Add option to request only POSIX groups from AD in idmap_ad

resolves: RHEL-33813

rpminspect.yaml

@@ -5,8 +5,8 @@ badfuncs:
         - /usr/bin/smbtorture
         - /usr/lib*/libndr.so.*
         - /usr/lib*/libsmbconf.so.*
-        - /usr/lib*/samba/libgse-samba4.so
-        - /usr/lib*/samba/libsamba-sockets-samba4.so
+        - /usr/lib*/samba/libgse-private-samba.so
+        - /usr/lib*/samba/libsamba-sockets-private-samba.so
         - /usr/lib*/samba/service/nbtd.so
         - /usr/libexec/ctdb/smnotify
         - /usr/sbin/nmbd

samba.spec

@@ -147,7 +147,7 @@
 %define samba_requires_eq()  %(LC_ALL="C" echo '%*' | xargs -r rpm -q --qf 'Requires: %%{name} = %%{epoch}:%%{version}\\n' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep -v "is not")
 
 %global samba_version 4.19.4
-%global baserelease 3
+%global baserelease 4
 # This should be rc1 or %%nil
 %global pre_release %nil
 
@@ -244,6 +244,12 @@ Source18:       samba-winbind-systemd-sysusers.conf
 Source201:      README.downgrade
 Source202:      samba.abignore
 
+# Backport bug fixes to https://gitlab.com/samba-redhat/samba/-/tree/v4-19-redhat
+# This will give us CI and makes it easy to generate patchsets.
+#
+# Generate the patchset using: git format-patch -l1 --stdout -N > samba-4.19-redhat.patch
+Patch0:        samba-4.19-redhat.patch
+
 Requires(pre): /usr/sbin/groupadd
 
 Requires(pre): %{name}-common = %{samba_depver}
@@ -4473,6 +4479,9 @@ fi
 %endif
 
 %changelog
+* Thu May 02 2024 Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-4
+- resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad
+
 * Thu Jan 18 2024 Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-3
 - resolves: RHEL-19753 - Fix smbget interactive authentication