<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style='--code-editor-font: var(--default-mono-font, "GitLab Mono"), JetBrains Mono, Menlo, DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: .875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,.01) 0 0 1px;
}
body {
font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,.01) 0 0 1px; font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>
<div class="content">
<h3 style="margin-top: 20px; margin-bottom: 10px;">
Michael Tokarev pushed to branch master at <a href="https://salsa.debian.org/samba-team/samba">Debian Samba Team / samba</a>
</h3>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/3f4bcfa3358d5c25e44498946a5a5a03b8d94dd8">3f4bcfa3</a></strong>
<div>
<span> by Björn Jacke </span> <i> at 2026-04-17T09:20:42+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>VERSION: Bump version up to Samba 4.24.2...
and re-enable GIT_SNAPSHOT.
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/2cbb70f8391301573b0d6b87e93c067395e61336">2cbb70f8</a></strong>
<div>
<span> by Stefan Metzmacher </span> <i> at 2026-04-27T12:42:40+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>third_party/ngtcp2: import v1.22.1 for CVE-2026-40170
For CVE-2026-40170 see:
https://github.com/ngtcp2/ngtcp2/security/advisories/GHSA-f523-465f-8c8f
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16059
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit 706dc118b3bdbe03ada53939c1634ab13c91455a)
Autobuild-User(v4-24-test): Björn Jacke <bjacke@samba.org>
Autobuild-Date(v4-24-test): Mon Apr 27 12:42:40 UTC 2026 on atb-devel-224
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/093516761f923cd5a6c185f65ef12a6c3832e894">09351676</a></strong>
<div>
<span> by Stefan Metzmacher </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:smb2_server: failing lease/oplock breaks should call smbd_server_connection_terminate()
If there's a problem sending a lease break we need to
call smbd_server_connection_terminate(xconn).
Currently we only called smbXsrv_connection_disconnect_transport(),
which only closes the low level socket, but it doesn't
cleanup smbXsrv_connection and in case of the last connection
for the smbXsrv_client, so we leave the stale structures and
the stale process behind.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15995
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 734481e2aa9c9bb20fc9bc8734eba85d2f61be72)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/7fc82a5945729c53769417d7f67dc4d5a941bf00">7fc82a59</a></strong>
<div>
<span> by Pavel Filipenský </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:libnet: Fix DC numeric ip handling
This is fixing regression introduced via 82f53c8
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15999
Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit a6938e9fdf59094da359637eb1f7e847a531ba2e)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/932b05ae0e2b36189435ef80ecaa0d21949003fe">932b05ae</a></strong>
<div>
<span> by Pavel Filipenský </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:libads: Allow to specify 'dns_lookup_kdc' in krb5.conf
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15999
Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit 689f9d49c3715240a28d9d898c6b83be4ee18971)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/69d016d34b6aff281ff0482713ba73bf5adb7073">69d016d3</a></strong>
<div>
<span> by Pavel Filipenský </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:libads: Set dns_lookup_kdc=false during net ads join
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15999
Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Pavel Filipensky <pfilipensky@samba.org>
Autobuild-Date(master): Tue Apr 7 14:09:40 UTC 2026 on atb-devel-224
(cherry picked from commit 3459eeb20ea54f4f412ec3d1fe3d9e98b94e1ca4)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/a820412c178db475284f73b806406fcbe2ebca14">a820412c</a></strong>
<div>
<span> by Pavel Filipenský </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbdotconf: Add "automount fs types" to smb.conf
This adds a new global parameter "automount fs types" that allows
administrators to configure additional filesystem types that should
trigger automounting, beyond the always-supported autofs filesystem.
To enable 'samba unaware FS' automounting, add:
automount fs types = 0x12345678
This allows e.g. ZFS snapshots in <dataset root>/.zfs/snapshot to be
mounted. To find out the magic number that is not listed
in /usr/include/linux/magic.h, run:
stat -f -c '0x%t' /path/to/mountpoint
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15991
Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Samuel Cabrero <scabrero@samba.org>
Autobuild-User(master): Pavel Filipensky <pfilipensky@samba.org>
Autobuild-Date(master): Mon Apr 20 19:57:42 UTC 2026 on atb-devel-224
(cherry picked from commit 45b6cd3852949e74ea4a26e5d5e9c0eee97c3b27)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/4a44dbcb6b12aa23703c6b890387cc6eb5c21306">4a44dbcb</a></strong>
<div>
<span> by Stefan Metzmacher </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:winbindd: let init_dc_connection_rpc() fail if domain->dcname is still NULL
This can happen on a DC itself trying to talk to itself,
which is currently not expected.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15973
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 38a9910ac99a015a3dac76b93f02d16e140c05e6)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/a4e5227a5d5e8fb4bd08e70e0435b7371af58e6c">a4e5227a</a></strong>
<div>
<span> by Stefan Metzmacher </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:winbindd: replace smbXcli_conn_remote_{name,sockaddr}() with domain->{dcname,dcaddr}
domain->conn.cli might be NULL, so we should not deference it.
init_dc_connection_rpc() already checks that domain->dcname is not
NULL...
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15973
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 34c4ab4c610960ba587659e077608778970363a0)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/55cebee139a4fb20b116e8bf76190cb4bf014ddc">55cebee1</a></strong>
<div>
<span> by Stefan Metzmacher </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:winbindd: let wb_irpc_SamLogon reject the local domain as RWDC
If the clients use a subdomain of our domain the
'sam' auth backend passed the request along to
the 'winbind' auth backend. If winbindd tries
to use the local domain we hit the case that
an unknown domain was used. So we need to
bounce the request back to 'sam_ignoredomain'.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15973
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Tue Apr 28 11:49:16 UTC 2026 on atb-devel-224
(cherry picked from commit b4e612725f9fe11f1791bd170cef8b0dade45ba6)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/947903170c1e62d9adcb40797fb74cf2bf8f4c64">94790317</a></strong>
<div>
<span> by Shachar Sharon </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-server: Fix use-after-free bug
When 'rev_hdl->fde' is NULL due to failure in tevent_add_fd bail-out
with free-and-error in order to avoid pointer dereferencing 'rev_hdl'
after it is freed.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16068
Signed-off-by: Shachar Sharon <ssharon@redhat.com>
Reviewed-by: Martin Schwenke <martin@meltin.net>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Vinit Agnihotri <vagnihot@redhat.com>
Reviewed-by: Avan Thakkar <athakkar@redhat.com>
(cherry picked from commit 88e09693a434d06ab57b14c1c1afe5996422ca0a)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/030c6f178f888ea28eca8e2e9e49e5dd56e15d44">030c6f17</a></strong>
<div>
<span> by Shachar Sharon </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ctdb-server: Cleanup child resources via local helper
Define 'revokechild_finish' as resource cleanup helper. Call it either
via destructor (normal case) or upon allocation failure.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16068
Signed-off-by: Shachar Sharon <ssharon@redhat.com>
Reviewed-by: Martin Schwenke <martin@meltin.net>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Vinit Agnihotri <vagnihot@redhat.com>
Reviewed-by: Avan Thakkar <athakkar@redhat.com>
Autobuild-User(master): Martin Schwenke <martins@samba.org>
Autobuild-Date(master): Wed May 6 05:28:48 UTC 2026 on atb-devel-224
(cherry picked from commit 67f139ad28c6a771bac488b09d52dda81f3ffe81)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/39ac153d568c0dcb166f3fe16c6870cc82bfd704">39ac153d</a></strong>
<div>
<span> by Thales Antunes de Oliveira Barretto </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>vfs_glusterfs: fix directory fd leak via FSP extension destructor
When Samba closes a directory backed by vfs_glusterfs, the glfs_fd_t
opened by vfs_gluster_openat() is never closed. This leaks one
libgfapi file descriptor and one server-side fd_t in glusterfsd per
directory open/close cycle. With persistent SMB2 connections the
leak is unbounded and drives monotonic RSS growth on the GlusterFS
brick process.
The leak happens because vfs_glusterfs creates two independent
glfs_fd_t handles per directory: one via glfs_open() in
vfs_gluster_openat(), stored in the FSP extension, and another via
glfs_opendir() in vfs_gluster_fdopendir(), tracked by struct smb_Dir.
On close, smb_Dir_destructor() closes the opendir handle and sets the
pathref fd to -1. fd_close() then returns early without calling
SMB_VFS_CLOSE, so vfs_gluster_close() never runs and the glfs_open()
handle is orphaned. The original code passed NULL as the destroy
callback to VFS_ADD_FSP_EXTENSION, so there was no safety net.
The default VFS does not have this problem because fdopendir(3) wraps
the existing kernel fd rather than opening a new handle. libgfapi
has no equivalent -- glfs_opendir() always creates an independent
handle by path. The actual glfs_fd_t is stored in the FSP extension,
not in fsp->fh->fd (which holds a sentinel value), so Samba's generic
close path cannot reach it.
Register vfs_gluster_fsp_ext_destroy() as the FSP extension destroy
callback. It calls glfs_close() on the stored pointer and is invoked
by vfs_remove_all_fsp_extensions() during file_free(), which runs
unconditionally for every fsp. In the explicit close path,
vfs_gluster_close() NULLs the extension pointer before calling
VFS_REMOVE_FSP_EXTENSION to prevent double-close. This follows the
same pattern used by vfs_ceph_new.c (vfs_ceph_fsp_ext_destroy_cb).
Observed on a production file server with persistent SMB2 connections
and continuous directory operations. GlusterFS brick statedumps
showed fd_t pool growth from 1,993 to 80,350 active instances over
6 days, roughly 13,000 leaked fds per day per brick.
RN: Fix a directory file descriptor leak in vfs_glusterfs that caused
unbounded memory growth on the GlusterFS brick with persistent SMB2
connections.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16043
Signed-off-by: Thales Antunes de Oliveira Barretto <thales.barretto.git@gmail.com>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Wed Apr 8 16:46:12 UTC 2026 on atb-devel-224
(cherry picked from commit e7c1c49e647adeaf2c6dda0d42f48305c0a5bc58)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/bdcbfd011435b472416f374700288d94f4472607">bdcbfd01</a></strong>
<div>
<span> by Ralph Boehme </span> <i> at 2026-05-12T13:30:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbtorture: rename test smb2.maximum_allowed.read_only to smb2.maximum_allowed.read_only_file
Soon going to add another test for directories called smb2.maximum_allowed.read_only_dir.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16030
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 605542e58fb3c436d4a5c0aa5b6b430d135ac7ff)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/00b563f9a039fefc77fd02912bffcd2fed639bcf">00b563f9</a></strong>
<div>
<span> by Ralph Boehme </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbtorture: add additional checks to smb2.maximum_allowed.read_only_file
Prooves that:
- the "MxAC" context response actually ignores FILE_ATTRIBUTE_READONLY,
- actuall effective access rights honor FILE_ATTRIBUTE_READONLY (using
RAW_FILEINFO_ACCESS_INFORMATION getinfo level),
- attempting to write to a file with FILE_ATTRIBUTE_READONLY fails.
Test passed against Windows, fails against both s3 and s4 servers. Skipping the
ad_dc_ntvfs test in the future, I'm not going to fix that.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16030
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 878e7975de17b5c8218cb2c44b44d8a8fac4f073)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/4aa894bb2ad780f4d6918652ab3a7edfeaef3b48">4aa894bb</a></strong>
<div>
<span> by Ralph Boehme </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbtorture: add test smb2.maximum_allowed.read_only_dir
Verifies that FILE_ATTRIBUTE_READONLY is effectively ignored on directories.
Passes against Windows, fails against Samba: Samba enforces read-only access in
fsp->access_mask and "MxAC" create context response for directories with
FILE_ATTRIBUTE_READONLY. This is wrong, Windows doesn't do this.
Note that MS-FSA doesn't quite has all these details right, the correct
behaviour was taken from a modern Windows server.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16030
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit b6d53b25e2788473e3cec483bc6a4220cc9641c1)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/db0479d0bb03eec397d1721e9e6814b999bcbff3">db0479d0</a></strong>
<div>
<span> by Ralph Boehme </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: split read-only checks in smbd_calculate_maximum_allowed_access_fsp()
Prepares for adjusting the permission when the FILE_ATTRIBUTE_READONLY is set in
the next commmit.
No change in behaviour.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16030
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 671c7bb4dc9c7142b7eeaa673b6cc692b5b67425)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/a1650af4e049dc9cea87aac13cd0fd185ba8cd81">a1650af4</a></strong>
<div>
<span> by Ralph Boehme </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: ignore FILE_ATTRIBUTE_READONLY for the "MxAC" create context
As much as I dislike adding a boolean parameter to control this behaviour, I
don't see a different clean way to do it.
Note that I'm not touching the case where the share is realy-only, I just don't
want to open that additional can of worms now and instead focus on fixing the
FILE_ATTRIBUTE_READONLY case.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16030
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 03fa9d035d0bd657eaf46abfd8bedf93681a4338)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/52842a7e1907dc9e1823766027ec8d59910416d7">52842a7e</a></strong>
<div>
<span> by Ralph Boehme </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: apply read-only attribute access restrictions only to files
Also mask off the exact access rights given in MS_FSA 2.1.5.1.2.1 "Algorithm to
Check Access to an Existing File".
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16030
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 2a1b8321af1755fa424eec8c3931f167a8399127)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/38c1de92b4f4cb6ee03f552b0131c4e53961878b">38c1de92</a></strong>
<div>
<span> by Ralph Boehme </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>smbd: do S_ISDIR check even earlier
Doing this in open_file() is too late, as when the client requests an open with
SEC_FLAG_MAXIMUM_ALLOWED on a directory that has FILE_ATTRIBUTE_READ_ONLY set,
this will currently trigger an NT_STATUS_ACCESS_DENIED by the following code in
open_file_ntcreate() if the ACL grants write access to the user:
if (((flags & O_ACCMODE) != O_RDONLY) && file_existed &&
(!CAN_WRITE(conn) ||
(existing_dos_attributes & FILE_ATTRIBUTE_READONLY))) {
DEBUG(5,("open_file_ntcreate: write access requested for "
"file %s on read only %s\n",
smb_fname_str_dbg(smb_fname),
!CAN_WRITE(conn) ? "share" : "file" ));
return NT_STATUS_ACCESS_DENIED;
}
Fixes this bug, but should otherwise cause no change in behaviour.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16030
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Apr 29 12:00:18 UTC 2026 on atb-devel-224
(cherry picked from commit 4ab12a63a4aa4f3625bc3e81817d0169c9b2766e)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/44db581bb24b59085de56a7d8ba37eefaf1bee23">44db581b</a></strong>
<div>
<span> by Vinit Agnihotri </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>printing: Set default value in case of non-exisiting record
This fixes regression caused by commit#e9a7dce599
Newly added function treats non-existing record as error, instead of
setting just -1 i.e. default value for non-exisiting record for
printing subsystem. This results into print_cache_expired returning
incorrect status.
Fix sets default value in case of non-exisiting record
which would ensure print_cache_expired to return correct status.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16038
Signed-off-by: Vinit Agnihotri <vagnihot@redhat.com>
Reviewed-by: Rabinarayan Panigrahi <rapanigr@redhat.com>
Reviewed-by: Avan Thakkar <athakkar@redhat.com>
Reviewed-by: Xavi Hernandez <xhernandez@redhat.com>
Reviewed-by: Anoop C S <anoopcs@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
(cherry picked from commit f3b1ce2f372d6d118df9f7fdaaae7e8db7759af9)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/4b8ec478215551f5aa84d8a6f61ceea78c3ca21e">4b8ec478</a></strong>
<div>
<span> by Stefan Metzmacher </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pam_winbind: only chown the home directory if it was created
Otherwise we may change the permission for '/'
if some systemuser (e.g. nobody) has no homedir and root
runs 'su - nobody'.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16073
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Bjoern Jacke <bjacke@samba.org>
Autobuild-User(master): Björn Jacke <bjacke@samba.org>
Autobuild-Date(master): Sun May 10 23:22:27 UTC 2026 on atb-devel-224
(cherry picked from commit 79caa6ef08b9b333e17bb0762e95e18e250db463)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/11bb0401497dac6c79e4c8e7c8d565648cf2a0a9">11bb0401</a></strong>
<div>
<span> by Stefan Metzmacher </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:winbindd: ignore unsupported anonymous smb sessions for AD trusts
This is handles the cases where a DC has
'Require NTLMv2 session security' activated which
disables anonymous NTLMSSP and let the server return
NT_STATUS_NOT_SUPPORTED.
Similar problems happen with a Samba DC that
uses 'restrict anonymous = 2' and the
tcon to ipc$ fails with NT_STATUS_ACCESS_DENIED.
For active directory related trusts we only use
ncacn_ip_tcp (or ncalrpc), so there's no need for
a valid smb connection.
Historically it very hard to restructure the code
in order to only connect smb for ncacn_np, so
this is more a hack to let us work in real world
scenarios.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14638
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16067
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Bjoern Jacke <bjacke@samba.org>
(cherry picked from commit c63880a1ec3e930dca1a511f4610a94483418e01)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/64a29e9da8192b015b57f7baffeaf85d79d145de">64a29e9d</a></strong>
<div>
<span> by Andreas Schneider </span> <i> at 2026-05-12T13:30:03+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>s3:winbind: Do not fallback to NCACN_NP Netlogon/LSA connections for AD domains
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15987
Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Pavel Filipenský <pfilipensky@samba.org>
Autobuild-User(master): Pavel Filipensky <pfilipensky@samba.org>
Autobuild-Date(master): Mon May 11 21:24:02 UTC 2026 on atb-devel-224
(cherry picked from commit 33628fd9da56afc0fa1a480b7df2f73e4e0d3664)
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/d09632b59578d7ffa2daa41f0e5ade3e60acca1b">d09632b5</a></strong>
<div>
<span> by Björn Jacke </span> <i> at 2026-05-12T14:56:02+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>samba-tool: fix documentation for timestamp format specifiers
BUG: https://bugzilla.samba.org/show_bug.cgi?id=16076
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
Reviewed-by: Björn Baumbach <bb@sernet.de>
Autobuild-User(master): Björn Jacke <bjacke@samba.org>
Autobuild-Date(master): Tue May 12 11:19:12 UTC 2026 on atb-devel-224
(cherry picked from commit 66fec3d4ff0981456e8548ef8497a5137bbfa755)
Autobuild-User(v4-24-test): Björn Jacke <bjacke@samba.org>
Autobuild-Date(v4-24-test): Tue May 12 14:56:02 UTC 2026 on atb-devel-224
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/fe7e5655b7e9d2adcafbc6905b500d8eeb22652f">fe7e5655</a></strong>
<div>
<span> by Björn Jacke </span> <i> at 2026-05-12T17:36:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>WHATSNEW: Add release notes for Samba 4.24.2.
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/28e8044b08d678da5209ceff0d8b160dcb85a927">28e8044b</a></strong>
<div>
<span> by Björn Jacke </span> <i> at 2026-05-12T17:37:09+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>VERSION: Disable GIT_SNAPSHOT for the 4.24.2 release.
Signed-off-by: Bjoern Jacke <bjacke@samba.org>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/963851ef0c9197179fe48032682949d2ddc7e1aa">963851ef</a></strong>
<div>
<span> by Michael Tokarev </span> <i> at 2026-05-12T21:09:21+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>New upstream version 4.24.2+dfsg</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/7e3bd078643cffe82db5cc3bc9425e02e9504b76">7e3bd078</a></strong>
<div>
<span> by Michael Tokarev </span> <i> at 2026-05-12T21:09:38+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update upstream source from tag 'upstream/4.24.2+dfsg'
Update to upstream version '4.24.2+dfsg'
with Debian dir d4fbe2de639297d53e4e6239c4d50ef85180a69e</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/samba-team/samba/-/commit/ad752af863f8e4390e42c45c52ae0b7ca813b82c">ad752af8</a></strong>
<div>
<span> by Michael Tokarev </span> <i> at 2026-05-12T21:59:42+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>update changelog; upload version 4.24.2+dfsg-1 to unstable
</pre>
</li>
</ul>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
122 changed files:
</h4>
<ul>
<li class="file-stats">
<a href="#b33892fbddeffc3368077b4904ad0b3d562a7312">
VERSION
</a>
</li>
<li class="file-stats">
<a href="#3277e12b5a9f9ff632d229e2629d34ad21dd93fc">
WHATSNEW.txt
</a>
</li>
<li class="file-stats">
<a href="#c3b662b094820a17ad72c30309e8f365796ba752">
ctdb/server/ctdb_call.c
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#955386add673f2fa4c171789e40131c704577e19">
<span class="new-file">
+
docs-xml/smbdotconf/misc/automountfstypes.xml
</span>
</a>
</li>
<li class="file-stats">
<a href="#5f61f6e699617df0af98b5c0d7393f484faf9b38">
nsswitch/pam_winbind.c
</a>
</li>
<li class="file-stats">
<a href="#0577a33820424aa6fe5dbaf90750119b3ff4bf73">
python/samba/netcmd/user/readpasswords/show.py
</a>
</li>
<li class="file-stats">
<a href="#6bad6533dceecddb7eb9f5ba5cb0adb59d8b5b76">
source3/libads/kerberos.c
</a>
</li>
<li class="file-stats">
<a href="#f78ac141ac2901bdbffa5a7e1ba17e818deb4269">
source3/libads/kerberos_proto.h
</a>
</li>
<li class="file-stats">
<a href="#9560cf772d78520ae688f3a4ad5e43dcd73326ff">
source3/libnet/libnet_join.c
</a>
</li>
<li class="file-stats">
<a href="#de272e41020803c6c04714ec2c5d6129fd24156d">
source3/modules/vfs_fruit.c
</a>
</li>
<li class="file-stats">
<a href="#58968b24119b9fa720393c3f78f2749b78481f3b">
source3/modules/vfs_glusterfs.c
</a>
</li>
<li class="file-stats">
<a href="#d488e7c9942e60214fd324474a7cbeda5f5f4b42">
source3/printing/printing.c
</a>
</li>
<li class="file-stats">
<a href="#861f4e58dabe6ff8349ec4f9814fcbb5be66254f">
source3/smbd/fake_file.c
</a>
</li>
<li class="file-stats">
<a href="#d8765a4ff0384cecc02e8f4154b5989ecdb90b54">
source3/smbd/globals.h
</a>
</li>
<li class="file-stats">
<a href="#cb35322cba274bba745ad976e2f2b6e72579b505">
source3/smbd/open.c
</a>
</li>
<li class="file-stats">
<a href="#70ba97a4a23a684e3a00fa0afc68738289ea8a56">
source3/smbd/smb2_create.c
</a>
</li>
<li class="file-stats">
<a href="#6e11d2c1de3ab8d9248906d69f0412e7c22b0375">
source3/smbd/smb2_server.c
</a>
</li>
<li class="file-stats">
<a href="#ecb88926e519371a03e0d98456ef6a6519915096">
source3/winbindd/winbindd.h
</a>
</li>
<li class="file-stats">
<a href="#8b75f4bec7b2adf118a2b30bcb6d5cce4e7eca73">
source3/winbindd/winbindd_cm.c
</a>
</li>
<li class="file-stats">
<a href="#276a167bc206d1efd7f0aace5810b7e405515d0b">
source3/winbindd/winbindd_irpc.c
</a>
</li>
<li class="file-stats">
<a href="#6e579c36b1d921af6550d6dd8e05d0a4875efafa">
source4/selftest/tests.py
</a>
</li>
<li class="file-stats">
<a href="#bb1f1873cf946e37ff6ad8b0dc3a7647cf5b4534">
source4/torture/smb2/max_allowed.c
</a>
</li>
<li class="file-stats">
<a href="#3663699e650b3db4472212e4af8c5ce213703b12">
third_party/ngtcp2/crypto/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#ee54eae3086c09225e374268cd5f8ae5075c64bd">
third_party/ngtcp2/crypto/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#fc9f3d5d1fd589c7cd51f378a78f56687ad0af9f">
third_party/ngtcp2/crypto/boringssl/boringssl.c
</a>
</li>
<li class="file-stats">
<a href="#539bd562043d88098609c948c95df81fb51d7080">
third_party/ngtcp2/crypto/boringssl/libngtcp2_crypto_boringssl.pc.in
</a>
</li>
<li class="file-stats">
<a href="#757068b6181fb8a14788f19d848911d204bfa124">
third_party/ngtcp2/crypto/gnutls/gnutls.c
</a>
</li>
<li class="file-stats">
<a href="#1a9f18207537df4b457fc0ab984e53e518e6a8df">
third_party/ngtcp2/crypto/gnutls/libngtcp2_crypto_gnutls.pc.in
</a>
</li>
<li class="file-stats">
<a href="#ea2c54d86c6c97098e5e3b5fa8c725a8acb191ba">
third_party/ngtcp2/crypto/includes/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#651f9b96f54917f694ae14f001c6f16ca83698b5">
third_party/ngtcp2/crypto/includes/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#482a5cc58d2cac6bb6cc8eab4159b67a7d644694">
third_party/ngtcp2/crypto/includes/ngtcp2/ngtcp2_crypto.h
</a>
</li>
<li class="file-stats">
<a href="#a6642da79d162169339dfb03c8c5d1964e5b9d37">
third_party/ngtcp2/crypto/ossl/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#33506bc24716418901ee7ef36adb927de9261f4c">
third_party/ngtcp2/crypto/ossl/libngtcp2_crypto_ossl.pc.in
</a>
</li>
<li class="file-stats">
<a href="#3540cfc895cbbb1606288e202eebc8e1a14d4da2">
third_party/ngtcp2/crypto/ossl/ossl.c
</a>
</li>
<li class="file-stats">
<a href="#e20b4515801deb981c3026abb42502948ef07f81">
third_party/ngtcp2/crypto/picotls/libngtcp2_crypto_picotls.pc.in
</a>
</li>
<li class="file-stats">
<a href="#c9d4fcef1efab416b1a32a118a3f0c3c24dffe96">
third_party/ngtcp2/crypto/picotls/picotls.c
</a>
</li>
<li class="file-stats">
<a href="#aaba6b15885fec029dfdd4bc014929ee76fadecd">
third_party/ngtcp2/crypto/quictls/.gitignore
</a>
</li>
<li class="file-stats">
<a href="#12b28749c0a6fc1772d46782f5b56f57bbdb76b8">
third_party/ngtcp2/crypto/quictls/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#0ee399c8589d413fd4ae475f01428aba6a5fb792">
third_party/ngtcp2/crypto/quictls/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#7b95a080e4730c09904c0b90819038858c5ff70a">
<span class="new-file">
+
third_party/ngtcp2/crypto/quictls/libngtcp2_crypto_libressl.pc.in
</span>
</a>
</li>
<li class="file-stats">
<a href="#95463b8c08e5dd6998d009561425c1be90f6a125">
third_party/ngtcp2/crypto/quictls/libngtcp2_crypto_quictls.pc.in
</a>
</li>
<li class="file-stats">
<a href="#49f48e37f955dc620ed1658d9488535a79d1b086">
third_party/ngtcp2/crypto/quictls/quictls.c
</a>
</li>
<li class="file-stats">
<a href="#0ac665348dc38fb6a3c68a1c1abd67e773f3a8b3">
third_party/ngtcp2/crypto/shared.c
</a>
</li>
<li class="file-stats">
<a href="#26b8fe5495853495536607940f2e4d89abef6bfd">
third_party/ngtcp2/crypto/shared.h
</a>
</li>
<li class="file-stats">
<a href="#2a59f8fda95b42c533e2ffdaf947b32bbe982145">
third_party/ngtcp2/crypto/wolfssl/libngtcp2_crypto_wolfssl.pc.in
</a>
</li>
<li class="file-stats">
<a href="#d9c27376bed89adc7438219568d2585e9d03f669">
third_party/ngtcp2/crypto/wolfssl/wolfssl.c
</a>
</li>
<li class="file-stats">
<a href="#f18fd243b180470a7d011483aebd424efa81d350">
third_party/ngtcp2/lib/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#af3eba3b58338b322935d2ce1213c5790968fd8b">
third_party/ngtcp2/lib/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#4afdddd8848169a39db6d6e591c88fe218c98b83">
third_party/ngtcp2/lib/config.cmake.in
</a>
</li>
<li class="file-stats">
<a href="#bbce355898686f206de7ec9b0e85f0f5208f191e">
third_party/ngtcp2/lib/includes/ngtcp2/ngtcp2.h
</a>
</li>
<li class="file-stats">
<a href="#b1be6b2083fdcf409c62d9eeb7bec92a42f2c499">
third_party/ngtcp2/lib/ngtcp2_acktr.c
</a>
</li>
<li class="file-stats">
<a href="#a8354dc95b0c8213f094763771508af7d096a743">
third_party/ngtcp2/lib/ngtcp2_acktr.h
</a>
</li>
<li class="file-stats">
<a href="#29625654f3f8e350e92e84485c583d9ce71fd50c">
third_party/ngtcp2/lib/ngtcp2_addr.c
</a>
</li>
<li class="file-stats">
<a href="#3cdccee38920ab9ac55c91cae03dd1b157eefd5c">
third_party/ngtcp2/lib/ngtcp2_addr.h
</a>
</li>
<li class="file-stats">
<a href="#26071adee4abf522fa49e68dd5a5c8bf336e3557">
third_party/ngtcp2/lib/ngtcp2_balloc.c
</a>
</li>
<li class="file-stats">
<a href="#519f3da01aaf4b3a3894d8564635b8484776644a">
third_party/ngtcp2/lib/ngtcp2_bbr.c
</a>
</li>
<li class="file-stats">
<a href="#0d5941019693898c4cf52dd96b89a17d06560d61">
third_party/ngtcp2/lib/ngtcp2_bbr.h
</a>
</li>
<li class="file-stats">
<a href="#fd05ece3bdc0c01538357a692e1066c5ea8f7bfc">
third_party/ngtcp2/lib/ngtcp2_buf.c
</a>
</li>
<li class="file-stats">
<a href="#07b9a542df80f70798a530f0efaf5628aa39ae9a">
third_party/ngtcp2/lib/ngtcp2_buf.h
</a>
</li>
<li class="file-stats">
<a href="#3011294d8e0495bf9368020a475cd67889f01e57">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_callbacks.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#19bc279652390cf933ffdd9f84bce9ee9e6d278e">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_callbacks.h
</span>
</a>
</li>
<li class="file-stats">
<a href="#3d2f3cda63c4f629dd28b38d89ca44e42101618a">
third_party/ngtcp2/lib/ngtcp2_cc.c
</a>
</li>
<li class="file-stats">
<a href="#5c5f9610b93e35d59b98e74535f5597291a2c09b">
third_party/ngtcp2/lib/ngtcp2_cc.h
</a>
</li>
<li class="file-stats">
<a href="#25c715d8cdbb10373189594cde986bd2f327d09e">
third_party/ngtcp2/lib/ngtcp2_cid.c
</a>
</li>
<li class="file-stats">
<a href="#1546c479ca35066848a89c4dfc02d25b59b1fb20">
third_party/ngtcp2/lib/ngtcp2_cid.h
</a>
</li>
<li class="file-stats">
<a href="#75380d8aa7aa0eff0bf0d9baadd4cbd14119798f">
third_party/ngtcp2/lib/ngtcp2_conn.c
</a>
</li>
<li class="file-stats">
<a href="#7ae9a944655820037d8d0b5b2e4f8579ffa0d615">
third_party/ngtcp2/lib/ngtcp2_conn.h
</a>
</li>
<li class="file-stats">
<a href="#f4d29b2ec72a27513a1b205edb66b86fa4b4cb52">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_conn_info.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#cff2c8d070e299ee6ed9648e9ee47d4afb3f7587">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_conn_info.h
</span>
</a>
</li>
<li class="file-stats">
<a href="#a53419a34cd81a31aef8fb72b79f4f075a1ed5d9">
third_party/ngtcp2/lib/ngtcp2_conn_stat.h
</a>
</li>
<li class="file-stats">
<a href="#e2db8d294e68b218e48e0dbc341331e22f82f9e0">
third_party/ngtcp2/lib/ngtcp2_conv.c
</a>
</li>
<li class="file-stats">
<a href="#90dd345d2bddb26e793dfc86a76ca4da2866df91">
third_party/ngtcp2/lib/ngtcp2_crypto.c
</a>
</li>
<li class="file-stats">
<a href="#1a7c09dc560a0b4148d122743798c23f54c0e73c">
third_party/ngtcp2/lib/ngtcp2_crypto.h
</a>
</li>
<li class="file-stats">
<a href="#06521a04b1cb6341ad81c9c475e4c1417e66915d">
third_party/ngtcp2/lib/ngtcp2_dcidtr.c
</a>
</li>
<li class="file-stats">
<a href="#65d7328eea5e3c9c0b3cf37ffb939804d095cbcc">
third_party/ngtcp2/lib/ngtcp2_dcidtr.h
</a>
</li>
<li class="file-stats">
<a href="#df6f797ea8cda4964cae1964740d3d1b41c0c334">
third_party/ngtcp2/lib/ngtcp2_frame_chain.c
</a>
</li>
<li class="file-stats">
<a href="#f9d5157956fa631ba7b49eabc6daf41bb83a72b0">
third_party/ngtcp2/lib/ngtcp2_frame_chain.h
</a>
</li>
<li class="file-stats">
<a href="#39f57a9260391c75c6ed9d96654c50109ebe5810">
third_party/ngtcp2/lib/ngtcp2_gaptr.c
</a>
</li>
<li class="file-stats">
<a href="#dee72a699f36edda8acc08f192b88bf00405f208">
third_party/ngtcp2/lib/ngtcp2_ksl.c
</a>
</li>
<li class="file-stats">
<a href="#4c6df269af8b388cf09c40806ba9b4ba026754e1">
third_party/ngtcp2/lib/ngtcp2_ksl.h
</a>
</li>
<li class="file-stats">
<a href="#ea5cfe854a34fa5b509c26e18a00d7e7b4538d43">
third_party/ngtcp2/lib/ngtcp2_log.c
</a>
</li>
<li class="file-stats">
<a href="#3d53f29dce46cc0168978708b46e73e53f26dc9c">
third_party/ngtcp2/lib/ngtcp2_log.h
</a>
</li>
<li class="file-stats">
<a href="#bad4c483278569cd70e1780c584b5af7ba40f1ea">
third_party/ngtcp2/lib/ngtcp2_macro.h
</a>
</li>
<li class="file-stats">
<a href="#4874a35b3330c569713533d5521580859c14ca5a">
third_party/ngtcp2/lib/ngtcp2_map.c
</a>
</li>
<li class="file-stats">
<a href="#20872325a591117c62186fdde92fc1386453947b">
third_party/ngtcp2/lib/ngtcp2_map.h
</a>
</li>
<li class="file-stats">
<a href="#a9d8f0c78bd14102a000f8087f022e51f2da92c7">
third_party/ngtcp2/lib/ngtcp2_net.h
</a>
</li>
<li class="file-stats">
<a href="#50d943f8121be8851ca67f058efd9ff9360ec901">
third_party/ngtcp2/lib/ngtcp2_objalloc.h
</a>
</li>
<li class="file-stats">
<a href="#f70baf608b76643ded00497d797d4c7b593b7866">
third_party/ngtcp2/lib/ngtcp2_path.c
</a>
</li>
<li class="file-stats">
<a href="#f725a44df779e7b8cb672e010b25a2db5e578359">
third_party/ngtcp2/lib/ngtcp2_path.h
</a>
</li>
<li class="file-stats">
<a href="#591ef45b5f594738e15056cf16a3357eb811129a">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_pcg.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#dd368f70717067bd28c31416358ba94640ada73e">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_pcg.h
</span>
</a>
</li>
<li class="file-stats">
<a href="#ed11acfa46a69b085a3dc13975b0b690c871746e">
third_party/ngtcp2/lib/ngtcp2_pkt.c
</a>
</li>
<li class="file-stats">
<a href="#6ee75082e5774cf488c06a512abb1f543e7050ff">
third_party/ngtcp2/lib/ngtcp2_pkt.h
</a>
</li>
<li class="file-stats">
<a href="#67d741c325c47ecb9b85a28ce55be51fe99c9009">
third_party/ngtcp2/lib/ngtcp2_ppe.c
</a>
</li>
<li class="file-stats">
<a href="#158fc9a18bddb3d678a4235b5e4b8c6a70657f77">
third_party/ngtcp2/lib/ngtcp2_pv.c
</a>
</li>
<li class="file-stats">
<a href="#b2b96e674783fd9c61fc343480aa3b213e72946b">
third_party/ngtcp2/lib/ngtcp2_pv.h
</a>
</li>
<li class="file-stats">
<a href="#c51fedd9273153cbc5c8064d988e8c5618708156">
third_party/ngtcp2/lib/ngtcp2_qlog.c
</a>
</li>
<li class="file-stats">
<a href="#9a20aca439576ca9447f0413fc909c422efd172f">
third_party/ngtcp2/lib/ngtcp2_qlog.h
</a>
</li>
<li class="file-stats">
<a href="#f32b7752b3af0a06a45cb965a28f62e302592f48">
third_party/ngtcp2/lib/ngtcp2_range.c
</a>
</li>
<li class="file-stats">
<a href="#9be42d7f884cb614423138cd701c4ffc10d39ea9">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_ratelim.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#dc748be82291322703e49b2d7ecd80c5bfa3b264">
<span class="new-file">
+
third_party/ngtcp2/lib/ngtcp2_ratelim.h
</span>
</a>
</li>
<li class="file-stats">
<a href="#635a84d12270574b232715b02e2ea8613f7354bf">
third_party/ngtcp2/lib/ngtcp2_ringbuf.c
</a>
</li>
<li class="file-stats">
<a href="#044e0dba8082e0746e4d8e7f13fbf5231a3b88c3">
third_party/ngtcp2/lib/ngtcp2_ringbuf.h
</a>
</li>
<li class="file-stats">
<a href="#b1ea3fe8b76370485e2ab7510dd509091b5b27d5">
third_party/ngtcp2/lib/ngtcp2_rob.c
</a>
</li>
<li class="file-stats">
<a href="#7a393af4e37179d20406cbf735930c5509425c3d">
third_party/ngtcp2/lib/ngtcp2_rob.h
</a>
</li>
<li class="file-stats">
<a href="#ddbab6c9db81a063f0b00f5002de3f55422d9480">
third_party/ngtcp2/lib/ngtcp2_rst.c
</a>
</li>
<li class="file-stats">
<a href="#43e5dc6090b46c765871b048db2cf2e3fcc9a045">
third_party/ngtcp2/lib/ngtcp2_rst.h
</a>
</li>
<li class="file-stats">
<a href="#4d42b404f9999c1af247b926dafbf9961896735a">
third_party/ngtcp2/lib/ngtcp2_rtb.c
</a>
</li>
<li class="file-stats">
<a href="#bc0ccc25082d5cfe29d870555a2bd8628b8a9623">
third_party/ngtcp2/lib/ngtcp2_rtb.h
</a>
</li>
<li class="file-stats">
<a href="#e8ee66d3170f6b0f251aa742dc8b2a565eddf5d8">
third_party/ngtcp2/lib/ngtcp2_settings.c
</a>
</li>
<li class="file-stats">
<a href="#5b9ab859c45bcc4d227b885f39f051243ca60337">
third_party/ngtcp2/lib/ngtcp2_settings.h
</a>
</li>
<li class="file-stats">
<a href="#19ee04655b46bab695130e14970a154d16dbf3a3">
third_party/ngtcp2/lib/ngtcp2_str.c
</a>
</li>
<li class="file-stats">
<a href="#87377328df95b64fc38c627301a2fb5392f1b329">
third_party/ngtcp2/lib/ngtcp2_str.h
</a>
</li>
<li class="file-stats">
<a href="#9fd1e456661b269a5af8b25ef8e9ed2f60ce3a77">
third_party/ngtcp2/lib/ngtcp2_strm.c
</a>
</li>
<li class="file-stats">
<a href="#4a942a2e8c9c5b524c3b6b3c19826946d80b28ef">
third_party/ngtcp2/lib/ngtcp2_strm.h
</a>
</li>
<li class="file-stats">
<a href="#35e66d56e928db49a2b156d755267f0141fea875">
third_party/ngtcp2/lib/ngtcp2_transport_params.c
</a>
</li>
<li class="file-stats">
<a href="#d531bc31581eb730a551dcb9f7e8608c017df0f0">
third_party/ngtcp2/lib/ngtcp2_transport_params.h
</a>
</li>
<li class="file-stats">
<a href="#d36aed51d024de304d43339aed4c95c4937b5184">
third_party/ngtcp2/lib/ngtcp2_vec.c
</a>
</li>
<li class="file-stats">
<a href="#8e51207cbe0b0257e70df47354d05c99762d823c">
third_party/ngtcp2/lib/ngtcp2_vec.h
</a>
</li>
<li class="file-stats">
<a href="#828eeb080e268165718f00402976394d0a934875">
third_party/ngtcp2/lib/ngtcp2_window_filter.c
</a>
</li>
<li class="file-stats">
<a href="#90ea2008beeaa656bd24f0348f6b990c94c6daa1">
third_party/ngtcp2/wscript
</a>
</li>
</ul>
<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: .875rem;">
The diff was not included because it is too large.
</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #626168;">
—
<br>
<a href="https://salsa.debian.org/samba-team/samba/-/compare/40b7f0f933dafef448163d87f4eade51c3f3d542...ad752af863f8e4390e42c45c52ae0b7ca813b82c">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
<span style="color: transparent; font-size: 0; display: none; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0;">
Notification message regarding https://salsa.debian.org/samba-team/samba/-/compare/40b7f0f933dafef448163d87f4eade51c3f3d542...ad752af863f8e4390e42c45c52ae0b7ca813b82c at 1778612509
</span>
</p>
</div>
</body>
</html>