WHATSNEW: Update changes since 3.2.8.

Karolin
(cherry picked from commit 7fa853e490be446a6da2086e1749b59a8f741e09)

1 files changed, 116 insertions, 127 deletions

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 47fd5b0ae7e..7a9b393cea1 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,17 +1,18 @@
                    =============================
-                   Release Notes for Samba 3.2.8
-			  March 03, 2009
+                   Release Notes for Samba 3.2.9
+			  March 31, 2009
                    =============================
 
 
-This is a bug fix release of the Samba 3.2 series.
+This is a maintenance release of the Samba 3.2 series.
 
-Major enhancements included in Samba 3.2.8 are:
+Major enhancements included in Samba 3.2.9 are:
 
-  o Correctly detect if the current DC is the closest one.
-  o Add saf_join_store() function to memorize the DC used at join time.
-    This avoids problems caused by replication delays shortly after domain
-    joins.
+  o Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
+    correctly (bug #6195).
+  o Fix guest authentication in setups with "security = share" and
+    "guest ok = yes" when Winbind is running.
+  o Fix corruptions of source path in tar mode of smbclient (bug #6161).
 
 
 The original security announcement for this and past advisories can
@@ -22,166 +23,154 @@ be found http://www.samba.org/samba/security/
 Changes
 #######
 
-Changes since 3.2.7
+Changes since 3.2.8
 -------------------
 
 
 o   Michael Adam <obnox@samba.org>
-    * BUG 6066: netinet/ip.h present but cannot be compiled under Solaris.
-    * Fix join by creating keytab after changing the config in libnet.
-    * Streamline logic of libnet_join_post_processing() in libnet_join.
-    * Fix build of [u]mount.cifs in the RHEL packaging.
-    * Fix distclean target and add realdistclean target in the docs build.
-    * Clean generated .png images and build/catalog.xml in "make clean".
-    * Fix detection of netinet/ip.h on Solaris 8.
+    * Add script fill-templates.
+    * Make update-pkginfo callable from any directory.
 
 
 o   Jeremy Allison <jra@samba.org>
-    * BUG 4308: Excel save operation corrupts file ACLs.
-    * BUG 5979: Fix level 2 oplocks.
-    * BUG 5980: Fix race condition when granting level2 oplocks can cause break
-      notify to be missed.
-    * BUG 5986: Fix renaming of streams.
-    * BUG 5990: Strict allocate should be checked before ftruncate.
-    * BUG 6009: Setting "min receivefile size = 1" breaks writes.
-    * BUG 6016: Alternate Data Streams / Extended Attributes seem to conflict.
-    * BUG 6017: Fix magic scripts.
-    * BUG 6019: Fix file corruption in Clustered SMB/NFS environments managed via
-      CTDB.
-    * BUG 6021: smbclient du command does not recuse properly.
-    * BUG 6030: Add missing <th> header in Status page.
-    * BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery.
-    * BUG 6040: Calling Samba print server with an aliased DNS-name fails.
-    * Fix race condition in alarm lock processing.
-    * Fix logic bug introduce in backport of ccache_regain_all_now.
-    * Fix crash bug in SWAT.
-    * Fix logic error in try_chown.
-    * Fix detection of dns_sd libraries.
+    * BUG 6099: Samba returns incurrate capabilities list.
+    * BUG 6133: Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL
+      filesystem.
+    * BUG 6161: smbclient corrupts source path in tar mode.
+    * BUG 6195: Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb
+      correctly.
+    * BUG 6196: Unable to serve files with colons to Linux CIFS/VFS client.
+    * BUG 6224: nmbd waits 5 minutes at startup before checking if it needs to
+      run elections.
+    * Correctly use chroot().
+    * Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure
+      that "offered" read from the rpc packet in spoolss is under
+      that size.
+    * Fix Coverity ID 602.
+    * Backport the semantics of when to delete alternate data streams on a file
+      truncate.
+    * Allow set attributes on a stream fnum to be redirected to the base
+      filename.
+    * Fix use of streams modules with CIFSFS client.
+    * Fix more POSIX path lstat calls.
+    * Allow DFS client paths to work when POSIX pathnames have been
+      selected.
+    * Try and fix the build farm RAW-STREAMS errors.
+
+
+o   Steven Danneman <steven.danneman@isilon.com>
+    * Fix guest auth when Winbind is running.
+
+
+o   Günther Deschner <gd@samba.org>
+    * BUG 6102: NetQueryDisplayInformation could return wrong information.
+    * BUG 6193: Avoid messing with sync_context in fetch_database_to_ldif().
+    * Fix memleak in get_remote_printer_publishing_data().
+    * Add pidl in order to be able to regenerate librpc functions.
+    * Fix Coverity IDs 722, 762.
+
+
+o   Steve French <smfrench@gmail.com>
+    * cifs mount fix for handling -V parameter.
+    * Fix guest mounts.
+
+
+o   Holger Hetterich <hhetter@novell.com>
+    * Enable total anonymization in vfs_smb_traffic_analyzer.
 
 
-o   Kai Blin <kai@samba.org>
-    * BUG 5953: Fix smbclient crashes.
-
-
-o   Gerald (Jerry) Carter <jerry@samba.org>
-    * Fix "allow trusted domain" so it disables trusted domains.
-
-
-o   Guenther Deschner <gd@samba.org>
-    * Fix buffer allocation in eventlog read call.
-    * Fix various invalid memcpy in read_package_entry().
-
-
-o   SATOH Fumiyasu <fumiyas@osstech.co.jp>
-    * Variables for signals must be volatile sig_atomic_t in Winbind.
-    * Fix gmem->numgids and gmem->maxgids breakage on Solaris 64-bit.
-    * Fix a compile-time warning.
-    * Fix SIGBUS on non-x86 CPUs in libsmbclient.
+o   Björn Jacke <bj@sernet.de>
+    * Enable IPv6 support for NetBSD and FreeBSD.
+    * Prefer gssapi header files from subdirectory.
+    * Fix build on old Heimdal based systems.
+    * Use parentheses in if condition to make negation clear.
 
 
-o   Björn Jacke <bj@sernet.de>
-    * Correct the description of the "ldap timeout" parameter.
-    * Fix build with external dns_sd libraries.
+o   Günter Kukkukk <linux@kukkukk.com>
+    * Don't try and delete a default ACL from a file.
 
 
 o   Jeff Layton <jlayton@redhat.com>
-    * Allow mounts to ipv6 capable servers in mount.cifs.
+    * Initialize rc to 0 in main.
 
 
 o   Volker Lendecke <vl@sernet.de>
-    * BUG 5933: Fix incrementing/decrementing num_validated_vuids.
-    * BUG 5953: Make cli_send_smb_direct_writeX use writev.
-    * BUG 5965: Fix creation of the first share using SWAT.
-    * BUG 5969: Optimize smbclient put command.
-    * BUG 6014: mget shouldn't segfault without arguments.
-    * Fix error code when smbclient puts a file over an existing directory.
+    * BUG 6100: Complete fix.
+    * BUG 6130: Don't crash in winbindd_rpc lookup_groupmem() on unmapped
+      members.
+    * BUG 6097: Fix smbd segfault.
+    * Fix remotely adding a share via MMC.
+    * Fix resume handle for _samr_EnumDomainGroups.
+    * Fix Coverity IDs 742, 744, 745, 879, 880.
+    * Fix a buffer handling bug when adding lots of registry keys.
+    * Fix a O(n^2) algorithm in regdb_fetch_keys().
+    * Fix an uninitialized variable warning.
+    * Fix a valgrind error / segfault in dns_register_smbd().
+    * Don't log NDR_PRINT_DEBUG at level 0, this always ends up in syslog.
+    * Fix a malloc/talloc mismatch when cli_initialise() fails.
     * Fix a valgrind error.
-    * Fix a "ignoring function call result" warning.
-    * Add sys_writev.
-    * Add write_data_iov.
-    * Make write_data use write_data_iov.
-    * Fix a memory leak in cups_pull_comment_location.
-    * Fix an ancient uninitialized variable read.
-    * Fix a bad memleak in vfs_full_audit.
-    * Fix several valgrind errors.
-    * Fix 'net rpc join' for users with the SeMachineAccountPrivilege.
+    * Fix two memleaks in the encryption code.
+    * Fix gcc 4.4 compile warning.
+    * Fix a scary "fill_share_mode_lock failed" message.
 
 
-o   Herb Lewis <hlewis@chomps.localdomain>
-    * Don't return 0 on error in smbcacls - bad for scripts.
+o   Stefan Metzmacher <metze@samba.org
+    * BUG 6100: Implement _netr_LogonGetCapabilities() with
+      NT_STATUS_NOT_IMPLEMENTED.
+    * Add S-1-22-X-Y sids to the local token.
+    * Add idl for netr_LogonGetCapabilities().
+    * Fix the build on SLES8.
+    * Fix smb signing for fragmented trans/trans2/nttrans requests.
 
 
-o   Derrell Lipman <derrell.lipman@unwireduniverse.com>
-    * Determine case sensitivity based on file system attributes in
-      libsmbclient.
+o   Glenn Machin <gmachin@sandia.gov>
+    * Don't miss an absolute pathname as a kerberos keytab path.
 
 
-o   Stefan Metzmacher <metze@samba.org>
-    * Correctly detect if the current dc is the closest one.
-    * Use get_dc_name() instead of get_sorted_dc_list() in the LDAP case.
-    * Fallback to returning all DCs, when none is available in the requested
-      site.
-    * Add saf_join_store() function.
-    * Use DS_FORCE_REDISCOVERY in libnet_join.
-    * Use dbwrap to open sessionid.tdb in net status.
-    * Fix dbwrap_store_uint32() to match dbwrap_store_int32().
-    * Handle the SMB signing states the same in the krb5 and ntlmssp cases in
-      libsmb.
-    * Re-add "fileid:algorithm" as option in vfs_fileid.
-    * Add vfs_fileid manpage.
+o   Shirish Pargaonkar <shirishpargaonkar@gmail.com>
+    * Clean-up entries in /etc/mtab after unmount.
+    * Add fakemount (-f) and nomtab (-n) flags to mount.cifs.
 
 
-o   Lars Müller <lars@samba.org>
-    * Tweak with pam defines of older Linux versions.
-    * Adjust regex to match variable names including underscores.
-    * Conditional install of the cifs.upcall man page.
+o   Ted Percival <ted.percival@quest.com>
+    * Fix a crash during name resolution when log level >= 10 and libc
+      segfaults if printf is passed NULL for a "%s" arg (e.g. Solaris).
 
 
 o   Tim Prouty <tprouty@samba.org>
-    * Fix stream marshalling to return the correct streaminfo status.
-    * Fix a delete on close divergence from Windows.
-    * Allow renames of streams via NTRENAME and fix stream error codes on
-      rename.
-    * Remove a few unnecessary checks from the streams depot module and fix to
-      work with NTRENAME.
-    * Remove a few unnecessary checks from the streams xattr module.
-    * Remove a few unnecessary checks from the streams xattr module.
+    * Fix SMB_VFS_RECVFILE/SENDFILE macros.
+    * Parse_packet can return NULL which is then dereferenced in
+      match_mailslot_name.
+
 
+o   Dan Sledz <dsledz@isilon.com>
+    * Fix double free caused by incorrect talloc_steal usage.
 
-o   Andreas Schneider <anschneider@suse.de>
-    * Fix a segfault if ? is there but the options are NULL.
-    * Avoid flooding of syslog with failing pam_putenv messages.
-    * Document default of the printing config variable.
-    * Use talloc_tos() instead of the talloc NULL context.
 
+o   Aravind Srinivasan <aravind.srinivasan@isilon.com>
+    * Have nmbd check all available interfaces for WINS before failing.
 
-o   Karolin Seeger <kseeger@samba.org>
-    * BUG 6058: Use 'make distclean' instead of 'make clean' in build_docs.
-    * BUG 6000: Avoid bashism in perfcount.init.
-    * Change default value for "ldap ssl" to "start tls".
-    * Several documentation improvements/typo fixes.
-    * Fix syntax error in samba.spec.tmpl.
-    * Check if Unix account exists before asking for the password in smbpasswd.
-    * Add manpage for vfs_shadow_copy2.
 
+o   Miguel Suarez <Miguel.Suarez@stratus.com>
+    * BUG 6085: Fix build of vfs_default on systems without utime support.
 
-o   Richard Sharpe <realrichardsharpe@gmail.com>
-    * Fix mistake in DEBUG message.
+
+o   Yasuma Takeda <yasuma@osstech.co.jp>
+    * BUG 5920: The length of the memcpy was calculated wrong.
+    * BUG 6098: Fix the ads_find_dc() with "security = domain" when the DNS
+      server is invalid.
 
 
 o   Andrew Tridgell <tridge@samba.org>
-    * Keep compatibility with v3-0-ctdb name for fileid:mapping option.
+    * Fix a bug in message handling for code the change notify code.
+
+
+o   Jelmer Vernooij <jelmer@samba.org>
+    * Properly cast array length in print functions.
 
 
 o   Bo Yang <boyang@novell.com>
-    * Clean event context after child is forked.
-    * Refresh sequence number as soon as possible.
-    * Don't set child->requests to NULL in parent after fork.
-    * Backport of the clean event context after fork and
-      krb5 refresh chain fixes.
-    * Fix null pointer refrence in event context.
-    * Don't send message to any other child in child process.
-    * Fix bug in get_dc_name_via_netlogon(), null pointer refrence.
+    * Initialize the id_map status in idmap_ldap to avoid surprise.
 
 
 ######################################################################