samba: Update to version 4.23.1

- Update from version 4.22.4 to 4.23.1
- Update of rootfile fo0r all architectures
- Changelog
    4.23.1
	   * BUG 15920: Incomplete bind configuration causes DLZ plugin to crash.
	   * BUG 15914: winbind can crash at startup.
	   * BUG 15919: vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev for
	     fsync_send.
	   * BUG 15904: CTDB does not support PCP 7.0.0.
	   * BUG 15921: CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set.
	   * BUG 15919: vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev for
	     fsync_send.
    4.23.0
	NEW FEATURES/CHANGES
	    Enable SMB3 Unix Extensions by default
		Starting with Samba 4.23, the SMB3 UNIX Extensions are enabled by
		default. These extensions provide first-class support for POSIX semantics
		over SMB3, allowing UNIX and Linux clients to access file services with
		features such as proper POSIX permissions, symlink handling, hardlinks,
		and special file types.
		Enabling this feature by default improves interoperability for UNIX/Linux
		clients without requiring additional configuration. Windows clients that
		do not support the extensions will continue to function normally, by
		using standard SMB3 behavior.
	    Add support for SMB3 over QUIC
		The new "client smb transports" and "server smb transport"
		allow a more flexible configuration for the used tcp
		sockets.
		It also got the ability specify "quic" as possible transport.
		If quic should be used in addition to the defaults something
		like "server smb transports = +quic" can be used.
		For the client quic only works with name based uncs,
		ip address based uncs are not supported.
		Note for the server 'quic' requires the quic.ko kernel module
		for Linux from https://github.com/lxin/quic (tested with Linux 6.14).
		Future Linux versions may support it natively, here's the
		branch that will hopefully accepted upstream soon:
		https://github.com/lxin/net-next/commits/quic/
		For the client side there's a fallback to the userspace ngtcp2
		library if the quic kernel module is not available.
		Check the smb.conf manpage for additional hints
		about the "client smb transports" and "server smb transport"
		options and interactions with tls related options.
	    Modern write time update logic
		Samba 4.23 changes file timestamp handling to match modern Windows
		servers.
		Earlier releases used delayed write time updates, where
		last_write_time was
		only refreshed after a short idle period. Now Samba applies immediate
		timestamp updates consistent with modern Windows 10/Server 2016 or newer.
	    Initial version of smb_prometheus_endpoint
		Samba 4.23 introduces the smb_prometheus_endpoint utility, which exports
		Samba server metrics in Prometheus-compatible format. This enables
		seamless
		integration of Samba performance and status monitoring into existing
		Prometheus and Grafana environments. For usage and configuration details,
		refer to the new smb_prometheus_endpoint man page.
	    samba-tool domain backup --no-secrets avoids confidential attributes
		The --no-secrets option creates a back-up without secret attributes
		(e.g. passwords), suitable for use in a lab domain. Until now it could
		still contain confidential attributes, including BitLocker recovery
		data and KDS root keys. Objects in the classes msKds-ProvRootKey,
		msFVE-RecoveryInformation, and msTPM-InformationObject will now be
		entirely removed from the backup, as these objects are required by
		schema to have confidential attributes and are no use without them.
	    CTDB changes
		CTDB now supports loading tunables from
		/etc/ctdb/tunables.d/*.tunables, in addition to the standard
		/etc/ctdb/tunables.conf.  See the ctdb-tunables(7) manual page for
		more details.  Note that the above locations are examples - the
		actual location of these files will depend on compile time
		configuration.
		It isn't expected that many users will require a directory of tunables
		files, since most users do not need to change tunables from their
		default values.  However, this allows vendors to ship their required
		tunables settings (for example, in one or more files marked "do not
		edit") while still allowing local administrators to add their own
		tunables settings (in one or more separate files).
	    Per-share profiling stats
		Starting with Samba 4.23, users can collect profile counters at a
		per-share level. This feature requires building Samba with profiling
		data enabled and adding an appropriate `smb.conf` parameter for
		specific shares. It's particularly useful for deployments with a large
		number of active shares, allowing administrators to monitor individual
		share activity and identify potential bottlenecks or hot-spots. When
		enabled, users can inspect current per-share profile information
		("Extended Profile") using the standard `smbstatus` utility.
		Currently, this functionality is supported only by the default and
		`ceph_new` VFS modules.
	smb.conf changes
	  Parameter Name                          Description     Default
	  --------------                          -----------     -------
	  smbd profiling share                    New             no
	  client smb transports                   New             tcp, nbt
	  server smb transports                   New             tcp, nbt
	  winbind varlink service                 New             no
	Bugs
	   * BUG 15911: samba.tests.safe_tarfile fails on Python 3.13 with additional
	     security fixes for tarfile support.
	   * BUG 15904: CTDB does not support PCP 7.0.0.
	   * BUG 15905: samba-4.21 fails to join AD when multiple DCs are returned.
	   * BUG 15908: Uninitialized read leads to hanging rpcd_spoolss.
	   * BUG 15905: samba-4.21 fails to join AD when multiple DCs are returned.
	   * BUG 15907: Stack buffer overflow in samba3.smb2.dirlease.fileserver.
	   * BUG 15902: Regression in gssproxy support in 4.23.rc1+.
	   * BUG 15900: 'net ads group' failed to list domain groups.
	   * BUG 15843: macOS Finder client DFS broken on 4.22.0.
	   * BUG 15899: Self-signed certificates don't have X509v3 Subject Alternative
	     Name for DNS.
	   * BUG 15893: Improve handling of principals and realms in client tools.
	   * BUG 15896: libquic build fixes.
	   * BUG 15844: getpwuid does not shift to new DC when current DC is down.
	   * BUG 15876: Windows security hardening locks out schannel'ed netlogon dc
	     calls like netr_DsRGetDCName.
	   * BUG 15896: libquic build fixes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/packages/aarch64/samba | 45 +++++++++++++++++++++++--
 config/rootfiles/packages/riscv64/samba | 45 +++++++++++++++++++++++--
 config/rootfiles/packages/x86_64/samba  | 45 +++++++++++++++++++++++--
 lfs/samba                               |  6 ++--
 4 files changed, 129 insertions(+), 12 deletions(-)

Message ID	20251008202846.67902-1-adolf.belka@ipfire.org
State	Staged
Commit	efcb1f53877a1ccf2e56682f91ee743025144873
Headers	From: Adolf Belka <adolf.belka@ipfire.org> To: development@lists.ipfire.org Cc: Adolf Belka <adolf.belka@ipfire.org> Subject: [PATCH] samba: Update to version 4.23.1 Date: Wed, 8 Oct 2025 22:28:46 +0200 Message-ID: <20251008202846.67902-1-adolf.belka@ipfire.org> Precedence: list Sender: <development@lists.ipfire.org> Mail-Followup-To: <development@lists.ipfire.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	samba: Update to version 4.23.1 \| samba: Update to version 4.23.1

samba: Update to version 4.23.1

Commit Message

Patch