RHBA-2011:0054: samba3x bug fix and enhancement update

Samba is a suite of programs used by machines for authentication, and file andprinter sharing.These updated samba3x packages provide fixes for the following bugs: Users of trusted child domains were not authenticated correctly. As a result, some users of such domains did not appear as members of the parent domain evenif the child domain allowed full inheriting from the parent domain. With thisupdate, all users of a trusted child domain are authenticated successfully.(BZ#459842) The smb.conf manual page contained an ambiguous description of the 'default case' parameter. With this update, the description is updated and gives a cleardescription. (BZ#480405) Service principal names were not always created correctly and as a result, the system was attempting to acquire a service ticket using a wrong hostname. Thiscaused the Kerberos authentication to fail. With this update, service principalnames are created correctly. (BZ#560239) CUPS printing could fail in an Active Directory environment with Kerberos. With this update, regular users can print in such environment. (BZ#565774) When the 'normalize names' setting was enabled, the winbindd service could have failed after user authentication. With this update, authentication issuccessful. (BZ#565915) Packages requiring samba cannot recognize samba3x as an updated samba version. With this update, dependent packages recognize samba3x as the new samba version.(BZ#582756) Some remote users could not authenticate from workstations running Windows. This occurred, because the winbind service failed to authenticate to WindowsServer 2008 using the "ntlm-server-1" ntmauth protocol. With this update, theservice works correctly. (BZ#590766) In the offline mode, the winbind service could have logged the following message: "Exceeding 200 client connections, no idle connection found." With thisupdate, the error no longer occurs and you can set the client limit manuallywith the command 'winbind max clients'. (BZ#604081) The winbindd client limit was set to 200 and could not be changed. With this update, you can set the client limit manually with the command 'winbind maxclients'. (BZ#641379) Previously, the samba3x package considered any samba package a conflicting package. With this update, samba3x checks for possible non-conflicting versionsof the samba package. (BZ#609578) When using non-standard character sets, the command 'wbinfo' displayed user and group names with accented characters incorrectly. With this update, thosenames are displayed correctly with all supported character sets. (BZ#649708) Samba could have failed to connect to workstations running Windows 7 with Live Essentials installed due to a SPNEGO parsing failure. With this update, theconnection succeeds. (BZ#651722)In addition, these updated packages provide the following enhancements: Interoperation with Windows 7 and Windows Server 2008 was fixed. Secure channel connections to servers with Windows Server 2008 R2 and interdomaintrusts with Windows Server 2008 domains are now supported. Previously also, dueto errors in the secure channel to Windows 7 and Windows Server 2008 R2, thewinbind daemon could corrupt the secure channel. With this update, this nolonger occurs. (BZ#527997) In Red Hat Enterprise Linux 5.6, the samba3x package no longer provides the libtalloc library. The library is now provided in a separate source RPM.(BZ#596883) In Red Hat Enterprise Linux 5.6, the samba3x package no longer provides the libtdb library. The library is now provided in a separate source RPM.(BZ#596886)Users are advised to upgrade to these updated samba3x packages, which resolvethese issues and add these enhancements.