CVS commit: pkgsrc/net/samba4

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Aug  3 06:30:17 UTC 2024

Modified Files:
        pkgsrc/net/samba4: Makefile distinfo

Log Message:
samba4: updated to 4.20.3

Release Notes for Samba 4.20.3

This is the latest stable release of the Samba 4.20 release series.

LDAP TLS/SASL channel binding support
-------------------------------------

The ldap server supports SASL binds with
kerberos or NTLMSSP over TLS connections
now (either ldaps or starttls).

Setups where 'ldap server require strong auth = allow_sasl_over_tls'
was required before, can now most likely move to the
default of 'ldap server require strong auth = yes'.

If SASL binds without correct tls channel bindings are required
'ldap server require strong auth = allow_sasl_without_tls_channel_bindings'
should be used now, as 'allow_sasl_over_tls' will generate a
warning in every start of 'samba', as well as '[samba-tool ]testparm'.

This is similar to LdapEnforceChannelBinding under
HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
on Windows.

All client tools using ldaps also include the correct
channel bindings now.

smb.conf changes
================

  Parameter Name                          Description     Default
  --------------                          -----------     -------
  ldap server require strong auth         new values

Changes since 4.20.2
--------------------

o  Andreas Schneider <asn%samba.org@localhost>
   * BUG 15683: Running samba-bgqd a a standalone systemd service does not work.

o  Andrew Bartlett <abartlet%samba.org@localhost>
   * BUG 15655: When claims enabled with heimdal kerberos, unable to log on to a
     Windows computer when user account need to change their own password.

o  Douglas Bagnall <douglas.bagnall%catalyst.net.nz@localhost>
   * BUG 15671: Invalid client warning about command line passwords.
   * BUG 15672: Version string is truncated in manpages.
   * BUG 15673: --version-* options are still not ergonomic, and they reject
     tilde characters.
   * BUG 15674: cmdline_burn does not always burn secrets.
   * BUG 15685: Samba does not parse SDDL found in defaultSecurityDescriptor in
     AD_DS_Classes_Windows_Server_v1903.ldf.

o  Jo Sutton <josutton%catalyst.net.nz@localhost>
   * BUG 15655: When claims enabled with heimdal kerberos, unable to log on to a
     Windows computer when user account need to change their own password.

o  Pavel FilipenskĂ˝ <pfilipensky%samba.org@localhost>
   * BUG 15660: The images don\'t build after the git security release and
     CentOS 8 Stream is EOL.

o  Ralph Boehme <slow%samba.org@localhost>
   * BUG 15676: Fix clock skew error message and memory cache clock skew
     recovery.

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 15603: Heimdal ignores _gsskrb5_decapsulate errors in
     init_sec_context/repl_mutual.
   * BUG 15621: s4:ldap_server: does not support tls channel bindings
     for sasl binds.

o  Xavi Hernandez <xhernandez%redhat.com@localhost>
   * BUG 15678: CTDB socket output queues may suffer unbounded delays under some
     special conditions.


To generate a diff of this commit:
cvs rdiff -u -r1.184 -r1.185 pkgsrc/net/samba4/Makefile
cvs rdiff -u -r1.105 -r1.106 pkgsrc/net/samba4/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/samba4/Makefile
diff -u pkgsrc/net/samba4/Makefile:1.184 pkgsrc/net/samba4/Makefile:1.185
--- pkgsrc/net/samba4/Makefile:1.184    Thu Jun 27 09:50:27 2024
+++ pkgsrc/net/samba4/Makefile  Sat Aug  3 06:30:17 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.184 2024/06/27 09:50:27 adam Exp $
+# $NetBSD: Makefile,v 1.185 2024/08/03 06:30:17 adam Exp $
 
-DISTNAME=      samba-4.20.2
+DISTNAME=      samba-4.20.3
 CATEGORIES=    net
 MASTER_SITES=  https://download.samba.org/pub/samba/stable/
 

Index: pkgsrc/net/samba4/distinfo
diff -u pkgsrc/net/samba4/distinfo:1.105 pkgsrc/net/samba4/distinfo:1.106
--- pkgsrc/net/samba4/distinfo:1.105    Thu Jun 27 09:50:27 2024
+++ pkgsrc/net/samba4/distinfo  Sat Aug  3 06:30:17 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.105 2024/06/27 09:50:27 adam Exp $
+$NetBSD: distinfo,v 1.106 2024/08/03 06:30:17 adam Exp $
 
-BLAKE2s (samba-4.20.2.tar.gz) = 0eb7c254399d2c925791a0285faf24123d94fd8ddf9eff11eafe4df9066f8cf6
-SHA512 (samba-4.20.2.tar.gz) = ff2c24314c6a35cc42db36a9021241b1323e810bf746e3975bc103f26daf395cd3c32da72e7172e322dee480587bbb1daac939e9851ff65be493be6fb4fc3eda
-Size (samba-4.20.2.tar.gz) = 42458953 bytes
+BLAKE2s (samba-4.20.3.tar.gz) = bd794d6d4ffd7c6b83c5a8be89e01a689dca179cf6e17e65cc20bd0d25e67f64
+SHA512 (samba-4.20.3.tar.gz) = 47874ff30ba65b135afe5dee5b6b70636558f175c31f89010c4e2296c3abd3421192ba7b383a2029d5a66102c23044807bb6891c13030f5ec7d7361d16a4d3fd
+Size (samba-4.20.3.tar.gz) = 42464180 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = b9015694b80c0e6382d75c806fd6e0eb92e5f998