Your message dated Fri, 11 Jul 2025 22:47:09 +0000
with message-id <e1uamwl-006apl...@fasolo.debian.org>
and subject line Bug#1108904: fixed in samba 2:4.17.12+dfsg-0+deb12u2
has caused the Debian Bug report #1108904,
regarding samba: Windows security hardening locks out schannel'ed netlogon dc
calls like netr_DsRGetDCName
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1108904: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108904
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: samba
Version: 2:4.22.2+dfsg-1
Severity: serious
Tags: upstream
Forwarded: https://bugzilla.samba.org/show_bug.cgi?id=15876
https://gitlab.com/samba-team/samba/-/merge_requests/4086
X-Debbugs-Cc: car...@debian.org
Hi Michael,
Yesterday the following heads up was posted to the Samba announce
list:
https://lists.samba.org/archive/samba-announce/2025/000693.html
https://bugzilla.samba.org/show_bug.cgi?id=15876
https://gitlab.com/samba-team/samba/-/merge_requests/4086
To be on the safe side I make this RC level, since my understanding is
that samba servers acting s AD members in such environments will stop
working properly if tomorrows Windows updates are deployed, is this
correct?
The upstream bug contains references to the two upstream changes.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: samba
Source-Version: 2:4.17.12+dfsg-0+deb12u2
Done: Michael Tokarev <m...@tls.msk.ru>
We believe that the bug you reported is fixed in the latest version of
samba, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1108...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <m...@tls.msk.ru> (supplier of updated samba package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 11 Jul 2025 11:21:51 +0300
Source: samba
Architecture: source
Version: 2:4.17.12+dfsg-0+deb12u2
Distribution: bookworm
Urgency: medium
Maintainer: Debian Samba Maintainers <pkg-samba-ma...@lists.alioth.debian.org>
Changed-By: Michael Tokarev <m...@tls.msk.ru>
Closes: 1108904
Changes:
samba (2:4.17.12+dfsg-0+deb12u2) bookworm; urgency=medium
.
[ Salvatore Bonaccorso ]
* several patches from upstream:
- s3-libsmb-dsgetdcname-use-NETLOGON_NT_VERSION_AVOID_.patch:
s3:libsmb/dsgetdcname: use NETLOGON_NT_VERSION_AVOID_NT4EMUL
- s3-libsmb-allow-store_cldap_reply-to-work-with-a-ipv.patch:
s3:libsmb: allow store_cldap_reply() to work with a ipv6 response
- s3-libsmb-let-discover_dc_netbios-return-DOMAIN_CONT.patch:
s3:libsmb: let discover_dc_netbios() return DOMAIN_CONTROLLER_NOT_FOUND
- s3-winbindd-use-better-debug-messages-than-talloc_st.patch:
s3:winbindd: use better debug messages than 'talloc_strdup failed'
- s3-winbindd-avoid-using-any-netlogon-call-to-get-a-d.patch:
s3:winbindd: avoid using any netlogon call to get a dc name
s3-winbindd-Fix-internal-winbind-dsgetdcname-calls-w.patch:
s3-winbindd: Fix internal winbind dsgetdcname calls w.r.t. domain name
(Closes: #1108904)
.
[ Michael Tokarev ]
* d/control: fix versioned dependency on samba for samba-ad-dc
samba-ad-dc is arch-all package. We need samba >= ${source:Version}~
(note the tilde at the end), not ${binary:Version} (without tilde)
Checksums-Sha1:
0f57409e01f39e2b40bcd2eee62bd622e6ccd82f 4791 samba_4.17.12+dfsg-0+deb12u2.dsc
8edda896e9b03a9a394365ee51d3328f6340ef1f 277520
samba_4.17.12+dfsg-0+deb12u2.debian.tar.xz
d6e3f188f19c91e88d4290b0dceb7ada709705e8 5529
samba_4.17.12+dfsg-0+deb12u2_source.buildinfo
Checksums-Sha256:
a6f9090578ff60e19b36cf726a2d8ed28e71ba4e9deab431828b4e75e717a19b 4791
samba_4.17.12+dfsg-0+deb12u2.dsc
fd30a8fe36c7f4a5c076ded18033474fc7aae7780970cd948d5b9c2254dcb268 277520
samba_4.17.12+dfsg-0+deb12u2.debian.tar.xz
e5b0eac98c9d0076e917d610fc7da125fa9316987233a2cf54a15ed8de0a0baf 5529
samba_4.17.12+dfsg-0+deb12u2_source.buildinfo
Files:
a6224e006a539a912b80f79dc2da0487 4791 net optional
samba_4.17.12+dfsg-0+deb12u2.dsc
e1ce016816c502d3aff41b5fa158a6f7 277520 net optional
samba_4.17.12+dfsg-0+deb12u2.debian.tar.xz
ab1b5dbc033f8ab0b71bbd496e418ec5 5529 net optional
samba_4.17.12+dfsg-0+deb12u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ZUj5
-----END PGP SIGNATURE-----
pgpZJRt8aPnGS.pgp
Description: PGP signature
--- End Message ---
