diff --git a/.gitignore b/.gitignore index c1e928f..f5c29b0 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ -SOURCES/samba-4.18.6.tar.xz +SOURCES/samba-4.20.2.tar.xz SOURCES/samba-pubkey_AA99442FB680B620.gpg diff --git a/.samba.metadata b/.samba.metadata index c0a00fe..4fab5e6 100644 --- a/.samba.metadata +++ b/.samba.metadata @@ -1,2 +1,2 @@ -12b41f2a849cb6c40e9f5b174bb1cd823a060bd7 SOURCES/samba-4.18.6.tar.xz +607bea15c2306b165610ebe3f617f1b29ef7f133 SOURCES/samba-4.20.2.tar.xz 971f563c447eda8d144d6c9e743cd0f0488c0d9e SOURCES/samba-pubkey_AA99442FB680B620.gpg diff --git a/SOURCES/CVE-2023-3961.patch b/SOURCES/CVE-2023-3961.patch deleted file mode 100644 index 0cde519..0000000 --- a/SOURCES/CVE-2023-3961.patch +++ /dev/null @@ -1,45 +0,0 @@ -From ae476e1c28b797fe221172ed1066bf8efa476d8d Mon Sep 17 00:00:00 2001 -From: Jeremy Allison -Date: Tue, 25 Jul 2023 17:41:04 -0700 -Subject: [PATCH] CVE-2023-3961:s3:smbd: Catch any incoming pipe path that - could exit socket_dir. - -For now, SMB_ASSERT() to exit the server. We will remove -this once the test code is in place. - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15422 - -Signed-off-by: Jeremy Allison ---- - source3/rpc_client/local_np.c | 18 ++++++++++++++++++ - 1 file changed, 18 insertions(+) - -diff --git a/source3/rpc_client/local_np.c b/source3/rpc_client/local_np.c -index 0e912d0e35a..dfed7e7beb6 100644 ---- a/source3/rpc_client/local_np.c -+++ b/source3/rpc_client/local_np.c -@@ -542,6 +542,24 @@ struct tevent_req *local_np_connect_send( - return tevent_req_post(req, ev); - } - -+ /* -+ * Ensure we cannot process a path that exits -+ * the socket_dir. -+ */ -+ if (ISDOTDOT(lower_case_pipename) || -+ (strchr(lower_case_pipename, '/')!=NULL)) -+ { -+ DBG_DEBUG("attempt to connect to invalid pipe pathname %s\n", -+ lower_case_pipename); -+ /* -+ * For now, panic the server until we have -+ * the test code in place. -+ */ -+ SMB_ASSERT(false); -+ tevent_req_error(req, ENOENT); -+ return tevent_req_post(req, ev); -+ } -+ - state->socketpath = talloc_asprintf( - state, "%s/np/%s", socket_dir, lower_case_pipename); - if (tevent_req_nomem(state->socketpath, req)) { diff --git a/SOURCES/CVE-2023-4091.patch b/SOURCES/CVE-2023-4091.patch deleted file mode 100644 index 4241a71..0000000 --- a/SOURCES/CVE-2023-4091.patch +++ /dev/null @@ -1,183 +0,0 @@ -From b1fd65694185c26f1e196d84ee8756300e631bd5 Mon Sep 17 00:00:00 2001 -From: Ralph Boehme -Date: Tue, 1 Aug 2023 12:30:00 +0200 -Subject: [PATCH] CVE-2023-4091: smbtorture: test overwrite dispositions on - read-only file - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15439 - -Signed-off-by: Ralph Boehme ---- - selftest/knownfail.d/samba3.smb2.acls | 1 + - source4/torture/smb2/acls.c | 143 ++++++++++++++++++++++++++ - 2 files changed, 144 insertions(+) - create mode 100644 selftest/knownfail.d/samba3.smb2.acls - -diff --git a/selftest/knownfail.d/samba3.smb2.acls b/selftest/knownfail.d/samba3.smb2.acls -new file mode 100644 -index 00000000000..18df260c0e5 ---- /dev/null -+++ b/selftest/knownfail.d/samba3.smb2.acls -@@ -0,0 +1 @@ -+^samba3.smb2.acls.OVERWRITE_READ_ONLY_FILE -diff --git a/source4/torture/smb2/acls.c b/source4/torture/smb2/acls.c -index bbf201bcf4b..53f482c5541 100644 ---- a/source4/torture/smb2/acls.c -+++ b/source4/torture/smb2/acls.c -@@ -2989,6 +2989,148 @@ static bool test_mxac_not_granted(struct torture_context *tctx, - return ret; - } - -+static bool test_overwrite_read_only_file(struct torture_context *tctx, -+ struct smb2_tree *tree) -+{ -+ NTSTATUS status; -+ struct smb2_create c; -+ const char *fname = BASEDIR "\\test_overwrite_read_only_file.txt"; -+ struct smb2_handle handle = {{0}}; -+ union smb_fileinfo q; -+ union smb_setfileinfo set; -+ struct security_descriptor *sd = NULL, *sd_orig = NULL; -+ const char *owner_sid = NULL; -+ int i; -+ bool ret = true; -+ -+ struct tcase { -+ int disposition; -+ const char *disposition_string; -+ NTSTATUS expected_status; -+ } tcases[] = { -+#define TCASE(d, s) { \ -+ .disposition = d, \ -+ .disposition_string = #d, \ -+ .expected_status = s, \ -+ } -+ TCASE(NTCREATEX_DISP_OPEN, NT_STATUS_OK), -+ TCASE(NTCREATEX_DISP_SUPERSEDE, NT_STATUS_ACCESS_DENIED), -+ TCASE(NTCREATEX_DISP_OVERWRITE, NT_STATUS_ACCESS_DENIED), -+ TCASE(NTCREATEX_DISP_OVERWRITE_IF, NT_STATUS_ACCESS_DENIED), -+ }; -+#undef TCASE -+ -+ ret = smb2_util_setup_dir(tctx, tree, BASEDIR); -+ torture_assert_goto(tctx, ret, ret, done, "smb2_util_setup_dir not ok"); -+ -+ c = (struct smb2_create) { -+ .in.desired_access = SEC_STD_READ_CONTROL | -+ SEC_STD_WRITE_DAC | -+ SEC_STD_WRITE_OWNER, -+ .in.file_attributes = FILE_ATTRIBUTE_NORMAL, -+ .in.share_access = NTCREATEX_SHARE_ACCESS_READ | -+ NTCREATEX_SHARE_ACCESS_WRITE, -+ .in.create_disposition = NTCREATEX_DISP_OPEN_IF, -+ .in.impersonation_level = NTCREATEX_IMPERSONATION_ANONYMOUS, -+ .in.fname = fname, -+ }; -+ -+ status = smb2_create(tree, tctx, &c); -+ torture_assert_ntstatus_ok_goto(tctx, status, ret, done, -+ "smb2_create failed\n"); -+ handle = c.out.file.handle; -+ -+ torture_comment(tctx, "get the original sd\n"); -+ -+ ZERO_STRUCT(q); -+ q.query_secdesc.level = RAW_FILEINFO_SEC_DESC; -+ q.query_secdesc.in.file.handle = handle; -+ q.query_secdesc.in.secinfo_flags = SECINFO_DACL | SECINFO_OWNER; -+ -+ status = smb2_getinfo_file(tree, tctx, &q); -+ torture_assert_ntstatus_ok_goto(tctx, status, ret, done, -+ "smb2_getinfo_file failed\n"); -+ sd_orig = q.query_secdesc.out.sd; -+ -+ owner_sid = dom_sid_string(tctx, sd_orig->owner_sid); -+ -+ sd = security_descriptor_dacl_create(tctx, -+ 0, NULL, NULL, -+ owner_sid, -+ SEC_ACE_TYPE_ACCESS_ALLOWED, -+ SEC_FILE_READ_DATA, -+ 0, -+ NULL); -+ -+ ZERO_STRUCT(set); -+ set.set_secdesc.level = RAW_SFILEINFO_SEC_DESC; -+ set.set_secdesc.in.file.handle = handle; -+ set.set_secdesc.in.secinfo_flags = SECINFO_DACL; -+ set.set_secdesc.in.sd = sd; -+ -+ status = smb2_setinfo_file(tree, &set); -+ torture_assert_ntstatus_ok_goto(tctx, status, ret, done, -+ "smb2_setinfo_file failed\n"); -+ -+ smb2_util_close(tree, handle); -+ ZERO_STRUCT(handle); -+ -+ for (i = 0; i < ARRAY_SIZE(tcases); i++) { -+ torture_comment(tctx, "Verify open with %s dispostion\n", -+ tcases[i].disposition_string); -+ -+ c = (struct smb2_create) { -+ .in.create_disposition = tcases[i].disposition, -+ .in.desired_access = SEC_FILE_READ_DATA, -+ .in.file_attributes = FILE_ATTRIBUTE_NORMAL, -+ .in.share_access = NTCREATEX_SHARE_ACCESS_MASK, -+ .in.impersonation_level = NTCREATEX_IMPERSONATION_ANONYMOUS, -+ .in.fname = fname, -+ }; -+ -+ status = smb2_create(tree, tctx, &c); -+ smb2_util_close(tree, c.out.file.handle); -+ torture_assert_ntstatus_equal_goto( -+ tctx, status, tcases[i].expected_status, ret, done, -+ "smb2_create failed\n"); -+ }; -+ -+ torture_comment(tctx, "put back original sd\n"); -+ -+ c = (struct smb2_create) { -+ .in.desired_access = SEC_STD_WRITE_DAC, -+ .in.file_attributes = FILE_ATTRIBUTE_NORMAL, -+ .in.share_access = NTCREATEX_SHARE_ACCESS_MASK, -+ .in.create_disposition = NTCREATEX_DISP_OPEN_IF, -+ .in.impersonation_level = NTCREATEX_IMPERSONATION_ANONYMOUS, -+ .in.fname = fname, -+ }; -+ -+ status = smb2_create(tree, tctx, &c); -+ torture_assert_ntstatus_ok_goto(tctx, status, ret, done, -+ "smb2_create failed\n"); -+ handle = c.out.file.handle; -+ -+ ZERO_STRUCT(set); -+ set.set_secdesc.level = RAW_SFILEINFO_SEC_DESC; -+ set.set_secdesc.in.file.handle = handle; -+ set.set_secdesc.in.secinfo_flags = SECINFO_DACL; -+ set.set_secdesc.in.sd = sd_orig; -+ -+ status = smb2_setinfo_file(tree, &set); -+ torture_assert_ntstatus_ok_goto(tctx, status, ret, done, -+ "smb2_setinfo_file failed\n"); -+ -+ smb2_util_close(tree, handle); -+ ZERO_STRUCT(handle); -+ -+done: -+ smb2_util_close(tree, handle); -+ smb2_util_unlink(tree, fname); -+ smb2_deltree(tree, BASEDIR); -+ return ret; -+} -+ - /* - basic testing of SMB2 ACLs - */ -@@ -3017,6 +3159,7 @@ struct torture_suite *torture_smb2_acls_init(TALLOC_CTX *ctx) - test_deny1); - torture_suite_add_1smb2_test(suite, "MXAC-NOT-GRANTED", - test_mxac_not_granted); -+ torture_suite_add_1smb2_test(suite, "OVERWRITE_READ_ONLY_FILE", test_overwrite_read_only_file); - - suite->description = talloc_strdup(suite, "SMB2-ACLS tests"); - diff --git a/SOURCES/CVE-2023-42669.patch b/SOURCES/CVE-2023-42669.patch deleted file mode 100644 index c9e0d49..0000000 --- a/SOURCES/CVE-2023-42669.patch +++ /dev/null @@ -1,86 +0,0 @@ -From 3cf1beed5df7d8b5d854517de7de322c6a5bc7fa Mon Sep 17 00:00:00 2001 -From: Andrew Bartlett -Date: Tue, 12 Sep 2023 18:59:44 +1200 -Subject: [PATCH] CVE-2023-42669 s4-rpc_server: Disable rpcecho server by - default - -The rpcecho server is useful in development and testing, but should never -have been allowed into production, as it includes the facility to -do a blocking sleep() in the single-threaded rpc worker. - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15474 - -Signed-off-by: Andrew Bartlett ---- - docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml | 2 +- - lib/param/loadparm.c | 2 +- - selftest/target/Samba4.pm | 2 +- - source3/param/loadparm.c | 2 +- - source4/rpc_server/wscript_build | 3 ++- - 5 files changed, 6 insertions(+), 5 deletions(-) - -diff --git a/docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml b/docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml -index 8a217cc7f118..c6642b795fd6 100644 ---- a/docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml -+++ b/docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml -@@ -6,6 +6,6 @@ - Specifies which DCE/RPC endpoint servers should be run. - - --epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver -+epmapper, wkssvc, samr, netlogon, lsarpc, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver - rpcecho - -diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c -index 9a7ae4f95fe8..673b913e6e5a 100644 ---- a/lib/param/loadparm.c -+++ b/lib/param/loadparm.c -@@ -2730,7 +2730,7 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx) - lpcfg_do_global_parameter(lp_ctx, "ntvfs handler", "unixuid default"); - lpcfg_do_global_parameter(lp_ctx, "max connections", "0"); - -- lpcfg_do_global_parameter(lp_ctx, "dcerpc endpoint servers", "epmapper wkssvc rpcecho samr netlogon lsarpc drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver"); -+ lpcfg_do_global_parameter(lp_ctx, "dcerpc endpoint servers", "epmapper wkssvc samr netlogon lsarpc drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver"); - lpcfg_do_global_parameter(lp_ctx, "server services", "s3fs rpc nbt wrepl ldap cldap kdc drepl winbindd ntp_signd kcc dnsupdate dns"); - lpcfg_do_global_parameter(lp_ctx, "kccsrv:samba_kcc", "true"); - /* the winbind method for domain controllers is for both RODC -diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm -index 49e3c174b07e..5f1f1bfffad6 100755 ---- a/selftest/target/Samba4.pm -+++ b/selftest/target/Samba4.pm -@@ -783,7 +783,7 @@ sub provision_raw_step1($$) - wins support = yes - server role = $ctx->{server_role} - server services = +echo $services -- dcerpc endpoint servers = +winreg +srvsvc -+ dcerpc endpoint servers = +winreg +srvsvc +rpcecho - notify:inotify = false - ldb:nosync = true - ldap server require strong auth = yes -diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c -index 1c3644589126..e7f4bbe3995e 100644 ---- a/source3/param/loadparm.c -+++ b/source3/param/loadparm.c -@@ -883,7 +883,7 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals) - - Globals.server_services = str_list_make_v3_const(NULL, "s3fs rpc nbt wrepl ldap cldap kdc drepl winbindd ntp_signd kcc dnsupdate dns", NULL); - -- Globals.dcerpc_endpoint_servers = str_list_make_v3_const(NULL, "epmapper wkssvc rpcecho samr netlogon lsarpc drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver", NULL); -+ Globals.dcerpc_endpoint_servers = str_list_make_v3_const(NULL, "epmapper wkssvc samr netlogon lsarpc drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver", NULL); - - Globals.tls_enabled = true; - Globals.tls_verify_peer = TLS_VERIFY_PEER_AS_STRICT_AS_POSSIBLE; -diff --git a/source4/rpc_server/wscript_build b/source4/rpc_server/wscript_build -index 0e44a3c2baed..31ec4f60c9a6 100644 ---- a/source4/rpc_server/wscript_build -+++ b/source4/rpc_server/wscript_build -@@ -33,7 +33,8 @@ bld.SAMBA_MODULE('dcerpc_rpcecho', - source='echo/rpc_echo.c', - subsystem='dcerpc_server', - init_function='dcerpc_server_rpcecho_init', -- deps='ndr-standard events' -+ deps='ndr-standard events', -+ enabled=bld.CONFIG_GET('ENABLE_SELFTEST') - ) - - diff --git a/SOURCES/nsswitch-add-test-for-pthread_key_delete-missuse.patch b/SOURCES/nsswitch-add-test-for-pthread_key_delete-missuse.patch deleted file mode 100644 index f441e9d..0000000 --- a/SOURCES/nsswitch-add-test-for-pthread_key_delete-missuse.patch +++ /dev/null @@ -1,613 +0,0 @@ -From ced40c5a805dcfb06d5f3d68aa45a0aaa44bfdca Mon Sep 17 00:00:00 2001 -From: Stefan Metzmacher -Date: Fri, 8 Sep 2023 13:57:26 +0200 -Subject: [PATCH 1/5] nsswitch: add test for pthread_key_delete missuse (bug - 15464) - -This is based on https://bugzilla.samba.org/attachment.cgi?id=18081 -written by Krzysztof Piotr Oledzki - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15464 - -Signed-off-by: Stefan Metzmacher -Reviewed-by: Jeremy Allison -(cherry picked from commit 62af25d44e542548d8cdecb061a6001e0071ee76) ---- - nsswitch/b15464-testcase.c | 77 +++++++++++++++++++++++++++ - nsswitch/wscript_build | 5 ++ - selftest/knownfail.d/b15464_testcase | 1 + - source3/selftest/tests.py | 6 +++ - testprogs/blackbox/b15464-testcase.sh | 21 ++++++++ - 5 files changed, 110 insertions(+) - create mode 100644 nsswitch/b15464-testcase.c - create mode 100644 selftest/knownfail.d/b15464_testcase - create mode 100755 testprogs/blackbox/b15464-testcase.sh - -diff --git a/nsswitch/b15464-testcase.c b/nsswitch/b15464-testcase.c -new file mode 100644 -index 000000000000..decb474a81ee ---- /dev/null -+++ b/nsswitch/b15464-testcase.c -@@ -0,0 +1,77 @@ -+#include "replace.h" -+#include "system/wait.h" -+#include "system/threads.h" -+#include -+ -+int main(int argc, const char *argv[]) -+{ -+ pid_t pid; -+ int wstatus; -+ pthread_key_t k1; -+ pthread_key_t k2; -+ pthread_key_t k3; -+ char *val = NULL; -+ const char *nss_winbind = (argc >= 2 ? argv[1] : "bin/plugins/libnss_winbind.so.2"); -+ void *nss_winbind_handle = NULL; -+ union { -+ int (*fn)(void); -+ void *symbol; -+ } nss_winbind_endpwent = { .symbol = NULL, }; -+ -+ /* -+ * load and invoke something simple like -+ * _nss_winbind_endpwent in order to -+ * get the libnss_winbind internal going -+ */ -+ nss_winbind_handle = dlopen(nss_winbind, RTLD_NOW); -+ printf("%d: nss_winbind[%s] nss_winbind_handle[%p]\n", -+ getpid(), nss_winbind, nss_winbind_handle); -+ assert(nss_winbind_handle != NULL); -+ -+ nss_winbind_endpwent.symbol = dlsym(nss_winbind_handle, -+ "_nss_winbind_endpwent"); -+ printf("%d: nss_winbind_handle[%p] _nss_winbind_endpwent[%p]\n", -+ getpid(), nss_winbind_handle, nss_winbind_endpwent.symbol); -+ assert(nss_winbind_endpwent.symbol != NULL); -+ (void)nss_winbind_endpwent.fn(); -+ -+ val = malloc(1); -+ assert(val != NULL); -+ -+ pthread_key_create(&k1, NULL); -+ pthread_setspecific(k1, val); -+ printf("%d: k1=%d\n", getpid(), k1); -+ -+ pid = fork(); -+ if (pid) { -+ free(val); -+ wait(&wstatus); -+ return WEXITSTATUS(wstatus); -+ } -+ -+ pthread_key_create(&k2, NULL); -+ pthread_setspecific(k2, val); -+ -+ printf("%d: Hello after fork, k1=%d, k2=%d\n", getpid(), k1, k2); -+ -+ pid = fork(); -+ -+ if (pid) { -+ free(val); -+ wait(&wstatus); -+ return WEXITSTATUS(wstatus); -+ } -+ -+ pthread_key_create(&k3, NULL); -+ pthread_setspecific(k3, val); -+ -+ printf("%d: Hello after fork2, k1=%d, k2=%d, k3=%d\n", getpid(), k1, k2, k3); -+ -+ if (k1 == k2 || k2 == k3) { -+ printf("%d: FAIL inconsistent keys\n", getpid()); -+ return 1; -+ } -+ -+ printf("%d: OK consistent keys\n", getpid()); -+ return 0; -+} -diff --git a/nsswitch/wscript_build b/nsswitch/wscript_build -index 3247b6c2b7c3..4e62bb4c9461 100644 ---- a/nsswitch/wscript_build -+++ b/nsswitch/wscript_build -@@ -15,6 +15,11 @@ if bld.CONFIG_SET('HAVE_PTHREAD'): - deps='wbclient pthread', - for_selftest=True - ) -+ bld.SAMBA_BINARY('b15464-testcase', -+ source='b15464-testcase.c', -+ deps='replace pthread dl', -+ for_selftest=True -+ ) - - # The nss_wrapper code relies strictly on the linux implementation and - # name, so compile but do not install a copy under this name. -diff --git a/selftest/knownfail.d/b15464_testcase b/selftest/knownfail.d/b15464_testcase -new file mode 100644 -index 000000000000..94dd7db7c2a5 ---- /dev/null -+++ b/selftest/knownfail.d/b15464_testcase -@@ -0,0 +1 @@ -+^b15464_testcase.run.b15464-testcase -diff --git a/source3/selftest/tests.py b/source3/selftest/tests.py -index 0c834ed48b5e..ea17ead3eda7 100755 ---- a/source3/selftest/tests.py -+++ b/source3/selftest/tests.py -@@ -67,6 +67,8 @@ except KeyError: - samba4bindir = bindir() - config_h = os.path.join(samba4bindir, "default/include/config.h") - -+bbdir = os.path.join(srcdir(), "testprogs/blackbox") -+ - # check available features - config_hash = dict() - f = open(config_h, 'r') -@@ -936,6 +938,10 @@ if with_pthreadpool: - [os.path.join(samba3srcdir, - "script/tests/test_libwbclient_threads.sh"), - "$DOMAIN", "$DC_USERNAME"]) -+ plantestsuite("b15464_testcase", "none", -+ [os.path.join(bbdir, "b15464-testcase.sh"), -+ binpath("b15464-testcase"), -+ binpath("plugins/libnss_winbind.so.2")]) - - plantestsuite("samba3.test_nfs4_acl", "none", - [os.path.join(bindir(), "test_nfs4_acls"), -diff --git a/testprogs/blackbox/b15464-testcase.sh b/testprogs/blackbox/b15464-testcase.sh -new file mode 100755 -index 000000000000..b0c88260d4cc ---- /dev/null -+++ b/testprogs/blackbox/b15464-testcase.sh -@@ -0,0 +1,21 @@ -+#!/bin/sh -+# Blackbox wrapper for bug 15464 -+# Copyright (C) 2023 Stefan Metzmacher -+ -+if [ $# -lt 2 ]; then -+ cat < -Date: Thu, 7 Sep 2023 16:02:32 +0200 -Subject: [PATCH 2/5] nsswitch/wb_common.c: fix build without HAVE_PTHREAD - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15464 - -Signed-off-by: Stefan Metzmacher -Reviewed-by: Jeremy Allison -(cherry picked from commit 4faf806412c4408db25448b1f67c09359ec2f81f) ---- - nsswitch/wb_common.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/nsswitch/wb_common.c b/nsswitch/wb_common.c -index d569e761ebe4..c382a44c1209 100644 ---- a/nsswitch/wb_common.c -+++ b/nsswitch/wb_common.c -@@ -104,7 +104,6 @@ static void wb_thread_ctx_initialize(void) - wb_thread_ctx_destructor); - assert(ret == 0); - } --#endif - - static struct winbindd_context *get_wb_thread_ctx(void) - { -@@ -139,6 +138,7 @@ static struct winbindd_context *get_wb_thread_ctx(void) - } - return ctx; - } -+#endif /* HAVE_PTHREAD */ - - static struct winbindd_context *get_wb_global_ctx(void) - { --- -2.34.1 - - -From d1f43cd4cc6aeb2ac9fcaee9aa512012ca92ecb3 Mon Sep 17 00:00:00 2001 -From: Stefan Metzmacher -Date: Fri, 8 Sep 2023 09:53:42 +0200 -Subject: [PATCH 3/5] nsswitch/wb_common.c: winbind_destructor can always use - get_wb_global_ctx() - -The HAVE_PTHREAD logic inside of get_wb_global_ctx() will do all -required magic. - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15464 - -Signed-off-by: Stefan Metzmacher -Reviewed-by: Jeremy Allison -(cherry picked from commit 836823e5047d0eb18e66707386ba03b812adfaf8) ---- - nsswitch/wb_common.c | 6 +----- - 1 file changed, 1 insertion(+), 5 deletions(-) - -diff --git a/nsswitch/wb_common.c b/nsswitch/wb_common.c -index c382a44c1209..d56e48d9bdb8 100644 ---- a/nsswitch/wb_common.c -+++ b/nsswitch/wb_common.c -@@ -246,14 +246,10 @@ static void winbind_destructor(void) - return; - } - --#ifdef HAVE_PTHREAD_H -- ctx = (struct winbindd_context *)pthread_getspecific(wb_global_ctx.key); -+ ctx = get_wb_global_ctx(); - if (ctx == NULL) { - return; - } --#else -- ctx = get_wb_global_ctx(); --#endif - - winbind_close_sock(ctx); - } --- -2.34.1 - - -From 6e29ea5b9efe5cf166cc9d633c1dc4eb8f192736 Mon Sep 17 00:00:00 2001 -From: Stefan Metzmacher -Date: Fri, 8 Sep 2023 09:56:47 +0200 -Subject: [PATCH 4/5] nsswitch/wb_common.c: don't operate on a stale - wb_global_ctx.key - -If nss_winbind is loaded into a process that uses fork multiple times -without any further calls into nss_winbind, wb_atfork_child handler -was using a wb_global_ctx.key that was no longer registered in the -pthread library, so we operated on a slot that was potentially -reused by other libraries or the main application. Which is likely -to cause memory corruption. - -So we better don't call pthread_key_delete() in wb_atfork_child(). - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15464 - -Reported-by: Krzysztof Piotr Oledzki -Tested-by: Krzysztof Piotr Oledzki -Signed-off-by: Stefan Metzmacher -Reviewed-by: Jeremy Allison -(cherry picked from commit 91b30a7261e6455d3a4f31728c23e4849e3945b9) ---- - nsswitch/wb_common.c | 5 ----- - selftest/knownfail.d/b15464_testcase | 1 - - 2 files changed, 6 deletions(-) - delete mode 100644 selftest/knownfail.d/b15464_testcase - -diff --git a/nsswitch/wb_common.c b/nsswitch/wb_common.c -index d56e48d9bdb8..38f9f334016b 100644 ---- a/nsswitch/wb_common.c -+++ b/nsswitch/wb_common.c -@@ -76,11 +76,6 @@ static void wb_atfork_child(void) - - winbind_close_sock(ctx); - free(ctx); -- -- ret = pthread_key_delete(wb_global_ctx.key); -- assert(ret == 0); -- -- wb_global_ctx.control = (pthread_once_t)PTHREAD_ONCE_INIT; - } - - static void wb_thread_ctx_destructor(void *p) -diff --git a/selftest/knownfail.d/b15464_testcase b/selftest/knownfail.d/b15464_testcase -deleted file mode 100644 -index 94dd7db7c2a5..000000000000 ---- a/selftest/knownfail.d/b15464_testcase -+++ /dev/null -@@ -1 +0,0 @@ --^b15464_testcase.run.b15464-testcase --- -2.34.1 - - -From 61ca2c66e0a3c837f2c542b8d9321a8d8cd03382 Mon Sep 17 00:00:00 2001 -From: Stefan Metzmacher -Date: Thu, 7 Sep 2023 15:59:59 +0200 -Subject: [PATCH 5/5] nsswitch/wb_common.c: fix socket fd and memory leaks of - global state - -When we are called in wb_atfork_child() or winbind_destructor(), -wb_thread_ctx_destructor() is not called for the global state -of the current nor any other thread, which means we would -leak the related memory and socket fds. - -Now we maintain a global list protected by a global mutex. -We traverse the list and close all socket fds, which are no -longer used (winbind_destructor) or no longer valid in the -current process (wb_atfork_child), in addition we 'autofree' -the ones, which are only visible internally as global (per thread) -context. - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15464 - -Tested-by: Krzysztof Piotr Oledzki -Signed-off-by: Stefan Metzmacher -Reviewed-by: Jeremy Allison - -Autobuild-User(master): Stefan Metzmacher -Autobuild-Date(master): Thu Sep 14 18:53:07 UTC 2023 on atb-devel-224 - -(cherry picked from commit 4af3faace481d23869b64485b791bdd43d8972c5) ---- - nsswitch/wb_common.c | 143 ++++++++++++++++++++++++++++++++++--------- - 1 file changed, 113 insertions(+), 30 deletions(-) - -diff --git a/nsswitch/wb_common.c b/nsswitch/wb_common.c -index 38f9f334016b..b7f84435a4ee 100644 ---- a/nsswitch/wb_common.c -+++ b/nsswitch/wb_common.c -@@ -26,6 +26,7 @@ - #include "replace.h" - #include "system/select.h" - #include "winbind_client.h" -+#include "lib/util/dlinklist.h" - #include - - #ifdef HAVE_PTHREAD_H -@@ -37,67 +38,112 @@ static __thread char client_name[32]; - /* Global context */ - - struct winbindd_context { -+ struct winbindd_context *prev, *next; - int winbindd_fd; /* winbind file descriptor */ - bool is_privileged; /* using the privileged socket? */ - pid_t our_pid; /* calling process pid */ -+ bool autofree; /* this is a thread global context */ - }; - - static struct wb_global_ctx { -- bool initialized; - #ifdef HAVE_PTHREAD - pthread_once_t control; - pthread_key_t key; -+ bool key_initialized; -+#ifdef PTHREAD_ERRORCHECK_MUTEX_INITIALIZER_NP -+#define WB_GLOBAL_MUTEX_INITIALIZER PTHREAD_ERRORCHECK_MUTEX_INITIALIZER_NP - #else -- bool dummy; -+#define WB_GLOBAL_MUTEX_INITIALIZER PTHREAD_MUTEX_INITIALIZER - #endif -+#define WB_GLOBAL_LIST_LOCK do { \ -+ int __pret = pthread_mutex_lock(&wb_global_ctx.list_mutex); \ -+ assert(__pret == 0); \ -+} while(0) -+#define WB_GLOBAL_LIST_UNLOCK do { \ -+ int __pret = pthread_mutex_unlock(&wb_global_ctx.list_mutex); \ -+ assert(__pret == 0); \ -+} while(0) -+ pthread_mutex_t list_mutex; -+#else /* => not HAVE_PTHREAD */ -+#define WB_GLOBAL_LIST_LOCK do { } while(0) -+#define WB_GLOBAL_LIST_UNLOCK do { } while(0) -+#endif /* not HAVE_PTHREAD */ -+ struct winbindd_context *list; - } wb_global_ctx = { - #ifdef HAVE_PTHREAD - .control = PTHREAD_ONCE_INIT, -+ .list_mutex = WB_GLOBAL_MUTEX_INITIALIZER, - #endif -+ .list = NULL, - }; - - static void winbind_close_sock(struct winbindd_context *ctx); -+static void winbind_ctx_free_locked(struct winbindd_context *ctx); -+static void winbind_cleanup_list(void); - - #ifdef HAVE_PTHREAD - static void wb_thread_ctx_initialize(void); - -+static void wb_atfork_prepare(void) -+{ -+ WB_GLOBAL_LIST_LOCK; -+} -+ -+static void wb_atfork_parent(void) -+{ -+ WB_GLOBAL_LIST_UNLOCK; -+} -+ - static void wb_atfork_child(void) - { -- struct winbindd_context *ctx = NULL; -- int ret; -+ wb_global_ctx.list_mutex = (pthread_mutex_t)WB_GLOBAL_MUTEX_INITIALIZER; - -- ctx = (struct winbindd_context *)pthread_getspecific(wb_global_ctx.key); -- if (ctx == NULL) { -- return; -- } -+ if (wb_global_ctx.key_initialized) { -+ int ret; - -- ret = pthread_setspecific(wb_global_ctx.key, NULL); -- assert(ret == 0); -+ /* -+ * After a fork the child still believes -+ * it is the same thread as in the parent. -+ * So pthread_getspecific() would return the -+ * value of the thread that called fork(). -+ * -+ * But we don't want that behavior, so -+ * we just clear the reference and let -+ * winbind_cleanup_list() below 'autofree' -+ * the parent threads global context. -+ */ -+ ret = pthread_setspecific(wb_global_ctx.key, NULL); -+ assert(ret == 0); -+ } - -- winbind_close_sock(ctx); -- free(ctx); -+ /* -+ * But we need to close/cleanup the global state -+ * of the parents threads. -+ */ -+ winbind_cleanup_list(); - } - - static void wb_thread_ctx_destructor(void *p) - { - struct winbindd_context *ctx = (struct winbindd_context *)p; - -- winbind_close_sock(ctx); -- free(ctx); -+ winbindd_ctx_free(ctx); - } - - static void wb_thread_ctx_initialize(void) - { - int ret; - -- ret = pthread_atfork(NULL, -- NULL, -+ ret = pthread_atfork(wb_atfork_prepare, -+ wb_atfork_parent, - wb_atfork_child); - assert(ret == 0); - - ret = pthread_key_create(&wb_global_ctx.key, - wb_thread_ctx_destructor); - assert(ret == 0); -+ -+ wb_global_ctx.key_initialized = true; - } - - static struct winbindd_context *get_wb_thread_ctx(void) -@@ -123,9 +169,14 @@ static struct winbindd_context *get_wb_thread_ctx(void) - *ctx = (struct winbindd_context) { - .winbindd_fd = -1, - .is_privileged = false, -- .our_pid = 0 -+ .our_pid = 0, -+ .autofree = true, - }; - -+ WB_GLOBAL_LIST_LOCK; -+ DLIST_ADD_END(wb_global_ctx.list, ctx); -+ WB_GLOBAL_LIST_UNLOCK; -+ - ret = pthread_setspecific(wb_global_ctx.key, ctx); - if (ret != 0) { - free(ctx); -@@ -142,7 +193,8 @@ static struct winbindd_context *get_wb_global_ctx(void) - static struct winbindd_context _ctx = { - .winbindd_fd = -1, - .is_privileged = false, -- .our_pid = 0 -+ .our_pid = 0, -+ .autofree = false, - }; - #endif - -@@ -150,9 +202,11 @@ static struct winbindd_context *get_wb_global_ctx(void) - ctx = get_wb_thread_ctx(); - #else - ctx = &_ctx; -+ if (ctx->prev == NULL && ctx->next == NULL) { -+ DLIST_ADD_END(wb_global_ctx.list, ctx); -+ } - #endif - -- wb_global_ctx.initialized = true; - return ctx; - } - -@@ -226,6 +280,30 @@ static void winbind_close_sock(struct winbindd_context *ctx) - } - } - -+static void winbind_ctx_free_locked(struct winbindd_context *ctx) -+{ -+ winbind_close_sock(ctx); -+ DLIST_REMOVE(wb_global_ctx.list, ctx); -+ free(ctx); -+} -+ -+static void winbind_cleanup_list(void) -+{ -+ struct winbindd_context *ctx = NULL, *next = NULL; -+ -+ WB_GLOBAL_LIST_LOCK; -+ for (ctx = wb_global_ctx.list; ctx != NULL; ctx = next) { -+ next = ctx->next; -+ -+ if (ctx->autofree) { -+ winbind_ctx_free_locked(ctx); -+ } else { -+ winbind_close_sock(ctx); -+ } -+ } -+ WB_GLOBAL_LIST_UNLOCK; -+} -+ - /* Destructor for global context to ensure fd is closed */ - - #ifdef HAVE_DESTRUCTOR_ATTRIBUTE -@@ -235,18 +313,18 @@ __attribute__((destructor)) - #endif - static void winbind_destructor(void) - { -- struct winbindd_context *ctx; -- -- if (!wb_global_ctx.initialized) { -- return; -+#ifdef HAVE_PTHREAD -+ if (wb_global_ctx.key_initialized) { -+ int ret; -+ ret = pthread_key_delete(wb_global_ctx.key); -+ assert(ret == 0); -+ wb_global_ctx.key_initialized = false; - } - -- ctx = get_wb_global_ctx(); -- if (ctx == NULL) { -- return; -- } -+ wb_global_ctx.control = (pthread_once_t)PTHREAD_ONCE_INIT; -+#endif /* HAVE_PTHREAD */ - -- winbind_close_sock(ctx); -+ winbind_cleanup_list(); - } - - #define CONNECT_TIMEOUT 30 -@@ -928,11 +1006,16 @@ struct winbindd_context *winbindd_ctx_create(void) - - ctx->winbindd_fd = -1; - -+ WB_GLOBAL_LIST_LOCK; -+ DLIST_ADD_END(wb_global_ctx.list, ctx); -+ WB_GLOBAL_LIST_UNLOCK; -+ - return ctx; - } - - void winbindd_ctx_free(struct winbindd_context *ctx) - { -- winbind_close_sock(ctx); -- free(ctx); -+ WB_GLOBAL_LIST_LOCK; -+ winbind_ctx_free_locked(ctx); -+ WB_GLOBAL_LIST_UNLOCK; - } --- -2.34.1 diff --git a/SOURCES/redhat-4.20.2.patch b/SOURCES/redhat-4.20.2.patch new file mode 100644 index 0000000..6d9fa60 --- /dev/null +++ b/SOURCES/redhat-4.20.2.patch @@ -0,0 +1,102 @@ +From dddbbec2cb10b05a6ec3b4f1fcc877d60a44080a Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Pavel=20Filipensk=C3=BD?= +Date: Thu, 4 Jul 2024 11:08:03 +0200 +Subject: [PATCH 1/2] .gitlab-ci-main.yml: Add safe.directory '*' +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +This is to fix the error when pushing to personal gitlab repo: + +2024-07-04 08:16:05,460 Running: 'git clone --recursive --shared /builds/pfilipen/samba /builds/samba-testbase/master' in '/builds/pfilipen/samba' +Cloning into '/builds/samba-testbase/master'... +fatal: detected dubious ownership in repository at '/builds/pfilipen/samba/.git' +To add an exception for this directory, call: + git config --global --add safe.directory /builds/pfilipen/samba/.git +fatal: Could not read from remote repository. + +Instead of adding more and more explicit repositories +we should just allow any, we're in an isolated environment... + +BUG: https://bugzilla.samba.org/show_bug.cgi?id=15660 + +Pair-Programmed-With: Stefan Metzmacher +Signed-off-by: Pavel Filipenský +Signed-off-by: Stefan Metzmacher +Reviewed-by: Andreas Schneider + +Autobuild-User(master): Stefan Metzmacher +Autobuild-Date(master): Wed Jul 10 10:35:00 UTC 2024 on atb-devel-224 + +(cherry picked from commit 3a21b7d9a4e7e9814d0be8c0ebf72b9821a5dc36) +--- + .gitlab-ci-main.yml | 3 +-- + 1 file changed, 1 insertion(+), 2 deletions(-) + +diff --git a/.gitlab-ci-main.yml b/.gitlab-ci-main.yml +index face2103327..08865ca2c42 100644 +--- a/.gitlab-ci-main.yml ++++ b/.gitlab-ci-main.yml +@@ -146,8 +146,7 @@ include: + - ccache -z -M 500M + - ccache -s + # We are already running .gitlab-ci directives from this repo, remove additional checks that break our CI +- - git config --global --add safe.directory `pwd` +- - git config --global --add safe.directory /builds/samba-team/devel/samba/.git ++ - git config --global --add safe.directory '*' + after_script: + - mount + - df -h +-- +2.45.2 + + +From 1c69964d34d2cf66532b23ffde76a839a65b0db2 Mon Sep 17 00:00:00 2001 +From: Andreas Schneider +Date: Fri, 12 Jul 2024 14:18:26 +0200 +Subject: [PATCH 2/2] s3:printing: Allow to run samba-bgqd as a standalone + systemd service + +BUG: https://bugzilla.samba.org/show_bug.cgi?id=15683 + +Signed-off-by: Andreas Schneider +Reviewed-by: Alexander Bokovoy +(cherry picked from commit 0a532378322661b23b3393eb2ebde29402a16e62) + +Autobuild-User(v4-20-test): Jule Anger +Autobuild-Date(v4-20-test): Tue Jul 23 08:56:24 UTC 2024 on atb-devel-224 + +(cherry picked from commit 4cf9af9186d7829f11bd07c7d6e526a51dcf0d61) +--- + source3/printing/samba-bgqd.c | 8 +++++++- + 1 file changed, 7 insertions(+), 1 deletion(-) + +diff --git a/source3/printing/samba-bgqd.c b/source3/printing/samba-bgqd.c +index 59ed0cc40db..9560fcf9e35 100644 +--- a/source3/printing/samba-bgqd.c ++++ b/source3/printing/samba-bgqd.c +@@ -253,7 +253,9 @@ int main(int argc, const char *argv[]) + log_stdout = (debug_get_log_type() == DEBUG_STDOUT); + + /* main process will notify systemd */ +- daemon_sd_notifications(false); ++ if (ready_signal_fd != -1 || watch_fd != -1) { ++ daemon_sd_notifications(false); ++ } + + if (!cmdline_daemon_cfg->fork) { + daemon_status(progname, "Starting process ... "); +@@ -325,6 +327,10 @@ int main(int argc, const char *argv[]) + goto done; + } + ++ if (!cmdline_daemon_cfg->fork) { ++ daemon_ready(progname); ++ } ++ + if (ready_signal_fd != -1) { + pid_t pid = getpid(); + ssize_t written; +-- +2.45.2 + diff --git a/SOURCES/samba-4.18.6.tar.asc b/SOURCES/samba-4.18.6.tar.asc deleted file mode 100644 index 7a910c3..0000000 --- a/SOURCES/samba-4.18.6.tar.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEEgfXigyvSVFoYl7cTqplEL7aAtiAFAmTc/5EACgkQqplEL7aA -tiB+4RAAkcRhO1/ZC7sXgqAqTZY05On8g2GLeuBh2Q+u7QIyjcDLuJWzp0TkrbMn -LBGtFAyCxM1JbW/K1UNafeQcf3UKzY1nIPtUpqVjN7qMxt0BDZ6MsXGbB/qhyGMZ -YnsZ8of/8NOUKx5KbrSeN5TqjICWTVRKi7KPcBrD51sTSt5unXYrolyJpKoPjYYU -lQS8cnh/shfvvFX4fYf9XtFS2OcQqCTFrLeajb6DU7Ep6ZBZa9r3m5Gk3ZvhBu9r -qowmQDqbNfo++wIkOaehD6tQsWcY2XvfBCFLqtSnF1SraN0jpdYr08dbcRGyuhFd -DS9+4BwCCML0mip7aaP6NHZpN+LvyYkAKPuKo8mW8pxe3i8ctxcTyN6SfmZA6RlE -bcmRQSkBD/e0jjBX5nR0zsaT01bgE1bBvbro0ZKHpR7/k6WeV+k6jDmqqXnYj3uB -61fCtf41w1b2pMhty70niga2gxaHrSqu9gqSl2wk/uMhwtdntqrJtaWIChWM0CRs -b6pfbjEZM2NDhsLe3idvY9Hl1hlKrMtoLJTu7fksTDVJzWPfqOCyIOc1DkxbCqlG -XB9fbre57DWIpRvNK4pu108LiGbavK2rLC6wlcjshP3/9BA3c3HO/JPQGtDAn1UE -JVQlYT1Fzzp9RU8U5Khz9D7pB3k6K19ZIo3q5xTA/V5O6axB5WM= -=GnJM ------END PGP SIGNATURE----- diff --git a/SOURCES/samba-4.20.2.tar.asc b/SOURCES/samba-4.20.2.tar.asc new file mode 100644 index 0000000..4f87006 --- /dev/null +++ b/SOURCES/samba-4.20.2.tar.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEgfXigyvSVFoYl7cTqplEL7aAtiAFAmZy684ACgkQqplEL7aA +tiDXDw/+KleJ11LLq5ZlXMlj11niRCETErY8cuoZ9VX04lfRwRBnplpKKLSQuFit +5HeY5ED65DhbpGzPfLPx7xOw4wyFc/bXhHPTgF3Ybj8TKkEcaMmkpD3V8FPa4NAt +vNZ3alLQLP//kgRXnqeV9pfa4slx17G6WeBLbpd8b4SbgPMgokJt7hL3nWfBrFE9 +p6B+TKZcwfoCn9ufz1UxMpBFtpSK0yF0S7CQcdv3JrBNIYhULuXbnAnLCHcH1RqW +xreoxZPnMx+SrYb0iHyKbkMsDujCqBKm9CyS13Yt9DjI49lv0pBwQFnaqtR4Xm/D +BU2XIWLLInUecxtUOBtsa046h55fLQPgkb+WYob++iA9r91y4JAZIiAxdVrNLsxR +BiFUxkL7EPtyptT84xNjpQ3CTZuw8tlHu/sJ1/XHRUFMtRGjiMqJp7ULsVQDfwET +7T+HHrVHNstddb9A6WfM8qSItoMfGUlYyzTQ2d3OmrbGRnB0qf+zg9DI+vXv5Itx +M23we8ljSadCnc/kqz3Z6gefI538WWDnbXIljRqDxuzwaSXhMd4heG+xIAAO0Of5 +ziyCVQ/n8gnyXQmC82Xlebc3mYki8UoyYWdbVNJZAOEo/LuBql1OkjOhkhMcBDmr +qvD6f+0+MA4nydmVhI/q/pmo7nAUD3SAxmRKrVTwjpjcAnZ4IGw= +=CGiK +-----END PGP SIGNATURE----- diff --git a/SOURCES/samba-winbind-systemd-sysusers.conf b/SOURCES/samba-winbind-systemd-sysusers.conf new file mode 100644 index 0000000..7ccc216 --- /dev/null +++ b/SOURCES/samba-winbind-systemd-sysusers.conf @@ -0,0 +1,2 @@ +#Type Name ID +g wbpriv 88 diff --git a/SPECS/samba.spec b/SPECS/samba.spec index b0941fb..f3ab9fa 100644 --- a/SPECS/samba.spec +++ b/SPECS/samba.spec @@ -57,7 +57,7 @@ # ppc64le excluded pending resolution of https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104172 #%%ifarch aarch64 ppc64le s390x x86_64 -%ifarch aarch64 s390x x86_64 +%ifarch aarch64 s390x x86_64 riscv64 %bcond_without vfs_cephfs %bcond_without ceph_mutex %else @@ -80,7 +80,7 @@ %if 0%{?fedora} -%ifarch aarch64 ppc64le s390x x86_64 +%ifarch aarch64 ppc64le s390x x86_64 riscv64 %bcond_without vfs_glusterfs %else %bcond_with vfs_glusterfs @@ -109,7 +109,7 @@ # Build vfs_io_uring module by default on 64bit Fedora %if 0%{?fedora} || 0%{?rhel} >= 8 -%ifarch aarch64 ppc64le s390x x86_64 +%ifarch aarch64 ppc64le s390x x86_64 riscv64 %bcond_without vfs_io_uring %else %bcond_with vfs_io_uring @@ -121,9 +121,12 @@ #endif fedora || rhel >= 8 %endif -# Build the ctdb-pcp-pmda package by default on Fedora +# Build the ctdb-pcp-pmda package by default on Fedora, except for i686 where +# pcp is no longer supported %if 0%{?fedora} +%ifnarch i686 %bcond_without pcp_pmda +%endif %else %bcond_with pcp_pmda %endif @@ -135,10 +138,16 @@ %bcond_with etcd_mutex %endif +%if 0%{?fedora} || 0%{?rhel} >= 9 +%bcond_without gpupdate +%else +%bcond_with gpupdate +%endif + %define samba_requires_eq() %(LC_ALL="C" echo '%*' | xargs -r rpm -q --qf 'Requires: %%{name} = %%{epoch}:%%{version}\\n' | sed -e 's/ (none):/ /' -e 's/ 0:/ /' | grep -v "is not") -%global samba_version 4.18.6 -%global baserelease 102 +%global samba_version 4.20.2 +%global baserelease 2 # This should be rc1 or %%nil %global pre_release %nil @@ -155,7 +164,7 @@ %global libdcerpc_so_version 0 %global libndr_krb5pac_so_version 0 %global libndr_nbt_so_version 0 -%global libndr_so_version 3 +%global libndr_so_version 4 %global libndr_standard_so_version 0 %global libnetapi_so_version 1 %global libsamba_credentials_so_version 1 @@ -171,10 +180,10 @@ %global libsmbclient_so_version 0 %global libwbclient_so_version 0 -%global talloc_version 2.4.0 -%global tdb_version 1.4.8 -%global tevent_version 0.14.1 -%global ldb_version 2.7.2 +%global talloc_version 2.4.2 +%global tdb_version 1.4.10 +%global tevent_version 0.16.1 +%global ldb_version 2.9.1 %global required_mit_krb5 1.20.1 @@ -188,12 +197,6 @@ # https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/buildflags.md %undefine _strict_symbol_defs_build -%global libwbc_alternatives_version 0.16 -%global libwbc_alternatives_suffix %nil -%if 0%{?__isa_bits} == 64 -%global libwbc_alternatives_suffix -64 -%endif - %global _systemd_extra "Environment=KRB5CCNAME=FILE:/run/samba/krb5cc_samba" # Make a copy of this variable to prevent repeated evaluation of the @@ -202,7 +205,7 @@ Name: samba Version: %{samba_version} -Release: %{samba_release}%{?dist}.alma.1 +Release: %{samba_release}%{?dist} %if 0%{?fedora} Epoch: 2 @@ -230,21 +233,20 @@ Source14: samba.pamd Source15: usershares.conf.vendor Source16: samba-systemd-sysusers.conf Source17: samba-usershares-systemd-sysusers.conf +Source18: samba-winbind-systemd-sysusers.conf Source201: README.downgrade Source202: samba.abignore -# Patches were taken from upstream: -# https://github.com/samba-team/samba/commit/ae476e1c28b797fe221172ed1066bf8efa476d8d -Patch0: CVE-2023-3961.patch -# https://github.com/samba-team/samba/commit/b1fd65694185c26f1e196d84ee8756300e631bd5 -Patch1: CVE-2023-4091.patch -# https://github.com/samba-team/samba/commit/3cf1beed5df7d8b5d854517de7de322c6a5bc7fa -Patch2: CVE-2023-42669.patch -# https://github.com/samba-team/samba/commit/62af25d44e542548d8cdecb061a6001e0071ee76 -Patch3: nsswitch-add-test-for-pthread_key_delete-missuse.patch +# Patch0 is created using: +# +# git clone git@gitlab.com:samba-redhat/samba.git +# cd samba +# git checkout v4-20-redhat +# git format-patch --stdout -l1 --no-renames -N > redhat-4.20.2.patch +# where N is number of commits -Requires(pre): /usr/sbin/groupadd +Patch0: redhat-4.20.2.patch Requires(pre): %{name}-common = %{samba_depver} Requires: %{name}-common = %{samba_depver} @@ -340,9 +342,11 @@ BuildRequires: zlib-devel >= 1.2.3 BuildRequires: pkgconfig(libsystemd) +%ifnarch i686 riscv64 %if 0%{?fedora} >= 37 BuildRequires: mold %endif +%endif %if %{with vfs_glusterfs} BuildRequires: glusterfs-api-devel >= 3.4.0.16 @@ -367,6 +371,10 @@ BuildRequires: librados-devel BuildRequires: python3-etcd %endif +%if %{with gpupdate} +BuildRequires: cepces-certmonger >= 0.3.8 +%endif + # pidl requirements BuildRequires: perl(ExtUtils::MakeMaker) BuildRequires: perl(FindBin) @@ -731,19 +739,21 @@ Samba VFS module for GlusterFS integration. %endif ### GPUPDATE -%if %{with dc} +%if %{with gpupdate} %package gpupdate Summary: Samba GPO support for clients -Requires: cepces +Requires: cepces-certmonger Requires: certmonger Requires: %{name}-ldb-ldap-modules = %{samba_depver} Requires: python3-%{name} = %{samba_depver} +# samba-tool needs python3-samba-dc also on non-dc build +Requires: python3-%{name}-dc = %{samba_depver} %description gpupdate This package provides the samba-gpupdate tool to apply Group Policy Objects (GPO) on Samba clients. -# /with dc +#endif with gpupdate %endif ### KRB5-PRINTING @@ -908,6 +918,8 @@ Summary: Samba Python libraries for Samba AD Requires: %{name}-client-libs = %{samba_depver} Requires: %{name}-dc-libs = %{samba_depver} Requires: python3-%{name} = %{samba_depver} +# for ms_forest_updates_markdown.py and ms_schema_markdown.py +Requires: python3-markdown %description -n python3-samba-dc The python3-%{name}-dc package contains the Python libraries needed by programs @@ -1219,10 +1231,8 @@ xzcat %{SOURCE0} | gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} - %endif %autosetup -n samba-%{version}%{pre_release} -p1 -# Ensure we rely on GnuTLS and do not build any other crypto code shipping with -# the sources. -rm -rf third_party/{aesni-intel,heimdal} -rm -f lib/crypto/{aes,rijndael}*.c +# Make sure we do not build with heimdal code +rm -rfv third_party/heimdal %build %if %{with includelibs} @@ -1269,8 +1279,17 @@ rm -f lib/crypto/{aes,rijndael}*.c # TODO: resolve underlinked python modules export python_LDFLAGS="$(echo %{__global_ldflags} | sed -e 's/-Wl,-z,defs//g')" -# Use the gold linker -export LDFLAGS="%{__global_ldflags} -fuse-ld=gold" +# Use the mold linker if possible +export python_LDFLAGS="$(echo %{__global_ldflags} | sed -e 's/-Wl,-z,defs//g')" + +%ifnarch i686 riscv64 +%if 0%{?fedora} >= 37 +export LDFLAGS="%{__global_ldflags} -fuse-ld=mold" +export python_LDFLAGS="$(echo ${LDFLAGS} | sed -e 's/-Wl,-z,defs//g')" +#endif fedora >= 37 +%endif +#endif narch i686 +%endif # Add support for mock ccache plugin %if %{with ccache} @@ -1400,6 +1419,7 @@ echo "d /run/ctdb 755 root root" > %{buildroot}%{_tmpfilesdir}/ctdb.conf install -d -m 0755 %{buildroot}%{_sysusersdir} install -m 0644 %{SOURCE16} %{buildroot}%{_sysusersdir}/samba.conf install -m 0644 %{SOURCE17} %{buildroot}%{_sysusersdir}/samba-usershares.conf +install -m 0644 %{SOURCE18} %{buildroot}%{_sysusersdir}/samba-winbind.conf install -d -m 0755 %{buildroot}%{_sysconfdir}/sysconfig install -m 0644 packaging/systemd/samba.sysconfig %{buildroot}%{_sysconfdir}/sysconfig/samba @@ -1427,14 +1447,17 @@ touch %{buildroot}%{_libdir}/krb5/plugins/libkrb5/winbind_krb5_locator.so for i in \ %{_mandir}/man8/samba.8 \ %{_mandir}/man8/samba_downgrade_db.8 \ - %{_mandir}/man8/samba-gpupdate.8 \ %{_unitdir}/samba.service \ - %{_sbindir}/samba-gpupdate \ ; do rm -f %{buildroot}$i done %endif +%if %{without gpupdate} +rm -f %{buildroot}%{_sbindir}/samba-gpupdate +rm -f %{buildroot}%{_mandir}/man8/samba-gpupdate.8* +%endif + %if %{without vfs_glusterfs} rm -f %{buildroot}%{_mandir}/man8/vfs_glusterfs.8* %endif @@ -1499,23 +1522,23 @@ export WINBINDD_DONT_LOG_STDOUT=1 %endif %post +%systemd_post samba-bgqd.service %systemd_post smb.service %systemd_post nmb.service %preun +%systemd_preun samba-bgqd.service %systemd_preun smb.service %systemd_preun nmb.service %postun +%systemd_postun_with_restart samba-bgqd.service %systemd_postun_with_restart smb.service %systemd_postun_with_restart nmb.service %pre common -%if 0%{?fedora} || 0%{?rhel} > 8 +# This creates the group 'printadmin' %sysusers_create_compat %{SOURCE16} -%else -getent group printadmin >/dev/null || groupadd -r printadmin || : -%endif %post common %{?ldconfig} @@ -1574,9 +1597,9 @@ fi %if %{with libwbclient} %pre -n libwbclient if [ $1 -gt 1 ] ; then - rm -rf %{_libdir}/samba/wbclient/ - rm -f /etc/alternatives/libwbclient.so* - rm -f /var/lib/alternatives/libwbclient.so* + rm -rf %{_libdir}/samba/wbclient/ 2>/dev/null + rm -f /etc/alternatives/libwbclient.so* 2>/dev/null + rm -f /var/lib/alternatives/libwbclient.so* 2>/dev/null fi %{?ldconfig} #endif {with libwbclient} @@ -1585,14 +1608,12 @@ fi %ldconfig_scriptlets test %pre usershares -%if 0%{?fedora} || 0%{?rhel} > 8 +# This creates the group 'usershares' %sysusers_create_compat %{SOURCE17} -%else -getent group usershares >/dev/null || groupadd -r usershares || : -%endif %pre winbind -/usr/sbin/groupadd -g 88 wbpriv >/dev/null 2>&1 || : +# This creates the group 'wbpriv' +%sysusers_create_compat %{SOURCE18} %post winbind %systemd_post winbind.service @@ -1636,8 +1657,6 @@ fi ### SAMBA %files -%license COPYING -%doc README.md WHATSNEW.txt %doc examples/autofs examples/LDAP examples/misc %doc examples/printer-accounting examples/printing %doc packaging/README.downgrade @@ -1647,7 +1666,7 @@ fi %{_sbindir}/smbd %if %{with dc} || %{with testsuite} # This is only used by vfs_dfs_samba4 -%{_libdir}/samba/libdfs-server-ad-samba4.so +%{_libdir}/samba/libdfs-server-ad-private-samba.so %endif %dir %{_libdir}/samba/auth %{_libdir}/samba/auth/unix.so @@ -1709,6 +1728,7 @@ fi %{_unitdir}/nmb.service %{_unitdir}/smb.service +%{_unitdir}/samba-bgqd.service %dir %{_sysconfdir}/openldap/schema %config %{_sysconfdir}/openldap/schema/samba.schema %config(noreplace) %{_sysconfdir}/pam.d/samba @@ -1785,6 +1805,7 @@ fi %{_bindir}/smbspool %{_bindir}/smbtar %{_bindir}/smbtree +%{_bindir}/wspsearch %dir %{_libexecdir}/samba %ghost %{_libexecdir}/samba/cups_backend_smb %{_mandir}/man1/dbwrap_tool.1* @@ -1803,9 +1824,9 @@ fi %{_mandir}/man1/smbclient.1* %{_mandir}/man1/smbcquotas.1* %{_mandir}/man1/smbget.1* -%{_mandir}/man5/smbgetrc.5* %{_mandir}/man1/smbtar.1* %{_mandir}/man1/smbtree.1* +%{_mandir}/man1/wspsearch.1* %{_mandir}/man7/traffic_learner.7.* %{_mandir}/man7/traffic_replay.7.* %{_mandir}/man8/cifsdd.8.* @@ -1857,86 +1878,86 @@ fi %{_libdir}/libtevent-util.so.%{libtevent_util_so_version}* %dir %{_libdir}/samba -%{_libdir}/samba/libCHARSET3-samba4.so -%{_libdir}/samba/libMESSAGING-SEND-samba4.so -%{_libdir}/samba/libMESSAGING-samba4.so -%{_libdir}/samba/libaddns-samba4.so -%{_libdir}/samba/libads-samba4.so -%{_libdir}/samba/libasn1util-samba4.so -%{_libdir}/samba/libauth-samba4.so -%{_libdir}/samba/libauthkrb5-samba4.so -%{_libdir}/samba/libcli-cldap-samba4.so -%{_libdir}/samba/libcli-ldap-common-samba4.so -%{_libdir}/samba/libcli-ldap-samba4.so -%{_libdir}/samba/libcli-nbt-samba4.so -%{_libdir}/samba/libcli-smb-common-samba4.so -%{_libdir}/samba/libcli-spoolss-samba4.so -%{_libdir}/samba/libcliauth-samba4.so -%{_libdir}/samba/libclidns-samba4.so -%{_libdir}/samba/libcluster-samba4.so -%{_libdir}/samba/libcmdline-contexts-samba4.so -%{_libdir}/samba/libcommon-auth-samba4.so -%{_libdir}/samba/libctdb-event-client-samba4.so -%{_libdir}/samba/libdbwrap-samba4.so -%{_libdir}/samba/libdcerpc-pkt-auth-samba4.so -%{_libdir}/samba/libdcerpc-samba-samba4.so -%{_libdir}/samba/libevents-samba4.so -%{_libdir}/samba/libflag-mapping-samba4.so -%{_libdir}/samba/libgenrand-samba4.so -%{_libdir}/samba/libgensec-samba4.so -%{_libdir}/samba/libgpext-samba4.so -%{_libdir}/samba/libgpo-samba4.so -%{_libdir}/samba/libgse-samba4.so -%{_libdir}/samba/libhttp-samba4.so -%{_libdir}/samba/libinterfaces-samba4.so -%{_libdir}/samba/libiov-buf-samba4.so -%{_libdir}/samba/libkrb5samba-samba4.so -%{_libdir}/samba/libldbsamba-samba4.so -%{_libdir}/samba/liblibcli-lsa3-samba4.so -%{_libdir}/samba/liblibcli-netlogon3-samba4.so -%{_libdir}/samba/liblibsmb-samba4.so -%{_libdir}/samba/libmessages-dgm-samba4.so -%{_libdir}/samba/libmessages-util-samba4.so -%{_libdir}/samba/libmscat-samba4.so -%{_libdir}/samba/libmsghdr-samba4.so -%{_libdir}/samba/libmsrpc3-samba4.so -%{_libdir}/samba/libndr-samba-samba4.so -%{_libdir}/samba/libndr-samba4.so -%{_libdir}/samba/libnet-keytab-samba4.so -%{_libdir}/samba/libnetif-samba4.so -%{_libdir}/samba/libnpa-tstream-samba4.so -%{_libdir}/samba/libposix-eadb-samba4.so -%{_libdir}/samba/libprinter-driver-samba4.so -%{_libdir}/samba/libprinting-migrate-samba4.so -%{_libdir}/samba/libreplace-samba4.so -%{_libdir}/samba/libregistry-samba4.so -%{_libdir}/samba/libsamba-cluster-support-samba4.so -%{_libdir}/samba/libsamba-debug-samba4.so -%{_libdir}/samba/libsamba-modules-samba4.so -%{_libdir}/samba/libsamba-security-samba4.so -%{_libdir}/samba/libsamba-sockets-samba4.so -%{_libdir}/samba/libsamba3-util-samba4.so -%{_libdir}/samba/libsamdb-common-samba4.so -%{_libdir}/samba/libsecrets3-samba4.so -%{_libdir}/samba/libserver-id-db-samba4.so -%{_libdir}/samba/libserver-role-samba4.so -%{_libdir}/samba/libsmb-transport-samba4.so -%{_libdir}/samba/libsmbclient-raw-samba4.so -%{_libdir}/samba/libsmbd-base-samba4.so -%{_libdir}/samba/libsmbd-shim-samba4.so -%{_libdir}/samba/libsmbldaphelper-samba4.so -%{_libdir}/samba/libstable-sort-samba4.so -%{_libdir}/samba/libsys-rw-samba4.so -%{_libdir}/samba/libsocket-blocking-samba4.so -%{_libdir}/samba/libtalloc-report-printf-samba4.so -%{_libdir}/samba/libtalloc-report-samba4.so -%{_libdir}/samba/libtdb-wrap-samba4.so -%{_libdir}/samba/libtime-basic-samba4.so -%{_libdir}/samba/libtorture-samba4.so -%{_libdir}/samba/libtrusts-util-samba4.so -%{_libdir}/samba/libutil-reg-samba4.so -%{_libdir}/samba/libutil-setid-samba4.so -%{_libdir}/samba/libutil-tdb-samba4.so +%{_libdir}/samba/libCHARSET3-private-samba.so +%{_libdir}/samba/libMESSAGING-SEND-private-samba.so +%{_libdir}/samba/libMESSAGING-private-samba.so +%{_libdir}/samba/libaddns-private-samba.so +%{_libdir}/samba/libads-private-samba.so +%{_libdir}/samba/libasn1util-private-samba.so +%{_libdir}/samba/libauth-private-samba.so +%{_libdir}/samba/libauthkrb5-private-samba.so +%{_libdir}/samba/libcli-cldap-private-samba.so +%{_libdir}/samba/libcli-ldap-common-private-samba.so +%{_libdir}/samba/libcli-ldap-private-samba.so +%{_libdir}/samba/libcli-nbt-private-samba.so +%{_libdir}/samba/libcli-smb-common-private-samba.so +%{_libdir}/samba/libcli-spoolss-private-samba.so +%{_libdir}/samba/libcliauth-private-samba.so +%{_libdir}/samba/libclidns-private-samba.so +%{_libdir}/samba/libcluster-private-samba.so +%{_libdir}/samba/libcmdline-contexts-private-samba.so +%{_libdir}/samba/libcommon-auth-private-samba.so +%{_libdir}/samba/libctdb-event-client-private-samba.so +%{_libdir}/samba/libdbwrap-private-samba.so +%{_libdir}/samba/libdcerpc-pkt-auth-private-samba.so +%{_libdir}/samba/libdcerpc-samba-private-samba.so +%{_libdir}/samba/libevents-private-samba.so +%{_libdir}/samba/libflag-mapping-private-samba.so +%{_libdir}/samba/libgenrand-private-samba.so +%{_libdir}/samba/libgensec-private-samba.so +%{_libdir}/samba/libgpext-private-samba.so +%{_libdir}/samba/libgpo-private-samba.so +%{_libdir}/samba/libgse-private-samba.so +%{_libdir}/samba/libhttp-private-samba.so +%{_libdir}/samba/libinterfaces-private-samba.so +%{_libdir}/samba/libiov-buf-private-samba.so +%{_libdir}/samba/libkrb5samba-private-samba.so +%{_libdir}/samba/libldbsamba-private-samba.so +%{_libdir}/samba/liblibcli-lsa3-private-samba.so +%{_libdir}/samba/liblibcli-netlogon3-private-samba.so +%{_libdir}/samba/liblibsmb-private-samba.so +%{_libdir}/samba/libmessages-dgm-private-samba.so +%{_libdir}/samba/libmessages-util-private-samba.so +%{_libdir}/samba/libmscat-private-samba.so +%{_libdir}/samba/libmsghdr-private-samba.so +%{_libdir}/samba/libmsrpc3-private-samba.so +%{_libdir}/samba/libndr-samba-private-samba.so +%{_libdir}/samba/libndr-samba4-private-samba.so +%{_libdir}/samba/libnet-keytab-private-samba.so +%{_libdir}/samba/libnetif-private-samba.so +%{_libdir}/samba/libnpa-tstream-private-samba.so +%{_libdir}/samba/libposix-eadb-private-samba.so +%{_libdir}/samba/libprinter-driver-private-samba.so +%{_libdir}/samba/libprinting-migrate-private-samba.so +%{_libdir}/samba/libreplace-private-samba.so +%{_libdir}/samba/libregistry-private-samba.so +%{_libdir}/samba/libsamba-cluster-support-private-samba.so +%{_libdir}/samba/libsamba-debug-private-samba.so +%{_libdir}/samba/libsamba-modules-private-samba.so +%{_libdir}/samba/libsamba-security-private-samba.so +%{_libdir}/samba/libsamba-sockets-private-samba.so +%{_libdir}/samba/libsamba3-util-private-samba.so +%{_libdir}/samba/libsamdb-common-private-samba.so +%{_libdir}/samba/libsecrets3-private-samba.so +%{_libdir}/samba/libserver-id-db-private-samba.so +%{_libdir}/samba/libserver-role-private-samba.so +%{_libdir}/samba/libsmb-transport-private-samba.so +%{_libdir}/samba/libsmbclient-raw-private-samba.so +%{_libdir}/samba/libsmbd-base-private-samba.so +%{_libdir}/samba/libsmbd-shim-private-samba.so +%{_libdir}/samba/libsmbldaphelper-private-samba.so +%{_libdir}/samba/libstable-sort-private-samba.so +%{_libdir}/samba/libsys-rw-private-samba.so +%{_libdir}/samba/libsocket-blocking-private-samba.so +%{_libdir}/samba/libtalloc-report-printf-private-samba.so +%{_libdir}/samba/libtalloc-report-private-samba.so +%{_libdir}/samba/libtdb-wrap-private-samba.so +%{_libdir}/samba/libtime-basic-private-samba.so +%{_libdir}/samba/libtorture-private-samba.so +%{_libdir}/samba/libtrusts-util-private-samba.so +%{_libdir}/samba/libutil-reg-private-samba.so +%{_libdir}/samba/libutil-setid-private-samba.so +%{_libdir}/samba/libutil-tdb-private-samba.so %if %{without libwbclient} %{_libdir}/samba/libwbclient.so.* @@ -1951,9 +1972,9 @@ fi %if %{with includelibs} %{_libdir}/samba/libldb-*.so -%{_libdir}/samba/libtalloc-samba4.so -%{_libdir}/samba/libtdb-samba4.so -%{_libdir}/samba/libtevent-samba4.so +%{_libdir}/samba/libtalloc-private-samba.so +%{_libdir}/samba/libtdb-private-samba.so +%{_libdir}/samba/libtevent-private-samba.so %{_libdir}/samba/ldb/asq.so %{_libdir}/samba/ldb/ldb.so @@ -1972,6 +1993,8 @@ fi ### COMMON %files common +%doc README.md WHATSNEW.txt +%license COPYING %{_tmpfilesdir}/samba.conf %{_sysusersdir}/samba.conf %dir %{_sysconfdir}/logrotate.d/ @@ -1996,7 +2019,7 @@ fi ### COMMON-LIBS %files common-libs # common libraries -%{_libdir}/samba/libcmdline-samba4.so +%{_libdir}/samba/libcmdline-private-samba.so %dir %{_libdir}/samba/ldb @@ -2010,10 +2033,12 @@ fi %{_bindir}/net %{_bindir}/pdbedit %{_bindir}/profiles +%{_bindir}/samba-log-parser %{_bindir}/smbcontrol %{_bindir}/smbpasswd %{_bindir}/testparm %{_mandir}/man1/profiles.1* +%{_mandir}/man1/samba-log-parser.1* %{_mandir}/man1/smbcontrol.1* %{_mandir}/man1/testparm.1* %{_mandir}/man8/net.8* @@ -2034,9 +2059,12 @@ fi %{_libexecdir}/samba/rpcd_fsrvp %{_libexecdir}/samba/rpcd_lsad %{_libexecdir}/samba/rpcd_mdssvc +%if %{with testsuite} %{_libexecdir}/samba/rpcd_rpcecho +%endif %{_libexecdir}/samba/rpcd_spoolss %{_libexecdir}/samba/rpcd_winreg +%{_libexecdir}/samba/rpcd_witness %{_mandir}/man8/samba-dcerpcd.8* ### DC @@ -2122,16 +2150,16 @@ fi %endif ### DC-LIBS %files dc-libs -%{_libdir}/samba/libauth4-samba4.so +%{_libdir}/samba/libauth4-private-samba.so %if %{with dc} || %{with testsuite} -%{_libdir}/samba/libdb-glue-samba4.so -%{_libdir}/samba/libpac-samba4.so -%{_libdir}/samba/libprocess-model-samba4.so -%{_libdir}/samba/libservice-samba4.so +%{_libdir}/samba/libdb-glue-private-samba.so +%{_libdir}/samba/libpac-private-samba.so +%{_libdir}/samba/libprocess-model-private-samba.so +%{_libdir}/samba/libservice-private-samba.so %if %{with testsuite} -%{_libdir}/samba/libntvfs-samba4.so +%{_libdir}/samba/libntvfs-private-samba.so %endif %dir %{_libdir}/samba/process_model @@ -2157,9 +2185,11 @@ fi %endif %{_libdir}/libdcerpc-server.so.* -%{_libdir}/samba/libdsdb-module-samba4.so -%{_libdir}/samba/libdsdb-garbage-collect-tombstones-samba4.so -%{_libdir}/samba/libscavenge-dns-records-samba4.so +%{_libdir}/samba/libad-claims-private-samba.so +%{_libdir}/samba/libauthn-policy-util-private-samba.so +%{_libdir}/samba/libdsdb-module-private-samba.so +%{_libdir}/samba/libdsdb-garbage-collect-tombstones-private-samba.so +%{_libdir}/samba/libscavenge-dns-records-private-samba.so ### DC-BIND %files dc-bind-dlz @@ -2233,6 +2263,7 @@ fi %{_includedir}/samba-4.0/samba/version.h %{_includedir}/samba-4.0/share.h %{_includedir}/samba-4.0/smb2_lease_struct.h +%{_includedir}/samba-4.0/smb3posix.h %{_includedir}/samba-4.0/smbconf.h %{_includedir}/samba-4.0/smb_ldap.h %{_includedir}/samba-4.0/smbldap.h @@ -2325,10 +2356,11 @@ fi %endif ### GPUPDATE -%if %{with dc} +%if %{with gpupdate} %files gpupdate %{_mandir}/man8/samba-gpupdate.8* %{_sbindir}/samba-gpupdate +#endif with gpupdate %endif ### KRB5-PRINTING @@ -2345,16 +2377,16 @@ fi %files libs %{_libdir}/libdcerpc-samr.so.* -%{_libdir}/samba/libLIBWBCLIENT-OLD-samba4.so -%{_libdir}/samba/libauth-unix-token-samba4.so -%{_libdir}/samba/libdcerpc-samba4.so -%{_libdir}/samba/libdnsserver-common-samba4.so -%{_libdir}/samba/libshares-samba4.so -%{_libdir}/samba/libsmbpasswdparser-samba4.so -%{_libdir}/samba/libxattr-tdb-samba4.so -%{_libdir}/samba/libREG-FULL-samba4.so -%{_libdir}/samba/libRPC-SERVER-LOOP-samba4.so -%{_libdir}/samba/libRPC-WORKER-samba4.so +%{_libdir}/samba/libLIBWBCLIENT-OLD-private-samba.so +%{_libdir}/samba/libauth-unix-token-private-samba.so +%{_libdir}/samba/libdcerpc-samba4-private-samba.so +%{_libdir}/samba/libdnsserver-common-private-samba.so +%{_libdir}/samba/libshares-private-samba.so +%{_libdir}/samba/libsmbpasswdparser-private-samba.so +%{_libdir}/samba/libxattr-tdb-private-samba.so +%{_libdir}/samba/libREG-FULL-private-samba.so +%{_libdir}/samba/libRPC-SERVER-LOOP-private-samba.so +%{_libdir}/samba/libRPC-WORKER-private-samba.so ### LIBNETAPI %files -n libnetapi @@ -2452,7 +2484,9 @@ fi %{python3_sitearch}/samba/__pycache__/descriptor.*.pyc %{python3_sitearch}/samba/__pycache__/dnsresolver.*.pyc %{python3_sitearch}/samba/__pycache__/drs_utils.*.pyc +%{python3_sitearch}/samba/__pycache__/functional_level.*.pyc %{python3_sitearch}/samba/__pycache__/getopt.*.pyc +%{python3_sitearch}/samba/__pycache__/gkdi.*.pyc %{python3_sitearch}/samba/__pycache__/graph.*.pyc %{python3_sitearch}/samba/__pycache__/hostconfig.*.pyc %{python3_sitearch}/samba/__pycache__/idmap.*.pyc @@ -2463,6 +2497,8 @@ fi %{python3_sitearch}/samba/__pycache__/ms_schema.*.pyc %{python3_sitearch}/samba/__pycache__/ndr.*.pyc %{python3_sitearch}/samba/__pycache__/ntacls.*.pyc +%{python3_sitearch}/samba/__pycache__/nt_time.*.pyc +%{python3_sitearch}/samba/__pycache__/policies.*.pyc %{python3_sitearch}/samba/__pycache__/safe_tarfile.*.pyc %{python3_sitearch}/samba/__pycache__/sd_utils.*.pyc %{python3_sitearch}/samba/__pycache__/sites.*.pyc @@ -2490,6 +2526,7 @@ fi %{python3_sitearch}/samba/dcerpc/auth.*.so %{python3_sitearch}/samba/dcerpc/base.*.so %{python3_sitearch}/samba/dcerpc/claims.*.so +%{python3_sitearch}/samba/dcerpc/conditional_ace.*.so %{python3_sitearch}/samba/dcerpc/dcerpc.*.so %{python3_sitearch}/samba/dcerpc/dfs.*.so %{python3_sitearch}/samba/dcerpc/dns.*.so @@ -2498,6 +2535,8 @@ fi %{python3_sitearch}/samba/dcerpc/drsuapi.*.so %{python3_sitearch}/samba/dcerpc/echo.*.so %{python3_sitearch}/samba/dcerpc/epmapper.*.so +%{python3_sitearch}/samba/dcerpc/gkdi.*.so +%{python3_sitearch}/samba/dcerpc/gmsa.*.so %{python3_sitearch}/samba/dcerpc/idmap.*.so %{python3_sitearch}/samba/dcerpc/initshutdown.*.so %{python3_sitearch}/samba/dcerpc/irpc.*.so @@ -2516,6 +2555,8 @@ fi %{python3_sitearch}/samba/dcerpc/security.*.so %{python3_sitearch}/samba/dcerpc/server_id.*.so %{python3_sitearch}/samba/dcerpc/smb_acl.*.so +%{python3_sitearch}/samba/dcerpc/smb3posix.*.so +%{python3_sitearch}/samba/dcerpc/smbXsrv.*.so %{python3_sitearch}/samba/dcerpc/spoolss.*.so %{python3_sitearch}/samba/dcerpc/srvsvc.*.so %{python3_sitearch}/samba/dcerpc/svcctl.*.so @@ -2532,8 +2573,10 @@ fi %{python3_sitearch}/samba/drs_utils.py %{python3_sitearch}/samba/dsdb.*.so %{python3_sitearch}/samba/dsdb_dns.*.so +%{python3_sitearch}/samba/functional_level.py %{python3_sitearch}/samba/gensec.*.so %{python3_sitearch}/samba/getopt.py +%{python3_sitearch}/samba/gkdi.py %{python3_sitearch}/samba/graph.py %{python3_sitearch}/samba/hostconfig.py %{python3_sitearch}/samba/idmap.py @@ -2554,10 +2597,13 @@ fi %{python3_sitearch}/samba/emulate/traffic_packets.py %dir %{python3_sitearch}/samba/gp %dir %{python3_sitearch}/samba/gp/__pycache__ +%{python3_sitearch}/samba/gp/__init__.py +%{python3_sitearch}/samba/gp/__pycache__/__init__.*.pyc %{python3_sitearch}/samba/gp/__pycache__/gpclass.*.pyc %{python3_sitearch}/samba/gp/__pycache__/gp_centrify_crontab_ext.*.pyc %{python3_sitearch}/samba/gp/__pycache__/gp_centrify_sudoers_ext.*.pyc %{python3_sitearch}/samba/gp/__pycache__/gp_cert_auto_enroll_ext.*.pyc +%{python3_sitearch}/samba/gp/__pycache__/gp_drive_maps_ext.*.pyc %{python3_sitearch}/samba/gp/__pycache__/gp_chromium_ext.*.pyc %{python3_sitearch}/samba/gp/__pycache__/gp_ext_loader.*.pyc %{python3_sitearch}/samba/gp/__pycache__/gp_firefox_ext.*.pyc @@ -2583,6 +2629,7 @@ fi %{python3_sitearch}/samba/gp/gp_centrify_crontab_ext.py %{python3_sitearch}/samba/gp/gp_centrify_sudoers_ext.py %{python3_sitearch}/samba/gp/gp_cert_auto_enroll_ext.py +%{python3_sitearch}/samba/gp/gp_drive_maps_ext.py %{python3_sitearch}/samba/gp/gp_chromium_ext.py %{python3_sitearch}/samba/gp/gp_ext_loader.py %{python3_sitearch}/samba/gp/gp_firefox_ext.py @@ -2617,6 +2664,7 @@ fi %{python3_sitearch}/samba/gp_parse/gp_inf.py %{python3_sitearch}/samba/gp_parse/gp_ini.py %{python3_sitearch}/samba/gp_parse/gp_pol.py +%{python3_sitearch}/samba/hresult.*.so %{python3_sitearch}/samba/logger.py %{python3_sitearch}/samba/mdb_util.py %{python3_sitearch}/samba/ms_display_specifiers.py @@ -2632,12 +2680,12 @@ fi %{python3_sitearch}/samba/netcmd/__pycache__/dbcheck.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/delegation.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/dns.*.pyc -%{python3_sitearch}/samba/netcmd/__pycache__/domain.*.pyc -%{python3_sitearch}/samba/netcmd/__pycache__/domain_backup.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/drs.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/dsacl.*.pyc +%{python3_sitearch}/samba/netcmd/__pycache__/encoders.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/forest.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/fsmo.*.pyc +%{python3_sitearch}/samba/netcmd/__pycache__/gpcommon.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/gpo.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/group.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/ldapcmp.*.pyc @@ -2648,24 +2696,111 @@ fi %{python3_sitearch}/samba/netcmd/__pycache__/processes.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/pso.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/rodc.*.pyc +%{python3_sitearch}/samba/netcmd/__pycache__/shell.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/schema.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/sites.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/spn.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/testparm.*.pyc -%{python3_sitearch}/samba/netcmd/__pycache__/user.*.pyc +%{python3_sitearch}/samba/netcmd/__pycache__/validators.*.pyc %{python3_sitearch}/samba/netcmd/__pycache__/visualize.*.pyc %{python3_sitearch}/samba/netcmd/common.py %{python3_sitearch}/samba/netcmd/computer.py %{python3_sitearch}/samba/netcmd/contact.py %{python3_sitearch}/samba/netcmd/dbcheck.py %{python3_sitearch}/samba/netcmd/delegation.py +%dir %{python3_sitearch}/samba/netcmd/domain +%{python3_sitearch}/samba/netcmd/domain/__init__.py +%dir %{python3_sitearch}/samba/netcmd/domain/__pycache__ +%{python3_sitearch}/samba/netcmd/domain/__pycache__/__init__.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/backup.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/classicupgrade.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/common.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/dcpromo.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/demote.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/functional_prep.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/info.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/join.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/keytab.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/leave.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/level.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/passwordsettings.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/provision.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/samba3upgrade.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/schemaupgrade.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/tombstones.*.pyc +%{python3_sitearch}/samba/netcmd/domain/__pycache__/trust.*.pyc +%dir %{python3_sitearch}/samba/netcmd/domain/auth +%{python3_sitearch}/samba/netcmd/domain/auth/__init__.py +%dir %{python3_sitearch}/samba/netcmd/domain/auth/__pycache__ +%{python3_sitearch}/samba/netcmd/domain/auth/__pycache__/__init__.*.pyc +%{python3_sitearch}/samba/netcmd/domain/auth/__pycache__/policy.*.pyc +%{python3_sitearch}/samba/netcmd/domain/auth/__pycache__/silo.*.pyc +%{python3_sitearch}/samba/netcmd/domain/auth/__pycache__/silo_member.*.pyc +%{python3_sitearch}/samba/netcmd/domain/auth/policy.py +%{python3_sitearch}/samba/netcmd/domain/auth/silo.py +%{python3_sitearch}/samba/netcmd/domain/auth/silo_member.py +%{python3_sitearch}/samba/netcmd/domain/backup.py +%dir %{python3_sitearch}/samba/netcmd/domain/claim +%{python3_sitearch}/samba/netcmd/domain/claim/__init__.py +%dir %{python3_sitearch}/samba/netcmd/domain/claim/__pycache__ +%{python3_sitearch}/samba/netcmd/domain/claim/__pycache__/__init__.*.pyc +%{python3_sitearch}/samba/netcmd/domain/claim/__pycache__/claim_type.*.pyc +%{python3_sitearch}/samba/netcmd/domain/claim/__pycache__/value_type.*.pyc +%{python3_sitearch}/samba/netcmd/domain/claim/claim_type.py +%{python3_sitearch}/samba/netcmd/domain/claim/value_type.py +%{python3_sitearch}/samba/netcmd/domain/classicupgrade.py +%{python3_sitearch}/samba/netcmd/domain/common.py +%{python3_sitearch}/samba/netcmd/domain/dcpromo.py +%{python3_sitearch}/samba/netcmd/domain/demote.py +%{python3_sitearch}/samba/netcmd/domain/functional_prep.py +%{python3_sitearch}/samba/netcmd/domain/info.py +%{python3_sitearch}/samba/netcmd/domain/join.py +%{python3_sitearch}/samba/netcmd/domain/keytab.py +%{python3_sitearch}/samba/netcmd/domain/leave.py +%{python3_sitearch}/samba/netcmd/domain/level.py +%dir %{python3_sitearch}/samba/netcmd/domain/models +%{python3_sitearch}/samba/netcmd/domain/models/__init__.py +%dir %{python3_sitearch}/samba/netcmd/domain/models/__pycache__ +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/__init__.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/auth_policy.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/auth_silo.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/claim_type.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/exceptions.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/fields.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/group.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/model.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/query.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/schema.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/site.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/subnet.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/user.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/__pycache__/value_type.*.pyc +%{python3_sitearch}/samba/netcmd/domain/models/auth_policy.py +%{python3_sitearch}/samba/netcmd/domain/models/auth_silo.py +%{python3_sitearch}/samba/netcmd/domain/models/claim_type.py +%{python3_sitearch}/samba/netcmd/domain/models/exceptions.py +%{python3_sitearch}/samba/netcmd/domain/models/fields.py +%{python3_sitearch}/samba/netcmd/domain/models/group.py +%{python3_sitearch}/samba/netcmd/domain/models/model.py +%{python3_sitearch}/samba/netcmd/domain/models/query.py +%{python3_sitearch}/samba/netcmd/domain/models/schema.py +%{python3_sitearch}/samba/netcmd/domain/models/site.py +%{python3_sitearch}/samba/netcmd/domain/models/subnet.py +%{python3_sitearch}/samba/netcmd/domain/models/user.py +%{python3_sitearch}/samba/netcmd/domain/models/value_type.py +%{python3_sitearch}/samba/netcmd/domain/passwordsettings.py +%{python3_sitearch}/samba/netcmd/domain/provision.py +%{python3_sitearch}/samba/netcmd/domain/samba3upgrade.py +%{python3_sitearch}/samba/netcmd/domain/schemaupgrade.py +%{python3_sitearch}/samba/netcmd/domain/tombstones.py +%{python3_sitearch}/samba/netcmd/domain/trust.py %{python3_sitearch}/samba/netcmd/dns.py -%{python3_sitearch}/samba/netcmd/domain.py -%{python3_sitearch}/samba/netcmd/domain_backup.py %{python3_sitearch}/samba/netcmd/drs.py %{python3_sitearch}/samba/netcmd/dsacl.py +%{python3_sitearch}/samba/netcmd/encoders.py %{python3_sitearch}/samba/netcmd/forest.py %{python3_sitearch}/samba/netcmd/fsmo.py +%{python3_sitearch}/samba/netcmd/gpcommon.py %{python3_sitearch}/samba/netcmd/gpo.py %{python3_sitearch}/samba/netcmd/group.py %{python3_sitearch}/samba/netcmd/ldapcmp.py @@ -2677,13 +2812,74 @@ fi %{python3_sitearch}/samba/netcmd/pso.py %{python3_sitearch}/samba/netcmd/rodc.py %{python3_sitearch}/samba/netcmd/schema.py +%{python3_sitearch}/samba/netcmd/shell.py %{python3_sitearch}/samba/netcmd/sites.py %{python3_sitearch}/samba/netcmd/spn.py %{python3_sitearch}/samba/netcmd/testparm.py -%{python3_sitearch}/samba/netcmd/user.py +%dir %{python3_sitearch}/samba/netcmd/user +%{python3_sitearch}/samba/netcmd/user/__init__.py +%{python3_sitearch}/samba/netcmd/user/add.py +%{python3_sitearch}/samba/netcmd/user/add_unix_attrs.py +%dir %{python3_sitearch}/samba/netcmd/user/auth +%{python3_sitearch}/samba/netcmd/user/auth/__init__.py +%{python3_sitearch}/samba/netcmd/user/auth/policy.py +%dir %{python3_sitearch}/samba/netcmd/user/auth/__pycache__ +%{python3_sitearch}/samba/netcmd/user/auth/__pycache__/__init__.*.pyc +%{python3_sitearch}/samba/netcmd/user/auth/__pycache__/policy.*.pyc +%{python3_sitearch}/samba/netcmd/user/auth/__pycache__/silo.*.pyc +%{python3_sitearch}/samba/netcmd/user/auth/silo.py +%{python3_sitearch}/samba/netcmd/user/delete.py +%{python3_sitearch}/samba/netcmd/user/disable.py +%{python3_sitearch}/samba/netcmd/user/edit.py +%{python3_sitearch}/samba/netcmd/user/enable.py +%{python3_sitearch}/samba/netcmd/user/getgroups.py +%{python3_sitearch}/samba/netcmd/user/list.py +%{python3_sitearch}/samba/netcmd/user/move.py +%{python3_sitearch}/samba/netcmd/user/password.py +%dir %{python3_sitearch}/samba/netcmd/user/__pycache__ +%{python3_sitearch}/samba/netcmd/user/__pycache__/__init__.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/add.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/add_unix_attrs.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/delete.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/disable.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/edit.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/enable.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/getgroups.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/list.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/move.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/password.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/rename.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/sensitive.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/setexpiry.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/setpassword.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/setprimarygroup.*.pyc +%{python3_sitearch}/samba/netcmd/user/__pycache__/unlock.*.pyc +%dir %{python3_sitearch}/samba/netcmd/user/readpasswords +%{python3_sitearch}/samba/netcmd/user/readpasswords/common.py +%{python3_sitearch}/samba/netcmd/user/readpasswords/get_kerberos_ticket.py +%{python3_sitearch}/samba/netcmd/user/readpasswords/getpassword.py +%{python3_sitearch}/samba/netcmd/user/readpasswords/__init__.py +%dir %{python3_sitearch}/samba/netcmd/user/readpasswords/__pycache__ +%{python3_sitearch}/samba/netcmd/user/readpasswords/__pycache__/__init__.*.pyc +%{python3_sitearch}/samba/netcmd/user/readpasswords/__pycache__/common.*.pyc +%{python3_sitearch}/samba/netcmd/user/readpasswords/__pycache__/get_kerberos_ticket.*.pyc +%{python3_sitearch}/samba/netcmd/user/readpasswords/__pycache__/getpassword.*.pyc +%{python3_sitearch}/samba/netcmd/user/readpasswords/__pycache__/show.*.pyc +%{python3_sitearch}/samba/netcmd/user/readpasswords/__pycache__/syncpasswords.*.pyc +%{python3_sitearch}/samba/netcmd/user/readpasswords/show.py +%{python3_sitearch}/samba/netcmd/user/readpasswords/syncpasswords.py +%{python3_sitearch}/samba/netcmd/user/rename.py +%{python3_sitearch}/samba/netcmd/user/sensitive.py +%{python3_sitearch}/samba/netcmd/user/setexpiry.py +%{python3_sitearch}/samba/netcmd/user/setpassword.py +%{python3_sitearch}/samba/netcmd/user/setprimarygroup.py +%{python3_sitearch}/samba/netcmd/user/unlock.py +%{python3_sitearch}/samba/netcmd/validators.py %{python3_sitearch}/samba/netcmd/visualize.py %{python3_sitearch}/samba/ntacls.py +%{python3_sitearch}/samba/nt_time.py %{python3_sitearch}/samba/param.*.so +%{python3_sitearch}/samba/policies.py %{python3_sitearch}/samba/policy.*.so %{python3_sitearch}/samba/registry.*.so %{python3_sitearch}/samba/reparse_symlink.*.so @@ -2823,6 +3019,9 @@ fi %{python3_sitearch}/samba/tests/__pycache__/common.*.pyc %{python3_sitearch}/samba/tests/__pycache__/complex_expressions.*.pyc %{python3_sitearch}/samba/tests/__pycache__/compression.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/conditional_ace_assembler.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/conditional_ace_bytes.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/conditional_ace_claims.*.pyc %{python3_sitearch}/samba/tests/__pycache__/core.*.pyc %{python3_sitearch}/samba/tests/__pycache__/credentials.*.pyc %{python3_sitearch}/samba/tests/__pycache__/cred_opt.*.pyc @@ -2847,6 +3046,7 @@ fi %{python3_sitearch}/samba/tests/__pycache__/gensec.*.pyc %{python3_sitearch}/samba/tests/__pycache__/get_opt.*.pyc %{python3_sitearch}/samba/tests/__pycache__/getdcname.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/gkdi.*.pyc %{python3_sitearch}/samba/tests/__pycache__/glue.*.pyc %{python3_sitearch}/samba/tests/__pycache__/gpo.*.pyc %{python3_sitearch}/samba/tests/__pycache__/gpo_member.*.pyc @@ -2860,13 +3060,13 @@ fi %{python3_sitearch}/samba/tests/__pycache__/ldap_referrals.*.pyc %{python3_sitearch}/samba/tests/__pycache__/ldap_spn.*.pyc %{python3_sitearch}/samba/tests/__pycache__/ldap_upn_sam_account.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/ldap_whoami.*.pyc %{python3_sitearch}/samba/tests/__pycache__/loadparm.*.pyc %{python3_sitearch}/samba/tests/__pycache__/logfiles.*.pyc %{python3_sitearch}/samba/tests/__pycache__/libsmb.*.pyc %{python3_sitearch}/samba/tests/__pycache__/libsmb-basic.*.pyc %{python3_sitearch}/samba/tests/__pycache__/lsa_string.*.pyc %{python3_sitearch}/samba/tests/__pycache__/messaging.*.pyc -%{python3_sitearch}/samba/tests/__pycache__/ndr.*.pyc %{python3_sitearch}/samba/tests/__pycache__/netbios.*.pyc %{python3_sitearch}/samba/tests/__pycache__/netcmd.*.pyc %{python3_sitearch}/samba/tests/__pycache__/net_join_no_spnego.*.pyc @@ -2907,11 +3107,14 @@ fi %{python3_sitearch}/samba/tests/__pycache__/s3_net_join.*.pyc %{python3_sitearch}/samba/tests/__pycache__/safe_tarfile.*.pyc %{python3_sitearch}/samba/tests/__pycache__/samba_upgradedns_lmdb.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/samba_startup_fl_change.*.pyc %{python3_sitearch}/samba/tests/__pycache__/samba3sam.*.pyc %{python3_sitearch}/samba/tests/__pycache__/samdb.*.pyc %{python3_sitearch}/samba/tests/__pycache__/samdb_api.*.pyc %{python3_sitearch}/samba/tests/__pycache__/sddl.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/sddl_conditional_ace.*.pyc %{python3_sitearch}/samba/tests/__pycache__/security.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/security_descriptors.*.pyc %{python3_sitearch}/samba/tests/__pycache__/segfault.*.pyc %{python3_sitearch}/samba/tests/__pycache__/sid_strings.*.pyc %{python3_sitearch}/samba/tests/__pycache__/smb.*.pyc @@ -2927,6 +3130,7 @@ fi %{python3_sitearch}/samba/tests/__pycache__/strings.*.pyc %{python3_sitearch}/samba/tests/__pycache__/subunitrun.*.pyc %{python3_sitearch}/samba/tests/__pycache__/tdb_util.*.pyc +%{python3_sitearch}/samba/tests/__pycache__/token_factory.*.pyc %{python3_sitearch}/samba/tests/__pycache__/upgrade.*.pyc %{python3_sitearch}/samba/tests/__pycache__/upgradeprovision.*.pyc %{python3_sitearch}/samba/tests/__pycache__/upgradeprovisionneeddc.*.pyc @@ -2950,16 +3154,22 @@ fi %{python3_sitearch}/samba/tests/blackbox/__pycache__/__init__.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/bug13653.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/check_output.*.pyc +%{python3_sitearch}/samba/tests/blackbox/__pycache__/claims.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/downgradedatabase.*.pyc +%{python3_sitearch}/samba/tests/blackbox/__pycache__/http_chunk.*.pyc +%{python3_sitearch}/samba/tests/blackbox/__pycache__/http_content.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/mdsearch.*.pyc +%{python3_sitearch}/samba/tests/blackbox/__pycache__/misc_dfs_widelink.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/ndrdump.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/netads_dns.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/netads_json.*.pyc +%{python3_sitearch}/samba/tests/blackbox/__pycache__/rpcd_witness_samba_only.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/samba_dnsupdate.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls_basic.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls_dfs_propagate_inherit.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls_propagate_inhertance.*.pyc +%{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcacls_save_restore.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcontrol.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/smbcontrol_process.*.pyc %{python3_sitearch}/samba/tests/blackbox/__pycache__/traffic_learner.*.pyc @@ -2967,16 +3177,22 @@ fi %{python3_sitearch}/samba/tests/blackbox/__pycache__/traffic_summary.*.pyc %{python3_sitearch}/samba/tests/blackbox/bug13653.py %{python3_sitearch}/samba/tests/blackbox/check_output.py +%{python3_sitearch}/samba/tests/blackbox/claims.py %{python3_sitearch}/samba/tests/blackbox/downgradedatabase.py +%{python3_sitearch}/samba/tests/blackbox/http_chunk.py +%{python3_sitearch}/samba/tests/blackbox/http_content.py %{python3_sitearch}/samba/tests/blackbox/mdsearch.py +%{python3_sitearch}/samba/tests/blackbox/misc_dfs_widelink.py %{python3_sitearch}/samba/tests/blackbox/ndrdump.py %{python3_sitearch}/samba/tests/blackbox/netads_dns.py %{python3_sitearch}/samba/tests/blackbox/netads_json.py +%{python3_sitearch}/samba/tests/blackbox/rpcd_witness_samba_only.py %{python3_sitearch}/samba/tests/blackbox/samba_dnsupdate.py %{python3_sitearch}/samba/tests/blackbox/smbcacls.py %{python3_sitearch}/samba/tests/blackbox/smbcacls_basic.py %{python3_sitearch}/samba/tests/blackbox/smbcacls_dfs_propagate_inherit.py %{python3_sitearch}/samba/tests/blackbox/smbcacls_propagate_inhertance.py +%{python3_sitearch}/samba/tests/blackbox/smbcacls_save_restore.py %{python3_sitearch}/samba/tests/blackbox/smbcontrol.py %{python3_sitearch}/samba/tests/blackbox/smbcontrol_process.py %{python3_sitearch}/samba/tests/blackbox/traffic_learner.py @@ -2985,6 +3201,9 @@ fi %{python3_sitearch}/samba/tests/common.py %{python3_sitearch}/samba/tests/compression.py %{python3_sitearch}/samba/tests/complex_expressions.py +%{python3_sitearch}/samba/tests/conditional_ace_assembler.py +%{python3_sitearch}/samba/tests/conditional_ace_bytes.py +%{python3_sitearch}/samba/tests/conditional_ace_claims.py %{python3_sitearch}/samba/tests/core.py %{python3_sitearch}/samba/tests/credentials.py %{python3_sitearch}/samba/tests/cred_opt.py @@ -3064,6 +3283,7 @@ fi %{python3_sitearch}/samba/tests/gensec.py %{python3_sitearch}/samba/tests/getdcname.py %{python3_sitearch}/samba/tests/get_opt.py +%{python3_sitearch}/samba/tests/gkdi.py %{python3_sitearch}/samba/tests/glue.py %{python3_sitearch}/samba/tests/gpo.py %{python3_sitearch}/samba/tests/gpo_member.py @@ -3089,24 +3309,32 @@ fi %{python3_sitearch}/samba/tests/krb5/__pycache__/alias_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/as_canonicalization_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/as_req_tests.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/authn_policy_tests.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/claims_in_pac.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/claims_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/compatability_tests.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/conditional_ace_tests.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/device_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/etype_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/fast_tests.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/gkdi_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/group_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/kcrypto.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_base_test.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_tgs_tests.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/kdc_tgt_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/kpasswd_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/lockout_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/ms_kile_client_principal_lookup_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/nt_hash_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/pac_align_tests.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/pkinit_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/protected_users_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/raw_testcase.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/rfc4120_constants.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/rfc4120_pyasn1.*.pyc +%{python3_sitearch}/samba/tests/krb5/__pycache__/rfc4120_pyasn1_generated.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/rodc_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/simple_tests.*.pyc %{python3_sitearch}/samba/tests/krb5/__pycache__/s4u_tests.*.pyc @@ -3122,24 +3350,32 @@ fi %{python3_sitearch}/samba/tests/krb5/alias_tests.py %{python3_sitearch}/samba/tests/krb5/as_canonicalization_tests.py %{python3_sitearch}/samba/tests/krb5/as_req_tests.py +%{python3_sitearch}/samba/tests/krb5/authn_policy_tests.py +%{python3_sitearch}/samba/tests/krb5/claims_in_pac.py %{python3_sitearch}/samba/tests/krb5/claims_tests.py %{python3_sitearch}/samba/tests/krb5/compatability_tests.py +%{python3_sitearch}/samba/tests/krb5/conditional_ace_tests.py +%{python3_sitearch}/samba/tests/krb5/device_tests.py %{python3_sitearch}/samba/tests/krb5/etype_tests.py %{python3_sitearch}/samba/tests/krb5/fast_tests.py +%{python3_sitearch}/samba/tests/krb5/gkdi_tests.py %{python3_sitearch}/samba/tests/krb5/group_tests.py %{python3_sitearch}/samba/tests/krb5/kcrypto.py %{python3_sitearch}/samba/tests/krb5/kdc_base_test.py %{python3_sitearch}/samba/tests/krb5/kdc_tests.py %{python3_sitearch}/samba/tests/krb5/kdc_tgs_tests.py +%{python3_sitearch}/samba/tests/krb5/kdc_tgt_tests.py %{python3_sitearch}/samba/tests/krb5/kpasswd_tests.py %{python3_sitearch}/samba/tests/krb5/lockout_tests.py %{python3_sitearch}/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py %{python3_sitearch}/samba/tests/krb5/nt_hash_tests.py %{python3_sitearch}/samba/tests/krb5/pac_align_tests.py +%{python3_sitearch}/samba/tests/krb5/pkinit_tests.py %{python3_sitearch}/samba/tests/krb5/protected_users_tests.py %{python3_sitearch}/samba/tests/krb5/raw_testcase.py %{python3_sitearch}/samba/tests/krb5/rfc4120_constants.py %{python3_sitearch}/samba/tests/krb5/rfc4120_pyasn1.py +%{python3_sitearch}/samba/tests/krb5/rfc4120_pyasn1_generated.py %{python3_sitearch}/samba/tests/krb5/rodc_tests.py %{python3_sitearch}/samba/tests/krb5/simple_tests.py %{python3_sitearch}/samba/tests/krb5/test_idmap_nss.py @@ -3157,13 +3393,21 @@ fi %{python3_sitearch}/samba/tests/ldap_spn.py %{python3_sitearch}/samba/tests/ldap_referrals.py %{python3_sitearch}/samba/tests/ldap_upn_sam_account.py +%{python3_sitearch}/samba/tests/ldap_whoami.py %{python3_sitearch}/samba/tests/libsmb.py %{python3_sitearch}/samba/tests/libsmb-basic.py %{python3_sitearch}/samba/tests/loadparm.py %{python3_sitearch}/samba/tests/logfiles.py %{python3_sitearch}/samba/tests/lsa_string.py %{python3_sitearch}/samba/tests/messaging.py -%{python3_sitearch}/samba/tests/ndr.py +%dir %{python3_sitearch}/samba/tests/ndr +%{python3_sitearch}/samba/tests/ndr/gkdi.py +%{python3_sitearch}/samba/tests/ndr/gmsa.py +%dir %{python3_sitearch}/samba/tests/ndr/__pycache__ +%{python3_sitearch}/samba/tests/ndr/__pycache__/gkdi.*.pyc +%{python3_sitearch}/samba/tests/ndr/__pycache__/gmsa.*.pyc +%{python3_sitearch}/samba/tests/ndr/__pycache__/wbint.*.pyc +%{python3_sitearch}/samba/tests/ndr/wbint.py %{python3_sitearch}/samba/tests/netbios.py %{python3_sitearch}/samba/tests/netcmd.py %{python3_sitearch}/samba/tests/net_join_no_spnego.py @@ -3204,6 +3448,7 @@ fi %{python3_sitearch}/samba/tests/s3_net_join.py %{python3_sitearch}/samba/tests/safe_tarfile.py %{python3_sitearch}/samba/tests/samba3sam.py +%{python3_sitearch}/samba/tests/samba_startup_fl_change.py %{python3_sitearch}/samba/tests/samba_upgradedns_lmdb.py %dir %{python3_sitearch}/samba/tests/samba_tool %{python3_sitearch}/samba/tests/samba_tool/__init__.py @@ -3214,6 +3459,10 @@ fi %{python3_sitearch}/samba/tests/samba_tool/__pycache__/contact.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/demote.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/dnscmd.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/domain_auth_policy.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/domain_auth_silo.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/domain_claim.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/domain_models.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/drs_clone_dc_data_lmdb_size.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/dsacl.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/forest.*.pyc @@ -3235,10 +3484,15 @@ fi %{python3_sitearch}/samba/tests/samba_tool/__pycache__/provision_userPassword_crypt.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/rodc.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/schema.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/silo_base.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/sites.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/timecmd.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/user.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_auth_policy.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_auth_silo.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_check_password_script.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_get_kerberos_ticket.*.pyc +%{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_getpassword_gmsa.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_virtualCryptSHA.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_virtualCryptSHA_base.*.pyc %{python3_sitearch}/samba/tests/samba_tool/__pycache__/user_virtualCryptSHA_gpg.*.pyc @@ -3251,6 +3505,10 @@ fi %{python3_sitearch}/samba/tests/samba_tool/contact.py %{python3_sitearch}/samba/tests/samba_tool/demote.py %{python3_sitearch}/samba/tests/samba_tool/dnscmd.py +%{python3_sitearch}/samba/tests/samba_tool/domain_auth_policy.py +%{python3_sitearch}/samba/tests/samba_tool/domain_auth_silo.py +%{python3_sitearch}/samba/tests/samba_tool/domain_claim.py +%{python3_sitearch}/samba/tests/samba_tool/domain_models.py %{python3_sitearch}/samba/tests/samba_tool/drs_clone_dc_data_lmdb_size.py %{python3_sitearch}/samba/tests/samba_tool/dsacl.py %{python3_sitearch}/samba/tests/samba_tool/forest.py @@ -3272,10 +3530,15 @@ fi %{python3_sitearch}/samba/tests/samba_tool/provision_userPassword_crypt.py %{python3_sitearch}/samba/tests/samba_tool/rodc.py %{python3_sitearch}/samba/tests/samba_tool/schema.py +%{python3_sitearch}/samba/tests/samba_tool/silo_base.py %{python3_sitearch}/samba/tests/samba_tool/sites.py %{python3_sitearch}/samba/tests/samba_tool/timecmd.py %{python3_sitearch}/samba/tests/samba_tool/user.py +%{python3_sitearch}/samba/tests/samba_tool/user_auth_policy.py +%{python3_sitearch}/samba/tests/samba_tool/user_auth_silo.py %{python3_sitearch}/samba/tests/samba_tool/user_check_password_script.py +%{python3_sitearch}/samba/tests/samba_tool/user_get_kerberos_ticket.py +%{python3_sitearch}/samba/tests/samba_tool/user_getpassword_gmsa.py %{python3_sitearch}/samba/tests/samba_tool/user_virtualCryptSHA.py %{python3_sitearch}/samba/tests/samba_tool/user_virtualCryptSHA_base.py %{python3_sitearch}/samba/tests/samba_tool/user_virtualCryptSHA_gpg.py @@ -3286,7 +3549,9 @@ fi %{python3_sitearch}/samba/tests/samdb.py %{python3_sitearch}/samba/tests/samdb_api.py %{python3_sitearch}/samba/tests/sddl.py +%{python3_sitearch}/samba/tests/sddl_conditional_ace.py %{python3_sitearch}/samba/tests/security.py +%{python3_sitearch}/samba/tests/security_descriptors.py %{python3_sitearch}/samba/tests/segfault.py %{python3_sitearch}/samba/tests/sid_strings.py %{python3_sitearch}/samba/tests/smb.py @@ -3302,6 +3567,7 @@ fi %{python3_sitearch}/samba/tests/strings.py %{python3_sitearch}/samba/tests/subunitrun.py %{python3_sitearch}/samba/tests/tdb_util.py +%{python3_sitearch}/samba/tests/token_factory.py %{python3_sitearch}/samba/tests/upgrade.py %{python3_sitearch}/samba/tests/upgradeprovision.py %{python3_sitearch}/samba/tests/upgradeprovisionneeddc.py @@ -3332,9 +3598,9 @@ fi ### TEST-LIBS %files test-libs %if %{with dc} || %{with testsuite} -%{_libdir}/samba/libdlz-bind9-for-torture-samba4.so +%{_libdir}/samba/libdlz-bind9-for-torture-private-samba.so %else -%{_libdir}/samba/libdsdb-module-samba4.so +%{_libdir}/samba/libdsdb-module-private-samba.so %endif ### USERSHARES @@ -3347,9 +3613,10 @@ fi %files winbind %{_libdir}/samba/idmap %{_libdir}/samba/nss_info -%{_libdir}/samba/libnss-info-samba4.so -%{_libdir}/samba/libidmap-samba4.so +%{_libdir}/samba/libnss-info-private-samba.so +%{_libdir}/samba/libidmap-private-samba.so %{_sbindir}/winbindd +%{_sysusersdir}/samba-winbind.conf %attr(750,root,wbpriv) %dir /var/lib/samba/winbindd_privileged %{_unitdir}/winbind.service %{_prefix}/lib/NetworkManager @@ -3479,6 +3746,7 @@ fi %{_datadir}/ctdb/events/legacy/31.clamd.script %{_datadir}/ctdb/events/legacy/40.vsftpd.script %{_datadir}/ctdb/events/legacy/41.httpd.script +%{_datadir}/ctdb/events/legacy/47.samba-dcerpcd.script %{_datadir}/ctdb/events/legacy/48.netbios.script %{_datadir}/ctdb/events/legacy/49.winbind.script %{_datadir}/ctdb/events/legacy/50.samba.script @@ -4338,11 +4606,55 @@ fi %endif %changelog -* Wed Mar 06 2024 Eduard Abdullin - 4.18.6-102.alma.1 -- nsswitch: add test for pthread_key_delete missuse (bug 15464) +* Thu Aug 01 2024 Pavel Filipenský - 4.20.2-2 +- resolves: RHEL-47757 - Allow to run samba-bgqd as a standalone systemd service -* Tue Nov 07 2023 Eduard Abdullin - 4.18.6-101.alma.1 -- CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 +* Tue Jul 02 2024 Pavel Filipenský - 4.20.2-1 +- related: RHEL-33645 - Update to version 4.20.2 +- resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain +- resolves: RHEL-23814 - Fix smbclient to enumerate the printers + +* Wed May 29 2024 Pavel Filipenský - 4.20.1-1 +- related: RHEL-33645 - Remove autorelease - rpmautospec is not available for rhel-9 yet + +* Tue May 28 2024 Pavel Filipenský - 4.20.1-1 +- related: RHEL-33645 - Update to version 4.20.1 +- resolves: RHEL-26337 - Fix site lookup for samba-gpupdate +- resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient + +* Mon Apr 29 2024 Pavel Filipenský - 4.20.0-103 +- resolves: RHEL-20473 - Improve performance of winbind idmap_ad backend + +* Mon Apr 29 2024 Pavel Filipenský - 4.20.0-102 +- resolves: RHEL-2109 - Support Certificate Auto Enrollment in Samba +- resolves: RHEL-22157 - Fix root cert import for samba-gpupdate + +* Fri Apr 26 2024 Pavel Filipenský - 4.20.0-101 +- resolves: RHEL-33645 - Update to version 4.20.0 + +* Mon Feb 19 2024 Andreas Schneider - 4.19.4-104 +- related: RHEL-2109 - Disable support for certificate auto enrollment + +* Tue Jan 30 2024 Andreas Schneider - 4.19.4-102 +- resolves: RHEL-22157 - Don't require NDES for samba-gpupdate +- resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate + +* Wed Jan 10 2024 Andreas Schneider - 4.19.4-100 +- related: RHEL-16476 - Update to version 4.19.4 +- resolves: RHEL-2109 - Add support for certificate auto enrollment +- resolves: RHEL-20761 - Add missing requirements for samba-gpupdate +- resolves: RHEL-19566 - Fix smbget interactive authentication +- resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL + +* Mon Dec 04 2023 Andreas Schneider - 4.19.3-100 +- resolves: RHEL-16476 - Update to version 4.19.3 +- resolves: RHEL-11362 - Fix security issues: + CVE-2023-4091 CVE-2023-42669 +- resolves: RHEL-18030 - Logging Format Enhancement +- resolves: RHEL-1960 - Fix smbget issues with DFS shares +- resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes' +- resolves: RHEL-16875 - Fix memory corruption in libnss_winbind +- resolves: RHEL-19243 - Fix smbget password interactive authentication * Thu Aug 17 2023 Andreas Schneider - 4.18.6-100 - related: rhbz#2190415 - Update to version 4.18.6