1122 smbsrv should use SPNEGO (inbound authentication) Portions contributed by: Matt Barden <Matt.Barden@nexenta.com> Portions contributed by: Kevin Crowe <kevin.crowe@nexenta.com> Portions contributed by: Alek Pinchuk <alek@nexenta.com> Reviewed by: Bayard Bell <bayard.bell@nexenta.com> Reviewed by: Dan Fields <dan.fields@nexenta.com> Reviewed by: Kevin Crowe <kevin.crowe@nexenta.com> Reviewed by: Matt Barden <Matt.Barden@nexenta.com> Approved by: Robert Mustacchi <rm@joyent.com>

3138 smb_token_create_privs() passes const char to smb_lgrp_getbyname() Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Richard Lowe <richlowe@richlowe.net>

6779186 need domain controller hot failover 6970986 Level II oplocks - smb_oplock_grant_t shouldn't be dynamically allocated 6971031 Unable add ACL on the share which has only the default owner tab by ZFS 6971899 OpenSSL not MT-safe and takes down smbd 6936762 libidmap should transparently handle interruption in connection to idmapd 6954902 mapping to unknown type does not use directory-based mapping information --HG-- rename : usr/src/lib/libidmap/common/idmap_priv.h => usr/src/cmd/idmap/idmap/namemaps.h

PSARC/2009/534 SMB/CIFS Standalone DFS PSARC/2010/052 idmap flush 6711751 SMB/CIFS Distributed File System (DFS) 6650858 cache flush sub-command could be useful 6916379 share modes should be checked for directories as well as files 6906874 Automatic primary group mapping based on user mapping 6879236 No error report when ad-container refers to nonexistent container 6919087 Intermittent smbd crash during share access 6853811 Kerberized applications fail even after a successful domain join via smbadm 6907640 Current algorithm of anonymous authentication is not correct 6888813 SMB/CIFS support for ZFS user and group quotas 6921142 Guest issues with idmap rule and with workgroup mode 6924843 smb_sam_lookup_sid() leaks memory 6919600 Unable to delete ACE from ACL on a share 6915463 smb_nic interface needs LOG_ERR syslog entries and proper return codes 6926137 WritePrinter requires multi-fragment NDR RPC support 6926211 smbd could report clock skew 6925697 Quota usage does not decrease after deleting files from Mac Snow Leopard 10.6 6849962 smbadm show cannot display all groups with error 'cannot obtain a SID' 6926265 SMB watch tree change notification 6811424 must restart smb/server when idmapd restarts 6927745 Consolidate file system query/set information handlers 6924281 SMB_WRITE_RAW_COM doesn't work. 6925618 idmap show -v gets type of UNIX ID wrong in "Rule" output 6807651 rule changes do not flush cache 6928550 libsmbrdr doesn't cleanup stale sessions 6861058 MMC: Error message printed on log entries 6817392 smbd will not exit 6931027 core file due to NULL zpool handle in zfs_open() --HG-- rename : usr/src/common/smbsrv/smb_common_door_decode.c => usr/src/common/smbsrv/smb_door_legacy.c rename : usr/src/common/smbsrv/smb_xdr_utils.c => usr/src/common/smbsrv/smb_xdr.c rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_wkssvc.c => usr/src/lib/smbsrv/libmlsvc/common/wkssvc_svc.c rename : usr/src/uts/common/fs/smbsrv/smb_trans2_query_fs_information.c => usr/src/uts/common/fs/smbsrv/smb_fsinfo.c rename : usr/src/uts/common/fs/smbsrv/smb_kdoor_clnt.c => usr/src/uts/common/fs/smbsrv/smb_kdoor.c rename : usr/src/uts/common/fs/smbsrv/smb_util.c => usr/src/uts/common/fs/smbsrv/smb_kutil.c rename : usr/src/uts/common/smbsrv/smb_common_door.h => usr/src/uts/common/smbsrv/smb_door.h

6879234 ad-container appends domain to value specified 6891756 one-at-a-time mapping functions should be eliminated in favor of one-entry batch requests 6899950 Able to create a folder with name containing invalid character such as|from DOS cmd 6902745 move pathname processing functions into smb_pathname.c 6902738 does not map [UG]IDs with hard-coded mappings into their names 6582184 Provide MSRPC API to Winchester 6902788 Restrict SMB autohome share access to the owner 6901866 empty domain string prevents guest login via CIFS 6908022 Consolidate pathname pre-processing and validation functions into smb_pathname.c 6907680 nds_initialize assert is too aggressive 6608021 No file change notification on file size change 6904471 sa_optionset_name() leaks memory 6763298 Very first remove-share attempt could fail if the share have smb properties set --HG-- rename : usr/src/lib/smbsrv/libmlsvc/common/lsar_open.c => usr/src/lib/smbsrv/libmlsvc/common/lsar_clnt.c rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_lsa.c => usr/src/lib/smbsrv/libmlsvc/common/lsar_svc.c rename : usr/src/lib/smbsrv/libmlsvc/common/samr_open.c => usr/src/lib/smbsrv/libmlsvc/common/samr_clnt.c rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_sam.c => usr/src/lib/smbsrv/libmlsvc/common/samr_svc.c rename : usr/src/uts/common/fs/smbsrv/smb_path_name_reduction.c => usr/src/uts/common/fs/smbsrv/smb_pathname.c

6747532 ns_lookup_bypid spams syslog with too many messages 6888836 Not listing all files in a directory of a CIFS share in Windows XP 6812570 Trans2 is missing pass-through levels: FILE_RENAME_INFORMATION (and others) 6888827 Add Unicode codepage support 6865488 libadutils: leak in ldap_lookup_domains_in_forest() 6888708 idmapd crashing periodically. Need cores analyzed. 6891342 invalid, redundant SQL in rule WHERE expressions 6891767 minor cleanups in idmap 6892544 Panic occurred at smb_node_ref+0x7f(ffffffd612297310) --HG-- rename : usr/src/uts/common/smbsrv/cifs.h => usr/src/uts/common/smbsrv/smb.h

6612607 CIFS ADS client should use ldap_sasl_interactive_bind_s API 6877755 smbd should not route stderr, stdout to /dev/null 6882701 Wrong error message for attempt to map local user to Windows group, or vice versa 6885105 Potential for deadlock in smb_node_set_delete_on_close() 6881928 smbd core generated when running a script to join domain, set abe properties 6885538 Reduce dependencies on libsmbrdr 6820325 cifs service can't start on multi vlan+ipmp configuration

6803042 AUXILIARY tags in libsmb mapfile produce ELF noise and bloated binary 6663517 smb_auth_[nt]lm_hash and friends should take const arguments 6788664 Remove misleading debug messages at smbd startup 6828536 Allow manipulating ACLs on share from Windows client 6836556 smb_nic_addhost miscomputes buffer length 6766364 Add scripting support to Autohome PSARC 2009/184 SMB/CIFS Share Exec Properties 6837681 CIFS server ignores the preferred DC setting during DC discovery 6775827 cifs server should support guest access PSARC 2009/164 Support for guest access to CIFS/SMB shares 6744962 The daemon smbd doesn't go into maintenance state when the listeners cannot bind to the sockets. 6810419 For smb server on SPARC, NetBIOS name IP is backwards for Windows machine 6840864 Additional levels for srvsvc netshareinfo 6813129 Unable to map cifs share using fqdn and <userPrincipalName>@fqdn for authentication. 6742726 panic when trying to join domain with 1000 pre-existing shares 6842449 The ADS selection algorithm doesn't always pick the configured 'pdc'. 6840692 Setting pdc configuration requires smb/server restart 6832673 smb_ads_find_host() can return host from incorrect domain when host is cached 6840721 Unable to assign an IPv6 address to the 'pdc' property 6842462 FW needs an API for finding a domain controller in a multiple DC environment 6843140 CIFS service dumps core when security tab accessed with certain ACE combinations

6792084 smb_node_lookup should not take ownership of the hold on vnode passed as a parameter 6792299 winreg EnumKey should enumerate subkeys of any key 6582194 Replace getdents with readdir 6790756 smb_vss_lookup_nodes doesn't release its hold on vnode if smb_node_lookup fails 6791568 Solaris CIFS server only accepts pre-Windows 2000 user logon name 6793375 Unable to map a share with a user on a trusted domain 6796947 invalid assert in smb_vop_getattr 6581736 IPv6 support 6788345 smbadm list output only shows one trusted domain 6796594 Array overrun in libmlrpc 6797782 Need a SAM abstraction layer 6764696 Insufficient access while attempting to modify UserAccountControl attribute of a machine account 6798908 Refresh after enabling network interfaces should trigger DC discovery 6798825 Replace the smb_vop_readdir mechanism with the smb_odir_t object

6559601 Computer Management fails to create or list shares 6764857 smbadm add-member does not check the domain name when CIFS server is in domain mode 6627645 Want VSS support for CIFS server 6746016 It would be nice to list trusted domains in smbadm list output 6611342 LOGR doesn't return the system log content. 6788324 ddns fails to update records in DNS server. 6786072 Support client-side caching options on smbautohome shares --HG-- rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_logr.c => usr/src/lib/smbsrv/libmlsvc/common/eventlog_svc.c rename : usr/src/lib/smbsrv/libmlsvc/common/srvsvc_client.c => usr/src/lib/smbsrv/libmlsvc/common/srvsvc_clnt.c rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_srvsvc.c => usr/src/lib/smbsrv/libmlsvc/common/srvsvc_svc.c rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_winreg.c => usr/src/lib/smbsrv/libmlsvc/common/winreg_svc.c

6762162 $DATA appended to streams when stream type != $DATA 6736548 After switching the security mode, sometimes smb/server enters maintenance state 6764225 First domain join attempt after smb/server restarts could fail 6764343 Unable to map a share in a new domain 6673517 Appliance\Share becomes unbrowseable for ~10 mins after CIFS client leaves/rejoins the workgroup 6765259 multiple refreshes may not pick up most recent configuration 6764275 need to check with sharemgr when there's a cache miss 6765313 System panic occurred in smb_node_fini+0x16a() 6769943 Purge mlrpc from from types, functions and definitions 6765390 Deprecate smb_wins.c 6771815 ndr_server.c should not include libmlsvc.h 6732763 smbadm takes invalid workgroup name 6749515 Unable to grant domain users/groups access to files 6765156 Active Directory setup has problems if the NETBIOS domain name does not match AD FQDN 6735548 Domain users cannot connect to CIFS shares from MacOS 10.5 6631366 Able to join W2K3 domain with wrong domain name after joined with correct domain name. 6768067 The "smbadm list" should display FQDN 6768061 SMB daemon turned into maintenance mode while updating ddns 6773309 smbd can miss SIGTERM and fail to exit since some threads allow SIGTERM 6775912 smbd: idmap handle access is not thread safe 6775155 core.smbd dump at smb_shr_sa_loadall+0x1f 6776818 Use of freed memory in smbrdr_logon_user() 6766126 Per-share support to configure/disable client-side caching (offline files) 6778831 smbadm definition of domain is too strict, should allow leading digit 6780207 libumem.so.1`process_free+0x55 crash while running smbtorture base tests. --HG-- rename : usr/src/uts/common/smbsrv/lsalib.h => usr/src/lib/smbsrv/libmlsvc/common/lsalib.h rename : usr/src/uts/common/smbsrv/samlib.h => usr/src/lib/smbsrv/libmlsvc/common/samlib.h

6751647 TRANS2_FIND_NEXT continuation by filename restarts search at beginning of directory 6753904 SVCCTL server side service 6741484 Local users cannot connect to CIFS shares from MacOS 10.5 6746898 win98 can not overwrite *.files 6753310 Incorrect handling of SmbNegotiate request when invalid dialects are negotiated. 6751123 Unable to join domain, core dump generated with IPMP setting 6722437 SMB_TRANS2_FIND returns wrong status code when stream file is passed 6716578 can not delete file in extended attribute name space in cifs client when cifs server is solaris PSARC 2008/584 Correction in nbmand behavior 6734067 Long delay when viewing MS Word Read-only file properties with nbmand enabled. PSARC/2007/281 NFS share properties for Montana compatibility 6475452 Need Solaris support for Montana approve file functionality in NFS 6582170 Host-based access control (approve file) 6749075 Unable to join domain if user password exceeds 20 characters 6612716 Join domain fails if hostname is > 15 chars 6753251 server signing: wrong signature is generated for the NetShareEnum reply 6757521 SMB daemon leaks memory after displaying GSS status 6760315 Local user cannot connnect to CIFS shares if CIFS server's hostname is not specified 6757333 Share publisher thread runs into infinite loop of displaying GSS major/minor status 6757132 smbd crashes at smb_idmap_batch_getmappings 6760876 security descriptor decoding function has a glitch 6761491 Cannot open or delete a named stream on a directory file. 6741449 Cleanup list in smbns_ads module 6593958 Users with restore privilege can take ownership of files --HG-- rename : usr/src/lib/smbsrv/libmlsvc/common/secdb.c => usr/src/lib/smbsrv/libmlsvc/common/smb_logon.c rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_svcctl.c => usr/src/lib/smbsrv/libmlsvc/common/svcctl_svc.c