summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* selftest: add force_user_error_inject share in maptoguest envRalph Boehme2021-02-011-0/+10
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14617 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit f3f8fdfbf10f690bc8d972a13d6f74f1fb0fb375)
* vfs_error_inject: add unlinkat hookRalph Boehme2021-02-011-0/+37
| | | | | | | | | | | | Note that a failure is only injected if the owner of the parent directory is not the same as the current user. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14617 Back-ported from commit c44dad3ac2eb36fc5eb5a9f80a9ef97183be26ef. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* s3/auth: implement "winbind:ignore domains"Ralph Boehme2021-02-011-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Under the following conditions a user from an ignored domain might be able to authenticate: - using Kerberos - successfully previous authentication so the idmap and name caches are filled - winbind not running (fwiw, winbindd is mandatory on a domain member) - nscd running with a cached getpwnam for the ignored user (otherwise auth fails because getpwnam fails) - lookup_name() function being modified to look into the name cache before contacting winbindd. Currently it talks directly to winbindd and that will check the cache. Currently, authentication will only fail because creating the local token for the user fails because an LSA lookupname RPC call fails (because winbindd is not running). All of this makes a successfull authentication unlikelly, but that is more by accident then by design. To ensures that if winbindd is not running and as such winbindd itself can not enforce the restriction, also implement the ignored domains check in the auth system as a last line of defense. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 RN: "winbind:ignore domains" doesn't prevent user login from trusted domain Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit df5fe2d835169161d3930acf1e9c750dd2bc64b6)
* winbind: check for allowed domains in winbindd_pam_auth_pac_verify()Ralph Boehme2021-02-012-2/+8
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit da474ddd13d84f07f5da81c843e651844f33a003)
* winbind: check for allowed domains in winbindd_dual_pam_chauthtok()Ralph Boehme2021-02-011-0/+8
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 88e92faace7ec17810903166fa3433aa4842a4e3)
* winbind: check for allowed domains in winbindd_dual_pam_chng_pswd_auth_crap()Ralph Boehme2021-02-011-0/+9
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 4bc17600bc50fbc0e54d9d019d8db67001fc3eef)
* winbind: check for allowed domains in winbindd_dual_pam_auth_crap()Ralph Boehme2021-02-012-1/+10
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit c17bc9c6115e4e92132f3cb912547eac78227938)
* winbind: check for allowed domains in winbindd_dual_pam_auth()Ralph Boehme2021-02-011-0/+9
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 4cefdf03fec91cdcf700922b1a5ceca02407e259)
* winbind: move "winbind:ignore domain" logic to a seperate functionRalph Boehme2021-02-013-8/+23
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 894caca79476d25a0268d89b2ad8a5758b7e31f3)
* selftest: add a test for "winbind:ignore domains"Ralph Boehme2021-02-013-0/+110
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 32197d21dabecaee9bc1d6cd557578892220fe4c)
* winbind: handle MSG_SMB_CONF_UPDATED in the winbinds childrenRalph Boehme2021-02-011-0/+22
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 072ef48001710ed8326c83295f2d3cc301d27cfe)
* winbind: set logfile after reloading configRalph Boehme2021-02-011-3/+3
| | | | | | | | | | lp_load_global() will overwrite whatever we've set with lp_set_logfile(). BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 0c4497f8c66d0ea7c68d42c19e859932ebc3e2ac)
* winbind: move config-reloading code to winbindd_dual.cRalph Boehme2021-02-013-17/+28
| | | | | | | | | | In preperation of forwarding MSG_SMB_CONF_UPDATED to all childs. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 81edc65e79aba121db800ec53aadd766e61a0001)
* selftest: use correct DNS domain name for wrapper hosts fileRalph Boehme2021-02-011-2/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some reason the join fails to register the DNS records when provisioning the member env: Using short domain name -- SAMBA2008R2 Joined 'IDMAPADMEMBER' to dns domain 'samba2008r2.example.com' DNS Update for idmapadmember.samba.example.com failed: ERROR_DNS_UPDATE_FAILED At the same time the hosts file used by the wrappers contains the wrong fqdn. As a result the test that the next commit is going do add fails due do the broken DNS resolution: ... UNEXPECTED(failure): samba3.blackbox.winbind_ignore_domain.test_winbind_ignore_domains_ok_krb5(ad_member_idmap_ad:local) REASON: Exception: Exception: do_connect: Connection to idmapadmember.samba2008r2.example.com failed (Error NT_STATUS_UNSUCCESSFUL) ... Checking DNS in the testenv, first the working record for the main DC: testenv$ dig @10.53.57.64 dc7.samba2008r2.example.com +short 10.53.57.27 testenv$ bin/samba-tool dns query dc7 samba2008r2.example.com dc7 A -U Administrator%locDCpass7 Name=, Records=1, Children=0 A: 10.53.57.27 (flags=f0, serial=1, ttl=900) Now the failing idmapadmember: testenv$ dig @10.53.57.64 idmapadmember.samba2008r2.example.com +short testenv$ bin/samba-tool dns query dc7 samba2008r2.example.com idmapadmember A -U Administrator%locDCpass7 ERROR: Record or zone does not exist. Fixing the hosts file lets the tests work, fixing the broken DNS record registration is a task for another day. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit e1fc84138ca118c4187d87b7be4a7e6dd771dc4f)
* VERSION: Bump version up to 4.13.5...Karolin Seeger2021-01-261-2/+2
| | | | | | and re-enable GIT_SNAPSHOT. Signed-off-by: Karolin Seeger <kseeger@samba.org>
* VERSION: Disable GIT_SNAPSHOT for the 4.13.4 release.samba-4.13.4Karolin Seeger2021-01-261-1/+1
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* WHATSNEW: Add release notes for Samba 4.13.4.Karolin Seeger2021-01-251-4/+72
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* script/release.sh: always select the GPG key by it's IDKarolin Seeger2021-01-221-2/+2
| | | | | | | | | Signed-off-by: Karolin Seeger <kseeger@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 715b208b513035269a6523f8543c4bf328a7c0f2) Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-13-test): Fri Jan 22 15:10:26 UTC 2021 on sn-devel-184
* ReleaseKey: add GnuPG key transition statement for the Samba release keyKarolin Seeger2021-01-221-0/+27
| | | | | | Signed-off-by: Karolin Seeger <kseeger@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 38a278b1afedd6c0a6de0fd4f08008e83f8597a9)
* script/release.sh: Use new GPG key.Karolin Seeger2021-01-221-3/+3
| | | | | Signed-off-by: Karolin Seeger <kseeger@samba.org> (cherry picked from commit 2f6cea063ddf52d77037644d612bbc209837e707)
* s3: smbd: Add call to conn_setup_case_options() to create_conn_struct_as_root().Jeremy Allison2021-01-201-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | Ensures temporary DFS share doesn't leave the case parameters set as zero (i.e.: conn->case sensitive = 0 conn->share_case_preserve = 0 and default case is lower which can cause problems doing a DFS_GET_REFERRALS request). BUG: https://bugzilla.samba.org/show_bug.cgi?id=14612 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Anoop C S <anoopcs@samba.org> Autobuild-User(master): Anoop C S <anoopcs@samba.org> Autobuild-Date(master): Wed Jan 13 18:14:31 UTC 2021 on sn-devel-184 (cherry picked from commit 39ce73321093a0a5e25f574d0d32d7f88892de46) Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-13-test): Wed Jan 20 10:27:02 UTC 2021 on sn-devel-184
* s3: smbd: Factor out setting up case parameters for a share to a function - ↵Jeremy Allison2021-01-203-10/+21
| | | | | | | | | | | | conn_setup_case_options(). Will allow it to be reused in the msdfs temporary share code. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14612 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Anoop C S <anoopcs@samba.org> (cherry picked from commit ab7700177c2badbf8ed649985be8029223b6e946)
* build: remove smbd_conn private libraryRalph Boehme2021-01-201-6/+1
| | | | | | | | | | | This is not needed anymore since 6822baa2920f30374ec84363497d97e24f359fab. Needed here for: BUG: https://bugzilla.samba.org/show_bug.cgi?id=14612 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 80ac7fa7c4c728bef4f947872c090fec35fb26f0)
* libcli/smb: allow unexpected padding in SMB2 IOCTL responsesStefan Metzmacher2021-01-202-2/+18
| | | | | | | | | | | | | | | | | | A NetApp Ontap 7.3.7 SMB server add 8 padding bytes to an offset that's already 8 byte aligned. RN: Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14607 Pair-Programmed-With: Volker Lendecke <vl@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Fri Jan 15 08:36:34 UTC 2021 on sn-devel-184 (cherry picked from commit 4c6c71e1378401d66bf2ed230544a75f7b04376f)
* smbd: implement FSCTL_SMBTORTURE_IOCTL_RESPONSE_BODY_PADDING8 as reproducer ↵Stefan Metzmacher2021-01-203-3/+40
| | | | | | | | | | for bug 14607 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14607 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 39c0d2b666a6ddac7cd3b29fe76be7375690b27b)
* s4:torture/smb2: add samba3.smb2.ioctl.bug14607Stefan Metzmacher2021-01-202-0/+55
| | | | | | | | | | | FSCTL_SMBTORTURE_IOCTL_RESPONSE_BODY_PADDING8 will be used to trigger an SMB2 IOCTL response with extra padding. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14607 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 3db566026bcc0bff87acae762211e1c49220dc82)
* libcli/smb: split out smb2cli_ioctl_parse_buffer()Stefan Metzmacher2021-01-201-80/+110
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14607 Pair-Programmed-With: Volker Lendecke <vl@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 508ed5b42c23f8b3d9730d838bd921cb73c61358)
* libcli/smb: Allow smb2cli_validate_negotiate_info_done() to ignore ↵Jeremy Allison2021-01-201-0/+25
| | | | | | | | | | | | | | | | | NT_STATUS_INVALID_PARAMETER. This can be returned from NetApp Ontap 7.3.7 SMB server implementations. Now we have ensured smb2_signing_check_pdu() cannot return NT_STATUS_INVALID_PARAMETER on a signing error it's safe to check this error code here. Windows 10 clients ignore this error from the NetApp. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14607 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 0abb5ca6b96c843909dea56d5594e334547ae90f)
* libcli/smb: Change some checks to SMB_ASSERTSStefan Metzmacher2021-01-201-7/+2
| | | | | | | | | | | If we end up here, it's definitely a programming error in the basic parsing layer of the SMB2 packet. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14607 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit fdcdfceefdd3186ef0b70bb6e83dddc8f4c073db)
* vfs_fruit: fix close for fake_fdRalph Boehme2021-01-131-4/+10
| | | | | | | | | | | | | | | | | | | If the next backend doesn't use kernel fd's should not pass a fake_fd to the next backend. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14596 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jan 8 21:38:18 UTC 2021 on sn-devel-184 (back-ported from commit 564b62a6f7c0a9b9712946d723118122b9c3785f) Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-13-test): Wed Jan 13 14:45:03 UTC 2021 on sn-devel-184
* vfs_fruit: check fake_fd in fruit_pread_meta_stream()Ralph Boehme2021-01-131-0/+5
| | | | | | | | | | | | | Don't call into the next VFS backend if we know we still have a fake-fd. Just return -1 and the caller has the logic to handle this, which results in returning a AFP_AfpInfo blob initialized with some defaults. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14596 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (back-ported from commit c5da08422990dfc1e082bc01aa10d6e415eebe3f)
* vfs_fruit: use "fake_fd" instead of "created"Ralph Boehme2021-01-131-10/+1
| | | | | | | | | | | Both have basically the same semantics. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14596 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (back-ported from commit 36eb30fd7d4b82bffd0e1ab471c088f678d700a4)
* vfs_streams_xattr: make use of vfs_fake_fd_close()Stefan Metzmacher2021-01-131-2/+2
| | | | | | | | | | | | | | When we used vfs_fake_fd() we should use vfs_fake_fd_close() in order to have things symetric. That may allows us to change vfs_fake_fd() internally if required. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14596 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (back-ported from commit 40e70cbd3c3a1df9205a7b18d07784c1754cc340)
* vfs_fruit: make use of vfs_fake_fd_close()Stefan Metzmacher2021-01-131-2/+2
| | | | | | | | | | | | | | When we used vfs_fake_fd() we should use vfs_fake_fd_close() in order to have things symetric. That may allows us to change vfs_fake_fd() internally if required. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14596 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (back-ported from commit 719c83b4dc4cef16429ec2803621039545f6885e)
* s3:smbd: add vfs_fake_fd_close() helperStefan Metzmacher2021-01-132-0/+11
| | | | | | | | | | | | | | | When we used vfs_fake_fd() we should use vfs_fake_fd_close() in order to have things symetric. This makes code easier to understand and may allow us to change vfs_fake_fd() internally if required. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14596 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (back-ported from commit 8f057333466b2d9845cd8bc2b794d98252ade2a4)
* s3:lib: Create the cache path of user gencache recursivelyAndreas Schneider2021-01-131-1/+1
| | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14601 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jan 6 23:59:58 UTC 2021 on sn-devel-184 (cherry picked from commit 38c989fab78c3baade3e441829b7becf6b25ef3f)
* lib:util: Add directory_create_or_exists_recursive()Andreas Schneider2021-01-133-7/+165
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14601 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> from commit bf7b165877bdfd07eb84ecafdc87bd7a6d945f09)
* vfs_virusfilter: Allocate separate memory for config char*Arne Kreddig2021-01-131-9/+57
| | | | | | | | | | | | | | | | Instead of using only the pointer to the configuration char* from the global configuration, vfs_virusfilter now allocates its own memory and copies the char* from the global configuration. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14606 Signed-off-by: Arne Kreddig <arne@kreddig.net> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Jan 7 19:25:38 UTC 2021 on sn-devel-184 (cherry picked from commit 2f21d1b0ac8526508161de73290f67858b2fe668)
* Do not create an empty DB when accessing a sam.ldbAndrew Bartlett2021-01-071-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | Samba already does this for samba-tool and doing this should make our errors more sensible, particularly in BIND9 if not provisioned with the correct --dns-backend=DLZ_BIND9 The old error was like: named[62954]: samba_dlz: Unable to get basedn for /var/lib/samba/private/dns/sam.ldb - NULL Base DN invalid for a base search. The new error will be like (in this case from the torture test): Failed to connect to Failed to connect to ldb:///home/abartlet/samba/st/chgdcpass/bind-dns/dns/sam.ldb: Unable to open tdb '/home/abartlet/samba/st/chgdcpass/bind-dns/dns/sam.ldb': No such file or directory: Operations error BUG: https://bugzilla.samba.org/show_bug.cgi?id=14579 Reviewed-by: Andreas Schneider <asn@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit d49e96bc45ea5e2d3364242dad36fe9094b7cc42) Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-13-test): Thu Jan 7 10:50:10 UTC 2021 on sn-devel-184
* bootstrap: Cope with case changes in CentOS 8 repo namesMartin Schwenke2021-01-054-6/+10
| | | | | | | | | | | | RN: Be more flexible with repository names in CentOS 8 test environments BUG: https://bugzilla.samba.org/show_bug.cgi?id=14594 Signed-off-by: Martin Schwenke <martin@meltin.net> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (backported from commit 1c59f49aaede8ec1662d4e49aef84fcd902a8a76) Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-13-test): Tue Jan 5 12:50:02 UTC 2021 on sn-devel-184
* lib: Avoid declaring zero-length VLAs in various messaging functionsDimitry Andric2021-01-051-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | In messaging_rec_create(), messaging_recv_cb() and messaging_dispatch_rec(), variable length arrays of file descriptors are declared using an incoming num_fds parameter. However, there are several scenarios where num_fds can be zero, and declaring a zero-length VLA is undefined behavior. This can lead to segmentation faults and/or other crashes when compiling with recent versions of clang at high optimization levels. To avoid ever using zero as the length for these declarations, use MAX(1, length) instead. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14605 Signed-off-by: Dimitry Andric <dimitry@andric.com> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Mon Jan 4 10:50:07 UTC 2021 on sn-devel-184 (cherry picked from commit 3e96c95d41e4ccd0bf43b3ee78af644e2bc32e30)
* VERSION: Bump version up to 4.13.4...Karolin Seeger2020-12-151-2/+2
| | | | | | and re-enable GIT_SNAPSHOT. Signed-off-by: Karolin Seeger <kseeger@samba.org>
* VERSION: Disable GIT_SNAPSHOT for the 4.13.3 release.samba-4.13.3Karolin Seeger2020-12-151-1/+1
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* WHATSNEW: Add release notes for Samba 4.13.3.Karolin Seeger2020-12-151-2/+73
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* vfs_zfsacl: add missing inherited flag on hidden "magic" everyone@ ACERalph Boehme2020-12-091-1/+2
| | | | | | | | | | | | | | | | | This was an omission in the fixes for bug 14470. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14587 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Dec 1 20:29:34 UTC 2020 on sn-devel-184 (cherry picked from commit 936f74daed0d6221312f651f35c4ed357bbf1414) Autobuild-User(v4-13-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-13-test): Wed Dec 9 08:56:47 UTC 2020 on sn-devel-184
* vfs_zfsacl: reformattingRalph Boehme2020-12-091-2/+3
| | | | | | | | | | No change in behaviour. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14587 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit a8457ac3c80e22588e33a343c2306b702734ca88)
* s4/samba: call force_check_log_size() in standard_new_task()Ralph Boehme2020-12-091-0/+2
| | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14248 RN: samba process does not honor max log size Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Mon Dec 7 18:54:29 UTC 2020 on sn-devel-184 (cherry picked from commit 058f96f4c4eda42b404f0067521d3eafb495fe7d)
* s4/samba: call force_check_log_size() in standard_accept_connection()Ralph Boehme2020-12-091-0/+2
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14248 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 6fa5fb8ef26dab862df5c46bb5e74f19839c30e2)
* s4/samba: call force_check_log_size() in prefork_reload_after_fork()Ralph Boehme2020-12-091-0/+1
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14248 Signed-off-by: Ralph Boehme <slow@samba.org> (cherry picked from commit 82b64e930b0e2d3b2e5186017d9f8e420994136c)
* s4: call reopen_logs_internal() in the SIGHUP handler of the prefork process ↵Ralph Boehme2020-12-091-1/+1
| | | | | | | | | | | | | model With debug_schedule_reopen_logs() the actual reopen only takes place at some point in the future when a DEBUG message is processed. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14248 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 19413e76a46f07fdd46fde5e60707bb6845a782d)