[Pkg-samba-maint] [Git][samba-team/samba][upstream_4.22] 46 commits: VERSION: Bump version up to Samba 4.22.7...

Michael Tokarev (@mjt) gitlab at salsa.debian.org
Thu Feb 19 12:20:49 GMT 2026



Michael Tokarev pushed to branch upstream_4.22 at Debian Samba Team / samba


Commits:
69ef72ed by Jule Anger at 2025-10-16T16:26:40+02:00
VERSION: Bump version up to Samba 4.22.7...

and re-enable GIT_SNAPSHOT.

Signed-off-by: Jule Anger <janger at samba.org>

- - - - -
36b489ce by Martin Schwenke at 2025-10-27T13:24:10+00:00
ctdb-daemon: Fix a crash due to a failed updateip

This should really be a takeip.  However, CTDB's weak check of the IP
address state (using bind(2)) incorrectly indicates that the IP
address is assigned to an interface so it is converted to an updateip.

After commit 0536d7a98b832fc00d26b09c26bf14fb63dbf5fb (which improves
IP address state checking), this will almost certainly not occur on
platforms with getifaddrs(3) (e.g. Linux).  This means it is only
likely to occur in 4.21 when net.ipv4.ip_nonlocal_bind=1.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15935

Reported-by: Bailey Allison <ballison at 45drives.com>
Signed-off-by: Martin Schwenke <mschwenke at ddn.com>
Reviewed-by: Anoop C S <anoopcs at samba.org>
(cherry picked from commit d08f9ebd2755671d30c73a4e979029d353848828)

- - - - -
0af32c6b by Martin Schwenke at 2025-10-27T13:24:10+00:00
ctdb-tests: Add an event script unit test for updateip

This illustrates the current failure where an unassigned public IP
address causes updateip to fail.

After commit 0536d7a98b832fc00d26b09c26bf14fb63dbf5fb (which improves
IP address state checking), this will almost certainly not occur on
platforms with getifaddrs(3) (e.g. Linux).  This means it is only
likely to occur in 4.21 when net.ipv4.ip_nonlocal_bind=1.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15935

Reported-by: Bailey Allison <ballison at 45drives.com>
Signed-off-by: Martin Schwenke <mschwenke at ddn.com>
Reviewed-by: Anoop C S <anoopcs at samba.org>
(cherry picked from commit a98ffb96efc4a9ea2110c654860a4ba3896ab3d5)

- - - - -
38938918 by Martin Schwenke at 2025-10-27T13:24:11+00:00
ctdb-scripts: Avoid printing a message if no connections

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15935

Signed-off-by: Martin Schwenke <mschwenke at ddn.com>
Reviewed-by: Anoop C S <anoopcs at samba.org>
(cherry picked from commit 01d3d25c0139a3dd49a2322a9416698d08733377)

- - - - -
c78caf6c by Martin Schwenke at 2025-10-27T14:31:26+00:00
ctdb-scripts: Avoid failing updateip when IP is not assigned

There is no use failing this when it could behave more like takeip.

Use old interface of "__none__" as a hint that ctdbd doesn't think the
IP is assigned either.  In this case print a warning instead of an
error.  Take some care to avoid spurious errors in updateip.

After commit 0536d7a98b832fc00d26b09c26bf14fb63dbf5fb (which improves
IP address state checking), this will almost certainly not occur on
platforms with getifaddrs(3) (e.g. Linux).  This means it is only
likely to occur in 4.21 when net.ipv4.ip_nonlocal_bind=1.

Update test to match.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15935

Reported-by: Bailey Allison <ballison at 45drives.com>
Signed-off-by: Martin Schwenke <mschwenke at ddn.com>
Reviewed-by: Anoop C S <anoopcs at samba.org>

Autobuild-User(master): Anoop C S <anoopcs at samba.org>
Autobuild-Date(master): Fri Oct 17 06:28:30 UTC 2025 on atb-devel-224

(cherry picked from commit 0e73781bf84a1e8e596d8be3f55eeb5f8f927990)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Mon Oct 27 14:31:26 UTC 2025 on atb-devel-224

- - - - -
a22f2a91 by Ralph Boehme at 2025-11-03T12:55:17+00:00
mdssvc: reduce a log level to DEBUG

The expression

  InRange(*,$time.iso(2024-12-31T23:00:00Z),$time.iso(2025-12-31T23:00:00Z))

in a Spotlight query produces the following log message:

  map_fts: Mapping fts [757378800] unexpected op [~]

However, when

    elasticsearch:ignore unknown attribute = yes

is set, the parser will ignore the failed expression and continue
parsing given the expression is part of a larger expression like
"subexpression1 OR subexpression2". Avoid spamming the log and reduce
the loglevel when we hit this case.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15930

Signed-off-by: Ralph Boehme <slow at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>
(cherry picked from commit 3b2b50983901ad5039124b82f149b30675c80a9a)

- - - - -
954b08d1 by Ralph Boehme at 2025-11-03T12:55:17+00:00
mdssvc: add a test for parsing Spotlight date ranges

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15930

Signed-off-by: Ralph Boehme <slow at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>
(cherry picked from commit 1239e5a4c7f5930a4a1b3a6a7a005f4d543a5ea5)

- - - - -
5e797f89 by Ralph Boehme at 2025-11-03T13:59:46+00:00
mdssvc: add support for parsing date ranges

Example:

  InRange(kMDItemContentCreationDate,$time.iso(2024-12-31T23:00:00Z),$time.iso(2025-12-31T23:00:00Z))

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15930

Signed-off-by: Ralph Boehme <slow at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>

Autobuild-User(master): Ralph Böhme <slow at samba.org>
Autobuild-Date(master): Mon Oct 20 10:59:03 UTC 2025 on atb-devel-224

(cherry picked from commit c00de32585bf47ec4753f966fe9ac4dd2fb8f4e7)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Mon Nov  3 13:59:46 UTC 2025 on atb-devel-224

- - - - -
56ff3d96 by Pavel Filipenský at 2025-11-05T09:05:09+00:00
selftest: Add a test for recycle:touch,touch_mtime,keeptree

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15940

Signed-off-by: Pavel Filipenský <pfilipensky at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 498984cf346630c17169dbdb13a232854309f6a8)

- - - - -
cd92005e by Pavel Filipenský at 2025-11-05T09:05:09+00:00
vfs_recycle: Fix trailing whitespace in vfs_recycle.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15940

Signed-off-by: Pavel Filipenský <pfilipensky at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 5124acec34c20391cdfeb9d9005365047b7d7eee)

- - - - -
f318a44c by Pavel Filipenský at 2025-11-05T10:04:58+00:00
vfs_recycle: Make recycle:touch/touch_mtime work again if recycle:keeptree is set

Problem: Since commit c7839fa smbd: Remove non_widelink_open()

the atime/mtime is not updated if recycle:keeptree is set

        recycle:keeptree = yes
        recycle:touch = yes
        recycle:touch_mtime = yes

Cause: recycle_do_touch() fails since the path ".deleted/administrator/./file"
contains a dot '.' - openat_pathref_fsp_nosymlink() loops over all
components and fails if there is a dot:

[2025/10/24 20:09:24.618003, 10, pid=95965, effective(65534, 65534), real(65534, 0)] ../../source3/smbd/files.c:1144(openat_pathref_fsp_nosymlink)
  openat_pathref_fsp_nosymlink: .deleted/administrator/. contains a dot
[2025/10/24 20:09:24.618007,  5, pid=95965, effective(65534, 65534), real(65534, 0)] ../../source3/smbd/files.c:2337(file_free)
  file_free: freed files structure 0 (4 used)
[2025/10/24 20:09:24.618010, 10, pid=95965, effective(65534, 65534), real(65534, 0)] ../../source3/smbd/filename.c:811(filename_convert_dirfsp_nosymlink)
  filename_convert_dirfsp_nosymlink: opening directory .deleted/administrator/. failed: NT_STATUS_OBJECT_NAME_INVALID
[2025/10/24 20:09:24.618014, 10, pid=95965, effective(65534, 65534), real(65534, 0)] ../../source3/smbd/open.c:568(fd_openat)
  fd_openat: filename_convert_dirfsp_rel returned NT_STATUS_OBJECT_PATH_NOT_FOUND
[2025/10/24 20:09:24.618021, 10, pid=95965, effective(65534, 65534), real(65534, 0)] ../../source3/smbd/files.c:487(openat_pathref_fullname)
  openat_pathref_fullname: Opening pathref for [.deleted/administrator/./file] failed: NT_STATUS_OBJECT_NAME_NOT_FOUND

Here is a backtrace when openat_pathref_fsp_nosymlink() hits: DBG_DEBUG("%s contains a dot\n", path_in);

0  openat_pathref_fsp_nosymlink (mem_ctx=0x353463c0, conn=0x35322350, in_dirfsp=0x3532a820, path_in=0x3533afe0 ".trash/.", twrp=0, posix=true, _smb_fname=0x7ffdb25df138, _symlink_err=0x7ffdb25df140) at ../../source3/smbd/files.c:1144
1  filename_convert_dirfsp_nosymlink (mem_ctx=0x353463c0, conn=0x35322350, basedir=0x3532a820, name_in=0x35321a80 ".trash/./mmm", ucf_flags=8, twrp=0, _dirfsp=0x7ffdb25df370, _smb_fname=0x7ffdb25df378, _smb_fname_rel=0x7ffdb25df380, _symlink_err=0x7ffdb25df2d8) at ../../source3/smbd/filename.c:782
2  filename_convert_dirfsp_rel (mem_ctx=0x353463c0, conn=0x35322350, basedir=0x3532a820, name_in=0x35321a80 ".trash/./mmm", ucf_flags=8, twrp=0, _dirfsp=0x7ffdb25df370, _smb_fname=0x7ffdb25df378, _smb_fname_rel=0x7ffdb25df380) at ../../source3/smbd/filename.c:1097
3  fd_openat (dirfsp=0x3532a820, smb_fname=0x35321950, fsp=0x3531b670, _how=0x7ffdb25df4b0) at ../../source3/smbd/open.c:549
4  openat_pathref_fullname (conn=0x35322350, dirfsp=0x3532a820, full_fname=0x7ffdb25df498, smb_fname=0x35321950, how=0x7ffdb25df4b0) at ../../source3/smbd/files.c:437
5  openat_pathref_fsp (dirfsp=0x3532a820, smb_fname=0x35321950) at ../../source3/smbd/files.c:545
6  synthetic_pathref (mem_ctx=0x353463c0, dirfsp=0x3532a820, base_name=0x35346ef0 ".trash/./mmm", stream_name=0x0, psbuf=0x0, twrp=0, flags=0, _smb_fname=0x7ffdb25df578) at ../../source3/smbd/files.c:1871
7  recycle_do_touch (handle=0x35311cb0, smb_fname=0x35346dc0, touch_mtime=true) at ../../source3/modules/vfs_recycle.c:439
8  recycle_unlink_internal (handle=0x35311cb0, dirfsp=0x352592a0, smb_fname=0x35335eb0, flags=0) at ../../source3/modules/vfs_recycle.c:726
9  recycle_unlinkat (handle=0x35311cb0, dirfsp=0x352592a0, smb_fname=0x35335eb0, flags=0) at ../../source3/modules/vfs_recycle.c:746
10 smb_vfs_call_unlinkat (handle=0x35311cb0, dirfsp=0x352592a0, smb_fname=0x35335eb0, flags=0) at ../../source3/smbd/vfs.c:1987
11 close_remove_share_mode (fsp=0x35344a40, close_type=NORMAL_CLOSE) at ../../source3/smbd/close.c:624
12 close_normal_file (req=0x35336eb0, fsp=0x35344a40, close_type=NORMAL_CLOSE) at ../../source3/smbd/close.c:932
13 close_file_smb (req=0x35336eb0, fsp=0x35344a40, close_type=NORMAL_CLOSE) at ../../source3/smbd/close.c:1414

Fix: If the path_name is '.', just do not add it.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15940

Signed-off-by: Pavel Filipenský <pfilipensky at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>

Autobuild-User(master): Pavel Filipensky <pfilipensky at samba.org>
Autobuild-Date(master): Tue Nov  4 11:38:52 UTC 2025 on atb-devel-224

(cherry picked from commit 9bbdfee7f2fdeee3cf530becb2a6f06345627b23)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Wed Nov  5 10:04:58 UTC 2025 on atb-devel-224

- - - - -
fd9de4bd by Volker Lendecke at 2025-11-14T12:42:16+00:00
smbd: Add openat_pathref_fsp_dot()

Very simple reopen of a directory as pathref. Too much magic in
openat_pathref_fsp_lcomp() leads to Bug 15897:
openat_pathref_fsp_lcomp() can return NT_STATUS_OK but still leave the
file descriptor at -1 for msdfs and smb1 posix reasons. When using it
in filename_convert_dirfsp_nosymlink() this bites us, the -1 can leak
into vfswrap_openat(). Avoid any magic by directly calling
SMB_VFS_OPENAT() with maximum NOFOLLOW/etc safety for this use case
and fail when this does not work.

This adds another flavor of openat_pathref_fsp, and at some point we
need to consolidate them again.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15897
Signed-off-by: Volker Lendecke <vl at samba.org>
Reviewed-by: Anoop C S <anoopcs at samba.org>
(cherry picked from commit 83ece80ecc2baa52a3caa0ee3b0f954b005b2268)

- - - - -
b42548e5 by Volker Lendecke at 2025-11-14T12:42:16+00:00
smbd: Fix Bug 15897

Don't leak smb_dirname->fsp->fh->fd == -1 coming from
openat_pathref_fsp_lcomp().

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15897
Signed-off-by: Volker Lendecke <vl at samba.org>
Reviewed-by: Anoop C S <anoopcs at samba.org>

Autobuild-User(master): Volker Lendecke <vl at samba.org>
Autobuild-Date(master): Wed Sep 10 09:37:33 UTC 2025 on atb-devel-224

(cherry picked from commit 7143caeecc856d3326fdc3eb466ef1f37bc564b5)

- - - - -
593b3a43 by Anoop C S at 2025-11-14T14:00:00+00:00
smbd: Fix CID 1665417, UNUSED_VALUE in openat_pathref_fsp_dot()

Rearrange how the open flags are defined so as to make Coverity happy
about it.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15897

Signed-off-by: Anoop C S <anoopcs at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>

Autobuild-User(master): Anoop C S <anoopcs at samba.org>
Autobuild-Date(master): Mon Sep 15 15:44:38 UTC 2025 on atb-devel-224

(cherry picked from commit 1ec54347acac241f900b52c16c2dcba04164e898)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Fri Nov 14 14:00:00 UTC 2025 on atb-devel-224

- - - - -
9ab05f17 by Andreas Schneider at 2025-11-21T13:32:14+00:00
docs-xml: Improve the samba-bgqd manpage

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15809

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Anoop C S <anoopcs at samba.org>

Autobuild-User(master): Andreas Schneider <asn at cryptomilk.org>
Autobuild-Date(master): Fri Nov 14 15:05:11 UTC 2025 on atb-devel-224

(cherry picked from commit 9322231f716237abba8627acda62c279c6a90f4f)

- - - - -
cbe63c13 by Andreas Schneider at 2025-11-21T13:32:14+00:00
s3:printing: Load the shares for [printers] in samba-bgqd

One of the main functions of bgqd is:

        delete_and_reload_printers_full()

It isn't able to do its work, if we don't load the shares. Normally bgqd was
forked from smbd and this loaded the shares. But with the introduction of
samba-dcerpcd it is a standalone service now. As a standalone service it is
responsible to load the shares if it needs to work on them.

The following message is printed if delete_and_reload_printers_full() tries to
do its job:

[2025/10/23 09:57:27,  7, pid=41935, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:4419(lp_servicenumber)
  lp_servicenumber: couldn't find printers
[2025/10/23 09:57:27,  7, pid=41935, effective(0, 0), real(0, 0)] ../../source3/param/loadparm.c:4419(lp_servicenumber)
  lp_servicenumber: couldn't find printers

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15936

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Anoop C S <anoopcs at samba.org>
(cherry picked from commit 327e60adf2e1e0c040bd32c748fbabc9e4a3593b)

- - - - -
ac715e2e by Volker Lendecke at 2025-11-21T14:35:43+00:00
ctdb: Fix ctdb startup with inconsistent cluster lock settings

ctdb_shutdown_sequence() normally exits. When we end up here, it is
because we have received a reclock callback twice. We can't handle
that, we have already removed "state", which would be referenced deep
in run_start_recovery_event() returning here another time.

The bug is triggered since b84fbd7b3fedc998 introduced a nested event
loop, making ctdb_shutdown_sequence() return into
start_recovery_reclock_callback() due to multiple reclock checks being
triggered somehow (not sure exactly how, but we should not crash under
any circumstance).

Reproducer: Run one ctdb daemon with cluster lock set, try to start
another one without cluster lock set.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15950
Signed-off-by: Volker Lendecke <vl at samba.org>
Reviewed-by: Martin Schwenke <martin at meltin.net>

Autobuild-User(master): Martin Schwenke <martins at samba.org>
Autobuild-Date(master): Wed Nov 19 03:04:13 UTC 2025 on atb-devel-224

(cherry picked from commit 66ebdb917054f4841f583ee21f910a1869712b53)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Fri Nov 21 14:35:43 UTC 2025 on atb-devel-224

- - - - -
59200ef1 by Ralph Boehme at 2025-11-26T11:53:16+00:00
mdssvc: support a wider range of years [0000,9999] in $time.iso

Most importantly use strtoll to allow negative numbers and use a filed width
with %Y in strftime() to parse years with less then four digits.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15947

Signed-off-by: Ralph Boehme <slow at samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall at catalyst.net.nz>

Autobuild-User(master): Douglas Bagnall <dbagnall at samba.org>
Autobuild-Date(master): Wed Nov 19 01:59:34 UTC 2025 on atb-devel-224

(cherry picked from commit 1b2b08bb7067852ad1bf8847b266baaab06905d7)

- - - - -
baca60f9 by Ralph Boehme at 2025-11-26T12:51:16+00:00
vfs_fruit: psd->dacl can be NULL, use orig_num_aces

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15926

Signed-off-by: Ralph Boehme <slow at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>

Autobuild-User(master): Volker Lendecke <vl at samba.org>
Autobuild-Date(master): Tue Nov 18 10:13:44 UTC 2025 on atb-devel-224

(cherry picked from commit 0de67cf0748139920006a4dd65cb77c874c3595f)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Wed Nov 26 12:51:16 UTC 2025 on atb-devel-224

- - - - -
b3810646 by Günther Deschner at 2025-12-18T08:55:15+00:00
s3-selftest: add tests for winbindd_cache.tdb sanity

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15963

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 073a9482f0ace8847781181a552e0d0ceb897d0c)

- - - - -
92d7ff79 by Günther Deschner at 2025-12-18T08:55:15+00:00
s3-winbindd: Fix winbind NDR caching.

All of winbindd's core caching relies on NDR entries. Those entries can
not be stored in winbindd_cache.tdb via wcache_store_ndr() as long as
there is no SEQNUM entry present in the cache.

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15963

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit c4606bc40632869ff4f1036cf6899df400d15a53)

- - - - -
8218ed45 by Günther Deschner at 2025-12-18T08:55:15+00:00
s3-winbind: make wcache_store_seqnum static

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15963

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit ffe1883d7d68dd933b6fa41e3af722e8688ff882)

- - - - -
b0378cf3 by Günther Deschner at 2025-12-18T08:55:15+00:00
s3-winbindd: make initialize_winbindd_cache() static

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15963

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 6667f25507687c19f3d3eaa3301a7ccd2433d4e3)

- - - - -
68013eed by Günther Deschner at 2025-12-18T08:55:15+00:00
s3-winbindd: provide one wcache_open() function for all tdb opens

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15963

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 7136a6ba39ddf025e85c639f3e53f53f8ff46cb5)

- - - - -
573a31bc by Günther Deschner at 2025-12-18T08:55:15+00:00
s3-winbindd: make sure we always have WINBINDD_CACHE_VERSION in winbindd_cache.tdb

Guenther

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15963

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>

Autobuild-User(master): Andreas Schneider <asn at cryptomilk.org>
Autobuild-Date(master): Mon Dec  8 09:59:58 UTC 2025 on atb-devel-224

(cherry picked from commit d6ee9b04f2c9875953fba60a26a764ef61670114)

- - - - -
f1b0234b by Andreas Schneider at 2025-12-18T08:55:15+00:00
s3:libads: Set a request timeout for Kerberos requests

Without this, libkrb5 can wait indefinitely after creating a TCP
connection. This means winbind is stuck forever till it is restarted.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15955

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Alexander Bokovoy <ab at samba.org>
(cherry picked from commit 92601536ba0490bdfb5dd632fff2e5c0b541620c)

- - - - -
66be538e by Andreas Schneider at 2025-12-18T08:55:15+00:00
s3:libads: Set udp_preference_limit = 0 for MIT Kerberos

This option enable TCP connection before UDP, when sending a message to
the KDC.

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Alexander Bokovoy <ab at samba.org>
(cherry picked from commit 2c51cf118a1d9b7a5956a62e71df8fa1e576599c)

- - - - -
80e60822 by Andreas Schneider at 2025-12-18T09:59:12+00:00
Revert "ldb: User hexchars_upper from replace.h"

This reverts commit 542cf01bfe530a83dfbc8a606d182c0a5a622059.

We shouldn't put a hard requirement for libreplace in libldb! We do not need
libreplace on Linux until we start using hexbytes_upper.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15961

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall at catalyst.net.nz>
(cherry picked from commit 1bb25c0e01d35b1adb3137cb193de27f5c5a65f0)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Thu Dec 18 09:59:12 UTC 2025 on atb-devel-224

- - - - -
49f6aa2c by Jule Anger at 2025-12-18T17:07:55+01:00
WHATSNEW: Add release notes for Samba 4.22.7.

Signed-off-by: Jule Anger <janger at samba.org>

- - - - -
44b1df8e by Jule Anger at 2025-12-18T17:08:30+01:00
VERSION: Disable GIT_SNAPSHOT for the 4.22.7 release.

Signed-off-by: Jule Anger <janger at samba.org>

- - - - -
34b3aec0 by Jule Anger at 2025-12-18T17:08:52+01:00
VERSION: Bump version up to Samba 4.22.8...

and re-enable GIT_SNAPSHOT.

Signed-off-by: Jule Anger <janger at samba.org>

- - - - -
28320f41 by Michael Tokarev at 2025-12-18T22:12:42+03:00
New upstream version 4.22.7+dfsg
- - - - -
252edf3f by Ralph Boehme at 2026-01-14T11:59:08+00:00
mdssvc: make a copy of the elasticsearch:default_fields

lp_parm_const_string() returns a pointer to loadparm state that is not stable
across loadparm reloads and hence may later point at random garbage.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15959

Signed-off-by: Ralph Boehme <slow at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>

Autobuild-User(master): Volker Lendecke <vl at samba.org>
Autobuild-Date(master): Tue Dec 16 18:58:07 UTC 2025 on atb-devel-224

(cherry picked from commit 5f8125665cb2ccad12678f95d20cae09922b3767)

- - - - -
7c7373f2 by Shweta Sodani at 2026-01-14T13:04:41+00:00
vfs_ceph_new: use vfs_ceph_iget/vfs_ceph_iput in vfs_ceph_disk_free

Currently inode of root is using to report stats that works fine for share of root volume.
But for subvolume share it reports incorrect information. Hence choose the inode based on path,
so that it will report stats information correctly.

Bug:https://bugzilla.samba.org/show_bug.cgi?id=15954

Signed-off-by: Shweta Sodani <ssodani at redhat.com>
Reviewed-by: Xavi Hernandez <xhernandez at redhat.com>
Reviewed-by: Anoop C S <anoopcs at samba.org>
Reviewed-by: Guenther Deschner <gd at samba.org>

Autobuild-User(master): Günther Deschner <gd at samba.org>
Autobuild-Date(master): Mon Nov 24 18:03:08 UTC 2025 on atb-devel-224

(cherry picked from commit f2ccf020046bc4f0465dfa8b5a8737b018fa66ac)

Autobuild-User(v4-22-test): Björn Jacke <bjacke at samba.org>
Autobuild-Date(v4-22-test): Wed Jan 14 13:04:41 UTC 2026 on atb-devel-224

- - - - -
3299aee7 by Michael Tokarev at 2026-01-15T13:03:51+00:00
s4/dlz: add support for bind 9.20

bind dlz interface does not change much, yet we build
dlz_bind9_NN for every bind9 version NN we support -
despite many of them differ only in soversion, with
the code being identical.

For bind9_20, use dlz_bind9_18.so which we already have.

It'd be nice to extract actual bind9 version string in
sambadns.py and use it in more direct way.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15790

Signed-off-by: Michael Tokarev <mjt at tls.msk.ru>
Reviewed-by: Douglas Bagnall <douglas.bagnall at catalyst.net.nz>
Reviewed-by: Samuel Cabrero <scabrero at samba.org>

Autobuild-User(master): Douglas Bagnall <dbagnall at samba.org>
Autobuild-Date(master): Wed Dec 10 22:46:11 UTC 2025 on atb-devel-224

(cherry picked from commit 6488787d65ef02cc97b4b79587da6155ff369ac0)

Autobuild-User(v4-22-test): Björn Jacke <bjacke at samba.org>
Autobuild-Date(v4-22-test): Thu Jan 15 13:03:51 UTC 2026 on atb-devel-224

- - - - -
1f56c9f8 by Pavel Filipenský at 2026-01-22T13:02:15+00:00
s3:libads: Reset ads->config.flags in ads_disconnect()

This is doing the same thing in ads_disconnect() as commit
a26f535 Clear previous CLDAP ping flags when reusing the ADS_STRUCT
did in ads_current_time()

In this case we:

1) found cached ADS_STRUCT which already has ads->config.flags set:

  lookup_groupmem()
    ads_cached_connection()
      ads_cached_connection_reuse()

2) started search which immediately timeouts (the cached conn. was dead)

  ads_do_search_retry_internal()
    ldap_search_with_timeout() - IO_TIMEOUT

3) Retry loop finds a new DC and tries to connect

  ads_do_search_retry_internal()
    ads_disconnect()
    ads_find_dc()
    ads_try_connect()
      netlogon_pings()
        check_cldap_reply_required_flags()

4) check_cldap_reply_required_flags() fails since ads->config.flags
   (stored possibly long time ago) contain:

   NBT_SERVER_CLOSEST  0x00000080
     which is misinterpreted as:
   DS_PDC_REQUIRED     0x00000080

   the newly found DC is not PDC (we asked for DS_ONLY_LDAP_NEEDED)
   and since previous DC had NBT_SERVER_CLOSEST we want DS_PDC_REQUIRED
   and fail.

We should anyway avoid mixing independent namespaces  NBT_* and DS_*
in the same flag.
Next commit will do that.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15972

Signed-off-by: Pavel Filipenský <pfilipensky at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 9f3a35991feb01a8d2c2b69fa0b914bbc637a809)

- - - - -
124185a1 by Pavel Filipenský at 2026-01-22T14:19:11+00:00
s3:libads: Separate use of ads->config.flags for NBT_* and DS_* values

Use of ads->config.flags is overloaded.

It is used to:

- pass DS_* flags down to cldap_netlogon()
- store the server_type from NETLOGON_SAM_LOGON_RESPONSE

Both cases use different values and cannot be combined.
E.g. flags mess up with value 0x00000080

NBT_SERVER_CLOSEST  0x00000080
DS_PDC_REQUIRED     0x00000080

Let's create two separate flags

nbt_server_type server_flags; /* NBT_* cldap flags identifying the services. */
uint32 required_flags; /* DS_* - Netlogon flags */

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15972

Signed-off-by: Pavel Filipenský <pfilipensky at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>

Autobuild-User(master): Pavel Filipensky <pfilipensky at samba.org>
Autobuild-Date(master): Thu Jan 22 09:14:25 UTC 2026 on atb-devel-224

(cherry picked from commit 7483903575eab97773a992149d64511d5ec6f256)

Autobuild-User(v4-22-test): Björn Jacke <bjacke at samba.org>
Autobuild-Date(v4-22-test): Thu Jan 22 14:19:11 UTC 2026 on atb-devel-224

- - - - -
662ed308 by Martin Schwenke at 2026-02-18T11:32:15+00:00
docs-xml:smb.conf: Fix "ctdbd socket" documentation

This has been wrong for a very long time.  I only noticed it just
now...  :-(

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15977

Signed-off-by: Martin Schwenke <mschwenke at ddn.com>
Reviewed-by: Douglas Bagnall <douglas.bagnall at catalyst.net.nz>

Autobuild-User(master): Martin Schwenke <martins at samba.org>
Autobuild-Date(master): Thu Jan 22 23:06:20 UTC 2026 on atb-devel-224

(cherry picked from commit 8c458675c10bfda66fb86c5ed67d1d6d0cbbaedf)

- - - - -
29550e80 by Samuel Cabrero at 2026-02-18T11:32:15+00:00
s3:rpc_client: Fix memory leak opening local named pipe

If no local server name was passed to rpc_pipe_open_local_np() then
get_myname() was called with NULL talloc context instead of the
current stackframe.

This was causing an increase of memory usage on busy servers with long-living
rpcd_* workers.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15979

Signed-off-by: Samuel Cabrero <scabrero at samba.org>
Reviewed-by: Noel Power <noel.power at suse.com>
Reviewed-by: Volker Lendecke <vl at samba.org>

Autobuild-User(master): Volker Lendecke <vl at samba.org>
Autobuild-Date(master): Tue Jan 27 10:13:40 UTC 2026 on atb-devel-224

(cherry picked from commit 24dc455362fb49ef81c99d95880e106a234ce29a)

- - - - -
39796375 by Noel Power at 2026-02-18T11:32:15+00:00
s3/printing: Fix leaked mem ctx returned from talloc_new

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15979
Signed-off-by: Noel Power <noel.power at suse.com>
Reviewed-by: Gary Lockyer <gary at catalyst.net.nz>
(cherry picked from commit 5ba76344ef807577ea1fd4265d585285eb633971)

- - - - -
a7acb270 by Noel Power at 2026-02-18T11:32:16+00:00
s3/printing: Fix leaking parsed options

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15979
Signed-off-by: Noel Power <noel.power at suse.com>
Reviewed-by: Gary Lockyer <gary at catalyst.net.nz>

Autobuild-User(master): Noel Power <npower at samba.org>
Autobuild-Date(master): Fri Jan 30 11:09:44 UTC 2026 on atb-devel-224

(cherry picked from commit 22021dbfa7a94007a511d05f25e49ab73dacbcf5)

- - - - -
eac3575b by Ralph Boehme at 2026-02-18T11:32:16+00:00
smbd: in contend_dirleases() don't bother checking when not enabled

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15984

Signed-off-by: Ralph Boehme <slow at samba.org>
Reviewed-by: Martin Schwenke <martins at samba.org>

Autobuild-User(master): Ralph Böhme <slow at samba.org>
Autobuild-Date(master): Mon Jan 26 12:09:13 UTC 2026 on atb-devel-224

(cherry picked from commit f11bce483a6403d9ed250c874105248c8e9782e2)

- - - - -
c3bf3935 by Günther Deschner at 2026-02-18T12:41:16+00:00
docs-xml: fix manpage for "net offlinejoin requestodj"

One actually does *NOT* need to provide AD credentials to process a
requestodj operation. This is run as root and populates Samba's
databases based on the ODJ blob. Thanks John Mulligan for pointing this out.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15964

Guenther

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: John Mulligan <jmulligan at redhat.com>

Autobuild-User(master): Günther Deschner <gd at samba.org>
Autobuild-Date(master): Thu Dec 11 15:19:13 UTC 2025 on atb-devel-224

(cherry picked from commit a44abbfde048c378fcadea0d597762f7eb10a6a4)

Autobuild-User(v4-22-test): Björn Jacke <bjacke at samba.org>
Autobuild-Date(v4-22-test): Wed Feb 18 12:41:16 UTC 2026 on atb-devel-224

- - - - -
935486ff by Björn Jacke at 2026-02-19T10:32:44+01:00
Add release notes for Samba 4.22.8.

Signed-off-by: Bjoern Jacke <bjacke at samba.org>
Reviewed-by: Jule Anger <janger at samba.org>

- - - - -
d0a814e3 by Björn Jacke at 2026-02-19T10:37:42+01:00
VERSION: Disable GIT_SNAPSHOT for the upcoming release.

Signed-off-by: Bjoern Jacke <bjacke at samba.org>

- - - - -
62e99079 by Michael Tokarev at 2026-02-19T15:14:58+03:00
New upstream version 4.22.8+dfsg
- - - - -


38 changed files:

- VERSION
- WHATSNEW.txt
- ctdb/config/events/legacy/10.interface.script
- ctdb/config/functions
- ctdb/server/ctdb_recover.c
- ctdb/server/ctdb_takeover.c
- + ctdb/tests/UNIT/eventscripts/10.interface.updateip.001.sh
- docs-xml/manpages/net.8.xml
- docs-xml/manpages/samba-bgqd.8.xml
- docs-xml/smbdotconf/misc/ctdbdsocket.xml
- lib/ldb/common/ldb_dn.c
- python/samba/provision/sambadns.py
- selftest/target/Samba3.pm
- source3/libads/kerberos.c
- source3/libads/ldap.c
- source3/librpc/idl/ads.idl
- source3/libsmb/namequery_dc.c
- source3/modules/vfs_ceph_new.c
- source3/modules/vfs_fruit.c
- source3/modules/vfs_recycle.c
- source3/printing/print_cups.c
- source3/printing/printing.c
- source3/printing/queue_process.c
- source3/rpc_client/cli_pipe.c
- source3/rpc_server/mdssvc/es_parser.y
- source3/rpc_server/mdssvc/mdssvc_es.c
- source3/rpc_server/mdssvc/test_mdsparser_es.c
- source3/script/tests/test_recycle.sh
- + source3/script/tests/test_winbind_cache_sanity.sh
- source3/selftest/tests.py
- source3/smbd/filename.c
- source3/smbd/files.c
- source3/smbd/proto.h
- source3/smbd/smb2_oplock.c
- source3/winbindd/winbindd_cache.c
- source3/winbindd/winbindd_cm.c
- source3/winbindd/winbindd_proto.h
- source4/setup/named.conf.dlz


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/7c54855a7d74574199626403f359e81c6f492b09...62e99079e15e0b84d9418a089e303931a518a33e

-- 
View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/7c54855a7d74574199626403f359e81c6f492b09...62e99079e15e0b84d9418a089e303931a518a33e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20260219/35032455/attachment-0001.htm>


More information about the Pkg-samba-maint mailing list