search for: pysmbd

...enticated users with write permission can trigger a symlink traversal to write or detect files outside the Samba share. For more details and workarounds, please refer to the security advisories. Changes: -------- o Andrew Bartlett <abartlet at samba.org> * BUG 13834: CVE-2019-3870: pysmbd: Ensure a zero umask is set for smbd.mkdir(). o Jeremy Allison <jra at samba.org> * BUG 13851: CVE-2018-14629: rpc: winreg: Remove implementations of SaveKey/RestoreKey. ####################################### Reporting bugs & Development Discussion ######################...

...enticated users with write permission can trigger a symlink traversal to write or detect files outside the Samba share. For more details and workarounds, please refer to the security advisories. Changes: -------- o Andrew Bartlett <abartlet at samba.org> * BUG 13834: CVE-2019-3870: pysmbd: Ensure a zero umask is set for smbd.mkdir(). o Jeremy Allison <jra at samba.org> * BUG 13851: CVE-2018-14629: rpc: winreg: Remove implementations of SaveKey/RestoreKey. ####################################### Reporting bugs & Development Discussion ######################...

...) in error path. o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Volker Lendecke <vl at samba.org> * BUG 14636: g_lock: Fix uninitalized variable reads. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: Fix fd leak in py_smbd_create_file(). o Andreas Schneider <asn at samba.org> * BUG 14625: lib:util: Avoid free'ing our own pointer. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work. ####################################### Re...

...) in error path. o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Volker Lendecke <vl at samba.org> * BUG 14636: g_lock: Fix uninitalized variable reads. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: Fix fd leak in py_smbd_create_file(). o Andreas Schneider <asn at samba.org> * BUG 14625: lib:util: Avoid free'ing our own pointer. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work. ####################################### Re...

OK, I've traced this a little further on now. I think I have followed the trail via the following items that call or refer to each other in turn: - python samba-tool ntacl sysvolreset - source3/smbd/pysmbd.c: SMB_VFS_FSET_NT_ACL( fsp, security_info_sent, sd); - source3/include/vfs_macros.h:#define SMB_VFS_FSET_NT_ACL smb_vfs_call_fset_nt_acl - source3/smbd/vfs.c:NTSTATUS smb_vfs_call_fset_nt_acl [which calls fset_nt_acl_fn] - source3/modules/vfs_acl_xattr.c: .fset_nt_acl_fn = fset_nt_acl_common - sou...

...e) in error path. o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Volker Lendecke <vl at samba.org> * BUG 1463: g_lock: Fix uninitalized variable reads. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: Fix fd leak in py_smbd_create_file(). * BUG 14607: Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7. o Andreas Schneider <asn at samba.org> * BUG 14625: Fix smbd share mode double free crash. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIM...

...e) in error path. o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Volker Lendecke <vl at samba.org> * BUG 1463: g_lock: Fix uninitalized variable reads. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: Fix fd leak in py_smbd_create_file(). * BUG 14607: Work around special SMB2 IOCTL response behavior of NetApp Ontap 7.3.7. o Andreas Schneider <asn at samba.org> * BUG 14625: Fix smbd share mode double free crash. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIM...

...Mike Birbiglia ======================================================== Release Announcements --------------------- This is the latest stable release of the Samba 4.7 release series. Changes since 4.7.9: -------------------- o Jeremy Allison <jra at samba.org> * BUG 13474: python: pysmbd: Additional error path leak fix. * BUG 13511: libsmbclient: Initialize written value before use. * BUG 13527: s3: libsmbclient: Fix cli_splice() fallback when reading less than a complete file. * BUG 13537: Using "sendfile = yes" with SMB2 can cause CPU spin. o Jeffrey Alt...

...Mike Birbiglia ======================================================== Release Announcements --------------------- This is the latest stable release of the Samba 4.7 release series. Changes since 4.7.9: -------------------- o Jeremy Allison <jra at samba.org> * BUG 13474: python: pysmbd: Additional error path leak fix. * BUG 13511: libsmbclient: Initialize written value before use. * BUG 13527: s3: libsmbclient: Fix cli_splice() fallback when reading less than a complete file. * BUG 13537: Using "sendfile = yes" with SMB2 can cause CPU spin. o Jeffrey Alt...

...Charles de Lint ======================================================== Release Announcements --------------------- This is the latest stable release of the Samba 4.8 release series. Changes since 4.8.4: -------------------- o Jeremy Allison <jra at samba.org> * BUG 13474: python: pysmbd: Additional error path leak fix. * BUG 13511: libsmbclient: Initialize written value before use. * BUG 13519: ldb: Refuse to build Samba against a newer minor version of ldb. * BUG 13527: s3: libsmbclient: Fix cli_splice() fallback when reading less than a complete file. * BUG...

...Charles de Lint ======================================================== Release Announcements --------------------- This is the latest stable release of the Samba 4.8 release series. Changes since 4.8.4: -------------------- o Jeremy Allison <jra at samba.org> * BUG 13474: python: pysmbd: Additional error path leak fix. * BUG 13511: libsmbclient: Initialize written value before use. * BUG 13519: ldb: Refuse to build Samba against a newer minor version of ldb. * BUG 13527: s3: libsmbclient: Fix cli_splice() fallback when reading less than a complete file. * BUG...

I have a small AD forest of two Windows 2008 R2 domain controllers. I would like to add a Samba 4 DC to this forest. After running into some problems with group policies, I realized that Samba 4 does not currently implement file replication. I would like to have the Samba 4 domain controller replicate user/computer schema with the Windows machines, but I would like for DNS and group policy

...get_dosmode is requested. * BUG 14635: Fix printer driver upload. CHANGES SINCE 4.14.0rc2 ======================= o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: fix fd leak in py_smbd_create_file(). o Andreas Schneider <asn at samba.org> * BUG 14625: Fix smbd share mode double free crash. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work. CHANGES SINCE 4.14.0rc1 =======================...

...get_dosmode is requested. * BUG 14635: Fix printer driver upload. CHANGES SINCE 4.14.0rc2 ======================= o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: fix fd leak in py_smbd_create_file(). o Andreas Schneider <asn at samba.org> * BUG 14625: Fix smbd share mode double free crash. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work. CHANGES SINCE 4.14.0rc1 =======================...

Hi, After making progress with my scripts for software installation (thanks, Rowland!) I am on a bit of a mission to get things working again. I found that permissions on my sysvol share were somehow incorrect (group ownership was root, etc.) so I ran 'samba-tool ntacl sysvolreset'.. however this now fails with the following error. (I'm on Samba 4.5.0) user at dc2:~ $ sudo

...get_dosmode is requested. * BUG 14635: Fix printer driver upload. CHANGES SINCE 4.14.0rc2 ======================= o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: fix fd leak in py_smbd_create_file(). o Andreas Schneider <asn at samba.org> * BUG 14625: Fix smbd share mode double free crash. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work. CHANGES SINCE 4.14.0rc1 =======================...

...get_dosmode is requested. * BUG 14635: Fix printer driver upload. CHANGES SINCE 4.14.0rc2 ======================= o Bj?rn Jacke <bj at sernet.de> * BUG 14624: classicupgrade: Treat old never expires value right. o Stefan Metzmacher <metze at samba.org> * BUG 13898: s3:pysmbd: fix fd leak in py_smbd_create_file(). o Andreas Schneider <asn at samba.org> * BUG 14625: Fix smbd share mode double free crash. o Paul Wise <pabs3 at bonedaddy.net> * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work. CHANGES SINCE 4.14.0rc1 =======================...