Samba 3.0.34 Available for Download

                   ==============================
                   Release Notes for Samba 3.0.34
                         January, 20 2009
                   ==============================


This is a bug fix release of the Samba 3.0 series.

Major enhancements included in Samba 3.0.34 are:

  o Fix update of machine account passwords.
  o Fix SMB signing issue on Windows Vista with MS Hotfix KB955302.
  o Fix Winbind crashes.
  o Correctly detect if the current dc is the closest one.
  o Add saf_join_store() function to memorize the dc used at join time.
    This avoids problems caused by replication delays shortly after domain
    joins.
  o Fix write list in setups using "security = share".


######################################################################
Changes
#######

Changes since 3.0.33
--------------------


o   Michael Adam 
    * Fix linking cifs.upcall when nscd_flush_cache() is found.
    * Fix smbd hanging on Solaris when winbindd closes socket.
    * Use the reconnect methods instead of the rpc methods directly.


o   Jeremy Allison 
    * BUG 1254: Fix write list in setups using "security = share".
    * BUG 5052: Not work cancel inheritance on share.
    * BUG 5729: Explicitly allow "-valid" parameter.
    * BUG 5737: Fix Winbind crash in an unusual failure mode.
    * BUG 5750: Fix SMB signing issue on Windows Vista with MS Hotfix KB955302.
    * BUG 5751: Backport to fix showing of ACLson DFS with smbclient.
    * BUG 5790: Fix returning STATUS_OBJECT_NAME_NOT_FOUND on set file
      disposition call.
    * BUG 5814: Fix core dump of Winbind while doing "rescan_trusted_domain".
    * BUG 5873: Fix ACL inheritance.
    * BUG 5914: Fix build failure (redefinition of struct name_list).
    * BUG 5937: Fix filenames with "*" char hiding other files.
    * BUG 6019: File corruption in Clustered SMB/NFS environment
      managed via CTDB.
    * BUG 6035: Fix possible race between fcntl F_SETLKW and alarm delivery.
    * Remove unecessary msync.
    * Rename cifs.spnego to cifs.upcall.
    * Fix segfault when execution cifs.upcall without any arguments.
    * Ensure we emit the notify message before renaming the open files.
    * Fix use of DLIST_REMOVE.
    * Cope with bad trans2mkdir requests from System in QNTC IBM SMB client.
    * Fix memory leak in error path.
    * Fix logic bug introduced in backport of ccache_regain_all_now.


o   Kai Blin 
    * Reformat the WBFLAGS defines to prepare for adding a new flag.
    * Put huge NTLMv2 blobs into extra_data on CRAP auth.


o   Günther Deschner 
    * BUG 5710: Fix update of machine account passwords.
    * Define NET_SRVPWSET2 call.
    * Net should just use machine account creds when changing passwords.
    * Fix net_io_q_srv_pwset2.


o   Carsten Dumke 
    * BUG 5892: Fix documentation of net rap printq info.


o   Dina Fine 
    * BUG 5908: Fix failing of internal change notify on share directory.


o   Steve French 
    * Fix compile warning in cifs.upcall.
    * Fix cifs.upcall manpage and comments.


o   Jeff Layton 
    * Build cifs.upcall by default on Linux.
    * Fix negatively instantiate keys on error in cifs.upcall.
    * Handle handle MSKRB5 OID properly in cifs.upcall.
    * Bump SPNEGO msg version number and don't reject old versions in
      cifs.upcall.
    * Fix several problems when mounting subdirectories of shares in
      mount.cifs.
    * Don't prompt for password on krb5 mounts in mount.cifs.
    * Have uppercase_string return success on NULL pointer in mount.cifs.
    * Make return codes match the return codes for /bin/mount in mount.cifs.
    * Use lock/unlock_mtab scheme from util-linux-ng mount prog.


o   Volker Lendecke 
    * BUG 5965: Fix creation of the first share using SWAT.
    * Fix bug triggered by the RAW-SAMBA3OPLOCKLOGOFF test.


o   David Leonard 
    * BUG 4516: No IPv6 on Solaris 2.6.


o   Igor Mammedov 
    * Add support for cifs.spnego helper into configure and Makefile.in.
    * Add checks for spnego prereq keyutils.h and kerberos in configure.in.
    * Add helper source for handling cifs kernel module upcall for kerberos
      authorization.
    * Add -c option to set service prefix to "cifs" in service principal by
      default service prefix "host" is used.
    * Add support for cifs.resolver upcall.


o   Stefan Metzmacher 
    * Correctly detect if the current dc is the closest one.
    * For CLDAP we need to use get_sorted_dc_list() to avoid recursion.
    * Add fallback to return all dcs, when none is available in the requested
      site.
    * Add saf_join_store() function to memorize the dc used at join time.
    * Return an error instead of crashing when no realm is given.
    * Handle the SMB signing states the same in the krb5 and ntlmssp cases.


o   Andreas Schneider 
    * Delete the krb5 ccname variable from the PAM environment if set.
    * Fix the build of pam_winbind.
    * Fix circular dependency error with autoconf 2.6.3.


o   Simo Sorce 
    * Fix an ifdef check.
    * Fix warning.


o   Yasuma Takeda 
    * BUG 5909: Fix MS-DFS links inlcuding multibyte characters on Vista.


o   Andrew Tridgell 
    * Avoid a race condition in glibc between AIO and setresuid().
    * Become root for AIO operations.


o   Bo Yang 
    * Don't set child->requests to NULL in parent after fork.
    * Backport of the clean event context after fork and krb5
      refresh chain fixes.
    * Fix null pointer refrence in event context in backport from v3-3-test.


o   Qiao Yang 
    * Fix a memleak.

Please refer to the original Samba 3.0.33 Release Notes for more details regarding changes in previous releases.