Commit Graph

898 Commits

Author SHA1 Message Date
Günther Deschner
b05e4ed148 Update to Samba 4.14.2
related: #1941400, #1942496 - Security fixes for CVE-2020-27840
related: #1941402, #1942497 - Security fixes for CVE-2021-20277

Guenther
2021-03-25 00:20:05 +01:00
Günther Deschner
e5dda56658 Update to Samba 4.14.1
resolves: #1941400, #1942496 - Security fixes for CVE-2020-27840
resolves: #1941402, #1942497 - Security fixes for CVE-2021-20277

Guenther
2021-03-24 18:53:58 +01:00
Günther Deschner
f931b17773 Update to Samba 4.14.0
Guenther
2021-03-09 17:08:03 +01:00
Zbigniew Jędrzejewski-Szmek
18faec13bc Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
2021-03-02 16:12:49 +01:00
Günther Deschner
45765aba68 Update to Samba 4.14.0rc4
Guenther
2021-03-01 12:15:45 +01:00
Günther Deschner
83436d8564 Update to Samba 4.14.0rc3
Guenther
2021-02-18 13:18:28 +01:00
Andreas Schneider
6cddc6448b Protect 'Require' of libwbclient 2021-02-04 17:08:28 +01:00
Andreas Schneider
8f1e592d6a Add python3-pyasn1 for krb5 tests 2021-02-04 16:59:27 +01:00
Günther Deschner
e267c837dc Update to Samba 4.14.0rc2
Guenther
2021-02-04 13:26:29 +01:00
Andreas Schneider
5e5dc1ede5 Add missing post requirement for libwbclient 2021-02-03 11:28:40 +01:00
Günther Deschner
95450ee5f8 Update to Samba 4.14.0rc1
Guenther
2021-01-27 17:26:09 +01:00
Günther Deschner
12217d454e Update to Samba 4.13.4
Guenther
2021-01-26 17:32:33 +01:00
Alexander Bokovoy
254400b459 Rebuild against krb5 1.19
Resolves: rhbz#1915928
2021-01-13 20:52:30 +02:00
Tom Stellard
8fff4f7c11 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-08 21:05:04 +00:00
Günther Deschner
ee8f8c2cd1 Update to Samba 4.13.3
Guenther
2020-12-15 12:06:05 +01:00
Alexander Bokovoy
0526d5b25f More missing Python modules 2020-11-25 17:06:03 +02:00
Alexander Bokovoy
bcc551eafa Add new unpackaged Python modules 2020-11-25 13:53:24 +02:00
Alexander Bokovoy
1d03aa069e Merge RHEL 8.4 patches
These patches are part of the https://gitlab.com/samba-redhat/samba/-/tree/v4-13-redhat

 [PATCH 001/105] libcli:smb2: Do not leak ptext on error
 [PATCH 002/105] libcli:smb2: Use talloc NULL context if we don't have
 [PATCH 003/105] auth:creds: Introduce CRED_SMB_CONF
 [PATCH 004/105] param: Add 'server smb encrypt' parameter
 [PATCH 005/105] param: Create and use enum_smb_encryption_vals
 [PATCH 006/105] s3:smbd: Use 'enum smb_encryption_setting' values
 [PATCH 007/105] docs-xml: Add 'client smb encrypt'
 [PATCH 008/105] lib:param: Add lpcfg_parse_enum_vals()
 [PATCH 009/105] libcli:smb: Add smb_signing_setting_translate()
 [PATCH 010/105] libcli:smb: Add smb_encryption_setting_translate()
 [PATCH 011/105] s3:lib: Use smb_signing_setting_translate for cmdline
 [PATCH 012/105] auth:creds: Remove unused credentials autoproto
 [PATCH 013/105] auth:creds: Add
 [PATCH 014/105] auth:creds: Add python bindings for
 [PATCH 015/105] auth:creds: Add
 [PATCH 016/105] auth:creds: Add python bindings for
 [PATCH 017/105] auth:creds: Add
 [PATCH 018/105] auth:creds: Add python bindings for
 [PATCH 019/105] auth:creds: Add python bindings for
 [PATCH 020/105] auth:creds: Bump library version
 [PATCH 021/105] s3:lib: Use cli_credential_(get|set)_smb_signing()
 [PATCH 022/105] s3:lib: Set smb encryption also via cli creds API
 [PATCH 023/105] python: Remove unused sign argument from
 [PATCH 024/105] python: Set smb signing via the creds API
 [PATCH 025/105] s3:libsmb: Introduce CLI_FULL_CONNECTION_IPC
 [PATCH 026/105] s3:pylibsmb: Add ipc=True support for
 [PATCH 027/105] python:tests: Mark libsmb connection as an IPC
 [PATCH 028/105] python:tests: Set smb ipc signing via the creds API
 [PATCH 029/105] s3:libsmb: Use 'enum smb_signing_setting' in
 [PATCH 030/105] s3:client: Turn off smb signing for message op
 [PATCH 031/105] s3:libsmb: Remove signing_state from
 [PATCH 032/105] s3:libsmb: Remove signing_state from
 [PATCH 033/105] s3:libsmb: Add encryption support to
 [PATCH 034/105] python: Add a test for SMB encryption
 [PATCH 035/105] s3:net: Use cli_credentials_set_smb_encryption()
 [PATCH 036/105] s3:libsmb: Use cli_credentials_set_smb_encryption()
 [PATCH 037/105] s3:client: Remove unused smb encryption code
 [PATCH 038/105] s3:utils: Remove obsolete force encryption from
 [PATCH 039/105] s3:utils: Remove obsolete force encryption from
 [PATCH 040/105] s3:utils: Remove obsolete force encryption from
 [PATCH 041/105] s3:rpcclient: Remove obsolete force encryption from
 [PATCH 042/105] examples: Remove obsolete force encryption from
 [PATCH 043/105] s3:libsmb: Make cli_cm_force_encryption_creds()
 [PATCH 044/105] s4:libcli: Return NTSTATUS errors for
 [PATCH 045/105] s4:libcli: Return if encryption is requested for SMB1
 [PATCH 046/105] s3:libcli: Split out smb2_connect_tcon_start()
 [PATCH 047/105] s4:libcli: Add smb2_connect_enc_start()
 [PATCH 048/105] s4:libcli: Require signing for SMB encryption
 [PATCH 049/105] python:tests: Add test for SMB encrypted DCERPC
 [PATCH 050/105] auth:gensec: Add gensec_security_sasl_names()
 [PATCH 051/105] s4:ldap_server: Use samba_server_gensec_start() in
 [PATCH 052/105] auth:gensec: Make gensec_use_kerberos_mechs() a
 [PATCH 053/105] auth:gensec: Pass use_kerberos and keep_schannel to
 [PATCH 054/105] auth:gensec: If Kerberos is required, keep schannel
 [PATCH 055/105] auth:creds: Add cli_credentials_init_server()
 [PATCH 056/105] s4:rpc_server: Use cli_credentials_init_server()
 [PATCH 057/105] s4:smb_server: Use cli_credentials_init_server() for
 [PATCH 058/105] selftest: Rename 'smb encrypt' to 'server smb
 [PATCH 059/105] selftest: Move enc_desired to provision to have it in
 [PATCH 060/105] s3:tests: Add smbclient tests for 'client smb
 [PATCH 061/105] s3:client: Remove global smb_encrypt
 [PATCH 062/105] s3:libsmb: Remove force_encrypt from cli_cm_open()
 [PATCH 063/105] s3:libsmb: Remove force_encrypt from cli_cm_connect()
 [PATCH 064/105] s3:libsmb: Remove force_encrypt from clidfs
 [PATCH 065/105] s3:libsmb: Remove force_encrypt from
 [PATCH 066/105] s3:libsmb: Pass cli_credentials to clidfs
 [PATCH 067/105] s3:libsmb: Pass cli_credentials to cli_cm_connect()
 [PATCH 068/105] s3:libsmb: Pass cli_credentials to cli_cm_open()
 [PATCH 069/105] s3:libsmb: Pass cli_credentials to
 [PATCH 070/105] s3:client: Remove global max_protocol
 [PATCH 071/105] s3:libsmb: Remove max_protocol from cli_cm_open()
 [PATCH 072/105] s3:libcmb: Remove max_protocol from cli_cm_connect()
 [PATCH 073/105] s3:libsmb: Remove max_protocol from clidfs
 [PATCH 074/105] s3:include: Move loadparm prototypes to own header
 [PATCH 075/105] s3:lib: Move interface prototypes to own header file
 [PATCH 076/105] idl: Add SID_SAMBA_SMB3
 [PATCH 077/105] s3:smbd: Add SMB3 connection information to session
 [PATCH 078/105] librpc: Add dcerpc helper
 [PATCH 079/105] s3:smbd: Use defines to set 'srv_smb_encrypt'
 [PATCH 080/105] s3:rpc_server: Allow to use RC4 for setting passwords
 [PATCH 081/105] s4:rpc_server: Allow to use RC4 for setting passwords
 [PATCH 082/105] lib:crypto: Add py binding for set_relax/strict fips
 [PATCH 083/105] s4:param: Add 'weak crypto' getter to pyparam
 [PATCH 084/105] python:tests: Add SAMR password change tests for fips
 [PATCH 085/105] python:tests: Add SAMR password change tests for fips
 [PATCH 086/105] auth:creds: Rename CRED_USE_KERBEROS values
 [PATCH 087/105] auth:creds:tests: Migrate test to a cmocka unit test
 [PATCH 088/105] s3-vfs_glusterfs: always disable write-behind
 [PATCH 089/105] Add smb2cli_session_get_encryption_cipher()
 [PATCH 090/105] Add dcerpc_transport_encrypted()
 [PATCH 091/105] Add py binding for dcerpc_transport_encrypted
 [PATCH 092/105] selftest: add a test for py dce transport_encrypted
 [PATCH 093/105] Add CreateTrustedDomainRelax wrapper for fips mode
 [PATCH 094/105] Use the new CreateTrustedDomainRelax()
 [PATCH 095/105] selftest: add a test for the CreateTrustedDomainRelax
 [PATCH 096/105] Remove source4/scripting/devel/createtrust script
 [PATCH 097/105] s3:rpc_server: Use gnutls_cipher_decrypt() in
 [PATCH 098/105] s4:rpc_server: Use gnutls_cipher_decrypt() in
 [PATCH 099/105] s3:rpc_server: Allow to use RC4 for creating trusts
 [PATCH 100/105] s4:rpc_server: Allow to use RC4 for creating trusts
 [PATCH 101/105] sefltest: Enable the dcerpc.createtrustrelax test
 [PATCH 102/105] s3: spoolss: Make parameters in call to
 [PATCH 103/105] s3:smbd: Fix possible null pointer dereference in
 [PATCH 104/105] lookup_name: allow lookup names prefixed with DNS
 [PATCH 105/105] auth_sam: use pdb_get_domain_info to look up DNS
2020-11-25 13:00:08 +02:00
Alexander Bokovoy
13eed773b0 Fix smbclient mget crashes
- Upstream bug #14517
- rhbz#1892745, rhbz#1900232
2020-11-25 12:59:43 +02:00
Andreas Schneider
061477b3e7 Only build vfs_glusterfs on RHGS 2020-11-20 15:21:44 +01:00
Andreas Schneider
772e0d9aa6 Fix dependencies of samba-client-libs 2020-11-20 15:15:56 +01:00
Andreas Schneider
0867e962ba Add back --with-profiling-data
Should be enabled by default.
2020-11-20 15:15:40 +01:00
Andreas Schneider
f88d234f14 Add missing require to samba-winexe 2020-11-20 15:15:20 +01:00
Andreas Schneider
8316f0ac99 Fix winexe and glusterfs on rhel 2020-11-13 17:05:12 +01:00
Andreas Schneider
0d567d3ab9 Fix --with includelibs 2020-11-03 20:19:56 +01:00
Andreas Schneider
a324d7bf6f Split out a python3-samba-devel package
This fixes a dependency of python3-samba on libtalloc-devel
2020-11-03 20:19:54 +01:00
Andreas Schneider
f3b2e2942f Use %{__make} 2020-11-03 17:26:02 +01:00
Günther Deschner
c6b149506e Add missing dlz_bind.so files
Guenther
2020-11-03 14:47:34 +01:00
Günther Deschner
19efd0180f Remove obsolete patches
Guenther
2020-11-03 13:49:44 +01:00
Günther Deschner
5f0457d042 Update to Samba 4.13.2
Guenther
2020-11-03 13:38:56 +01:00
Günther Deschner
b44802fb9c Update to Samba 4.13.1
resolves: #1892631, #1892634 - Security fixes for CVE-2020-14318
resolves: #1891685, #1892628 - Security fixes for CVE-2020-14323
resolves: #1892636, #1892640 - Security fixes for CVE-2020-14383

Guenther
2020-10-29 12:19:04 +01:00
Andreas Schneider
efa876d95a Fix running --with testsuite 2020-10-26 10:10:23 +01:00
Andreas Schneider
04e828d22a Update internal resolv_wrapper to 1.1.7
This fixes some Samba tests which redirect stderr to stdout and then get
more messages than expected.
2020-10-26 10:09:24 +01:00
Andreas Schneider
586addaaf8 Fixed dbcheck running in a release tarball 2020-10-26 10:09:03 +01:00
Andreas Schneider
5856c50271 Do not use %make_build
Samba is using waf as the build system, make is just a wrapper and sync
make output doesn't work!
2020-10-26 09:48:29 +01:00
Andreas Schneider
36b4604ec1 Use %global instead of %define for variables 2020-10-26 09:48:24 +01:00
Andreas Schneider
f6c5528ad0 Update comment for the testsuite 2020-10-26 09:47:37 +01:00
Andreas Schneider
b1b788374b Use %bcond_without for vfs_io_uring 2020-10-26 09:47:36 +01:00
Andreas Schneider
7feea33409 Move %bcond_without winexe further up 2020-10-26 09:47:36 +01:00
Andreas Schneider
a72748f232 Remove unneeded with_clustering_support define 2020-10-26 09:47:36 +01:00
Andreas Schneider
f172c59a67 Use %bcond_without for AD DC 2020-10-26 09:47:36 +01:00
Andreas Schneider
a04dd9958d Use %bcond_without for vfs_glusterfs 2020-10-26 09:47:36 +01:00
Andreas Schneider
cab0cecf58 Use %bcond_without for vfs_cephfs 2020-10-26 09:47:36 +01:00
Andreas Schneider
89d751d1bf Use %bcond_without for libwbclient 2020-10-26 09:47:36 +01:00
Andreas Schneider
0ac733db9b Use %bcond_without for libsmbclient 2020-10-26 09:47:36 +01:00
Andreas Schneider
a31119d9e4 Always build with profiling support 2020-10-26 09:47:36 +01:00
Alexander Bokovoy
92693f66e9 Fix Samba AD DC operations on F33 or later
- Report 'samba' daemon status back to systemd
- Support dnspython 2.0.0 or later in samba_dnsupdate
2020-10-25 09:55:39 +02:00
Alexander Bokovoy
1e29c417eb Fix lookup_unix_user_name to support realm-qualified lookups
Fixes lookups from Windows clients when using Global Catalog searches.
Required for upcoming FreeIPA Global Catalog support.
2020-10-22 10:12:06 +03:00
Isaac Boukris
a172510646 Add preliminary S4U support
resolves: #1836630 - Samba DC: Remote Desktop cannot access files
2020-10-22 10:08:23 +03:00
Günther Deschner
b62fe79160 Update to Samba 4.13.0
Guenther
2020-09-22 17:56:01 +02:00
Günther Deschner
c0da1c5303 Update to Samba 4.13.0rc6
resolves: #1879822, #1880703 - Security fixes for CVE-2020-1472

Guenther
2020-09-19 08:27:05 +02:00
Günther Deschner
0a5021c37e Update to Samba 4.13.0rc5
Guenther
2020-09-16 14:33:18 +02:00
Günther Deschner
2804f931d0 Increase build version
Guenther
2020-09-08 09:58:33 +02:00
Günther Deschner
a2f88f217f Update to Samba 4.13.0rc4
Guenther
2020-09-07 23:07:21 +02:00
41ab0cd76d Enable winexe by default everywhere 2020-08-28 11:57:42 -04:00
Günther Deschner
692491a456 Fix changelog
Guenther
2020-08-28 14:58:18 +02:00
Günther Deschner
a31354402a Update to Samba 4.13.0rc3
Guenther
2020-08-28 12:38:05 +02:00
Günther Deschner
3f3c9ecde9 Update to Samba 4.13.0rc2
Guenther
2020-08-16 19:56:34 +02:00
Andreas Schneider
67ed8f8f78 Fix requires and missing dirs 2020-08-12 10:16:17 +02:00
Fedora Release Engineering
0e393ad6d6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-29 10:11:53 +00:00
Andreas Schneider
a000c31c78 Fix release number 2020-07-21 09:11:08 +02:00
Tom Stellard
2659a5f9b5 Use make macros
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-14 13:45:51 +00:00
Andreas Schneider
d13ee7d45e Move mdssvc data files to correct package 2020-07-14 13:03:01 +02:00
Günther Deschner
82da6b03e3 Update to Samba 4.13.0rc1
Guenther
2020-07-09 19:00:47 +02:00
Merlin Mathesius
a8b28d5d29 Remove nonexistent --without-winexe option from configure
Signed-off-by: Merlin Mathesius <mmathesi@redhat.com>
2020-07-08 11:12:01 -05:00
Günther Deschner
3331e7aaff Update to Samba 4.12.5
Guenther
2020-07-02 19:50:30 +02:00
Günther Deschner
cd517c5be5 Update to Samba 4.12.4
resolves: #1849489, #1853255 - Security fixes for CVE-2020-10730
resolves: #1849491, #1853256 - Security fixes for CVE-2020-10745
resolves: #1849509, #1853276 - Security fixes for CVE-2020-10760
resolves: #1851298, #1853259 - Security fixes for CVE-2020-14303

Guenther
2020-07-02 15:29:06 +02:00
Andreas Schneider
39f81f495a Remove manages when not needed instead of exluding them 2020-07-02 11:39:52 +02:00
Andreas Schneider
a8b268e882 Don't remove buildroot on install
This is obsolete since ages.
2020-07-02 11:39:52 +02:00
Jitka Plesnikova
03ec1b226b Perl 5.32 re-rebuild updated packages 2020-06-27 06:57:43 +02:00
Günther Deschner
aa67a46ac7 Add BuildRequires for python3-setuptools
Guenther
2020-06-25 16:54:08 +02:00
Jitka Plesnikova
341aa469a1 Perl 5.32 rebuild 2020-06-25 15:07:59 +02:00
Andreas Schneider
08a93e1392 Fix indentation for --without-winexe 2020-06-08 09:28:49 +02:00
Andreas Schneider
31a5dced62 Move libdcerpc-server-core to samba-libs
This is used by the AD and FS RPC server implementation.
2020-06-08 09:28:49 +02:00
Andreas Schneider
840072c33a Do not require liburing for RHEL yet
We need at least version 0.4
2020-06-02 15:48:02 +02:00
Miro Hrončok
d974e2dba3 Rebuilt for Python 3.9 2020-05-26 03:50:13 +02:00
Günther Deschner
95698d54c9 Update to samba 4.12.3
Guenther
2020-05-22 19:00:31 +02:00
Pete Walter
14beb52491 Rebuild for ICU 67 2020-05-15 14:12:43 +01:00
Günther Deschner
469f892911 Fix build on arm (which does not have liburing)
Guenther
2020-05-13 15:35:56 +02:00
Günther Deschner
ccd630af90 Add support for building the new experimental io_uring VFS module
Guenther
2020-05-13 14:19:01 +02:00
Günther Deschner
7b0139b018 Update to Samba 4.12.2
resolves: #1825731, #1828870 - Security fixes for CVE-2020-10700
resolves: #1825734, #1828872 - Security fixes for CVE-2020-10704

Guenther
2020-04-28 21:05:45 +02:00
Alexander Bokovoy
9899557a0c Revert POSIX stat tuning code
Resolves: rhbz#1801442
2020-04-12 11:04:52 +03:00
Günther Deschner
4893087a27 Update to Samba 4.12.1
Guenther
2020-04-07 15:36:06 +02:00
Alexander Bokovoy
971db63e0c Fix samba_requires_eq macro definition
Resolves rhbz#1815739
2020-03-21 12:49:13 +02:00
Günther Deschner
2bb8b13cea Add winexe subpackage for remote windows command execution
resolves: #1661213

Guenther
2020-03-19 11:51:38 +01:00
Alexander Bokovoy
8a97498d18 Make samba_requires_eq an actual macro 2020-03-17 15:24:31 +02:00
Alexander Bokovoy
17fb87653c Internalize requires_eq macro
%requires_eq macro is going to be removed from Fedora:
https://src.fedoraproject.org/rpms/redhat-rpm-config/pull-request/81

Until a better solution is provided, internalize the macro definition.
2020-03-17 15:18:49 +02:00
Günther Deschner
65e87b6f89 Add build requirement for perl-FindBin
Guenther
2020-03-10 16:02:25 +01:00
Günther Deschner
475f185d22 Update to Samba 4.12.0
Guenther
2020-03-03 12:43:41 +01:00
Günther Deschner
55f4ac65de Update to Samba 4.12.0rc4
Guenther
2020-02-26 09:18:05 +01:00
Günther Deschner
fd31fe0c61 Update to Samba 4.12.0rc3
Guenther
2020-02-19 13:31:04 +01:00
Günther Deschner
b487033b2e Update to Samba 4.12.0rc2
Guenther
2020-02-05 06:46:04 +01:00
Fedora Release Engineering
62cfe84ef0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-30 22:46:58 +00:00
Alexander Bokovoy
8a3be8e36a Require krb5 1.18 for rawhide 2020-01-24 23:56:33 +02:00
Günther Deschner
80747c7e03 Add dependent packages to get spotlight support
Guenther
2020-01-23 21:05:03 +01:00
Günther Deschner
9775be183c Update to Samba 4.12.0rc1
Guenther
2020-01-23 19:41:03 +01:00
Andreas Schneider
303a0a99be Remove obsolete python3 requirements 2020-01-23 12:05:57 +01:00
Andreas Schneider
a709775d3d Fail 'make test' immediately 2020-01-23 12:04:39 +01:00
Alexander Bokovoy
d0a152faeb Revert "Require krb5 1.18 for rawhide"
This reverts commit 4a7247e651.
2020-01-23 11:17:52 +02:00
Alexander Bokovoy
4a7247e651 Require krb5 1.18 for rawhide 2020-01-23 10:48:30 +02:00