Module Name:	pkgsrc
Committed By:	taca
Date:		Fri Jul 13 16:08:41 UTC 2001

Modified Files:
	pkgsrc/net/samba: Makefile distinfo
	pkgsrc/net/samba/pkg: DESCR PLIST
Added Files:
	pkgsrc/net/samba/patches: patch-ag patch-ah patch-ai patch-aj
	pkgsrc/net/samba/pkg: MESSAGE
Removed Files:
	pkgsrc/net/samba/patches: patch-ad

Log Message:
Update samba to 2.2.1a.

              WHATS NEW IN Samba 2.2.1a:  11th July 2001
              ==========================================

This is the latest stable release of Samba. This is the version that all
production Samba servers should be running for all current bug-fixes.

This is a minor bugfix release for 2.2.1, *NOT* security related.

1). 2.2.1 had a bug where using smbpasswd -m to add a Windows NT or
Windows2000 machine into a Samba hosted PDC would fail due to our
stricter user name checking. We were disallowing user names
containing '$', which is needed when using smbpasswd to add a
machine into a domain. Automatically adding machines (using the
native Windows tools) into a Samba domain worked correctly.

2.2.1a fixes this single problem.

New/Changed parameters in 2.2.1
-------------------------------

Added parameters.
-----------------

obey pam restrictions

When Samba is configured to use PAM, turns on or off Samba checking
the PAM account restrictions. Defaults to off.

pam password change

When Samba is configured to use PAM, turns on or off Samba passing
the password changes to PAM. Defaults to off.

large readwrite

New option to allow new Windows 2000 large file (64k) streaming
read/write options. Needs a 64 bit underlying operating system
(for Linux use kernel 2.4 with glibc 2.2 or above). Can improve performance
by 10% with Windows 2000 clients. Defaults to off. Not as tested
as some other Samba code paths.

hide unreadable

Prevents clients from seeing the existance of files that cannot
be read. Off by default.

enhanced browsing

Turn on/off the enhanced Samba browing functionality (*1B names).
Default is "on". Can prevent eternal machines in workgroups when
WINS servers are not synchronised.

Removed parameters.
-------------------

domain groups
domain admin users
domain guest users

Changes in 2.2.1
-----------------

1). "find" command removed for smbclient. Internal code now used.
2). smbspool updates to retry connections from Michael Sweet.
3). Fix for mapping 8859-15 characters to UNICODE.
4). Changed "security=server" to try with invalid username to prevent
    account lockouts.
5). Fixes to allow Windows 2000 SP2 clients to join a Samba PDC.
6). Support for Windows 9x Nexus tools to allow security changes from Win9x.
7). Two locking fixes added. Samba 2.2.1 now passes the Clarion network
    lock tester tool for distributed databases.
8). Preliminary support added for Windows 2000 large file read/write SMBs.
9). Changed random number generator in Samba to prevent guess attacks.
10). Fixes for tdb corruption in connections.tdb and file locking brlock.tdb.
     smbd's clean the tdb files on startup and shutdown.
11). Fixes for default ACLs on Solaris.
12). Tidyup of password entry caching code.
13). Correct shutdowns added for send fails. Helps tdb cleanup code.
14). Prevent invalid '/' characters in workgroup names.
15). Removed more static arrays in SAMR code.
16). Client code is now UNICODE on the wire.
17). Fix 2 second timstamp resolution everywhere if dos timestamp set to yes.
18). All tdb opens now going through logging function.
19). Add pam password changing and pam restrictions code.
20). Printer driver management improvements (delete driver).
21). Fix difference between NULL security descriptors and empty
     security descriptors.
22). Fix SID returns for server roles.
23). Allow Windows 2000 mmc to view and set Samba share security descriptors.
24). Allow smbcontrol to forcibly disconnect a share.
25). tdb fixes for HPUX, OpenBSD and other OS's that don't have a coherent
     mmap/file read/write cache.
26). Fix race condition in returning create disposition for file create/open.
27). Fix NT rewriting of security descriptors to their canonical form for
     ACLs.
28). Fix for Samba running on top of Linux VFAT ftruncate bug.
29). Swat fixes for being run with xinetd that doesn't set the umask.
30). Fix for slow writes with Win9x Explorer clients. Emulates Microsoft
     TCP stack early ack specification error.
31). Changed lock & persistant tdb directory to /var/cache/samba by default on
     RedHat and Mandrake as they clear the /var/lock/samba directory on reboot.


To generate a diff of this commit:
cvs rdiff -r1.60 -r1.61 pkgsrc/net/samba/Makefile
cvs rdiff -r1.11 -r1.12 pkgsrc/net/samba/distinfo
cvs rdiff -r1.7 -r0 pkgsrc/net/samba/patches/patch-ad
cvs rdiff -r0 -r1.1 pkgsrc/net/samba/patches/patch-ag \
    pkgsrc/net/samba/patches/patch-ah pkgsrc/net/samba/patches/patch-ai \
    pkgsrc/net/samba/patches/patch-aj
cvs rdiff -r1.5 -r1.6 pkgsrc/net/samba/pkg/DESCR
cvs rdiff -r0 -r1.1 pkgsrc/net/samba/pkg/MESSAGE
cvs rdiff -r1.23 -r1.24 pkgsrc/net/samba/pkg/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.