samba-winbind: Winbind Daemon and Tool
----------------------------------------------------------------------
File: samba-winbind-3.0.22-13.18.ppc.rpm
Patchrpm: samba-winbind-3.0.22-13.18.ppc.patch.rpm
Version: 3.0.22-13.18
Size: 1512 kB
Patchsize: 1492 kB
Date: Thu 13 Jul 2006 21:21:15 CEST
Source: samba-3.0.22-13.18.src.rpm
Security: Yes
----------------------------------------------------------------------
Description: - Prevent potential crash in winbindd's credential cache
  handling; [#184450].
- Fix memory exhaustion DoS; CVE-2006-3403; [#190468].
- Fix the munlock call, samba.org svn rev r16755 from
  Volker.
- Change the kerberos principal for LDAP authentication to
  netbios-name$@realm from host/name@realm; [#184450].
- Ensure to link all required libraries to libnss_wins;
  [#184306].
- Change log level of debug message to avaoid flodded nmbd
  log; [#157623].
- Add 'usershare allow guests = Yes' to the default config;
  [#144787].
- Add CHANGEPW kpasswd fallback to TCP; [#184945].
- Honour 'sn' attribute for eDir; [#176799].
- Adapt smbclient fix to smbtree to enable long share names;
  [#175999].
- Make smbclient -L use RPC to list shares, fall back to
  RAP; [#171311].
- Re-add in-forest domain trusts; [bso #3823].
- Remove SO_SNDBUF and SO_RCVBUF from socket options
  example; [#165723].
- Add wbinfo --own-domain; [#167344].
- Fix usability of pam_winbind on a Samba PDC; [bso #3800].
- Remove intrusive affinity patches for winbindd.
- Merge Volker's winbindd crash fix for half-opened
  connections in winbindd_cm.c (sessionsetup succeeded but
  tconX failed).
- Optimize lookup of user's group memberships via ExtendedDn
  LDAP control; [#168100].
- Restart winbind if the hostname is modified by the DHCP
  client; [#169260].
- Prevent passwords beeing swapped to disc; [#174834].
- Remove length limit from winbind cache cleanup function;
  [#175737].
- Fix NDS_ldapsam memory leak.
- Only add password to linked list when necessary.
- Don't try cached credentials when changing passwords.
- Cleanup winbind linked list of credential caches.
- Use the index objectCategory attribute in AD LDAP
  requests.
- Adjust AD time difference when validating tickets.
- Add password change warning for passwords beeing too
  young.
- Remove experimental Heimdal KCM support.
- Added "usershare allow guests" global parameter;
  [#144787].
- Return domain name in samrquerydominfo 5; [#172756].
- Fix unauthorized access when logging in with pam_winbind;
  [#156385].
- Don't ever set O_SYNC on open unless "strict sync = yes";
  [#165431].
- Correct fix to exit from "net" with an inproper
  configuration; [#163227], [#182749].