13169 CVE-2020-1472 (ZeroLogon) and SMB authentication
Reviewed by: Joyce McIntosh <jmcintosh@tintri.com>
Reviewed by: Evan Layton <elayton@tintri.com>
Reviewed by: Gordon Ross <gordon.ro

13169 CVE-2020-1472 (ZeroLogon) and SMB authentication
Reviewed by: Joyce McIntosh <jmcintosh@tintri.com>
Reviewed by: Evan Layton <elayton@tintri.com>
Reviewed by: Gordon Ross <gordon.ross@tintri.com>
Reviewed by: Prashanth Badari <prbadari@tintri.com>
Reviewed by: Andy Fiddaman <andy@omnios.org>
Reviewed by: C Fraire <cfraire@me.com>
Approved by: Robert Mustacchi <rm@fingolfin.org>

show more ...

6935899 Add AD connectivity diagnostics
PSARC 2010/120 SMB/CIFS Statistics
6893904 The statistics of the CIFS server must be improved
6947373 only calculate pathname for query fileinfo le

6935899 Add AD connectivity diagnostics
PSARC 2010/120 SMB/CIFS Statistics
6893904 The statistics of the CIFS server must be improved
6947373 only calculate pathname for query fileinfo levels which require it
PSARC 2010/097 idmap: default unresolvable SID mapping to true
6864900 Enable unresolvable SID mapping by default
6923504 Need detailed tracing for idmap mapping requests
6928157 Need detailed tracing for idmap discovery operations
6949333 Panic in smb_pre_open_print_file
6795069 Commonize error codes between CIFS client and server
6941787 Spurious message "DC discovery failed" upon refresh
6941349 Update shortname support to remove name83 format
6941382 smbsrv should use smb_node_getpath functions instead of vnodetopath
6939494 smb_authenticate() doesn't check for smb_user_login() return
6944226 Need to keep the list of shares in smbsrv
6942697 open file lock count is incorrect on MMC
6941227 On addition of SMB local group, add corresponding POSIX group
6948109 Add ability to manage shares in ZFS group via Windows MMC
6948143 Add ability to set additional properties on Autohome shares
6903260 two "ID type" enumerations
6946940 smb_sid_tostr/fromstr input arguments should be const
6949088 CIFS continuously refresh when one of the interfaces won't properly initialize
6946075 Filebench IO errors when signing property enabled on Solaris CIFS Server
6951169 idmap reports "no such file or directory" when looking up krb5.conf, even when not a domain member
6813063 degraded operation message should occur only when appropriate
6644872 idmapd is too whiny in workgroup mode
6813268 idmapd bangs on DNS server when in workgroup mode
6883800 Trusted domain members won't map to a UID when the trust is one-way
6891704 Cross-forest trust discovery may not work in multi-domain forest
6933937 idmapd doesn't map out trusted domains properly when joined to a domain that isn't the forest root.
6923908 smbadm join CLI doesn't always report Kerberos change password failure
6926930 smbsrv libraries should use krb5_get_error_messsage()
6943528 Unable to update Windows 2008 dynamic dns record with cifs hostname > 15 characters.
6953259 Can't map remote-forest users when IDMU is enabled
6953688 Should allow only one standalone DFS namespace in a cluster system
6952292 smb_find_ads_server() deferences string one too many times
6950070 Share is not getting correct access based on host access control list
6950820 Host-based access control list does not work properly with ipv6_enable=true

--HG--
rename : usr/src/lib/libidmap/common/idmap_priv.h => usr/src/cmd/idmap/idmap/namemaps.h
rename : usr/src/lib/smbsrv/libsmb/common/smb_nicmon.c => usr/src/cmd/smbsrv/smbd/smbd_nicmon.c
rename : usr/src/lib/smbsrv/libmlsvc/common/eventlog_syslog.c => usr/src/lib/smbsrv/libmlsvc/common/eventlog_log.c
rename : usr/src/common/smbsrv/smb_status_xlat.c => usr/src/lib/smbsrv/libsmb/common/smb_status_tbl.c
rename : usr/src/uts/common/smbsrv/doserror.h => usr/src/uts/common/smb/doserror.h
rename : usr/src/uts/common/smbsrv/lmerr.h => usr/src/uts/common/smb/lmerr.h
rename : usr/src/uts/common/smbsrv/nterror.h => usr/src/uts/common/smb/nterror.h
rename : usr/src/uts/common/smbsrv/ntstatus.h => usr/src/uts/common/smb/ntstatus.h

show more ...

6762162 $DATA appended to streams when stream type != $DATA
6736548 After switching the security mode, sometimes smb/server enters maintenance state
6764225 First domain join attempt after sm

6762162 $DATA appended to streams when stream type != $DATA
6736548 After switching the security mode, sometimes smb/server enters maintenance state
6764225 First domain join attempt after smb/server restarts could fail
6764343 Unable to map a share in a new domain
6673517 Appliance\Share becomes unbrowseable for ~10 mins after CIFS client leaves/rejoins the workgroup
6765259 multiple refreshes may not pick up most recent configuration
6764275 need to check with sharemgr when there's a cache miss
6765313 System panic occurred in smb_node_fini+0x16a()
6769943 Purge mlrpc from from types, functions and definitions
6765390 Deprecate smb_wins.c
6771815 ndr_server.c should not include libmlsvc.h
6732763 smbadm takes invalid workgroup name
6749515 Unable to grant domain users/groups access to files
6765156 Active Directory setup has problems if the NETBIOS domain name does not match AD FQDN
6735548 Domain users cannot connect to CIFS shares from MacOS 10.5
6631366 Able to join W2K3 domain with wrong domain name after joined with correct domain name.
6768067 The "smbadm list" should display FQDN
6768061 SMB daemon turned into maintenance mode while updating ddns
6773309 smbd can miss SIGTERM and fail to exit since some threads allow SIGTERM
6775912 smbd: idmap handle access is not thread safe
6775155 core.smbd dump at smb_shr_sa_loadall+0x1f
6776818 Use of freed memory in smbrdr_logon_user()
6766126 Per-share support to configure/disable client-side caching (offline files)
6778831 smbadm definition of domain is too strict, should allow leading digit
6780207 libumem.so.1`process_free+0x55 crash while running smbtorture base tests.

--HG--
rename : usr/src/uts/common/smbsrv/lsalib.h => usr/src/lib/smbsrv/libmlsvc/common/lsalib.h
rename : usr/src/uts/common/smbsrv/samlib.h => usr/src/lib/smbsrv/libmlsvc/common/samlib.h

show more ...

6736540 ntlmv2 signing does not work in domain mode
6742179 incorrect timestamp usage in file creation
6736502 File Name(*.txt, *.doc, *.xls) will turn into all uppercase after copy from Win9

6736540 ntlmv2 signing does not work in domain mode
6742179 incorrect timestamp usage in file creation
6736502 File Name(*.txt, *.doc, *.xls) will turn into all uppercase after copy from Win98
6739452 Unable to write to a file with echo command when using Interix (Unix tools for Windows)
6740728 CIFS needs to be able to deal with a forced unmount of a local file system
6733894 Archive is not set by default on Windows XP, Vista, 2003 clients
6746432 Appropriate NETLOGON session key should be used.
6743273 Need alter context NDR support for dssetup service
6600944 Setting a group as owner is not properly supported
6744317 Owner should be local admin instead of domain admin when domain admin maps a CIFS share
6745459 CIFS returns a wrong error code when trying to give away ownership

--HG--
rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_dssetup.c => usr/src/lib/smbsrv/libmlsvc/common/dssetup_svc.c

show more ...

PSARC/2007/218 caller_context_t in all VOPs
PSARC/2007/227 VFS Feature Registration and ACL on Create
PSARC/2007/244 ZFS Case-insensitive support
PSARC/2007/315 Extensible Attribute Inter

PSARC/2007/218 caller_context_t in all VOPs
PSARC/2007/227 VFS Feature Registration and ACL on Create
PSARC/2007/244 ZFS Case-insensitive support
PSARC/2007/315 Extensible Attribute Interfaces
PSARC/2007/394 ls(1) new command line options '-/' and '-%': CIFS system attributes support
PSARC/2007/403 Modified Access Checks for CIFS
PSARC/2007/410 Add system attribute support to chmod(1)
PSARC/2007/432 CIFS system attributes support for cp(1), pack(1), unpack(1), compress(1) and uncompress(1)
PSARC/2007/444 Rescind SETTABLE Attribute
PSARC/2007/459 CIFS system attributes support for cpio(1), pax(1), tar(1)
PSARC/2007/546 Update utilities to match CIFS system attributes changes.
PSARC/2007/560 ZFS sharesmb property
4890717 want append-only files
6417428 Case-insensitive file system name lookup to support CIFS
6417435 DOS attributes and additional timestamps to support for CIFS
6417442 File system quarantined and modified attributes to support an integrated Anti-Virus service
6417453 FS boolean property for rejecting/allowing invalid UTF-8 sequences in file names
6473733 RFE: Need support for open-deny modes
6473755 RFE: Need ability to reconcile oplock and delegation conflicts
6494624 sharemgr needs to support CIFS shares better
6546705 All vnode operations need to pass caller_context_t
6546706 Need VOP_SETATTR/VOP_GETATTR to support new, optional attributes
6546893 Solaris system attribute support
6550962 ZFS ACL inheritance needs to be enhanced to support Automatic Inheritance
6553589 RFE: VFS Feature Registration facility
6553770 RFE: ZFS support for ACL-on-CREATE (PSARC 2007/227)
6565581 ls(1) should support file system attributes proposed in PSARC/2007/315
6566784 NTFS streams are not copied along with the files.
6576205 cp(1), pack(1) and compress(1) should support file system attributes proposed in PSARC/2007/315
6578875 RFE: kernel interfaces for nbmand need improvement
6578883 RFE: VOP_SHRLOCK needs additional access types
6578885 chmod(1) should support file system attributes proposed in PSARC/2007/315
6578886 RFE: disallow nbmand state to change on remount
6583349 ACL parser needs to support audit/alarm ACE types
6590347 tar(1) should support filesystem attributes proposed in PSARC/2007/315
6597357 *tar* xv@ doesn't show the hidden directory even though it is restored
6597360 *tar* should re-init xattr info if openat() fails during extraction of and extended attribute
6597368 *tar* cannot restore hard linked extended attributes
6597374 *tar* doesn't display "x " when hard linked attributes are restored
6597375 *tar* extended attribute header off by one
6614861 *cpio* incorrectly archives extended system attributes with -@
6614896 *pax* incorrectly archives extended system attributes with -@
6615225 *tar* incorrectly archives extended system attributes with -@
6617183 CIFS Service - PSARC 2006/715

show more ...