[ubuntu/questing-proposed] samba 2:4.22.3+dfsg-4ubuntu1 (Accepted)

Andreas Hasenack andreas at canonical.com
Wed Jul 23 14:34:18 UTC 2025


samba (2:4.22.3+dfsg-4ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2117421, LP: #2116098). Remaining changes:
    - debian/control: Ubuntu i386 binary compatibility:
      + enable the liburing vfs module, except on i386 where liburing is
        not available
      + python3-samba depends on python3-cryptography, which Ubuntu doesn't
        build on i386 (LP #2099895):
        - d/control: don't recommend python3-samba on i386
        - d/rules: don't build python3-samba on ubuntu i386
    - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      (LP #1977746, LP #2011745)
    - d/control: adjust breaks/replaces for file move that Debian did in
      4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
      file conflict in a dist-upgrade from earlier Ubuntu releases, like
      Kinetic (LP #2024663)
    - d/control: make samba-vfs-modules-extra a transitional package.
      The glusterfs vfs module (the only vfs module shipped in it
      previously) is now in bin:samba-vfs-glusterfs
    - d/control: have the (now transitional) samba-vfs-modules package
      depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
      module
    - d/control: samba-vfs-modules and samba-vfs-modules-extra, now
      transitional packages, should only depend on the new samba-vfs-ceph and
      samba-vfs-glusterfs packages on the architectures where those two
      packages are built (LP #2076682)
    - d/control: samba-vfs-modules i386 adjustments:
      + samba-vfs-modules-extra was not built before for 32bit architectures,
        adjust Architectures line
      + samba-vfs-modules: this one was build for 32bit architectures before,
        so we need the conditional Depends for ceph
    - d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
      GPO
    - d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
    - d/control: don't have bin:samba recommend bin:samba-ad-dc (LP #2101838)
  * Dropped:
    - d/control: Fix t64 package name in 'Enhances' attribute.
      [In 2:4.22.3+dfsg-3]
    - d/p/fix-update-motd-gpo.patch: multiple fixes for MOTD GPO:
      + fix crash when updating an already existing MOTD GPO (LP #2092308)
      + fix another crash when the GPO doesn't exist yet (LP #2098755)
      + replace instead of append MOTD GPO text
      [Fixed upstream in 4.22.1, should have been dropped in previous merge]

samba (2:4.22.3+dfsg-4) unstable; urgency=medium

  * fix python3-talloc.symbols generation to not have -debian_revision
    or +dfsg/+samba suffix in the version number - just the epoch if any
    and the upstream version (fix lintian error)

samba (2:4.22.3+dfsg-3) unstable; urgency=medium

  [ Sascha Lucas ]
  * winbind pam-config: fix account section to actually execute pam_winbind
    entries after usually successful cal to pam_unix, in a way how it's done
    in sssd (Closes: #907318)

  [ Douglas Bagnall ]
  * debian/panic-action: make the wording more user-friendly and steer users
    towards configuration and logs (Closes: #1089853)

  [ Michael Tokarev ]
  * d/python3-talloc.symbols.in: add forgotten epoch number for recent versions
    (this doesn't actually affect anything since there were no new symbols with
    these versions, but it's better to stay correct)
  * d/control: fix winbind:Enhances for libkrb5-26-heimdal which
    is libkrb5-26t64-heimdal in trixie and up, keeping in mind possible
    backporting to older debian/ubuntu versions (before-trixie build profile)
  * libads-fix-get_kdc_ip_string.patch (upstream fix for #1109005)
    (Closes: #1109005)

samba (2:4.22.3+dfsg-2) unstable; urgency=medium

  * Revert "d/control,d/rules: ensure we use the most recent talloc/tevent/tdb"
    There's no need for samba-libs to depend on exact versions of support libs
    anymore, since 4.21.3+dfsg-5 (where the mistake has been made) is long gone
  * Revert "d/control: add conflicts/breaks for libtevent0t64 on mjt repo"
    This Breaks was special and temporary, and not useful for debian archive at
    all (it was only needed for mjt's own repository where the wrong package
    name slipped out once).  Remove this cruft for trixie
  * python3-talloc.symbols[.in] -- provide long-forgotten symbols file, so that
    versioned dependency on python3-talloc (mostly for python3-samba) will be
    less strict.  For smoother upgrades
  * document forgotten change in previous changelog entry

samba (2:4.22.3+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release, mostly targetting the Jul-08 update
    for Active Directory Domain Controllers
    (https://bugzilla.samba.org/show_bug.cgi?id=15876, Closes: #1108904):
   - https://bugzilla.samba.org/show_bug.cgi?id=15854:
     samba-tool cannot add user to group whose name
     is exactly 16 characters long
   - https://bugzilla.samba.org/show_bug.cgi?id=15869:
     Startup messages of rpc daemons fills /var/log/messages
   - https://bugzilla.samba.org/show_bug.cgi?id=15876:
     Windows security hardening locks out schannel'ed netlogon
     dc calls like netr_DsRGetDCName
  * update d/copyright to point to https://www.gnu.org/licenses/
    instead of FSF postal address
  * d/control: stop depending on exact same version of samba-common
    Package samba-common contains a few files/dirs common for several samba
    packages.  Its contents hasn't changed for quite some time.  There's
    definitely no need to depend on exact version of this package - eg, 4.17
    (from bookworm) will work just fine with samba version 4.22.  Drop version
    requirement for samba-common dep entirely.  If/when we have real change in
    samba-common which is needed by other packages, we can specify particular
    version there.  For smoother upgrades

Date: Mon, 21 Jul 2025 18:13:42 -0300
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/samba/2:4.22.3+dfsg-4ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 21 Jul 2025 18:13:42 -0300
Source: samba
Built-For-Profiles: noudeb
Architecture: source
Version: 2:4.22.3+dfsg-4ubuntu1
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Closes: 907318 1089853 1108904 1109005
Launchpad-Bugs-Fixed: 2116098 2117421
Changes:
 samba (2:4.22.3+dfsg-4ubuntu1) questing; urgency=medium
 .
   * Merge with Debian unstable (LP: #2117421, LP: #2116098). Remaining changes:
     - debian/control: Ubuntu i386 binary compatibility:
       + enable the liburing vfs module, except on i386 where liburing is
         not available
       + python3-samba depends on python3-cryptography, which Ubuntu doesn't
         build on i386 (LP #2099895):
         - d/control: don't recommend python3-samba on i386
         - d/rules: don't build python3-samba on ubuntu i386
     - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
       samba AD DC provisioning and domain join tests with internal DNS
       (LP #1977746, LP #2011745)
     - d/control: adjust breaks/replaces for file move that Debian did in
       4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
       file conflict in a dist-upgrade from earlier Ubuntu releases, like
       Kinetic (LP #2024663)
     - d/control: make samba-vfs-modules-extra a transitional package.
       The glusterfs vfs module (the only vfs module shipped in it
       previously) is now in bin:samba-vfs-glusterfs
     - d/control: have the (now transitional) samba-vfs-modules package
       depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
       module
     - d/control: samba-vfs-modules and samba-vfs-modules-extra, now
       transitional packages, should only depend on the new samba-vfs-ceph and
       samba-vfs-glusterfs packages on the architectures where those two
       packages are built (LP #2076682)
     - d/control: samba-vfs-modules i386 adjustments:
       + samba-vfs-modules-extra was not built before for 32bit architectures,
         adjust Architectures line
       + samba-vfs-modules: this one was build for 32bit architectures before,
         so we need the conditional Depends for ceph
     - d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
       GPO
     - d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
     - d/control: don't have bin:samba recommend bin:samba-ad-dc (LP #2101838)
   * Dropped:
     - d/control: Fix t64 package name in 'Enhances' attribute.
       [In 2:4.22.3+dfsg-3]
     - d/p/fix-update-motd-gpo.patch: multiple fixes for MOTD GPO:
       + fix crash when updating an already existing MOTD GPO (LP #2092308)
       + fix another crash when the GPO doesn't exist yet (LP #2098755)
       + replace instead of append MOTD GPO text
       [Fixed upstream in 4.22.1, should have been dropped in previous merge]
 .
 samba (2:4.22.3+dfsg-4) unstable; urgency=medium
 .
   * fix python3-talloc.symbols generation to not have -debian_revision
     or +dfsg/+samba suffix in the version number - just the epoch if any
     and the upstream version (fix lintian error)
 .
 samba (2:4.22.3+dfsg-3) unstable; urgency=medium
 .
   [ Sascha Lucas ]
   * winbind pam-config: fix account section to actually execute pam_winbind
     entries after usually successful cal to pam_unix, in a way how it's done
     in sssd (Closes: #907318)
 .
   [ Douglas Bagnall ]
   * debian/panic-action: make the wording more user-friendly and steer users
     towards configuration and logs (Closes: #1089853)
 .
   [ Michael Tokarev ]
   * d/python3-talloc.symbols.in: add forgotten epoch number for recent versions
     (this doesn't actually affect anything since there were no new symbols with
     these versions, but it's better to stay correct)
   * d/control: fix winbind:Enhances for libkrb5-26-heimdal which
     is libkrb5-26t64-heimdal in trixie and up, keeping in mind possible
     backporting to older debian/ubuntu versions (before-trixie build profile)
   * libads-fix-get_kdc_ip_string.patch (upstream fix for #1109005)
     (Closes: #1109005)
 .
 samba (2:4.22.3+dfsg-2) unstable; urgency=medium
 .
   * Revert "d/control,d/rules: ensure we use the most recent talloc/tevent/tdb"
     There's no need for samba-libs to depend on exact versions of support libs
     anymore, since 4.21.3+dfsg-5 (where the mistake has been made) is long gone
   * Revert "d/control: add conflicts/breaks for libtevent0t64 on mjt repo"
     This Breaks was special and temporary, and not useful for debian archive at
     all (it was only needed for mjt's own repository where the wrong package
     name slipped out once).  Remove this cruft for trixie
   * python3-talloc.symbols[.in] -- provide long-forgotten symbols file, so that
     versioned dependency on python3-talloc (mostly for python3-samba) will be
     less strict.  For smoother upgrades
   * document forgotten change in previous changelog entry
 .
 samba (2:4.22.3+dfsg-1) unstable; urgency=medium
 .
   * new upstream stable/bugfix release, mostly targetting the Jul-08 update
     for Active Directory Domain Controllers
     (https://bugzilla.samba.org/show_bug.cgi?id=15876, Closes: #1108904):
    - https://bugzilla.samba.org/show_bug.cgi?id=15854:
      samba-tool cannot add user to group whose name
      is exactly 16 characters long
    - https://bugzilla.samba.org/show_bug.cgi?id=15869:
      Startup messages of rpc daemons fills /var/log/messages
    - https://bugzilla.samba.org/show_bug.cgi?id=15876:
      Windows security hardening locks out schannel'ed netlogon
      dc calls like netr_DsRGetDCName
   * update d/copyright to point to https://www.gnu.org/licenses/
     instead of FSF postal address
   * d/control: stop depending on exact same version of samba-common
     Package samba-common contains a few files/dirs common for several samba
     packages.  Its contents hasn't changed for quite some time.  There's
     definitely no need to depend on exact version of this package - eg, 4.17
     (from bookworm) will work just fine with samba version 4.22.  Drop version
     requirement for samba-common dep entirely.  If/when we have real change in
     samba-common which is needed by other packages, we can specify particular
     version there.  For smoother upgrades
Checksums-Sha1:
 d83e017364a4104ce066c3001a5b7911bb9d38bb 6012 samba_4.22.3+dfsg-4ubuntu1.dsc
 cdcb3761d0b3f67c72117d4eb2a106dbfede849b 25672304 samba_4.22.3+dfsg.orig.tar.xz
 a5e1d5430dc78aa5e2344eaef72cd28525eddc8b 209520 samba_4.22.3+dfsg-4ubuntu1.debian.tar.xz
 d9d0d1c9f4d8b0de4daa2605df2d81bef5b5c101 6597 samba_4.22.3+dfsg-4ubuntu1_source.buildinfo
Checksums-Sha256:
 1f3b4139e0ccb5db34e3d845e47af887faf656db30102fcf047b17c273570ccf 6012 samba_4.22.3+dfsg-4ubuntu1.dsc
 1f6ee82ed47c0c6d03e68c96a47b7cef56413a2fda57fd7aa9a1cc57df6b2ccc 25672304 samba_4.22.3+dfsg.orig.tar.xz
 35a7c563f658b290f0b15f7b498d1b99de202c222d5b14e12281fa9216190dd7 209520 samba_4.22.3+dfsg-4ubuntu1.debian.tar.xz
 98038b6bd347135d5f9c76744a2f06b6b622c5218e337f85529c82e8c92d2812 6597 samba_4.22.3+dfsg-4ubuntu1_source.buildinfo
Files:
 1bf31d017b465d0416eaf107ba0ea466 6012 net optional samba_4.22.3+dfsg-4ubuntu1.dsc
 fa1acde952957a73a68ba792b5cfffac 25672304 net optional samba_4.22.3+dfsg.orig.tar.xz
 04a664d704cde35a1de6caaebaafbcb8 209520 net optional samba_4.22.3+dfsg-4ubuntu1.debian.tar.xz
 0a464d7e42165a37f48604cea9f89e81 6597 net optional samba_4.22.3+dfsg-4ubuntu1_source.buildinfo
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/samba
Vcs-Git-Commit: 673d7c879511baee0a16ac76424f36043e46ce50
Vcs-Git-Ref: refs/heads/questing-samba-merge-2


More information about the Questing-changes mailing list