Recommended update for samba, permissions, samba-krb-printing and talloc

This recommended update provides version 4.1.18 of samba and fixes for permissions, talloc and samba-krb-printing:

- samba:
+ Avoid a crash inside the tevent epoll backend (bso#11141, bnc#931854).
+ Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf.
+ s3:winbind:grent: Don't stop group enumeration when a group has no gid (bso#8905).
+ s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535" (bso#9702).
+ Fix NTLM authentication (bso#10016).
+ vfs: Add glusterfs manpage; (bso#10240).
+ printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808, bnc#910378).
+ s3: client - "client use spnego principal = yes" code checks wrong name; (bso#10888).
+ spoolss: Clear PrinterInfo on GetPrinter error; (bso#10984).
+ s3-util: Fix authentication with long hostnames; (bso#11008).
+ smbd can't find the GUID for a printer in the registry and fails to publish printers; (bso#11018).
+ s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037).
+ smbd: Fix CID 1063259 Uninitialized scalar variable; (bso#11041).
+ net: Fix 'net sam addgroupmem'; (bso#11051).
+ cli_connect_nb_send: don't segfault on host == NULL; (bso#11058).
+ utils: Fix 'net time' segfault; (bso#11058).
+ libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059).
+ s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066).
+ vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069).
+ s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079).
+ s3: smbclient: Allinfo leaves the file handle open; (bso#11094).
+ debug: Set close-on-exec for the main log file FD; (bso#11100).
+ smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#11115).
+ vfs_glusterfs manpage corrections; (bso#11117).
+ doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127).
+ s3-winbind: Fix chached user group lookup of trusted domains; (bso#11143).
+ Fix memory leak in SMB2 notify handling; (bso#11144).
+ Fix memory leak in SMB2 notify handling; (bso#11144).
+ s4:auth/gensec_gssapi: let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
+ docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169, bnc#913304).
+ s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173).
+ s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
+ s4-process_model: Do not close random fds while forking; (bso#11180).
+ s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).
+ s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186).
+ s3: Mac OS X 10.10.x fails validate negotiate request to 4.1.x; (bso#11187).
+ spoolss: Purge the printer name cache on name change; (bso#11210, bnc#901813).
+ s3:smbd: Missing tevent_req_nterror; (bso#11224).
+ s4:rpc_server: Add multiplex state to dcerpc flags and control over multiplex PFC flag in bind_ack and and dcesrv_alter replies; (bso#11225).
+ Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226).
+ Fix crash in 'net ads dns gethostbyname' with an error in TALLOC_FREE if you enter invalid values; (bso#11234).
+ s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236).
+ s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240).
+ vfs: kernel_flock and named streams; (bso#11243).
+ s3: nmbd: Don't set work_changed = True inside update_server_ttl(); (bso#11254).
+ Take resource group sids into account when caching netsamlogon data; (bnc#912457).
+ Prevent samba package updates from disabling samba kerberos printing.
+ Purge printer name cache on spoolss SetPrinter change; (bso#11210, bnc#901813).
+ Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374).
+ Fix tdb_store_flag_to_ntdb() gcc5 build failure.

- talloc:
+ Fix memory leak in SMB2 notify handling; (bso#11144).
+ fix _talloc_total_limit_size prototype
+ build: improve detection of srcdir

- permissions:
+ remove /usr/bin/get_printing_ticket; (bnc#906336)

- samba-krb-printing:
+ new package to provide get_printing_ticket binary stand-alone.

Fixed bugs
bnc#906336
AUDIT-0: security audit for cups-backend-kerberized-smb in OBS project Printing
bnc#901813
Renaming a samba printer after driver assignment confuses printer to be renamed
bnc#910378
Print Jobs Disappears From The Print Queue Display
bnc#912457
L3: sporadic incomplete group membership info on winbind
bnc#913304
idmap_rid examples in doc using deprecated parameters
bnc#923374
vfs_btrfs incorrectly uses errno for snapshot ioctl errors
bnc#931854
Use after free panic in winbindd epoll_event_loop
Selected Binaries
openSUSE Build Service is sponsored by