From patchwork Tue Dec 10 14:11:21 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 8317 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Y70zl2qZBz3wxp for ; Tue, 10 Dec 2024 14:12:19 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "E6" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Y70zD3XpBz1Z3; Tue, 10 Dec 2024 14:11:52 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Y70zD1tk9z33pQ; Tue, 10 Dec 2024 14:11:52 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Y70zB4lbGz30Mt for ; Tue, 10 Dec 2024 14:11:50 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Y70yj2cLPz1Z3; Tue, 10 Dec 2024 14:11:25 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1733839885; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=XU7iQFF3YWoCvZVzw8hav7eQ7ZQDidXApUlKW1GKEZw=; b=cH0SWzis+r4qFzXsrKuov3MVJAmOwg7qak+I7Oyla1koyeev2ARIljZFJMXV9xt2vfVdIO bB2xrKNfXVJXcIAQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1733839885; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=XU7iQFF3YWoCvZVzw8hav7eQ7ZQDidXApUlKW1GKEZw=; b=XDa5cJzliC+5F0fpYybArXFO4UKMWzaXJ0nQQY0U2h7vDdlGToAsuoI4F/exEApJs0b8Kr qAYqJi1k1pdv951HtbxtN/nR7vNboTYqMbdtkjsgUGzL52pV2VLXGfzIFlYHQAgnfQ8KUw kHEd2DZa+hrcFNzC46Pvt17V/2uSOTTHJRVCzrB8a3hlg49LhPxtHxL+/yfEvcA/CFHj53 3QZfoCP1SFJQyeI7jGU/SmANCSaNkbhjAVf4njQv75aOT7d9yjspYA9s9FQeiORPZZeE6f pgqVOBCGEkTQqjgXX9OKrEVKR6gbgJBllmIkXRqf/6dq7w/TiZn9j/hifHqWTQ== From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] samba: Update to version 4.21.2 Date: Tue, 10 Dec 2024 15:11:21 +0100 Message-ID: <20241210141121.3399686-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Message-ID-Hash: G4CXDDNDUQJYVFFE4ZTRD7XS3NHT4GVG X-Message-ID-Hash: G4CXDDNDUQJYVFFE4ZTRD7XS3NHT4GVG X-MailFrom: adolf.belka@ipfire.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.8 Precedence: list List-Id: IPFire development talk Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: - Update from version 4.21.0 to 4.21.2 - Update of the rootfiles for x86_64, aarch64 & riscv64 - Version 4.21.0 mentioned that LDB is no longer available to build as a distinct tarball. However version 4.21.0 previously built without any problem so it looks like it was still available. Now with version 4.21.2 the lmdb package needs to be available or you have to disable all ldb options. As these options were uncommented in the previous versions of samba, it looks like they are intended to be present. To make this version support in the same way the lmdb package had to be moved so it was built before samba is built. Hence the shift of lmdb in make.sh - Changelog 4.21.2 * BUG 15732: smbd fails to correctly check sharemode against OVERWRITE dispositions. * BUG 15754: Panic in close_directory. * BUG 15752: winexe no longer works with samba 4.21. * BUG 14356: protocol error - Unclear debug message "pad length mismatch" for invalid bind packet. * BUG 15425: NetrGetLogonCapabilities QueryLevel 2 needs to be implemented. * BUG 15740: gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE. * BUG 15749: winbindd should call process_set_title() for locator child. * BUG 15320: Update CTDB to track all TCP connections to public IP addresses. 4.21.1 * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15695: "inherit permissions = yes" triggers assert() in vfs_default when creating a stream. * BUG 15715: Samba 4.21.0 broke FreeIPA domain member integration. * BUG 15692: Missing conversion for msDS-UserTGTLifetime, msDS- ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-tool domain auth policy modify". * BUG 15280: irpc_destructor may crash during shutdown. * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15649: Durable handle is not granted when a previous OPEN exists with NoOplock. * BUG 15651: Durable handle is granted but reconnect fails. * BUG 15708: Disconnected durable handles with RH lease should not be purged by a new non conflicting open. * BUG 15714: net ads testjoin and other commands use the wrong secrets.tdb in a cluster. * BUG 15726: 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as rfc 8009 etypes are used. * BUG 15730: VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2. * BUG 15643: Samba 4.20.0 DLZ module crashes BIND on startup. * BUG 15721: Cannot build libldb lmdb backend on a build without AD DC. * BUG 15706: Consistent log level for sighup handler. Signed-off-by: Adolf Belka --- config/rootfiles/packages/aarch64/samba | 3 +++ config/rootfiles/packages/riscv64/samba | 5 ++++- config/rootfiles/packages/x86_64/samba | 3 +++ lfs/samba | 6 +++--- make.sh | 2 +- 5 files changed, 14 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba index cb7407504..c4e585d1d 100644 --- a/config/rootfiles/packages/aarch64/samba +++ b/config/rootfiles/packages/aarch64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-aarch64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-aarch64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-aarch64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/config/rootfiles/packages/riscv64/samba b/config/rootfiles/packages/riscv64/samba index b530ea2b2..3979501e4 100644 --- a/config/rootfiles/packages/riscv64/samba +++ b/config/rootfiles/packages/riscv64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-riscv64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-riscv64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-riscv64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so @@ -1024,4 +1027,4 @@ var/log/samba var/spool/samba srv/web/ipfire/cgi-bin/samba.cgi var/ipfire/menu.d/EX-samba.menu -usr/local/bin/sambactrl \ No newline at end of file +usr/local/bin/sambactrl diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index e720457a3..dc169322e 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-x86_64-linux- usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-x86_64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-x86_64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/lfs/samba b/lfs/samba index 8358264a3..1d5789c5e 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.21.0 +VER = 4.21.2 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 105 +PAK_VER = 106 DEPS = avahi cups perl-Parse-Yapp perl-JSON wsdd @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0889f2be3b78affee88250114397de87a77da77d9674815ec5605780a6bb3e2e28dbbae53b66695196408f4aef550acce793e6397045fbea4bb236fdd095ce1a +$(DL_FILE)_BLAKE2 = f9c297f4ed0c00b7887e637beb6ab7f4e17882e0ed5a3d1f1faf1ae1c2d6b064ada53cf65a86f11237813197c043961735e8aad641630baa48ec259482bdab2a install : $(TARGET) diff --git a/make.sh b/make.sh index 35a602f62..031bca80f 100755 --- a/make.sh +++ b/make.sh @@ -1804,6 +1804,7 @@ build_system() { lfsmake2 cifs-utils lfsmake2 krb5 lfsmake2 rpcsvc-proto + lfsmake2 lmdb lfsmake2 samba lfsmake2 netatalk lfsmake2 sudo @@ -2049,7 +2050,6 @@ build_system() { lfsmake2 shairport-sync lfsmake2 libxxhash lfsmake2 borgbackup - lfsmake2 lmdb lfsmake2 knot lfsmake2 spectre-meltdown-checker lfsmake2 zabbix_agentd