samba - Jul 2019 - [Announce] Samba 4.9.10 Available for Download

=======================================================			"No one saves us
but ourselves.
			 No one can and no one may.
			 We ourselves must walk the
			 path."

			 Buddha
=======================================================

Release Announcements
---------------------

This is the latest stable release of the Samba 4.9 release series.


Changes since 4.9.9:
--------------------

o  Jeremy Allison <jra at samba.org>
   * BUG 13938: s3: SMB1: Don't allow recvfile on stream fsp's.
   * BUG 13956: s3: winbind: Fix crash when invoking winbind idmap scripts.
   * BUG 13964: smbd does not correctly parse arguments passed to dfree and
     quota scripts.

o  Andrew Bartlett <abartlet at samba.org>
   * BUG 13981: docs: Improve documentation of "lanman auth" and
"ntlm auth"
     connection.

o  Bj?rn Baumbach <bb at sernet.de>
   * BUG 14002: python/ntacls: Use correct "state directory" smb.conf
option
     instead of "state dir".

o  Ralph Boehme <slow at samba.org>
   * BUG 13840: registry: Add a missing include.
   * BUG 13938: s3:smbd: Don't use recvfile on streams.
   * BUG 13944: SMB guest authentication may fail.
   * BUG 13958: AppleDouble conversion breaks Resourceforks.
   * BUG 13964: s3: lib: Rename all uses of file_pload_XXX ->
file_ploadv_XXX.
   * BUG 13968: vfs_fruit makes direct use of syscalls like mmap() and pread().
   * BUG 13987: s3:mdssvc: Fix flex compilation error.

o  G?nther Deschner <gd at samba.org>
   * BUG 13872: s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly.

o  David Disseldorp <ddiss at samba.org>
   * BUG 13940: vfs_ceph: Fix cephwrap_flistxattr() debug message.

o  Aaron Haslett <aaronhaslett at catalyst.net.nz>
   * BUG 13799: dsdb:samdb: Schemainfo update with relax control.

o  Amitay Isaacs <amitay at gmail.com>
   * BUG 13943: ctdb-common: Fix memory leak in run_proc.

o  Aliaksei Karaliou <akaraliou at panasas.com>
   * BUG 13964: smbd does not correctly parse arguments passed to dfree and
     quota scripts.

o  Volker Lendecke <vl at samba.org>
   * BUG 13903: winbind: Fix overlapping id ranges.
   * BUG 13957: smbd: Fix a panic.

o  Gary Lockyer <gary at catalyst.net.nz>
   * BUG 12478: ldap server: Generate correct referral schemes.
   * BUG 13902: lib util debug: Increase format buffer to 4KiB.
   * BUG 13941: Fix use after free detected by AddressSanitizer.
   * BUG 13942: s4 dsdb: Fix use after free in
     samldb_rename_search_base_callback.

o  Stefan Metzmacher <metze at samba.org>
   * BUG 12204: Samba fails to replicate schema 69.
   * BUG 13713: Schema replication fails if link crosses chunk boundary
     backwards.
   * BUG 13799: 'samba-tool domain schemaupgrade' uses relax control and
skips
     the schemaInfo update.
   * BUG 13916: dsdb:audit_log: avoid printing "... remote host [Unknown]
SID
     [(NULL SID)] ...".
   * BUG 13917: python/ntacls: We only need security.SEC_STD_READ_CONTROL in
     order to get the ACL.
   * BUG 13919: smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling.

o  Shyamsunder Rathi <shyam.rathi at nutanix.com>
   * BUG 13947: s3:loadparm: Ensure to truncate FS Volume Label at multibyte
     boundary.

o  Robert Sander <r.sander at heinlein-support.de>
   * BUG 13918: s3: modules: ceph: Use current working directory instead of
     share path.

o  Christof Schmitt <cs at samba.org>
   * BUG 13831: Fix inconsistent output from wbinfo --sid-to-name depending on
     cache state.

o  Andreas Schneider <asn at samba.org>
   * BUG 13937: Fix several issues detected by GCC 9.
   * BUG 13939: s3:smbspool: Fix regression printing with Kerberos credentials.

o  Martin Schwenke <martin at meltin.net>
   * BUG 13923: ctdb-tools: Fix ctdb dumpmemory to avoid printing trailing NUL.
   * BUG 13930: ctdb-daemon: Never use 0 as a client ID.
   * BUG 13943: ctdb-common: Fix memory leak.

o  Rafael David Tinoco <rafaeldtinoco at ubuntu.com>
   * BUG 13984: ctdb-scripts: Fix tcp_tw_recycle existence check.

o  Ralph Wuerthner <ralph.wuerthner at de.ibm.com>
   * BUG 13904: Log early startup failures.


#######################################
Reporting bugs & Development Discussion
#######################################

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's
Bugzilla
database (https://bugzilla.samba.org/).


======================================================================= Our
Code, Our Bugs, Our Responsibility.
== The Samba Team
=====================================================================


===============Download Details
===============
The uncompressed tarballs and patch files have been signed
using GnuPG (ID 6F33915B6568B7EA).  The source code can be downloaded
from:

        https://download.samba.org/pub/samba/stable/

The release notes are available online at:

        https://www.samba.org/samba/history/samba-4.9.10.html

Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)

                        --Enjoy
                        The Samba Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL:
<http://lists.samba.org/pipermail/samba-announce/attachments/20190702/97883fb6/signature.sig>

Hi,

While trying to compile 4.9.10 on RHEL7.6, I got the following error:

[1845/4160] Compiling source4/dsdb/samdb/ldb_modules/update_keytab.c
../source4/dsdb/samdb/ldb_modules/partition.c: In function 
'partition_search':
../source4/dsdb/samdb/ldb_modules/partition.c:906:14: error: 
'LDAP_REFERRAL_SCHEME_OPAQUE' undeclared (first use in this function)
          ldb, LDAP_REFERRAL_SCHEME_OPAQUE);
               ^
../source4/dsdb/samdb/ldb_modules/partition.c:906:14: note: each 
undeclared identifier is reported only once for each function it appears 
in Waf: Leaving directory `/usr/src/redhat/BUILD/samba-4.9.10/bin'
Build failed:  -> task failed (err #1):
         {task: cc partition.c -> partition_55.o}
make: *** [all] Error 1
error: Bad exit status from /var/tmp/rpm-tmp.qsFu70 (%build)
     Bad exit status from /var/tmp/rpm-tmp.qsFu70 (%build)

4.9.8 & 4.9.9 compiled fine with the same setup/build system.

I'd open a BZ but I'm confused by 
https://bugzilla.samba.org/createaccount-save.html

Regards,

Vincent

Quick update, I checked ldb-1.4.x to ldb-1.6.x and couldn't find an 
LDAP_REFERRAL_SCHEME defined anywhere. (Perhaps it's in an un-released 
version).

So, for now a copy of the define from 
ldb_module (source4/dsdb/samdb/ldb_modules/ldb_module.h) will do, I guess:

# cat samba-4.9.10-ldb-scheme.patch
*** samba-4.9.10/source4/include/includes.h.orig        2019-07-02 
14:47:43.008208717 -0400
--- samba-4.9.10/source4/include/includes.h     2019-07-02 
14:48:01.858236975 -0400
***************
*** 73,76 ****
--- 73,79 ----
   /* samba_setXXid functions. */
   #include "../lib/util/setid.h"

+ /* Samba 4.9.10 workaround */
+ #define LDAP_REFERRAL_SCHEME_OPAQUE "LDAP_REFERRAL_SCHEME"
+
   #endif /* _INCLUDES_H */

Regards,

Vincent

> While trying to compile 4.9.10 on RHEL7.6, I got the following error:
>
I just built that same version with no errors.

CentOS Linux release 7.6.1810 (Core)
kernel 3.10.0-957.10.1.el7.x86_64

On Tue, 2019-07-02 at 13:52 -0400, Vincent S. Cojot via samba
wrote:
> Hi,
> 
> While trying to compile 4.9.10 on RHEL7.6, I got the following error:
> 
> [1845/4160] Compiling source4/dsdb/samdb/ldb_modules/update_keytab.c
> ../source4/dsdb/samdb/ldb_modules/partition.c: In function 
> 'partition_search':
> ../source4/dsdb/samdb/ldb_modules/partition.c:906:14: error: 
> 'LDAP_REFERRAL_SCHEME_OPAQUE' undeclared (first use in this
function)
>           ldb, LDAP_REFERRAL_SCHEME_OPAQUE);
>                ^
> ../source4/dsdb/samdb/ldb_modules/partition.c:906:14: note: each 
> undeclared identifier is reported only once for each function it
> appears 
> in Waf: Leaving directory `/usr/src/redhat/BUILD/samba-4.9.10/bin'
> Build failed:  -> task failed (err #1):
>          {task: cc partition.c -> partition_55.o}
> make: *** [all] Error 1
> error: Bad exit status from /var/tmp/rpm-tmp.qsFu70 (%build)
>      Bad exit status from /var/tmp/rpm-tmp.qsFu70 (%build)
> 
> 4.9.8 & 4.9.9 compiled fine with the same setup/build system.
> 
> I'd open a BZ but I'm confused by 
> https://bugzilla.samba.org/createaccount-save.html
I've sent you an invite and reopened
https://bugzilla.samba.org/show_bug.cgi?id=12478

Andrew Bartlett

-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba