search for: boukris

...ello, Is there any way to correlate bugzilla bug IDs with the ones that are listed in RPM changelogs? For example, I'm pretty sure that bugzilla 14106 <https://bugzilla.samba.org/show_bug.cgi?id=14106> is the same bug as referenced in this RedHat changelog entry * Mon Oct 21 2019 Isaac Boukris <iboukris at redhat.com> - 4.9.1.10 - resolves: #1763650 - Fix spnego downgrade -- Mason

...e checksum validation in the S4U2Self handler in the embedded Heimdal KDC did not first confirm that the checksum was keyed, allowing replacement of the requested target (client) principal. For more details and workarounds, please refer to the security advisory. Changes: -------- o Isaac Boukris <iboukris at gmail.com> * BUG 13685: CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum. ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technica...

...d when processing protocol transition requests (S4U2Self), in the AD DC KDC. For more details and workarounds, please refer to the security advisories. Changes: -------- o Andrew Bartlett <abartlet at samba.org> * BUG 14138: CVE-2019-14861: Fix DNSServer RPC server crash. o Isaac Boukris <iboukris at gmail.com> * BUG 14187: CVE-2019-14870: DelegationNotAllowed not being enforced. ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing list or by...

...ols in any file name. * BUG 14391: Fix DFS links. o Andrew Bartlett <abartlet at samba.org> * BUG 14310: Can't use DNS functionality after a Windows DC has been in domain. o Alexander Bokovoy <ab at samba.org> * BUG 14413: ldapi search to FreeIPA crashes. o Isaac Boukris <iboukris at gmail.com> * BUG 14396: Add net-ads-join dnshostname=fqdn option. * BUG 14406: Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC. o Bj?rn Jacke <bj at sernet.de> * BUG 14386: docs-xml: Update list of posible VFS operations for vfs_full_audit....

...e checksum validation in the S4U2Self handler in the embedded Heimdal KDC did not first confirm that the checksum was keyed, allowing replacement of the requested target (client) principal. For more details and workarounds, please refer to the security advisory. Changes: -------- o Isaac Boukris <iboukris at gmail.com> * BUG 13685: CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed checksum. ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technica...

...d when processing protocol transition requests (S4U2Self), in the AD DC KDC. For more details and workarounds, please refer to the security advisories. Changes: -------- o Andrew Bartlett <abartlet at samba.org> * BUG 14138: CVE-2019-14861: Fix DNSServer RPC server crash. o Isaac Boukris <iboukris at gmail.com> * BUG 14187: CVE-2019-14870: DelegationNotAllowed not being enforced. ####################################### Reporting bugs & Development Discussion ####################################### Please discuss this release on the samba-technical mailing list or by...

...ols in any file name. * BUG 14391: Fix DFS links. o Andrew Bartlett <abartlet at samba.org> * BUG 14310: Can't use DNS functionality after a Windows DC has been in domain. o Alexander Bokovoy <ab at samba.org> * BUG 14413: ldapi search to FreeIPA crashes. o Isaac Boukris <iboukris at gmail.com> * BUG 14396: Add net-ads-join dnshostname=fqdn option. * BUG 14406: Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC. o Bj?rn Jacke <bj at sernet.de> * BUG 14386: docs-xml: Update list of posible VFS operations for vfs_full_audit....

...* BUG 14590: s3: smbd: Quiet log messages from usershares for an unknown share. o Ralph Boehme <slow at samba.org> * BUG 14248: samba process does not honor max log size. * BUG 14587: vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE. o Isaac Boukris <iboukris at gmail.com> * BUG 13124: s3-libads: Pass timeout to open_socket_out in ms. o G?nther Deschner <gd at samba.org> * BUG 14486: s3-vfs_glusterfs: Always disable write-behind translator. o Volker Lendecke <vl at samba.org> * BUG 14517: smbclient: Fix recursive...

...* BUG 14590: s3: smbd: Quiet log messages from usershares for an unknown share. o Ralph Boehme <slow at samba.org> * BUG 14248: samba process does not honor max log size. * BUG 14587: vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE. o Isaac Boukris <iboukris at gmail.com> * BUG 13124: s3-libads: Pass timeout to open_socket_out in ms. o G?nther Deschner <gd at samba.org> * BUG 14486: s3-vfs_glusterfs: Always disable write-behind translator. o Volker Lendecke <vl at samba.org> * BUG 14517: smbclient: Fix recursive...

...n of writes on AFP_AfpInfo stream. * BUG 13688: vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing. * BUG 13455: Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name. o Isaac Boukris <iboukris at gmail.com> * BUG 13571: CVE-2018-16853: Fix S4U2Self crash with MIT KDC build. o Günther Deschner <gd at samba.org> * BUG 13708: s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs. o Joe Guo <joeg at catalyst.net.nz> * PEP8: fix E231: missing white...

...n of writes on AFP_AfpInfo stream. * BUG 13688: vfs_shadow_copy2: Nicely deal with attempts to open previous version for writing. * BUG 13455: Restoring previous version of stream with vfs_shadow_copy2 fails with NT_STATUS_OBJECT_NAME_INVALID fsp->base_fsp->fsp_name. o Isaac Boukris <iboukris at gmail.com> * BUG 13571: CVE-2018-16853: Fix S4U2Self crash with MIT KDC build. o Günther Deschner <gd at samba.org> * BUG 13708: s3-vfs: Prevent NULL pointer dereference in vfs_glusterfs. o Joe Guo <joeg at catalyst.net.nz> * PEP8: fix E231: missing white...

...substition. * BUG 13925: s3: Remove now unneeded call to cmdline_messaging_context(). * BUG 14069: Incomplete conversion of former parametric options. * BUG 14070: Fix sync dosmode fallback in async dosmode codepath. * BUG 14171: vfs_fruit returns capped resource fork length. o Isaac Boukris <iboukris at gmail.com> * BUG 14116: libnet_join: Add SPNs for additional-dns-hostnames entries. o Volker Lendecke <vl at samba.org> * BUG 14211: smbd: Increase a debug level. o Stefan Metzmacher <metze at samba.org> * BUG 14153: Prevent azure ad connect from reportin...

...substition. * BUG 13925: s3: Remove now unneeded call to cmdline_messaging_context(). * BUG 14069: Incomplete conversion of former parametric options. * BUG 14070: Fix sync dosmode fallback in async dosmode codepath. * BUG 14171: vfs_fruit returns capped resource fork length. o Isaac Boukris <iboukris at gmail.com> * BUG 14116: libnet_join: Add SPNs for additional-dns-hostnames entries. o Volker Lendecke <vl at samba.org> * BUG 14211: smbd: Increase a debug level. o Stefan Metzmacher <metze at samba.org> * BUG 14153: Prevent azure ad connect from reportin...

...59: ldb_tdb fails to check error return when parsing pack formats. * BUG 13978: undoguididx: Add "or later" to warning about using tools from Samba 4.8. o Ralph Boehme <slow at samba.org> * BUG 14038: ctdb: Fix compilation on systems with glibc robust mutexes. o Isaac Boukris <iboukris at gmail.com> * BUG 14106: Fix spnego fallback from kerberos to ntlmssp in smbd server. o Poornima G <pgurusid at redhat.com> * BUG 14098: vfs_glusterfs: Use pthreadpool for scheduling aio operations. o Aaron Haslett <aaronhaslett at catalyst.net.nz> * BUG 1...

...59: ldb_tdb fails to check error return when parsing pack formats. * BUG 13978: undoguididx: Add "or later" to warning about using tools from Samba 4.8. o Ralph Boehme <slow at samba.org> * BUG 14038: ctdb: Fix compilation on systems with glibc robust mutexes. o Isaac Boukris <iboukris at gmail.com> * BUG 14106: Fix spnego fallback from kerberos to ntlmssp in smbd server. o Poornima G <pgurusid at redhat.com> * BUG 14098: vfs_glusterfs: Use pthreadpool for scheduling aio operations. o Aaron Haslett <aaronhaslett at catalyst.net.nz> * BUG 1...

...Ralph Boehme <slow at samba.org> * BUG 14015: vfs_catia: Pass stat info to synthetic_smb_fname(). * BUG 14033: Samba 4.9 doesn't build with libtevent 0.9.39. o Alexander Bokovoy <ab at samba.org> * BUG 14091: lookup_name: Allow own domain lookup when flags == 0. o Isaac Boukris <iboukris at gmail.com> * BUG 11362: Add PrimaryGroupId to group array in DC response. o Anoop C S <anoopcs at redhat.com> * BUG 14035: vfs_glusterfs: Enable profiling for file system operations. o Stefan Metzmacher <metze at samba.org> * BUG 13915: DEBUGC and DEBUGAD...

...Ralph Boehme <slow at samba.org> * BUG 14015: vfs_catia: Pass stat info to synthetic_smb_fname(). * BUG 14033: Samba 4.9 doesn't build with libtevent 0.9.39. o Alexander Bokovoy <ab at samba.org> * BUG 14091: lookup_name: Allow own domain lookup when flags == 0. o Isaac Boukris <iboukris at gmail.com> * BUG 11362: Add PrimaryGroupId to group array in DC response. o Anoop C S <anoopcs at redhat.com> * BUG 14035: vfs_glusterfs: Enable profiling for file system operations. o Stefan Metzmacher <metze at samba.org> * BUG 13915: DEBUGC and DEBUGAD...

...50: vfs_shadow_copy2: implement case canonicalisation in shadow_copy2_get_real_filename(). * BUG 14375: Fix Windows 7 clients problem after upgrading samba file server. o Alexander Bokovoy <ab at samba.org> * BUG 14359: s3: Pass DCE RPC handle type to create_policy_hnd. o Isaac Boukris <iboukris at gmail.com> * BUG 14155: Fix uxsuccess test with new MIT krb5 library 1.18. * BUG 14342: mit-kdc: Explicitly reject S4U requests. o Anoop C S <anoopcs at redhat.com> * BUG 14352: dbwrap_watch: Set rec->value_valid while returning nested share_mode_do_locke...

...50: vfs_shadow_copy2: implement case canonicalisation in shadow_copy2_get_real_filename(). * BUG 14375: Fix Windows 7 clients problem after upgrading samba file server. o Alexander Bokovoy <ab at samba.org> * BUG 14359: s3: Pass DCE RPC handle type to create_policy_hnd. o Isaac Boukris <iboukris at gmail.com> * BUG 14155: Fix uxsuccess test with new MIT krb5 library 1.18. * BUG 14342: mit-kdc: Explicitly reject S4U requests. o Anoop C S <anoopcs at redhat.com> * BUG 14352: dbwrap_watch: Set rec->value_valid while returning nested share_mode_do_locke...

...rplus() is incompatible with smbc_telldir() and smbc_lseekdir(). * BUG 14152: s3: smbclient: Stop an SMB2-connection from blundering into SMB1-specific calls. o Ralph Boehme <slow at samba.org> * BUG 14137: Fix stale file handle error when using mkstemp on a share. o Isaac Boukris <iboukris at gmail.com> * BUG 14106: Fix spnego fallback from kerberos to ntlmssp in smbd server. * BUG 14140: Overlinking libreplace against librt and pthread against every binary or library causes issues. o G?nther Deschner <gd at samba.org> * BUG 14130: s3-winbindd: F...