- Update from version 4.21.0 to 4.21.2 - Update of the rootfiles for x86_64, aarch64 & riscv64 - Version 4.21.0 mentioned that LDB is no longer available to build as a distinct tarball. However version 4.21.0 previously built without any problem so it looks like it was still available. Now with version 4.21.2 the lmdb package needs to be available or you have to disable all ldb options. As these options were uncommented in the previous versions of samba, it looks like they are intended to be present. To make this version support in the same way the lmdb package had to be moved so it was built before samba is built. Hence the shift of lmdb in make.sh - Changelog 4.21.2 * BUG 15732: smbd fails to correctly check sharemode against OVERWRITE dispositions. * BUG 15754: Panic in close_directory. * BUG 15752: winexe no longer works with samba 4.21. * BUG 14356: protocol error - Unclear debug message "pad length mismatch" for invalid bind packet. * BUG 15425: NetrGetLogonCapabilities QueryLevel 2 needs to be implemented. * BUG 15740: gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE. * BUG 15749: winbindd should call process_set_title() for locator child. * BUG 15320: Update CTDB to track all TCP connections to public IP addresses. 4.21.1 * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15695: "inherit permissions = yes" triggers assert() in vfs_default when creating a stream. * BUG 15715: Samba 4.21.0 broke FreeIPA domain member integration. * BUG 15692: Missing conversion for msDS-UserTGTLifetime, msDS- ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-tool domain auth policy modify". * BUG 15280: irpc_destructor may crash during shutdown. * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15649: Durable handle is not granted when a previous OPEN exists with NoOplock. * BUG 15651: Durable handle is granted but reconnect fails. * BUG 15708: Disconnected durable handles with RH lease should not be purged by a new non conflicting open. * BUG 15714: net ads testjoin and other commands use the wrong secrets.tdb in a cluster. * BUG 15726: 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as rfc 8009 etypes are used. * BUG 15730: VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2. * BUG 15643: Samba 4.20.0 DLZ module crashes BIND on startup. * BUG 15721: Cannot build libldb lmdb backend on a build without AD DC. * BUG 15706: Consistent log level for sighup handler.

Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/packages/aarch64/samba | 3 +++ config/rootfiles/packages/riscv64/samba | 5 ++++- config/rootfiles/packages/x86_64/samba | 3 +++ lfs/samba | 6 +++--- make.sh | 2 +- 5 files changed, 14 insertions(+), 5 deletions(-)

diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba index cb7407504..c4e585d1d 100644 --- a/config/rootfiles/packages/aarch64/samba +++ b/config/rootfiles/packages/aarch64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-aarch64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-aarch64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-aarch64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/config/rootfiles/packages/riscv64/samba b/config/rootfiles/packages/riscv64/samba index b530ea2b2..3979501e4 100644 --- a/config/rootfiles/packages/riscv64/samba +++ b/config/rootfiles/packages/riscv64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-riscv64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-riscv64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-riscv64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so @@ -1024,4 +1027,4 @@ var/log/samba var/spool/samba srv/web/ipfire/cgi-bin/samba.cgi var/ipfire/menu.d/EX-samba.menu -usr/local/bin/sambactrl \ No newline at end of file +usr/local/bin/sambactrl diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index e720457a3..dc169322e 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-x86_64-linux- usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-x86_64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-x86_64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/lfs/samba b/lfs/samba index 8358264a3..1d5789c5e 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@

include Config

-VER = 4.21.0 +VER = 4.21.2 SUMMARY = A SMB/CIFS File, Print, and Authentication Server

THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 105 +PAK_VER = 106

DEPS = avahi cups perl-Parse-Yapp perl-JSON wsdd

@@ -47,7 +47,7 @@ objects = $(DL_FILE)

$(DL_FILE) = $(DL_FROM)/$(DL_FILE)

-$(DL_FILE)_BLAKE2 = 0889f2be3b78affee88250114397de87a77da77d9674815ec5605780a6bb3e2e28dbbae53b66695196408f4aef550acce793e6397045fbea4bb236fdd095ce1a +$(DL_FILE)_BLAKE2 = f9c297f4ed0c00b7887e637beb6ab7f4e17882e0ed5a3d1f1faf1ae1c2d6b064ada53cf65a86f11237813197c043961735e8aad641630baa48ec259482bdab2a

install : $(TARGET)

diff --git a/make.sh b/make.sh index 35a602f62..031bca80f 100755 --- a/make.sh +++ b/make.sh @@ -1804,6 +1804,7 @@ build_system() { lfsmake2 cifs-utils lfsmake2 krb5 lfsmake2 rpcsvc-proto + lfsmake2 lmdb lfsmake2 samba lfsmake2 netatalk lfsmake2 sudo @@ -2049,7 +2050,6 @@ build_system() { lfsmake2 shairport-sync lfsmake2 libxxhash lfsmake2 borgbackup - lfsmake2 lmdb lfsmake2 knot lfsmake2 spectre-meltdown-checker lfsmake2 zabbix_agentd