SHA256
1
0
forked from pool/samba

40 Commits

Author SHA256 Message Date
ecc3dc829c Accepting request 1323105 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1323105
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=325
2025-12-17 16:31:24 +00:00
3952bcd4eb - samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
(bso#15790); (bsc#1249058).

- Update to 4.23.4
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * mdssvc doesn't support $time.iso dates before 1970;
    (bso#15947).
  * Fix winbind cache consistency; (bso#15963).
  * Assert failed: (dirfd != -1) || (smb_fname->base_name[0] ==
    '/') in vfswrap_openat; (bso#15897).
  * ctdb can crash with inconsistent cluster lock configuration;
    (bso#15950).
  * samba-bgqd: rework man page; (bso#15809).
  * samba-bgqd can't find [printers] share; (bso#15936).
  * Winbind can hang forever in gssapi if there are network
    issues; (bso#15955).
  * libldb requires linking libreplace on Linux; (bso#15961).
- Update to 4.23.3
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * Searching for numbers doesn't work with Spotlight;
    (bso#15930).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * vfs_recycle does not update mtime; (bso#15940).
  * samba-log-parser fails with UnicodeDecodeError: 'utf-8' codec
    can't decode byte; (bso#15943).
  * Crash in ctdbd on failed updateip; (bso#15935).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=712
2025-12-16 11:27:48 +00:00
22bd150716 Accepting request 1318734 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1318734
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=324
2025-11-21 15:54:13 +00:00
f4babae04c - Update [printers] location to /var/samba/spool; (bsc#1249179).
- Update to 4.22.6
  * macOS Finder client DFS broken on 4.22.0; (bso#15843).
  * Samba 4.22 breaks Time Machine; (bso#15926).
  * Spotlight search restriction for shares incomplete and
    default search searches in too many attributes; (bso#15927).
  * rpcd_mdssvc may crash because name mangling is not
    initialized; (bso#15931).
  * Only increment lease epoch if a lease was granted;
    (bso#15933).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=711
2025-11-19 17:04:00 +00:00
004dcd0f7d Accepting request 1311516 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1311516
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=323
2025-10-18 12:34:55 +00:00
fa9e9657ff - Update to 4.22.5
* CVE-2025-10230: Command injection via WINS server hook
    script (bso#15903); (bsc#1251280).
  * CVE-2025-9640: uninitialized memory disclosure via
    vfs_streams_xattr; (bso#15885); (bsc#1251279).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=710
2025-10-15 16:11:46 +00:00
9b03f56083 - Relax samba-gpupdate requirement for cepces, certmonger, and sscep
to a recommends. They are only required if utilizing certificate
  auto enrollment (bsc#1249087).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=709
2025-10-13 08:28:46 +00:00
1cdac0f3c5 - Disable timeouts for smb.service so that possibly slow running
ExecStartPre script 'update-samba-security-profile' doesn't
  cause service start to fail due to timeouts;(bsc#1249181).

- Ensure semanage is pulled in as a requirement when samba in
  installed when selinux security access mechanism that is used;
  (bsc#1249180).

- don't attempt to label paths that don't exist, also remove
  unecessary evaluation of semange & restorecon cmds;(bsc#1249179).

- Update to 4.22.4
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName-; (bso#15876).
  * Unresponsive second DC can cause idmapping failure when using
    idmap_ad-; (bso#15881).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * vfs_streams_depot fstatat broken; (bso#15816).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=708
2025-10-07 14:23:35 +00:00
d7c26bf735 Accepting request 1296509 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1296509
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=322
2025-07-31 15:45:00 +00:00
7f26b6474b - adjust gpgme build dependency for future-proofing
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=707
2025-07-30 08:43:06 +00:00
aee2fe0097 Accepting request 1293176 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1293176
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=321
2025-07-15 14:42:10 +00:00
6390bb1b6d calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=706
2025-07-14 15:00:29 +00:00
66de3ccda6 Accepting request 1291742 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1291742
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=320
2025-07-11 19:29:07 +00:00
3b6e1943ab - Update to 4.22.3
* samba-tool cannot add user to group whose name is exactly 16
    characters long; (bso#15854);
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=705
2025-07-10 16:37:33 +00:00
79903b6551 Accepting request 1284415 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1284415
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=319
2025-06-11 14:20:28 +00:00
5db499b9ff - Update to 4.22.2
* (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
    up group membership changes when re-authenticating an expired
    SMB session; (bso#15707); (bsc#1244136).
  * Profile sync fails due to Directory Leases; (bso#15861).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=704
2025-06-10 10:28:00 +00:00
8cb386b85a Accepting request 1278858 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1278858
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=318
2025-05-26 16:31:34 +00:00
9d7125c0d8 - Update and rename update-apparmor-samba-profile script to
update-samba-security-profile. It additionally now caters
  for selinux (if selinux is used); (bsc#1241391);

- Update smb.conf to enable SMB3 unix extensions

- Update to 4.22.1
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * Deadlock between two smbd processes; (bso#15767).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * PANIC: assert failed at source3/smbd/smb2_oplock.c(156):
    sconn->oplocks.exclusive_open>=0; (bso#15836).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Wide link issue in samba 4.22; (bso#15841).
  * NT_STATUS_INVALID_PARAMETER: Can't create folders on share of
    an exfat file system; (bso#15845).
  * Lease code is not endian-safe; (bso#15849).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=703
2025-05-20 15:31:49 +00:00
80f965690d Accepting request 1254187 from network:samba:STABLE
Please stage together with talloc, tdb and tevent.

- Update to 4.22.0
  * SMB3 Directory Leases are supported. By default, SMB3 Directory
    Leases are enabled on non-clustered Samba and disabled on
    clustered Samba, based on the "clustering" option.
  * Netlogon Ping over LDAP and LDAPS
  * Experimental Himmelblaud Authentication in Samba
  * The "nmbd proxy logon" feature was removed.
  * fruit:posix_rename option of the vfs_fruit VFS module that
    could be used to enable POSIX directory rename behaviour for
    OS X clients has been removed as it could result in severe
    problems for Windows clients.

OBS-URL: https://build.opensuse.org/request/show/1254187
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=317
2025-03-20 18:24:33 +00:00
e5b0acacc2 OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=702 2025-03-18 08:41:59 +00:00
9edf25b7ac Accepting request 1250559 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1250559
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=316
2025-03-07 15:38:51 +00:00
8b95284350 - Remove nscd build dependency and usage in RPM scriptlets;
(bsc#1237296);

- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps > year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=701
2025-03-06 07:35:44 +00:00
51055dac96 Accepting request 1238026 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1238026
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=315
2025-01-17 17:36:50 +00:00
871b05c578 - Update to 4.21.3
* More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=700
2025-01-15 11:33:56 +00:00
1f57cba696 Accepting request 1233896 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1233896
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=314
2025-01-02 18:19:13 +00:00
5de198e926 - Update shipped /etc/samba/smb.conf to point to smb.conf
man page;(bsc#1233880).

- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).
- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).

- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=699
2024-12-30 10:15:22 +00:00
9a151450c0 Accepting request 1219906 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1219906
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=313
2024-11-01 20:48:54 +00:00
09ef5f3f69 - Add placeholder changelog for sle15-sp7; (jsc#PED-11210).
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=698
2024-10-31 16:35:09 +00:00
2fd6b1fede Accepting request 1216699 from network:samba:STABLE
update to samba-4.21.1

OBS-URL: https://build.opensuse.org/request/show/1216699
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=312
2024-10-22 12:51:15 +00:00
d620d0d28f Wed Oct 16 13:52:25 UTC 2024 - Noel Power <nopower@suse.com>
-  Adjust spec to split out rpcd_* binaries into a separate
   sub package; (bsc#1231414).

- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=697
2024-10-21 10:37:43 +00:00
c1508e72d7 Accepting request 1206308 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1206308
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=311
2024-10-13 15:33:25 +00:00
58b2b2ee8d - Support needed packaging changes required update to samba-4.21.0
Update samba.spec, baselibs.conf to deliver libldb packages.

- Package ceph_new VFS module.

- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).

-  Bad variable definition for ParseTuple causing test failure for
   Smb3UnixTests.test_create_context_reparse; (bso#15702).

- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=696
2024-10-08 11:46:47 +00:00
0ab9aca171 Accepting request 1195149 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1195149
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=310
2024-08-22 16:10:33 +00:00
496d3fb9be - Fix a crash when joining offline and 'kerberos method' includes
keytab; (bsc#1228732).

- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=695
2024-08-21 15:22:48 +00:00
8b91db8bf7 Accepting request 1190590 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1190590
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=309
2024-08-01 20:03:45 +00:00
a74402f13d Accepting request 1190507 from home:scabrero:branches:network:samba:STABLE
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build.

OBS-URL: https://build.opensuse.org/request/show/1190507
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=694
2024-07-31 06:55:07 +00:00
07058c1a73 Accepting request 1186190 from network:samba:STABLE
OBS-URL: https://build.opensuse.org/request/show/1186190
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=308
2024-07-09 18:03:23 +00:00
114c5d358e Accepting request 1186128 from home:npower:update_samba
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);

- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]

OBS-URL: https://build.opensuse.org/request/show/1186128
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=693
2024-07-08 14:01:31 +00:00
4424ce4731 Accepting request 1185190 from network:samba:STABLE
update to latest

OBS-URL: https://build.opensuse.org/request/show/1185190
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/samba?expand=0&rev=307
2024-07-04 14:22:39 +00:00
a19539b055 OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=692 2024-07-02 16:20:37 +00:00
6 changed files with 757 additions and 98 deletions

View File

@@ -2,7 +2,7 @@
<service name="tar_scm" mode="manual">
<param name="url">https://gitlab.suse.de/samba/suse-samba.git/</param>
<param name="scm">git</param>
<param name="revision">factory-4-20-stable</param>
<param name="revision">factory-4-23-stable</param>
<param name="versionformat">@PARENT_TAG@+git.@TAG_OFFSET@.%h</param>
<param name="versionrewrite-pattern">samba-(.*)</param>
<param name="versionrewrite-replacement">\1</param>

View File

@@ -1,4 +1,3 @@
libsamba-policy0-python3
samba-winbind-libs
requires "samba-client-libs-<targettype> = <version>"
provides "samba-winbind-<targettype> = <version>"
@@ -54,6 +53,7 @@ samba-client-libs
obsoletes "libsmbconf0-<targettype> < <version>"
provides "libdcerpc0-<targettype> = <version>"
obsoletes "libdcerpc0-<targettype> < <version>"
obsoletes "libsamba-policy0-python3-<targettype> < <version>"
samba-ad-dc-libs
requires "samba-client-libs-<targettype> = <version>"
provides "samba-ad-dc-<targettype> = <version>"
@@ -67,3 +67,9 @@ samba-devel
requires "samba-winbind-libs-<targettype> = <version>"
provides "libnetapi-devel-<targettype> = <version>"
obsoletes "libnetapi-devel-<targettype> < <version>"
provides "libsamba-policy-devel-<targettype> = <version>"
obsoletes "libsamba-policy-devel-<targettype> < <version>"
obsoletes "libsamba-policy-python3-devel-<targettype> < <version>"
libldb2
obsoletes "libldb1-<targettype> < <version>"
python3-ldb

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:cb60e383ea1a5d692dd4d60ea3d33f2bcbf745e2d2b8a3a0ee8dc5a582c80571
size 44657307

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:03adbe746df71e750942fe450a72e61704e170e15bddad2fc96bac40b2e243a7
size 45355211

View File

@@ -1,3 +1,531 @@
-------------------------------------------------------------------
Fri Dec 12 15:42:05 UTC 2025 - Noel Power <nopower@suse.com>
- samba-ad-dc-libs packages are missing a DLZ plugin for bind 9.20;
(bso#15790); (bsc#1249058).
-------------------------------------------------------------------
Tue Dec 9 11:18:45 UTC 2025 - Noel Power <nopower@suse.com>
- Update to 4.23.4
* Samba 4.22 breaks Time Machine; (bso#15926).
* mdssvc doesn't support $time.iso dates before 1970;
(bso#15947).
* Fix winbind cache consistency; (bso#15963).
* Assert failed: (dirfd != -1) || (smb_fname->base_name[0] ==
'/') in vfswrap_openat; (bso#15897).
* ctdb can crash with inconsistent cluster lock configuration;
(bso#15950).
* samba-bgqd: rework man page; (bso#15809).
* samba-bgqd can't find [printers] share; (bso#15936).
* Winbind can hang forever in gssapi if there are network
issues; (bso#15955).
* libldb requires linking libreplace on Linux; (bso#15961).
- Update to 4.23.3
* Spotlight search restriction for shares incomplete and
default search searches in too many attributes; (bso#15927).
* Searching for numbers doesn't work with Spotlight;
(bso#15930).
* rpcd_mdssvc may crash because name mangling is not
initialized; (bso#15931).
* Only increment lease epoch if a lease was granted;
(bso#15933).
* vfs_recycle does not update mtime; (bso#15940).
* samba-log-parser fails with UnicodeDecodeError: 'utf-8' codec
can't decode byte; (bso#15943).
* Crash in ctdbd on failed updateip; (bso#15935).
- Update to 4.23.2
* CVE-2025-10230: Command injection via WINS server hook
script (bso#15903); (bsc#1251280).
* CVE-2025-9640: uninitialized memory disclosure via
vfs_streams_xattr; (bso#15885); (bsc#1251279).
- Update to 4.23.1
* Incomplete bind configuration causes DLZ plugin to crash;
(bso#15920).
* winbind can crash at startup; (bso#15914).
* vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
for fsync_send; (bso#15919).
* CTDB does not support PCP 7.0.0; (bso#15904).
* CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
(bso#15921).
- Update to 4.23.0
* samba.tests.safe_tarfile fails on Python 3.13 with additional
security fixes for tarfile support; (bso#15911).
* samba-4.21 fails to join AD when multiple DCs are returned;
(bso#15905).
* Uninitialized read leads to hanging rpcd_spoolss;
(bso#15908).
* Stack buffer overflow in samba3.smb2.dirlease.fileserver;
(bso#15907).
* Regression in gssproxy support in 4.23.rc1+; (bso#15902).
* 'net ads group' failed to list domain groups; (bso#15900).
* macOS Finder client DFS broken on 4.22.0; (bso#15843).
* Self-signed certificates don't have X509v3 Subject
Alternative Name for DNS; (bso#15899).
* Improve handling of principals and realms in client tools;
(bso#15893).
* libquic build fixes; (bso#15896).
* getpwuid does not shift to new DC when current DC is down;
(bso#15844).
* Windows security hardening locks out schannel'ed netlogon dc
calls like netr_DsRGetDCName; (bso#15876).
-------------------------------------------------------------------
Fri Oct 31 09:44:48 UTC 2025 - Noel Power <noel.power@suse.com>
- Update [printers] location to /var/samba/spool; (bsc#1249179).
-------------------------------------------------------------------
Tue Oct 21 10:46:14 UTC 2025 - Noel Power <nopower@suse.com>
- Update to 4.22.6
* macOS Finder client DFS broken on 4.22.0; (bso#15843).
* Samba 4.22 breaks Time Machine; (bso#15926).
* Spotlight search restriction for shares incomplete and
default search searches in too many attributes; (bso#15927).
* rpcd_mdssvc may crash because name mangling is not
initialized; (bso#15931).
* Only increment lease epoch if a lease was granted;
(bso#15933).
* samba-4.21 fails to join AD when multiple DCs are returned;
(bso#15905).
* 'net ads group' failed to list domain groups; (bso#15900).
* vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
for fsync_send; (bso#15919).
* CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
(bso#15921).
-------------------------------------------------------------------
Wed Oct 15 12:55:57 UTC 2025 - Noel Power <noel.power@suse.com>
- Update to 4.22.5
* CVE-2025-10230: Command injection via WINS server hook
script (bso#15903); (bsc#1251280).
* CVE-2025-9640: uninitialized memory disclosure via
vfs_streams_xattr; (bso#15885); (bsc#1251279).
-------------------------------------------------------------------
Wed Oct 1 13:38:09 UTC 2025 - Samuel Cabrero <scabrero@suse.de>
- Relax samba-gpupdate requirement for cepces, certmonger, and sscep
to a recommends. They are only required if utilizing certificate
auto enrollment (bsc#1249087).
-------------------------------------------------------------------
Thu Sep 25 08:56:20 UTC 2025 - Noel Power <noel.power@suse.com>
- Disable timeouts for smb.service so that possibly slow running
ExecStartPre script 'update-samba-security-profile' doesn't
cause service start to fail due to timeouts;(bsc#1249181).
-------------------------------------------------------------------
Thu Sep 25 08:55:56 UTC 2025 - Noel Power <noel.power@suse.com>
- Ensure semanage is pulled in as a requirement when samba in
installed when selinux security access mechanism that is used;
(bsc#1249180).
-------------------------------------------------------------------
Thu Sep 25 08:55:22 UTC 2025 - Noel Power <noel.power@suse.com>
- don't attempt to label paths that don't exist, also remove
unecessary evaluation of semange & restorecon cmds;(bsc#1249179).
-------------------------------------------------------------------
Thu Sep 25 08:51:52 UTC 2025 - Noel Power <noel.power@suse.com>
- Update to 4.22.4
* netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
SysvolReady=0; (bso#14981).
* getpwuid does not shift to new DC when current DC is down;
(bso#15844).
* Windows security hardening locks out schannel'ed netlogon dc
calls like netr_DsRGetDCName-; (bso#15876).
* Unresponsive second DC can cause idmapping failure when using
idmap_ad-; (bso#15881).
* kinit command is failing with Missing cache Error;
(bso#15840).
* Figuring out the DC name from IP address fails and breaks
fork_domain_child(); (bso#15891).
* vfs_streams_depot fstatat broken; (bso#15816).
* Delayed leader broadcast can block ctdb forever; (bso#15892).
* Apparently there is a conflict between shadow_copy2 module
and virusfilter (action quarantine); (bso#15663).
* Fix handling of empty GPO link; (bso#15877).
* SMB ACL inheritance doesn't work for files created;
(bso#15880).
-------------------------------------------------------------------
Fri Jul 25 15:41:26 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
- adjust gpgme build dependency for future-proofing
-------------------------------------------------------------------
Tue Jul 8 08:15:46 UTC 2025 - Samuel Cabrero <scabrero@suse.de>
- Update to 4.22.3
* samba-tool cannot add user to group whose name is exactly 16
characters long; (bso#15854);
* Windows security hardening locks out schannel'ed netlogon dc
calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
* Startup messages of rpc deamons fills /var/log/messages;
(bso#15869);
-------------------------------------------------------------------
Fri Jun 6 15:06:53 UTC 2025 - Noel Power <nopower@suse.com>
- Update to 4.22.2
* (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
up group membership changes when re-authenticating an expired
SMB session; (bso#15707); (bsc#1244136).
* Profile sync fails due to Directory Leases; (bso#15861).
* net ad join fails with "Failed to join domain: failed to
create kerberos keytab"; (bso#15727).
* dcerpcd not able to bind to listening port; (bso#15851).
* vfs_ceph_snapshots fails to list snapshots for entries at any
level beyond share root; (bso#15819).
* CTDB does not put nodes running NFS into grace on graceful
shutdown; (bso#15858).
-------------------------------------------------------------------
Fri May 9 10:37:16 UTC 2025 - Noel Power <nopower@suse.com>
- Update and rename update-apparmor-samba-profile script to
update-samba-security-profile. It additionally now caters
for selinux (if selinux is used); (bsc#1241391);
-------------------------------------------------------------------
Wed Apr 30 11:49:35 UTC 2025 - Samuel Cabrero <scabrero@suse.de>
- Update smb.conf to enable SMB3 unix extensions
-------------------------------------------------------------------
Tue Apr 22 10:08:04 UTC 2025 - Noel Power <nopower@suse.com>
- Update to 4.22.1
* Running "gpo manage motd set" twice fails with backtrace;
(bso#15774).
* samba-tool gpo backup creates entity backups it can't read;
(bso#15829).
* gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
prepended 0's; (bso#15839).
* Deadlock between two smbd processes; (bso#15767).
* Subnet based interfaces definition not listening on all
covered IP addresses; (bso#15823).
* PANIC: assert failed at source3/smbd/smb2_oplock.c(156):
sconn->oplocks.exclusive_open>=0; (bso#15836).
* net ad join fails with "Failed to join domain: failed to
create kerberos keytab"; (bso#15727).
* Enable support for cephfs case insensitive behavior;
(bso#15822).
* Remove of file or directory not possible with vfs_acl_tdb;
(bso#15791).
* Wide link issue in samba 4.22; (bso#15841).
* NT_STATUS_INVALID_PARAMETER: Can't create folders on share of
an exfat file system; (bso#15845).
* Lease code is not endian-safe; (bso#15849).
* vfs_ceph_new module does not work with other modules for
snapshot management; (bso#15818).
* vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
* Add async io API from libcephfs to ceph_new VFS module;
(bso#15810).
-------------------------------------------------------------------
Wed Mar 12 15:03:15 UTC 2025 - Samuel Cabrero <scabrero@suse.de>
- Update to 4.22.0
* SMB3 Directory Leases are supported. By default, SMB3 Directory
Leases are enabled on non-clustered Samba and disabled on
clustered Samba, based on the "clustering" option.
* Netlogon Ping over LDAP and LDAPS
* Experimental Himmelblaud Authentication in Samba
* The "nmbd proxy logon" feature was removed.
* fruit:posix_rename option of the vfs_fruit VFS module that
could be used to enable POSIX directory rename behaviour for
OS X clients has been removed as it could result in severe
problems for Windows clients.
-------------------------------------------------------------------
Tue Feb 19 10:42:17 UTC 2025 - Samuel Cabrero <scabrero@suse.de>
- Remove nscd build dependency and usage in RPM scriptlets;
(bsc#1237296);
-------------------------------------------------------------------
Wed Feb 19 10:08:34 UTC 2025 - Noel Power <nopower@suse.com>
- Update to 4.21.4
* Increasing slowness of sharesec performance with high number
of registry shares; (bso#15780).
* winbindd shows memleak in kerberos_decode_pac; (bso#15782).
* Creation of GPOs applicable to more than one group is
impossible with Samba 4.20.0 and later; (bso#15738).
* Replace `crypt` module in
python/samba/netcmd/user/readpasswords/common.py;
(bso#15756).
* vfs_gpfs silently garbles timestamps > year 2106;
(bso#15151).
* Spotlight search results don't show file size and creation
date; (bso#15796).
* General improvements for vfs_ceph_new module; (bso#15703).
* net offlinejoin not working correctly; (bso#15777).
* net ads create/join/winbind producing unix dysfunctional
keytabs; (bso#15759).
* Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
security tab; (bso#14213).
* The values from hresult_errstr_const and hresult_errstr are
reversed in 4.20 and 4.21; (bso#15769).
* Kerberos referral tickets are generated for principals in our
domain if we have a trust to a top level domain; (bso#15778).
* NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
user_flags field; (bso#15783).
* Regression: stack-use-after-return in crypt_as_best_we_can();
(bso#15784).
* libreplace:readline: gcc 15 complains about incompatible
pointer types; (bso#15788).
-------------------------------------------------------------------
Tue Jan 7 10:22:16 UTC 2025 - Noel Power <nopower@suse.com>
- Update to 4.21.3
* More possible replication loops against Azure AD;
(bso#15701).
* Compound rename from Mac clients can fail with
NT_STATUS_INTERNAL_ERROR if the file has a lease;
(bso#15697).
* vfs crossrename seems not work correctly; (bso#15724).
* After 'machine password timeout' /etc/krb5.keytab is not
updated; (bso#6750).
* Memory leak wbcCtxLookupSid; (bso#15771).
* Fix heap-user-after-free with association groups;
(bso#15765).
* Segfault in vfs_btrfs; (bso#15758).
* Avoid event failure race when disabling an event script;
(bso#15755).
-------------------------------------------------------------------
Fri Dec 6 09:09:04 UTC 2024 - Noel Power <nopower@suse.com>
- Update shipped /etc/samba/smb.conf to point to smb.conf
man page;(bsc#1233880).
-------------------------------------------------------------------
Mon Nov 25 17:35:43 UTC 2024 - Noel Power <nopower@suse.com>
- Update to 4.21.2
* smbd fails to correctly check sharemode against OVERWRITE
dispositions; (bso#15732).
* Panic in close_directory; (bso#15754).
* winexe no longer works with samba 4.21; (bso#15752).
* protocol error - Unclear debug message "pad length mismatch"
for invalid bind packet; (bso#14356).
* NetrGetLogonCapabilities QueryLevel 2 needs to be
implemented; (bso#15425).
* gss_accept_sec_context() from Heimdal does not imply
GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
* winbindd should call process_set_title() for locator child;
(bso#15749).
* Update CTDB to track all TCP connections to public IP
addresses; (bso#15320).
-------------------------------------------------------------------
Thu Oct 31 13:20:25 UTC 2024 - Noel Power <nopower@suse.com>
- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).
-------------------------------------------------------------------
Wed Oct 16 13:52:25 UTC 2024 - Noel Power <nopower@suse.com>
- Adjust spec to split out rpcd_* binaries into a separate
sub package; (bsc#1231414).
-------------------------------------------------------------------
Tue Oct 15 13:23:26 UTC 2024 - Noel Power <nopower@suse.com>
- Update to 4.21.1
* DH reconnect error handling can lead to stale sharemode
entries; (bso#15624).
* "inherit permissions = yes" triggers assert() in vfs_default
when creating a stream; (bso#15695).
* Samba 4.21.0 broke FreeIPA domain member integration;
(bso#15715).
* Missing conversion for msDS-UserTGTLifetime, msDS-
ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
tool domain auth policy modify"; (bso#15692).
* irpc_destructor may crash during shutdown; (bso#15280).
* Durable handle is not granted when a previous OPEN exists
with NoOplock; (bso#15649).
* Durable handle is granted but reconnect fails; (bso#15651).
* Disconnected durable handles with RH lease should not be
purged by a new non conflicting open; (bso#15708).
* net ads testjoin and other commands use the wrong secrets.tdb
in a cluster; (bso#15714).
* 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
rfc 8009 etypes are used; (bso#15726).
* VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
(bso#15730).
* Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
* Cannot build libldb lmdb backend on a build without AD DC;
(bso#15721).
* Consistent log level for sighup handler; (bso#15706).
-------------------------------------------------------------------
Wed Sep 25 14:52:10 UTC 2024 - Noel Power <nopower@suse.com>
- Support needed packaging changes required update to samba-4.21.0
Update samba.spec, baselibs.conf to deliver libldb packages.
-------------------------------------------------------------------
Thu Sep 5 07:29:17 UTC 2024 - David Disseldorp <ddiss@suse.com>
- Package ceph_new VFS module.
-------------------------------------------------------------------
Thu Sep 5 07:13:01 UTC 2024 - David Disseldorp <ddiss@suse.com>
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
(bso#15699); (bsc#1229684).
-------------------------------------------------------------------
Wed Aug 28 17:31:35 UTC 2024 - Noel Power <nopower@suse.com>
- Bad variable definition for ParseTuple causing test failure for
Smb3UnixTests.test_create_context_reparse; (bso#15702).
-------------------------------------------------------------------
Wed Aug 28 09:01:29 UTC 2024 - Noel Power <nopower@suse.com>
- Update to 4.21.0
* Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
truncated; (bso#15699).
* Bad variable definition for ParseTuple causing test failure
for Smb3UnixTests.test_create_context_reparse; (bso#15702).
* Add new vfs_ceph module (based on low level API);
(bso#15686).
* samba-tool can not load the default configuration file;
(bso#15698).
* Crash when readlinkat fails; (bso#15700).
* Can't add/delete special keys to keytab for nfs, cifs, http
etc; (bso#15689).
* Compound SMB2 requests don't return
NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
MacOSX clients; (bso#15696).
* --version-* options are still not ergonomic, and they reject
tilde characters; (bso#15673).
* ldb_version.h is missing from ldb public library;
(bso#15690).
* Can not add/delete special keys to keytab for nfs, cifs, http
etc; (bso#15689).
* undefined reference to winbind_lookup_name_ex; (bso#15687).
* per user veto and hide file syntax is to complex;
(bso#15688).
-------------------------------------------------------------------
Wed Aug 7 09:47:14 UTC 2024 - Noel Power <nopower@suse.com>
- Fix a crash when joining offline and 'kerberos method' includes
keytab; (bsc#1228732).
-------------------------------------------------------------------
Tue Aug 6 10:51:13 UTC 2024 - Noel Power <noel.power@suse.com>
- Update to 4.20.4
* --version-* options are still not ergonomic, and they reject
tilde characters; (bso#15673).
- Update to 4.20.3
* Running samba-bgqd a a standalone systemd service does not
work; (bso#15683).
* When claims enabled with heimdal kerberos, unable to log on
to a Windows computer when user account need to change their
own password; (bso#15655).
* Invalid client warning about command line passwords;
(bso#15671).
* Version string is truncated in manpages; (bso#15672).
* cmdline_burn does not always burn secrets; (bso#15674).
* Samba does not parse SDDL found in defaultSecurityDescriptor
in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
* The images don\'t build after the git security release and
CentOS 8 Stream is EOL; (bso#15660).
* Fix clock skew error message and memory cache clock skew
recovery; (bso#15676).
* Heimdal ignores _gsskrb5_decapsulate errors in
init_sec_context/repl_mutual; (bso#15603).
* s4:ldap_server: does not support tls channel bindings for
sasl binds; (bso#15621).
* CTDB socket output queues may suffer unbounded delays under
some special conditions; (bso#15678).
-------------------------------------------------------------------
Wed Jul 17 11:18:52 UTC 2024 - Samuel Cabrero <scabrero@suse.de>
- Update samba-tool package to require python3-Markdown also in
the Heimdal ADDC build.
-------------------------------------------------------------------
Thu Jul 4 10:34:20 UTC 2024 - Samuel Cabrero <scabrero@suse.de>
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
(bso#15643);
-------------------------------------------------------------------
Thu Jul 4 10:30:10 UTC 2024 - pgajdos@suse.com
- remove dependency on /usr/bin/python3 using
%python3_fix_shebang macro, [bsc#1212476]
-------------------------------------------------------------------
Wed Jun 19 15:02:44 UTC 2024 - Noel Power <nopower@suse.com>
- Update to 4.20.2
* vfs_widelinks with DFS shares breaks case insensitivity;
(bso#15662); (bsc#1213607).
* Samba build is not reproducible; (bso#13213).
* ldb qsort might r/w out of bounds with an intransitive
compare function; (bso#15569).
* Many qsort() comparison functions are non-transitive, which
can lead to out-of-bounds access in some circumstances;
(bso#15625).
* Need to change gitlab-ci.yml tags in all branches to avoid CI
bill; (bso#15638).
* We have added new options --vendor-name and --vendor-patch-
revision arguments to ./configure to allow distributions and
packagers to put their name in the Samba version string so
that when debugging Samba the source of the binary is
obvious; (bso#15654).
* CTDB RADOS mutex helper misses namespace support;
(bso#15665).
* Dynamic DNS updates with the internal DNS are not working;
(bso#13019).
* netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
SysvolReady=0; (bso#14981).
* Anonymous smb3 signing/encryption should be allowed (similar
to Windows Server 2022); (bso#15412).
* Panic in dreplsrv_op_pull_source_apply_changes_trigger;
(bso#15573).
* s4:nbt_server: does not provide unexpected handling, so
winbindd can't use nmb requests instead cldap; (bso#15620).
* winbindd, net ads join and other things don't work on an ipv6
only host; (bso#15642).
* Segmentation fault when deleting files in vfs_recycle;
(bso#15659).
* Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
* "client use kerberos" and --use-kerberos is ignored for the
machine account; (bso#15666).
* Regression DFS not working with widelinks = true;
(bso#15435).
* samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
(bso#15633).
* idmap_ad creates an incorrect local krb5.conf in case of
trusted domain lookups; (bso#15653).
* The images don't build after the git security release and
CentOS 8 Stream is EOL; (bso#15660).
-------------------------------------------------------------------
Mon Jun 3 07:09:54 UTC 2024 - Samuel Cabrero <scabrero@suse.de>

View File

@@ -38,10 +38,9 @@
%define build_ceph 1
%endif
%define talloc_version 2.4.2
%define tevent_version 0.16.1
%define tdb_version 1.4.10
%define ldb_version 2.9.0
%define talloc_version 2.4.3
%define tevent_version 0.17.1
%define tdb_version 1.4.14
# This table represents the possible combinations of build macros.
# They are defined only if not already defined in the build service
@@ -67,6 +66,15 @@
%{!?with_dc: %define with_dc 0}
%endif
%global with_lmdb 0
# LMDB only available on 64bit archs
%ifarch x86_64 ppc64le aarch64
# lmdb is only built when ad_dc is configured
%if %{with_dc}
%global with_lmdb 1
%endif
%endif
# Define whether smbd is built with SMB1 disabled
%{!?without_smb1_server: %define without_smb1_server 1}
@@ -82,13 +90,13 @@ BuildRequires: perl-Parse-Yapp
BuildRequires: libarchive-devel
BuildRequires: libacl-devel
BuildRequires: libattr-devel
BuildRequires: libcmocka-devel
BuildRequires: libuuid-devel
BuildRequires: cracklib-devel
BuildRequires: gdbm-devel
BuildRequires: keyutils-devel
BuildRequires: flex
BuildRequires: bison
BuildRequires: libnscd-devel
BuildRequires: libopenssl-devel
BuildRequires: zlib-devel
BuildRequires: libtirpc-devel
@@ -106,11 +114,9 @@ BuildRequires: rpcgen
BuildRequires: fdupes
%define pkgconfig_req pkg-config
BuildRequires: %{pkgconfig_req}
BuildRequires: libldb-devel >= %{ldb_version}
BuildRequires: libtalloc-devel >= %{talloc_version}
BuildRequires: libtdb-devel >= %{tdb_version}
BuildRequires: libtevent-devel >= %{tevent_version}
BuildRequires: python3-ldb-devel >= %{ldb_version}
BuildRequires: python3-talloc-devel
BuildRequires: python3-tdb
BuildRequires: python3-tevent
@@ -131,10 +137,13 @@ BuildRequires: libcephfs-devel
BuildRequires: librados-devel
%endif
BuildRequires: libgnutls-devel >= 3.4.7
BuildRequires: libngtcp2_crypto_gnutls-devel >= 1.12.0
%if %{with_dc}
BuildRequires: gpgme-devel
BuildRequires: pkgconfig(gpgme)
BuildRequires: libjansson-devel
BuildRequires: python3-gpg
BuildRequires: lmdb-devel >= 0.9.16
BuildRequires: lmdb
%if %{with_mit_dc}
BuildRequires: krb5-devel >= 1.15.1
BuildRequires: krb5-server >= 1.15.1
@@ -160,7 +169,7 @@ BuildRequires: liburing-devel
%endif
BuildRequires: sysuser-tools
Version: 4.20.1+git.339.cf6e153bb2
Version: 4.23.4+git.428.6b48e7eba5b
Release: 0
URL: https://www.samba.org/
Obsoletes: samba-32bit < %{version}
@@ -178,7 +187,9 @@ Requires: coreutils
Requires: system-user-nobody
Requires: %{fillup_prereq}
Requires: samba-client >= %{version}
Requires: samba-dcerpc = %{version}
Requires: sysuser-shadow
Requires: (/usr/sbin/semanage if selinux-policy)
Provides: group(ntadmin)
%{?systemd_ordering}
@@ -245,6 +256,8 @@ Samba as part of SUSE Linux Enterprise or openSUSE products, links to
binary packages of the most current Samba version, and a bug reporting
how to.
%lang_package -n samba-client
%package devel
Summary: Development files shared by Samba subpackages
License: GPL-3.0-or-later
@@ -298,6 +311,9 @@ Provides: libnetapi-devel = %{version}
Obsoletes: libnetapi-devel < %{version}
Provides: libwbclient-devel = %{version}
Obsoletes: libwbclient-devel < %{version}
Provides: libsamba-policy-devel = %{version}
Obsoletes: libsamba-policy-devel < %{version}
Obsoletes: libsamba-policy-python3-devel < %{version}
%description devel
This package contains the libraries and header files needed to
@@ -361,6 +377,7 @@ Provides: libsmbconf0 = %{version}
Obsoletes: libsmbconf0 < %{version}
Provides: libdcerpc0 = %{version}
Obsoletes: libdcerpc0 < %{version}
Obsoletes: libsamba-policy0-python3 < %{version}
%description client-libs
The samba-libs package contains the libraries needed by samba client
@@ -393,7 +410,6 @@ Summary: Samba Python3 libraries
License: GPL-3.0-or-later
Group: Development/Libraries/Python
Requires: %{name} = %{version}
Requires: libsamba-policy0-python3 = %{version}
Requires: python3-ldb
Requires: python3-talloc
Requires: python3-tdb
@@ -407,11 +423,11 @@ that use SMB, RPC and other Samba provided protocols in Python3 programs.
Summary: Samba Group Policy
License: GPL-3.0-or-later
Group: Productivity/Networking/Samba
Requires: cepces
Requires: certmonger
Requires: samba-ldb-ldap = %{version}
Requires: samba-python3 = %{version}
Requires: sscep
Recommends: cepces
Recommends: certmonger
Recommends: sscep
%description gpupdate
The samba-gpupdate package provides the samba-gpupdate tool for applying
@@ -445,12 +461,12 @@ Obsoletes: samba-gplv3-winbind < %{version}
Provides: samba-client:/usr/sbin/winbindd
Provides: group(winbind)
Requires: pam-config
Recommends: /usr/sbin/nscd
Recommends: cron
Recommends: logrotate
Requires: coreutils
Requires: samba-client = %{version}
Requires: samba-winbind-libs = %{version}
Requires: samba-dcerpc = %{version}
Recommends: samba-gpupdate = %{version}
Requires: sysuser-shadow
@@ -472,6 +488,16 @@ Requires(postun):/sbin/ldconfig
%description winbind-libs
This package contains the libraries required by the Winbind daemon.
%lang_package -n samba-winbind-libs
%package dcerpc
Summary: Samba dcerpc service binaries
License: GPL-3.0-or-later
Group: System/Daemons
%description dcerpc
This packages contains the binaries for the DCE/RPC endpoint servers.
%package -n ctdb
Summary: Clustered TDB
License: GPL-3.0-or-later
@@ -502,34 +528,6 @@ The CTDB Performance Co-Pilot (PCP) monitoring agent allows remote PCP
clients to view and capture detailed real-time performance metrics for
one or more cluster nodes.
%package -n libsamba-policy0-python3
Summary: Active Directory Group Policy library
License: GPL-3.0-or-later
Group: System/Libraries
%description -n libsamba-policy0-python3
This subpackage contains the python3 library for policy management.
%package -n libsamba-policy-devel
Summary: Development files for the Samba AD Group Policy library
License: GPL-3.0-or-later
Group: Development/Libraries/C and C++
Requires: libsamba-policy-python3-devel = %{version}
%description -n libsamba-policy-devel
This subpackage contains libraries and header files for developing
applications that want to make use of libsamba-policy.
%package -n libsamba-policy-python3-devel
Summary: Development files for the Samba AD Group Policy library
License: GPL-3.0-or-later
Group: Development/Libraries/C and C++
Requires: libsamba-policy0-python3 = %{version}
%description -n libsamba-policy-python3-devel
This subpackage contains libraries and header files for developing
applications that want to make use of libsamba-policy.
%package ceph
Summary: Ceph specific add-ons for Samba
License: GPL-3.0-or-later
@@ -548,7 +546,7 @@ Group: Productivity/Networking/Samba
Requires: samba = %{version}
Requires: samba-ldb-ldap = %{version}
Requires: samba-python3 = %{version}
%if %{with_mit_dc}
%if %{with_dc}
Requires: python3-Markdown
%endif
@@ -591,12 +589,14 @@ Summary: Samba LDB modules
License: GPL-3.0-or-later
Group: Productivity/Networking/Samba
# The ldb modules provided by this package check their own version matches
# the libldb2 version. It the version do not match (e.g. libldb2 version
# the libldb2 version. If the version do not match (e.g. libldb2 version
# is updated and samba-dsdb-modules is not rebuilt against it) programs using
# libldb2 won't start. The requires_eq macro will require the libldb2 version
# available at build time without having to manually maintain the global
# ldb_version variable in this spec file (bsc#1118508, bsc#1199362)
%requires_eq libldb2
# NOTE 4.21 update. If ldb is built from this spec, this problem goes away and
# it is enough with requiring libldb2 = %{version}
Requires: libldb2 = %{version}
Requires: samba-ldb-ldap = %{version}
Requires(post): /sbin/ldconfig
Requires(postun):/sbin/ldconfig
@@ -605,6 +605,44 @@ Requires(postun):/sbin/ldconfig
This package contains plugins which add Active Directory features to the
LDB library.
%package -n libldb2
Summary: An LDAP-like embedded database
License: LGPL-3.0-or-later
Obsoletes: libldb1 < %{version}
%description -n libldb2
LDB is an LDAP-like embedded database.
%package -n libldb-devel
Summary: Libraries and Header Files to Develop Programs with ldb2 Support
Group: Development/Libraries/C and C++
Requires: libldb2 = %{version}
Requires: pkg-config
%description -n libldb-devel
LDB is an LDAP-like embedded database.
Libraries and Header Files to Develop Programs with ldb2 Support.
%package -n ldb-tools
Summary: Tools to manipulate LDB files
Group: Development/Libraries/C and C++
%description -n ldb-tools
Tools to manipulate LDB files.
%package -n python3-ldb
Summary: Python3 bindings for the LDB library
Group: Development/Libraries/Python
Requires: libldb2 = %{version}
Obsoletes: python-ldb < %{version}
Obsoletes: python3-ldb-devel < %{version}
%description -n python3-ldb
This package contains the python3 bindings for the LDB library.
%prep
%setup -n samba-%{version} -q
# Create and add vendor suffix
@@ -646,9 +684,14 @@ fi
export CFLAGS="%{optflags} -D_GNU_SOURCE -D_LARGEFILE64_SOURCE -DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS -I/usr/include/tirpc"
export LDFLAGS="-ltirpc"
bundled_libraries=",libquic"
%if ! 0%{?with_mscat}
bundled_libraries_extra+=",libtasn1"
bundled_libraries+=",libtasn1"
%endif
private_libraries="!ldb"
CONFIGURE_OPTIONS="\
--prefix=%{_prefix} \
--localstatedir=%{_localstatedir} \
@@ -663,6 +706,11 @@ CONFIGURE_OPTIONS="\
--disable-rpath-install \
--enable-debug \
--with-profiling-data \
--private-libraries=${private_libraries} \
--pythonarchdir=%{python3_sitearch}
%if !%{with_lmdb}
--without-ldb-lmdb \
%endif
%if 0%{?build_ctdb_pmda}
--enable-pmda \
%endif
@@ -693,7 +741,7 @@ CONFIGURE_OPTIONS="\
--with-experimental-mit-ad-dc \
%endif
%endif
--bundled-libraries=NONE,socket_wrapper,cmocka,${bundled_libraries_extra} \
--bundled-libraries=NONE,${bundled_libraries} \
--without-fam \
%if 0%{?suse_version} > 1500
%if %{without_smb1_server}
@@ -760,6 +808,9 @@ rm \
%{buildroot}/%{_unitdir}/samba-ad-dc.service
%endif
%find_lang pam_winbind
%find_lang net
# CTDB
install -m 0644 packaging/SuSE/config/sysconfig.ctdb %{buildroot}/%{_fillupdir}
ln -s service %{buildroot}/%{_sbindir}/rcctdb
@@ -771,8 +822,6 @@ for file in README COPYING doc/examples doc/*.html doc/readonlyrecords.txt ; do
cp -a ctdb/${file} %{buildroot}/%{_defaultdocdir}/ctdb
done
touch %{buildroot}/%{_sysconfdir}/ctdb/nodes
# sudo can be used by statd-callout, but is not needed
rm %{buildroot}/%{_sysconfdir}/sudoers.d/ctdb
# install the config_migrate.sh script to move to new 4.9+ ctdb configuration
install -m 0744 ctdb/doc/examples/config_migrate.sh %{buildroot}/%{_sysconfdir}/ctdb/config_migrate.sh
@@ -784,9 +833,8 @@ for i in $scripts; do
done
# configuration files
pushd packaging/SuSE/
echo "# smb.conf is the main Samba configuration file. You find a full commented" >config/smb.conf
echo "# version at %{DOCDIR}/examples/smb.conf.%{VENDOR} if the" >>config/smb.conf
echo "# samba-doc package is installed." >>config/smb.conf
echo "# smb.conf is the main Samba configuration file. see man smb.conf " >config/smb.conf
echo "# for full details." >>config/smb.conf
grep -v "\(^#\|^;\|^$\)" config/smb.conf.vendor >>config/smb.conf
install -p -m 0644 config/smb.conf.vendor ../../examples/smb.conf.%{VENDOR}
for file in smb.conf lmhosts smbusers smbpasswd smbusers; do
@@ -828,7 +876,7 @@ for script in ${startScripts}; do
done
install -m 0755 tools/nmbstatus %{buildroot}/%{_bindir}/nmbstatus
pod2man tools/nmbstatus >%{buildroot}/%{_mandir}/man1/nmbstatus.1
install -m 0755 tools/update-apparmor-samba-profile \
install -m 0755 tools/update-samba-security-profile \
%{buildroot}/%{_datadir}/samba/
# PDF generator
install -p -m 0755 tools/smbprngenpdf %{buildroot}/%{_bindir}/smbprngenpdf
@@ -890,6 +938,7 @@ for file in $( find %{buildroot}%{_libdir}/samba/vfs/ -mindepth 1 ); do
# if built we don't want ceph VFS modules in the base package
case "${file#%{buildroot}}" in
%{_libdir}/samba/vfs/ceph.so) continue ;;
%{_libdir}/samba/vfs/ceph_new.so) continue ;;
%{_libdir}/samba/vfs/ceph_snapshots.so) continue ;;
esac
echo "${file#%{buildroot}}" >>%{_builddir}/samba-%{version}/filelist-samba
@@ -900,6 +949,12 @@ for file in %{buildroot}%{_mandir}/man8/vfs_*; do
%{_mandir}/man8/vfs_ceph.8)
%if 0%{?build_ceph} == 0
rm ${file}
%endif
continue
;;
%{_mandir}/man8/vfs_ceph_new.8)
%if 0%{?build_ceph} == 0
rm ${file}
%endif
continue
;;
@@ -930,6 +985,7 @@ install -m 0644 examples/LDAP/samba.schema %{buildroot}/%{_sysconfdir}/openldap/
install -m 0644 examples/LDAP/samba-nds.schema %{buildroot}/%{_datadir}/samba/LDAP/samba-nds.schema
# Hardlink duplicate files
%fdupes %{buildroot}
%python3_fix_shebang
%pre -f samba.pre
%service_add_pre nmb.service smb.service samba-bgqd.service
@@ -1006,8 +1062,6 @@ fi
%postun client
/sbin/ldconfig
%post -n libsamba-policy0-python3 -p /sbin/ldconfig
%postun -n libsamba-policy0-python3 -p /sbin/ldconfig
%post client-libs -p /sbin/ldconfig
%postun client-libs -p /sbin/ldconfig
%post libs -p /sbin/ldconfig
@@ -1032,7 +1086,6 @@ fi
%post dsdb-modules
rm -f %{_libdir}/ldb/samba
ln -sf %{_libdir}/samba/ldb %{_libdir}/ldb2/modules/ldb/samba
/sbin/ldconfig
%postun dsdb-modules -p /sbin/ldconfig
@@ -1067,10 +1120,6 @@ done
/sbin/ldconfig
if [ $1 -eq 0 ]; then
%{_sbindir}/pam-config --delete --winbind
if [ -x %{_sbindir}/nscd ]; then
%{_sbindir}/nscd -i passwd
%{_sbindir}/nscd -i group
fi
fi
%service_del_postun winbind.service
@@ -1078,7 +1127,7 @@ fi
%service_add_pre ctdb.service
if [ -e %{_sysconfdir}/sysconfig/ctdb ] ; then
grep CTDB_LOGGING %{_sysconfdir}/sysconfig/ctdb >/dev/null 2>&1 ||
sed -i s/CTDB_LOGFILE=/CTDB_LOGGING=file:/g %{_sysconfdir}/sysconfig/ctdb
sed -i s/CTDB_LOGFILE=/CTDB_LOGGING=file:/g %{_sysconfdir}/sysconfig/ctdb
fi
if [ ! -f %{_sysconfdir}/ctdb/config_migrate.sh ] ; then
echo "* CTDB Configuration has been redesigned"
@@ -1118,6 +1167,12 @@ exit 0
%service_del_postun ctdb.service
exit 0
%post -n libldb2 -p /sbin/ldconfig
%postun -n libldb2 -p /sbin/ldconfig
%post -n python3-ldb -p /sbin/ldconfig
%postun -n python3-ldb -p /sbin/ldconfig
%files -f filelist-samba
%defattr(-,root,root)
%{_unitdir}/nmb.service
@@ -1145,30 +1200,25 @@ exit 0
%{_sbindir}/rcnmb
%{_sbindir}/rcsmb
%{_sbindir}/smbd
%{_libdir}/samba/rpcd_classic
%{_libdir}/samba/rpcd_epmapper
%{_libdir}/samba/rpcd_fsrvp
%{_libdir}/samba/rpcd_lsad
%{_libdir}/samba/rpcd_mdssvc
%{_libdir}/samba/rpcd_spoolss
%{_libdir}/samba/rpcd_winreg
%{_libdir}/samba/rpcd_witness
%{_libdir}/samba/samba-bgqd
%{_libdir}/samba/samba-dcerpcd
%attr(0644,root,root) %{_datadir}/omc/svcinfo.d/nmb.xml
%attr(0644,root,root) %{_datadir}/omc/svcinfo.d/smb.xml
%dir %{_datadir}/samba
%{_datadir}/samba/update-apparmor-samba-profile
%{_datadir}/samba/update-samba-security-profile
%{_mandir}/man1/smbstatus.1.*
%{_mandir}/man1/wspsearch.1.*
%{_mandir}/man5/smbpasswd.5.*
%{_mandir}/man8/nmbd.8.*
%{_mandir}/man8/smbd.8.*
%{_mandir}/man8/samba-bgqd.8.*
%{_mandir}/man8/samba-dcerpcd.8.*
%{_fillupdir}/sysconfig.samba
%{_sysusersdir}/samba.conf
%files client-lang -f net.lang
%defattr(-,root,root)
%files client
%defattr(-,root,root)
%dir %{CONFIGDIR}
@@ -1261,6 +1311,8 @@ exit 0
%attr(0700,root,root) %dir %{LOCKDIR}/private/msg.sock
%attr(0750,root,root) %dir %{LOGDIR}
%ghost %dir %{PIDDIR}
%ghost %dir %{_var}/samba
%ghost %dir %{_var}/samba/spool
%dir %{_tmpfilesdir}
%{_tmpfilesdir}/samba.conf
%if %{with_mscat}
@@ -1288,6 +1340,7 @@ exit 0
%_includedir/samba-4.0/passdb.h
%_includedir/samba-4.0/netapi.h
%_includedir/samba-4.0/libsmbclient.h
%_includedir/samba-4.0/policy.h
%dir %_includedir/samba-4.0/core/
%_includedir/samba-4.0/core/doserr.h
%_includedir/samba-4.0/core/error.h
@@ -1391,6 +1444,8 @@ exit 0
%{_libdir}/pkgconfig/netapi.pc
%{_libdir}/libsmbclient.so
%{_libdir}/pkgconfig/smbclient.pc
%{_libdir}/libsamba-policy.so
%{_libdir}/pkgconfig/samba-policy.pc
%{_mandir}/man7/libsmbclient.7.*
%if %{with_dc}
%{_includedir}/samba-4.0/dcerpc_server.h
@@ -1424,6 +1479,7 @@ exit 0
%{_libdir}/samba/libads-private-samba.so
%{_libdir}/samba/libasn1util-private-samba.so
%{_libdir}/samba/libauth-private-samba.so
%{_libdir}/samba/libutil-crypt-private-samba.so
%if %{with_dc}
%{_libdir}/samba/libauthn-policy-util-private-samba.so
%endif
@@ -1479,7 +1535,8 @@ exit 0
%{_libdir}/samba/libsamba3-util-private-samba.so
%{_libdir}/samba/libsamba-modules-private-samba.so
%{_libdir}/samba/libsamdb-common-private-samba.so
%{_libdir}/samba/libsmb-transport-private-samba.so
%{_libdir}/samba/libsamba-security-trusts-private-samba.so
%{_libdir}/samba/libquic-private-samba.so
%{_libdir}/samba/libsmbclient-raw-private-samba.so
%{_libdir}/samba/libsmbd-base-private-samba.so
%{_libdir}/samba/libsmbd-shim-private-samba.so
@@ -1492,7 +1549,6 @@ exit 0
%{_libdir}/samba/libtalloc-report-printf-private-samba.so
%{_libdir}/samba/libtdb-wrap-private-samba.so
%{_libdir}/samba/libtime-basic-private-samba.so
%{_libdir}/samba/libtrusts-util-private-samba.so
%{_libdir}/samba/libutil-reg-private-samba.so
%{_libdir}/samba/libutil-setid-private-samba.so
%{_libdir}/samba/libutil-tdb-private-samba.so
@@ -1500,6 +1556,7 @@ exit 0
%{_libdir}/samba/libmscat-private-samba.so
%endif
%if %{with_dc}
%{_libdir}/samba/service/ft_scanner.so
%{_libdir}/samba/libdfs-server-ad-private-samba.so
%endif
%dir %{_libdir}/samba/pdb
@@ -1523,11 +1580,12 @@ exit 0
%{_libdir}/samba/libtalloc-report-private-samba.so
%{_libdir}/samba/libtorture-private-samba.so
%{_libdir}/samba/libxattr-tdb-private-samba.so
%{_libdir}/samba/libcmocka-private-samba.so
%{_libdir}/samba/libREG-FULL-private-samba.so
%{_libdir}/samba/libRPC-SERVER-LOOP-private-samba.so
%{_libdir}/samba/libRPC-WORKER-private-samba.so
%{_libdir}/samba/libdsdb-module-private-samba.so
%{_libdir}/samba/libsamba-net-private-samba.so
%{_libdir}/libsamba-policy.so.*
%if ! %{with_mitkrb5}
%{_libdir}/samba/libasn1-private-samba.so
%{_libdir}/samba/libcom-err-private-samba.so
@@ -1545,12 +1603,13 @@ exit 0
%endif
%files libs-python3
%{_libdir}/samba/libsamba-net.%{py3_soflags_dash}-private-samba.so
%{_libdir}/samba/libsamba-net-join.%{py3_soflags_dash}-private-samba.so
%{_libdir}/samba/libsamba-python.%{py3_soflags_dash}-private-samba.so
%files python3
%defattr(-,root,root)
%{python3_sitearch}/*
%dir %{python3_sitearch}/samba
%{python3_sitearch}/samba/*
%files gpupdate
%defattr(-,root,root)
@@ -1574,6 +1633,9 @@ exit 0
%{_mandir}/man1/ndrdump.1.*
%{_mandir}/man1/mdsearch.1.*
%files winbind-libs-lang -f pam_winbind.lang
%defattr(-,root,root)
%files winbind-libs
%defattr(-,root,root)
%{_pam_moduledir}/pam_winbind.so
@@ -1615,6 +1677,19 @@ exit 0
%{_mandir}/man8/winbind_krb5_localauth.8.*
%endif
%files dcerpc
%defattr(-,root,root)
%{_libdir}/samba/rpcd_classic
%{_libdir}/samba/rpcd_epmapper
%{_libdir}/samba/rpcd_fsrvp
%{_libdir}/samba/rpcd_lsad
%{_libdir}/samba/rpcd_mdssvc
%{_libdir}/samba/rpcd_spoolss
%{_libdir}/samba/rpcd_winreg
%{_libdir}/samba/rpcd_witness
%{_libdir}/samba/samba-dcerpcd
%{_mandir}/man8/samba-dcerpcd.8.*
%files winbind -f filelist-samba-winbind
%defattr(-,root,root)
%config(noreplace) %_pam_secconfdir/pam_winbind.conf
@@ -1642,6 +1717,7 @@ exit 0
%dir %{_sysconfdir}/ctdb
%{_fillupdir}/sysconfig.ctdb
%{_sysconfdir}/ctdb/notify.sh
%{_sysconfdir}/ctdb/ctdb-backup-persistent-tdbs.sh
%{_sysconfdir}/ctdb/ctdb-crash-cleanup.sh
%{_sysconfdir}/ctdb/debug-hung-script.sh
%{_sysconfdir}/ctdb/debug_locks.sh
@@ -1657,6 +1733,8 @@ exit 0
%dir %{_datadir}/ctdb/events
%dir %{_datadir}/ctdb/events/legacy
%{_datadir}/ctdb/events/legacy/*
%dir %{_datadir}/ctdb/scripts
%{_datadir}/ctdb/scripts/winbind_ctdb_updatekeytab.sh
%dir %{_sysconfdir}/ctdb/events
%dir %{_sysconfdir}/ctdb/events/notification
%{_sysconfdir}/ctdb/events/notification/README
@@ -1685,11 +1763,13 @@ exit 0
%{_libdir}/ctdb/ctdb_natgw
%{_libdir}/ctdb/ctdb_recovery_helper
%{_libdir}/ctdb/ctdb_takeover_helper
%{_libdir}/ctdb/smnotify
%{_libdir}/ctdb/ctdb_smnotify_helper
%{_libdir}/ctdb/ctdb_killtcp
%{_libdir}/ctdb/ctdb_lvs
%{_libdir}/ctdb/ctdb_mutex_fcntl_helper
%{_libdir}/ctdb/tdb_mutex_check
%{_libdir}/ctdb/statd_callout
%{_libdir}/ctdb/statd_callout_helper
%dir %{_localstatedir}/lib/ctdb
%dir %{_localstatedir}/lib/ctdb/persistent
%dir %{_localstatedir}/log/ctdb
@@ -1723,26 +1803,13 @@ exit 0
%{_localstatedir}/lib/pcp/pmdas/ctdb/pmdactdb
%{_localstatedir}/lib/pcp/pmdas/ctdb/pmns
%endif
%files -n libsamba-policy0-python3
%defattr(-,root,root)
%_libdir/libsamba-policy.%{py3_soflags_dash}.so.0*
%files -n libsamba-policy-devel
%defattr(-,root,root)
%dir %_includedir/samba-4.0/
%_includedir/samba-4.0/policy.h
%files -n libsamba-policy-python3-devel
%defattr(-,root,root)
%_libdir/libsamba-policy.%{py3_soflags_dash}.so
%_libdir/pkgconfig/samba-policy.%{py3_soflags}.pc
%if 0%{?build_ceph}
%files ceph
%defattr(-,root,root)
%{_mandir}/man8/vfs_ceph.8.*
%{_libdir}/samba/vfs/ceph.so
%{_mandir}/man8/vfs_ceph_new.8.*
%{_libdir}/samba/vfs/ceph_new.so
%{_mandir}/man8/vfs_ceph_snapshots.8.*
%{_libdir}/samba/vfs/ceph_snapshots.so
%{_mandir}/man7/ctdb_mutex_ceph_rados_helper.7.*
@@ -1867,8 +1934,12 @@ exit 0
%files ldb-ldap
%defattr(-,root,root)
%{_libdir}/samba/ldb/ldap.so
%{_libdir}/samba/ldb/ildap.so
%{_libdir}/samba/ldb/ldbsamba_extensions.so
%if %{with_dc}
%{_libdir}/samba/ldb/trust_notify.so
%endif
%if %{with_dc}
%files ad-dc-libs
@@ -1964,4 +2035,58 @@ exit 0
%{_libdir}/samba/ldb/count_attrs.so
%endif
%files -n libldb2
%{_libdir}/libldb.so.*
%{_libdir}/samba/libldb-key-value-private-samba.so
%{_libdir}/samba/libldb-tdb-err-map-private-samba.so
%{_libdir}/samba/libldb-tdb-int-private-samba.so
%dir %{_libdir}/samba/ldb
%{_libdir}/samba/ldb/asq.so
%{_libdir}/samba/ldb/paged_searches.so
%{_libdir}/samba/ldb/rdn_name.so
%{_libdir}/samba/ldb/sample.so
%{_libdir}/samba/ldb/server_sort.so
%{_libdir}/samba/ldb/skel.so
%{_libdir}/samba/ldb/tdb.so
%{_libdir}/samba/ldb/ldb.so
%if %{with_lmdb}
%{_libdir}/samba/libldb-mdb-int-private-samba.so
%{_libdir}/samba/ldb/mdb.so
%endif
%files -n libldb-devel
%{_includedir}/samba-4.0/ldb.h
%{_includedir}/samba-4.0/ldb_errors.h
%{_includedir}/samba-4.0/ldb_handlers.h
%{_includedir}/samba-4.0/ldb_module.h
%{_includedir}/samba-4.0/ldb_version.h
%{_libdir}/libldb.so
%{_libdir}/pkgconfig/ldb.pc
%{_mandir}/man3/ldb*.3.*
%files -n ldb-tools
%defattr(-,root,root)
%{_bindir}/ldbadd
%{_bindir}/ldbdel
%{_bindir}/ldbedit
%{_bindir}/ldbmodify
%{_bindir}/ldbrename
%{_bindir}/ldbsearch
%{_libdir}/samba/libldb-cmdline-private-samba.so
%{_mandir}/man1/ldbadd.1.*
%{_mandir}/man1/ldbdel.1.*
%{_mandir}/man1/ldbedit.1.*
%{_mandir}/man1/ldbmodify.1.*
%{_mandir}/man1/ldbrename.1.*
%{_mandir}/man1/ldbsearch.1.*
%files -n python3-ldb
%defattr(-,root,root)
%{_libdir}/samba/libpyldb-util.%{py3_soflags_dash}-private-samba.so
%{python3_sitearch}/_ldb_text.py
%if 0%{?centos_version} > 599 || 0%{?fedora_version} > 11 || 0%{?rhel_version} > 599
%{python3_sitearch}/__pycache__/_ldb_text.cpython-*.py[co]
%endif
%{python3_sitearch}/ldb.%{py3_soflags}.so
%changelog