmbd to read its state from one location, but write it out to another. (closes: #154210) * Make sure nmbd is always looking for wins.tdb in the same place. -- Steve Langasek Fri, 19 Jul 2002 21:38:54 -0500 samba (2.99.cvs.20020713-1) unstable; urgency=low * first attempt for 3.0pre. * only post a debconf note about moving logfiles if we're upgrading from a version that had the logfiles in the old location (closes: #152924). -- Steve Langasek Sat, 13 Jul 2002 12:54:25 -0500 samba (2.2.5-2) unstable; urgency=low * No longer ship make_printerdef, which is deprecated. (closes: #63059) * Clean up some empty directories from the samba package. * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860). * Clean up per-package documentation lists, to reduce clutter (closes: #147638). * Make sure we don't ship pdbedit's man page since we are still using smbpasswd passwords. (closes: #152208) * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find it (closes: #148586). * reorder postinst, so that installing samba-common from scratch loads the debconf answers properly (closes: #151985). * add lintian overrides for winbind, to eliminate some noise. * rename pam_smbpass changelog to comply with policy. -- Steve Langasek Sun, 23 Jun 2002 22:45:04 -0500 samba (2.2.5-1) unstable; urgency=low * New upstream release. -- Eloy A. Paris Sun, 9 Jun 2002 15:49:21 -0400 samba (2.2.4+2.2.5pre1-1) experimental; urgency=low * Getting ready for Samba 2.2.5. * Remove patches/parse_spoolss.patch, now included upstream. * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in 2.2.4-1. We don't use POSIX ACL support ourselves, so we'd appreciate reports from those using this feature so we can be sure this works. * Fix the filename-matching algorithm used for smbtar's 'exclude' functionality. (closes: #131571) * Look for secrets.tdb in /var/lib/samba, and handle in the postinst. This is not really a config file, because users don't edit it. (closes: #147429) * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen for the patch. (closes: #144847) -- Eloy A. Paris Tue, 28 May 2002 11:33:51 -0400 samba (2.2.4-1) unstable; urgency=low * New upstream release (closes: #144713) * Building with POSIX ACL support (closes: #137819) * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055) * Compile with --with-automount, for NIS homedir support (closes: #123396) * Add a proper 'flags' field to the mount entry we write to /etc/mtab; fixes a display bug with mount (closes: #140397) * Added logic to /etc/init.d/samba so a help message is printed out when Samba is running from inetd _and_ we are not booting, i.e. the user called the init script manually. Thanks to Francesco Potorti for the suggestion on how to implement this. (Closes: #139807, #140204) * samba.postinst: added logic so we don't call /etc/init.d/samba if we are running from inetd (this prevents the stupid help message to be printed during package upgrades if we are running from inetd.) * samba.prerm: idem. * /etc/init.d/samba: delete stale PID files after nmbd and smbd are stopped. This prevents start-stop-daemon from printing an ugly error message when called from '/etc/init.d/samba stop'. I prefer this than running start-stop-daemon with --oknodo because start-stop-daemon might print other important error messages that with --oknodo it would otherwise not print. (Closes: #102187, #109301) * Patch from jerry@samba.org to fix parsing of spoolss structures. -- Eloy A. Paris Thu, 23 May 2002 23:16:52 -0400 samba (2.2.3a-7) unstable; urgency=medium * More README.debian updates. * Neutralize the smb.conf 'lock dir' directive, which doesn't mean what the FHS says it should, and causes us no end of grief. (Closes: #122299) * LPRng-handling patch so that jobs printed to recent versions of LPRng show up properly as 'done' instead of 'paused' in the Windows print queue. Thanks to Jaroslav Serdula for this patch. (Closes: #139458) * Applied patch from Urban Widmark (smbfs upstream maintainer) to add a '-n' option to smbmount that does the same as mount's '-n'. (Closes: #139590) * Minor tweak to unpatch-source so we unpatch sources in the reverse order we patched them. * Don't depend on grep in samba.prerm to determine if Samba was running before the upgrade starts. * Tweak the wording of debconf templates. * Incorporate debconf translations for French, Spanish and Portuguese; thanks to Carlos Valdivia Yagüe (es), Andre Luis Lopes (pt_BR), and Philippe Batailler and Denis Barbier (fr). (closes: #142657, #142659, #141551, #141699, #141682) * Fixed symlinks in the swat package so the point to /usr/share/doc/ instead of /usr/doc/. Added note to the description of the swat packages that says that samba-doc must be installed for the on-line documentation to work. Thanks to Torne Wuff . (Closes: #95437) * 'dh_installinit -n' gives us no initscript handling -- we need to handle all starting and stopping of daemons ourselves, which wasn't happening in the {pre,post}rm scripts. * Vary the priority of the debconf question "Do you want to generate /etc/samba/smbpassd?" depending on whether the file already exists. File exists -> priority 'medium', file does not exist -> priority 'low'. Changed priorities of all other questions from 'high' to 'medium'. -- Steve Langasek Sat, 20 Apr 2002 17:48:27 -0400 samba (2.2.3a-6) unstable; urgency=low * Call db_stop as soon as we're done with debconf in the postinst, to avoid hanging bugs (closes: #137813) * Ony call 'update-inetd --add' on first installation, just as we only call 'update-inetd --remove' on package purge. * Bring our shipped smb.conf closer in line with the upstream defaults: don't twiddle the send/recv buffer sizes, since the Linux kernel already provides a much better default setting (closes: #80966, #80934, #137415, #133477) * Added libnss_wins.so to the winbind package (closes: #137201) * Updates to README.debian. -- Eloy A. Paris Tue, 12 Mar 2002 10:57:40 -0500 samba (2.2.3a-5) unstable; urgency=low * Having multiple workgroup lines in your smb.conf, though wacky, is perfectly valid. Account for this in samba-common.config. (closes: #137157) -- Steve Langasek Sun, 10 Mar 2002 21:52:51 -0600 samba (2.2.3a-4) unstable; urgency=low * Fixed typo in samba.postinst. Cosmetic fixes there as well. * Fix to improper usage of /usr/bin/tr in samba-common config script (closes: #137744) -- Steve Langasek Sat, 9 Mar 2002 14:14:02 -0500 samba (2.2.3a-3) unstable; urgency=medium * Make sure /etc/init.d/samba is executable before calling it in the postinst. Quickly checked all other maintainer scripts to make sure we are not calling an init script if it is not executable. (closes: #137321) * Fix up maintainer scripts to detect if samba was not running before an upgrade. (closes: #33520, #130534) * Make sure /etc/samba/ is included in the samba-common package. Closes: #137157 -- Steve Langasek Fri, 8 Mar 2002 11:13:21 -0500 samba (2.2.3a-2) unstable; urgency=low * merge in debconf support: - Moved all smb.conf-related questions to samba-common (smb.conf is part of the samba-common package, not the samba package.) - smb.conf is not a samba-common conffile anymore since it is being managed by debconf. It is ABSOLUTELY necessary to make sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes made via debconf. In other words, any changes made by the user should be honored by the debconf interface. - samba.postinst now moves old log files from /var/log/ to /var/log/samba/. There's a Debconf note that informs the user the log files are stored now in a new location. - debian/control: + Make samba depend on debconf. - New file debian/samba.templates. - New file debian/samba.config. - Re-worked debian/samba.postinst. + Got rid of all /etc/samba/debian_config sillyness. - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces it. - Removed debian/samba.prerm. - Cleaned up /etc/init.d/samba. + Added infrastructure for debconf. + Got rid of all /etc/samba/debian_config sillyness. + Got rid of /etc/samba/smbpasswd conversion stuff for compatibility with versions of Samba < 2.0.0final-2. (closes: #127959, #34408, #113594) * make samba.postinst ignore the absence of /var/log/{s,n}mb*; makes for a clean upgrade path. * Building with MSDFS support (closes: #116793) -- Steve Langasek Tue, 5 Mar 2002 14:14:33 -0600 samba (2.2.3a-1) unstable; urgency=low * New upstream version (closes: #135001) * Potato builds were failing because debian/rules was not creating debian/winbind/etc/logrotate.d/. A user having problems creating Potato packages brought this to my attention. dh_installlogrotate takes care of creating the directory for us, that's why we didn't notice. * Removed code that converts /etc/samba/smbpasswd from an ancient format to the new format of Samba 2.0.0 and later. Closes: #134375 - samba: postinst failed due to missing /usr/bin/convert_smbpasswd. * Re-organized FHS migration code in samba.postinst. Make sure we don't fail when we move files that don't exist. Closes: #133813 - samba: Install failed. * Adding docs. to the libpam-smbpass package. * Remove man pages for findsmb because we are not providing this script. Closes: #134181 - findsmb referenced, but not included. * Removed replace.patch because it is now present upstream. * Added patch from Jerry Carter to fix a problem when saving document preferences for printing from NT clients. * The real winbindd daemon is a forked process so we can't use --make-pidfile when calling start-stop-daemon. Fixed /etc/init.d/winbind to work around the issue. Thanks to Lin Li for the patience and for reporting the problems. Hopefully I got it right this time. -- Eloy A. Paris Wed, 20 Feb 2002 18:39:03 -0500 samba (2.2.3-6) unstable; urgency=low * Make sure there are actual files in /var/state/samba before trying to move them (Closes: #133534, #133510). * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly again. -- Steve Langasek Tue, 12 Feb 2002 09:19:29 -0600 samba (2.2.3-5) unstable; urgency=low * Whoops, missed a spot on the samba.postinst -- will fail badly if /var/state/samba/ no longer exists. Better get this fix into the next upload. ;) (Closes: #133088) * Regenerate configure only if it is older than configure.in. * Fix smbd handling of network neighborhood lists, which was missed in the FHS conversion (Closes: #133091) -- Eloy A. Paris Sat, 9 Feb 2002 16:37:57 -0500 samba (2.2.3-4) unstable; urgency=low * FHS cleanup; files in /var are now properly sorted according to their nature. (Closes: #102101) * Remove patches to source/configure, since we now call autoconf to regenerate this file cleanly. * lintian fixes: - Create winbind.conffiles and add /etc/logrotate.d/winbind and /etc/init.d/winbind to it. - Use a relative symlink for /usr/lib/cups/backend/smb. - Removal of a .cvsignore file in the samba-doc package. * winbind.init fixes: - Corrected name of the pid file (Steve) - Make start-stop-daemon create a pid file for winbindd since it does not create one on his own. * #DEBHELPER# is not needed in samba.postinst because we are adding manually everything that debhelper adds automatically. In fact, since we are calling update-rc.d without standard paramaters I think we can't use #DEBHELPER#. * Fix fatal syntax error in samba.prerm. -- Steve Langasek Thu, 7 Feb 2002 13:12:08 -0500 samba (2.2.3-3) unstable; urgency=low * work on lintian-cleanness in the package (wrong permissions, maintainer scripts in need of debhelpering) * /lib/security/pam_smbpass.so is now being included in the libpam-smbpass package only, and not in both the libpam-smbpass and samba packages (which was the case prior to 2.2.3-3.) * Instead of making our patch scripts executable in the rules file we run them through /bin/sh. * New 'winbind' package that has all the winbind stuff that was in the samba package in 2.2.3-2 and before. * Added replace.patch: patch from Jeremy Allison to fix problems when replacing or overwriting files in a Samba share. Patch was sent to the samba mailing list. -- Eloy A. Paris Tue, 5 Feb 2002 21:12:48 -0500 samba (2.2.3-2) unstable; urgency=low * add support to debian/scripts/{patch-source,unpatch-source} for automatic updating and cleaning of . This was a request from the Samba Team: they wanted us to clearly mark our packages so it is always known a user is running Samba with (possibly) Debian-specific patches. * Change init.d killscript link to K19samba, so we stop before autofs (closes: 117327) * Make our patch scripts executable in the rules file -- dpkg won't do this for us (closes: #132415). -- Steve Langasek Mon, 4 Feb 2002 09:51:00 -0600 samba (2.2.3-1) unstable; urgency=low * New upstream release (closes: #131228). * Restructured build system that provides DBS-like separation of patches * Fix typo in smbfs description (closes: #116209). * Use killall -q in logrotate.d script, to avoid spurious cron emails (closes: #130100). -- Steve Langasek Sat, 2 Feb 2002 19:56:18 -0500 samba (2.2.2-12) unstable; urgency=high * (Steve) Patch for source/client/client.c. Closes: #86438 smbclient: Transfering several GB causes the average speed to be messed up. * Uploading with urgency=high to expedite the move from unstable to testing because of the security problem fixed in -11. -- Eloy A. Paris Fri, 25 Jan 2002 22:31:12 -0500 samba (2.2.2-11) unstable; urgency=low * Building with --with-libsmbclient. We have created two new packages: libsmbclient and libsmbclient-dev. Hopefully this will help some people that want to add the capability of speaking SMB to their applications. Closes: #117132 - libsmbclient support library? * (Steve) Make swat do the right thing when reading (parsing) the saved preferences in smb.conf. Closes: #55617 swat mutilates the linpopup message command. * Updated README.Debian. Updated descriptions in debian/control. * Remembered to bump up version number in source/include/version.h (need to automate this or else I'll keep forgetting.) * (Steve) one liner for source/web/diagnose.c. Closes: #106976 - smbd/nmbd not running message with swat/linuxconf. * Added '|| true' to the post-rotate script so logrotate doesn't fail if either nmbd or smbd is not running. Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process. * Fixed incorrect file locations in swat's man page and added a Debian-specific note to /usr/share/doc/swat/README. Closes: #71586 swat: needs documentation fixes for debian. * smbmount in the smbfs package does not have the setuid bit set. Apparently, smbmount uses libsmb without checking the environment. Thanks to Christian Jaeger for finding the local root exploit. * Applied old patch from Jerry) Carter" to correct the following two problems in Samba 2.2.2: - %U and %G could not be used in services names in smb.conf. - %G would fail to be expanded in an "include = ..." line. -- Eloy A. Paris Sat, 19 Jan 2002 21:35:26 -0500 samba (2.2.2-10) unstable; urgency=low * (Steve) Add missing manual pages. Closes: Bug#128928: missing manpages in smbfs. -- Eloy A. Paris Sun, 13 Jan 2002 14:39:55 -0500 samba (2.2.2-9) unstable; urgency=low * (Steve) Fix broken URL's in HTML docs. Closes: Bug#17741: bad links in html docs (at last!!!) -- Eloy A. Paris Fri, 11 Jan 2002 13:37:07 -0500 samba (2.2.2-8) unstable; urgency=low * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in debian/control so rpcclient.1, which was in samba-2.2.2-5, does not cause problems now that it is part of smbclient (>= 2.2.2-6). Closes: Closes: Bug#128684: error upgrading smbclient in sid. -- Eloy A. Paris Fri, 11 Jan 2002 11:42:40 -0500 samba (2.2.2-7) unstable; urgency=low * (Steve) Patch to make behavior honor what the docs. say about "hosts allow" taking precedence over "hosts deny". Closes: Bug#49249: swat: error with host deny ?! -- Eloy A. Paris Thu, 10 Jan 2002 12:36:58 -0500 samba (2.2.2-6) unstable; urgency=low * (Steve) Adds manpage for rpcclient to the proper file, removes smbtorture from the distro because this tool isn't intended for widespread consumption. Closes: #63057 - no manual page for smbtorture. * (Steve) Removed -gnu from the configure arguments (--build, --host) in debian/rules so config.sub is able to properly create the host and target tuples. -- Eloy A. Paris Wed, 9 Jan 2002 14:39:51 -0500 samba (2.2.2-5) unstable; urgency=low * Fixes from vorlon: * Use /usr/bin/pager instead of more. Closes: #125603: smbclient violates pager policy. * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd a SIGHUP to have the log files reopened, fixes to /etc/logrotate.d/samba. Closes: #127897: log file rotation. Closes: #118277: /etc/logrotate.d/samba not listed in conffiles. * s/covert/convert/. Closes: #121653 probable typo in install message. -- Eloy A. Paris Sun, 6 Jan 2002 03:14:58 -0500 samba (2.2.2-4) unstable; urgency=low * Applied patch from Steve to work around problem in glibc that affects the HPPA architecure. The patch detects the error condition at configure time and compiles without LFS support if necessary. Closes: Bug#126763: samba completely broken on hppa. * Including unicode_map.1251. Closes: Bug#126719: samba-common: unicode_map.1251 missing. * Updated smbd daemon version to match Debian package version. Closes: Bug#127199: Package version and smbd daemon version don't match. -- Eloy A. Paris Mon, 31 Dec 2001 14:32:47 -0500 samba (2.2.2-3) unstable; urgency=low * Added some spaces in package description in debian/control. Closes: #120730 - missing spaces in package description for nice alignment. * Spelling fixes. Closes: #125328, #125329, #125330, #125367, #125365, #125403. * Steve Langasek is the co-maintainer of the Debian Samba packages!!! Added him to the uploaders field in debian/control. -- Eloy A. Paris Tue, 18 Dec 2001 00:54:25 -0500 samba (2.2.2-2) unstable; urgency=low * Backed out changes to source/filename.c per Andrew Tridgell's request. This changes were introduced in 2.2.1a-7 as an attempt to fix #47493. Tridge found out that they break smbd. * Changed version number in source/includes/version.h so it is clear that this is a version of Samba packaged for Debian. This is another request from Tridge and will help the Samba Team to get bogus bug reports. * Added Samba-HOWTO-Collection.pdf and other README files to the /usr/share/doc// directories. * Installing libnss_winbind.so and pam_winbind.so. Closes: #116790: nss and pam modules for winbind missing. * Removed user-emacs-settings from changelog. -- Eloy A. Paris Mon, 29 Oct 2001 19:16:26 -0500 samba (2.2.2-1) unstable; urgency=low * New upstream version. * Temporary fix for #113763 (Steve Langasek) * Quick hack to avoid smbmount reveal password length. Please note that even with this hack there is a small window when password is completely visible with 'ps aux'. There are other methods that should be used to automate mounting of SMB shares. Closes: #112195: smbmount-2.2.x reveals password length. * Applied patch from Steve Langasek to prevent forcing use of setresuid() in Sparc. Closes: #112779: samba build forces use of setresuid, which causes smbd to fail on Sparc. -- Eloy A. Paris Mon, 15 Oct 2001 10:26:10 -0400 samba (2.2.1a-9) unstable; urgency=low * Replaced $(LD) with $(CC) all the way through source/Makefile. Closes: #111036: ld shouldn't be used to link shlibs. * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and sgml as well.) Closes: #110963: smb.conf: mail should be /usr/bin/mail. * Documented better smbclient's -W behavior. Patch from Steve Langasek. Closes: #53672: smbclient: -W flag is interpreted as domain, not workgroup. -- Eloy A. Paris Tue, 4 Sep 2001 23:10:41 -0400 samba (2.2.1a-8) unstable; urgency=low * Set some reasonable default perms for the samba logdir (again, thanks to vorlon :-) Closes: #72529: insecure permissions on log files. -- Eloy A. Paris Sun, 26 Aug 2001 15:40:47 -0400 samba (2.2.1a-7) unstable; urgency=low * Another attempt at fixing #47493. Patch from Steve Langasek . Let's keep our fingers crossed Steve! -- Eloy A. Paris Sun, 26 Aug 2001 13:37:06 -0400 samba (2.2.1a-6) unstable; urgency=low * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing smbd to die with signal 11 under some unidentified situations. Closes: #109774: Latest debian version breaks printer driver download. Closes: #109946: not all files appear in samba-exported directories. * Another patch from Steve Langasek. This one adds quotes around printer names for print systems it's reasonable for Debian to support. Together with the patch in #29957 (see changelog for 2.2.1a-4), this should take care of the problems with multi-word printer names in Samba. -- Eloy A. Paris Fri, 24 Aug 2001 21:12:27 -0400 samba (2.2.1a-5) unstable; urgency=low * Important changes that affect how Samba is built on Debian machines are implemented in this release. All of this changes were suggested by the energetic Steve Langasek , and his arguments were so sound and reasonable that I decided to implement them. Here's Steve's original changelog: * Fix up the build system to avoid needing to run configure as root to answer questions we already know the answers to. * In the process, make surprising progress towards being able to cross-compile the samba packages. -- Eloy A. Paris Fri, 24 Aug 2001 01:08:06 -0400 samba (2.2.1a-4) unstable; urgency=low * Fixed typo in smbmount's mount page. Closes: #109317: smbfs: mistype in smbmount manpage. * Included symlink to smbspool to better support CUPS printing. Closes: #109509: include symlink for cups samba support. * Applied patch from Steve Langasek to fix bug #29957. Closes: #29957: samba strips trailing " from strings in smb.conf. * First attempt at fixing #47493. Another patch from Steve "I want a bug-free Samba" Langasek. Closes: #47493: Samba doesn't handle ':' in dir names right. -- Eloy A. Paris Tue, 21 Aug 2001 23:26:38 -0400 samba (2.2.1a-3) unstable; urgency=low * Steve Langasek has been hard at work in the last few days looking at the long list of open bugs filed against the Samba packages. I don't know how to thank him. It's been a pleasure working with Steve, and all the fixes, patches, etc. in this release come from him. The bug list is greatly reduced thanks to Steve's efforts. * Steve's additions/modifications/patches/etc. are: - New package that (libpam-smbpass) provides pam_smbpass. Before, this was provided in another package but now the sources are part of the Samba sources so we can start providing it from here. Closes: #107043 - pam_smbpass now present in Samba source, should be built from there - Patch to source/smbd/service.c that allows admins to call /bin/umount from the root postexec of a Samba share. Closes: #40561 - samba pre/postexec commands do not work. - Clear TMPDIR before starting smbd in /etc/init.d/samba. Closes: #51295 - Problems with Samba and TMPDIR. - Correction to documentation of "guest only". Closes #38282 - "guest only" share still requires a password. * Applied patch from Santiago Vila to convert /usr/sbin/mksmbpasswd from a shell script into a real awk script. Sorry it took so long, Santiago; I hadn't realized you even provided a patch :-) Closes: #77891 - mksmbpasswd could be a real awk script. * Updated description of the smbfs and smbclient packages. Also have each package recommend the other. Closes: #108650: Should suggest or recommend smbfs. -- Eloy A. Paris Mon, 13 Aug 2001 22:21:55 -0400 samba (2.2.1a-2) unstable; urgency=low * Build-depends: depend on debhelper (>=2.0.103). Closes: #105795: Build-Depends are wrong. * Run samba's preinst and postinst scripts without -e so failed commands do not abort installation. Closes: #106384: postinstall crashes abnormally. (And really closes #104471.) -- Eloy A. Paris Thu, 26 Jul 2001 00:30:37 -0400 samba (2.2.1a-1) unstable; urgency=low * New upstream version. * Make sure samba's postinst script exits with a zero status. Closes: #104471: Samba postinst problem. -- Eloy A. Paris Thu, 12 Jul 2001 21:55:21 -0400 samba (2.2.1-1) unstable; urgency=low * New upstream version. Closes: #103339: config.guess and config.sub update required. Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to incompatibility with PAM. Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2. Closes: #95777: Samba 2.2 is unable to join or authenticate against Samba 2.2 PDC domain. Closes: #68842: samba should use PAM for password changing (I haven't personally tried this one, but it's been advertised this works.) Closes: #102506: PAM account checking fails. Closes: #102518: Complains about unknown paramter "obey pam restrictions" Closes: #94774: Build failure on PARISC machines. * Moved away from /etc/cron.weekly/samba for log file rotation. Now using logrotate. Closes: #95548: typo in /etc/cron.weekly/samba. Closes: #74951: nmbd does not rename its log file. * Removed Debian-specific addtosmbpass.8 man page since this script is not longer provided upstream. Users should use the smbpasswd program instead. * Updated sample /etc/samba/smb.conf to reflect the recent changes affecting handling of PAM authentication. Also updated /etc/pam.d/samba. -- Eloy A. Paris Wed, 11 Jul 2001 00:44:14 -0400 samba (2.2.0.final.a-1) unstable; urgency=high * New upstream version (contains security fix from DSA-065-1.) Closes: #97241: samba 2.2.0 fails to process hostnames in "hosts allow" config line. * Removed Debian-specific addtosmbpass.8 man page since this script is not longer provided upstream. Users should use the smbpasswd program instead. Closes: #98365: addtosmbpass is missing from 2.2.0.final-2. * Updated sample /etc/samba/smb.conf to reflect the recent changes affecting handling of PAM authentication. Also updated /etc/pam.d/samba. -- Eloy A. Paris Sun, 24 Jun 2001 11:11:59 -0400 samba (2.2.0.final-2) unstable; urgency=low * Added libcupsys2-dev to Build-Depends. * Samba depends now (again) on netbase so update-inetd is always available for the Samba maintainer scripts. Closes: #86063: Fails to uninstall if inetd is not installed. * Updated source/config.{sub,guess} so ARM built doesn't fail. Closes: #94480: config.sub out of date; can't build on arm. Closes: #85801: config.sub/guess out of date. * Not using brace expansion, i.e. {foo,bar} in any of the maintainers scripts nor in debian/rules. Closes: #88007: samba postrm has is not POSIX sh compliant. -- Eloy A. Paris Sat, 21 Apr 2001 17:27:18 -0400 samba (2.2.0.final-1) unstable; urgency=low * New upstream release. Lots of new things. See WHATSNEW.txt. * Goofy version number because of my stupidity when assigning version numbers to the CVS packages I have been uploading to experimental. Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release will follow soon. -- Eloy A. Paris Tue, 17 Apr 2001 22:58:14 -0400 samba (2.2.0.cvs20010416-1) experimental; urgency=low * CVS update. -- Eloy A. Paris Mon, 16 Apr 2001 21:25:15 -0400 samba (2.2.0.cvs20010410-1) experimental; urgency=low * CVS update. * Added libreadline4-dev to Build-Depends. -- Eloy A. Paris Tue, 10 Apr 2001 16:53:45 -0400 samba (2.2.0.cvs20010407-1) experimental; urgency=low * CVS update. Includes what is in 2.2.0alpha3. -- Eloy A. Paris Sat, 7 Apr 2001 16:00:33 -0400 samba (2.2.0.cvs20010316-1) experimental; urgency=low * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch from Samba CVS. * Not compiling rpctorture as it has compile errors. Change in debian/rules. * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is needed to use smbfs. Updated debian/control, debian/rules and README.Debian to reflect this change. * Added to swat a versioned dependency on samba (so a user is forced to install a new version of swat each time a new version of samba is installed.) -- Eloy A. Paris Sun, 18 Mar 2001 14:21:14 -0500 samba (2.0.7-5) unstable; urgency=medium * Transition from suidmanager to dpkg-statoverride. -- Eloy A. Paris Thu, 18 Jan 2001 23:51:56 -0500 samba (2.0.7-4) unstable; urgency=medium * Applied Urban Widmark fixes to smbmount. Urban is the maintainer of the smbfs in the kernel and of the userland utilities. * Links to HTML documents are correct now. Closes: #69439: swat: Broken help file symlinks Closes: #72615: samba-doc directory changed: removed htmldocs from path Closes: #75847: swat: Wrong symlink Closes: #66857: Wrong links to html documents. Closes: #77912: misplaced documentation symlinks for swat * Building Samba with CUPS support. For this I reverted the change to source/configure.in that I did in 2.0.7-3 and re-ran autoconf. Closes: #59038: samba: not compiled with cups support. * Fix against previous known/unknown user time difference patch to swat (make username / password lookups take the same time.) Remove CGI logging code in Swat. Closes: #76341 - Security holes in swat * Updated Build-depends. * Updated debian/copyright to refer to the correct location of the GPL. * debian/rules: changed DESTDIR to `pwd`/debian/samba (was `pwd`/debian/tmp.) * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some strange reason dh_installdirs is not creating debian/tmp/ so I needed to tweak everything to install stuff in debian/samba rather than in debian/tmp.) * debian/control: changed section of samba-docs to 'doc' (was 'docs') * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules and source/scripts/installswat.sh.) * Fixed (by tweaking debian/rules) /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid. * Added "Provides: samba-client" to smbclient's section in control. Closes: #71143: smbclient: Smbclient should provide samba-client. * Fix for desired_access being zero in map_share_mode() (patch to source/smbd/nttrans.c.) Thanks to Gary Wilson for bringing this patch to my attention. * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and 2.2.x kernels even when the build is done in a system running a 2.2.x kernel. Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but doesnt depend on it. Closes: #72758: README.Debian should comment on 2.0.x kernels. Closes: #56935: Samba 2.0.6 and Kernel 2.0.x. Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info. Closes: #60580: samba: failed to set gid. Closes: #64280: Samba panics, can't set gid. Closes: #66816: Must deal with brokenness under 2.0.x. Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK. Closes: #69735: PANIC: failed to set gid Closes: #66122: "smbclient -L localhost -U%" returns with "tree connect failed: code 0". Closes: #57637: Samba says tree connect error. Closes: #58015: potato samba wins support is broken. * Fixed comments in sample smb.conf to point to the correct location. Closes: #69578: comments in smb.conf points to wrong path. * Move codepages from /etc/samba/codepages/ to /usr/share/samba/codepages/. Closes: #63813: samba; codepages should go in /usr/lib. * Moved /var/samba/ to /var/state/samba/. Closes: #49011: samba package not FHS compliant. * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain() is found. Closes: #44558: netgroup support missing in samba 2.0.5a-1. * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and --exec. Got rid of --exec so --pidfile works. -- Eloy A. Paris Thu, 11 Jan 2001 00:15:57 -0500 samba (2.0.7-3) frozen unstable; urgency=high * Release manager: this closes a RC bug. * Commented out the section in source/configure.in that auto-detects CUPS support and then ran autoconf to generate a new configure script. This was done to prevent machines that have libcupsys-dev installed from detecting CUPS support and adding an unwanted dependency on libcupsys. This way the whole printing system won't break on upgrades. CUPS support should be added after Potato is released. Closes: #65185: samba-common: Upgrading removes printing system. Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys. * Updated README.debian. Closes: #64594: Old README.Debian in /usr/share/doc/samba. -- Eloy A. Paris Tue, 20 Jun 2000 19:16:04 -0400 samba (2.0.7-2) frozen unstable; urgency=high * Release manager: this closes RC bug #63839 that prevents Samba to be built from source. * Fixed a stupid typo in debian/rules that was preventing Samba to be built from source. Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir) * I forgot to mention that O'Reilly's book "Using Samba" was donated to the Open Source community. The book was included in Samba 2.0.7 in HTML format and is part of the Debian Samba package since Samba 2.0.7-1. * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help files were supposed to be provided in both the swat and the samba-doc packages. This duplication was a waste of space. Starting with Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML files are included only in samba-doc, and are accessed via symlinks from within swat. Closes: #58810: superfluous files in swat? * Added a 'echo "."' to /etc/init.d/samba in the reload) section. Closes: #63394: "echo ." missing in reload section of init.d script * Fixed typo in docs/htmldocs/using_samba/ch06_05.html. Closes: #64344: typo "encrypted passwords" * Cleaned up samba's postrm script so important common files aren't deleted when samba is purged. Created a samba-common.postrm script. Closes: #62675: purging samba removes /etc/samba/smb.conf. Closes: #63386: samba --purge removes /etc/samba dir even though smbclient/smbfs/samba-common packages are still installed -- Eloy A. Paris Wed, 3 May 2000 02:42:07 -0400 samba (2.0.7-1) frozen unstable; urgency=low * New upstream version. Dear Release Manager: please allow this package to go to frozen as it contains fixes to a _lot_ of problems. You can take a look at all the problems fixed by this release in the official upstream announcement at http://us1.samba.org/samba/whatsnew/samba-2.0.7.html. * Added --with-utmp to add utmp support to smbd (this is new in Samba 2.0.7) * Closes: #62148 - samba not rotating filled logs. * Closes: #56711: Samba doesn't manage well long share name (please note that it's possible to connect to shares with names longer than 14 characters but the share will be listed with a name truncated to 13 characters.) * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67). Closes: #50907 - logon path not working. This is not a bug, it's just Samba doing the same thing an NT server does. See WHATSNEW.txt and smb.conf's man page for details. * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper is not supported anymore.) * Closes: #58994 swat: typo in swat description. * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware problems, person that reported the bug never came back.) Closes: #54398 - smbadduser fails, looks for ypcat. * Fixed swat's man page to include Debian specific installation instructions. There's not necessary to edit /etc/services or /etc/inetd.conf. (Closes: #58616 - incomplete install config && incorrect installation instructions.) * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat to look for smbd and nmbd in the wrong place when requested to start or stop smbd or nmbd. (Closes: #55028 - swat can't start samba servers.) * Closes: #37274: smbclient does not honour pot. (Tested and seems to be working now.) * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492, #50479, #39818, #54383, #59411. (please re-open any of this if the problem still exists - I was unable to confirm any of this because I could never reproduce them.) Closes: #56699 - Samba's nmbd causes random kernel oops several times in a row. Closes: #62185 - nmbd's forking until no more file descriptors are available. Closes: #56247 - session setup failed: ERRSRV - ERRbadpw. Closes: #52218 - Either wins proxy does not work, or I don't understand it. Closes: #43492 - intermittent problem changing password. Closes: #50479 - Can't access windows 2000 shares with samba. Closes: #39818 - samba-common: Upgrading Samba from the Slink version. Closes: #54383 - samba-common: Missing /etc/smb.conf. Closes: #59411 - smbclient: cannot browse Win2k shares. -- Eloy A. Paris Thu, 27 Apr 2000 16:07:45 -0400 samba (2.0.6-5) frozen unstable; urgency=low * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries in this package are broken unless libcupsys1 is installed. samba-common has a "grave" bug because of this. Instead of adding libcupsys1 to the Depends: list of each package in debian/control I investigated why dh_shlibs was not picking the dependency automatically. It turns out that it's probably a bug in libcupsys1 because the format of its shlibs file is not correct. I fixed that file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are picked correctly. I'll talk to the libcupsys1 maintainer. I think the addition of CUPS support to Samba is a big change that should not go into Frozen. So, I decided to back up the addition of CUPS support I did in 2.0.6-4 to minimize problems. I'll add CUPS support again when I start working on Samba for Woody. (Closes: #59337 - samba-common has a missing dependency) -- Eloy A. Paris Wed, 1 Mar 2000 08:40:02 -0500 samba (2.0.6-4) frozen unstable; urgency=low * It seems that sometimes nmbd or smbd are not killed when upgrading. I think it is because in samba's prerm script I was calling start-stop-daemon with the --pidfile switch and in old versions of Samba the nmbd and smbd daemons did not store their PIDs in a file in /var/samba/. I changed debian/samba.prerm so the existence of the PID files is checked before calling "start-stop-daemon --pidfile ..." If the PID files do not exist then start-stop-daemon is called without the --pidfile parameter. (Closes: #58058 - upgrade from slink went badly) * Fixed typo in description of swat package in debian/control. * Installed libcupsys1-dev so the configure script picks up CUPS and Samba is compiled with CUPS support. Also added libcupsys1 to the Depends: list of package samba in debian/control. (Closes: #59038 - samba not compiled with cups support) * Added a small paragraph to debian/README.debian warning about possible problems with the WINS code in Samba 2.0.6. -- Eloy A. Paris Mon, 28 Feb 2000 14:00:42 -0500 samba (2.0.6-3) frozen unstable; urgency=low * Applied patch posted by Jeremy Allison to the samba mailing list that should take care of the internal errors reported in bug #52698 (release-critical). Wichert: please test as I never could reproduce it here. (Closes: #52698 - samba gets interbal errors) * Moved samba-docs to the 'docs' section. (Closes: #51077 - samba-doc: wrong section) * Added reload capability to /etc/init.d/samba (only for smbd because nmbd does not support reloading after receiving a signal). (Closes: #50954 - patch to add reload support to /etc/init.d/samba) * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so Unix password syncronization works with the passwd program currently in Potato. Thanks to Augustin Luton for the correct chat script. * Stole source/lib/util_sec.c from the CVS tree of what will become Samba 2.0.7 or whatever so we can use the same binaries under both 2.0.x and 2.2.x kernels. (Closes: #51331 - PANIC: failed to set gid) * smbadduser is now provided as an example and it's customized for Debian. I am not providing this script in /usr/sbin/ because then I would need a dependency on csh, something that I don't want to do. (Closes: #51697, #54052) * Fixed the short description of the smbfs package in debian/control. (Closes: 53534 - one-line description out of date). -- Eloy A. Paris Tue, 23 Nov 1999 16:32:12 -0500 samba (2.0.6-2) unstable; urgency=low * samba-common now depends on libpam-modules (not on libpam-pwdb, which I have been told is obsolete). I modified /etc/pam.d/samba accordingly to reflect the change. (Closes: Bug#50722: pam pwdb dependence?). * The old /etc/pam.d/samba file which had references to pam_pwdb caused smbd to die with a signal 11. The new /etc/pam.d/samba file fixes this problem. (Closes: #50876, #50838, #50698) * Compiled with syslog support (use at your own risk: syslog support is still experimental in Samba). I added the parameters "syslog = 0" and "syslog only = no" to the sample smb.conf to avoid pestering users that do not want Samba to log through syslog. (Closes: Bug#50703 - syslog only option doesn't work) * Removed the stupid code in the smbmount wrapper script that tries to load the smbfs module if smbfs is not listed in /proc/filesystems. (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled as a module in the kernel) * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so 'mount -t smb ...' works just as 'mount -t smbfs ...'. (Closes: Bug#50763 - 'mount -t smb' doesn't work) -- Eloy A. Paris Sat, 20 Nov 1999 18:53:35 -0500 samba (2.0.6-1) unstable; urgency=low * Samba 2.0.6 has been released. This is the first try of the Debian Samba packages. I know for sure that smbd won't work properly on 2.0.x kernels because the patch that Wichert sent me does not apply to the new source/lib/util_sec.c in Samba 2.0.6. That file was completely re-written by Tridge. * Updated README.Debian. * A new client utility called smbspool appeared in Samba 2.0.6. I added this utility to the smbclient package, although I haven't tried it yet. * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount. This is to be able to type "mouont -t smbfs ...". This symlink goes in the smbfs package, of course. * This new release should close the following bugs (some of these are fixed for sure in this new upstream release, some others I could not reproduce but I believe they are fixed if they were real bugs. As always, please feel free to re-open the bugs if the problem is not solved). Closes: Bug#33240: icmp mask needs a bug workaround. Closes: Bug#37692: samba: Has problems detecting interfaces. Closes: Bug#38988: samba: Truly bizzare behavour from nmbd. Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast properly. Closes: Bug#44131: smbfs: no longer possible to set file and directory-modes. Closes: Bug#46992: smbmount-2.2.x manpage wrong. Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline. Closes: Bug#46605: smbmnt segfaults. Closes: Bug#48186: smbmount. Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included]. Closes: Bug#47332: smbmount: could -f and -P be added back? * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM module). To succesfully add PAM support, I created /etc/pam.d/samba and added this file as a conffile for the samba-common package. I also made samba-common depend on libpam-pwdb. * Added simple man pages for the wrapper scripts smbmount and smbmount. (Closes: Bug#44705 - Missing smbmount man page) * Installed libreadlineg2-dev in my system so smbclient now has a "history" command and libreadline support :-) * This time I did add a check to the smbmount wrapper script to see if the kernel has support for smbfs, as suggested by Jeroen Schaap . I mentioned in the changelog for samba-2.0.5a-3 that I did this but I forgot at the end. -- Eloy A. Paris Thu, 11 Nov 1999 12:08:15 -0500 samba (2.0.5a-5) unstable; urgency=low * I am sorry to report that the smbwrapper package is gone for the moment. The reason for this is twofold: first of all, smbwrapper is completely broken in Samba-2.0.5a (it compiles but it doesn't run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second, when I asked Andrew Tridgell (father of Samba) about the state of smbwrapper he told me that Ulrich Drepper (head of the glibc project) broke on purpose the glibc stuff in which smbwrapper is based. Consequently, Tridge recommended me to compile Samba without support for smbwrapper. When, I have no idea. Sorry folks. Here is the original message I received from Andrew: > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's > smbwrapper doesn't even compile under glibc2.1. yep, Ulrich deliberately broke it. It won't get fixed till glibc allows the sorts of games it plays to work again. I suggest you turn it off in your build scripts until that gets sorted out. * Swat's file are now in /usr/share/samba/ instead of /usr/lib/samba/ (bug #49011). * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011). -- Eloy A. Paris Tue, 2 Nov 1999 12:59:13 -0500 samba (2.0.5a-4) unstable; urgency=low * Applied patch from our fearless leader (Wichert) to fix the darn bug that prevents Samba to work on 2.0.x kernels if it was compiled in a system running a 2.2.x kernel. This closes #40645 (build uses setresuid which doesn't work under 2.0.34 (does apparently under 2.2.x) ). * Fixed the entry that swat's postinst script adds to /etc/inetd.conf so it is '## swat\t\tstream\ttcp\tnowait.400 ...' instead of '##swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused 'update-inetd --enable swat' to leave the entry for swat disabled. Thanks to Dave Burchell for finding out this problem. This closes #48762 (swat uses non-standard syntax to comment out inetd.conf entry). * /usr/sbin/swat does not think anymore that the smbd daemon lives in /usr/local/samba/bin/. To fix this I am running now source/configure with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba 'swat' fails: incorrect hardwired path in the binary). -- Eloy A. Paris Sun, 31 Oct 1999 03:42:38 -0500 samba (2.0.5a-3) unstable; urgency=low * I am pretty darn busy with my MBA, I apologize for the long time it's taking to squash bugs in the Samba packages. * Built with debhelper v2 for FHS compliancy. Changed a couple of things in debian/rules to accomodate for the new place for the docs. I also had to change debian/{samba.postinst,samba.prerm,swat.postinst} to make sure that the symlink from /usr/doc/xxx exists and points to /usr/share/doc/xxx (the reason for this is that I am not letting debhelper to create these scripts for me automatically). * Built with latest libc6. * smbfs: finally, the nasty bug that causes smbmount to die after a while is gone thanks to Ben Tilly . The problem was just a typo in source/client/smbmount.c. This closes grave bug #42764 (smbmount dies) and #43341 (smbfs-2.2.x won't function after a while). * Fixed the smbmount wrapper script to eliminate a bashism (closes #45202 - "wrapper scripts use $* instead of "$@") and to recognize 2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize kernel 2.3.x"). * Added a check to the smbmount wrapper script to see if the kernel has support for smbfs, as suggested by Jeroen Schaap . * swat's man page is now part of the swat package, not of the samba package. This closes #44808 (Samba has a man page for swat, but the binary is not included). * The interface program smbrun is not longer needed by smbd because of the availability of execl() under Linux. Because of this, the smbrun is not even being compiled. Since there is no need for smbrun now, the smbrun man page was taken out of the samba package. This closes #45266 (/usr/bin/smbrun missing). * smbpasswd is now part of the samba-common package, and not part of the samba package. This is to let administrators that do not want to install a full Samba server administer passwords in remote machines. This closes bug #42624 (smbpasswd should be included in smbclient). This bug report also suggests that swat becomes part of the samba package, that smbfs becomes part of the smbclient package, and that the binary smbpasswd becomes part of the smbclient package. I moved smbpasswd to the samba-common package but I am reluctant to do the other things the bug report suggests. * In order to keep dpkg happy when moving smbpasswd from the samba package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)" in the control section of the samba-common package and a "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the samba package (in debian.control). * Samba is now being compiled with the "--with-netatalk" option. This closes #47480 (Could samba be compiled with the --with-netatalk option). * All packages that depend on samba-common have a versioned dependency now. This was accomplished by adding "(= ${Source-Version})" to the relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho for the hint. This closes #42985 (samba should probably have a versioned depends on samba-common). * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file). * Added the smbadduser helper script to the samba package. This closes #44480 (Samba doesn't come with the smbadduser program). * Applied patch from szasz@triton.sch.bme.hu that prevents smbmount to leave an entry in /etc/mtab for a share that could not be mounted because of invalid user of password. The patch also allows smbumount to unmount the share in the event that something goes wrong with the smbmount process. This closes bug #48613 (Mount/umount problems + patch) as well as #44130 (failed mount is still mounted). * smbmount-2.2.x is now setuid root. This is needed for the patch applied above to be effective. If smbmount-2.2.x is not setuid root then an entry will be left in /etc/mtab even when the mount fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid for this to work. -- Eloy A. Paris Wed, 27 Oct 1999 10:36:13 -0400 samba (2.0.5a-2) unstable; urgency=low * This version is basically the same as 2.0.5a-1 but it was compiled on a Potato system with glibc2.1. See below the change log for 2.0.5a-1 for more information. -- Eloy A. Paris Tue, 27 Jul 1999 02:25:29 -0400 samba (2.0.5a-1) stable; urgency=high * I'm back from the Honey Moon. We are pretty busy because we are moving to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still have plenty of things to pack and to do. Samba 2.0.5 was released while I was in the Honey Moon and it is just now (almost 3 AM) when I have time to package it. * Because of the security problems fixed in 2.0.5, this upload goes to both stable and unstable (the Security Team asked for this). * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will be compiled on a Potato system. * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common section in debian/control (as suggested by Steve Haslam ) to fix the problems that appear when upgrading from the Samba package in Slink. Please test this as I am completely unable to do so. This should fix bug #39818 (Upgrading Samba from the Slink version). * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in order to have defined several socket options when compiling with Linux 2.2.x kernel headers - the fix is now upstream. * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command line syntax similar to the one used by the old smbmount (for 2.0.x kernels). This means that the wrapper script is no longer necessary so I removed it. In its place there is a simple wrapper script that calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is running. * Because of the wedding, the Honey Moon, and our move to Pittsburgh, I can't work on fixing other bugs in this release. -- Eloy A. Paris Tue, 27 Jul 1999 02:18:51 -0400 samba (2.0.4b-3) unstable; urgency=low * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files and because of this /usr/bin/smbumount was part of the samba package instead of part of the smbfs package. -- Eloy A. Paris Thu, 1 Jul 1999 01:51:24 -0400 samba (2.0.4b-2) unstable; urgency=low * Dark (and archive maintainers): please remove from Potato the smbfsx binary package and also the old source package for smbfs. smbfs and smbfsx have been merged starting with this version. * Merged the old smbfs package with Samba. Now there is only one package for the smbfs utilities and is called "smbfs". The package smbfsx does not exist any more and this new smbfs package must be used for both 2.0.x and > 2.1.x kernels. * A wrapper script was added to handle the syntax change in smbmount in the new smbfs utilities (required for kernels > 2.1.70). The home page for this script is http://www.wittsend.com/mhw/smbmount.html. Please _note_ that this will change (for good) in Samba 2.0.5 :-) * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x or smbumount-2.0.x depending on the kernel currently running. * Not using -t for savelog in cron.weekly script. * Recompiled without libreadlineg-dev (Samba does not seem to be using it so unnecessary dependencies are produced). * glibc2.1 build. * Removed smbpasswd.8 man page from the debian/ directory because it is now being provided upstream. * Got rid of the ugly hack I put in source/lib/util_sock.c to have IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the autoconf stuff to #include . I've sent the patch to Jeremy Allison so we have this upstream. -- Eloy A. Paris Mon, 28 Jun 1999 17:47:19 -0400 samba (2.0.4b-1) unstable; urgency=low * New upstream release. This release fixes the following Debian bugs: #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy Allison released Samba 2.0.4 and found out that there were a couple of minor bugs so he released 2.0.4a. Then he found out about more serious bugs and released 2.0.4b. I have built this package several times between yesterday and today because of this. Now I am releasing the Debian packages for Samba with what I believe will be the latest release the Samba Team will make at least in the next 4 days (Jeremy is taking a short vacation). * Still compiling against glibc2.0 (sorry about that :-) * Hacked source/smbwrapper/smbsh.c to fix the problem of smbsh not finding the shared library smbwrapper.so. It looks now in /usr/lib/samba/ for this file. This fixes #32971, #32989, #33278, #34911 and #36317. * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf and /etc/samba/codepages/. This fixes #33128 (smbmount complains about missing /etc/smb.conf). * Package swat does not depend on httpd anymore (there's no need to). This fixes #35795 (swat requires httpd). * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and smbumount-2.2.x. Same applies to the man pages. * Changed minor type in smbmount's man page (changed "\"" by "\'"). This fixes #34070 (wrong quotes in manpage). * Used Fabrizio Polacco's procedure to create the Debian package for Samba. This closes #35781 (samba has no pristine source). * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only if the size of either is different than 0. Also, added comments at the beginning of this script to explain how rotation of log files works in Samba. Thanks to ujr@physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler) for the suggestions. This closes #37490 (cron.weekly script rotates not used [sn]mb.old files). As I side effect, this should also close #31462 (still trouble with /etc/cron.weekly/samba). * Check for old /etc/pam.d/samba file which is not provided by this version of the Debian Samba package but was provided in older versions. If this file exists we delete it. We check for this in the postinst. This closes #37356 (samba put stuff in pam.d that pam complains about) and #34312 (libpam0g: questions during upgrade). * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done in the postinst script. This closes #35730 (Security problem with /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1). * I have just checked and it looks like #28748 (smbfsx doesn't "return ") has been fixed. This might have been fixed since a long time ago. * Long long standing bug #18488 (smbclient: internal tar is broken) is closed in this release of Samba. The bug might have been closed for a long long time, but I did not check for this before. * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY" message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works), #34148 (warnings from smbd) and #35333 (samba warnings). -- Eloy A. Paris Thu, 20 May 1999 00:35:57 -0400 samba (2.0.3-1) unstable; urgency=low * New upstream version. * Removed the convert_smbpasswd.pl program I created and put in /usr/doc/samba/ because there's a convert_smbpasswd script in the upstream sources that does the same thing. I modified the postinst script to use this script instead of the one I created. -- Eloy A. Paris Sun, 28 Feb 1999 01:35:37 -0400 samba (2.0.2-2) unstable; urgency=low * Updated the README.Debian file. * Updated the description of the samba package in the control file. * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now installed setuid root as they should be. This was done by doing a a "chmod u+s" for each binary in debian/rules and by creating the file debian/smbfsx.suid. * Minor patch to source/client/smbumount.c to allow normal users to umount what they have mounted (problem was a kernel vs. libc6 size mismatch). I sent the patch upstream. * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is created. * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to debian/smbwrapper/usr/lib/samba/. * Hacked source/smbwrapper/smbsh.c to fix the problem of smbsh not finding the shared library smbwrapper.so. -- Eloy A. Paris Thu, 11 Feb 1999 18:11:34 -0400 samba (2.0.2-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Thu, 11 Feb 1999 01:35:51 -0400 samba (2.0.1-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Sat, 6 Feb 1999 06:51:18 -0400 samba (2.0.0final-4) unstable; urgency=low * The samba postinst made an unwarranted assumption that the file /etc/samba/smbpasswd exists. If the file did not exist (which is perfectly valid) the postinst will fail. This fixes #32953. -- Eloy A. Paris Fri, 5 Feb 1999 23:32:46 -0400 samba (2.0.0final-3) unstable; urgency=low * Added to debian/control a "Depends: ${shlibs:Depends}" line for the samba-common package so dependencies for this package are set correctly (thanks to Dark for pointing this out). -- Eloy A. Paris Thu, 4 Feb 1999 09:45:21 -0400 samba (2.0.0final-2) unstable; urgency=low * Finally!!! The first upload to unstable. Sorry for the delay folks but I have been quite busy lately :-) Another reason for the delay is that I wanted to ease the migration from Samba 1.9.18p10 and before to Samba 2.0.0. I changed the location of the config. files from /etc/ to /etc/samba/ and this made things a little bit harder. * This package needs 2.2 kernel headers to compile (well, this is true for the smbfsx package, all others compile fine with 2.0 kernel headers). * Created a preinst script for the samba package to take care of the location migration of smb.conf (from /etc/ to /etc/samba/). The preinst script also takes care of moving /etc/smbpasswd to its new location (/etc/samba/). * Created postinst and postrm scripts to add/remove an entry for swat in /etc/inetd.conf. * I had forgotten to install the sambaconfig script so I changed debian/rules to install this script. * Added a postrm script for the samba package (I had forgotten to add this script to the new Samba packages after the migration from 1.9.18 to 2.0.0). * Created a small Perl script that is called from the samba postinst to convert the smbpasswd from the old format used in version prior to 2.0.0 to the new one used in 2.0.0 and beyond. * The upgrade process should be automatically now. Please let me know of any problems you encounter. -- Eloy A. Paris Sat, 23 Jan 1999 09:34:10 -0400 samba (2.0.0final-1) experimental; urgency=low * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable because I still have to work out the migration from the old samba packages to the new ones. I also need to work more on the new swat package. -- Eloy A. Paris Thu, 14 Jan 1999 22:40:02 -0400 samba (2.0.0beta5-1) experimental; urgency=low * New upstream version. -- Eloy A. Paris Tue, 5 Jan 1999 00:37:57 -0400 samba (2.0.0beta4-1) experimental; urgency=low * New upstream version. -- Eloy A. Paris Wed, 23 Dec 1998 18:37:45 -0400 samba (2.0.0beta3-1) experimental; urgency=low * New upstream version. * I have just realized that the documentation patches (for man pages) that I used for the 1.9.18 release are not longer necessary because there was a major re-write of all the Samba documentation that added the missing bits of information. So, I have just removed these minor patches. -- Eloy A. Paris Tue, 8 Dec 1998 12:00:30 -0400 samba (2.0.0beta2-1) experimental; urgency=low * New upstream version. * This new version fixes the potential security problem that was posted to debian-private (using the "message command" parameter to execute arbitrary commands from messages sent from LinPopUp). * Changed /etc/init.d/samba to use one of the variables stored in /etc/samba/debian_config to know how Samba is being run (from inetd or as daemons) instead of grepping /etc/inetd.conf which may not exist if the user is running xinetd (this fixes bug #29687 - assumes using vanilla inetd) -- Eloy A. Paris Mon, 23 Nov 1998 23:32:03 -0400 samba (2.0.0beta1-1) experimental; urgency=low * First beta release of the samba-2.0.0 code. Before the beta I was working with sources downloaded directly from the CVS server. This package goes into experimental and I plan to release the new samba to unstable as soon as it gets out of beta. * Created several packages out of the Samba sources. They are: samba (nmbd and smbd daemons + related programs), smbclient (FTP like command line utility to retrieve files from SMB servers), swat (Samba Web Administration Tool), samba-common (common files used by samba, smbclient and swat), smbfsx (smbfs utilities for kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation). * Refreshed debian/samba-doc.docs so recently added docs. are installed in the samba-doc package. New additions include man pages in the /usr/doc/samba-doc/htmldocs/ directory. * Deleted Debian specific nmblookup(1) man page as it is now upstream. * Added smbtorture to smbclient package. * Moved rpcclient from the samba package to the smbclient package. * The Samba daemons (nmbd and smbd) now create a PID file so I changed all calls to start-stop-daemon to use the PID file. * Fixed debian/rules to install mksmbpasswd (fixes #27655). * Modified /etc/init.d/samba so nmbd is started without the -a (append to the log file instead of overwrite) switch. The new behavior of nmbd is to NOT overwrite log files, so the -a switch can be deleted safely. * Moved from debstd to debhelper. -- Eloy A. Paris Thu, 1 Oct 1998 08:37:41 -0400 samba (1.9.18p10-5) frozen unstable; urgency=high * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than the one I was trying to fix: in /etc/init.d/samba I got rid of the test that tells us whether the Samba daemons are running from inetd or as standalone daemons. I corrected the problem by editing again /etc/init.d/samba to uncomment the test. * Wishlist bug #28298 (typos in samba) was fixed. * Wishlist bug #28309 (typos in smb.conf) was fixed. -- Eloy A. Paris Wed, 28 Oct 1998 09:11:47 -0400 samba (1.9.18p10-4) unstable; urgency=low * Minor patch to debian/rules to delete *substvars instead of only substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz for this). * Small patch to source/shmem_sysv.c that eases compilation under glibc-2.1 (thanks to Daniel for this). -- Eloy A. Paris Thu, 17 Sep 1998 15:33:49 -0400 samba (1.9.18p10-3) unstable; urgency=low * Patched smbclient again to fix minor formatting problem introduced by Magosanyi Arpad's smbclient patch. -- Eloy A. Paris Thu, 3 Sep 1998 11:03:23 -0400 samba (1.9.18p10-2) unstable; urgency=low * Sync'ed include files for the smbfs utilities with the ones in kernel 2.1.119. * Added to the /usr/doc/samba/examples/ directory a new script called wins2dns (courtesy of Jason Gunthorpe ) that generates BIND sonze files for hosts in the WINS database. * Patched smbclient to include enhancements by Magosanyi Arpad that make scripting easier. -- Eloy A. Paris Fri, 28 Aug 1998 13:34:54 -0400 samba (1.9.18p10-1) stable unstable; urgency=low * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a description of what has changed). I built a 1.9.18p9-1 but I never released it because an obscure bug was found just a couple of days before the official release, so the Samba Team stopped the rollover of 1.9.18p9. * Updated documentation (new files were added to the docs/ directory that were not installed in /usr/doc/samba/). * Fixed long standing bug #7695 (smb.conf's man page doesn't document 'printing=lprng') - I made a couple of changes to the man page to include references to lprng. * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it is necessary to make samba suggest psmisc just because the postinst script mentions to call killall. So, I removed all references to "killall" in the scripts. * Fixes bug #25999 (Samba does not by default work with unix password sync): I added the "passwd program" and "passwd chat" parameters to the sample smb.conf to reflect the Debian environment. -- Eloy A. Paris Fri, 21 Aug 1998 08:59:18 -0400 samba (1.9.18p9-1) unstable; urgency=low * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a description of what has changed). * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is now part of the new upstream version. * Corrected small typo in addtosmbpass' man page (fixes #25629). -- Eloy A. Paris Tue, 11 Aug 1998 08:53:08 -0400 samba (1.9.18p8-2) frozen unstable; urgency=medium * Applied patch received from Jeremy Allison (Samba Team) that fixes "grave" bug #23903 (samba maps username before authenicating with NT password server). * Added a "sleep 2" between "start-stop-daemon --stop" and "start-stop-daemon --start" in /etc/init.d/samba so when this script is called with the "restart" parameter the Samba daemons are restarted properly. This fixes bug #24211 (init.d script doesn't restart). * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to avoid annoying warning messages. * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096 and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't find who sent this suggestion to me. If you are listening, drop me a note and I'll put your name here :-) -- Eloy A. Paris Mon, 29 Jun 1998 08:45:01 -0400 samba (1.9.18p8-1) frozen unstable; urgency=low * New upstream release that fixes _lots_ of "ugly" bugs. The list of fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt). * Fixed postinst to quote arguments to if [ arg .. ] constructs (fixes #22881). * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing list) that solves a problem with username maps (the Samba Team did not catch this problem before final 1.9.18p8). * Made /etc/init.d/samba to print out a warning when Samba is running from inetd and the user runs /etc/init.d/samba to start|stop|restart Samba (there's no point on doing this because inetd will start the daemons again when there is traffic on UDP port 137-139). -- Eloy A. Paris Sat, 13 Jun 1998 00:18:25 -0400 samba (1.9.18p7-4) frozen unstable; urgency=medium * Fixes the serious problem of having the WINS name server database getting deleted at boot time. That happened because the WINS database was being stored under /var/lock/samba/ and all files under /var/lock/ are deleted at boot time. The place where the WINS database is stored was moved to /var/samba/. -- Eloy A. Paris Mon, 18 May 1998 20:24:29 -0400 samba (1.9.18p7-3) stable; urgency=high * Libc5 version for Bo (stable) that fixes the recently reported security hole. -- Eloy A. Paris Mon, 18 May 1998 20:19:33 -0400 samba (1.9.18p7-2) frozen unstable; urgency=low * Added patches from the non-mantainer upload that make us able to compile Samba on Alpha systems. This fixes bug #22379. -- Eloy A. Paris Wed, 13 May 1998 20:38:51 -0400 samba (1.9.18p7-1) frozen unstable; urgency=low * New upstream release (just bug fixes, no new functionality). -- Eloy A. Paris Wed, 13 May 1998 11:47:32 -0400 samba (1.9.18p6-2) frozen unstable; urgency=low * Uploaded to frozen (I forgot to upload last version to frozen so it got installed only in unstable). -- Eloy A. Paris Tue, 12 May 1998 18:10:17 -0400 samba (1.9.18p6-1.1) unstable; urgency=low * non-maintainer upload for Alpha * patch needed for source/quota.c (_syscall4() confusion) -- Paul Slootman Tue, 12 May 1998 20:39:13 +0200 samba (1.9.18p6-1) unstable; urgency=low * New upstream release that fixes a possible buffer overflow. This security hole was reported on BugTraq by Drago. The previous Debian version (1.9.18p5-1) was not released because 1.9.18p5 and 1.9.18p6 were released very closely. -- Eloy A. Paris Mon, 11 May 1998 20:28:33 -0400 samba (1.9.18p5-1) unstable; urgency=low * New upstream release (no new funcionality, just bug fixes - see /usr/doc/samba/WHATSNEW.txt.gz). * Backed off Debian patches that were added upstream. -- Eloy A. Paris Mon, 11 May 1998 08:43:53 -0400 samba (1.9.18p4-2) frozen unstable; urgency=low * Patched smbclient(1) man page to not reference the unsopported -A parameter (fixes #6863). * Changes to start nmbd with the -a option (in /etc/init.d/samba and in the entry added to /etc/inetd.conf). * Fixed typo in sample smb.conf (fixes #21484). * Fixed yet another typo in sample smb.conf (fixes #21447). -- Eloy A. Paris Fri, 17 Apr 1998 22:19:23 -0400 samba (1.9.18p4-1) frozen unstable; urgency=low * New upstream version that fixes several bugs. * New scheme for keeping track of Debian specific configuration. This new scheme fixes bug #18624 (Samba always asks the user about configuration options). New scheme stores Debian specific configuration information in /etc/samba/debian_config. * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the new configuration scheme. * Moved required kernel 2.1.x include files inside the source tree so I don't have to do very nasty things like creating crazy symlinks in /usr/include to make this package compile. This allows non-root users to build the package and fixes bug #20104. * Fixed address of the FSF in /usr/doc/samba/copyright (problem reported by lintian). * The /etc/init.d/samba script now supports the force-reload argument, as required by the policy (problem reported by lintian). * Added a "rm /etc/cron.weekly/samba" at the end of the postinst. * Now the samba package can be installed even if no nmbd or smbd processes are running. This fixes the following bugs: #8917, #9334, #10268, #10411, #11146 and #13387. * Provides the original README in /usr/doc/samba. This fixes bug #9693. * Added a --no-reload option to sambaconfig to not reload Samba after configuration. * Created man pages for sambaconfig(8), addtosmbpass(8), mksmbpasswd(8) and nmblookup(1). * Corrected small typo in sample /etc/smb.conf. * Added two new parameters to /etc/smb.conf: "preserver case" and "short preserve case". * "rm -Rf /var/lock/samba" in postrm when package is being purged. * Patched upstream source (nmbd.c) to not overwrite log files when nmbd is called with the -a parameter (fixes #17704: nmbd ignores -a option). * /etc/init.d/samba now starts the nmbd daemon with the -a parameter to not overwrite log files. -- Eloy A. Paris Mon, 23 Mar 1998 21:22:03 -0400 samba (1.9.18p3-1) unstable; urgency=low * New upstream version. * Oppsss!!! I really screwed it up (actually, debstd did). 1.9.18p2-2 still contained man pages (smbmount and smbumount) part of other packages. This version does have this corrected. If not, I no longer deserve to be a Debian developer! So, this version fixes bug #18438 and some of the bugs I claimed to fix in 1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd with -m in debian/rules (man pages are installed by "make install" so it's a bad idea to re-install man pages with debstd). -- Eloy A. Paris Mon, 23 Feb 1998 17:32:42 -0400 samba (1.9.18p2-2) unstable; urgency=low * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided a man page for smbmount, which conflicts with package smbfs. This was solved by creating a multi-binary package that produces package samba and new package smbfsx. * Fixes bug #18000 (typo in postinst). * Fixes bug #17958 (postinst asks obsolete question). Actually, the question is still asked, but only if Samba is run as daemons. * Created a multi-binary package from the Samba sources: package samba and new package smbfsx which provides SMB mount utilities for kernels > 2.1.70. -- Eloy A. Paris Mon, 9 Feb 1998 19:47:05 -0400 samba (1.9.18p2-1) unstable; urgency=low * New upstream version. * Removed /etc/cron.weekly/samba because Samba does not handle well rotation of log files (if the log file is rotated Samba will continue to log to the rotated file, instead of the just created one). In any case, Samba will rotate log files after an specific file size. -- Eloy A. Paris Tue, 27 Jan 1998 22:34:27 -0400 samba (1.9.18p1-2) unstable; urgency=low * Created a multi-binary package out of the Samba sources to provide packages samba and smbfsx (userland utilities to work with smbfs with kernels > 2.1.x. -- Eloy A. Paris Sat, 17 Jan 1998 09:23:48 -0400 samba (1.9.18p1-1) unstable; urgency=low * New upstream version. * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in /var/backups/smbpasswd.bak. -- Eloy A. Paris Wed, 14 Jan 1998 13:40:56 -0400 samba (1.9.18alpha14-1) unstable; urgency=low * New upstream version. * Added a note to the postinst script telling the user that he/she needs to run smbpasswd manually after creating a new /etc/smbpasswd from /etc/passwd. -- Eloy A. Paris Tue, 23 Dec 1997 23:44:37 -0400 samba (1.9.18alpha13-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Tue, 16 Dec 1997 13:02:32 -0400 samba (1.9.18alpha12-1) unstable; urgency=low * New upstream version. * Conflicts with the sambades package because the new Samba 1.9.18 series do not depend on the DES libraries to support encrypted passwords. * Added parameter "encrypt passwords = yes" to /etc/smb.conf. * Compiled with support for quotas in disk_free(). * Home directories are now exported read only by default. * Re-worked debian/rules. * Re-worked sample smb.conf. -- Eloy A. Paris Thu, 4 Dec 1997 22:50:34 -0400 samba (1.9.17p4-1) unstable; urgency=low * New upstream version. * Made /etc/smb.conf readable by everybody because some Samba utilities will fail otherwise when run by non-root users. * Dropped PAM support while the PAM libraries are ported to libc6. -- Eloy A. Paris Tue, 21 Oct 1997 18:08:49 -0400 samba (1.9.17p3-1) unstable; urgency=low * New upstream version. * Made /etc/smb.conf readable only by root as suggested by smbd's man page. -- Eloy A. Paris Wed, 15 Oct 1997 09:21:25 -0400 samba (1.9.17p2-2) unstable; urgency=low * Running Samba as daemons instead of from inetd. * Removing netbios entries in /etc/inetd.conf. -- Eloy A. Paris Thu, 9 Oct 1997 23:37:25 -0400 samba (1.9.17p2-1) unstable; urgency=low * New upstream version that fixes a serious security hole. * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because these patches are now part of the upstream release. -- Eloy A. Paris Sun, 28 Sep 1997 22:54:33 -0400 samba (1.9.17p1-1) unstable; urgency=low * New upstream version. * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up compiler warnings. * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings. * Included crypt.h to have function prototype for crypt(). * Included netinet/tcp.h to have some socket options included. * Included netinet/ip.h to have some socket options included. * Linking with libcrypt (LIBM='... -lcrypt'). Without including this library smbd generates a seg. fault when authenticating users (?). -- Eloy A. Paris Wed, 10 Sep 1997 22:09:18 -0400 samba (1.9.17alpha5-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Thu, 14 Aug 1997 18:05:02 -0400 samba (1.9.17-1) unstable; urgency=low * New upstream version (called the "Browse Fix Release") * Added the option --oknodo to the start-stop-daemon invocation in prerm script. This was because the prerm was failing because start-stop-daemon was returning an error code if no nmbd or smbd daemons were found to kill. * The function yp_get_default_domain(), referenced in three source files was part of libc5 but with libc6 (glibc2) it has been moved to libnss_nis. Since the linker was unable to find the function I had to add LIBSM='-lnss_nis' to debian/rules. * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules because compiling was failing because of conflicts with glibc2. * Patched source/includes.h to include termios.h if GLIBC2 is defined. -- Eloy A. Paris Wed, 27 Aug 1997 08:39:32 -0400 samba (1.9.17alpha5-1) unstable; urgency=low * New upstream version. -- Eloy A. Paris Thu, 14 Aug 1997 18:05:02 -0400 samba (1.9.16p11-3) unstable; urgency=low * Fixed accidental omission of /etc/pam.d/samba. -- Klee Dienes Sat, 15 Mar 1997 22:31:26 -0500 samba (1.9.16p11-2) unstable; urgency=low * Recompiled against newer PAM libraries. * Added /etc/pam.d/samba. -- Klee Dienes Sat, 8 Mar 1997 01:16:28 -0500 samba (1.9.16p11-1) unstable; urgency=low * New upstream release. * Added PAM support. -- Klee Dienes Tue, 25 Feb 1997 18:00:12 -0500 samba (1.9.16p9-2) unstable; urgency=low * minor packaging changes -- Klee Dienes Sun, 3 Nov 1996 11:45:37 -0700 samba (1.9.16p9-1) unstable; urgency=low * upgraded to new upstream version -- Klee Dienes Sat, 26 Oct 1996 21:38:20 -0700 1.9.16alpha10-1: 960714 * Removed Package_Revision from control file. * Removed -m486 compiler option. * Added Architecture, Section and Priority fields to control file. * Upgraded to latest upstream version. * Uses update-inetd now. * Added shadow passwords support. * Fixed Bug#1946: nmbd won't browse 1.9.15p4-1: 951128 * Upgraded to latest upstream version. * Fixed many bugs. * Adds Master Browsing support. * Converted to ELF. * Fixed bug #1825 - nmbd is now killed when removing samba. 1.9.14-1: 950926 Andrew Howell * Upgraded to latest version. * Fixed Bug #1139 - samba won't print 1.9.14alpha5-1: * Fixes killing of inetd problem in debian.postint and debian.postrm 1.9.14alpha5-0: 950704 Andrew Howell * Taken over samba package from Bruce Perens. * Upgraded to newest version of samba. 1.9.02-1: 9-January-1994 Bruce Perens * Added Debian GNU/Linux package maintenance system files, and configured for Debian systems.