Index: openafs/doc/man-pages/pod1/pts_membership.pod diff -c openafs/doc/man-pages/pod1/pts_membership.pod:1.4.2.2 openafs/doc/man-pages/pod1/pts_membership.pod:1.4.2.4 *** openafs/doc/man-pages/pod1/pts_membership.pod:1.4.2.2 Mon Feb 4 12:53:44 2008 --- openafs/doc/man-pages/pod1/pts_membership.pod Mon Jan 19 18:04:54 2009 *************** *** 34,40 **** system:authuser groups, and they do not appear in the list of groups to which a user belongs. ! To add users or machine to groups, use the pts adduser command; to remove them, use the B command. =head1 OPTIONS --- 34,40 ---- system:authuser groups, and they do not appear in the list of groups to which a user belongs. ! To add users or machine to groups, use the B command; to remove them, use the B command. =head1 OPTIONS *************** *** 112,156 **** =head1 PRIVILEGE REQUIRED ! The required privilege depends on the setting of the third privacy flag in ! the Protection Database entry of each user or group indicated by the ! B<-nameorid> argument (use the B command to display the flags): =over 4 =item * ! If it is the hyphen and the B<-nameorid> argument specifies a user, only ! the associated user and members of the system:administrators group can ! list the groups to which the user belongs. ! ! =item * ! ! If it is the hyphen and the B<-nameorid> argument specifies a machine, ! only the members of the system:administrators group can list the groups to ! which the machine belongs. ! ! =item * ! ! If it is the hyphen and the B<-nameorid> argument specifies a group, only ! the owner of the group and members of the system:administrators group can ! list the members of the group. ! ! =item * ! ! If it is lowercase C and the B<-nameorid> argument specifies a user or ! machine entry, the meaning is equivalent to the hyphen. =item * If it is lowercase C and the B<-nameorid> argument specifies a group, ! members of the group can also list the other members. =item * If it is uppercase C, anyone who can access the cell's database server ! machines can list group memberships. =back --- 112,146 ---- =head1 PRIVILEGE REQUIRED ! Members of the system:ptsviewers and system:administrators groups can ! always use this command in any of its variations. Additionally, a user ! can always list the groups to which they belong, and the owner of a group ! can always list the members of the group. ! ! Additional privileges may be granted by the setting of the third privacy ! flag in the Protection Database entry of each user or group indicated by ! the B<-nameorid> argument (use the B command to display the flags): =over 4 =item * ! If it is a hyphen, the default permissions described above apply. =item * If it is lowercase C and the B<-nameorid> argument specifies a group, ! then members of that group can also list the other members. A privacy ! flag of C only changes the permissions when set for a group. Setting ! this flag for a user or a machine has no effect. =item * If it is uppercase C, anyone who can access the cell's database server ! machines can list the membership of the group or the groups to which that ! user or machine belongs, depending on what type of entry the flag is set ! on. =back Index: openafs/doc/man-pages/pod5/NetRestrict.pod diff -c openafs/doc/man-pages/pod5/NetRestrict.pod:1.1.6.1 openafs/doc/man-pages/pod5/NetRestrict.pod:1.1.6.2 *** openafs/doc/man-pages/pod5/NetRestrict.pod:1.1.6.1 Tue Jun 19 05:08:41 2007 --- openafs/doc/man-pages/pod5/NetRestrict.pod Tue Jan 6 08:40:16 2009 *************** *** 69,78 **** The F file is in ASCII format. One IP address appears on each line, in dotted decimal format. The order of the addresses is not ! significant. The value C<255> is a wildcard that represents all possible ! addresses in that field. For example, the value C<192.12.105.255> ! indicates that the File Server or database server processes do not ! register or use any of the addresses in the C<192.12.105> subnet. To display the File Server interface addresses registered in the VLDB, use the B command. --- 69,75 ---- The F file is in ASCII format. One IP address appears on each line, in dotted decimal format. The order of the addresses is not ! significant. To display the File Server interface addresses registered in the VLDB, use the B command. Index: openafs/doc/txt/winnotes/afs-changes-since-1.2.txt diff -c openafs/doc/txt/winnotes/afs-changes-since-1.2.txt:1.72.2.64 openafs/doc/txt/winnotes/afs-changes-since-1.2.txt:1.72.2.65 *** openafs/doc/txt/winnotes/afs-changes-since-1.2.txt:1.72.2.64 Mon Dec 29 18:21:01 2008 --- openafs/doc/txt/winnotes/afs-changes-since-1.2.txt Thu Jan 22 11:02:12 2009 *************** *** 1,3 **** --- 1,29 ---- + Since 1.5.56 + * Undo the "UAC manifest fix" applied to afs_config.exe. + + * Fixed some additional race conditions in the Rx library + + * Ensure that Freelance allocation of vnodes follow + the AFS convention of odd vnodes are directories + and everything else is an even vnode. + + * Add Freelance logic to mount point and symlink + evaluation functions. + + * Enhance smb_ParseASCIIBlock() so that it can handle + all of the STRING formats defined by the CIFS Technical + Report 1.0. + + * Validate the output of smb_ParseASCIIBlock() in all + callers. Return CM_ERROR_BADSMB if the STRING field + cannot be parsed. CM_ERROR_BADSMB will cause the + contents of the packet to be logged. + + * If multiple SMB Raw Write operations were taking + place at the same time, there could be data corruption + because unique event objects were not generated for + each Netbios receive operation. + Since 1.5.55 * Fix a race in rxi_WriteProc which could result