[Pkg-samba-maint] Updating the Samba package in Debian

[Andreas Hasenack]

Hi,

On Tue, Jan 11, 2022 at 1:16 PM Mathieu Parent (Debian)
<sathieu at debian.org> wrote:
>
> (can I CC to the pkg-samba list?)

Just did :)

>
> Le jeu. 6 janv. 2022 à 20:29, Sergio Durigan Junior
> <sergiodj at debian.org> a écrit :
> >
> > Hi Mathieu,
>
> Hi Sergio and Andreas,
>
> Sorry for the delay.
>
> > How are you doing?  Hope you had a great holiday.
> >
> > Andreas Hasenack (in Cc) and I were talking earlier today about the
> > Debian samba package, and wondering about whether you have any plans to
> > update it to the latest upstream version (4.15.3, at the time of this
> > writing).  I could not find anything in the salsa repository, but I
> > thought that maybe you have some local WIP branch.
>
> Yes, this is the plan. But I want to get rid of src:ldb first. Having ldb in its
> own package makes security fixes hard because the samba and ldb
> are tightly coupled.

Usually we go in the other direction: move sources *out* of a package.
The security team doesn't like embedded sources whenever possible. Do
you think upstream is also moving in that direction, of stopping
independent development of ldb, or even recommending distributions to
not ship it?

> My current WIP branch is at:
> https://salsa.debian.org/samba-team/samba/-/merge_requests/56
>
> I'm pretty sure this breaks ssd build.

sssd uses ldb, yeah, and doesn't have an embedded (and unused) copy of
ldb, like samba does.


>
> Could you help me on this MR?

I'll take a look at what you are cooking :)

> > We would also like to offer our help to do this version bump, in case
> > you need it.  We are both Canonical employees and are interested in
> > shipping Samba 4.15.x in the next Ubuntu release, but I am also a DD and
> > have an interest in seeing 4.15.x in Debian as well.
>
> This can be done just after ldb is built from samba. Any help here is
> appreciated too.

Ah, you plan to build the ldb debs still, even libldb-dev, but from
src:samba? Ok, let me stop talking and go look at the MR :)