This bug was fixed in the package samba - 2:4.22.3+dfsg-4ubuntu1
---------------
samba (2:4.22.3+dfsg-4ubuntu1) questing; urgency=medium
* Merge with Debian unstable (LP: #2117421, LP: #2116098). Remaining changes:
- debian/control: Ubuntu i386 binary compatibility:
+ enable the liburing vfs module, except on i386 where liburing is
not available
+ python3-samba depends on python3-cryptography, which Ubuntu doesn't
build on i386 (LP #2099895):
- d/control: don't recommend python3-samba on i386
- d/rules: don't build python3-samba on ubuntu i386
- d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
samba AD DC provisioning and domain join tests with internal DNS
(LP #1977746, LP #2011745)
- d/control: adjust breaks/replaces for file move that Debian did in
4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
file conflict in a dist-upgrade from earlier Ubuntu releases, like
Kinetic (LP #2024663)
- d/control: make samba-vfs-modules-extra a transitional package.
The glusterfs vfs module (the only vfs module shipped in it
previously) is now in bin:samba-vfs-glusterfs
- d/control: have the (now transitional) samba-vfs-modules package
depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
module
- d/control: samba-vfs-modules and samba-vfs-modules-extra, now
transitional packages, should only depend on the new samba-vfs-ceph and
samba-vfs-glusterfs packages on the architectures where those two
packages are built (LP #2076682)
- d/control: samba-vfs-modules i386 adjustments:
+ samba-vfs-modules-extra was not built before for 32bit architectures,
adjust Architectures line
+ samba-vfs-modules: this one was build for 32bit architectures before,
so we need the conditional Depends for ceph
- d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
GPO
- d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
- d/control: don't have bin:samba recommend bin:samba-ad-dc (LP #2101838)
* Dropped:
- d/control: Fix t64 package name in 'Enhances' attribute.
[In 2:4.22.3+dfsg-3]
- d/p/fix-update-motd-gpo.patch: multiple fixes for MOTD GPO:
+ fix crash when updating an already existing MOTD GPO (LP #2092308)
+ fix another crash when the GPO doesn't exist yet (LP #2098755)
+ replace instead of append MOTD GPO text
[Fixed upstream in 4.22.1, should have been dropped in previous merge]
samba (2:4.22.3+dfsg-4) unstable; urgency=medium
* fix python3-talloc.symbols generation to not have -debian_revision
or +dfsg/+samba suffix in the version number - just the epoch if any
and the upstream version (fix lintian error)
samba (2:4.22.3+dfsg-3) unstable; urgency=medium
[ Sascha Lucas ]
* winbind pam-config: fix account section to actually execute pam_winbind
entries after usually successful cal to pam_unix, in a way how it's done
in sssd (Closes: #907318)
[ Douglas Bagnall ]
* debian/panic-action: make the wording more user-friendly and steer users
towards configuration and logs (Closes: #1089853)
[ Michael Tokarev ]
* d/python3-talloc.symbols.in: add forgotten epoch number for recent versions
(this doesn't actually affect anything since there were no new symbols with
these versions, but it's better to stay correct)
* d/control: fix winbind:Enhances for libkrb5-26-heimdal which
is libkrb5-26t64-heimdal in trixie and up, keeping in mind possible
backporting to older debian/ubuntu versions (before-trixie build profile)
* libads-fix-get_kdc_ip_string.patch (upstream fix for #1109005)
(Closes: #1109005)
samba (2:4.22.3+dfsg-2) unstable; urgency=medium
* Revert "d/control,d/rules: ensure we use the most recent talloc/tevent/tdb"
There's no need for samba-libs to depend on exact versions of support libs
anymore, since 4.21.3+dfsg-5 (where the mistake has been made) is long gone
* Revert "d/control: add conflicts/breaks for libtevent0t64 on mjt repo"
This Breaks was special and temporary, and not useful for debian archive at
all (it was only needed for mjt's own repository where the wrong package
name slipped out once). Remove this cruft for trixie
* python3-talloc.symbols[.in] -- provide long-forgotten symbols file, so that
versioned dependency on python3-talloc (mostly for python3-samba) will be
less strict. For smoother upgrades
* document forgotten change in previous changelog entry
samba (2:4.22.3+dfsg-1) unstable; urgency=medium
* new upstream stable/bugfix release, mostly targetting the Jul-08 update
for Active Directory Domain Controllers
(https://bugzilla.samba.org/show_bug.cgi?id=15876, Closes: #1108904):
- https://bugzilla.samba.org/show_bug.cgi?id=15854:
samba-tool cannot add user to group whose name
is exactly 16 characters long
- https://bugzilla.samba.org/show_bug.cgi?id=15869:
Startup messages of rpc daemons fills /var/log/messages
- https://bugzilla.samba.org/show_bug.cgi?id=15876:
Windows security hardening locks out schannel'ed netlogon
dc calls like netr_DsRGetDCName
* update d/copyright to point to https://www.gnu.org/licenses/
instead of FSF postal address
* d/control: stop depending on exact same version of samba-common
Package samba-common contains a few files/dirs common for several samba
packages. Its contents hasn't changed for quite some time. There's
definitely no need to depend on exact version of this package - eg, 4.17
(from bookworm) will work just fine with samba version 4.22. Drop version
requirement for samba-common dep entirely. If/when we have real change in
samba-common which is needed by other packages, we can specify particular
version there. For smoother upgrades
-- Andreas Hasenack <andr...@canonical.com> Mon, 21 Jul 2025 18:13:42
-0300
** Changed in: samba (Ubuntu Questing)
Status: In Progress => Fix Released
** Bug watch added: Samba Bugzilla #15876
https://bugzilla.samba.org/show_bug.cgi?id=15876
** Bug watch added: Samba Bugzilla #15854
https://bugzilla.samba.org/show_bug.cgi?id=15854
** Bug watch added: Samba Bugzilla #15869
https://bugzilla.samba.org/show_bug.cgi?id=15869
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2116098
Title:
Windows security hardening locks out schannel'ed netlogon dc calls
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/2116098/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
