Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

libdcerpc0-64bit-4.1.0-3.8.1 RPM for ppc

From OpenSuSE 13.1 updates for ppc

Name: libdcerpc0-64bit Distribution: openSUSE 13.1
Version: 4.1.0 Vendor: openSUSE
Release: 3.8.1 Build date: Wed Nov 20 18:19:31 2013
Group: System/Libraries Build host: build67
Size: 226864 Source RPM: samba-4.1.0-3.8.1.src.rpm
Packager: http://bugs.opensuse.org
Url: http://www.samba.org/
Summary: Distributed Computing Environment Remote Procedure Calls library
DCE/RPC, short for "Distributed Computing Environment / Remote
Procedure Calls", is the remote procedure call system developed for
the Distributed Computing Environment (DCE). This system allows
programmers to write distributed software as if it were all working
on the same computer, without having to worry about the underlying
network code.

Source Timestamp: 3113
Branch:         4.1.0

Provides

Requires

License

GPL-3.0+

Changelog

* Fri Nov 15 2013 lmuelle@suse.com
  - Unconditionally create the CUPS smb backend sym link pointing to smbspool;
    (bnc#850656).
* Sun Nov 10 2013 lmuelle@suse.com
  - Private key in key.pem world readable; CVE-2013-4476; (bnc#848103).
* Wed Oct 30 2013 lmuelle@suse.com
  - ACLs are not checked on opening an alternate data stream on a file or
    directory; CVE-2013-4475; (bso#10229); (bnc#848101).
* Fri Oct 11 2013 lmuelle@suse.com
  - Update to 4.1.0.
    + pam_winbindd: Support the KEYRING ccache type; (bso#10132).
    + Fix PAC parsing failure; (bso#10178).
* Wed Oct 09 2013 lmuelle@suse.com
  - Unify the defattr lines in the pidl, python, test and test-devel files
    section by removing the optional directory mode.
* Wed Oct 09 2013 lmuelle@suse.com
  - Verify source tar ball gpg signature.
* Fri Sep 27 2013 lmuelle@suse.com
  - Update to 4.1.0rc4.
    + dsdb: Convert the full string from UTF16 to UTF8, including embedded
      NULLs; (bso#8077).
    + python-samba-tool fsmo: Do not give an error on a successful role
      transfer; (bso#9461).
    + dbwrap_ctdb: Treat empty records as non-existing; (bso#10008).
    + Raise the level of a debug when unable to open a printer; (bso#10118).
    + Add "acl allow execute always" parameter; (bso#10134).
    + vfs_shadow_copy2: Display previous versions correctly over SMB2;
      (bso#10137).
    + smbd: Always clean up share modes after hard crash; (bso#10138).
    + Valid utf8 filenames cause "invalid conversion error" messages;
      (bso#10139).
    + libcli/smb: Use SMB1 MID=0 for the initial Negprot; (bso#10144).
    + Samba SMB2 client code reads the wrong short name length in a directory
      listing reply; (bso#10145).
    + libcli/smb: Only check the SMB2 session setup signature if required and
      valid; (bso#10146).
    + Better document potential implications of a globally used "valid users";
      (bso#10147).
    + cli_smb2_get_ea_list_path() failed to close file on exit; (bso#10149).
    + Not all OEM servers support the ALTNAME info level; (bso#10150).
    + Regression causes replication failure with Windows 2008R2 and deletes
      Deleted Objects; (bso#10157).
    + Netbios related samba process consumes 100% CPU; (bso#10158).
    + Fix POSIX ACL mapping when setting DENY ACE's from Windows; (bso#10162).
* Thu Sep 19 2013 lmuelle@suse.com
  - Require libndr-standard-devel due to gen_ndr/lsa.h from libpdb-devel.
* Mon Sep 16 2013 lmuelle@suse.com
  - Add libdcerpc0, libdcerpc-atsvc0, libdcerpc-binding0, libdcerpc-samr0,
    libgensec0, libndr0, libndr-krb5pac0, libndr-nbt0, libndr-standard0,
    libpdb0, libregistry0, libsamba-credentials0, libsamba-hostconfig0,
    libsamba-policy0, libsamba-util0, libsamdb0, libsmbclient-raw0, libsmbconf0,
    libsmbldap0, and libtevent-util0 to baselibs.conf.
* Sat Sep 14 2013 jengelh@inai.de
  - Add or polish the shared library package summaries and descriptions.
* Fri Sep 13 2013 lmuelle@suse.com
  - Update to 4.1.0rc3.
    + Fix working on site with Read Only Domain Controller; (bso#5917).
    + Add man page for vfs_syncops; (bso#7364).
    + Add man page for vfs_linux_xfs_sgid; (bso#7490).
    + When replicating DNS for bind9_dlz we need to create the server-DNS
      account remotely; (bso#9091).
    + Winbind unable to retrieve user information from AD; (bso#9615).
    + winbind_lookup_names() fails because of NT_STATUS_CANT_ACCESS_DOMAIN_INFO;
      (bso#9899).
    + Build Samba 4.0.x on AIX with IBM XL C/C++; (bso#9911).
    + Add SMB2 and SMB3 support for smbclient; (bso#9974).
    + Add man pages for ntdb tools; (bso#10000).
    + Add man page for samba-regedit tool; (bso#10001).
    + ::1 added to nameserver on join; (bso#10030).
    + Fix memory leak in source3/lib/util.c:1493; (bso#10063).
    + Fix segmentation fault in 'net ads join'; (bso#10073).
    + Fix variable list in vfs_crossrename man page; (bso#10076).
    + s3-winbind: Fix a segfault passing NULL to a fstring argument; (bso#10082).
    + smbd: Fix async echo handler forking; (bso#10086).
    + MacOSX 10.9 will not follow path-based DFS referrals handed out by Samba;
      (bso#10097).
    + Honour output buffer length set by the client for SMB2 GetInfo requests;
      (bso#10106).
    + Fix Winbind crashes on DC with trusted AD domains; (bso#10107).
    + Handle Dropbox (write-only-directory) case correctly in pathname lookup;
      (bso#10114).
    + Masks incorrectly applied to UNIX extension permission changes;
      (bso#10121).
* Thu Sep 05 2013 jengelh@inai.de
  - Implement shared library packaging guidelines.
  - Correct interpackage dependencies; (bso#10129).
* Tue Sep 03 2013 lmuelle@suse.com
  - Define the source URL differently in the case of a release candidate.
* Sat Aug 31 2013 lmuelle@suse.com
  - Update to 4.1.0rc2.
    + Add vfs_btrfs module.
    + Add support for server-side copy operations via the
      SMB2 FSCTL_SRV_COPYCHUNK request.
    + Fix replication with --domain-crictical-only to fill in backlinks;
      (bso#9029).
    + Windows 8 Roaming profiles fail; (bso#9678).
    + Fix crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol";
      (bso#9820).
    + Windows error 0x800700FE when copying files with xattr names containing
      ":"; (bso#9992).
    + Do not delete an existing valid credential cache (s3-winbind); (bso#9994).
    + Fix segfault while reading incomplete session info; (bso#10003).
    + Missing integer wrap protection in EA list reading can cause server to
      loop with DOS (CVE-2013-4124); (bso#10010).
    + Fix a 100% loop at shutdown time (smbd); (bso#10013).
    + Fix/improve debug options; (bso#10015).
    + Rename regedit to samba-regedit; (bso#10040).
    + Remove obsolete swat manpage and references; (bso#10041).
    + Fix crashes in socket_get_local_addr(); (bso#10042).
    + Allow to change the default location for Kerberos credential caches;
      (bso#10043).
    + Remove a redundant inlined substitution of ACLs; (bso#10045).
    + nsswitch: Add OPT_KRB5CCNAME to avoid an error message; (bso#10048).
    + dsdb improvements; (bso#10056).
    + Linux kernel oplock breaks can miss signals; (bso#10064).
* Thu Aug 29 2013 lmuelle@suse.com
  - BuildRequire pyldb-devel.
* Wed Aug 28 2013 lmuelle@suse.com
  - Add libnetapi0 and samba-libs to baselibs.conf.
* Thu Aug 22 2013 lmuelle@suse.de
  - Update to 4.0.9.
    + Fix crash of Winbind after "ls -l /usr/local/samba/var/locks/sysvol";
      (bso#9820).
    + s3-lib: Fix segmentation fault while reading incomplete session info;
      (bso#10003).
    + smbd: Fix a 100% loop at shutdown time; (bso#10013).
    + Windows 8 Roaming profiles fail; (bso#9678).
    + Add UPN enumeration to passdb internal API; (bso#9779).
    + smbd: Cleanup disonnected durable handles; (bso#9930).
    + vfs_streams_xattr: Do not attempt to write empty attribute twice;
      (bso#9970).
    + Fix Windows error 0x800700FE when copying files with xattr names
      containing ":"; (bso#9992).
    + s3-winbind: Do not delete an existing valid credential cache; (bso#9994).
    + Fix excessive RID allocation; (bso#10014).
    + Add debugclass for DNS server; (bso#10015).
    + Fix/improve debug options; (bso#10015).
    + Allow to change the default location for Kerberos credential caches;
      (bso#10043).
    + Linux kernel oplock breaks can miss signals; (bso#10064).
    + net ads join: Fix segmentation fault in
      create_local_private_krb5_conf_for_domain; (bso#10073).
* Mon Aug 05 2013 lmuelle@suse.com
  - Update to 4.0.8.
    + Samba 3.0.x to 4.0.7 are affected by a denial of service attack on
      authenticated or guest connections; CVE-2013-4124; (bnc#829969).
* Mon Jul 22 2013 lmuelle@suse.com
  - Require krb5 and not the non existing krb5-libs package.
* Wed Jul 17 2013 lmuelle@suse.com
  - Update to 4.1.0rc1.
    + Directory database replication (AD DC mode)
    + Server-Side Copy Support
    + Btrfs Filesystem Integration
* Fri Jul 12 2013 lmuelle@suse.com
  - BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp.
  - BuildRequire libxslt, libxslt1, or libxslt-tools depending on SUSE version.
  - Require perl-base on SUSE systems only.
* Fri Jul 12 2013 lmuelle@suse.com
  - Adjust group setting of the test-devel subpackage.
  - Require perl-base from the pidl subpackage.
* Fri Jul 12 2013 lmuelle@suse.com
  - Remove libdir/samba/ldb after install if we're building Samba without
    Active Directory Domain Controller support.
* Thu Jul 11 2013 lmuelle@suse.com
  - Remove unused ccache switch from the spec file.
* Thu Jul 11 2013 lmuelle@suse.com
  - BuildRequire docbook-xsl-stylesheets and libxslt-tools to build the
    man pages and add them to the package again.
* Thu Jul 11 2013 lmuelle@suse.com
  - Build from the package from the top level directory; (bnc#794744).
  - BuildRequire pytalloc-devel, python-tdb, and python-tevent.
  - Also use out of tree builds of talloc, tdb, tevent, and ldb for pre-12.1
    SUSE systems.
* Fri Jul 05 2013 lmuelle@suse.com
  - Remove the empty data dir from the doc package filelist.
  - Explicitly use samba instead of the name macro to define the docbook dir.
* Tue Jul 02 2013 lmuelle@suse.com
  - Update to 4.0.7.
    + Fix a core dump with invalid lock order while opening/editing
      or copying MS files; (bso#9794).
    + Fix crash bug from search of mail=; (bso#9967).
    + s3-rpc_server: Ensure we are root when starting and using gensec;
      (bso#9465).
    + Add support for MX queries; (bso#9485).
    + dns: Delete dnsNode objects when they are empty; (bso#9559).
    + dns: Support larger queries when asking forwarder; (bso#9632).
    + s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST; (bso#9805).
    + Use of wrong RFC2307 primary group field; (bso#9880).
    + Check for system libtevent; (bso#9881).
    + is_printer_published GUID retrieval; (bso#9900).
    + Doc fixes for 4.0; (bso#9906).
    + Build fixes for 4.0 found during autoconf or debian packaging work;
      (bso#9907).
    + build: Add missing new line to replaced python shebang line; (bso#9909).
    + PIE builds not supported; (bso#9910).
    + s4:winbind: Don't leak libnet_context into the main event context;
      (bso#9929).
    + Fix a bug of drvupgrade of smbcontrol; (bso#9941).
    + Check for netbios aliases in ad_get_referrals; (bso#9947).
    + Fix tevent_poll on 32-bit machines (Coverity ID 989236); (bso#9953).
    + docs: Avoid mentioning a possibly misleading option; (bso#9964).
    + Fix build with system Heimdal of samba4kgetcred; (bso#9968).
* Mon Jul 01 2013 lmuelle@suse.com
  - Use SLE as product prefix for SUSE Linux Enterprise, oS for openSUSE, and
    OBS for any other operating system to define the vendor string while build.
* Fri Jun 28 2013 lmuelle@suse.com
  - Remove ldapsmb from the main spec file.
* Wed Jun 26 2013 lmuelle@suse.com
  - Adjust ldapsmb and nmbstatus man page syntax required by a newer pod2man.
* Tue Jun 25 2013 lmuelle@suse.com
  - Don't bzip2 the main tar ball, use the upstream gziped one instead.
* Sun Jun 23 2013 jengelh@inai.de
  - Explicitly BuildRequire cyrus-sasl-devel, libattr-devel, and
    libopenssl-devel.
* Wed Jun 05 2013 ddiss@suse.com
  - Fix libreplace license ambiguity; (bso#8997); (bnc#765270).
* Wed May 22 2013 lmuelle@suse.com
  - Update to 4.0.6.
    + Fix crash during Win8 sync; (bso#9822).
    + Fix segfault when loging in with wrong password from w2k8r2; (bso#9834).
    + Fix the username map optimization; (bso#9139).
    + Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382).
    + SMB2 server doesn't support recvfile; (bso#9412).
    + Fix the build of vfs_notify_fam; (bso#9545).
    + Fix adding case sensitive spn; (bso#9699).
    + Properly handle oplock breaks in compound requests; (bso#9722).
    + Properly handle oplock breaks in compound requests; (bso#9722).
    + Cache name_to_sid/sid_to_name correctly; (bso#9766).
    + Fix 'net ads join' when called via stdin; (bso#9767).
    + Fix segfault for "artificial" conn_structs in vfs_fake_perms; (bso#9775).
    + vfs_dirsort uses non-stackable calls, dirfd(), malloc instead of talloc and
      doesn't cope with directories being modified whilst reading; (bso#9777).
    + Fix panic when running 'smbtorture smb.base'; (bso#9782).
    + Use specified python for runtime installation of Samba; (bso#9785).
    + Change '--with-dmapi' to 'default=auto' to match the autoconf build;
      (bso#9803).
    + wafsamba: Display the default value in help for SAMBA3_ADD_OPTION;
      (bso#9804).
    + wbinfo: Fix segfault in wbinfo_pam_logon; (bso#9807).
    + Package new dbwrap_tool man page; (bso#9809).
    + Old DOS SMB CTEMP request uses a non-VFS function to access
      the filesystem; (bso#9811).
    + Fix 'map untrusted to domain' with NTLMv2; (bso#9817).
    + SMB signing and the async echo responder don't work together; (bso#9824).
    + Fix panic in nt_printer_publish_ads; (bso#9830).
    + talloc use after free in winbind4; (bso#9832).
    + Function called in unix_convert() path can overwrite errno; (bso#9833).
    + Fix NULL pointer dereference in Winbind; (bso#9854).
    + Fix making LIBNDR_PREG_OBJ; (bso#9868).
* Fri Apr 26 2013 lmuelle@suse.com
  - Remove disabled and anyhow obsoleted net-report and net_rpc_migrate patches.
* Tue Apr 09 2013 lmuelle@suse.com
  - Update to 4.0.5.
    + Fix large reads/writes from some Linux clients; (bso#9706).
    + Add 'samba-tool dbcheck --reset-well-known-acls'; (bso#9740).
    + Can't delegate adding computers to domain; (bso#9267).
    + Fix GNU ld version detection with old gcc releases; (bso#7825).
    + Never try to map global SAM name; (bso#9039).
    + Certain xattrs cause Windows error 0x800700FF; (bso#9130).
    + Samba returns unexpected error on SMB posix open; (bso#9519).
    + Fix build on AIX; (bso#9557).
    + libnss-winbindd does not provide pass struct for groups mapped with
      ID_TYPE_BOTH and vice versa; (bso#9617).
    + Reauth-capable client fails to access shares on Windows member; (bso#9625).
    + PIDL: Fix parsing linemarkers in preprocessor output; (bso#9636).
    + Rename internal subsystem pdb_ldap to pdb_ldapsam; (bso#9639).
    + Fix the build of vfs_afsacl; (bso#9642).
    + Fix the build with --fake-kaserver; (bso#9643).
    + Fix compile of source3/lib/afs.c; (bso#9644).
    + Make SMB2_GETINFO multi-volume aware; (bso#9646).
    + idmap_autorid: Fix freeing of non-talloced memory; (bso#9653).
    + Work around FreeBSD's getaddrinfo() underscore issue; (bso#9656).
    + 'make test' hangs; (bso#9663).
    + Fix correct linking of libreplace with cmdline-credentials; (bso#9664).
    + Fix filtering of link-local addresses; (bso#9666).
    + Fix crash in 'net rpc join' against a Samba 3.0.33 PDC; (bso#9669).
    + Samba denies owner Read Control when there is a DENY entry while W2K08
      does not; (bso#9674).
    + Fix several resource (fd) leaks; (bso#9683).
    + Fix a memory leak in spoolss rpc server; (bso#9685).
    + Fix a possible buffer overrun in pdb_smbpasswd; (bso#9686).
    + Fix several possible null pointer dereferences; (bso#9687).
    + Make sure that domain joins work correctly when the DC disallows NTLM
      auth; (bso#9689).
    + Backport tevent changes to bring library to version 0.9.18; (bso#9695).
    + Remove incomplete samba_dnsupdate IPv6 link-local address check;
      (bso#9696).
    + DsReplicaGetInfo fails due to sendto() EMSGSIZE error on UNIX
      domain socket; (bso#9697).
    + Fix vfs_catia and update documentation; (bso#9701); (bnc#824833).
    + Fix build on solaris8: Do not force a specific perl on pod2man; (bso#9703).
    + Fix nss_winbind name on FreeBSD; (bso#9704).
    + s4:winbindd: Do not drop the workgroup name in the getgrnam, getgrent and
      getgrgid calls; (bso#9711).
    + Set LD_LIBRARY_PATH in install_with_python.sh; (bso#9717).
    + s4-idmap: Remove requirement that posixAccount or posixGroup be set for
      rfc2307; (bso#9718).
    + Allow forcing an override of an old @MODULES record; (bso#9719).
    + Do not print the admin password during 'samba-tool classicupgrade';
      (bso#9720).
    + Make samba_upgradedns more robust (do not guess addresses when just
      changing roles); (bso#9721).
    + Add a tool to migrate latin1 printing tdbs to registry; (bso#9723).
    + is_encrypted_packet() function incorrectly used inside server; (bso#9724).
    + upgradeprovision and 'samba-tool dbcheck' patches for 4.0.NEXT; (bso#9725).
    + Fix NULL pointer dereference; (bso#9727).
    + DO NOT install samba_upgradeprovision in 4.0.x; (bso#9728).
    + Fix 'smbcontrol close-share'; (bso#9733).
    + Fix Winbind separator in upn to username conversion; (bso#9735).
    + Change to smbd/dir.c code gives significant performance increases on large
      directory listings; (bso#9736).
    + PIDL: Build fixes for hosts without CPP (Solaris 11); (bso#9739).
    + Make sure that we only propogate the INHERITED flag when we are allowed
      to; (bso#9747).
    + Remove unneeded fstat system call from hot read path; (bso#9748).
    + Don't leak the epm_Map policy handle; (bso#9758).
    + Fix incorrect parsing of SMB2 command codes; (bso#9760).
  - Update to 4.0.4.
    + Remove forced set of 'create mask' to 0777; CVE-2013-1863; (bnc#809624).
* Thu Mar 14 2013 ddiss@suse.com
  - Fix periodic printcap cache reloads; (bso#9650); (bnc#807334).
* Tue Feb 26 2013 lmuelle@suse.com
  - No longer use the cifs- or smbfstab named configuration file on post-12.2
    systems; (bnc#804822); (bnc#821889).
* Mon Feb 25 2013 lmuelle@suse.com
  - Shift the smbfs init script nfs dependency from Required to Should.
* Mon Feb 11 2013 ddiss@suse.com
  - Fix SMB1 Session Setup AndX handling with a large krb PAC;
    (bso#9658); (bnc#802031).
* Fri Feb 08 2013 lmuelle@suse.com
  - Point LD_LIBRARY_PATH to the just-built libraries while calling testparm to
    generate the default share snippets on pre-12.2 systems.
* Fri Feb 08 2013 ddiss@suse.com
  - Explicitly configure --with-ads.
* Thu Feb 07 2013 ddiss@suse.com
  - Fix smbclient recursive mget EPERM handling; (bso#9633); (bnc#786350).
* Thu Feb 07 2013 lmuelle@suse.com
  - Remove superfluous quotation marks while setting the
    SAMBA_VERSION_VENDOR_SUFFIX string.
* Wed Feb 06 2013 sjayaraman@suse.de
  - Do not restart the smbfs service on pre-11.3 systems during dhcp lease
    renewal when the IP address remains the same; (bnc#800782).
* Tue Feb 05 2013 lmuelle@suse.com
  - Update to 4.0.3.
    + Fix ACL problem with delegation of privileges and deletion of accounts
      over LDAP interface; add documentation; (bso##8909).
    + check_password_quality: Handle non-ASCII characters properly; (bso##9105).
    + Fix 'smbd' panic triggered by unlink after open; (bso##9571).
    + smbd: Fix memleak in the async echo handler; (bso##9549).
    + defer_open is triggered multiple times on the same request; (bso#9196).
    + Add extra attributes for AD printer publishing; (bso#9378).
    + FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT; (bso#9461).
    + Downgrade v4 printer driver requests to v3; (bso#9474).
    + samba_upgradeprovision: fix the nTSecurityDescriptor on more containers;
      (bso#9481).
    + s3:smb2_negprot: set the 'remote_proto' value; (bso#9499).
    + waf assumes that pythonX.Y-config is a Python script; (bso#9503).
    + s4:drsuapi: Make sure we report the meta data from the cycle start;
      (bso#9508).
    + wafsamba: Use additional xml catalog file; (bso#9512).
    + samba_dnsupdate: Set KRB5_CONFIG for nsupdate command; (bso#9517).
    + conn->share_access appears not be be reset between users; (bso#9518).
    + Remove superfluous bracket in samba.8.xml; (bso#9528).
    + Fix typo in vfs_tsmsm.8.xml; (bso#9530).
    + terminate the irpc_servers_byname() result with
      server_id_set_disconnected(); (bso#9540).
    + Make use of posix_openpt; (bso#9541).
    + Fix build of vfs_commit and plug in async pwrite support; (bso#9544).
    + Fix aio_suspend detection on FreeBSD; (bso#9546).
    + Correctly detect O_DIRECT; (bso#9548).
    + sigprocmask does not work on FreeBSD to stop further signals in a signal
      handler; (bso#9550).
    + smb.conf(5): Update list of available protocols; (bso#9552).
    + s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup; (bso#9555).
    + Fix compilation of Solaris ACL module; (bso#9564).
    + Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200 functional
      level) produces dbcheck errors; (bso#9565).
    + Add dbwrap_tool.1 manual page; (bso#9568).
    + Document the command line options in dbwrap_tool(1); (bso#9568).
    + ntlm_auth(1): Fix format and make examples visible; (bso#9569).
    + Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients;
      (bso#9572).
    + Fix a possible null pointer dereference in spoolss; (bso#9574).
    + Duplicate flags defined in the winbindd protocol; (bso#9575).
    + gensec: Allow login without a PAC by default; (bso#9581).
    + smbd: disk_free: sys_popen() failed" message logged in /var/log/message
      many times; (bso#9586).
    + Archive flag is always set on directories; (bso#9587).
    + ACLs are not inherited to directories for DFS shares; (bso#9588).
    + Correct meta data in ldb manpages; (bso#9591).
    + s3-winbind: Fix the build of idmap_ldap; (bso#9595).
    + Linked attribute handling should be by GUID; (bso#9596).
    + Fix timeouts of some IRPC calls; (bso#9598).
    + Use pid,task_id as cluster_id in process_single just like process_prefork;
      (bso#9598).
    + Add 'ldbdump' tool; general code and documentation cleanup; (bso#9609).
    + dsdb: Make secrets_tdb_sync cope with -H secrets.ldb; (bso#9610).
* Thu Jan 31 2013 lmuelle@suse.com
  - Update to 4.0.2.
    + Address SWAT security issues CVE-2013-0213 and CVE-2013-0214 which both
      don't apply to any SUSE Samba post-3.6.10 as it isn't longer built.
    + Don't build and package static libraries.
* Thu Jan 31 2013 lmuelle@suse.com
  - Drop separate build-source-timestamp file as it led to a second, incorrect
    Source Timestamp line.
* Wed Jan 23 2013 ddiss@suse.com
  - Add server-side copy support; (fate#314770).
    + Implement FSCTL_SRV_COPYCHUNK and FSCTL_SRV_REQUEST_RESUME_KEY handlers.
    + Add vfs_btrfs VFS module for optimized Btrfs clone-range ioctl usage.
* Mon Jan 21 2013 lmuelle@suse.com
  - Add filter against shlib-policy-name-error for /lib*/libnss_wins.so.2.
* Mon Jan 21 2013 lmuelle@suse.com
  - Disable SWAT during configure and don't package it any longer.
* Fri Jan 18 2013 lmuelle@suse.com
  - Remove dangling references to Heimdal from the spec file.
* Thu Jan 17 2013 lmuelle@suse.com
  - Remove /lib/samba prefix from the localstatedir configure option.
* Tue Jan 15 2013 lmuelle@suse.com
  - Update to 4.0.1.
    + Samba 4.0.0 as an AD DC may provide authenticated users with write access
      to LDAP directory objects; CVE-2013-0172; (bnc#798364).
* Wed Jan 09 2013 lmuelle@suse.com
  - Add the missing get_printing_ticket binary path while calling the
    set_permissions macro; (bnc#783375).
* Sun Dec 23 2012 lmuelle@suse.com
  - Use the version macro while definition of the branch macro.
* Wed Dec 19 2012 lmuelle@suse.com
  - Remove references to no longer used devel macros.
* Tue Dec 11 2012 lmuelle@suse.com
  - Update to 4.0.0.
    + Honor password complexity settings; (bso#9414).
    + Install SWAT *.msg files with waf; (bso#9415).
    + Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES;
      (bso#9438).
    + developer-build: Fix panic when acl_xattr fails with access denied;
      (bso#9456).
    + Fix "map username script" with "security=ads" and Winbind; (bso#9457).
    + Install manpages only if we install the target; (bso#9459).
    + Respond correctly to FILE_STREAM_INFO requests; (bso#9460).
    + Users can not be given write permissions any more by default; (bso#9462).
    + Fix MMC crashes; (bso#9470).
    + Fix SEGV when using second vfs module; (bso#9471).
    + Support FIPS mode when building Samba; (bso#9479).
    + Fix ACL on "cn=partitions,cn=configuration"; (bso#9481).
* Tue Dec 11 2012 lmuelle@suse.com
  - netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon AES broken;
    (bso#9438).
  - s3:auth: fix create_token_from_sid() to not fail in the winbindd case;
    (bso#9457).
  - s4:dsdb/acl_read: return the nTSecurityDescriptor attr if the sd_flags
    control is given; (bso#9470).
  - Support FIPS mode when building Samba; (bso#9479).
  - s4:provision: set the correct nTSecurityDescriptor; (bso#9481).
* Mon Dec 10 2012 lmuelle@suse.com
  - SEGV when using second vfs module; (bso#9471).
* Mon Dec 10 2012 lmuelle@suse.com
  - Update to 3.6.10.
    + Respond correctly to FILE_STREAM_INFO requests; (bso#9460).
    + Fix segfault when "default devmode" is disabled; (bso#9433).
    + Fix segfaults in "log level = 10" on Solaris; (bso#9390).
* Sun Dec 09 2012 lmuelle@suse.com
  - s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED;
    (bso#9456).
  - Install manpages only if we install the target; (bso#9459).
  - Users can not be given write permissions any more by default; (bso#9462).
* Sat Dec 08 2012 lmuelle@suse.com
  - Fix MD5 detection in the autoconf build; (bso#9037); (bso#9086); (bso#9094);
    (bso#9418).
  - Use work around for 'winbind use default domain' only if it is set;
    (bso#9367).
  - Allow smb2.acls torture test to pass against smbd with a POSIX ACLs backend;
    (bso#9374).
  - large read requests cause server to issue malformed reply; (bso#9422).
  - s3-rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port(); (bso#9426).
  - Fix ncacn_ip_tcp reconnection code for lsa lookups; (bso#9439).
  - Allow to force DNS updates using net; (bso#9451).
  - Respond correctly to FILE_STREAM_INFO requests; (bso#9460).
* Fri Dec 07 2012 lmuelle@suse.com
  - Update to 4.0.0rc6.
    See WHATSNEW.txt from the samba-doc package.
* Tue Dec 04 2012 lmuelle@suse.com
  - On uninstall remove winbind from the pam configuration, invalidate the nscd
    passwd and group cache and only recommend the install of nscd; (bnc#792340).
* Mon Dec 03 2012 lmuelle@suse.com
  - BuildRequire libnscd-devel once.
* Sun Dec 02 2012 lmuelle@suse.com
  - Remove obsoleted references to pre-9.4 SUSE systems; (bnc#792294).
  - Add SUSE version depending pkg-config requires macro; (bnc#792294).
* Sun Dec 02 2012 lmuelle@suse.com
  - Define library names and use it instead of libldb1, libnetapi0,
    libsmbclient0, libsmbsharemodes0, libtalloc2, libtdb1, libtevent0, and
    libwbclient0; (bnc#792294).
  - Provide and obsolete libsmbsharemodes for post-10.3 SUSE systems.
* Fri Nov 30 2012 lmuelle@suse.com
  - Don't clutter the spec file diff view; (bnc#783384).
* Wed Nov 28 2012 jmcdonough@suse.com
  - Fix fd leak causing 100% CPU in winbind on certain dc connection
    failures; (bso#9436); (bnc#786677).
* Tue Nov 27 2012 ddiss@suse.com
  - Fix spoolss segfault when default devmode is disabled; (bso#9433);
    (bnc#791183).
* Mon Nov 19 2012 lmuelle@suse.com
  - Update to 4.0.0rc5.
    See WHATSNEW.txt from the samba-doc package.
* Fri Nov 16 2012 lmuelle@suse.com
  - ACL masks incorrectly applied when setting ACLs; (bso#9236).
  - s3-kerberos: also try with AES keys, when decrypting tickets; (bso#9272).
  - lib/replace: replace all *printf function if we replace snprintf; (bso#9390).
  - lib/addns: don't depend on the order in resp->answers[]; (bso#9402).
* Tue Nov 13 2012 lmuelle@suse.com
  - s4:torture/smb2: improve the smb2.create.blob tes; (bso#9209).
  - lib/krb5_wrap: request enc_types in the correct order; (bso#9272).
  - Fix net ads join message for the dns domain; (bso#9326).
  - docs-xml: fix use of <smbconfoption> tag; (bso#9345).
  - s3-aio_pthread: Optimize aio_pthread_handle_completion; (bso#9359).
  - s3:winbind: Failover if netlogon pipe is not available; (bso#9386).
* Thu Nov 01 2012 lmuelle@suse.com
  - Execute the run_permissions macro on pre-11.4 systems and else the
    set_permission one if available.
* Mon Oct 29 2012 lmuelle@suse.com
  - Ensure adding the winbind group never can fail.
* Mon Oct 29 2012 lmuelle@suse.com
  - Create ntadmin group only if it doesn't yet exist.
* Mon Oct 29 2012 lmuelle@suse.com
  - Update to 3.6.9.
    + When setting a non-default ACL, don't forget to apply masks to
      SMB_ACL_USER and SMB_ACL_GROUP entries; (bso#9236).
    + Winbind can't fetch user or group info from AD via LDAP; (bso#9147).
    + Fix segfault in smbd if user specified ports out for range; (bso#9218).
* Mon Oct 29 2012 lmuelle@suse.com
  - quota: Don't force the block size to 512; (bso#3272).
  - Fix poll replacement to become a msleep replacement; (bso#8107).
  - Fix wrong test == syntax in configure; (bso#8146).
  - Fix --with(out)-sendfile-support option handling in autoconf; (bso#8344).
  - Fix builtin forms order to match Windows again; (bso#8632).
  - Fix RAW printing for normal users; (bso#8769); (bnc#790741).
  - Initialise ticket to ensure we do not invalid memory; (bso#8788).
  - Fix 'net rpc share allowedusers' to work with 2008r2; (bso#8966).
  - Fix crash on null pam change pw response; (bso#9013).
  - Connection to outbound trusted domain goes offline; (bso#9016).
  - Increase debug level for info that the db is empty; (bso#9112).
  - 'smbclient' can't connect to a Windows 7 server using NTLMv2; (bso#9117).
  - Winbind can't fetch user or group info from AD via LDAP; (bso#9147).
  - Open printers with the right access mask; (bso#9154).
  - Fix makerpms.sh on RHEL; (bso#9165).
  - Remove non-existent option '-Y' from winbindd manpage; (bso#9171).
  - Add quota support for gfs2; (bso#9172).
  - Make SMB2 compound request create/delete_on_close/close work as Windows;
    (bso#9173).
  - Empty SPNEGO packet can cause smbd to crash; (bso#9174).
  - pam_winbind: Match more return codes when wbcGetPwnam has failed;
    (bso#9177).
  - Fix crash bug in idmap_hash; (bso#9188); (bnc#788159).
  - SMB2 Create doesn't return correct MAX ACCESS access mask in blob;
    (bso#9189).
  - Fix service control for non-internal services; (bso#9192).
  - Don't take 'state->te' as indication for "was_deferred"; (bso#9196).
  - Parse of invalid SMB2 create blob can cause smbd crash; (bso#9209).
  - Bad ASN.1 NegTokenInit packet can cause invalid free; (bso#9213).
  - Fix segfault in smbd if user specified ports out for range; (bso#9218).
  - Signing cannot be disabled for SMB2 by design, so fix the documentation
    instead; (bso#9222).
  - Fix NT_STATUS_IO_TIMEOUT during slow import of printers into registry;
    (bso#9231).
  - When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER
    and SMB_ACL_GROUP entries; (bso#9236).
  - lib-addns: ensure that allocated buffer are pre set to 0; (bso#9259).
  - Make tdb robust against shrinking tdbs and improper CLEAR_IF_FIRST restart;
    (bso#9268).
  - Add support for reloading systemd services; (bso#9280).
* Fri Oct 26 2012 lmuelle@suse.com
  - Warn via the smbd log if AppArmor and "wide links" are in use; (bnc#783719).
* Wed Sep 26 2012 lmuelle@suse.com
  - Do not write the build date into the header of the default smb.conf as this
    causses superfluous rebuilds of packages depending on samba; (bnc#781601).
* Wed Sep 26 2012 lmuelle@suse.com
  - Do not prerequire SuSEconfig.permissions as it's already enough and more
    generic to depend on the permissions package; (bnc#782293).
* Mon Sep 17 2012 lmuelle@suse.com
  - Update to 3.6.8.
    + Fix crash bug in smbd caused by a blocking lock followed by close;
      (bso#9084).
    + Fix Winbind panic if we couldn't find the domain; (bso#9135).
* Mon Sep 17 2012 lmuelle@suse.com
  - Backport FSCTL codes and fix segfault in smbstatus from master; (bso#9058).
  - Fix bad call to memcpy source3/registry/regfio.c; (bso#9065).
  - "Domain Users" incorrectly added as additional group on domain members;
    (bso#9066).
  - Use correct RID for "Domain Guests" primary group; (bso#9067).
  - Fix crash bug in smbd caused by a blocking lock followed by close;
    (bso#9084).
  - Fix smbclient/tarmode panic when connecting to Windows 2000 clients;
    (bso#9088).
  - Fix refreshing of Kerberos tickets in Winbind; (bso#9098).
  - Fix identification of idle clients in Winbind to avoid crashes and NDR
    parsing errors; (bso#9104).
  - Fix compilation with newer MIT Kerberos which hides internal symbols;
    (bso#9111).
  - Fix flooding the logs with records we don't find in pcap; (bso#9112).
  - Initialize the print backend after we setup winreg; (bso#9122).
  - Fix lprng job tracking errors; (bso#9123).
  - Fix setting of "inherited" bit on inherited ACE's; (bso#9124).
  - Fix Winbind panic if we couldn't find the domain; (bso#9135).
  - Make 'smbclient allinfo' show the snapshot list; (bso#9137).
  - Fix nfs quota support with Linux nfs4 mounts; (bso#9144).
  - Valid open requests can cause smbd assert due to incorrect oplock handling
    on delete requests; (bso#9150).
* Thu Sep 13 2012 shargagan@novell.com
  - NMB registration for a duplicate workstation fails with registration
    refuse; (bso#9085); (bnc#770056).
* Thu Aug 16 2012 lmuelle@suse.com
  - Remove backup files caused by running configure in examples/VFS.
* Mon Aug 06 2012 lmuelle@suse.com
  - Update to 3.6.7.
    + Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269).
    + Fix migrating printers while upgrading from 3.5.x; (bso#9026).
* Mon Aug 06 2012 lmuelle@suse.com
  - Correct documentation of "case sensitive"; (bso#8552).
  - Printing fails in function cups_job_submit; (bso#8719).
  - Fix kernel oplocks when uid(file) != uid(process); (bso#8974).
  - Send correct responses to NT Transact Secondary when no data and no params
    for the Trans2 calls are set; (bso#8989).
  - Fix build without ads support; (bso#8996).
  - Don't turn negative cache entries into valid idmappings; (bso#9002).
  - Fix posix acl on gpfs; (bso#9003).
  - Make vfs_gpfs less verbose in get/set_xattr functions; (bso#9022).
  - Fix migrating printers while upgrading from 3.5.x; (bso#9026).
  - Fix typo in set_re_uid() call when USE_SETRESUID selected in configure;
    (bso#9034).
  - Using asynchronous IO with SMB2 can return NT_STATUS_FILE_CLOSED in error
    instead ofNT_STATUS_FILE_LOCK_CONFLICT; (bso#9040).
  - Fix resolving our own "Domain Local" groups; (bso#9052); (bnc#779269).
  - Fix build against CUPS 1.6; (bso#9055).
  - Fix bugs in SMB2 credit handling code; (bso#9057).
  - rpcclient: Fix bad call to data_blob_const; (bso#9062).
* Fri Jul 20 2012 lmuelle@suse.com
  - Create missing doc directories while install.
  - Remove no longer existing Manifest file from install.
  - Don't creat a link to non existend html man pages for swat.
  - Don't call the no longer existing libsmbclient testsuit while build.
* Fri Jul 20 2012 lmuelle@suse.com
  - Configure with option --mandir instead --with-mandir.
  - Remove obsoleted --with-rootsbindir, --with-nmbdsocketdir, and
    - -with-swatdir configure options.
* Thu Jul 19 2012 lmuelle@suse.com
  - Update to 4.0.0beta4.
    See WHATSNEW.txt from the samba-doc package.
* Mon Jul 16 2012 lmuelle@suse.com
  - BuildRequire gcc, make, and patch; (bnc#771516).
* Wed Jul 11 2012 lmuelle@suse.com
  - ndr: fix push/pull DATA_BLOB with NDR_NOALIGN; (bso#9026); (bnc#770262).
* Wed Jul 11 2012 lmuelle@suse.com
  - Fix shell syntax in dhcpcd hook script; (bnc#769957).
* Wed Jun 27 2012 lmuelle@suse.com
  - Add missing int declaration to the net kdc lookup patch.
* Mon Jun 25 2012 lmuelle@suse.com
  - Update to 4.0.0beta2.
    See WHATSNEW.txt from the samba-doc package.
* Mon Jun 25 2012 lmuelle@suse.com
  - Update to 3.6.6.
    + Fix possible memory leaks in the Samba master process; (bso#8970).
    + Fix uninitialized memory read in talloc_free(); (bnc#764577).
    + Fix joining of XP Pro workstations to 3.6 DCs; (bso#8373); (bnc#787983).
* Thu Jun 21 2012 lmuelle@suse.com
  - resolve_ads() code can return zero addresses and miss valid DC IP addresses;
    (bso#8910).
  - Can't join XP Pro workstations to 3.6.1 DC; (bso#8373); (bnc#787983).
  - winbind can hang as nbt_getdc() has no timeout; (bso#8953).
  - Fix crash bug in dns_create_probe when dns_create_update fails; (bso#8627)
  - s3-pid: Catch with pid filename's change when config file is not smb.conf;
    (bso#8714).
  - Possible memory leaks in the main Samba process; (bso#8970).
  - s3: Fix uninitialized memory read in talloc_free(); (bnc#764577).
  - Treat exit_server_cleanly() as a "clean" shutdown; (bso#8971).
  - Avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute(); (bso#8988).
  - Winzip occasionally can not read files out of an open winzip dialog;
    (bso#8311).
  - s3-winbindd: call dump_core_setup after command line option has been parsed;
    (bso#8975).
  - Directory group write permission bit is set if unix extensions are enabled;
    (bso#8972).
  - s3: remove dependency on automake for "make everything"; (bso#8978).
  - sd_has_inheritable_components segfaults on an SD that se_access_check
    accepts; (bso#8811).
  - smbclient's tarmode insists on listing excluded directories; (bso#8922).
  - Notify code can miss a ChDir; (bso#8998).
  - s3:smbd: add a fsp_persistent_id() function; (bso#8995).
* Mon Jun 04 2012 lmuelle@suse.com
  - Call autogen.sh even on post-12.1 SUSE systems.
* Fri Jun 01 2012 lmuelle@suse.com
  - Don't call autogen.sh on post-12.1 SUSE and post-14 Fedora systems.
  - Recompile all IDL in any case.
* Fri Jun 01 2012 lmuelle@suse.com
  - BuildIgnore libtalloc and libtdb to prevent a package conflict on Fedora
    systems.
* Thu May 31 2012 lmuelle@suse.com
  - Install talloc.pc only on pre-12.2 and non SUSE systems.
* Thu May 31 2012 lmuelle@suse.com
  - BuildRequire libldb-devel, libtalloc-devel, libtdb-devel, and
    libtevent-devel on post-12.1 systems.
* Wed May 30 2012 lmuelle@suse.com
  - s3: Fix a segfault with debug level 3 on Solaris; (bso#8861).
  - s3: wbinfo --lookup-sids "" crashes winbind; (bso#8904).
  - smbd crashes when deleting directory and veto files are enabled; (bso#8837).
  - winbind_krb5_locator only returns one IP address; (bso#8897).
  - Wrong assertion/comparison: Compare value not pointer; (bso#8859).
  - Inconsistent (with manpage) command-line switch for "help" in smbtree;
    (bso#8831).
  - Fix incorrect debug statement.
  - Setting traverse rights fails to enable directory traversal when acl_xattr
    in use; (bso#8857).
  - Syslog broken owing to mistyping of debug_settings.syslog; (bso#8877).
  - s3/ldap: remove outdated netscape ds 5 schema file; (bso#8869).
  - s3-docs: fixes several typos; (bso#7938).
  - s3-VFS: Fix building out-of-tree modules; (bso#8822).
  - s3-docs: Add hint that setting "profile acls = yes" on normal shares can
    cause trouble; (bso#7930).
  - s3-pam_winbind: Fix the build with a newer iniparser library; (bso#8915).
  - Avoid null dereference in initialize_password_db(); (bso#8920).
  - s3:registry: implement values_need_update and subkeys_need_update in the
    smbconf backend.
  - s3:registry:reg_api: fix reg_queryvalue to not fail when values are
    modified while it runs.
  - s4:torture:rpc:spoolss: also initialize driverName before checking it in
    test_PrinterData_DsSpooler().
  - s3:registry: multiple cleanups, fixes, and optimisations.
  - s3:auth/server_info: the primary rid should be in the groups rid array;
    (bso#8798).
  - s3-printing: Add new printers to registry; (bso#8554); (bso#8612);
    (bso#8748).
  - Fix the overwriting of errno before use in a DEBUG statement and use the
    return value from store_acl_blob_fsp rather than ignoring it; (bso#8945).
  - s3-auth: Don't lookup the system user in pdb; (bso#8944).
  - s3-passdb: Fix negative SID->uid/gid cache handling; (bso#8952).
  - Fix typo in pam_winbindd code; (bso#8957).
  - Fix remove_duplicate_addrs2 previously it could leave zero addresses in the
    list; (bso#8910).
  - Slow but responsive DC can lock up winbindd; (bso#8943).
  - Broken processing of %U with vfs_full_audit when force user is set;
    (bso#8882).
* Tue May 15 2012 lmuelle@suse.com
  - Disable included build of ldb, talloc, tdb, and tevent on post-12.1 systems.
  - BuildRequire libldb1-devel, libtalloc2-devel, libtdb1-devel, and
    libtevent0-devel on post-12.1 systems.
* Wed May 02 2012 lmuelle@suse.com
  - Add PreReq /etc/init.d/nscd to the winbind package; (bnc#759731).
* Sat Apr 21 2012 lmuelle@suse.com
  - docs-xml: fix default name resolve order; (bso#7564).
  - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836).
  - docs: remove whitespace in example samba.ldif; (bso#8789).
  - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845);
    (bnc#730769).
  - s3-docs: Prepend '/' to filename argument; (bso#8826).
* Fri Apr 20 2012 lmuelle@suse.com
  - Update to 3.6.5.
  - Restrict self granting privileges where security=ads for Samba post-3.3.16;
    CVE-2012-2111; (bnc#757576).
* Fri Apr 13 2012 ddiss@suse.de
  - Remove all precompiled idl output to ensure any pidl changes take effect;
    (bnc#757080).
* Tue Apr 10 2012 lmuelle@suse.com
  - Update to 3.6.4.
  - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe-
    cution as the "root" user; PIDL based autogenerated code allows overwriting
    beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).
* Sun Mar 25 2012 lmuelle@suse.de
  - s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys;
    (bso#8599).
  - Correctly handle DENY ACEs when privileges apply; (bso#8797).
* Fri Mar 16 2012 lmuelle@suse.de
  - s3:smb2_server: fix a logic error, we should sign non guest sessions;
    (bso8749).
  - Allow vfs_aio_pthread to build as a static module; (bso#8723).
  - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for
    persistent dbs; (#bso8527).
  - s3: segfault in dom_sid_compare(bso#8567).
  - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER;
    (bso#8768).
  - s3-winbindd: Close netlogon connection if the status returned by the
    NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771).
  - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599).
  - Fix problem when calculating the share security mask, take priviliges into
    account for the connecting user; (bso#8784).
* Thu Mar 15 2012 ddiss@suse.de
  - Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups;
    (bso#8807); (bnc#751454).
* Wed Mar 14 2012 lmuelle@suse.de
  - Remove obsoleted Authors lines from spec file for post-11.2 systems.
* Mon Feb 27 2012 lmuelle@suse.de
  - Make ldapsmb build with Fedora 15 and 16; (bso#8783).
  - BuildRequire libuuid-devel for post-11.0 and other systems.
  - Define missing python macros for non SUSE systems.
  - PreReq to fillup_prereq and insserv_prereq only on SUSE systems.
  - Always use cifstab instead of smbfstab on non SUSE systems.
* Mon Feb 20 2012 lmuelle@suse.de
  - Ensure AndX offsets are increasing strictly monotonically in pre-3.4
    versions; CVE-2012-0870; (bnc#747934).
* Fri Feb 17 2012 ddiss@suse.de
  - Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854).
* Thu Feb 16 2012 ddiss@suse.de
  - s3-printing: fix crash in printer_list_set_printer(); (bso#8762);
    (bnc#746825).
* Mon Feb 06 2012 lmuelle@suse.de
  - s3:winbindd fix a return code check; (bso#8406).
* Mon Feb 06 2012 lmuelle@suse.de
  - s3: Add rmdir operation to streams_depot; (bso#8733).
* Mon Feb 06 2012 lmuelle@suse.de
  - s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used();
    (bso#8738); CVE-2013-0454; (bnc#811975).
* Mon Feb 06 2012 lmuelle@suse.de
  - s3:auth: fill the sids array of the info3 in
    wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).
* Mon Feb 06 2012 lmuelle@suse.de
  - s3:client: ignore SMBecho errors (the server may not support it);
    (bso#8139).
* Mon Feb 06 2012 lmuelle@suse.de
  - Be more strict when using PAM_AUTH API from winbind if Kerberos auth is
    enabled and don't unintentionally use a bogus domain name; (bso#8734).
* Mon Feb 06 2012 lmuelle@suse.de
  - smbclient fails with posix large reads; (bso#8727).
* Thu Feb 02 2012 lmuelle@suse.de
  - Use the smbfs init script on versions pre-11.3, or cifs in later versions;
    (bnc#744614).
* Mon Jan 30 2012 lmuelle@suse.de
  - s3: Compile IDL files in autogen, some configure tests need this.
* Mon Jan 30 2012 fcrozat@suse.com
  - Fixes various deadlocks in if-up.d / if-down.d when running under
    systemd; (bnc#732395).
* Sun Jan 29 2012 lmuelle@suse.de
  - Update to 3.6.3.
    + Fix memory leak in parent smbd on connection; CVE-2012-0817; (bso#8724);
      (bnc#743986).
* Thu Jan 26 2012 lmuelle@suse.de
  - Use spdx.org compliant license names for all packages.
* Wed Jan 25 2012 lmuelle@suse.de
  - Update to 3.6.2.
    + Make Winbind receive user/group information (bug #8371).
    + Several SMB2 fixes.
    + Fix a crash bug in the spoolss code.
    + Add new contributing FAQ announcing acceptance of corporate (C).
    + DeletePrinterDriverEx deletes files in use; (bso#4942); (bnc#742504).
    + Fix cli_write_and_x() against OS/2 print shares; (bso#5326).
    + Fix 'smbclient tar' for files greater than 8GB on BE machines; (bso#563);
      (bnc#726145).
    + Remove pointless use_memory_krb5_ccache; (bso#7465).
    + Fix perl path; (bso#8176).
    + Grant credits in async interim responses (SMB2); (bso#8357).
    + Make Winbind receive user/group information; (bso#8371).
    + Fix Windows XP clients crashing smbd process every once in a while;
      (bso#8384); (bnc#731571).
    + Make VFS op "streaminfo" stackable; (bso#8419).
    + Add an allocation pool to idmap_autorid; (bso#8444).
    + Fix SEGFAULT from net registry export on not zero terminated REG_SZ
      values; (bso#8528).
    + Make DSO_EXPORTS_CMD more portable; (bso#8531).
    + readlink() on Linux clients fails if the symlink target is outside of the
      share; (bso#8541).
    + smbclient posix_open command fails to return correct info on open file;
      (bso#8542).
    + winbind_samlogon_retry_loop ignores logon_parameters flags; (bso#8548).
    + Fix setting the machine account password; (bso#8550).
    + Make SMB2 handle compound request headers in the same way as Windows;
      (bso#8560).
    + Password change settings not fully observed; (bso#8561).
    + Fix double free error in talloc; (bso#8562).
    + Fix alignment in the non-extended-security negprot; (bso#8573).
    + Add systemd service files; (bso#8575).
    + Add systemd service files; (bso#8575).
    + smb2_flush: Don't send uninitialized memory; (bso#8579).
    + Enable inotify if sys or kernel inotify is available; (bso#8580).
    + Increase a debug level; (bso#8585).
    + libsmb: Only align unicode pipe_name; (bso#8586).
    + Fix marshalling of samr_ChangePasswordUser3; (bso#8591).
    + Don't limit the number of open dptrs for SMB2; (bso#8592).
    + Fix a crash bug in cldap_socket_recv_dgram(); (bso#8593).
    + Make cldap work over IPv6; (bso#8600).
    + Fix intermittent print job failures caused by character conversion errors;
      (bso#8606).
    + Improve configure.in so it can be used outside the Samba source tree;
      (bso#8607).
    + Winbind: Don't fail on users without a uid; (bso#8608).
    + Ensure we correctly calculate reply credits over all returned SMB2
      replies; (bso#8614).
    + Fix migrate printer code; (bso#8618).
    + Fix crash bug when trying to browse Samba printers; (bso#8623).
    + libsmb: Don't duplicate Kerberos service tickets; (bso#8628).
    + POSIX ACE x permission becomes rx following mapping to and from a DACL;
      (bso#8631).
    + When returning an ACL without SECINFO_DACL requested, we still set
      SEC_DESC_DACL_PRESENT in the type field; (bso#8636).
    + Fix the vfs_commit module; (bso#8639).
    + Add an update function for Winbind cache; (bso#8643).
    + vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries
      on a directory with no stored ACL; (bso#8644).
    + Document the "ignore system acls" option of vfs_acl_xattr and vfs_acl_tdb
      vfs modules; (bso#8652).
    + Fix deleting a symlink if the symlink target is outside of the share;
      (bso#8663).
    + Fix renaming a symlink if the symlink target is outside of the share;
      (bso#8664).
    + Fix NT ACL issue; (bso#8673).
    + Fix buffer overflow issue with AES encryption in samba traffic analyzer;
      (bso#8674).
    + Fix Winbind segfault if we can't map the last user; (bso#8678).
    + recvfile code path using splice() on Linux leaves data in the pipe on
      short write; (bso#8679).
    + Try ctdbd_init_connection() as root; (bso#8684).
    + Packet validation checks can be done before length validation causing
      uninitialized memory read; (bso#8686).
    + Fix typo in 'net memberships' usage; (bso#8687).
    + libads: Fix malloc/talloc mismatch in ads_keytab_verify_ticket();
      (bso#8692).
    + Make DeletePrinterDriverEx remove printer driver files; (bso#8697)
      (bnc#740810).
    + Fix major leak with SMB2 in connections.tdb; (bso#8710).
* Wed Jan 25 2012 lmuelle@suse.de
  - s3-spoolss: Pass the right pointer type; (bso#4942); (bnc#742504).
* Wed Jan 25 2012 lmuelle@suse.de
  - Use correct license, LGPLv3+ for libwbclient packages.
* Tue Jan 24 2012 lmuelle@suse.de
  - When returning an ACL without SECINFO_DACL requested, we still set
    SEC_DESC_DACL_PRESENT in the type field; (bso#8636).
* Tue Jan 24 2012 ddiss@suse.de
  - Fix incorrect types in the full_audit VFS module. Add null terminators to
    audit log enums; (bnc#742885).
* Sun Jan 22 2012 ddiss@suse.de
  - Prefix print$ path on driver file deletion; (bso#8697); (bnc#740810).
  - Fix printer_driver_files_in_use() call ordering; (bso#4942); (bnc#742504).
* Sat Jan 21 2012 lmuelle@suse.de
  - Buffer overflow issue with AES encryption in samba traffic analyzer;
    (bso#8674).
  - NT ACL issue; (bso#8673).
  - Deleting a symlink fails if the symlink target is outside of the share;
    (bso#8663).
  - connections.tdb - major leak with SMB2; (bso#8710).
* Wed Jan 18 2012 lmuelle@suse.de
  - Renaming a symlink fails if the symlink target is outside of the share;
    (bso#8664).
* Tue Jan 17 2012 lmuelle@suse.de
  - Intermittent print job failures caused by character conversion errors;
    (bso#8606).
  - ads_keytab_verify_ticket mixes talloc allocation with malloc free;
    (bso#8692).
  - libcli/cldap: fix a crash bug in cldap_socket_recv_dgram(); (bso#8593).
  - s3:lib/ctdbd_conn: try ctdbd_init_connection() as root; (bso#8684).
  - s3-printing: fix migrate printer code; (bso#8618).
  - Packet validation checks can be done before length validation causing
    uninitialized memory read; (bso#8686).
* Mon Jan 16 2012 lmuelle@suse.de
  - net memberships usage info was wrong; (bso#8687).
  - s3-libsmb: Don't duplicate kerberos service tickets; (bso#8628).
  - Recvfile code path using splice() on Linux leaves data in the pipe on short
    write; (bso#8679).
  - s3-winbind: Fix segfault if we can't map the last user; (bso#8678).
  - vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on
    a directory with no stored ACL; (bso#8644).
  - s3/doc: document the ignore system acls option of vfs_acl_xattr and
    vfs_acl_tdb; (bso#8652).
  - Winbind can't receive any user/group information; (bso#8371).
  - s3-winbind: Add an update function for winbind cache; (bso#8643).
  - s3: Attempt to fix the vfs_commit module.
  - POSIX ACE x permission becomes rx following mapping to and from a DACL;
    (#bso#8631).
  - s3:libsmb: only align unicode pipe_name; (bso#8586).
  - s3-winbind: Don't fail on users without a uid; (bso#8608).
  - Crash when trying to browse samba printers; (bso#8623).
  - talloc: double free error; (bso#8562).
  - cldap doesn't work over ipv6; (bso#8600).
  - s3:libsmb: fix cli_write_and_x() against OS/2 print shares; (bso#5326).
  - SMB2: not granting credits for all requests in a compound request;
    (bso#8614).
  - smb2_flush sends uninitialized memory; (bso#8579).
  - Password change settings not fully observed; (bso#8561).
  - s3:smb2_server: grant credits in async interim responses; (bso#8357).
  - s3:smbd: don't limit the number of open dptrs for smb2; (bso#8592).
  - samr_ChangePasswordUser3 IDL incorrect; (bso#8591).
  - idmap_autorid does not have allocation pool; (bso#8444).
  - Add systemd service files.
  - s3:libsmb: the workgroup in the non-extended-security negprot is not
    aligned; (bso#8573).
  - s3-build: Fix inotify detection; (bso#8580).
  - SMB2 doesn't handle compound request headers in the same way as Windows;
    (#bso8560).
  - Disconnecting clients swamp the logs; (bso#8585).
  - s3-netlogon: Fix setting the machinge account password; (bso#8550).
  - winbind_samlogon_retry_loop ignores logon_parameters flags; (#bso8548).
  - smbclient posix_open command fails to return correct info on open file;
    (bso#8542).
  - readlink() on Linux clients fails if the symlink target is outside of the
    share; (bso#8541).
  - s3-netapi: remove pointless use_memory_krb5_ccache; (bso#7465).
  - s3:Makefile: make DSO_EXPORTS_CMD more portable; (bso#8531).
  - s3:registry: fix the test for a REG_SZ blob possibly being a zero terminated
    ucs2 string; (bso#8528).
  - Make VFS op "streaminfo" stackable; (bso#8419).
* Tue Jan 03 2012 ddiss@suse.de
  - Fix incorrect perfcount array length calculations; (bnc#739258).
* Wed Dec 21 2011 coolo@suse.com
  - BuildRequire autoconf to avoid implicit dependency for post-11.4 systems.
* Wed Dec 21 2011 coolo@suse.com
  - Remove call to suse_update_config macro for post-11.4 systems.
* Mon Dec 19 2011 lmuelle@suse.de
  - Use samba.org for the ldapsmb source location.
* Wed Dec 07 2011 shargagan@novell.com
  - Fixing libsmbsharemode dependency on ldap and krb5 libs in Makefile;
    (bnc #729516).
* Fri Nov 25 2011 ddiss@suse.de
  - Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES;
    (bso#8631); (bnc#732572).
* Fri Nov 25 2011 lmuelle@suse.de
  - Add ldap to Should-Start and Stop of the smb init script; (bnc#730046).
* Sat Nov 19 2011 ddiss@suse.de
  - Fix smbd srv_spoolss_replycloseprinter() segfault; (bso#8384); (bnc#731571).
* Fri Nov 04 2011 ddiss@suse.de
  - Fix pam_winbind.so segfault in pam_sm_authenticate(); (bso#8564).
* Tue Nov 01 2011 ddiss@suse.de
  - Fix smbclient >8GB tars on big endian machines; (bso#563); (bnc#726145).
* Mon Oct 31 2011 ddiss@suse.de
  - Fix typo in net ads join output; (bnc#713135).
* Thu Oct 27 2011 lmuelle@suse.de
  - Ignore a potentially missing AppArmor snippet helper script; (bnc#725256).
* Thu Oct 20 2011 lmuelle@suse.de
  - Update to 3.6.1.
    + Fix smbd crashes triggered by Windows XP clients; (bso#8384).
    + Fix a Winbind race leading to 100% CPU load; (bso#8409).
    + Several SMB2 fixes.
    + The VFS ACL modules are no longer experimental but production-ready.
    + Fix 'net ads join -k' when KRB5CCNAME is not set; (bso#7465).
    + smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
    + Return error of cli_push when 'put - /some/file' is used; (bso#7551).
    + Fix usage of cli_errstr(); (bso#7864).
    + Fix 'widelinks' regression; (bso#8229).
    + Empty notify servername; (bso#8236).
    + Add man vfs_aio_fork; (bso#8256).
    + smb2: smbd logs "Invalid SMB packet: first request: 0x0008" and crashes;
      (bso#8334).
    + Add a fallback for missing open&x support in MAC OS/X Lion; (bso#8338).
    + While migrating forms, don't fail if the form already exists; (bso#8351).
    + OS/2 sends an unexpected write&x/read&x chain; (bso#8360).
    + Fix build of vfs_prealloc on SLES8; (bso#8363).
    + Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4; (bso#8364).
    + Fix the fallback to the deprecated spelling idmap:script; (bso#8368).
    + Fix vfs_chown_fsp; (bso#8370).
    + Fix smbd crashes triggered by Windows XP clients; (bso#8384).
    + Fix smbclient access to NT4 shares; (bso#8385).
    + Optimize serverid_exists() for Solaris; (bso#8395).
    + registry/reg_format.c must include includes.h; (bso#8401).
    + SMB2 server can return requests out-of-order when processing a compound
      request; (bso#8407).
    + Fix a Winbind race leading to 100% CPU load; (bso#8409).
    + Fix "saving as" of MS Office 2007 (Word) documents on Samba shares with
      SMB2; (bso#8412).
    + Fix 'getent group' if trusted domains are not reachable; (bso#8420).
    + Fix infinite loop in ACL module code; (bso#8422).
    + Fix wrong reply to DHnC (durable handle reconnect); (bso#8428).
    + Compound SMB2 requests on an IPC connection can corrupt the reply stream;
      (bso#8429).
    + Fix segfault in iconv.c; (bso#8433).
    + NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
      (bso#8442).
    + Be smarter about setting default permissions when a ACL_USER_OBJ isn't
      given; (bso#8443).
    + Check the wct of the incoming SMBnegprot responses; (bso#8452).
    + Fix smbclient segfaults when dialect option -m is used for legacy
      dialects; (bso#8453).
    + Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
    + Samba PDC is looking up only primary user group; (bso#8455).
    + IE9 on Windows 7 cannot download files to samba 3.5.11 share; (bso#8458).
    + smb2_find uses a hard coded max reply size of 0x10000 instead of
      smb2_max_trans; (bso#8473).
    + SMB2 create doesn't cope with an Apple client using NULL blob in create;
      (bso#8474).
    + Don't call smbd_terminate_connection in smb2_validate_message_id();
      (bso#8476).
    + Samba asserts when SMB2 client breaks the crediting rules; (bso#8476).
    + Map to guest can return uninitialized blob of data; (bso#8477).
    + acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
    + DFS breaks zip file extracting unless "follow symlinks = no" set;
    (bso#8493).
    + Remove "experimental" label on VFS ACL modules; (bso#8494).
    + SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
    + smbd doesn't correctly honor the "force create mode" bits from a cifsfs
      create; (bso#8507).
    + Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER;
      (bso#8509).
    + Disallow "." in can_set_delete_on_close(); (bso#8515).
    + SMB2 create call returns incorrect file allocation size; (bso#8518).
    + Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements;
      (bso#8520).
    + Winbind cache timeout expiry test was reversed; (bso#8521).
* Tue Oct 18 2011 lmuelle@suse.de
  - s3/doc: add man page for aio_fork vfs module.
* Tue Oct 18 2011 lmuelle@suse.de
  - Fix uninitialized memory problem in group_sids_to_info3; (bso#8455).
* Tue Oct 18 2011 lmuelle@suse.de
  - s3: Samba PDC is looking up only primary user group; (bso#8455).
* Tue Oct 18 2011 lmuelle@suse.de
  - Add script to create or update an AppArmor sniplet with permissions for all
    Samba shares; (bnc#688040).
* Tue Oct 18 2011 jmcdonough@suse.de
  - Add "ldapsam:login cache" parameter to allow explicit disabling
    of the login cache; (bnc#723261).
* Fri Oct 14 2011 ddiss@suse.de
  - Retain the smbd startproc return value for correct startup status reporting.
    unset was incorrectly being called prior to rc_status; (bnc#723724).
* Fri Oct 14 2011 ddiss@suse.de
  - Prevent deadlock in systemd triggered by if-down.d handler on shutdown;
    (bnc#721598).
* Thu Oct 13 2011 lmuelle@suse.de
  - smb2_find uses a hard coded max reply size of 0x10000 instead of
    smb2_max_trans; changed defaults and documentation (bso8473).
* Thu Oct 13 2011 lmuelle@suse.de
  - Empty CIFS share can be blocked for other clients by deleting it via empty
    path (DELETE_PENDING until the last client); (bso#8515).
* Wed Oct 12 2011 lmuelle@suse.de
  - winbindd cache timeout expiry test was reversed; (bso#8521).
* Wed Oct 12 2011 lmuelle@suse.de
  - Fix SMB2 SMB2_OP_GETINFO and SMB2_OP_IOCTL parsing requirements; (bso#8520).
* Wed Oct 12 2011 lmuelle@suse.de
  - s3:smb2_create: fix allocation size return value when opening existing
    files; (bso#8518).
* Wed Oct 12 2011 lmuelle@suse.de
  - SMB2 create doesn't cope with an Apple client using NULL blob in create;
    (bso#8474).
* Wed Oct 12 2011 lmuelle@suse.de
  - NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking renames;
    (bso#8442).
* Wed Oct 12 2011 lmuelle@suse.de
  - s3-docs: Fix bug (bso#7908) and typo.
* Mon Oct 10 2011 lmuelle@suse.de
  - Return error of cli_push when 'put - /some/file' is used; (bso#7551).
* Mon Oct 10 2011 lmuelle@suse.de
  - Read-only handles on SAMR allow SAMR_DOMAIN_ACCESS_CREATE_USER; (bso#8509).
* Mon Oct 10 2011 lmuelle@suse.de
  - smbd doesn't correctly honor the "force create mode" bits from a cifsfs
    create; (bso#8507).
* Mon Oct 10 2011 lmuelle@suse.de
  - Default user entry is set to minimal permissions on incoming ACL change with
    no user specified; (bso#8443).
* Mon Oct 10 2011 lmuelle@suse.de
  - smb_acl_to_posix: ACL is invalid for set (Invalid argument); (bso#7509).
* Mon Oct 10 2011 lmuelle@suse.de
  - Handle the SECINFO_LABEL flag in the same was as Win2k3; enable Microsoft
    Internet Explorer 9 on Windows 7 to download files; (bso#8458).
* Mon Oct 10 2011 lmuelle@suse.de
  - DFS breaks zip file extracting unless "follow symlinks = no" set;
    (bso#8493).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-docs: Fix typos.
* Mon Oct 10 2011 lmuelle@suse.de
  - s3:smb2_server: SMB2_OP_CANCEL requests don't have to be signed; (bso#8503).
* Mon Oct 10 2011 lmuelle@suse.de
  - Remove "experimental" label on VFS ACL modules; (bso#8494).
* Mon Oct 10 2011 lmuelle@suse.de
  - acl_xattr can free an invalid pointer if no blob is loaded; (bso#8480).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-smbd: asserts when SMB2 client breaks the crediting rules; (bso#8476).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-libnet: allow to use default krb5 ccache in libnet_Join/libnet_Unjoin;
    (bso#7465).
* Mon Oct 10 2011 lmuelle@suse.de
  - smb2_find uses a hard coded max reply size of 0x10000 instead of
    smb2_max_trans; (bso#8473).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-netapi: allow to use default krb5 credential cache for libnetapi users.
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-docs: document -k switch in net manpage.
* Mon Oct 10 2011 lmuelle@suse.de
  - Map to guest can return uninitialized blob of data; (bso#8477).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-registry: registry/reg_format.c must include includes.h; (bso#8401).
* Mon Oct 10 2011 lmuelle@suse.de
  - smbclient segfaults when option -m is used for legacy dialects; (bso#8453).
* Mon Oct 10 2011 lmuelle@suse.de
  - Fix 'widelinks' regression intro'd in 3.2; (bso#8229).
* Mon Oct 10 2011 lmuelle@suse.de
  - Compound SMB2 requests on an IPC connection can corrupt the reply stream;
    (bso#8429).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-spoolss: Fix bug forms migration; (bso#8351).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3:libsmb: check the wct of the incoming SMBnegprot responses; (bso#8452).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3: Do not fork the echo handler for smb2; (bso#8334).
* Mon Oct 10 2011 lmuelle@suse.de
  - s3-spoolss: Fix bug empty notify servername; (bso#8236).
* Mon Oct 10 2011 lmuelle@suse.de
  - SMB2 server can return requests out-of-order when processing a compound
    request; (bso#8407).
* Fri Oct 07 2011 lmuelle@suse.de
  - Remove smb child crash fix.  The issue had been fixed upstream differently.
* Sun Oct 02 2011 lmuelle@suse.de
  - BuildRequire ctdb-devel version greater than 1.0.105 for post-10.0 systems.
* Tue Sep 27 2011 hhetter@suse.de
  - Fix samba duplicates file content on appending. Move posix case semantics
    out from under the VFS; (bso#6898); (bnc#681208).
* Wed Sep 21 2011 jmcdonough@suse.de
  - Make winbind child reconnect when remote end has closed, fix
    failing sudo; (bso#7295); (bnc#569721).
* Fri Sep 09 2011 lmuelle@suse.de
  - Spec file cleanup as suggested by the spec-cleaner tool.
    + Make all BuildRequires, PreReq, and Provides a separate line.
    + Use %{buildroot} instead of ${RPM_BUILD_ROOT}.
    + Use straight commands instead of macros (make, install).
    + Use -p in post and postun if we only call one command.
    + Use %{_localstatedir} instead of %{_var} in the filelist.
    + Remove superfluous AutoReqProv on lines.
* Thu Sep 08 2011 lmuelle@suse.de
  - Remove %release from all Provides.
* Thu Sep 01 2011 lmuelle@suse.de
  - Fix segfault in iconv.c which caused a null pointer dereference; (bso#8433).
* Wed Aug 31 2011 lmuelle@suse.de
  - Use /var/run for the cifs state file in the init script too; (bnc#710304).
* Tue Aug 30 2011 lmuelle@suse.de
  - Microsoft Word from Microsoft Office 2007 fails to save as on a share with
    SMB2; (bso#8412).
* Tue Aug 30 2011 lmuelle@suse.de
  - Use sys_write and sys_read in fork_domain_child to fix a winbind race
    leading to 100% CPU usage; (bso#8409).
* Tue Aug 30 2011 lmuelle@suse.de
  - Fix wrong reply to smb2 durable handle reconnect (DHnC) request; (bso#8428).
* Tue Aug 30 2011 lmuelle@suse.de
  - Fix infinite loop in ACL module code; (bso#8422).
* Mon Aug 29 2011 lmuelle@suse.de
  - Fix getent group if trusted domains are not reachable; (bso#8420).
* Mon Aug 29 2011 lmuelle@suse.de
  - smbclient can't access a NT4 share since 3.6.0; (bso#8385).
* Sat Aug 27 2011 lmuelle@suse.de
  - Optimize serverid_exists() for Solaris; (bso#8395).
* Sat Aug 27 2011 lmuelle@suse.de
  - talloc:
    + check block count after references test.
    + added test suite for talloc_free_children().
    + license info erratum in the manpage.
    + fix typos and better differentiation between versions 1 and 2.
    + preserve context name on talloc_free_children().
    + ensure the sibling linked list remains valid during a free.
* Sat Aug 27 2011 lmuelle@suse.de
  - vfs_chown_fsp returned in the wrong directory; (bso#8370).
* Sat Aug 27 2011 lmuelle@suse.de
  - Remove irritating "." targets when recent system libs exist; (bso#8369).
* Sat Aug 27 2011 lmuelle@suse.de
  - Correctly initialize "idmap config * : script" with NULL; (bso#8368).
* Sat Aug 27 2011 lmuelle@suse.de
  - Add missing include to suppress compiler warnings; (bso#8365).
* Sat Aug 27 2011 lmuelle@suse.de
  - Point the chain offset beyond the current request; (bso#8360).
* Sat Aug 27 2011 lmuelle@suse.de
  - Fix gpfs vfs module build; (bso#8364).
* Sat Aug 27 2011 lmuelle@suse.de
  - Make vfs_prealloc even build on older systems; (bso#8363).
* Sat Aug 27 2011 lmuelle@suse.de
  - Do central cli_set_error and return the actual NTSTATUS; (bso#7864).
* Sat Aug 27 2011 lmuelle@suse.de
  - Add a fallback for missing open&x support in OS/X Lion; (bso#8338).
* Tue Aug 09 2011 lmuelle@suse.de
  - Update to 3.6.0.
    + BUG 7462: Make SA_RESETHAND conditional on its existance.
    + BUG 8303: db_ctdb_send_schedule_for_deletion() is not defined.
    + BUG 8324: smbclient cannot list directories from a big-endian machine.
    + BUG 8326: WinXP cannot join a Samba3 domain with a 'even' hostname.
    + BUG 8327: Fix the reload of the configuration, also reload activated
      registry shares.
    + BUG 8328: Cleanup of idmap_tdb2 code.
    + BUG 8330: Fix NFSv4 ACL merging logic.
    + BUG 8335: File copy aborts with smb2_validate_message_id: bad message_id.
    + BUG 8341: Fix segfault in libsmbclient.
    + BUG 8343: Fix SMB2 crash reading with aio_fork beyond the end of file.
    + BUG 8347: Fix regression for HP-UX, AIX and OSF.
    + BUG 8357: Make sure we grant credits on async read/write operations.
    + BUG 8358: Fix a bug in run_poll_events().
    + BUG 8362: Fix build issue on old glibc systems.
* Mon Aug 08 2011 lmuelle@suse.de
  - Remove references to disabled vscan build.
* Thu Aug 04 2011 lmuelle@suse.de
  - Add missing define, includes, and initialization to get_printing_ticket.
* Thu Aug 04 2011 lmuelle@suse.de
  - Use /var/run for the cifs state file; (bnc#710304).
* Mon Aug 01 2011 lmuelle@suse.de
  - Fix #ifdef CTDB_CONTROL_SCHEDULE_FOR_DELETION issue; (bso#8303).
* Mon Aug 01 2011 lmuelle@suse.de
  - File copy aborts with smb2_validate_message_id: bad message_id; (bso#8335).
* Sun Jul 31 2011 lmuelle@suse.de
  - Fix reload of the configuration and also reload activated registry shares;
    (bso#8327).
* Sun Jul 31 2011 lmuelle@suse.de
  - WinXP cannot join a Samba3 domain with a 'even' hostname; (bso#8326).
* Thu Jul 28 2011 lmuelle@suse.de
  - smbclient cannot list directories from a big-endian machine; (bso#8324).
* Wed Jul 27 2011 lmuelle@suse.de
  - Update to 3.6.0rc3.
    + BUG 7841: Explicitly pass domain_sid to wbint_LookupRids().
    + BUG 7888: Deal with buggy 3.0 based PDCs.
    + BUG 8083: Fix "inherit owner = yes" with vfs_acl_xattr or vfs_acl_tdb
      module.
    + BUG 8102: Do not allow to change file ACLs from normal domusers.
    + BUG 8102: Do not allow to change file ACLs from normal domusers.
    + BUG 8193: Add new command 'enumerate_recursive'.
    + BUG 8195: Make rpc client code working against NT4 servers.
    + BUG 8211: Fix "inherit owner = yes" when "inherit permissions = yes" is
      set.
    + BUG 8213: Fixes in idmap_autorid.
    + BUG 8214: Fix smbd crash on printer driver upgrade.
    + BUG 8215: Fix Winbind unix username lookup.
    + BUG 8216: Make Winbind returning correct results with 'sids2xids'.
    + BUG 8217: Do not stat-check the share path in 'net conf addshare'.
    + BUG 8219: Fix SMB Panic from Windows 7 client.
    + BUG 8224: Fix the build on FreeBSD.
    + BUG 8226: Use c99 initializers which are supported by old gcc 2.95
      compilers.
    + BUG 8230: Move .nmbd socket directory to non-hidden name PREFIX/var/nmbd.
    + BUG 8231: Fix crash bug in 'net cache get'.
    + BUG 8235: Fix smbd crash on startup caused by migrate_printer().
    + BUG 8240: Fix Valgrind warnings in winreg/spoolss code.
    + BUG 8244: Fix copying files larger than 2 GB to a Samba share.
    + BUG 8247: Fix Coverity ID 2582: FORWARD_NULL.
    + BUG 8253: Fix Winbind panic if verify_idpool() fails.
    + BUG 8254: Fix "acl check permissions = no".
    + BUG 8260: Fix DCERPC responses with fragments larger than 1024 bytes.
    + BUG 8262: Fix build of vfs_commit.
    + BUG 8263: Fix build with --with-fake-kaserver or --with-vfs-afsacl.
    + BUG 8264: Fix Valgrind bugs in svcctl.
    + BUG 8276: Close all sockets attached to a subnet in close_subnet().
    + BUG 8278: Fix smbd panic when CTDB is unhealthy.
    + BUG 8281: Fix build of examples/VFS/*.
    + BUG 8286: Fix smbd crash on premature end of smb2 conn.
    + BUG 8292: Fix a major architectural flaw in the SMB2 server code.
    + BUG 8293: Fix log file rotating in SMB2.
    + BUG 8304: Fix uninitialized variable in error path.
    + BUG 8305: Fix segfault in nmbd when using 'smbtree ...'..
    + BUG 8307: brl_close_fnum does not call SMB_VFS_BRL_UNLOCK_WINDOWS on all
      locks.
    + BUG 8310: toupper_ascii() is broken on big-endian systems.
    + BUG 8314: Fix smbd crash with unknown user.
    + Mark 'time offset' parameter as deprecated.
* Tue Jul 26 2011 lmuelle@suse.de
  - The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
    affected by a cross-site scripting vulnerability; CVE-2011-2694; (bso#8289);
    (bnc#708503).
* Tue Jul 26 2011 lmuelle@suse.de
  - The Samba Web Administration Tool (SWAT) versions 3.0.x to 3.5.9 are
    affected by a cross-site request forgery; CVE-2011-2522; (bso#8290);
    (bnc#705241).
* Mon Jul 25 2011 shargagan@novell.com
  - Fixed the DFS referral response for msdfs root; (bnc#703655).
* Wed Jul 20 2011 ddiss@suse.de
  - Fix CUPS print job IDs; (bso#7288); (bnc#701257).
* Thu Jul 14 2011 lmuelle@suse.de
  - Make use of the actual library version as part of the package name on
    post-11.3 systems only.
* Mon Jul 11 2011 jmcdonough@suse.de
  - Fix winbind internal error; (bso#7636); (bnc#659424).
* Mon Jul 11 2011 ddiss@suse.de
  - Improve ctdb vacuuming performance with use of SCHEDULE_FOR_DELETION;
    (bnc#705170).
* Mon Jun 20 2011 ddiss@suse.de
  - Specify nmbdsocketdir at configure time; (bnc#700953).
* Thu Jun 09 2011 lmuelle@suse.de
  - Build the tdb, talloc, and tevent libraries ahead of anything else.
* Tue Jun 07 2011 jmcdonough@suse.de
  - Update to 3.6.0rc2.
    + BUG 6911: Fix Kerberos authentication from Vista to Samba.
    + BUG 8166: Don't lockout users when offline.
    + BUG 8200: Add support for multiple writeable ldap idmap domains.
    + BUG 8148: Default to protocol version 2 for SMB Traffic Analyzer.
    + BUG 7054: Fix X account flag when "pwdlastset" is "0".
    + BUG 8144: Fix setting timestamp when touching files with CIFS clients.
    + BUG 8153: Fix setting up getaddrinfo on IPv6-only machines.
    + BUG 8156: Fix 'net ads join' using the user's Kerberos ticket.
    + BUG 8157: Fix parsing a cups printcap file.
    + BUG 8175: Fix smbd deadlock.
    + BUG 8189: Support shadow copy display over SMB2.
    + BUG 8197: Winbind does not properly detect when a DC connection is dead.
    + BUG 8203: Winbind needs to reset the DC connection if an RPC times out.
* Mon Jun 06 2011 mrsb@novell.com
  - Make cupsaddsmb fill printers location; (bso#8132); (bnc#698209).
* Fri Jun 03 2011 lpechacek@suse.cz
  - Add "winbind max clients" parameter to remove 200-client
    limit; (bnc#697461).
* Fri Jun 03 2011 jmcdonough@suse.de
  - Disable logon cache for password lockout consistency when
    running in a cluster; (bnc#694836).
* Fri May 27 2011 jmcdonough@suse.de
  - Fix logon of AD users with many group memberships; (bso#6911);
    (bnc#657026).
* Wed May 25 2011 jmcdonough@suse.de
  - Don't lockout users while offline; (bso#8166); (bnc#692607).
* Mon May 23 2011 lmuelle@suse.de
  - Update to 3.6.0rc1.
    + BUG 8111: CIFS VFS: Fix unexpected error on SMB posix open.
    + BUG 8112: POSIX extension opens of a directory are denied with EISDIR.
    + BUG 8132: Fix filling printers location field when using cups.
    + Remove fstrings from client struct.
    + BUGFIX when converting from safe_strcpy to strlcpy.
    + Fix off-by-one calculations with strlcpy.
    + Ensure we always write the correct incoming mid into the share mode table
      entries.
    + Fix the SMB2 oplock showstopper.
    + Convert user-specified domain to uppercase in libsmb.
    + Fix Coverity CID #2302: FORWARD_NULL.
    + Fix cups_pull_comment_location().
    + Fix double free of cups request.
    + Make cups_pull_comment_location() work again.
    + Fix potential crash bug in display_print_driver3().
    + Properly clean up in pthreadpool_init in case of failure.
    + Make plaintext session setup async.
    + Reduce fd load in Winbind children.
    + Avoid a potential 100% CPU loop in Winbind.
    + Tune broadcast namequeries for unique names.
    + Properly deal with exited winbind children.
    + Fix dup_smb2_vec3.
    + Fix return check in nss_wins.
* Tue May 17 2011 shargagan@novell.com
  - Fix to renew the kerberos ticket in samba after expiry; (bnc#669949).
* Mon May 16 2011 ddiss@suse.de
  - Fix a 100% CPU loop when ctdbd dies during a traverse; (bnc#693945).
* Thu May 05 2011 lmuelle@suse.de
  - Make dhcpcd hook BOOTPROTO check cover dhcp6 too; (bnc#691969).
* Thu May 05 2011 shargagan@novell.com
  - Handling of large (> 256 bytes) ntlmv2 blobs in winbind; (bnc#529946).
* Sat Apr 30 2011 lmuelle@suse.de
  - Package static libraries with 0644 permissions.
* Sat Apr 30 2011 lmuelle@suse.de
  - Add Requires libtalloc-devel to libldb-devel and libtevent-devel.
* Sat Apr 30 2011 lmuelle@suse.de
  - Rename libldb0 to libldb1 as 1 is the current major version of the library.
  - Add libldb1 and libtevent0 to baselibs.conf.
* Fri Apr 29 2011 lmuelle@suse.de
  - Don't call the suse_update_config macro before building lib ldb and tevent.
* Fri Apr 29 2011 lmuelle@suse.de
  - Update to 3.6.0pre3.
    + Listen on IPv6 addresses with IPV6_ONLY; (bso#7383).
    + Fix wrong output in 'smbget'; (bso#8066).
    + "inherit owner = yes" doesn't interact correctly with vfs_acl_xattr or
      vfs_acl_tdb module; (bso#8083).
    + rpccli_samr_chng_pswd_auth_crap segfaults if any input blobs are null;
      (bso#8088).
    + setpwent() actually does endpwent() and vice versa on FreeBSD; (bso#8099).
    + Fix the build of 'smbget' on HP NonStop; (bso#8106).
    + Fix build of tdb2.
    + Correctly detect and deny symlinks anywhere in a path (not just the last
      component) if "follow symlinks = no".
    + Fix timeout in rpc_pipe_open_tcp_port().
    + Fix the build of "--with-profiling-data".
    + Fix Coverity IDs 986, 1340, 2047, 2299, 2307, 2325, 2335, 2336, 2470,
      2471, 2478.
    + nsswitch: Add 'wbinfo --lookup-sids'.
    + nsswitch: Add 'wbinfo --sids-to-unix-ids'.
    + Fix smbd with the async echo responder.
    + Fix the build of vfs_gpfs.c.
    + Add a 10-second timeout for the 445 or netbios connection to a DC.
    + Many pthreadpool fixes.
    + Fix transaction recovery area for converted tdbs.
* Thu Apr 28 2011 lmuelle@suse.de
  - Add PreReq permissions to the krb-printing package.
* Thu Apr 28 2011 lmuelle@suse.de
  - Remove _libdir ldb and tevent from file list.
  - Explicitly state not to bundle talloc or tdb while ldb and tevent build.
* Thu Apr 21 2011 lmuelle@suse.de
  - Always use the actual library version as part of the package name.
  - Exclude shared python modules.
* Thu Apr 21 2011 ddiss@suse.de
  - Fix printing from Windows 7 clients; (bso#7567); (bnc#687535).
* Thu Apr 21 2011 ddiss@suse.de
  - Update pidl and always compile IDL at build time; (bnc#688810).
* Thu Apr 14 2011 lmuelle@suse.de
  - Update to 3.6.0pre2.
    + ID Mapping changes.
    + Implement SMB2 support.
    + Add an Endpoint Mapper daemon.
    + Make "rlimit_max below minimum Windows limit" notification less scary;
      (bso#6837).
    + Quota only shown when logged as root; (bso#7080).
    + Fix printing from Windows 7; (bso#7567).
    + Retry DNS updates when connection to one nameserver has failed; (bso#7690).
    + Unlink may unlink wrong file when hardlinks are involved; (bso#7863).
    + Fix 'nmbd --port'; (bso#7875).
    + cmd_spoolss_deletedriver() returned without checking all architectures;
      (bso#7880).
    + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899).
    + Fix cups pcap reload with no printers; (bso#7915).
    + Fix bug in chain_reply; (bso#7917).
    + Fix problems with "kernel oplocks" option set to "no"; (bso#7928).
    + Fall back for utimes calls; (bso#7940).
    + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944).
    + Let winbind try to use samlogon validation level 6; (bso#7945).
    + Sgid bit lost on folder rename; (bso#7996).
    + Fix getting username in 'net rap session'; (bso#8009).
    + Fix inode generation so nautilus can count total dir size correctly;
      (bso#8010).
    + Use jenkins hash for str_checksum; (bso#8010).
    + Add explicit configure option whether or not to enable dmapi support;
      (bso#8033).
    + Fix smbclient segfault with Cyrillic netbios names; (bso#8040).
    + Fix file creation on OS/X; (bso#8042).
    + Add "--option" to 'testparm'.
    + Fix crash bug on smbd shutdown when using FOPENDIR().
    + Ensure we don't return an incorrect access mask.
    + Fix bug against the new Mac client.
    + Fix leak in error path.
    + Fix error where Windows client spoolss returns WERR_INVALID_DATA.
    + Fix a segfault in the krb5 locator plugin.
    + Enable sharesec for registry shares.
    + Fix memory leak in "security=share" and "force user".
    + Add "net idmap check", a check and repair tool for the
      id mapping database.
    + Add new 'net idmap delete' command.
    + Fix segfault on missing input file in 'net idmap restore'.
    + Fix 'net usersidlist' not to skip every other user.
    + Fix potential crash bug in spoolss_PrinterEnumValues push path.
    + Internal restructuring.
    + Don't wipe out all printer drivers when only one should be deleted.
    + Fix winbindd_dual_pam_auth_samlogon() for NT4 domains.
    + Fix memory leak in print_cups.c.
    + Remove duplicate cups response processing code.
    + Follow force user/group for driver IO.
    + Initiate pcap reload from parent smbd.
    + Reload shares after pcap cache fill.
    + Fix numerous Coverity IDs (2041 and others).
    + Fix a memory leak in check_sam_security_info3.
    + Fix a segfault in the nss wrapper when libnss_winbind.so is not loadable.
    + Make "net sam list [users|workstations]" list only the right things.
    + Fix a potential memleak in secrets_fetch_trusted_domain_password.
    + Use the right credentials in check_netlogond_security.
    + Add support for AF_NETLINK addr notifications.
    + Fork multiple Winbind children per domain.
    + Fix a deadlock between smbd and ctdbd.
    + Add 'wbinfo --dc-info'.
    + Make "nmbd socket dir" configurable.
    + Fixed valgrind errors.
    + Fix a memleak in receive_getdc_response.
    + Don't grant SEC_STD_DELETE always to the owner of a file.
    + Fix segfaults on addrchange errors in Winbind.
    + Allow machine accounts as members in groupdb.
    + Add IPv6 support for the endpoint mapper.
    + Free unused memory in the rpc server.
    + Fix possible segfaults in svcctl server.
    + Fix possible segfault with client_id in rpc server.
    + Add a 'svcctl shutdown' function to rpc server.
    + Fix a resource leak in net_afs.
    + Fix a resource leak in smbta-util.
    + Fix possible resource leak in net_usershare.
    + Fix possible resource leak in 'smbget'.
    + Fix possible resource leak in 'smbfilter'.
    + Fix a possible null pointer dereference in smbd.
    + Ensure we send the direct levelII oplock break to the correct fid.
    + Fix private libdir and codepages paths.
  - Add RFC 3454 to the vendor files.
* Thu Apr 07 2011 jmcdonough@suse.de
  - Fix idmap_tdb for big-endian systems such as ppc and s390;
    (bso#6901); (bnc#675978).
* Thu Mar 24 2011 ddiss@suse.de
  - Fix smbclient -M NT_STATUS_PIPE_BROKEN failure; (bso#7635); (bnc#681913).
* Fri Mar 18 2011 lmuelle@suse.de
  - Replace jobs by _smp_mflags macro while calling make on post-11.4 systems.
* Thu Mar 17 2011 ddiss@suse.de
  - Don't crash when publishing a single printer; (bnc#643119).
* Wed Mar 09 2011 ddiss@suse.de
  - Carry error status in printer list IPC message, do not refresh printers if
    cups is unavailable; (bso#7994); (bnc#675478).
* Wed Mar 09 2011 lmuelle@suse.de
  - Define the libwbclient packages ahead of packages with a different version.
* Wed Mar 09 2011 jengelh@medozas.de
  - Use %_smp_mflags for parallel building.
* Mon Mar 07 2011 lmuelle@suse.de
  - Update to 3.5.8.
    + Fix Winbind crash bug when no DC is available; (bso#7730).
    + Fix finding users on domain members; (bso#7743).
    + Fix memory leaks in Winbind; (bso#7879).
    + Fix printing with Windows 7 clients; (bso#7567).
    + Fix 'testparm' return code when EOF in encountered in param name;
      (bso#3185).
    + Make "rlimit_max below minimum Windows limit" notification less scary;
      (bso#6837).
    + Fix "Your Password expires today" message for users of trusted domains;
      (bso#7066).
    + Fix maintaining of users' groups via UsrMgr; (bso#7262).
    + Fix 'net ads dns register' in Windows 2008 R2 domains; (bso#7356).
    + Raise debug level for "reduce_name: couldn't get realpath" messages;
      (bso#7409).
    + Fix updating the time on close in vfs_gpfs; (bso#7498).
    + Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'; (bso#7594).
    + Handle Windows 9x adddriver calls without config file; (bso#7641).
    + Fix scalability problem with hundreds of printers; (bso#7656).
    + Fix memory leak in the netapi routines; (bso#7665).
    + Store unmodified copies of security descriptors in acl_xattr and acl_tdb
      modules; (bso#7716).
    + Fix incorrect unix mode_t caused by invalid client DOS attributes on
      create; (bso#7733).
    + Apply appropriate create masks when creating files with "inherit ACLs" set
      to true; (bso#7734).
    + Fix "dfree cache time" parameter; (bso#7744).
    + Fix a getgrent crash with many groups; (bso#7774).
    + Fix requesting lookups for BUILTIN sids; (bso#7777).
    + Fix smbd crash caused by expand_msdfs; (bso#7779).
    + Fix atime limit; (bso#7785).
    + vfs_scannedonly: Switch from mtime to ctime which is more reliable;
      (bso#7789).
    + Fix copying files from a SMB share using Gnome vfs and SMB signing;
      (bso#7791).
    + Make Winbind recover from a signing error; (bso#7800).
    + ACL inheritance cannot be disabled in vfs_acl_xattr/vfs_acl_tdb;
      (bso#7812).
    + Fix "force group" with ntlmssp guest session setup; (bso#7817).
    + vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on;
      (bso#7835).
    + Make WINBINDD_LOOKUPRIDS asking the right domain; (bso#7841).
    + Make WINBINDD_LOOKUPRIDS returning the domain name; (bso#7842).
    + Expand the local SAMs aliases; (bso#7843).
    + ntlm_auth: Support clients which offer a spnego mechs we don't support;
      (bso#7855).
    + Fix 'net ads dns register' in cluster setups; (bso#7871).
    + Fix 'nmbd --port'; (bso#7875).
    + Make 'rpcclient deldriver' delete drivers for all architectures;
      (bso#7880).
    + Fix flaky Winbind against Windows 2008; (bso#7881).
    + Fix SMB session setups with Kerberos against some closed source SMB
      servers; (bso#7883).
    + Fix stale lock in open_file_fchmod(); (bso#7892).
    + Fix sporadic Winbind panic in rpc query_user_list; (bso#7894).
    + Don't set SAMR_FIELD_FULL_NAME if we just want to set the account name;
      (bso#7896).
    + Don't return "-1" on success in 'net rpc vampire keytab'; (bso#7899).
    + Fix connections from WinCE; (bso#7917).
    + Fix opening MS Powerpoint files; (bso#7940).
    + Fix endless loops caused by inotify; (bso#7942).
    + Catch lookup_names/sids schannel errors over ncacn_ip_tcp; (bso#7944).
    + Let Winbind try to use samlogon validation level 6; (bso#7945).
    + Revalidate the pathname once re-constructed from a root fsp; (bso#7950).
* Fri Mar 04 2011 lmuelle@suse.de
  - Require a particular library version even if the major version is part of
    the package name.  Using the same major version does not guarantee forward
    compatibility.
* Fri Mar 04 2011 ddiss@suse.de
  - Fix a fd-leak in libwbclient at dlclose-time; (bso#7684); (bnc#668773).
* Mon Feb 28 2011 lmuelle@suse.de
  - Update to 3.5.7
    + Protect against possible denial of service caused by memory corruption;
      CVE-2011-0719; (bso#7949); (bnc#670431).
* Wed Feb 23 2011 lmuelle@suse.de
  - Disable separate build of samba-doc for post-11.1 systems.
* Tue Feb 22 2011 lmuelle@suse.de
  - Protect against possible denial of service caused by memory corruption;
    CVE-2011-0719; (bso#7949); (bnc#670431).
* Thu Feb 17 2011 ddiss@suse.de
  - Increase the log level for missing PIDs on SIGCHLD, printcap child processes
    are not added to the children PID list; (bnc#666460).
* Thu Feb 10 2011 lmuelle@suse.de
  - Do not require a particular library version if the major version is part of
    the package name.
* Wed Feb 09 2011 lmuelle@suse.de
  - Use the actual version numbers of the ldb, talloc, tdb, and tevent libraries
    on post-11.3 systems.
* Sun Jan 23 2011 ddiss@suse.de
  - Abide by print$ share 'force user' & 'force group' settings when handling
    AddprinterDriver and DeletePrinterDriver requests; (bso#7921); (bnc#653353).
* Tue Jan 18 2011 ddiss@suse.de
  - Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded()
    returns false if the pcap cache contains no printer entries. correct call
    ordering is already enforced. (bso#7836); (bnc#625936).
* Fri Jan 14 2011 lmuelle@suse.de
  - No longer force activation of the cifs service on post-11.3 systems.
  - Add X-UnitedLinux-Default-Enabled to the cifs init script on pre-11.4
    systems.
  - Move the cifs init script nfs dependencies from Required to Should.
* Tue Jan 04 2011 lmuelle@suse.de
  - Recommend to install samba-krb-printing from samba-winbind on post-10.3
    systems; (bnc#661845).
* Thu Dec 30 2010 ddiss@suse.de
  - Fix error paths in cups_async_callback(), an empty cups printer list should
    not be treated as an error; (bnc#661842).
* Tue Dec 21 2010 ddiss@suse.de
  - Abide by printcap cache time, reload parent smbd pcap cache on expiry;
    (bso#7836); (bnc#625936).
* Fri Dec 17 2010 ddiss@suse.de
  - Fix race in cups async printer services reload; (bso#7836); (bnc#625936).
* Sun Dec 12 2010 ro@suse.de
  - Don't tweak with baselibs.conf during %post if not present; (bnc#652620).
* Thu Dec 09 2010 lmuelle@suse.de
  - Don't make use of baselibs.conf on SUSE Linux Enterprise 10; (bnc#652620).
* Tue Dec 07 2010 lmuelle@suse.de
  - Don't use --tmpdir as this option isn't known by mktemp of SUSE Linux
    Enterprise 10; (bnc#652620).
* Sun Dec 05 2010 lars@samba.org
  - vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on;
    (bso#7835).
* Fri Dec 03 2010 lmuelle@suse.de
  - Replace Requires samba-client by samba-gplv3-client in the gplv3 packages;
    (bnc#652620).
* Tue Nov 30 2010 ddiss@suse.de
  - Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112).
* Tue Nov 30 2010 lmuelle@suse.de
  - Add Conflicts to the samba-gplv3 main, client, doc, krb-printing, winbind,
    client-gplv2, and doc-gplv2 packages; (bnc#652620).
* Fri Nov 26 2010 lmuelle@suse.de
  - Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions;
    (bnc#652620).
* Fri Nov 26 2010 lmuelle@suse.de
  - Obsolete samba-client-gplv2 and samba-doc-gplv2; (bnc#652620).
* Thu Nov 25 2010 lmuelle@suse.de
  - Remove Provides samba-client:/usr/sbin/winbindd from the samba-gplv3-winbind
    package to avoide an accidental install trigger; (bnc#652620).
* Thu Nov 25 2010 lmuelle@suse.de
  - Add Provides samba-client to the samba-gplv3-client package; (bnc#652620).
* Wed Nov 24 2010 lmuelle@suse.de
  - Remove all Obsoletes from the samba-gplv3 packages and only keep the
    Provides samba; (bnc#652620).
* Sat Nov 20 2010 lmuelle@suse.de
  - Add fitting Conflicts to all samba-gplv3 packages; (bnc#652620).
* Fri Nov 19 2010 jmcdonough@suse.de
  - Reduce unnecessary ldap round trips and eliminate invalid DN
    messages; (bnc#654719).
* Fri Nov 12 2010 lmuelle@suse.de
  - Exclude cifs-mount and ldapsmb from the samba-gplv3 build of SUSE Linux
    Enterprise 10 SP 3 and 4.
* Thu Nov 11 2010 lmuelle@suse.de
  - Add the _build_arch at the end of the vendor version suffix.
* Thu Oct 28 2010 lmuelle@suse.de
  - Provide and Obsolete samba-gplv3 to replace potentially installed packages.
* Fri Oct 15 2010 lmuelle@suse.de
  - Change package base name to samba-gplv3 for SUSE Linux Enterprise 10 SP 4.
  - Do not package libsmbclient and libsmbsharemodes.
* Sun Oct 10 2010 jmcdonough@suse.de
  - Update to 3.5.6
    + Fix auto printers with registry config; (bso#7280); (bnc#617153).
    + Fix SPNEGO auth when contacting Win7 system using Microsoft Live
      Sign-in Assistant; (bso#7577).
    + Fix 'net idmap restore' setting HWM to avoid duplicates; (bso#7578).
    + Fix "admin users" when using vfs_acl_xattr; (bso#7581).
    + Fix using cached credentials in ntlm_auth; (bso#7589).
    + Fix Winbind offline login; (bso#7590).
    + Fix Winbind internal error; (bso#7636).
    + Fix mknod/mkfifo failing with "No such file or directory"; (bso#7651).
    + Fix smbd changing mode of files on rename; (bso#7693).
    + Fix crash bug with invalid SPNEGO token; (bso#7694).
    + Fix smbd panic on invalid NetBIOS session request; (bso#7698).
    + Fix smbd crash caused by "%D" in "printer admin"; (bso#7541).
    + Fix 'smbclient -M'; (bso#7635).
    + Fix scalability problem with hundreds of printers; (bso#7656).
    + Fix crash bug in rpcclient; (bso#7688).
    + Fix file corruption when setting Samba "write wache wize"; (bso#7715).
* Thu Oct 07 2010 lmuelle@suse.de
  - Let startproc wait for nmb, smb and winbind pid files getting created on
    post-11.1 systems; (bnc#520036).
* Thu Oct 07 2010 hhetter@suse.de
  - Include the reviewed french translation for pam_winbind; (bnc#499233).
* Thu Sep 23 2010 ddiss@suse.de
  - Fix smbd crash with CUPS printers and no [printers] share defined;
    (bso#7297); (bnc#637755).
* Mon Sep 20 2010 jmcdonough@suse.de
  - Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870).
* Sun Sep 12 2010 coolo@novell.com
  - Fix baselibs.conf for libtalloc.
* Wed Sep 08 2010 lmuelle@suse.de
  - Fix buffer overflow in sid_parse() to correctly check the input lengths when
    reading a binary representation of a Windows Security ID (SID);
    CVE-2010-3069; (bso#7669); (bnc#637218).
* Mon Aug 30 2010 jmcdonough@suse.de
  - Use cached ntlm password in libsmbclient.  Prevent lockouts
    when kerberos tickets are lost; (bnc#602418); (bnc#606304).
* Thu Aug 26 2010 gber@opensuse.org
  - Add a dependency on nfs to the smbfs/ cifs init scripts as they require the
    en_US locale and /usr might be on NFS.
* Mon Aug 23 2010 jmcdonough@suse.de
  - Complete fix for trusts with Windows 2008R2 DCs.
* Fri Aug 20 2010 jmcdonough@suse.de
  - Fix authentication dialogs when connecting to older systems;
    (bnc#632055).
* Thu Aug 19 2010 lmuelle@suse.de
  - Adjust position of conditional ldapsmb %package and %files definition.
* Thu Aug 19 2010 lmuelle@suse.de
  - Create the /var/run/samba directory on the fly and package it as %ghost.
* Thu Aug 19 2010 jmcdonough@suse.de
  - Fix preexec scripts; (bso#7104); (bnc#632852).
* Thu Aug 19 2010 lmuelle@suse.de
  - Add missing netapi, smbclient, smbsharemodes, talloc, tevent, and wbclient
    pkgconfig files and BuildRequire pkgconfig; (bnc#632770).
* Tue Aug 17 2010 lmuelle@suse.de
  - BuildRequire python-devel for post-9.3 systems.
* Tue Aug 17 2010 lmuelle@suse.de
  - Only create precompiled headers for post-10.2 systems.
  - Remove mkinitrd scriptlets.
* Tue Aug 17 2010 lmuelle@suse.de
  - Add vfs_crossrename man page.
  - Call make basic and remove conditional proto target.
  - Increase libtevent version to 0.9.9.
  - Remove wbc_async header from the file list.
  - Remove remaining cifs-mount pieces from the spec file.
* Mon Aug 16 2010 jmcdonough@suse.de
  - Fix printers not auto loading with registry config; (bso#7280);
    (bnc#617153).
* Sun Aug 15 2010 lmuelle@suse.de
  - Update to 3.6.0pre1.
    + SMB2 support is fully functional despite managing quota using the
      Microsoft management tools.
    + Internal Winbind passdb changes to use samr and lsa rpc pipe to get local
      user and group information.
    + The spoolss and the old RAP printing code have been completely overhauled
      and refactored.
    + The SMB Traffic Analyzer (SMBTA) VFS module got added.
* Sun Aug 15 2010 lmuelle@suse.de
  - Intilize workgroup of nmblookup as empty string.
* Thu Aug 12 2010 jmcdonough@suse.de
  - Fix net ads join when using parent domain users; (bso#6364);
    (bnc#630812).
* Wed Jul 28 2010 sjayaraman@suse.de
  - cifs: do not restart during dhcp lease renewal when IPaddress remains
    the same; (bnc#573246).
* Mon Jul 05 2010 lmuelle@suse.de
  - Fix "Too many open files" when trying to access large number of files;
    (bso#6837); (bnc#619787).
* Wed Jun 23 2010 lmuelle@suse.de
  - Update to 3.5.4.
    + Fix smbd crash when sambaLMPassword and sambaNTPassword entries missing
      from ldap (bug #7448).
    + Fix init_sam_from_ldap storing group in sid2uid cache (bug #7507).
    + Allow previous password to be stored and use it to check tickets;
      (bso#7099).
    + Make ea data checks identical for trans2open and trans2mkdir; (bso#7188).
    + Fix editing users' groups via UsrMgr; (bso#7262).
    + Fix Winbind over IPv6; (bso#7341).
    + Samba sends "raw" inode number as uniqueid with unix extensions;
      (bso#7410).
    + Fix printing large formats; (bso#7423).
    + Fix spnego returning incorrect mechListMIC string; (bso#7449).
    + Fix some crash bugs and missing error codes in AddDriver paths;
      (bso#7459).
    + Fix crash bug in _samr_QueryUserInfo{2} level 18; (bso#7479).
    + Fix 'not a string literal' warning in netdomjoin-gui; (bso#7500).
    + Fix calculation of st_blocks in vfs_streams_xattr; (bso#7503).
    + Fix numerous build issues; (bso#7504).
    + Fix session setup from linux kernel cifs clients with "sec=ntlmv2";
      (bso#7517).
* Mon Jun 21 2010 lmuelle@suse.de
  - Remove all provides and obsoletes samba3 from the spec file.  Packages with
    this base name have not been offered as part of a product.
* Fri Jun 11 2010 lmuelle@suse.de
  - Fix a NULL pointer dereference in smbd of the 3.4 code base;
    CVE-2010-1635; (bso#7229); (bnc#605935).
* Tue Jun 08 2010 lmuelle@suse.de
  - Address possible buffer overrun in chain_reply code of pre-3.4 versions;
    CVE-2010-2063; (bso#7494); (bnc#611927).
* Mon Jun 07 2010 hhetter@suse.de
  - Update of the SMB Traffic Analyzer v2 VFS module
* Fri May 28 2010 jmcdonough@suse.de
  - Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873);
    (bnc#592198); (bso#6697).
* Wed May 19 2010 lmuelle@suse.de
  - Update to 3.5.3.
    + Fix MS-DFS functionality; (bso#7339).
    + Fix a Winbind crash when scanning trusts; (bso#7389).
    + Fix problems with SIGCHLD handling in Winbind; (bso#7317).
    + Add replacement for IPV6_V6ONLY on linux systems with broken headers;
      (bso#7196).
    + Fix cups encryption setting; (bso#7263).
    + Fix exporting printers via 'cupsaddsmb' command; (bso#7277).
    + Fix SMB job IDs in CUPS job names; (bso#7288).
    + Fix segfault in mount.cifs; (bso#7315).
    + Make TIME_T_MAX defines consistent; (bso#7352).
    + Re-fix a bug with smbd serving a windows terminal server; (bso#7357).
    + Display an error on 'net conf import' failures; (bso#7378).
    + Fix bitmap leak in dptr_Close; (bso#7384).
    + Fix rename problems with full_audit VFS module; (bso#7398).
    + Fix setting of passwords via 'net rpc user password' command; (bso#7417).
    + Fix 'net rpc printer list' command; (bso#7418).
    + Rename mod_name to module_name; (bso#7421).
  - Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler.
  - Added EN ISO 216, A0 and A1 to builtin forms; (bso#7423).
  - Winbind not working over IPv6; (bso#7341).
* Tue May 18 2010 jmcdonough@suse.de
  - Honor "interfaces" list in net ad dns register; (bnc#606947).
* Tue May 18 2010 lmuelle@suse.de
  - Exclude the RPM release from the vendor tag for openSUSE Factory;
    (bnc#604049).
* Thu Apr 29 2010 lmuelle@suse.de
  - Enable the build of the idmap tdb2 module; (bnc#600822).
* Sun Apr 25 2010 lars@samba.org
  - BuildRequire keyutils-libs-devel for Fedora and post-RHEL4.
* Sun Apr 25 2010 lars@samba.org
  - BuildRequire pkg-config for post-10.2 systems and else pkgconfig.
* Wed Apr 21 2010 jmcdonough@suse.de
  - Add "net conf import" error messages; (bso#7378, bnc#598189).
* Wed Apr 21 2010 jsmeix@suse.de
  - Define cups_lib_dir %{_prefix}/lib/cups for post-11.2 systems; (bnc#575544).
* Wed Apr 07 2010 lmuelle@suse.de
  - Update to 3.5.2.
    + Fix smbd segfaults in _netr_SamLogon for clients sending null domain;
      (bso#7237).
    + Fix smbd segfaults in "waiting for connections" message; (bso#7251).
    + Fix an uninitialized variable read in smbd; (bso#7254); (bnc#605935);
      CVE-2010-1642.
    + Fix a memleak in Winbind; (bso#7278).
    + Fix Winbind reconnection to it's own domain; (bso#7295).
    + Fix segfault if hide files or veto files has no ".AppleDouble";
      (bso#1206).
    + Fix parsing of the gecos field; (bso#5198).
    + Fix several printing issues; (bso#6727).
    + Fix valgrind warning; (bso#6814).
    + Fix race condition in mount.cifs that allows user to replace mountpoint
      with a symlink; (bso#6853).
    + Fix bug in vfs_scannedonly rmdir implementation; (bso#7075).
    + Fix handling of bad server data returns in client rpc_transport;
      (bso#7159).
    + Never mark external domains as internal in Winbind; (bso#7170).
    + Fix access by multi-threaded applications; (bso#7202).
    + Fix 'net share' command; (bso#7203).
    + Fix DN parsing name was always null; (bso#7204).
    + Signals are processed twice in child; (bso#7206).
    + Fix returning of group members with 'getent group'; (bso#7212).
    + Fix the build of net_afs.c with --fake-kaserver=yes; (bso#7216).
    + Make Winbind logs more verbose for troubleshooting; (bso#7225).
    + Fix a NULL pointer dereference in smbd; CVE-2010-1635; (bso#7229);
      (bnc#605935).
    + Fix automatic building of vfs_tsmsm if gpfs and dmapi are present;
      (bso#7231).
    + Fix race conditions in CTDB persistent transactions; (bso#7232).
    + Symlink delete fails but incorrectly reports success to client;
      (bso#7234).
    + Fix "printer admin" functionality; (bso#7255).
    + Fix value-needed calculation in_spoolss_EnumPrinterData(); (bso#7256).
    + Fix _winreg_QueryValue crash bugs and implement Windows behavior;
      (bso#7258).
    + Fix job management commands for CUPS queues; (bso#7269).
    + Fix smbd segfault if using vfs_acl_tdb; (bso#7283).
    + Fix core dump in 'ntlm_auth' with "gss-spnego" helper; (bso#7290).
    + Fix smbd crashes with CUPS printers and no [printers] share defined;
      (bso#7297).
    + Fix DOS attribute inconsistency with MS Office; (bso#7310).
    + Many disconnecting clients render clustered Samba unusuable for some time;
      (bso#7312).
    + Make 'net conf addshare' atomic; (bso#7313).
    + Eliminate race condition in creating/scanning sorted subkeys in the
      registry backend; (bso#7314).
    + Winbind possibly segfaults when trying a trusted domain without inbound
      trust; (bso#7316).
* Tue Apr 06 2010 hhetter@suse.de
  - Add SMB Traffic Analyzer v2 VFS module.
* Tue Mar 30 2010 lmuelle@suse.de
  - Document "wide links" defaults to "no" in the smb.conf man page for versions
    pre-3.4.6; (bnc#577868).
* Fri Mar 26 2010 jmcdonough@suse.de
  - Fix workgroup enumeration, for client printer and file share
    selection; (bso#6880); (bnc#586215).
* Tue Mar 23 2010 jmcdonough@suse.de
  - Fix tdb validation for offline auth; (bnc#587014).
* Mon Mar 22 2010 lmuelle@suse.de
  - Fix "printer admin" functionality; (bso#7255).
* Mon Mar 22 2010 lmuelle@suse.de
  - An uninitialized variable read could cause an smbd crash; (bso#7254);
    (bnc#605935); CVE-2010-1642.
* Mon Mar 22 2010 lmuelle@suse.de
  - Ensure to have a valid talloc stackframe; (bso#7251).
* Mon Mar 22 2010 lmuelle@suse.de
  - _netr_SamLogon segfaults for clients sending NULL domain; (bso#7237).
* Thu Mar 18 2010 lmuelle@suse.de
  - Merge missing pam_winbind message translations; (bnc#499233).
* Sun Mar 14 2010 lmuelle@suse.de
  - Remove cifs-mount subpackage for post-11.2 systems as the tools are now part
    of the independent cifs-utils package.
* Thu Mar 11 2010 jmcdonough@suse.de
  - Fix join of Windows 2008 domains; (bnc#567013).
* Mon Mar 08 2010 lmuelle@suse.de
  - Update to 3.5.1 and 3.4.7.
    + Fix security flaw on Linux platforms if built with libcap support allowing
      file system access even when permissions should have denied it;
      CVE-2010-0728; (bso#7222); (bnc#586683).
* Mon Mar 08 2010 rhafer@novell.com
  - Fixed libldb.so link in libldb-devel.
* Fri Mar 05 2010 hhetter@novell.com
  - Fix argc handling in net_share, making the command "net share"
    work again; (bso#7203); (bnc#584253).
* Mon Mar 01 2010 lmuelle@suse.de
  - Update to 3.5.0.
    + Fix duplicate sam and unix accounts; (bso#7145).
    + Keep the the correct negotiate_flags on the cli->dc structure; (bso#7160).
    + Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send; (bso#7166).
    + Fix 'net ads dns' usage calls; (bso#7181).
    + Fix uninitialized variable in wkssvc_enumerateusers; (bso#7182).
* Wed Feb 24 2010 lmuelle@suse.de
  - Update to 3.4.6.
    + Change parameter "wide links" to default to "no"; it's also incompatible
      with "unix extensions"; (bso#7104); (bnc#577868).
    + Fix printing with 64 bit clients (bso#6888).
    + Fix core dump on 64 bit Linux (bso#7063).
    + Fix failing of smbd to respond to a read or a write caused by Linux
      asynchronous IO (aio) (bso#7067).
    + Fix string buffer overflow causing heap corruption in smbd (bso#7096).
    + Fix bogus ip address in SWAT; (bso#5885).
    + Fix vfs_full_audit; (bso#6557).
    + Use the first "uid" value; (bso#6157).
    + Fix large paged search with DirX LDAP servers; (bso#6981).
    + Fix crash bug in 'cifs.upcall'; (bso#6868).
    + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
    + Fix DFS on AIX (maybe others); (bso#7052).
    + Fix pdb_search crash as non-root user; (bso#7068).
    + Fix unlocking of accounts from ldap; (bso#7072).
    + Fix vfs_expand_msdfs; (bso#7081).
    + Fix results of 'smbclient -L' with a large browse list; (bso#7098).
    + Normalize "Changing password for" msg IDs and STRs; (bso#7102).
    + Fix malformed require_membership_of_sid; (bso#7106).
    + Fix reading of large browselist; (bso#7122).
    + "mangling method = hash" can crash storing a name containing a '.';
      (bso#7154).
    + Valgrind Conditional jump or move depends on uninitialised value(s) error
      when "mangling method = hash"; (bso#7155).
    + Fix listing of printjobs in Windows 7; (bso#7130).
    + Spoolss getprinterdriver2 level 101 marshalling is bad; (bso#7136).
    + Make idmap cache persistent for "ldapsam:trusted".
    + Also fill the memcache with sid<->id mappings in ldapsam_sid_to_id() not
      only the persistent idmap cache.
    + Shortcut uid_to_sid when "ldapsam:trusted = yes".
    + Make pdb_copy_sam_account also copy the group sid.
    + Shortcut gid_to_sid when "ldapsam:trusted = yes".
    + Speed up pdb_get_group_sid().
    + Try to build the full unix_pw structure with ldapsam:trusted support.
    + Optimize ldapsam_alias_memberships() and cache ldap searches.
* Fri Feb 19 2010 lmuelle@suse.de
  - Update to 3.5.0rc3.
    + Change parameter "wide links" to default to "no"; it's also incompatible
      with "unix extensions"; (bso#7104); (bnc#577868).
    + Fix vfs_full_audit; (bso#6557).
    + Fix crash bug in 'cifs.upcall'; (bso#6868).
    + Fix duplicate initializer in the rmdir module; (bso#6876).
    + Fix printing with 64 bit clients; (bso#6888).
    + Add cross option to samba_cv_linux_getgrouplist_ok; (bso#7047).
    + Fix core dump on Ubuntu 8.04 64 bit; (bso#7063).
    + Fix failing of smbd to respond to a read or a write caused by Linux
      asynchronous IO (aio); (bso#7067).
    + Fix 'smbget' error status; (bso#7069).
    + Fix build of 'smbfilter'; (bso#7071).
    + Fix unlocking of accounts from ldap; (bso#7072).
    + Cliconnect gets realm wrong with trusted domains; (bso#7079).
    + Fix vfs_expand_msdfs; (bso#7081).
    + Fix storing of create time on directories in an EA in new create time
      code; (bso#7084).
    + Fix an early release of the global lock that can cause data corruption in
      libtdb; (bso#7085).
    + Fix string buffer overflow causing heap corruption in smbd; (bso#7096).
    + Fix results of 'smbclient -L' with a large browse list; (bso#7098).
    + Normalize "Changing password for" msg IDs and STRs; (bso#7102).
    + Fix malformed require_membership_of_sid; (bso#7106).
    + Add pdb_ldap performance fixes; (bso#7116).
    + Change ldap filter to what really was intended; (bso#7116).
    + Add new "nmbd bind explicit broadcast" parameter; (bso#7118).
    + Fix nmbd problems with socket address; (bso#7118).
    + Support large browselist; (bso#7119).
    + Fix reading of large browselist; (bso#7122).
    + Fix listing of printjobs in  Windows 7; (bso#7130).
    + Owner of file not available with Kerberos; (bso#7139).
    + Fix IPv4/IPv6 problems; (bso#7140).
    + Fix get_acl_blob in the acl_tdb VFS module; (bso#7148).
    + "mangling method = hash" can crash storing a name containing a '.';
      (bso#7154).
    + Valgrind Conditional jump or move depends on uninitialised value(s) error
      when "mangling method = hash"; (bso#7155).
    + Fix some wrong newlines in de translation strings.
* Tue Feb 09 2010 lmuelle@suse.de
  - Take extra care that a mount point of mount.cifs isn't changed during mount
    and don't allow it to be run as setuid root program; CVE-2010-0787;
    (bso#6853); (bnc#550002).
* Tue Feb 09 2010 lmuelle@suse.de
  - Check in mount.cifs for invalid characters in device name and mountpoint;
    CVE-2010-0547; (brc#562156); (bnc#577925).
* Tue Feb 09 2010 boyang@suse.de
  - Don't invalidate cache for uninitialized domains; (bnc#538923).
* Tue Feb 09 2010 boyang@suse.de
  - Signals are processed twice in child; (bnc#538923).
* Mon Feb 08 2010 jmcdonough@suse.de
  - Allow forced pw change even with min pw age; (bnc#561894).
* Mon Feb 08 2010 lmuelle@suse.de
  - Change parameter "wide links" to default to "no"; it's also incompatible
    with "unix extensions"; CVE-2010-0926; (bso#7104); (bnc#577868).
* Sun Feb 07 2010 boyang@suse.de
  - Fix enumerate domain local groups for primary domain; (bnc#573813).
* Sun Feb 07 2010 boyang@suse.de
  - Fix malformed require_membership_of_sid; (bnc#525123); (bso#7106).
* Fri Feb 05 2010 lmuelle@suse.de
  - Normalize "Changing password for" msg IDs and STRs; (bnc#499233).
* Thu Feb 04 2010 rhafer@novell.com
  - Build libtevent and libldb and put them into separate subpackages.
* Tue Jan 26 2010 lmuelle@suse.de
  - Update to 3.5.0rc2.
    + The Using Samba HTML book has been removed.
    + 'net', 'smbclient' and libsmbclient can use logon credentials cached by
      Winbind; (bso#7062).
    + New vfs_scannedonly module has been added; (bso#7028).
    + Check password history before increasing "badPasswordCount"; (bso#4347).
    + Fix changing of ACLs on writable file with "dos filemode=yes"; (bso#5202).
    + Restore Samba 3.0.x behavior and use the first "uid" value in pdb_ldap;
      (bso#6157).
    + Fix deletion of an object whose parent folder does not have delete rights
      fails even if the delete right is set on the object in vfs_acl_xattr and
      vfs_acl_tdb; (bso#6876).
    + Fix large paged search with DirX LDAP servers; (bso#6981).
    + Fix a segfault in winbindd_dual_ccache_ntlm_auth(); (bso#7027).
    + Disable sanity check in NetShareEnum for better compatibility with
      Windows; (bso#7029).
    + Fix SMBrmdir error message when deleting a directory fails; (bso#7033).
    + Fix segfault in vfs_cap; (bso#7034).
    + Fix 'net rpc getsid' in hardened Windows environments; (bso#7036).
    + Fix a Winbind segfault in "trusted_domains"; (bso#7037).
    + Complete and improve some German translation of 'net'; (bso#7039).
    + Fix compile error with WITH_DNS_UPDATE. Update .po files; (bso#7039).
    + Fix crash bug in libsmbclient; (bso#7043).
    + Fix bad (non memory copying) interfaces in smbc_setXXXX calls; (bso#7045).
    + Fix libsmbclient crash against OpenSolaris CIFS server; (bso#7046).
    + Lock down some srvsvc calls according to what w2k3 seems to do.
* Tue Jan 19 2010 lmuelle@suse.de
  - Update to 3.4.5.
    + Fix memory leak in smbd (bug #7020).
    + Fix changing of ACLs on writable files with "dos filemode=yes"
      (bug #5202).
    + BUG 6642: Fix opening the quota magic file.
    + BUG 6919: Fix remote quota management.
    + BUG 7034: Fix internal error caused by vfs_cap.
    + BUG 7036: Fix 'net rpc getsid' in hardened Windows environments.
    + BUG 7043: Fix crash bug in "SMBC_parse_path".
    + BUG 7045: Fix bad (non memory copying) interfaces in smbc_setXXXX calls.
    + BUG 7046: Fix a crash in libsmbclient used against the OpenSolaris CIFS
      server.
* Tue Jan 12 2010 lmuelle@suse.de
  - Free unused memory after a packet got processed; (bso#7020).
* Fri Jan 08 2010 boyang@suse.de
  - Add timeout to rpc call to prevent infinite loop when network is
    down; (bnc#538923).
* Thu Jan 07 2010 lmuelle@suse.de
  - Update to 3.5.0rc1.
    + BUG 6837: Fix "Too many open files" when trying to access large number of
      files with Windows 7; (bnc#619787).
    + BUG 6939: Fix long filenames when "mangling method" is set to "hash".
    + BUG 6991: Create symbol links to shared libraries.
    + BUG 6992: make test for getgrouplist cacheable.
    + BUG 7014: Fix Winbind crash when retrieving empty group members.
    + BUG 7020: Fix smbd using 2G memory.
    + Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned
      attributes by protocol level.
    + Vector correctly through reply_openerror() (which uses the same logic).
    + Fix bugs with the full Windows ACL support.
    + Add a few missing gettext calls to the 'net' command.
    + Fix up a share type translation and translate some more strings in 'net'.
    + Allow to call "pdbedit -N description -u user" without specifiyng "-r".
    + Add spoolss_DriverInfo7.
    + Fix rpcclient after setprinter IDL fixes.
    + Use generated krb5.conf in 'net ads testjoin'.
    + Add some German translations for the 'net' command.
    + Update mount.cifs man page with nounix option.
    + Fix _samr_GetAliasMembership for results with 0 rids.
    + Fix an error case in cli_negprot.
    + Add a lower-cost alternative to wbinfo -t: wbinfo --ping-dc.
    + Restore correct timeouts for SMB requests.
    + Fix a 64-bit error in libsmb.
    + Replace IS_DOMAIN_OFFLINE by a function in Winbind.
    + Simplify/cleanup Winbind code.
    + Fix write behind memory block in libtalloc.
    + Fix result check for getaddrinfo().
    + Add tsocket_address_bsd_sockaddr() and tsocket_address_bsd_from_sockaddr()
      to tsocket.
    + Always set tdb->tracefd to -1 to be safe on goto fail in libtdb.
    + Add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior.
    + Fix standalone 'make installdocs'.
    + Output %p as unsigned in snprintf replacement.
    + New attempt at TDB transaction nesting allow/disallow.
    + Remove swig stuff from libtdb.
    + Reset tdb->fd to -1 in tdb_close() in libtdb.
    + Change the way mksysms work in libtalloc.
    + Also build and install tdb manpages from standalone tdb.
    + Fix infinite loop in NCACN_IP_TCP as there is no timeout.
    + Make winbindd_cache.c aware of domain offline to avoid unnecessary backend
      query.
    + List trusted domains from wcache when domain is offline.
* Thu Jan 07 2010 lmuelle@suse.de
  - Update to 3.4.4.
    + Fix interdomain trust relationships with Win2008R2 (bug #6697).
    + Fix Winbind crashes when queried from nss (bug #6889).
    + Fix Winbind crash when retrieving empty group members (bug #7014).
    + Fix "UID range full" error in Winbind (bug #6901).
    + Fix multiple LDAP servers in "idmap backend" and "idmap alloc
      backend" (bug #6910).
    + BUG 4832: Fix iconv checks.
    + BUG 6338: Do not always display "none" in 'net rpc trustdom list'.
    + BUG 6851: Add pdbedit --kickoff-time/-K to set the user's kickoff time.
    + BUG 6828: Fix infinite timeout when byte lock held outside of samba.
    + BUG 6837: Fix "Too many open files" message when trying to access a large
      number of files with Windows 7; (bnc#619787).
    + BUG 6841: Fix "map acl inherit = yes".
    + BUG 6850: Fix shadow copy display on Windows 7.
    + BUG 6867: Fix listing of directories with a lot of files.
    + BUG 6868: Support building with Heimdal we well as with MIT.
    + BUG 6875: Fix DOS attributes on OS/2 clients.
    + BUG 6880: Fix listing of workgroup servers in libsmbclient.
    + BUG 6898: Samba duplicates file content on appending.
    + BUG 6918: Fix krb5 build problem on Ubuntu karmic.
    + BUG 6929: Fix build with recent heimdal.
    + BUG 6939: Fix long filenames with "mangling method = hash".
    + BUG 6967: Fix 'net ads join' with OU.
    + BUG 6981: Fix paged search with DirX LDAP server.
    + BUG 6982: Remove erroneous out of memory error path in lookup_sid.
    + BUG 6997: Fix _samr_GetAliasMembership for results with 0 rids.
    + BUG 7005: Fix "mangle method = hash" truncates files with dot "."
      character.
    + Fix the build of the winbind krb5 locator plugin.
    + Fix enumprinter key client and server.
* Wed Jan 06 2010 lmuelle@suse.de
  - Readjust the _libdir/cups/backend/smb sym link only on uninstall of the
    samba-krb-printing package; (bnc#568603).
* Fri Jan 01 2010 lars@samba.org
  - Add BuildRequires to fam-devel; (bnc#564260).
* Wed Dec 30 2009 jmcdonough@suse.de
  - Prevent winbind crash; (bso#7014); (bnc#566119).
* Mon Dec 21 2009 sjayaraman@suse.de
  - Fix processing of open modes in POSIX open; (bnc#530683).
* Thu Dec 17 2009 jengelh@medozas.de
  - Add baselibs.conf as a source.
* Tue Dec 15 2009 lmuelle@suse.de
  - Update to 3.5.0pre2.
    + BUG 2350: Add LDAP Alias Dereferencing support.
    + BUG 6288: SWAT adds a second share when changing parameters of an existing
      share.
    + BUG 6435: Fix minor memory corruption.
    + BUG 6710: Only install the cifs.upcall man page if CIFSUPCALL_PROGS was
      set while configure.
    + BUG 6802: A created folder does not properly inherit permissions from
      parent in vfs_acl_xattr.
    + BUG 6837: "Too many open files" when trying to access large number of
      files from Windows 7; (bnc#619787).
    + BUG 6860: Fix shared library build on QNX.
    + BUG 6879: Fix crash in Winbind.
    + BUG 6929: Fix build with recent heimdal.
    + BUG 6938 : No hook exists to check creation rights when using acl_xattr
      module.
    + BUG 6967: Prevent glibc error on 'net ads join'.
    + Fix vfs_acl_xattr which was failing to call the NEXT connect function.
    + Restructure the ACL code.
    + Refactor reply_rmdir to use handle based code.
    + Fix the build when no external talloc and tdb are installed.
    + Fix detection of CTDB headers on systems without system-libtalloc.
    + Fix several printing issues.
    + Fix the build on Mac OS X 10.6.2.
    + Fix net and rpcclient after setprinterdataex changes.
    + Add full support for level 8 printer drivers.
    + Add more spoolss architectures to IDL.
    + Fix enumprinter key client and server.
    + Fix crash in EnumPrinterDataEx.
    + Prefer posix_fallocate for doing "strict allocate".
    + Restore "fake directory create times" as a share parameter.
    + Fix explicit stat64 support.
    + Add support for NetWkstaGetInfo 101 and 102.
    + Add rpcclient wkssvc_enumerateusers.
    + De-deprecate "write cache size" to prevent its removal without a proper
      alternative.
    + Allow more than 1000 users in BUILTIN\Users.
    + Complete support for NetWkstaGetInfo/NetWkstaEnumUsers.
    + Fix the build of the example VFS modules.
    + Fix crash in free_file_list().
    + Give the user a chance to change password when password will expire soon.
* Wed Dec 09 2009 lmuelle@suse.de
  - Store the smbfs service state if enabled and restore it for cifs while
    upgrade on post-11.2 systems.
* Wed Dec 09 2009 lmuelle@suse.de
  - Prevent cifstab from being overwritten while upgrade on post-11.2 systems.
* Wed Dec 09 2009 boyang@suse.de
  - Give the user a chance to change password when password will expire soon;
    (FATE#302414).
* Tue Dec 08 2009 lmuelle@suse.de
  - Rename smbfs init script to cifs for post-11.2 systems.
* Tue Dec 08 2009 jmcdonough@suse.de
  - Allow Windows 7 to connection to samba domain controllers and
    member servers; (bnc#551811); (bso#6099); (bso#6100); (bso#6680).
* Fri Dec 04 2009 jmcdonough@suse.de
  - Error on joining windows domain (invalid pointer); (bso#6967);
    (bnc#553622).
* Thu Dec 03 2009 lmuelle@suse.de
  - Add PreReq /usr/sbin/groupadd to the winbind package; (bnc#559165).
  - Simplify the winbind package %pre script and suppress stdout only.
* Thu Nov 26 2009 lmuelle@suse.de
  - Update to 3.5.0pre1
    + Add support for full Windows timestamp resolution.
    + Experimental implementation of SMB2.
    + Add encryption support for connections to a CUPS server.
    + Major windbind asynchronous refactoring.
  - Remove using_samba from the doc package.
  - Increase major version of libtalloc to 2.
* Thu Nov 19 2009 boyang@suse.de
  - Fix kerberos refresh chain; (bnc#546162); (bso#6872).
* Fri Nov 06 2009 lmuelle@suse.de
  - Hardlink duplicate files on post-11.1 systems.
* Fri Nov 06 2009 lmuelle@suse.de
  - Add BuildArch noarch to samba-doc on post-11.1 systems.
* Tue Nov 03 2009 boyang@suse.de
  - Use full 16byte session key in make_user_info_netlogon_interactive();
    (bnc#551811).
* Thu Oct 29 2009 lmuelle@suse.de
  - Update to 3.4.3.
    + Fix trust relationships to windows 2008 (2008 r2) (bug #6711).
    + Fix file corruption using smbclient with NT4 server (bug #6606).
    + Fix Windows 7 share access (which defaults to NTLMv2) (bug #6680).
    + BUG 4675: mount.cifs: Do not attempt to update /etc/mtab if it is a
      symbolic link.
    + BUG 6529: Offline files conflict with Vista and Office 2003.
    + BUG 6532: Fix domain enumeration if master browser has space in name.
    + BUG 6606: Fix file corruption using smbclient with NT4 server.
    + BUG 6690: Fix wrong error check in profile.
    + BUG 6703: Allow smbstatus as non-root.
    + BUG 6704: Fix syntax error in avahi configure test.
    + BUG 6707: Fix an occasional segfault in config file parsing.
    + BUG 6710: Adjust regex to match variable names including underscores.
    + BUG 6711: Fix trust relationships to windows 2008 (2008 r2).
    + BUG 6726: SIVAL should have been an SVAL.
    + BUG 6728: BSD needs sys/sysctl.h included to build properly.
    + BUG 6731: Fix reading beyond the end of a named stream in xattr_streams.
    + BUG 6735: Don't overwrite password in pam_winbind, subsequent pam modules
      might use the old password and new password.
    + BUG 6764: Fix timeval calculation.
    + BUG 6765: Add a "hidden" parameter "share:fake_fscaps".
    + BUG 6769: Fix symlink unlink.
    + BUG 6772: Allow outstanding_aio_calls to be decremented.
    + BUG 6774: smbd crashes if "aio write behind" is set.
    + BUG 6776: Fix core dump caused by running overlapping Byte Lock test.
    + BUG 6781: Fix renaming subfolders in Explorer view.
    + BUG 6791: Fix linking order in cifs.upcall.
    + BUG 6793: Fix Winbind crash with "INTERNAL ERROR: Signal 6".
    + BUG 6793: Fix segfault in winbindd_pam_auth.
    + BUG 6796: Deleting an event context on shutdown can cause smbd to crash.
    + BUG 6797: Fix a memleak in libwbclient.
    + BUG 6804: Fix hpux compiler issue.
    + BUG 6805: Correctly handle aio_error() and errno.
    + BUG 6807: Fix a segfault in "net rpc trustdom list" for long domain names.
    + BUG 6810: Add support for finding alternate credcaches to cifs.upcall.
    + BUG 6811: Fix reference to freed memory in pam_winbind.
    + BUG 6815: Fix Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
    + BUG 6824: Fix avahi activation.
    + BUG 6826: Don't fail authentication when one or some group of
      require-membership-of is invalid.
    + BUG 6828: Fix infinite timeout when byte lock held outside of Samba.
    + BUG 6829: Fix displaying of multibyte characters in smbclient.
    + BUG 6840: Fix crash in pam_winbind.
    + Fix an uninitialized variable.
    + Only ever handle one event after a select call.
    + Conditional install of the cifs.upcall man page.
    + Fix warning occuring when building the manpages.
* Fri Oct 23 2009 lmuelle@suse.de
  - Let smbclient show special characters properly; (bso#6829); (bnc#544204).
* Fri Oct 23 2009 boyang@suse.de
  - Don't fail authentication when one or some group of require-membership-of
    is invalid; (bnc#525123); (bso#6826).
* Fri Oct 16 2009 jmcdonough@suse.de
  - Allow winbind to ignore certain domains; (bnc#539506).
* Thu Oct 08 2009 lmuelle@suse.de
  - Update to 3.4.2.
    + Fix unresolved home path; CVE-2009-2813; (bso#6763); (bnc#539517).
    + Fix potential denial of service; CVE-2009-2906; (bso#6768); (bnc#543115).
    + Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 30 2009 jmcdonough@suse.de
  - Fix potential denial of service; CVE-2009-2906; (bnc#543115).
* Fri Sep 25 2009 jmcdonough@suse.de
  - Fix potential mount.cifs password leaks; CVE-2009-2948; (bnc#542150).
* Wed Sep 23 2009 jmcdonough@suse.de
  - Fix unresolved home path; CVE-2009-2813; (bnc#539517).
* Mon Sep 21 2009 boyang@suse.de
  - Don't overwrite password in pam_winbind; (bnc#515444).
* Mon Sep 14 2009 chris@computersalat.de
  - mods for winbind (when used with squid - ntlm_auth)
    o winbind adds group 'winbind'
    o permission 0750,root,winbind LOCKDIR/winbindd_privileged
* Thu Sep 10 2009 lmuelle@suse.de
  - Merge two fixes from 3.2.8 and 3.3.1.
    + Adjust regex to match variable names including underscores.
    + Conditional install of the cifs.upcall man page.
* Wed Sep 09 2009 lmuelle@suse.de
  - Remove supplements from baselibs.conf while %clean for pre-11.1 systems;
    (bnc#520579).
* Wed Sep 09 2009 lmuelle@suse.de
  - Update to 3.4.1.
    + Fix authentication on member servers without Winbind (bug #6650).
    + Nautilus fails to copy files from an SMB share (bug #6649).
    + Fix connections of Win98 clients (bug #6551).
    + Fix interdomain trusts with Windows 2008 R2 DCs (bug #6697).
    + Fix Winbind authentication issue (bug #6646).
    + BUG 5879: Update LDAP schema for Netscape DS 5.
    + BUG 5886: Fix password change propagation with ldapsam.
    + BUG 6105: Make linking of cifs.upcall and rpcclient --as-needed safe.
    + BUG 6222: Default to DRSUAPI replication for net rpc vampire keytab.
    + BUG 6437: Make open_udp_socket() IPv6 clean.
    + BUG 6496: MS-DFS cannot follow multibyte char link name in libsmbclient.
    + BUG 6506: Smbd server doesn't set EAs when a file is overwritten in
      NT_TRANSACT_CREATE.
    + BUG 6532: Fix the build with external talloc.
    + BUG 6538: Cancel all locks that are made before the first failure.
    + BUG 6560: Fix lookupname.
    + BUG 6564: SetPrinter fails (panics) as non root.
    + BUG 6568: Fix _spoolss_GetPrintProcessorDirectory() implementation.
    + BUG 6585: Fix unqualified "net join".
    + BUG 6593: Correctly implement SMB_INFO_STANDARD setfileinfo.
    + BUG 6601: Avoid global fd limits.
    + BUG 6607: Fix crash bug in spoolss_addprinterex_level_2.
    + BUG 6611: Fix a valgrind error in chain_reply.
    + BUG 6615: Fix browsing of DFS when using kerberos in libsmbclient.
    + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
    + BUG 6650: Fix authentication on member servers without Winbind.
    + BUG 6651: Fix smbd SIGSEGV when breaking oplocks.
    + BUG 6655: Fix 'smbcontrol smbd ping'.
    + BUG 6620: Fix a bug in renames of directories.
    + BUG 6664: Fix truncation of the session key.
    + BUG 6673: Fix 'smbpasswd' with "unix password sync = yes".
    + BUG 6680: Fix authentication failure from Windows 7 when domain joined.
    + BUG 6688: Fix crash in 'net usershare list'.
    + BUG 6693: Check we read off the complete event from inotify.
    + BUG 6700: Use dns domain name when needing to guess server principal.
* Thu Aug 13 2009 boyang@suse.de
  - Update to 3.2.14.
    + Fix SAMR access checks (e.g. bugs #6089 and #6112).
    + Fix 'force user' (bug #6291).
    + Improve Win7 support (bug #6099).
    + Fix posix ACLs when setting an ACL without explicit ACE for the
      owner (bug #2346).
    + BUG 6387: Fix Winbind crash when multiple IDmappings exist in the
      LDAP directory.
    + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
    + BUG 6089: Fix SAMR access checks.
    + BUG 6112: Fix SAMR access checks.
    + BUG 6279: Fix Winbind crash.
    + BUG 6291: Fix 'force user'.
    + BUG 6099: Try to fix domain join of Win7 Beta.
    + BUG 6386: Groupdb mapping fix.
    + BUG 6421: Fix POSIX read-only open on read-only shares.
    + BUG 6476: Fix more smbd-zombies in memory.
    + BUG 6488: acl_group_override() call in posix acls references an
      uninitialized variable.
    + BUG 6504: Fix SAMR server for Winbind access.
    + BUG 6520: Fix time stamps.
    + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
    + BUG 6340: Don't segfault when cleartext trustdom pwd could not be
      retrieved.
    + BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
    + BUG 6465: Fix enum_aliasmem in ldb branch.
    + BUG 6484: Fix searching for users while adding them to groups via
      Windows usermanager.
    + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
      owner.
    + BUG 6526: Let parent_dirname() correctly return toplevel filenames.
    + BUG 6627: Raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
    + BUG 5798: Preserve CFLAGS info in configure.
    + BUG 6382: Case insensitive access to DFS links broken.
    + BUG 6481: Don't require "Modify property" perms to unjoin.
    + BUG 6628: 'smbpasswd -a' uses algorithmic rid base with
      'passdb backend = tdbsam'.
    + BUG 6560: Lookupname failed, cannot find domain when attempt to change
      password.
    + Prevent creation of keys containing the '/' character.
    + Fix join of Windows 7 RC to a Samba3 DC.
    + Fix bug in processing of open modes in POSIX open.
    + Fix the negotiate flags.
    + Protect netlogon_creds_server_step() against NULL creds.
    + Also handle DirX return codes.
    + Fix a crash bug if we timeout in net rpc trustdom list.
    + Add '--request-timeout' option to 'net'.
    + Fix a race condition in Winbind leading to a panic.
    + Add workaround for MS KB932762.
    + 5945: Fix out of memory error with Winbind idmap.
    + Avoid duplicate ACEs.
    + Fix profile ACLs in some corner cases.
    + Zero an uninitialized array.
* Wed Aug 12 2009 boyang@suse.de
  - Unable to browse DFS when using kerberos in libsmbclient; (bnc#528271);
    (bso#6615).
* Mon Aug 10 2009 boyang@suse.de
  - check in .po files for pam_winbind; (bnc#499233); (bso#6602).
* Thu Aug 06 2009 hhetter@suse.de
  - Add ntp and network-remotefs as Should-Start dependency to the winbind init
    script; (bnc#515629).
* Thu Aug 06 2009 lmuelle@suse.de
  - Update to 3.0.36.
    + Fix Winbind crash on 'getent group' (bug #5906).
    + Excel save operation corrupts file ACLs (bug #4308).
    + Prevent segmentation fault on joining a very long domain name.
    + BUG 4308: Excel save operation corrupts file ACLs.
    + BUG 4370: Clean-up entries in /etc/mtab after unmount.
    + BUG 4640: Fix guest mounts in mount-cifs.
    + BUG 5906: Fix Winbind crash on 'getent group'.
    + BUG 6066: netinet/ip.h present but cannot be compiled on Solaris.
    + BUG 6099: In order to allow Win7 to connect to a Samba NT style.
    + BUG 6279: Fix Winbind crash.
      PDC we set the flags before we know if it's an error or not.
    + BUG 6085: Fix build of vfs_default.
    + BUG 6098: When the DNS server is invalid, the ads_find_dc() does not work
      correctly.
    + Fix logic error in try_chown.
    + Correctly use chroot().
    + Fix bug in processing of open modes in POSIX open.
    + Don't install the cifs.upcall binary twice.
    + Fix mount.cifs handling of -V option.
    + Prevent segmentation fault on joining a very long domain name.
    + Don't try and delete a default ACL from a file.
    + Add workaround for MS KB932762.
    + Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
    + Fix a crash during name resolution when log level >= 10
      and libc segfaults if printf is passed NULL for a "%s" arg.
* Sat Aug 01 2009 lmuelle@suse.de
  - Use a conditional suse_version macro in front of the SUSE_ASNEEDED export.
* Mon Jul 27 2009 boyang@suse.de
  - lookupname failed, cannot find domain when attempt to change password;
    (bnc#520645); (bso#6560).
* Thu Jul 16 2009 lmuelle@suse.de
  - Don't link with --as-needed flag on post-11.1 systems.
* Tue Jul 14 2009 lmuelle@suse.de
  - Stop the smbfs service if an interface goes down; (bnc#517768).
* Wed Jul 08 2009 lmuelle@suse.de
  - Disable build of static libraries on post-11.1 systems; (bnc#509945).
* Wed Jul 08 2009 jmcdonough@suse.de
  - Fix missing zlibs for cifs.upcall and test_shlibs.
* Fri Jul 03 2009 lmuelle@suse.de
  - Update to 3.4.0.
    + BUG 6431: Local groups from 3.0 setups no longer found.
    + BUG 6459: Fix build of pam_smbpass on some distributions.
    + BUG 6481: 'net ads leave' needs to try account deletion, NetUnjoinDomain
      not.
    + BUG 6497: Fix calling of 'test' in configure.
    + BUG 6498: Add workaround for MS KB932762.
    + BUG 6499: Fix building of pam_smbpass.
    + BUG 6509: Use gid (not uid) cache in fetch_gid_from_cache().
    + BUG 6512: Fix support for enumerating user forms.
    + BUG 6514: Improve error message in 'net' when smb.conf is not available.
    + BUG 6520: Fix time stamps when "unix extensions = yes".
    + BUG 6521: Fix building tevent_ntstatus without config.h.
    + BUG 6526: Fix notifies in the share root directory.
    + BUG 6531: Fix pid file name.
* Thu Jul 02 2009 lmuelle@suse.de
  - Package /etc/samba/smbpasswd as %ghost on post-11.1 systems.
* Tue Jun 30 2009 jmcdonough@suse.de
  - Fix net ads leave; (bnc#511695).
* Thu Jun 25 2009 sbrabec@suse.cz
  - Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).
  - Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).
* Wed Jun 24 2009 lmuelle@suse.de
  - Update to 3.2.13, 3.3.6.
    + In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with
      file names treat user input as a format string to asprintf.  With a
      maliciously crafted file name smbclient can be made to execute code
      triggered by the server; CVE-2009-1886; (bnc#513360); (bso#6478).
* Wed Jun 24 2009 lmuelle@suse.de
  - Update to 3.0.35.
    + In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a
      data value can potentially affect access control when "dos filemode"
      is set to "yes"; CVE-2009-1888; (bnc#515479).
* Tue Jun 23 2009 jmcdonough@suse.de
  - Uninitialized read of a data value; CVE-2009-1888 (bnc#515479).
* Fri Jun 19 2009 lmuelle@suse.de
  - Update to 3.4.0rc1.
    + BUG 4699: Remove pidfile on clean shutdown.
    + BUG 5456: Fix "net ads testjoin".
    + BUG 6081: Make it possible to change machine account sids.
    + BUG 6253: Use correct value for password expiry calculation in
      pam_winbind.
    + BUG 6297: Owner of sticky directory cannot delete files created by others.
    + BUG 6305: Correctly prompt for a password when a username was given.
    + BUG 6328: Add support for multiple rights to
      "net sam rights grant/revoke".
    + BUG 6333: Consolidate create/delete account paths in pdbedit.
    + BUG 6449: 'net rap user add' crashes without -C option.
    + BUG 6451: net/libnetapi user rename using wrong access bits.
    + BUG 6458: Fix uninitialized variable in local_password_change().
    + BUG 6465: Fix enumeration of empty aliases.
    + BUG 6476: Fix smbd-zombies in memory when using [x]inetd.
    + BUG 6487: Add missing DFS call in trans2 mkdir call.
    + BUG 6488: acl_group_override() call in posix acls references an
      uninitialized variable.
    + Improve pam_winbind documentation.
  - Install a vendor copy of samba-common.dhcp as dhcpcd-hook-samba-functions.
* Thu Jun 18 2009 boyang@suse.de
  - Samba 3.2.0 - 3.2.12 smbclient commands dealing with file names treat user
    input as a format string to asprintf; CVE-2009-1886; (bnc#513360).
* Wed Jun 17 2009 boyang@suse.de
  - Fix a bad memleak in vfs_full_audit; (bnc#510035).
* Tue Jun 16 2009 lmuelle@suse.de
  - Update to 3.3.5.
    + Fix SAMR and LSA checks (bug #6089, #6289)
    + Fix posix acls when setting an ACL without explicit ACE for the
      owner (bug #2346).
    + Fix joining of Win7 into Samba domain (bug #6099).
    + Fix joining of Win2000 SP4 clients (bug #6301).
    + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
      owner.
    + BUG 5832: Fix build on RHEL when ccache is not available.
    + BUG 5853: Add keyutils-devel to build requires to fix build on RHEL.
    + BUG 5897: Fix shutdown script example in the smb.conf manpage.
    + BUG 6089: Revert the extra SAMR and LSA checks.
    + BUG 6099: Fix joining of Win7 into Samba domain.
    + BUG 6157: Fix handling of multi-value attribute "uid".
    + BUG 6289: Revert the extra SAMR and LSA checks.
    + BUG 6297: Owner of sticky directory cannot delete files created by others.
    + BUG 6301: Fix joining of Win2000 SP4 clients.
    + BUG 6309: Support remote unjoining of Windows 2003 or greater.
    + BUG 6315: smbd crashes doing vfs_full_audit on IPC$ close event.
    + BUG 6320: Handle registry config source in file_list.
    + BUG 6330: Fix DFS on AIX.
    + BUG 6336: Fix 'net groupmap set' segfault.
    + BUG 6361: Make --rcfile work in smbget.
    + BUG 6365: Re-Add the "dropbox" functionality with -wx rights on a
      directory.
    + BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
    + BUG 6382: Fix case insensitive access to DFS links.
    + BUG 6415: Filter out of range mappings in default idmap config in
      idmap_tdb.
    + BUG 6416: Filter out of range mappings in default idmap config in
      idmap_tdb2.
    + BUG 6417: Filter out of range mappings in default idmap config in
      idmap_ldap.
    + BUG 6441: Fix the compile with --enable-dnssd.
    + BUG 6449: 'net rap user add' crashes without -C option.
    + BUG 6465: Fix enumeration of empty aliases (ldb backend).
    + Prevent infinite include nesting.
    + Mark registry shares without path unavailable.
    + Also handle DirX return codes.
    + Fix Coverity ID 897.
    + Do not crash in ctdbd_traverse if ctdbd is not around.
    + Fix a race condition in winbind leading to a panic.
    + Some man pam_winbind improvements.
    + Zero an uninitialized array.
* Tue Jun 16 2009 lmuelle@suse.de
  - Update to 3.2.12.
    + Fix SAMR and LSA checks (bug #6089, #6289)
    + Fix posix acls when setting an ACL without explicit ACE for the
      owner (bug #2346).
    + Fix "force user" (bug #6291).
    + Fix Winbind crash (bug #6279).
    + Fix joining of Win7 into Samba domain (bug #6099).
    + BUG 2346: Fix posix acls when setting an ACL without explicit ACE for the
      owner.
    + BUG 5798: CFLAGS info lost in configure.
    + BUG 5832: Fix build on RHEL when ccache is not available.
    + BUG 5835: Add keyutils-devel to build requires.
    + BUG 5945: Fix out of memory error with Winbind idmap.
    + BUG 6089: Revert the extra SAMR and LSA checks.
    + BUG 6099: Fix joining of Win7 into Samba domain.
    + BUG 6279: Fix Winbind crash.
    + BUG 6289: Revert the extra SAMR and LSA checks.
    + BUG 6291: Fix "force user".
    + BUG 6301: Fix samr_ConnectVersion enum which is 32bit not 16bit.
    + BUG 6372: Fix usermanager only displaying 1024 groups and aliases.
    + BUG 6386: Groupdb mapping fix.
    + BUG 6382: Fix case insensitive access to DFS links.
    + BUG 6465: Fix enumeration of empty aliases (ldb backend).
    + Prevent creation of keys containing the '/' character.
    + Fix bug in processing of open modes in POSIX open.
    + Protect netlogon_creds_server_step() against NULL creds.
    + Also handle DirX return codes.
    + Fix a race condition in winbind leading to a panic.
    + Fix a crash bug if we timeout in net rpc trustdom list.
    + Fix profile acls in some corner cases.
* Fri Jun 12 2009 lmuelle@suse.de
  - Default with passdb backend to smbpasswd for SUSE products older than 11.2.
* Fri Jun 12 2009 lmuelle@suse.de
  - Explicitly use 'tdbsam' as passdb backend in the default smb.conf file.
* Mon Jun 08 2009 lmuelle@suse.de
  - Update to 3.4.0pre2.
    + The default passdb backend has been changed to 'tdbsam'!
    + Samba4 and Samba3 sources are included in the tarball.
    + Changed the way smbd handles untrusted domain names given during user
      authentication.
    + Various fixes including printer change notificiation for Samba spoolss
      print servers.
    + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
      and spoolss) were replaced by autogenerated code based on PIDL.
    + Samba3 and Samba4 do now share a common tevent library.
    + The code has been cleaned up and the major basic interfaces are shared
      with Samba4 now.
    + An asynchronous API has been added.
    + Made parameter syntax of the net command more consistent.
    + BUG 2346: Fix posix ACLs when setting an ACL without explicit ACE for the
      owner.
    + BUG 4271: testparm should not print includes.
    + BUG 4831: Don't call openlog() or closelog() from pam_smbpass.
    + BUG 5681: Do not limit the number of network interfaces.
    + BUG 5859: Fix renaming of samr objects failed due to samr setuserinfo
      access checks.
    + BUG 6099: Fix NETLOGON credential chain.
    + BUG 6136: New AFS syscall conventions.
    + BUG 6157: Fix handling of multi-value attribute "uid".
    + BUG 6253: Use correct value for password expiry calculation.
    + BUG 6291: Fix 'force user'.
    + BUG 6292: Update config.guess from gnu.org.
    + BUG 6302: Give the VFS a chance to read from 0-byte files.
    + BUG 6309: Support remote unjoining of Windows 2003 or greater.
    + BUG 6313: ldapsam_update_sam_account() crashes while doing talloc_free on
      malloced memory.
    + BUG 6315: Fix smbd crashes when doing vfs_full_audit on IPC$ close event.
    + BUG 6320: Handle registry config source in file_list.
    + BUG 6330: Fix DFS on AIX.
    + BUG 6336: Fix segfault in 'net groupmap set'.
    + BUG 6340: Don't segfault when cleartext trustdom pwd could not be
      retrieved.
    + BUG 6357: Use Samba default command line arguments in 'net'.
    + BUG 6359: smbclient -L does not list workgroup for hosts with both IPv4
      and IPv6 addresses
    + BUG 6361: Make --rcfile work in smbget.
    + BUG 6371: Unsuccessful 'net conf setparm' leaves empty share.
    + BUG 6372: usermanager only displaying 1024 groups and aliases.
    + BUG 6387: Fix a crash bug in idmap_ldap_unixids_to_sids.
    + BUG 6415: Filter out of range mappings in default idmap config
      (idmap_tdb).
    + BUG 6416: Filter out of range mappings in default idmap config
      (idmap_tdb2).
    + BUG 6417: Filter out of range mappings in default idmap config
      (idmap_ldap).
    + Change the way smbd handles untrusted domain names given during user
      authentication.
    + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
      spoolss by autogenerated code based on PIDL.
    + Fix several printing issues and improve support for printer change
      notificiations.
    + Add 'net eventlog'.
    + Add asynchronous API.
    + Make Samba3 and Samba4 share a tevent library.
    + Add two new parameters to control how we verify kerberos tickets.
    + Add 'net rpc service' subcommands 'create' and 'delete'.
    + Fix the core of the SAMR access functions.
    + Fix SAMR server for winbindd access.
    + Add dbwrap_tool - a tdb tool that is CTDB-aware.
    + Hide "config backend" from swat.
    + Fix linking with --disable-shared-libs.
    + Fix issue with missing entries when enumerating directories.
    + Map NULL domains to our global sam name.
    + Fix driver upload for Xerox 4110 PS printer driver.
    + Add "net dom renamecomputer" to rename machines in a domain.
    + Inspect the correct computername string before enabling/disabling the
      change button in netdomjoin-gui.
    + Fix join prompt dialog test in netdomjoin-gui.
    + Only gray out labels when not root and not connecting to remote
      machines (netdomjoin-gui).
    + Allow to switch between workgroups/domains with the same name
      (netdomjoin-gui).
    + Add NetShutdownInit and NetShutdownAbort.
    + Fix samr access checks.
    + Add a security model to LSA.
    + Also handle DirX return codes.
    + Do not crash in ctdbd_traverse if ctdbd is not around.
    + Fix Coverity ID 897.
    + Fix a race condition in vfs_aio_fork with gpfs share modes.
    + Fix bug disclosed by lock8 torture test.
    + Fix a race condition in winbind leading to a panic.
    + Detect tight loop in tdb_find().
    + Fix chained sesssetupAndX/tconn messages.
    + Fix strict locking with chained reads.
    + Fix two bugs in sendfile.
    + Fix memory leak.
    + Fix file descriptor leak.
    + Fallback to the legacy sid_to_(uid|gid) instead of returning NULL.
    + Always allocate memory in dptr_ReadDirName.
    + Fix 'net' crash during domain join.
    + Zero an uninitialized array.
    + Allow child processes to exit gracefully if we are out of fds.
* Thu Jun 04 2009 sjayaraman@suse.de
  - Enable cifs.upcall on versions newer than SUSE 10.0.
* Thu Jun 04 2009 sjayaraman@suse.de
  - Add BuildRequires to keyutils-devel.
* Thu Jun 04 2009 sjayaraman@suse.de
  - Remove redundant Requires to keyutils-libs for cifs-mount.
* Wed May 27 2009 jmcdonough@suse.de
  - Detect tight loop in tdb_find(); (bnc#450974).
* Mon May 18 2009 jmcdonough@suse.de
  - Fix lp printing with kerberos; (bnc#476913).
* Sat May 09 2009 lmuelle@suse.de
  - Add BuildRequires to ctdb-devel for systems newer than SUSE 10.0 and all
    other build targets.
* Thu Apr 30 2009 lmuelle@suse.de
  - Update to 3.4.0pre1.
    + Samba4 and Samba3 sources are included in the tarball
    + Changed the way smbd handles untrusted domain names given during user
      authentication.
    + Various fixes including printer change notificiation for Samba spoolss
      print servers.
    + The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
      and spoolss) were replaced by autogenerated code based on PIDL.
    + Samba3 and Samba4 do now share a common tevent library.
    + The code has been cleaned up and the major basic interfaces are shared
      with Samba4 now.
    + An asynchronous API has been added.
    + Change the way smbd handles untrusted domain names given during user
      authentication.
    + Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog and
      spoolss by autogenerated code based on PIDL.
    + Fix several printing issues and improve support for printer change
      notificiations.
    + Add 'net eventlog'.
    + Add asynchronous API.
    + Make Samba3 and Samba4 share a tevent library.
    + Add two new parameters to control how we verify kerberos tickets.
    + Add 'net rpc service' subcommands 'create' and 'delete'.
    + Make merged build possible.
    + Move common libraries to the shared lib/ directory.
* Thu Apr 30 2009 lmuelle@suse.de
  - Update to 3.3.4.
    + Fix domain logins for WinXP clients pre SP3 (bug #6263).
    + Fix samr_OpenDomain access checks (bug #6089).
    + Fix usrmgr.exe creating a user (bug #6243).
    + BUG 6089: Fix samr_OpenDomain access checks.
    + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
      "msdfs root" set to "yes".
    + BUG 6279: Fix Winbind crash.
    + BUG 5329: Add "net rpc service delete/create".
    + BUG 6238: Make sure wbcLogoffUserParams are properly initialized before
      freed.
    + BUG 6263: Fix domain logins for WinXP clients pre SP3.
    + BUG 6286: Call init function for builtin idmap modules before probing for
    them as shared modules.
    + BUG 6243: Fix usrmgr.exe creating a user.
    + net conf: Save share name as given, not as lower case only.
    + Prevent creation of registry keys containing the '/' character.
    + Allow pdbedit to change a user rid/sid.
    + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
    + Don't access a freed structure when logging off and re-using a vuid.
    + Try to to fix password_expired flag handling.
    + Make sure to grey out change fields in the netdomjoin-gui when not
      running as root.
    + Don't look up local user for remote changes, even when root.
    + Use procid_str in debug messages for better cluster-debuggability.
    + Use cluster-aware procid_is_me instead of comparing pids.
    + Fix smbd crash for close_on_completion.
    + Fix a memleak in an unlikely error path in change_notify_create().
    + Do not use the file system GET_REAL_FILENAME for mangled names.
    + Fix a crash bug if we timeout in net rpc trustdom list.
    + Add '--request-timeout' option to net.
    + In net_conf_import, start a transaction when importing a single share.
    + Fix writing of roaming profiles with "profile acls" set to "yes".
* Fri Apr 17 2009 lmuelle@suse.de
  - Update to 3.2.11.
    + Fix domain logins for WinXP clients pre SP3 (bug #6263).
    + Fix samr_OpenDomain access checks (bug #6089).
    + Fix smbd crash for close_on_completion.
    + BUG 6089: Fix samr_OpenDomain access checks.
    + BUG 6205: Correct sample smb.conf share configuration.
    + BUG 6254: Fix IPv6 PUT/GET errors to an SMB server (3.3) with
      "msdfs root" set to "yes".
    + BUG 6263: Fix domain logins for WinXP clients pre SP3.
    + Allow pdbedit to change a user rid/sid.
    + When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.
    + Fix resume command typo for "printing = vlp".
    + Fix smbd crash for close_on_completion.
    + Fix a memleak in an unlikely error path in change_notify_create().
    + Don't look up local user for remote changes, even when root.
* Fri Apr 17 2009 jmcdonough@suse.de
  - Don't lookup local user for remote password changes; (bnc#493507).
* Thu Apr 02 2009 lmuelle@suse.de
  - Update to 3.3.3.
    + Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
      correctly (bug #6195).
    + Fix serving of files with colons to CIFS/VFS client (bug #6196).
    + Fix "map readonly" (bug #6186).
    + BUG 6195: Don't let smbd child processes panic.
    + Add backend_requires_messaging() method to libsmbconf.
    + Add methods is_writeable() and wrapper smbconf_is_writeable() to libsmbconf.
    + Fall back to file backend when no valid backend was found.
    + Fix a memleak in dbwrap_rbt.
    + Provide transaction_start|commit|cancel fns for the registry tdb.
    + Speed up "net conf drop".
    + Speed up "net conf import".
    + Add transactions to the libsmbconf API.
    + Reduce memory usage of "net conf import".
    + Registry cleanup.
    + Fix handling of SAMBA_VERSION_VENDOR_PATCH.
    + Fix build of pam_winbind.so with static linking.
    + Tidy up some convert_string_internal error cases.
    + BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to
      run elections.
    + Allow DFS client paths to work when POSIX pathnames have been selected.
    + Try and fix the build farm RAW-STREAMS errors.
    + Ensure files starting with multiple dots are hidden.
    + BUG 6102: NetQueryDisplayInformation could return wrong information.
    + BUG 6193: Avoid messing with sync_context in libnet_samsync_delta().
    + Fix notify_printer_status_byname.
    + Fix Coverity IDs 722, 762, 774, 775, 776.
    + Fix build on old Heimdal based systems.
    + Fix compile warning.
    + Use parentheses in if condition to make negation clear.
    + Add dirsort module.
    + BUG 6147: Fix detection of the GNU ld version.
    + BUG 6097: Fix smbd segfault.
    + BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped
      members.
    + BUG 6139: Add missing whitespace in mount.cifs error message.
    + Fix a malloc/talloc mismatch when cli_initialise() fails.
    + Fix a valgrind error.
    + Speed up "net conf list".
    + Add sorted subkey cache.
    + Use StrCaseCmp in the dirsort module.
    + Document the dirsort module.
    + Disable dns_sd by default.
    + Add avahi detection to configure.
    + Add event avahi binding.
    + Use avahi to register _smb._tcp in smbd.
    + Fix two memleaks in the encryption code.
    + Fix a scary "fill_share_mode_lock failed" message.
    + BUG 6228: Fix SMBC_open_ctx failure due to path resolve failure doesn't set
      errno.
    + Don't use reserved words in smbconftort.
    + Fix smb signing for fragmented trans/trans2/nttrans requests.
    + Parse_packet can return NULL which is then dereferenced in
      match_mailslot_name.
    + Format the header check for netinet/ip.h more nicely.
    + Missing break in conversion function prevents tdb password database
      update.
* Wed Apr 01 2009 jmcdonough@suse.de
  - Update to 3.2.10.
    + BUG #6195: Don't let smbd child processes panic.
* Wed Apr 01 2009 jmcdonough@suse.de
  - BUG 6195: Fix crash on passdb conversion.
* Tue Mar 31 2009 jmcdonough@suse.de
  - Update to 3.2.9.
    + BUG 5920: The length of the memcpy was calculated wrong.
    + BUG 6097: Fix smbd segfault.
    + BUG 6098: Fix ads_find_dc() with "security = domain" when the DNS
      server is invalid.
    + BUG 6099: Samba returns incurrate capabilities list.
    + BUG 6100: Implement _netr_LogonGetCapabilities() with
      NT_STATUS_NOT_IMPLEMENTED.
    + BUG 6102: NetQueryDisplayInformation could return wrong information.
    + BUG 6130: Fix crash in winbindd_rpc lookup_groupmem() on unmapped
      members.
    + BUG 6133: Cannot delete non-ACL files on NFSv4 ACL filesystem.
    + BUG 6161: smbclient corrupts source path in tar mode.
    + BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif().
    + BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client.
    + BUG 6224: nmbd waits 5 minutes before checking to run elections.
    + BUG 6228: Fix SMBC_open_ctx failure when path failure doesn't set errno.
    + Numerous Coverity fixes
    + Fix double free caused by incorrect talloc_steal usage.
    + Backport delete semantics of alternate data streams on a file truncate.
    + Allow set attributes on a stream fnum to redirect to the base filename.
    + Fix use of streams modules with CIFSFS client.
    + Fix more POSIX path lstat calls.
    + Allow DFS client paths to work with POSIX pathnames.
    + Ensure files starting with multiple dots are hidden.
    + Fix guest auth when Winbind is running.
    + Fix memleak in get_remote_printer_publishing_data().
    + cifs mount fix for handling -V parameter.
    + Fix guest mounts.
    + Clean-up entries in /etc/mtab after unmount.
    + Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
    + Enable total anonymization in vfs_smb_traffic_analyzer.
    + Don't try and delete a default ACL from a file.
    + Fix remotely adding a share via MMC.
    + Fix resume handle for _samr_EnumDomainGroups.
    + Fix a buffer handling bug when adding lots of registry keys.
    + Fix a O(n^2) algorithm in regdb_fetch_keys().
    + Fix a valgrind error / segfault in dns_register_smbd().
    + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
    + Fix a malloc/talloc mismatch when cli_initialise() fails.
    + Fix two memleaks in the encryption code.
    + Fix "fill_share_mode_lock failed" message.
    + Add S-1-22-X-Y sids to the local token.
    + Fix smb signing for fragmented trans/trans2/nttrans requests.
    + Don't miss an absolute pathname as a kerberos keytab path.
    + Have nmbd check all available interfaces for WINS before failing.
    + Initialize the id_map status in idmap_ldap to avoid surprise.
* Sun Mar 15 2009 lmuelle@suse.de
  - Obsolete change from 2008-03-05 by removing the needless examples cleanup.
* Sat Mar 14 2009 lmuelle@suse.de
  - Update to 3.3.2.
    + Fix "force group" (bug #6155).
    + Fix saving of files on Samba share using MS Office 2007 (bug #6160).
    + Fix guest authentication in setups with "security = share" and "guest ok =
      yes" when Winbind is running.
    + Fix corruptions of source path in tar mode of smbclient (bug #6161).
    + BUG 6082: Fix renaming and deleting of directories using Windows clients.
    + BUG 6154: Make ZFS honor admin users.
    + BUG 6155: Fix "force group".
    + BUG 6160: Fix saving of files on Samba share using MS Office 2007.
    + BUG 6161: Fix corruptions of source path in tar mode of smbclient.
    + Fix some NetBSD warnings.
    + Fix bug in processing of open modes in POSIX open.
    + Fix use of streams modules with CIFSFS client.
    + Ensure ACL modules work with POSIX paths.
    + Use fsp->posix_open in preference if we have it.
    + Fix more POSIX path lstat calls.
    + Fix a bug in message handling for the change notify code.
    + Fix guest authentication in setups with "security = share" and "guest ok =
      yes" when Winbind is running.
    + BUG 4640: Fix guest mounts in mount.cifs.
    + Fix displaying the version string properly when no other parameters passed
      in in mount.cifs.
    + Prefer gssapi header files from subdirectory.
    + BUG 6176: winbindd -n should disable the winbind idmap cache.
    + Add a vfs_preopen module to hide fs latencies.
    + Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
    + Fix a valgrind error / segfault in dns_register_smbd().
    + Fix build on SLES8.
    + Decremented by 1 for ntcancel requests.
    + Fix creation of core files.
    + Fix first mapping of uids/gids in Winbind.
    + Initialize the id_map status in idmap_ldap to avoid surprise.
    + Fix initialization of idmap status.
* Tue Mar 10 2009 lmuelle@suse.de
  - Only call '%find_lang pam_winbind' in the samba spec file, not samba-doc.
* Thu Mar 05 2009 ro@suse.de
  - Ignore return value from subshell to fix build.

Files

/usr/lib64/libdcerpc.so.0
/usr/lib64/libdcerpc.so.0.0.1


Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Aug 26 23:25:10 2014