--- /dev/null
--- /dev/null
++samba (2:4.20.2+dfsg-2) unstable; urgency=medium
++
++ * tilde-in-version.diff - allow tilde in version string
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 20 Jun 2024 09:49:50 +0300
++
++samba (2:4.20.2+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release:
++ - https://bugzilla.samba.org/show_bug.cgi?id=13019
++ Dynamic DNS updates with the internal DNS are not working
++ - https://bugzilla.samba.org/show_bug.cgi?id=13213
++ Samba build is not reproducible
++ - https://bugzilla.samba.org/show_bug.cgi?id=14981
++ netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0
++ - https://bugzilla.samba.org/show_bug.cgi?id=15412 Anonymous smb3
++ signing/encryption should be allowed (similar to Windows Server 2022)
++ - https://bugzilla.samba.org/show_bug.cgi?id=15435
++ Regression DFS not working with widelinks = true
++ - https://bugzilla.samba.org/show_bug.cgi?id=15569
++ ldb qsort might r/w out of bounds with an intransitive compare function
++ - https://bugzilla.samba.org/show_bug.cgi?id=15573
++ Panic in dreplsrv_op_pull_source_apply_changes_trigger
++ - https://bugzilla.samba.org/show_bug.cgi?id=15620
++ s4:nbt_server: does not provide unexpected handling, so winbindd
++ can't use nmb requests instead cldap
++ - https://bugzilla.samba.org/show_bug.cgi?id=15625
++ Many qsort() comparison functions are non-transitive, which can lead
++ to out-of-bounds access in some circumstances
++ - https://bugzilla.samba.org/show_bug.cgi?id=15633
++ samba-gpupdate - Invalid NtVer in netlogon_samlogon_response
++ - https://bugzilla.samba.org/show_bug.cgi?id=15638
++ Need to change gitlab-ci.yml tags in all branches to avoid CI bill
++ - https://bugzilla.samba.org/show_bug.cgi?id=15642 winbindd,
++ net ads join and other things don't work on an ipv6 only host
++ - https://bugzilla.samba.org/show_bug.cgi?id=15653 idmap_ad creates
++ an incorrect local krb5.conf in case of trusted domain lookups
++ - https://bugzilla.samba.org/show_bug.cgi?id=15654
++ new --vendor-name and --vendor-patch-revision options for ./configure
++ - https://bugzilla.samba.org/show_bug.cgi?id=15659
++ Segmentation fault when deleting files in vfs_recycle
++ Closes: #1073252
++ - https://bugzilla.samba.org/show_bug.cgi?id=15660 The images don't build
++ after the git security release and CentOS 8 Stream is EOL
++ - https://bugzilla.samba.org/show_bug.cgi?id=15662
++ vfs_widelinks with DFS shares breaks case insensitivity
++ - https://bugzilla.samba.org/show_bug.cgi?id=15664
++ Panic in vfs_offload_token_db_fetch_fsp()
++ - https://bugzilla.samba.org/show_bug.cgi?id=15665
++ CTDB RADOS mutex helper misses namespace support
++ - https://bugzilla.samba.org/show_bug.cgi?id=15666 "client use kerberos"
++ and --use-kerberos is ignored for the machine account
++ * d/libldb2.symbols,d.python3-ldb.symbols.in: add new version (2.9.1)
++ * use ./configure --vendor-name= instead of patching ./VERSION
++ * omit samba-ad-dc for i386 ubuntu
++ * samba-ad-dc: usr-move compensation maintscripts: add "set -e"
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Jun 2024 23:59:36 +0300
++
++samba (2:4.20.1+dfsg-5) unstable; urgency=medium
++
++ * Build-Depends: dpkg-dev>=trixie for Arch packages only (for t64 rename)
++ * d/samba.NEWS: reword the last entry a bit
++ * d/samba-ad-dc.init: chmod +x
++ * d/control: bump Standards-Version to 4.7.0 (no changes needed)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 10 Jun 2024 20:17:53 +0300
++
++samba (2:4.20.1+dfsg-4) unstable; urgency=medium
++
++ [ Helmut Grohne ]
++ * Mitigate ineffective replaces due to /usr-move (DEP17 P1)
++ (Closes: #1072102)
++
++ [ Michael Tokarev ]
++ * d/control: mark libkeyutils-dev as linux-only [linux-any]
++ * d/control: drop old versions of versioned dependencies
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 29 May 2024 20:31:41 +0300
++
++samba (2:4.20.1+dfsg-3) unstable; urgency=medium
++
++ * d/rules: move samba-common install to d/samba-common.install
++ * d/rules: install samba-ad-dc init files for the right package
++ * d/samba.postinst: remove nmbd_error_handler for the initscript
++ (it is not used in systemd case)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 26 May 2024 18:48:17 +0300
++
++samba (2:4.20.1+dfsg-2) unstable; urgency=medium
++
++ * move many files from samba package to samba-ad-dc package.
++ From now on, samba-ad-dc isn't just a meta-package, it is actually
++ needed for AD-DC functionality. If you run AD-DC, please ensure
++ that samba-ad-dc package is installed (it is not recommended by samba)
++ Closes: #1051770
++ * move samba-tool and samba-gpupdate from samba-common-bin and samba
++ packages to python3-samba. This is an Active Directory stuff, not
++ needed for a stand-alone server or a client, but might be useful
++ for auth-only (neither file-server nor file-client) AD installs
++ Closes: #1068360
++ * remove addshare.py, setoption.py and source_samba.py python scripts
++ These aren't used by samba packages and are hardly useful generally, esp.
++ having in mind their unusual locations. The apport hook (source_samba.py)
++ is mostly obsolete, it hasn't been updated for a very long time.
++ * add make-python-optional.diff, so python3 can be made optional
++ for samba-common-bin
++ * remove python3-samba and python from Depends of samba and samba-common-bin
++ packages, moving it to Recommends. This lets the user to install a stand-
++ alone samba file server without any Active Directory bits and even without
++ python interpreter
++ * d/samba.install: do not install samba_downgrade_db (to old pre-4.8 version)
++ * move smbcontrol binary from samba to samba-common-bin,
++ since it can also be used to control winbindd
++ * d/control: tdb-tools (tdbbackup) are run from python modules,
++ move from samba:Depends to python3-samba:Recommends
++ * d/control: samba: no need to depend on libpam-runtime or libpam-modules
++ * d/control: samba: no need to recommend samba-ad-provision
++ * debian/TODO: update a bit, remove many obsolete entries
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 26 May 2024 17:48:13 +0300
++
++samba (2:4.20.1+dfsg-1) unstable; urgency=medium
++
++ * new upstream major release
++ * d/control: bump tevent/talloc/tdb versions for Build-Depends
++ * d/libldb2.symbols, d/python3-ldb.symbols.in: add new version (2.9.0)
++ * d/patches/meaningful-error-if-no-python3-markdown.patch: fixup
++ * d/*.install: internal library names changed:
++ libfoo-samba4.so.0 => libfoo-private-samba.so.0
++ * d/samba-libs.install: update names for libdcerpc & libndr private libs
++ * d/samba-libs.install, d/samba-libs.links, d/samba-libs.symbols:
++ libndr has soversion 4 now. This breaks binaries linked with libndr!
++ * d/samba-libs.symbols: update with new ndr4 symbols
++ * d/libsmbclient.symbols: update with new symbols
++ * d/samba-dev.install: add smb3posix.h
++ * d/not-installed: add usr/bin/wspsearch experimental windows search binary
++ * d/control: libperl-json is not needed for build anymore
++ * d/control: bump minimum mit-krb5 version in Build-Depends to 1.21
++ (for pkg.samba.mitkrb5 build profile)
++ * Closes: #1070335 (wronly filed)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 08 May 2024 13:23:57 +0300
++
++samba (2:4.19.6+dfsg-3) unstable; urgency=medium
++
++ * fix brown-paper-bag bugs in previous upload
++ (in meaningful-error-if-no-python3-markdown.patch)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 02 May 2024 20:47:15 +0300
++
++samba (2:4.19.6+dfsg-2) unstable; urgency=medium
++
++ [ Michael Tokarev ]
++ * meaningful-error-if-no-python3-markdown.patch:
++ update to include 2 other places where markdown gets improted
++ * d/winbind.service:
++ - order it before nss-user-lookup.target (Closes: #1068649)
++ - fix typo
++ - nmb.service is nmbd.service in debian
++ * move include/samba/core/*.h from samba-libs to libwbclient-dev
++ (Closes: #1064544)
++
++ [ Alex Murray ]
++ * fix smbd apparmor breakage since change to local systemd services
++ (Cloes: #1069661)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 02 May 2024 14:08:31 +0300
++
++samba (2:4.19.6+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release:
++ - https://bugzilla.samba.org/show_bug.cgi?id=15527 fd_handle_destructor()
++ panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close()
++ - https://bugzilla.samba.org/show_bug.cgi?id=15580
++ Packet marshalling push support missing for
++ CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED
++ - https://bugzilla.samba.org/show_bug.cgi?id=15588
++ samba-gpupdate: Correctly implement site support
++ - https://bugzilla.samba.org/show_bug.cgi?id=15599
++ libgpo: Segfault in python bindings
++ * revert d/rules: remove Debian/Ubuntu "branding"
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Apr 2024 11:18:38 +0300
++
++samba (2:4.19.5+dfsg-5) unstable; urgency=medium
++
++ * implement pkg.samba.before-trixie build profile
++ (undo t64 changhes and drop build-dep)
++ * d/rules: remove Debian/Ubuntu "branding", no need in that
++ * d/control: samba-dsdb-modules: drop hardcoded dependency on libgpgme11
++ (Closes: #1068526)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 07 Apr 2024 16:04:30 +0300
++
++samba (2:4.19.5+dfsg-4) unstable; urgency=medium
++
++ * stop shipping python3/dist-packages/samba/tests
++ (Closes: #1064512, #1063149)
++ * add Debian-Specific tag to debian-specific patches
++ * d/genshlibs: run dh_makeshlibs on libsmbclient0
++ (Closes: #1065349)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 03 Mar 2024 15:37:16 +0300
++
++samba (2:4.19.5+dfsg-3) unstable; urgency=medium
++
++ * d/control: add versioned depends on dpkg-dev to avoid accidental
++ build of time64_t packages on older systems
++ * +lower-dns-lookup-mismatch-messages.patch (reduce log noise)
++ * d/control: add libtirpc-dev and rpcsvc-proto to Build-Depends-Arch
++ (Closes: #1065188)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 01 Mar 2024 19:18:35 +0300
++
++samba (2:4.19.5+dfsg-2) unstable; urgency=medium
++
++ * rename libsmbclient => libsmbclient0 for 64-bit time_t transition
++ Closes: #1064337
++ * d/libsmbclient.lintian-overrides: remove, soname now = package name
++ * add Breaks: of sssd packages to samba-libs
++ * +passchange-error-message.patch - fix password change error message
++ * +edns0.patch: enable EDNS0 support in internal UDP-only DNS client
++ https://bugzilla.samba.org/show_bug.cgi?id=15536
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 28 Feb 2024 19:38:48 +0300
++
++samba (2:4.19.5+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release (4.19.5)
++ * reformat previous changelog entry to fit in 80cols
++ * d/winbind.postrm: stop recursively removing plain files
++ * d/winbind.postrm: winbindd_cache.tdb is in /var/lib now,
++ not in /var/cache
++ * d/control: RulesRequiresRoot:no
++ * d/*.symbols: use #PACKAGE# placeholders where appropriate
++ (or add comments where it is not)
++ * +silence-can-not-convert-group-sid.diff -
++ make another log message less annoying
++ * -python-fix-invalid-escape-sequences.patch (applied upstream)
++ * d/control: replace pkg-config=>pkgconf in Build-Depends, remove
++ pkg-config from Depends of libldb-dev and python3-ldb-dev
++ * d/samba-libs.symbols, d/control: make libsmbldapN a virtual package
++ provided by samba-libs too, like libndrN
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 19 Feb 2024 15:21:14 +0300
++
++samba (2:4.19.4+dfsg-3) unstable; urgency=medium
++
++ * samba,winbind: remove logrotate scripts
++ samba does its own log rotation (max log size (=5000 by default) and
++ renaming to .old). The two clashes with each other in an interesting way.
++ * d/samba-libs.symbols, d/control: make libndrN a virtual package
++ to ensure rdeps pick the right dependency
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 30 Jan 2024 12:12:42 +0300
++
++samba (2:4.19.4+dfsg-2) unstable; urgency=medium
++
++ * d/samba.smbd.service, d/samba.nmbd.service: expand forgotten @BINDIR@
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Jan 2024 20:44:51 +0300
++
++samba (2:4.19.4+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release. See WHATSNEW.txt for details.
++ * d/control: drop pkg.samba.nouring build profile: was needed
++ for focal which we do not support anymore
++ * remove /etc/cron.daily/samba: there's no reason to keep backing it up,
++ most stuff is in ldb/tdb files these days.
++ * d/samba.maintscript, d/winbind.maintscript:
++ remove old rm_connfiles (pre-buster versions)
++ * d/rules, d/*.service: provide .service files directly instead of renaming
++ and patching upstream templates, and use dh_installsystemd to install them
++ (partially Closes: #1059187)
++ * d/rules: run dh_movetousr for libpam-winbind & libnss-winbind, if exists.
++ This fixes remaining files in /lib (hopefully). In a search for better
++ way to detect where to put system libs (/lib vs /usr/lib) as a configure
++ option. Closes: #1059187
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 08 Jan 2024 19:11:37 +0300
++
++samba (2:4.19.3+dfsg-2) unstable; urgency=medium
++
++ * d/rules: simplify LDFLAGS assignment
++ * d/rules: add -mlong-jump-table-offsets to CFLAGS on m68k (fix FTBFS there)
++ * d/rules: CFLAGS += -ffile-prefix-map=../../=
++ * d/control: fix versioned dependency on samba for samba-ad-dc
++ * +python-fix-invalid-escape-sequences.patch from upstream (Closes: #1057668)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 11 Dec 2023 13:19:18 +0300
++
++samba (2:4.19.3+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release:
++ - https://bugzilla.samba.org/show_bug.cgi?id=13595
++ CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP
++ to normal users (Closes: #1034803). Please see WHATSNEW.txt file for
++ more information about this issue: actual fix requires extra steps to
++ be performed against samba-based AD-DC
++ - https://bugzilla.samba.org/show_bug.cgi?id=15093
++ Files without "read attributes" NFS4 ACL permission are not listed
++ in directories
++ - https://bugzilla.samba.org/show_bug.cgi?id=15487
++ smbd crashes if asked to return full information on close of
++ a stream handle with delete on close disposition set
++ - https://bugzilla.samba.org/show_bug.cgi?id=15492
++ Kerberos TGS-REQ with User2User does not work for normal accounts
++ - https://bugzilla.samba.org/show_bug.cgi?id=15499
++ Improve logging for failover scenarios
++ - https://bugzilla.samba.org/show_bug.cgi?id=15507
++ vfs_gpfs stat calls fail due to file system permissions
++ - https://bugzilla.samba.org/show_bug.cgi?id=15513
++ Samba doesn't build with Python 3.12
++ - https://bugzilla.samba.org/show_bug.cgi?id=15520
++ sid_strings test broken by unix epoch > 1700000000
++ - https://bugzilla.samba.org/show_bug.cgi?id=15521
++ smbd: fix close order of base_fsp and stream_fsp
++ in smb_fname_fsp_destructor()
++ * d/samba-common.maintscript: fix version number for dhcp hook removal
++ (Closes: #1053780)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 27 Nov 2023 22:22:54 +0300
++
++samba (2:4.19.2+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release:
++ - https://bugzilla.samba.org/show_bug.cgi?id=15423
++ Use-after-free in aio_del_req_from_fsp during smbd shutdown
++ after failed IPC FSCTL_PIPE_TRANSCEIVE
++ - https://bugzilla.samba.org/show_bug.cgi?id=15426
++ clidfs.c do_connect() missing a "return" after a cli_shutdown() call
++ - https://bugzilla.samba.org/show_bug.cgi?id=15463
++ macOS mdfind returns only 50 results
++ - https://bugzilla.samba.org/show_bug.cgi?id=15481
++ GETREALFILENAME_CACHE can modify incoming new filename
++ with previous cache entry value
++ - https://bugzilla.samba.org/show_bug.cgi?id=15464
++ libnss_winbind causes memory corruption since samba-4.18,
++ impacts sendmail, zabbix, potentially more
++ - https://bugzilla.samba.org/show_bug.cgi?id=15479
++ ctdbd: setproctitle not initialized messages flooding logs
++ - https://bugzilla.samba.org/show_bug.cgi?id=15491
++ CVE-2023-5568 Heap buffer overflow with freshness tokens
++ in the Heimdal KDC in Samba 4.19
++ - https://bugzilla.samba.org/show_bug.cgi?id=15477
++ The heimdal KDC doesn't detect s4u2self correctly when fast is in use
++ * d/samba-common.maintscript: remove obsolete conffile
++ /etc/dhcp/dhclient-enter-hooks.d/samba (Closes: #1053780)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 16 Oct 2023 18:26:31 +0300
++
++samba (2:4.19.1+dfsg-4) unstable; urgency=medium
++
++ * d/samba-common.postinst: restore installing of smb.conf using ucf
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 22:33:32 +0300
++
++samba (2:4.19.1+dfsg-3) unstable; urgency=medium
++
++ * d/ctdb.install: sync ceph arch list
++ * d/control: mention other places where ceph arch list is used
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 20:12:20 +0300
++
++samba (2:4.19.1+dfsg-2) unstable; urgency=medium
++
++ * d/rules: sync with-ceph arch list from d/control
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 19:03:42 +0300
++
++samba (2:4.19.1+dfsg-1) unstable; urgency=medium
++
++ * new stable security bugfix release:
++ o CVE-2023-3961: https://www.samba.org/samba/security/CVE-2023-3961.html
++ Unsanitized pipe names allow SMB clients to connect as root
++ to existing unix domain sockets on the file system.
++ o CVE-2023-4091: https://www.samba.org/samba/security/CVE-2023-4091.html
++ SMB client can truncate files to 0 bytes by opening files with OVERWRITE
++ disposition when using the acl_xattr Samba VFS module with the smb.conf
++ setting "acl_xattr:ignore system acls = yes"
++ o CVE-2023-4154: https://www.samba.org/samba/security/CVE-2023-4154.html
++ An RODC and a user with the GET_CHANGES right can view all attributes,
++ including secrets and passwords. Additionally, the access check fails
++ open on error conditions.
++ o CVE-2023-42669: https://www.samba.org/samba/security/CVE-2023-42669.html
++ Calls to the rpcecho server on the AD DC can request that the server
++ block for a user-defined amount of time, denying service.
++ o CVE-2023-42670: https://www.samba.org/samba/security/CVE-2023-42670.html
++ Samba can be made to start multiple incompatible RPC listeners,
++ disrupting service on the AD DC.
++ * remove debconf questions and wins dhcp hooks together with po files
++ (wins is not relevant today anymore)
++ * d/control: bump mit-krb5 build-dep (on mitkrb5 profile) to 1.20
++ * d/control: disable ceph (libcephfs-dev, librados-dev) on 32bit
++ architectures (Closes: #1053202)
++ * d/control: enable rados on riscv64 once it's available there
++ * d/control: samba-libs: depend on libldb of the same version since libldb
++ symbols might appear during previous stable series but they don't propagate
++ to next releases with previous minor version numbers. This is ABI breakage
++ but the symbols are mostly internal to samba itself
++ * debian/libldb2.symbols: update
++ * drop attempts to keep ldb ABI versioning
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 10 Oct 2023 18:02:05 +0300
++
++samba (2:4.19.0+dfsg-1) unstable; urgency=medium
++
++ * new upstream release. Some highlights:
++ o changed command-line interface of smbget utility
++ o improved winbindd logging
++ o AD database prepared to FL 2016 standards for new domains
++ o initial, partial implementation of AD FL 2012, 2012R2 and 2016
++ o samba-tool support for silos, claims, sites and subnets
++ o updated Heimdal import
++ o other improvements and changes, see WHATSNEW.txt file for details.
++ * d/patches: remove patches applied upstream, refresh patches
++ * d/control: update talloc/tevent/tdb build-deps
++ * d/smbclient.install: remove smbgetrc.5
++ * d/patches: add ldb 2.7.1 & 2.7.2 ABI files
++ * d/libldb2.symbols: add new symbols (ldb_val_as_*) and new version (2.8.0)
++ * d/python3-ldb.symbols: remove unused versions, add new version
++ * d/control: fix description of samba-common-bin (samba-client)
++ * d/samba-common-bin.install: install samba-log-parser (for winbindd for now)
++ * d/samba-libs.install: 2 new libs
++ * d/samba-libs.install, d/samba-testsuite.install: move libshares-samba4.so.0
++ from samba-libs to samba-testsuite
++ * d/samba-libs.install, d/samba-vfs-modules.install: move
++ libdfs-server-ad-samba4.so.0 from samba-libs to samba-vfs-modules
++ * d/samba-libs.install, d/samba-common-bin.install: move
++ libnet-keytab-samba4.so.0 from samba-libs to samba-common-bin (used by net)
++ * d/samba-libs.install, d/samba-common-bin.install: move
++ libRPC-WORKER-samba4.so.0 from samba-libs to samba-common-bin
++ (used by usr/libexec/samba/rpcd_*)
++ * samba-libs: add libndr 3.0.1 symbols
++ * d/source/lintian-overrides: remove unused source-is-missing override
++ * d/samba-vfs-modules.lintian-overrides: remove unused
++ spelling-error-in-binary override
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 04 Sep 2023 22:57:48 +0300
++
++samba (2:4.18.6+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release:
++ - https://bugzilla.samba.org/show_bug.cgi?id=9959
++ Windows client join fails if a second container CN=System exists somewhere
++ - https://bugzilla.samba.org/show_bug.cgi?id=15289
++ post-exec password redaction for samba-tool is more reliable for
++ fully random passwords as it no longer uses regular expressions
++ containing the password value itself
++ - https://bugzilla.samba.org/show_bug.cgi?id=15342
++ Spotlight sometimes returns no results on latest macOS
++ - https://bugzilla.samba.org/show_bug.cgi?id=15346
++ 2-3min delays at reconnect with smb2_validate_sequence_number:
++ bad message_id 2
++ - https://bugzilla.samba.org/show_bug.cgi?id=15390
++ Python tarfile extraction needs change to avoid a warning
++ (CVE-2007-4559 mitigation)
++ - https://bugzilla.samba.org/show_bug.cgi?id=15400
++ rpcserver no longer accepts double backslash in dfs pathname
++ - https://bugzilla.samba.org/show_bug.cgi?id=15414
++ "net offlinejoin provision" does not work as non-root user
++ - https://bugzilla.samba.org/show_bug.cgi?id=15417
++ Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted
++ to remove the destination
++ - https://bugzilla.samba.org/show_bug.cgi?id=15420
++ reply_sesssetup_and_X() can dereference uninitialized tmp pointer
++ - https://bugzilla.samba.org/show_bug.cgi?id=15427
++ Spotlight results return wrong date in result list
++ - https://bugzilla.samba.org/show_bug.cgi?id=15430
++ Missing return in reply_exit_done()
++ - https://bugzilla.samba.org/show_bug.cgi?id=15433
++ cm_prepare_connection() calls close(fd) for the second time
++ - https://bugzilla.samba.org/show_bug.cgi?id=15435
++ Regression DFS not working with widelinks = true
++ - https://bugzilla.samba.org/show_bug.cgi?id=15441
++ samba-tool ntacl get segfault if aio_pthread appended
++ - https://bugzilla.samba.org/show_bug.cgi?id=15446
++ DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed
++ - https://bugzilla.samba.org/show_bug.cgi?id=15449
++ mdssvc: Do an early talloc_free() in _mdssvc_open()
++ * d/control: python3-testtools is only needed for selftest,
++ remove from Build-Depends for now
++ * d/rules: export PYTHONDONTWRITEBYTECODE=1 to stop python from generating
++ .pyc caches (Closes: #1048754)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 16 Aug 2023 20:11:26 +0300
++
++samba (2:4.18.5+dfsg-2) unstable; urgency=medium
++
++ * d/rules, d/control: only build glusterfs support on 64bits
++ (Closes: #1041996)
++ * d/rules: make ceph conditional similar to gluster
++ * d/rules: wrap _PYTHON_SYSCONFIGDATA_NAME setting to cross-compile case
++ On e.g. buster, _PYTHON_SYSCONFIGDATA_NAME is different, so this assignment
++ does not work right. In order for it to work on buster, add condition on
++ host vs build gnu type. This breaks compilation with foreign python binary.
++ * d/control: fix description of samba-common-bin (samba-client)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 04 Aug 2023 17:29:06 +0300
++
++samba (2:4.18.5+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/security release 4.18.5, including:
++ o CVE-2022-2127: When winbind is used for NTLM authentication,
++ a maliciously crafted request can trigger an out-of-bounds read
++ in winbind and possibly crash it.
++ https://www.samba.org/samba/security/CVE-2022-2127.html
++ o CVE-2023-3347: SMB2 packet signing is not enforced if an admin
++ configured "server signing = required" or for SMB2 connections to
++ Domain Controllers where SMB2 packet signing is mandatory.
++ https://www.samba.org/samba/security/CVE-2023-3347.html
++ o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service
++ for Spotlight can be triggered by an unauthenticated attacker by
++ issuing a malformed RPC request.
++ https://www.samba.org/samba/security/CVE-2023-34966.html
++ o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service
++ for Spotlight can be used by an unauthenticated attacker to trigger
++ a process crash in a shared RPC mdssvc worker process.
++ https://www.samba.org/samba/security/CVE-2023-34967.html
++ o CVE-2023-34968: As part of the Spotlight protocol Samba discloses
++ the server-side absolute path of shares and files and directories
++ in search results.
++ https://www.samba.org/samba/security/CVE-2023-34968.html
++ o BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023.
++ https://bugzilla.samba.org/show_bug.cgi?id=15418
++ (this has been patched in the previous upload; Closes: #1041043)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Jul 2023 17:55:58 +0300
++
++samba (2:4.18.4+dfsg-2) unstable; urgency=medium
++
++ * +fix-unsupported-netr_LogonGetCapabilities-l2.patch
++ Fix windows logon/trust issues with 2023-07 windows updates:
++ https://bugzilla.samba.org/show_bug.cgi?id=15418
++ * d/copyright: also remove ctdb/doc/*.?.html pre-generated manpages
++ from the upstream tarball (forgotten previously)
++ * d/rules: add comment about -latomic gcc issue and drop --as-needed
++ there since it is already in use
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 14 Jul 2023 12:30:31 +0300
++
++samba (2:4.18.4+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release, including:
++ - https://bugzilla.samba.org/show_bug.cgi?id=2312
++ smbcacls and smbcquotas do not check // before the server
++ - https://bugzilla.samba.org/show_bug.cgi?id=14030
++ Named crashes on DLZ zone update (was in debian before)
++ - https://bugzilla.samba.org/show_bug.cgi?id=15355
++ NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry
++ and causes test timeouts
++ - https://bugzilla.samba.org/show_bug.cgi?id=15381
++ Register Samba processes with GPFS
++ - https://bugzilla.samba.org/show_bug.cgi?id=15382
++ cli_list loops 100% CPU against pre-lanman2 servers
++ - https://bugzilla.samba.org/show_bug.cgi?id=15383
++ Remove comments about deprecated 'write cache size'
++ - https://bugzilla.samba.org/show_bug.cgi?id=15384
++ net ads lookup (with unspecified realm) fails
++ - https://bugzilla.samba.org/show_bug.cgi?id=15390
++ Python tarfile extraction needs change to avoid a warning
++ (CVE-2007-4559 mitigation)
++ - https://bugzilla.samba.org/show_bug.cgi?id=15391
++ smbclient leaks fds with showacls
++ - https://bugzilla.samba.org/show_bug.cgi?id=15398
++ The winbind child segfaults when listing users with
++ `winbind scan trusted domains = yes`
++ - https://bugzilla.samba.org/show_bug.cgi?id=15402
++ smbd returns NOT_FOUND when creating files on a r/o filesystem
++ - https://bugzilla.samba.org/show_bug.cgi?id=15403
++ smbget memory leak if failed to download files recursively
++ - https://bugzilla.samba.org/show_bug.cgi?id=15404
++ Backport --pidl-developer fixes
++ * remove dnsserver-rename-dns_name_equal.patch (applied upstream)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 05 Jul 2023 18:14:20 +0300
++
++samba (2:4.18.3+dfsg-3) unstable; urgency=medium
++
++ * d/rules: query for DEB_HOST_ARCH, not DEB_HOST_ARCH_CPU,
++ for -latomic workaround
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 21 Jun 2023 23:11:59 +0300
++
++samba (2:4.18.3+dfsg-2) unstable; urgency=medium
++
++ * d/rules: include -latomic gcc issue workaround for select arches
++ apparently due to a gcc issue, some architectures (armel, mipsel, ...)
++ fail to link samba due to not finidng __atomic_load_8 etc symbols
++ after using atomic_load etc from stdatomic.h (part of gcc).
++ Add -latomic explicitly to the list of libraries we link with.
++ * d/rules: add libwbclient0 to the list of krb5-versioned packages
++ (thanks to Andrew Kornilov)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 20 Jun 2023 11:35:13 +0300
++
++samba (2:4.18.3+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release:
++ - https://bugzilla.samba.org/show_bug.cgi?id=15375
++ Symlinks to files can have random DOS mode information
++ in a directory listing
++ - https://bugzilla.samba.org/show_bug.cgi?id=15378
++ vfs_fruit might cause a failing open for delete
++ - https://bugzilla.samba.org/show_bug.cgi?id=15361
++ winbind recurses into itself via rpcd_lsad
++ - https://bugzilla.samba.org/show_bug.cgi?id=15366
++ wbinfo -u fails on ad dc with >1000 users
++ - https://bugzilla.samba.org/show_bug.cgi?id=15338
++ DS ACEs might be inherited to unrelated object classes
++ - https://bugzilla.samba.org/show_bug.cgi?id=15362
++ a lot of messages: get_static_share_mode_data:
++ get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND
++ - https://bugzilla.samba.org/show_bug.cgi?id=15374
++ aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse()
++ - https://bugzilla.samba.org/show_bug.cgi?id=15360
++ Setting veto files = /.*/ break listing directories
++ - https://bugzilla.samba.org/show_bug.cgi?id=15363
++ "samba-tool domain provision" does not run interactive mode
++ if no arguments are given
++ - https://bugzilla.samba.org/show_bug.cgi?id=15325
++ dsgetdcname: assumes local system uses IPv4
++ * dnsserver-rename-dns_name_equal.patch
++ (forgotten) patch from upstream targetting next stable
++ Fixes crashes of named with samba DLZ plugin due to
++ symbol name conflict (dns_name_equal() function).
++ There's no resulting code changes, just a symbol rename.
++ https://bugzilla.samba.org/show_bug.cgi?id=14030
++ Closes: #1036587, #927747
++ * remove generated manpage files upstream ships in
++ docs/manpages/ and ctdb/doc/
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 31 May 2023 20:09:05 +0300
++
++samba (2:4.18.2+dfsg-1) experimental; urgency=medium
++
++ * new upstream stable/bugfix release:
++ - https://bugzilla.samba.org/show_bug.cgi?id=15302
++ Log flood: smbd_calculate_access_mask_fsp: Access denied:
++ message level should be lower.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15306
++ Floating point exception (FPE) via cli_pull_send
++ at source3/libsmb/clireadwrite.c.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15328
++ test_tstream_more_tcp_user_timeout_spin fails intermittently
++ on Rackspace GitLab runners.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15329
++ Reduce flapping of ridalloc test.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15351
++ large_ldap test is unreliable.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15143
++ New filename parser doesn't check veto files smb.conf parameter.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15354
++ mdssvc may crash when initializing.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15313
++ large directory optimization broken for non-lcomp path elements.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15357
++ streams_depot fails to create streams.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15358
++ shadow_copy2 and streams_depot don't play well together.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15316
++ Flapping tests in samba_tool_drs_show_repl.py.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15317
++ winbindd idmap child contacts the domain controller without a need.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15318
++ idmap_autorid may fail to map sids of trusted domains for the first time.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15319
++ idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15323
++ net ads search -P doesn't work against servers in other domains.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15353
++ Temporary smbXsrv_tcon_global.tdb can't be parsed.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15316
++ Flapping tests in samba_tool_drs_show_repl.py.
++ - https://bugzilla.samba.org/show_bug.cgi?id=15343
++ Tests use depricated and removed methods like assertRegexpMatches.
++ * d/rules, d/libldb2.symbols; add ldb 2.6.2 version
++ * heimdal-to-support-KEYRING-ccache.patch: enable KEYRING in heimdal
++ (Closes: #1023609)
++ * d/control: build-depend on libkeyutils-dev
++ (it is pulled by some other dep, but better to be safe)
++ * -s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
++ (the change has been applied upstream)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Apr 2023 14:02:49 +0300
++
++samba (2:4.18.1+dfsg-1~exp1) experimental; urgency=high
++
++ * upstream stable/security/bugfix release, fixing the following issues:
++ o CVE-2023-0225: An incomplete access check on dnsHostName allows
++ authenticated but otherwise unprivileged users to delete this
++ attribute from any object in the directory.
++ https://www.samba.org/samba/security/CVE-2023-0225.html
++ o CVE-2023-0922: The Samba AD DC administration tool, when operating
++ against a remote LDAP server, will by default send new or reset
++ passwords over a signed-only connection.
++ https://www.samba.org/samba/security/CVE-2023-0922.html
++ o CVE-2023-0614: Fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919
++ Confidential attribute disclosure via LDAP filters was insufficient and
++ an attacker may be able to obtain confidential BitLocker recovery keys
++ from a Samba AD DC. Installations with such secrets in their Samba AD
++ should assume they have been obtained and need replacing.
++ https://www.samba.org/samba/security/CVE-2023-0614.html
++ Closes: CVE-2023-0225 CVE-2023-0922 CVE-2023-0614
++ * update libldb symbols and versions
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 29 Mar 2023 17:59:17 +0300
++
++samba (2:4.18.0+dfsg-1~exp1) experimental; urgency=medium
++
++ * new upstream release (4.18.0):
++ * SMB Server performance improvements
++ * More succinct samba-tool error messages
++ * Colour output with samba-tool --color
++ * New samba-tool dsacl subcommand for deleting ACES
++ * New wbinfo option --change-secret-at
++ * New option to change the NT ACL default location
++ * Azure Active Directory / Office365 synchronisation improvements
++ * new smb.conf parameters:
++ server addresses
++ acl_xattr:security_acl_name
++ * For more details, please refer to WHATSNEW.txt file.
++ * d/control: bump talloc/tdb/tevent build-deps
++ * patches:
++ - refresh: hurd-compat.patch
++ - refresh: spelling.patch, remove many, add 3 new changes
++ - new: heimdal-spelling.patch, spelling fixes for third_party/heimdal
++ - remove: unwrap-getresgid-typo.patch, not needed
++ * d/samba-libs.install: add new internal library libstable-sort-samba4.so.0
++ * d/libldb2.symbols, python3-ldb.symbols.in: add new versions (2.7.0, 2.7.1)
++ * d/libwbclient0.symbols: add new version and two new symbols:
++ wbcChangeTrustCredentialsAt wbcCtxChangeTrustCredentialsAt
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 09 Mar 2023 14:47:05 +0300
++
++samba (2:4.17.6+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release 4.17.6:
++ * https://bugzilla.samba.org/show_bug.cgi?id=15314
++ streams_xattr is creating unexpected locks on folders.
++ * https://bugzilla.samba.org/show_bug.cgi?id=10635
++ Use of the Azure AD Connect cloud sync tool is now supported for password
++ hash synchronisation, allowing Samba AD Domains to synchronise passwords
++ with this popular cloud environment.
++ * https://bugzilla.samba.org/show_bug.cgi?id=15299
++ Spotlight doesn't work with latest macOS Ventura.
++ * https://bugzilla.samba.org/show_bug.cgi?id=15310
++ New samba-dcerpc architecture does not scale gracefully.
++ * https://bugzilla.samba.org/show_bug.cgi?id=15307
++ vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd()
++ in close and fstat.
++ * https://bugzilla.samba.org/show_bug.cgi?id=15293
++ With clustering enabled samba-bgqd can core dump due to use after free.
++ * https://bugzilla.samba.org/show_bug.cgi?id=15311
++ fd_load() function implicitly closes the fd where it should not.
++ * debian/po/ro.po update from Remus-Gabriel Chelu
++ * s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
++ makes smbd a bit less spammy in logs
++ * d/control: clarify some package descriptions (Closes: #1031922)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 09 Mar 2023 12:52:14 +0300
++
++samba (2:4.17.5+dfsg-2) unstable; urgency=medium
++
++ * d/control: samba: depends on exact version of python3-samba
++ * d/control: fix typo
++ * more tweaks for foreign/cross build
++ * d/control: work around autodep8 #904999 again
++ * introduce upstream-like aliases for debian .service names,
++ add rationale
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 04 Feb 2023 17:15:40 +0300
++
++samba (2:4.17.5+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/bugfix release. From WHATSNEW.txt:
++ * BUG 14808: smbc_getxattr() return value is incorrect.
++ * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX
++ are not handled correctly.
++ * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors.
++ * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs()
++ fails to find DC when there is only an AAAA record for the DC in DNS
++ (Closes: #1023606).
++ * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle.
++ * BUG 15277: DFS links don't work anymore on Mac clients since 4.17.
++ * BUG 15283: vfs_virusfilter segfault on access,
++ directory edgecase (accessing NULL value).
++ * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
++ based SChannel on NETLOGON (additional changes).
++ * BUG 15243: %U for include directive doesn't work for share listing
++ (netshareenum) (the fix was in debian before).
++ * BUG 15266: Shares missing from netshareenum response in samba 4.17.4
++ (the fix was in debian before).
++ * BUG 15269: ctdb: use-after-free in run_proc.
++ * BUG 15280: irpc_destructor may crash during shutdown.
++ * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo.
++ * BUG 15268: smbclient segfaults with use after free on an optimized build
++ * BUG 15282: smbstatus leaking files in msg.sock and msg.lock.
++ * BUG 15164: Leak in wbcCtxPingDc2.
++ * BUG 15265: Access based share enum does not work in Samba 4.16+.
++ * BUG 15267: Crash during share enumeration.
++ * BUG 15271: rep_listxattr on FreeBSD does not properly check
++ for reads off end of returned buffer.
++ * BUG 15281: Avoid relying on C89 features in a few places.
++ * remove patches applied upstream:
++ - reload-registry-shares-after-reloading-services.patch
++ - rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
++ * d/control: Standards-Version: 4.6.2 (no changes)
++ * d/control: put all doc-generating build-deps into one line
++ * little prep for cross-compilation
++ - build-depend on python3:any and python3-dev:any
++ - build-depend on libpython3-dev for actual module building,
++ and use arch-specific python3-config from there
++ - set and export _PYTHON_SYSCONFIGDATA_NAME to get foreign-arch values
++ provided by libpython3-dev (also helps when python itself is foreign)
++ - depend on perl:any not just perl
++ - export CC/CPP/LD/PKGCONFIG for ./configure (buildtools.mk)
++ * d/gbp.conf: unignore branch
++ * d/control: samba, ctdb, winbind: do not depend on lsb-base
++ (the script is in sysvinit-utils now)
++ * d/control: drop unused build-dep on libncurses5-dev
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 27 Jan 2023 11:15:01 +0300
++
++samba (2:4.17.4+dfsg-3) unstable; urgency=medium
++
++ * +rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
++ https://bugzilla.samba.org/show_bug.cgi?id=15265
++ * +reload-registry-shares-after-reloading-services.patch
++ https://bugzilla.samba.org/show_bug.cgi?id=15266
++ * d/samba.postinst: fix /var/spool/samba => /var/tmp handling
++ (old spooldir can be referred to in other sections too)
++ * create common script "is-configured" to check if the service is configured
++ in smb.conf, and stop masking services in postinst
++ * rewrite SysV init scripts (simplify, make consistent, etc)
++ * d/winbind.postinst: create/change /var/lib/samba/winbindd_privileged
++ at install time only (it should be in /run/samba/ somewhere these days)
++ * d/control: change version of samba which samba-ad-provisioning
++ Breaks to where provisioning was split out
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 03 Jan 2023 10:45:36 +0300
++
++samba (2:4.17.4+dfsg-2) unstable; urgency=medium
++
++ * d/control: samba-dc-provision Replaces+Breaks samba (< 4.17.4+dfsg-2).
++ Closes: #1026387
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 19 Dec 2022 16:36:00 +0300
++
++samba (2:4.17.4+dfsg-1) unstable; urgency=medium
++
++ * new upstream stable/security release, with the following changes:
++ - CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege
++ Vulnerability disclosed by Microsoft on Nov 8 2022, see
++ https://www.samba.org/samba/security/CVE-2022-37966.html
++ - CVE-2022-37967: Windows Kerberos Elevation of Privilege Vulnerability
++ disclosed by Microsoft on Nov 8 2022. See
++ https://www.samba.org/samba/security/CVE-2022-37967.html
++ - CVE-2022-38023: Weak "RC4" (rc4-hmac) protection of the NetLogon Secure
++ channel uses, see https://www.samba.org/samba/security/CVE-2022-38023.html
++ There are several important behavior changes included in this release,
++ which may cause compatibility problems interacting with system still
++ expecting the former behavior. Please read the documents referenced above!
++ See also the WHATSNEW.txt document, as there are several new, changed
++ and deprecated smb.conf parameters.
++ * Other bugfixes in this release (from WHATSNEW.txt):
++ https://bugzilla.samba.org/show_bug.cgi?id=14929 CVE-2022-44640
++ Upstream Heimdal free of user-controlled pointer in FAST.
++ https://bugzilla.samba.org/show_bug.cgi?id=15219
++ Heimdal session key selection in AS-REQ examines wrong entry.
++ https://bugzilla.samba.org/show_bug.cgi?id=13135 The KDC logic around
++ msDs-supportedEncryptionTypes differs from Windows.
++ https://bugzilla.samba.org/show_bug.cgi?id=14611 CVE-2021-20251
++ Bad password count not incremented atomically.
++ https://bugzilla.samba.org/show_bug.cgi?id=15206 libnet: change_password()
++ doesn't work with dcerpc_samr_ChangePasswordUser4()
++ https://bugzilla.samba.org/show_bug.cgi?id=15230
++ Memory leak in snprintf replacement functions.
++ https://bugzilla.samba.org/show_bug.cgi?id=15253 RODC doesn't reset
++ badPwdCount reliable via an RWDC (CVE-2021-20251 regression).
++ https://bugzilla.samba.org/show_bug.cgi?id=15198
++ Prevent EBADF errors with vfs_glusterfs.
++ https://bugzilla.samba.org/show_bug.cgi?id=15243
++ %U for include directive doesn't work for share listing (netshareenum).
++ https://bugzilla.samba.org/show_bug.cgi?id=15257
++ Stack smashing in net offlinejoin requestodj.
++ * removed patches which are now included upstream:
++ - nsswitch-pam-data-time_t.patch
++ - CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 15 Dec 2022 21:54:31 +0300
++
++samba (2:4.17.3+dfsg-4) unstable; urgency=medium
++
++ * create samba-ad-provision package with contents of /usr/share/samba/setup.
++ It is recommended by samba, so can be uninstalled if not needed.
++ * create samba-ad-dc package. It is an empty metapackage for now, but with
++ dependencies needed to run an Active Directory Domain Controller (AD-DC)
++ * samba-ad-provision.lintian-overrides: license files
++ * print meaningful error message if samba-ad-provision is not installed
++ (meaningful-error-if-no-samba-ad-provision.patch)
++ * print meaningful error message if python3-markdown is not installed
++ (meaningful-error-if-no-python3-markdown.patch)
++ * ctdb: move rundir from /var/run to /run
++ * fix typo in fruit patch
++ * a few more spelling fixes
++ * add #DEBHELPER# tokens to libnss-winbind.{postinst,postrm}
++ * remove mentions of /var/spool/samba from samba.lintian-overrides
++ (moved to /var/tmp)
++ * change embedded-library heimdal lintian override in a way to be understood
++ by both old and new lintian, so the package can be uploaded
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 05 Dec 2022 14:39:43 +0300
++
++samba (2:4.17.3+dfsg-3) unstable; urgency=medium
++
++ * d/control: winbind should depend on the same binary:Version
++ of libwbclient, or else its components can't talk to the daemon.
++ Thank you Stefan Weichinger for the patience while finding this one!
++ * libnss-winbind: add postinst/postrm scripts to add/remove nsswitch.conf
++ entry for winbind (but not for wins)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 01 Dec 2022 22:38:07 +0300
++
++samba (2:4.17.3+dfsg-2) unstable; urgency=medium
++
++ * fruit-disable-useless-size_t-overflow-check.patch (Closes: #974868)
++ * CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
++ Fix regression on 32bit systems:
++ https://bugzilla.samba.org/show_bug.cgi?id=15203
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 21 Nov 2022 20:41:46 +0300
++
++samba (2:4.17.3+dfsg-1) unstable; urgency=medium
++
++ * new upstream security release 4.17.3, fixing the following issue:
++ CVE-2022-42898: Heimdal Kerberos libraries suffers from an integer
++ multiplication overflow vulnerability which affects 32bit platforms,
++ see https://www.samba.org/samba/security/CVE-2022-42898.html
++ This changes third_party/heimdal/, it does not affect mitkrb5 builds.
++ * d/rules: stop stripping +dfsg suffix from ldb version
++ * d/control: declare dependency on password (for groupadd in postinst)
++ for winbind and samba (Closes: #1023759)
++ * implement pkg.samba.mitkrb5 build profile to build with system mit-krb5
++ (with "mitkrb5" version suffix in some packages for now)
++ * d/control: mark libufing-dev build dep with <!pkg.samba.nouring>
++ (to simplify out-of-archive builds for older systems)
++ * d/rules: parametrise list of packages to omit (eg on ubuntu-i386)
++ with ${omit-pkgs}
++ * d/rules: use variables in a more consistent way, use single ${config-args}
++ * d/control: tdb-tools and lmdb-utils packages are also needed for tests
++ (everything is commented out for now anyway)
++ * d/rules: update knownfail tests
++ * d/rules: stop exporting buildflags, export compiler options when needed
++ * d/rules: always define rados:Depends & vfsmods:Depends substvars
++ * unwrap-getresgid-typo.patch - fix crash during p11-kit execution
++ (https://bugzilla.samba.org/show_bug.cgi?id=15227) (for the testsuite only)
++ * nsswitch-pam-data-time_t.patch - fix time_t not fit in a pointer (eg x32)
++ (https://bugzilla.samba.org/show_bug.cgi?id=15224)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 15 Nov 2022 19:26:10 +0300
++
++samba (2:4.17.2+dfsg-9) unstable; urgency=medium
++
++ * hurd-compat.patch: some minor compatibility tweaks for hurd
++ * d/rules compat work:
++ - ceph is linux-only like glusterfs
++ - d/rules: add another conditional, with_snapper
++ - combine linux features into single block
++ * d/rules: support "terse" build option for non-verbose build
++ * d/rules: remove third_party/heimdal/lib/gssapi/gssapi.h before build
++ (Closes: #1013205). This fixes -I path order and <gssapi/gssapi.h>
++ include mess which caused samba to FTBFS on sparc64 for quite some time
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 06 Nov 2022 20:13:19 +0300
++
++samba (2:4.17.2+dfsg-8) unstable; urgency=medium
++
++ * d/rules: do not explicitly enable quotas on non-linux:
++ enable everything interesting on linux explicitly and let ./configure
++ to figure it out in other systems. This should fix FTBFS problem on hurd.
++ * d/rules: do not disable systemd on non-linux, let ./configure figure it out
++ * d/winbind.postinst: switch addgroup => groupadd and eliminate getent.
++ winbind package never declared dependency on adduser but always used
++ addgroup command in its postinst script. Finally this broke piuparts.
++ Switch to groupadd which is even easier to use.
++ * d/samba.postinst: switch addgroup => groupadd and eliminate getent
++ * d/smb.conf: use useradd in example create user script too
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 03 Nov 2022 15:04:46 +0300
++
++samba (2:4.17.2+dfsg-7) unstable; urgency=medium
++
++ * another way to work around #1013259: provide a compatibility symlink
++ libndr.so.2 pointing to libndr.so.3:
++ - libndr-debug-level-compat.diff, libndr-revert-so3.diff: remove
++ - d/samba-libs.symbols: adjust symbols/versions
++ - d/samba-libs.install: libndr.so.2 => libndr.so.3
++ - d/samba-libs.links: provide the compat libndr.so.2 symlink
++ * d/samba-libs.links: add comments describing libndr.so.N issue
++ * d/samba-libs.links: add libndr.so.1 compat symlink too (for bullseye sssd)
++ * d/control: unbreak bullseye/jammy sssd-ad-common, sssd-ad, sssd-ipa
++ by samba-libs once libndr.so.1 compat link is here
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 02 Nov 2022 20:43:53 +0300
++
++samba (2:4.17.2+dfsg-6) unstable; urgency=medium
++
++ * d/control: fix comment in previous upload
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 02 Nov 2022 10:45:26 +0300
++
++samba (2:4.17.2+dfsg-5) unstable; urgency=medium
++
++ * d/control: bump version of broken-by-samba-libs sssd
++ and add more affected sssd packages;
++ also reformat the comment there so dpkg-gencontrol does not complain
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 02 Nov 2022 09:34:10 +0300
++
++samba (2:4.17.2+dfsg-4) unstable; urgency=medium
++
++ * d/control: stop suggesting old/orphaned/gone-upstream smbldap-tools
++ * libndr work (Closes: #1013259):
++ - d/control: samba-libs breaks bullseye sssd-ad due to libndr.so.1=>.2 bump
++ - d/samba-libs.install: be more explicit about sonames of public libs
++ to catch soname changes
++ - libndr-debug-level-compat.diff, libndr-revert-so3.diff: revert
++ libndr.so.2->3 soname bump by providing compat wrapper for new symbol
++ - d/samba-libs.symbols: provide symbols for libndr.so.2
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 01 Nov 2022 12:53:22 +0300
++
++samba (2:4.17.2+dfsg-3) unstable; urgency=low
++
++ * rebase on top of debian 4.16.6+dfsg-6 release, include some
++ history of 4.17.* experimental releases in changelog
++ * d/samba-libs.lintian-overrides: update package-name-doesnt-match-sonames
++ to match all libs
++ * urgency is set to low to delay unstable->testing transition a bit
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 30 Oct 2022 16:23:51 +0300
++
++samba (2:4.17.2+dfsg-2) experimental; urgency=medium
++
++ * d/rules: stop dh_installpam from installing samba.pam
++ to the samba package (Closes: #1022775, #1022776)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 20:13:53 +0300
++
++samba (2:4.17.2+dfsg-1) experimental; urgency=medium
++
++ * upstream 4.17.2 security release:
++ CVE-2022-3592 A malicious client can use a symlink to escape the exported
++ directory. https://www.samba.org/samba/security/CVE-2022-3592.html
++ (Samba 4.17 only)
++ * Remove poptGetArg-misuse-fixes-1022826.diff (applied to 4.17.2)
++ * d/rules: no need to build compile_et,asn1_compile intermediate targets
++ anymore; also remove now-unused ${WAFv} macro
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 14:30:44 +0300
++
++samba (2:4.17.1+dfsg-1) experimental; urgency=medium
++
++ * new upstream bugfix release containing a security fix:
++ * CVE-2021-20251 Bad password count not incremented atomically.
++ * Merge changes from 4.16.x (debian/master) branch.
++ * use-bzero-instead-of-memset_s.diff : use explicit_bzero() instead of
++ bzero() for the substitute of memset_s(). bzero() is wrong here because
++ it, just like memset, can be optimized out by the compiler.
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 19 Oct 2022 21:34:11 +0300
++
++samba (2:4.17.0+dfsg-2) experimental; urgency=medium
++
++ * mention closing of CVE-2022-32743 by the 4.17.0 upload
++ * mention closing of CVE-2022-1615 by the 4.17.0 upload
++ * move libpac-samba4.so.0 from samba to samba-libs (Closes: #1021450)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 08 Oct 2022 23:00:05 +0300
++
++samba (2:4.17.0+dfsg-1) experimental; urgency=medium
++
++ * new upstream release 4.17.0
++ Closes: CVE-2022-1615
++ Closes: #1021022, CVE-2022-32743
++ * removed: spelling.patch (partially applied upstream)
++ * removed: weak-crypto-allowed-clarify.diff (applied upstream)
++ * refresh: ctdb-create-piddir.patch
++ * refresh: fix-nfs-service-name-to-nfs-kernel-server.patch
++ * d/control: update minimum versions for talloc/tevent/tdb
++ * d/rules: do not install ctdb.service, it is installed by upstream now
++ * d/ctdb.install: do not install ctdb_wrapper (not used anymore)
++ * d/libldb2.symbols, d/d/python3-ldb.symbols.in: new versions: 2.6.0 2.6.1
++ per upstream, re-version symbols added in 2.5.2 as added in 2.6.1
++ (ldb users needs to be recompiled anyway after updating libldb)
++ * new: spelling.patch: a few more spelling fixes
++ * d/control: bump Standards-Version to 4.6.1 (no changes)
++ * Remove dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch
++ (included in 4.17.0 already)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 13 Sep 2022 20:47:05 +0300
++
++samba (2:4.16.6+dfsg-6) unstable; urgency=medium
++
++ * d/rules: use the right dir for dh_shlibdeps -l (long-standing issue)
++ * rewrite shlibs/symbols-generating file d/genshlibs, make whole process
++ much more clean and strighforward, and 10x times faster too
++ * debian/libnss-winbind.triggers: activate ldconfig trigger
++ * add debian/samba-libs.symbols with libsmbldap library
++ * d/samba.examples: do not install smbadduser: csh considered harmful
++ * d/rules: remove long-unused commented-out override_dh_perl-arch
++ * d/samba.lintian-overrides: *docs-outside-share-doc usr/share/samba/setup/
++ * d/genshlibs: add the forgotten mkdir for d/$pkg/DEBIAN
++ * remove static/fixed branding d/patches/VERSION.patch
++ * d/rules: implement dynamic branding of VERSION file based on dpkg-vendor
++ * d/rules: simplify package interdependency checking rules
++ * d/rules: add a lot more interpackage dependency checks
++ * d/NEWS: merge it into d/samba.NEWS (removes several lintian warnings)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 29 Oct 2022 08:28:53 +0300
++
++samba (2:4.16.6+dfsg-5) unstable; urgency=medium
++
++ * move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz manpages to
++ winbind package where they belong and where actual idmap modules lives.
++ (install all idmap_*.8 manpages to winbind package)
++ * d/rules: install pam.d/samba with mode 0644, not 0755
++ * many lintian-override updates:
++ - source: ctdb/doc/*.html actually has sources
++ - source: +very-long-line-length-in-source-file * (for generated files)
++ - source: +debian-control-has-unusual-field-spacing Breaks
++ - winbind: +spare-manual-page for module manpages
++ - *: update some overrides for new lintian
++ - libpam-winbind: +spare-manual-page pam_winbind.8
++ - libldb2: +package-contains-empty-directory .../ldb/modules/ldb/
++ - *: +hardening-no-fortify-functions for some simple shared libs
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 26 Oct 2022 22:27:00 +0300
++
++samba (2:4.16.6+dfsg-4) unstable; urgency=medium
++
++ * poptGetArg-misuse-fixes-1022826.diff: fix poptGetArg() misuse
++ for popt-1.9 (Closes: #1022826)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 26 Oct 2022 19:45:38 +0300
++
++samba (2:4.16.6+dfsg-3) unstable; urgency=medium
++
++ * d/rules: stop dh_installpam from installing samba.pam
++ to the samba package (Closes: #1022775, #1022776)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 20:13:53 +0300
++
++samba (2:4.16.6+dfsg-2) unstable; urgency=medium
++
++ * d/rules: pam.d/samba should go to /etc, not /
++ * d/README.source.md: it is README.source.md not README.source
++ * d/control: bump Standards-Version to 4.6.1 (no changes)
++ * d/rules: verify that samba-libs does not depend on samba
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 13:55:33 +0300
++
++samba (2:4.16.6+dfsg-1) unstable; urgency=medium
++
++ * new upstream security release 4.16.6, fixing:
++ CVE-2022-3437: There is a limited write heap buffer overflow in the GSSAPI
++ unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba).
++ https://www.samba.org/samba/security/CVE-2022-3437.html
++ * use explicit_bzero() instead of bzero() for the substitute of memset_s()
++ * d/rules: make it a bit more consistent with other samba packages
++ * d/rules: stop exporting ${PYTHON}
++ * a bunch of ubuntu-related changes:
++ - d/rules: omit glusterfs on ubuntu-i386
++ - apply Ubuntu changes to smb.conf at install time (d/smb.conf.ubuntu.diff)
++ - d/tests/: ensure io_uring module is built before testing it
++ - d/rules: inline parallel check from dpkg/buildopts.mk
++ (buildopts.mk does not exist on ubuntu 20.04 focal)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 25 Oct 2022 12:48:20 +0300
++
++samba (2:4.16.5+dfsg-2) unstable; urgency=medium
++
++ [ Michael Tokarev ]
++ * d/tests/util: use printf for formatting password for smbpasswd,
++ not non-standard echo \n (mr !60)
++ * introduce LDB_2.4.4 version symbol (Closes: #1021371)
++ Create an empty ABI file just to make the scripts run during the build
++ stage to introduce LDB_2.4.4 version symbol into libldb.so, and remove
++ this empty file in the clean target. It is a bit hackish but works fine.
++ This is only needed to upgrade from bullseye to bookworm, from
++ 4.13.13+dfsg-1~deb11u5+ to the next release, 4.16+.
++ Remove this for bookworm+.
++ * dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch:
++ GnuTLS gnutls_rnd() can fail and give predictable random values.
++ Closes: #1021024, CVE-2022-1615
++
++ [ John Paul Adrian Glaubitz ]
++ * disable ceph support on ppc64 and x32 (Closes: #1020781, #1012165)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 08 Oct 2022 15:11:15 +0300
++
++samba (2:4.16.5+dfsg-1) unstable; urgency=medium
++
++ * new (minor) upstream release 4.16.5
++ * removed fix-samba-tool-domain-join-segfault.patch (included upstream)
++ * d/gbp.conf: no need to filter orig.tar: uscan already does that
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 08 Sep 2022 12:44:38 +0300
++
++samba (2:4.16.4+dfsg-2) unstable; urgency=medium
++
++ * d/libldb2.symbols: include newly added symbols
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 01 Aug 2022 15:43:11 +0300
++
++samba (2:4.16.4+dfsg-1) unstable; urgency=high
++
++ * new upstream security release fixing:
++ o CVE-2022-2031: Samba AD users can bypass certain restrictions associated
++ with changing passwords.
++ https://www.samba.org/samba/security/CVE-2022-2031.html
++ o CVE-2022-32742: Server memory information leak via SMB1.
++ https://www.samba.org/samba/security/CVE-2022-32742.html
++ o CVE-2022-32744: Samba AD users can forge password change requests
++ for any user.
++ https://www.samba.org/samba/security/CVE-2022-32744.html
++ o CVE-2022-32745: Samba AD users can crash the server process with an LDAP
++ add or modify request.
++ https://www.samba.org/samba/security/CVE-2022-32745.html
++ o CVE-2022-32746: Samba AD users can induce a use-after-free in the server
++ process with an LDAP add or modify request.
++ https://www.samba.org/samba/security/CVE-2022-32746.html
++ * Closes: #1016449, CVE-2022-2031 CVE-2022-32742, CVE-2022-32744,
++ CVE-2022-32745, CVE-2022-32746
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 27 Jul 2022 18:35:53 +0300
++
++samba (2:4.16.3+dfsg-1) unstable; urgency=medium
++
++ [ Michael Tokarev ]
++ * new upstream minor/bugfix releae. See WHATSNEW.txt for details.
++ * d/watch: add the forgotten repacksuffix=+dfsg
++
++ [ Andreas Hasenack ]
++ * update nfs configuration examples for ctdb
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 18 Jul 2022 17:15:07 +0300
++
++samba (2:4.16.2+dfsg-1) unstable; urgency=medium
++
++ * new upstream minor/bugfix release.
++ * removed waf-add-support-for-GNU-kFreeBSD.patch (applied upstream)
++ * new minor version of libldb
++ (no code changes, just the build system update to support python 3.11)
++ * move samba-dcerpcd from samba package to samba-common-bin due to winbind
++ New in 4.16 samba-dcerpcd binary is used by smbd and winbind, so putting
++ it to samba package makes winbind unable to run it without samba.
++ For now, in order to fix this issue, move this binary from samba to
++ samba-common-bin package. It might be worth creating its own package
++ for this binary (or maybe some more binaries), once it is clear where
++ upstream is going to. Making this binary a part of samba-common-bin
++ adds some more files to smbclient-only setup.
++ (Closes: #1012240)
++ * remove mksmbpasswd script and manpage: we have smbpasswd whcih can add
++ entries to smbpasswd file if needed, and can handle other passwod storage
++ formats too
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 13 Jun 2022 19:08:44 +0300
++
++samba (2:4.16.1+dfsg-8) unstable; urgency=medium
++
++ * fix the Breaks/Replaces versions in the previous upload for moving
++ libsamba-utils.so, and use the same Breaks/Replaces for the -dev
++ packages too
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 07 Jun 2022 14:11:09 +0300
++
++samba (2:4.16.1+dfsg-7) unstable; urgency=medium
++
++ * drop libunwind-dev build dependency again: it turned out the
++ internal stack unwind is better anyway
++ * move libsamba-utils.so and its dependencies from libwbclient0
++ into samba-libs. In the past, libwbclient were built using this
++ library, but it does not depend on libsamba-utils anymore
++ * d/control: libnss-winbind and libpam-winbind does not depend
++ on samba-common. None of the files in samba-common are used by
++ nss and pam modules; winbind does use them but not the modules.
++ * d/rules: add --with-sockets-dir=/run/samba (or else it was
++ /var/run/samba)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 07 Jun 2022 12:09:50 +0300
++
++samba (2:4.16.1+dfsg-6) unstable; urgency=medium
++
++ * d/control: specify arch list for libunwind-dev build-dep to be the same
++ as for libunwind itself (it is not built on all architectures)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 29 May 2022 12:09:22 +0300
++
++samba (2:4.16.1+dfsg-5) unstable; urgency=medium
++
++ * add-missing-libs-deps.diff: add missing dependencies for a few samba
++ libraries. Closes: #1010922
++ * point [printers] to /var/tmp/, stop shipping /var/spool/samba/.
++ For a long time, we shipped an alternative /var/tmp/ directory with mode
++ 01777 (so that anyone can use it to store files) but without the same setup
++ as for regular /var/tmp/ (in particular, without removing old files and
++ since it is not a usual place to store temp files, no one actually looked
++ at it the same way someone would take care of /var/tmp/. Change smb.conf
++ to use /var/tmp/ instead of /var/spool/samba/. In the postinst script,
++ remove /var/spool/samba/, check if it is still used in smb.conf,
++ and create a compatibility symlink pointing to tmp/, suggesting changing
++ smb.conf. And remove this compat symlink in postrm.
++ This probably can be accomplished by a debconf question, but the
++ thing is complicated by the fact that smb.conf might be upgrading
++ too at the same time.
++ * debian/patches/weak-crypto-allowed-clarify.diff: update
++ * testparm-do-not-fail-if-pid-dir-does-not-exist.patch: also cover samba-tool
++ testparm too, not only regular stand-alone testparm.
++ * fix-samba-tool-domain-join-segfault.patch: fix segfault when joining an
++ AD-DC domain using samba-tool join.
++ * d/rules: enable --with-profilig-data to build samba with profiling
++ collection (if set in smb.conf)
++ * d/control: add libunwind-dev to build-deps, to compile in stack backtrace
++ logging in case of crash
++ * d/control: stop build-conflicting with now-unused libtracker-miner-2.0-dev
++ * d/control: stop build-conflicting with libtracker-sparql-2.0-dev: there's
++ no point in explicitly disabling libtracker-sparql support (bullseye-only
++ for now anyway)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 28 May 2022 22:50:43 +0300
++
++samba (2:4.16.1+dfsg-4) unstable; urgency=medium
++
++ [ Michael Tokarev ]
++ * fix spelling in disable-setuid-confchecks.patch
++ * d/NEWS: split it into different $package.NEWS files
++ * d/upstream/metadata: add Bug-Database
++ * d/samba.postinst: create sambashare group and usershare directory
++ on new install only
++ * libldb2: provide compat symlinks for bullseye ldb modules dir
++ * d/rules: provide Build-Depends-Package: for python3-ldb
++ * samba-vfs-modules.lintian-overrides: add spare-manual-page vfs_*.8 override
++ * winbind.lintian-overrides: add spare-manual-page idmap_*.8 override
++
++ [ Arnaud Rebillout ]
++ * Fix patch testparm-do-not-fail-if-pid-dir-does-not-exist (Closes: #1010835)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Wed, 11 May 2022 09:50:03 +0300
++
++samba (2:4.16.1+dfsg-3) unstable; urgency=medium
++
++ * fix ldb package version generation in d/make_shlibs
++ which was wrong in 2 previous uploads.
++ Will I *ever* make it actually work someday?
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 02 May 2022 18:32:24 +0300
++
++samba (2:4.16.1+dfsg-2) unstable; urgency=medium
++
++ * rethink ldb version *again*, to be 2.5.0+smb4.16.1-2
++ or else 2.5.0+smb-1 from samba-4.16.1-2 sorts before
++ 2.5.0+smb-7 from samba-4.16.0-7.
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 02 May 2022 17:02:16 +0300
++
++samba (2:4.16.1+dfsg-1) unstable; urgency=medium
++
++ * new upstream minor release 4.16.1
++ * move-msg.sock-from-var-lib-samba-to-run-samba.patch:
++ move /var/lib/samba/private/msg.sock/ to /run/samba/msg.sock/.
++ This is a (private) socket directory for IPC, it should not be in /var.
++ * Remove /var/lib/samba/private/msg.sock/ in postinst
++ * testparm-do-not-fail-if-pid-dir-does-not-exist.patch:
++ testparm deliberately fails if /run/samba does not exist,
++ while testparam itself does not use it and daemons will
++ create it on demand. Just make it a warning instead of a
++ fatal error, and we'll not need to pre-create this dir
++ in a random place using hackish ways
++ * ctdb-create-piddir.patch: create /run/ctdb/ in ctdb.service
++ and ctdb.init before invoking ctdbd (as the latter does not
++ create its pid directory on demand).
++ * stop (ab)using tmpfiles.d to pre-create /run/samba/ and /run/ctdb/
++ and stop creating /run/samba/ in samba-common-bin.postinst just to
++ make testparam happy.
++ * d/rules: minor tweaks
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Mon, 02 May 2022 13:16:12 +0300
++
++samba (2:4.16.0+dfsg-7) unstable; urgency=medium
++
++ * another bunch of small tweaks to d/rules:
++ - set SHELL to /bin/sh -e
++ - rework the clean target
++ - provide fast replacement of architecture.mk
++ - better expression for DEB_REVISION
++ - rearrange configure options
++ * do not disable glusterfs on ubuntu-i386 (glusterfs is now in main)
++ * mention closing of #1001053 by the 4.16 upload
++ * change the ldb version string again, removing te "+samba*" suffix
++ to allow bin-NMUs +b1 (Closes: #1010100)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sun, 24 Apr 2022 16:56:34 +0300
++
++samba (2:4.16.0+dfsg-6) unstable; urgency=medium
++
++ * another attempt to fix/work around #221618. Re-enable
++ libsmbclient-ensure-lfs-221618.patch and change it to just define
++ an extra type array int[sizeof(off_t)-7]. If off_t is small it will
++ become a compile error. It is an ugly way to do it, but it should
++ actually work, unlike various static_assert/_Static_assert which are
++ language (C/C++) and standard-dependent. Closes: #221618.
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 09 Apr 2022 17:27:09 +0300
++
++samba (2:4.16.0+dfsg-5) unstable; urgency=medium
++
++ * disable libsmbclient-ensure-lfs-221618.patch for now.
++ It throws errors in one or another configuration no matter what.
++ Repoens: #221618
++ * d/salsa-ci.yml: re-allow blhc salsa-ci test to fail again
++ due to different bug in blhc
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 09 Apr 2022 16:33:57 +0300
++
++samba (2:4.16.0+dfsg-4) unstable; urgency=medium
++
++ * libsmbclient-ensure-lfs-221618.patch: replace _Static_assert with
++ static_assert (and include <assert.h> to make C++ happy too
++ (Closes: #1009211)
++ * disable-setuid-confchecks.patch: when running configure tests,
++ samba tries to verify setuid/setgid etc calls are actually
++ *working*, not just exists. This is only possible when the
++ configure is running as root. But it turns out in some salsa-ci
++ configuration (namely in the reprotest), the second build is
++ actually running as root, and in that environment, actual
++ setegid call is failing somehow. Just disable the config-time
++ check for correctly working setgid and assume it "just works"
++ if present, exactly like non-root build will do.
++ * d/salsa-ci.yml: do not expect failure in blhc test (the original
++ prob has been fixed long ago), and stop requiring experimental
++ * mention closing of #999876 by 4.16
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Sat, 09 Apr 2022 00:42:38 +0300
++
++samba (2:4.16.0+dfsg-3) unstable; urgency=medium
++
++ * d/control: comment out the selftest-mode build deps for now
++ * d/control: forgotten python3-samba:Replaces against samba package too,
++ not just samba-libs, when moving dckeytab python lib (Closes: #1009175)
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Fri, 08 Apr 2022 10:18:23 +0300
++
++samba (2:4.16.0+dfsg-2) unstable; urgency=medium
++
++ * use strict versioned dependency between samba-dsdb-modules and libldb2,
++ since they're tied to each other and are now built from the same source
++ * fix forgotten shlib symbols generation for python3-ldb
++ * change libldb versioning scheme
++ from ldb_2:2.5.0+samba4.16.0-1
++ to ldb_2:2.5.0-1+samba4.16.0
++ so that symbols versioning works correctly. Unfortunately the previous
++ upload to experimental used the first form which is greather than the
++ correct one, so temporarily (just for this 2.5.0 version of ldb) use
++ this: ldb_2:2.5.0+smb-1+samba4.16.0
++ (with "+smb" suffix to be removed for 2.5.1+)
++ * exclude samba-vfs-modules for i386 ubuntu build since this package
++ is useless without samba itself (which is not built on this environment)
++ * create selftest rules and add !nocheck build-dependencies
++ (but do not enable selftests for now as they're failing)
++ * split build system into -arch and -indep parts. We build only one arch-all
++ package (samba-common) which contains only static files from debian/,
++ there's no need to build whole samba to build this package.
++ Move almost all Build-Depends to Build-Depends-Arch (and reindent them).
++ * various updates to d/rules
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Thu, 07 Apr 2022 09:56:56 +0300
++
++samba (2:4.16.0+dfsg-1) experimental; urgency=medium
++
++ * New upstream major release.
++ Closes: #1004690, CVE-2021-20316: Fileserver symlink metadata share escape
++ Closes: #1004691, CVE-2021-43566: mkdir race condition allows share escape
++ Closes: #1004692, CVE-2021-44141: UNIX extensions in SMB1 disclose whether
++ the outside target of a symlink exists
++ Closes: #1005642 (windows client data corruption due to cache poisoning)
++ Closes: #1001053 (MIT-kerberos config broken after fix for CVE-2020-25717)
++ Closes: #988197 (legacy printing support, 47d79d7e7e406f7dd2)
++ Closes: #998423 (coredump connecting from macos to shares with var substs)
++ Closes: #999876 (winbind allow trusted domains = no regression)
++ * Notable changes in 4.16 series compared to 4.13:
++ - modular VFS (see The_New_VFS.txt)
++ - publishing printers in AD is more complete
++ - group policies for winbindd cilents (like linux systems)
++ - certificate auto enrollement in AD group policy
++ - large list of improvements in samba-tool
++ - SMB1 protocol has been deprecated, some subcommands has been removed
++ - more consistend options/subcommands in samba commands
++ * d/rules: export PYTHONHASHSEED=1. This makes lots of sporadic build-time
++ debian-specific failures to go away, by preserving order of waf hashes
++ * refresh patches, update build-depend versions (talloc, tdb, tevent)
++ * refresh lintian-overrides files, add many new overrides
++ * build-depend on python3-markdown
++ * build-depend on libjson-perl for new heimdal bits
++ * more consistent internal lib naming; refresh file lists everywhere
++ * samba: install new rpc_* services, install samba-dcerpc
++ * refresh symbols files
++ * build libldb from samba sources, not from separate source
++ (this moves ldb plugins from /usr/lib/$triple/ldb/plugin/ldb/ to
++ /usr/lib/$triple/samba/ldb/ - the same where dsdb modules are).
++ * optimizations for d/make_shlibs; also allow one to specify explicit
++ version for some packages
++ * as per clarifications for waf --{bundled,builtin}-libraries, remove
++ now-wrong usage there. This also fixes build failures with current
++ samba sources
++ * d/rules: various optimizations to reduce startup costs by eliminating
++ unnecessary external command calls during d/rules read by make.
++ Including caching of LDB version information in d/ldb-version.mk file.
++ This does not affect the buildd processing much (and does not affect
++ runtime at all), but helps with build procedure debugging.
++ * d/rules: numerous small fixes, cleanups and other changes, including:
++ - clean up the install target
++ - remove some now-irrelevant parts
++ - fix no-glusterfs-build on non-linux
++ * change build procedure: instead of `waf build', run `waf install'.
++ `waf build' builds samba to be run from the build dir, and `waf install'
++ rebuilds/relinks everything again for production. Build the production
++ variant only, no build-dir one.
++ * samba-common-bin.postinst: explicitly mkdir /run/samba before invoking
++ samba binaries (Closes: #953530)
++ * in the salsa git repository of samba, stop keeping debian patches in
++ applied form, keep them in d/patches/ only as most other packages do.
++ * move single python (helper) module, libsamba-policy, together with
++ 2 internal libraries used by it, from samba-libs package to python3-samba.
++ This makes samba-libs to be free from python-related files, and makes
++ python3-samba to be the only python-providing package.
++ Closes: #1006875, #878612, #862338
++ * also move dckeytab python module from samba to python3-samba
++ (actually stop moving it from python3-samba to samba to incorrectly
++ avoid a circular dependency). Also verify that python3-samba does
++ not depend on samba package.
++ * weak-crypto-allowed-clarify.diff: clarify "weak crypto is allowed"
++ testparm message (Closes: #975882)
++ * spelling.patch: fix many common spelling mistakes in the source
++ * ctdb: simplify/cleanup instllation of READMEs/examples
++ * d/control: remove breaks/replaces/depends on ancient versions of some
++ packages (ancient dpkg version in Pre-Depends, ancient samba-libs)
++ * d/rules: rework wrong shlibdeps handling
++ * move helper programs from /usr/lib/$multiarch/ to /usr/libexec/
++ where they belongs. This should not affect users.
++ * smbclient: re-do the fix for an old bug, #221618. The original "fix"
++ did not fix anything (it is too late already to #define _FILE_OFFSET_BITS
++ when all types has already been defined). From now on, raise an error
++ if off_t is less than 64bits (it should >=64 when #include'ing
++ <libsmbclient.h> with proper LFS defines). In theory this can break
++ some sources which either included libsmbclient.h without a reason or
++ which didn't use any of the functions which deals with off_t (smbc_lseek
++ etc), - which did not explicitly enable LFS on a 32bit system.
++ Please email us if you faced such situation.
++ * drop 07_private_lib patch: we do not need to force rpath for
++ private libraries into every samba binary, upstream build system
++ does a good job here.
++
++ -- Michael Tokarev <mjt@tls.msk.ru> Tue, 05 Apr 2022 16:01:25 +0300
++
++samba (2:4.13.14+dfsg-1) unstable; urgency=high
++
++ * New upstream security release in order to address the following defects:
++ - CVE-2016-2124: don't fallback to non spnego authentication if we require
++ kerberos
++ - MS CVE-2020-17049 in Samba: 'Bronze bit' S4U2Proxy Constrained Delegation
++ bypass
++ - CVE-2020-25717: A user on the domain can become root on domain members
++ - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other
++ servers
++ + Bump build-depends ldb >= 2.2.3
++ - CVE-2020-25719: AD DC Username based races when no PAC is given
++ - CVE-2020-25721: Kerberos acceptors need easy access to stable AD
++ identifiers (eg objectSid)
++ - CVE-2020-25722: AD DC UPN vs samAccountName not checked (top-level bug
++ for AD DC validation issues)
++ - CVE-2021-3738: crash in dsdb stack
++ - CVE-2021-23192: dcerpc requests don't check all fragments against the
++ first auth_state
++ + Update d/samba-libs.install for libdcerpc-pkt-auth.so.0
++ * Add patch to fix "allow trusted domains"
++ * Bump ldb build-depends to 2.2.3
++ * Update d/samba-libs.install
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 09 Nov 2021 20:53:03 +0100
++
++samba (2:4.13.13+dfsg-1) unstable; urgency=high
++
++ [ Athos Ribeiro ]
++ * Add autopkgtest to verify tmpfiles setup (LP: #1905387)
++ - d/t/reinstall-samba-common-bin: make sure /run/samba is created
++ by the samba-common-bin installation process (postinst script)
++ - d/t/control: run new reinstall-samba-common-bin test case
++
++ [ Paride Legovini ]
++ * samba.postinst: do not populate sambashare from the Ubuntu admin group
++ (LP: #1942195)
++
++ [ Mathieu Parent ]
++ * New upstream version
++ - Remove CVE-2021-20254.patch
++ - Bump build-depends ldb >= 2.2.0
++ * libwbclient0: Add Breaks+Replaces: libsamba-util0 (<< 2:4.0.0)
++ (Closes: #988170)
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 01 Nov 2021 08:59:20 +0100
++
++samba (2:4.13.5+dfsg-2) unstable; urgency=high
++
++ * CVE-2021-20254: Negative idmap cache entries can cause incorrect group
++ entries in the Samba file server process token (Closes: #987811)
++ * Add Breaks+Replaces: samba-dev (<< 2:4.11) (Closes: #987209)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 06 May 2021 21:09:29 +0200
++
++samba (2:4.13.5+dfsg-1) unstable; urgency=medium
++
++ * New upstream version (Closes: #984863)
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 13 Mar 2021 08:31:27 +0100
++
++samba (2:4.13.4+dfsg-1) unstable; urgency=medium
++
++ * New upstream version
++ - GPG signature has changed
++ - Update samba-libs.install
++ - Update symbols
++ * Never use priority high when asking for DHCP integration (Closes: #981554)
++ * Sync CTDB patches with Ubuntu:
++ - Add "ctdb-config: enable syslog by default"
++ - Update "fix nfs related service names"
++ * d/rules: Ubuntu specifics
++ - No Ceph on i386
++ - Disable some i386 packages
++ - No GlusterFS
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 09 Feb 2021 22:26:43 +0100
++
++samba (2:4.13.3+dfsg-1) unstable; urgency=medium
++
++ [ Andreas Hasenack ]
++ * d/control: enable the liburing vfs module (Closes: #976854)
++ * Add new DEP8 tests for the uring vfs module
++ * Factor out common DEP8 test code into d/t/util and change the tests to
++ source from it
++ * Add set -x and set -e to DEP8 tests
++
++ [ Mathieu Parent ]
++ * liburing-dev is linux-any
++ * New upstream version
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 16 Dec 2020 18:23:09 +0100
++
++samba (2:4.13.2+dfsg-3) unstable; urgency=medium
++
++ * Ensure systemd-tmpfiles is called before testparm (Closes: #975422)
++ * Only check configuration on configure step
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 22 Nov 2020 10:44:51 +0100
++
++samba (2:4.13.2+dfsg-2) unstable; urgency=medium
++
++ * Upload to unstable
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 18 Nov 2020 20:34:51 +0100
++
++samba (2:4.13.2+dfsg-1) experimental; urgency=medium
++
++ * New upstream major version
++ - Update d/gbp.conf, d/watch and d/README.source for 4.13
++ - Update patches
++ - Bump build-depends ldb >= 2.2.0
++ - Install new files
++ - Update symbols
++ * Includes the following security fixes:
++ - CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify
++ (Closes: #973400)
++ - CVE-2020-14323: Unprivileged user can crash winbind (Closes: #973399)
++ - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
++ easily crafted records (Closes: #973398)
++ - CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon")
++ (Closes: #971048)
++ * Includes the following fixes:
++ - Fixes "samba_dnsupdate gives depreacation warnings" (Closes: #973957)
++ - s3: libsmbclient.h: add missing time.h include (Closes: #946840)
++ * Remove unused python3-crypto dependency (Closes: #971292)
++ * Enable Spotlight with ES backend (Closes: #956096, #956482)
++ * Standards-Version: 4.5.0
++ * Add missing Build-Depends-Package in libsmbclient.symbols and
++ libwbclient0.symbols
++ * d/copyright: Fix duplicate-globbing-patterns
++ * Remove outdated/malformed lintian overrides
++ * d/winbind.logrotate: Only reload winbindd when running (Closes: #946821)
++ * Bump to debhelper compat 13
++ * Add another library-not-linked-against-libc override
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 12 Nov 2020 11:23:01 +0100
++
++samba (2:4.12.5+dfsg-3) unstable; urgency=high
++
++ * Add Breaks: sssd-ad-common (<< 2.3.0), due to libndr so bump
++ (Closes: #963971)
++ * Add patch traffic_packets: fix SyntaxWarning: "is" with a literal
++ (Closes: #964165)
++ * Add patch Rename mdfind to mdsearch (Closes: #963985)
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 04 Jul 2020 23:57:59 +0200
++
++samba (2:4.12.5+dfsg-2) unstable; urgency=high
++
++ * Add missing symbol (path_expand_tilde)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 02 Jul 2020 15:27:25 +0200
++
++samba (2:4.12.5+dfsg-1) unstable; urgency=high
++
++ * New upstream security release:
++ - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
++ DC LDAP Server with ASQ, VLV and paged_results
++ - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
++ excessive CPU
++ - CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
++ paged_results and VLV.
++ - CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.
++ - Bump build-depends ldb >= 2.1.4
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 02 Jul 2020 14:03:36 +0200
++
++samba (2:4.12.3+dfsg-2) unstable; urgency=medium
++
++ * Upload to unstable
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 28 Jun 2020 11:45:14 +0200
++
++samba (2:4.12.3+dfsg-1) experimental; urgency=medium
++
++ * New upstream major version (Closes: #963106)
++ - Update d/gbp.conf, d/watch and d/README.source for 4.12
++ - Drop merged patches
++ - Bump build-depends talloc >= 2.3.1, tdb >= 1.4.3, tevent >= 0.10.2 and
++ ldb >= 2.1.3
++ - Upstream fixes:
++ + pygpo: use correct method flags
++ (Closes: #963242, #961585, #960171, #956428)
++ + CVE-2020-10700: A use-after-free flaw was found in the way samba AD DC
++ LDAP servers, handled 'Paged Results' control is combined with the 'ASQ'
++ control. A malicious user in a samba AD could use this flaw to cause
++ denial of service (Closes: #960189)
++ + CVE-2020-10704: A flaw was found when using samba as an Active Directory
++ Domain Controller. Due to the way samba handles certain requests as an
++ Active Directory Domain Controller LDAP server, an unauthorized user can
++ cause a stack overflow leading to a denial of service. The highest
++ threat from this vulnerability is to system availability
++ (Closes: #960188)
++ - intel aes-ni no more needed as GnuTLS is used
++ - Install new files
++ - Update symbols
++ - Update samba-libs.lintian-overrides
++ * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915)
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 24 Jun 2020 23:12:11 +0200
++
++samba (2:4.11.5+dfsg-1) unstable; urgency=medium
++
++ * New upstream security release
++ - CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD
++ Directory not automatic.
++ - CVE-2019-14907: Crash after failed character conversion at log level 3 or
++ above.
++ - CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.
++ - Bump build-depends ldb >= 2.0.8
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 28 Jan 2020 07:19:46 +0100
++
++samba (2:4.11.3+dfsg-1) unstable; urgency=high
++
++ * New upstream security release
++ - Drop merged patches for previous security fixes
++ - CVE-2019-14861: An authenticated user can crash the DCE/RPC DNS management
++ server by creating records with matching the zone name.
++ - CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction was
++ not being applied when processing protocol transition requests (S4U2Self),
++ in the AD DC KDC.
++ * d/control: drop python3-matplotlib
++ * d/control: Fix stronger-dependency-implies-weaker
++ (samba depends -> recommends python3-dnspython)
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 16 Dec 2019 09:47:45 +0100
++
++samba (2:4.11.1+dfsg-3) unstable; urgency=medium
++
++ * Add some python dependencies:
++ - python3-matplotlib : samba-tool visualize
++ - python3-markdown : samba-tool domain schemaupgrade
++ - python3-dnspython : samba-tool dns
++ * Only build with default python3 (Closes: #943635)
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 17 Nov 2019 14:48:02 +0100
++
++samba (2:4.11.1+dfsg-2) unstable; urgency=high
++
++ * New upstream security release
++ - CVE-2019-10218: Malicious servers can cause Samba client code to return
++ filenames containing path separators to calling code.
++ - CVE-2019-14833: When the password contains multi-byte (non-ASCII)
++ characters, the check password script does not receive the full password
++ string.
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 18 Oct 2019 20:26:45 +0200
++
++samba (2:4.11.1+dfsg-1) unstable; urgency=medium
++
++ * New upstream release
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 18 Oct 2019 19:00:46 +0200
++
++samba (2:4.11.0+dfsg-11) unstable; urgency=medium
++
++ * Stop building with spotlight support which pulls glib (Closes: #941654)
++ * Force quota support (Closes: #941899)
++ * Standards-Version: 4.4.1, no change
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 14 Oct 2019 12:16:04 +0200
++
++samba (2:4.11.0+dfsg-10) unstable; urgency=medium
++
++ * Add libwbclient-dev to samba-dev depends as samba-util was moved there
++ (Closes: #941750)
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 05 Oct 2019 15:57:07 +0200
++
++samba (2:4.11.0+dfsg-9) unstable; urgency=medium
++
++ * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 03 Oct 2019 19:08:17 +0200
++
++samba (2:4.11.0+dfsg-8) unstable; urgency=medium
++
++ * d/gbp.conf: sign-tags = True
++ * Do not check smb.conf with testparm when server role=active directory domain
++ controller (Closes: #931734)
++ * Force one job during configure step with -j 1 (Closes: #941467).
++ Not setting -j leads to default which is number of cpus
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 03 Oct 2019 07:52:39 +0200
++
++samba (2:4.11.0+dfsg-7) unstable; urgency=medium
++
++ * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467)
++ * This version is built with talloc from sid (Closes: #940963)
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 02 Oct 2019 20:45:24 +0200
++
++samba (2:4.11.0+dfsg-6) unstable; urgency=medium
++
++ * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467)
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 01 Oct 2019 22:35:36 +0200
++
++samba (2:4.11.0+dfsg-5) experimental; urgency=medium
++
++ * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false
++ * Remove patches:
++ - "build: Remove tests for _readdir() and __readdir()"
++ - "build: Remove tests for rdchk()"
++ - "build: Remove tests for _pwrite() and __pwrite()"
++ * Add patches by Ralph Boehme:
++ - "wscript: remove all checks for _FUNC and __FUNC"
++ - "wscript: split function check to one per line and sort alphabetically"
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 30 Sep 2019 13:37:50 +0200
++
++samba (2:4.11.0+dfsg-4) experimental; urgency=medium
++
++ * Use the same arches for librados-dev than libcephfs-dev (Fix missing
++ build-depends on alpha and sh4)
++ * Split vfsmods:Recommends substvar into
++ {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable
++ and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also
++ alpha and sh4)
++ * Add patch for "build: Remove tests for _readdir() and _readdir()", to
++ hopefully fix FTBFS on armel
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 29 Sep 2019 09:29:03 +0200
++
++samba (2:4.11.0+dfsg-3) experimental; urgency=medium
++
++ * Try to fix FTBFS on armel (armhf is fixed):
++ - Add patch for build: Remove tests for rdchk()
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 28 Sep 2019 22:17:04 +0200
++
++samba (2:4.11.0+dfsg-2) experimental; urgency=medium
++
++ * d/gitlabracadabra.yml: Add samba-team/libsmb2
++ * Try to fix FTBFS on armel and armhf:
++ - Add patch for build: Remove tests for _pwrite() and __pwrite()
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 28 Sep 2019 11:47:56 +0200
++
++samba (2:4.11.0+dfsg-1) experimental; urgency=medium
++
++ [ Mathieu Parent ]
++ * Upload to experimental
++ * New upstream major release
++ - Update d/gbp.conf, d/watch and d/README.source for 4.11
++ - Import upstream release
++ - Update fix-nfs-service-name-to-nfs-kernel-server.patch
++ - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and
++ ldb >= 2:2.0.7
++ - libsamba-passdb.so bumped to 0.28.0
++ - libnon-posix-acls is now a subsystem
++ - Drop libparse-pidl-perl package (Closes: #939419)
++ - Add new files to d/*.install
++ - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies
++ - Move libsamba-util deps to libwbclient0
++ * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on
++ armel and armhf
++ * salsa-ci: Build on experimental
++
++ [ John Paul Adrian Glaubitz ]
++ * Disable cephfs support on architectures where it's not stable
++ (Closes: #940697)
++
++ [ Louis van Belle ]
++ * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build
++ dumpmscat
++ * d/control, d/rules: Enable spotlight (TimeMachine)
++ * d/control: Bump libtdb-dev (>= 2) in samba-dev deps
++ * Update libwbclient0.symbols
++ * d/rules: adjust LDB_DEPENDS
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 26 Sep 2019 09:37:51 +0200
++
++samba (2:4.10.8+dfsg-1) unstable; urgency=medium
++
++ * Upload to unstable
++ * New upstream release:
++ - CVE-2019-10197: Combination of parameters and permissions can allow user
++ to escape from the share path definition
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 10 Sep 2019 18:46:54 +0200
++
++samba (2:4.10.7+dfsg-1) experimental; urgency=medium
++
++ [ Mathieu Parent ]
++ * New upstream release
++ - Update patches
++ - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged
++ - libsamba-passdb.so bumped to 0.27.2
++ - Update symbols
++ - Update installed files
++ * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9)
++ (Closes: #910242)
++ * Add missing Breaks+Replace found by piuparts (Closes: #929217)
++ * Enable vfs_nfs4acl_xattr (Closes: #930540)
++ * ctdb:
++ - enable ceph and etcd recovery lock
++ - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends
++ * Add gitlabracadabra.yml
++ * Update salsa-ci.yml
++
++ [ Rafael David Tinoco ]
++ * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
++ (Closes: #931138)
++ * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201):
++ - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
++ name from nfs to nfs-kernel-server
++ - ctdb-config: depend on /etc/ctdb/nodes file
++ - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
++ allow pid file to exist
++ - added /var/lib/ctdb/* directories
++ - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
++ - Add examples of NFS HA CTDB config files + helper script
++
++ [ Mathieu Parent ]
++ * Update d/gbp.conf, d/watch and d/README.source for 4.10
++ * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream
++ * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and
++ ldb >= 2:1.5.5
++ * Bump libcmocka-dev builddep to 1.1.3
++ * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS
++ * d/copyright:
++ - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/
++ - Move License details to end of file
++ - Add waf licences
++ - Add lib/replace licences
++ - Update lib/{ldb,talloc,tdb} licences
++ * Move to Python3 (from Ubuntu)
++ * Bump debhelper from old 11 to 12.
++ * Standards-Version: 4.4.0
++ * Replace all reference of /var/run to /run (Closes: #934540)
++ * Replace python shbang by python3 in d/*.py
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 29 Aug 2019 14:32:52 +0200
++
++samba (2:4.9.5+dfsg-1) experimental; urgency=medium
++
++ * New upstream release
++ - Bump ldb Build-Depends to 2:1.5.1+really1.4.6
++ - Drop s3-auth-ignore-create_builtin_guests-failing-without.patch, merged
++ - Drop and python-gpg.patch, merged
++ * Add Recommends: samba-dsdb-modules for samba-common-bin (Closes: #862467)
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 20 Mar 2019 21:07:02 +0100
++
++samba (2:4.9.4+dfsg-4) unstable; urgency=medium
++
++ * samba-libs: Add Breaks+Replaces: libndr-standard0 (<< 4) (Closes: #910242)
++ * Improve AppArmor integration (Closes: #896080)
++ - Install update-apparmor-samba-profile 1.2 from Christian Boltz (openSUSE)
++ - Adapt update-apparmor-samba-profile: Rename apparmor profile snippet, and
++ test for it's directory
++ - smbd.init: Run update-apparmor-samba-profile before start
++ - smbd.service: Run update-apparmor-samba-profile before start
++ - Remove /etc/apparmor.d/samba/smbd-shares on purge
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 26 Feb 2019 22:18:19 +0100
++
++samba (2:4.9.4+dfsg-3) unstable; urgency=medium
++
++ [ Ivo De Decker ]
++ * Remove myself from uploaders
++
++ [ Mathieu Parent ]
++ * Update debian/gitlab-ci.yml
++ * Standards-Version: 4.3.0
++ * Add upstream patch for python-gpg support
++ * Replace Suggests: python-gpgme by Recommends: python-gpg (Closes: #876984)
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 15 Feb 2019 11:14:10 +0100
++
++samba (2:4.9.4+dfsg-2) unstable; urgency=medium
++
++ * Append +really0.02 to libparse-pidl-perl version (Closes: #918564)
++ * Add apport hook (From Ubuntu)
++ * Change build dependency to libglusterfs-dev (Closes: #919667)
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 23 Jan 2019 20:59:08 +0100
++
++samba (2:4.9.4+dfsg-1) unstable; urgency=medium
++
++ * New upstream release
++ - Remove patches for previous security fixes, merged
++ - Remove unused lintian overrides (library-not-linked-against-libc)
++ * ignore create_builtin_guests() failing without a valid idmap configuration
++ (Closes: #909465, #899269)
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 22 Dec 2018 18:32:00 +0100
++
++samba (2:4.9.2+dfsg-2) unstable; urgency=high
++
++ * New upstream security release
++ - CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD
++ Internal DNS server
++ - CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT
++ - CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server
++ - CVE-2018-16852 NULL pointer de-reference in Samba AD DC DNS servers
++ - because of CVE-2018-16853 (Samba AD DC S4U2Self Crash in experimental
++ MIT Kerberos configuration (unsupported)), mark the MIT Kerberos build of
++ the Samba AD DC as experimental (not used in Debian package)
++ - CVE-2018-16857 Bad password count in AD DC not always effective
++ * Prepend 1.5.1+really to ldb version
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 24 Nov 2018 23:21:27 +0100
++
++samba (2:4.9.2+dfsg-1) unstable; urgency=medium
++
++ * New upstream release
++ - Bump build-dependencies to ldb 1.4.2
++ - Update debian/samba-libs.install
++ * d/gitlab-ci.yml:
++ - Update to use include
++ - allow_failure for reprotest until #912340 is fixed
++ * d/rules: Replace override_dh_perl by override_dh_perl-arch (Closes: #913143)
++ * debian/gitlab-ci.yml:
++ - Samba sometimes needs ldb from experimental
++ - Use ldb from experimental in piuparts
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 17 Nov 2018 17:25:10 +0100
++
++samba (2:4.9.1+dfsg-2) unstable; urgency=medium
++
++ [ Mathieu Parent ]
++ * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of
++ DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32
++ * Allow one to change password via passwd in default config
++ - third_party: Update pam_wrapper to version 1.0.7
++ - third_party: Add pam_set_items.so from pam_wrapper
++ - nsswitch: Add try_authtok option to pam_winbind
++ - tests: Check pam_winbind pw change with different options
++ - Patch for previous 4 commits
++ - debian/winbind.pam-config: Use the new try_authtok option allowing
++ password change while preserving current behavior with password strength
++ modules (Closes: #858923, LP: #570944)
++ * README.source: use gbp pull --track-missing
++ * Override library-not-linked-against-libc false positives (See #896012)
++ * Fix wrong-path-for-interpreter for pidl and findsmb
++ * ctdb.postrm: Fix to disable_legacy (found by piuparts) (Closes: #911530)
++
++ [ James Clarke ]
++ * Fix systemd-related build failures on non-Linux
++
++ [ Mathieu Parent ]
++ * Add Gitlab CI:
++ - Subscribe to salsa-ci-team/pipeline (See salsa-ci-team/pipeline!27 and
++ samba-team/samba!10)
++ - Copy /etc/apt/{sources.list.d,preferences.d} in the dockerbuilder
++ container (salsa-ci-team/images!9)
++ - Allow daemons to start during autopkgtest (salsa-ci-team/images!10)
++ - debian/gitlab-ci.yml: all jobs: Use ldb from experimental
++ - debian/gitlab-ci.yml: piuparts job: Add --scriptsdir, --allow-database
++ and --warn-on-leftovers-after-purge options
++ - debian/gitlab-ci.yml: piuparts job: Copy apt config to allow enabling
++ extra repositories
++ - debian/gitlab-ci.yml: piuparts job: Use image with the following changes:
++ + Add pre_install_copy_configs and post_install_remove_configs to copy,
++ resp. remove config files from /etc-target to /etc
++ + patch pre_remove_50_find_bad_permissions to workaround findutils bug
++ #912180. Also proposed another workaround in piuparts as bug #911334
++ which is merged but not yet released
++ * Upload to unstable
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 01 Nov 2018 21:13:37 +0100
++
++samba (2:4.9.1+dfsg-1) experimental; urgency=medium
++
++ * New upstream release
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 24 Sep 2018 13:33:21 +0200
++
++samba (2:4.9.0+dfsg-1) experimental; urgency=medium
++
++ * Upload to experimental
++ * New upstream release
++ - Update d/gbp.conf, d/watch and d/README.source for 4.9
++ - Remove Fix-pidl-manpage-sections.patch, Fix-spelling.patch and
++ Improve-vfs_linux_xfs_sgid-manpage.patch, merged upstream
++ - Bump build-depends talloc >= 2.1.14, tdb >= 1.3.16, tevent >= 0.9.37 and
++ ldb >= 2:1.4.2'
++ - Update paths
++ - Update libsmbclient.symbols
++ - ctdb.lintian-override: Remove script-not-executable override
++ - Add ctdb.NEWS: "Configuration has been completely overhauled"
++ - ctdb: Enable/disable legacy script in postinst/presinst
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 22 Sep 2018 23:04:11 +0200
++
++samba (2:4.8.5+dfsg-1) unstable; urgency=medium
++
++ * New upstream release
++ - Bump ldb Build-depends to 2:1.4.0+really1.3.6
++ - Fixes FTBFS on kFreeBSD (Closes: #883972)
++ - d/rules: winbind_krb5_locator is now in the correct path
++ - winbind_krb5_locator manpage has moved from section 7 to 8
++ * Standards-Version: 4.2.1
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 30 Aug 2018 19:32:24 +0200
++
++samba (2:4.8.4+dfsg-2) unstable; urgency=high
++
++ * Fix typo in previous release: s/usefull/useful/
++ * Prepend 1.4.0+really to ldb version to allow samba-dsdb-modules install
++ (Closes: #906562, #906568)
++ * Urgency still set to high
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 19 Aug 2018 10:08:22 +0200
++
++samba (2:4.8.4+dfsg-1) unstable; urgency=high
++
++ [ Andreas Hasenack ]
++ * d/samba.logrotate: only try to reload the services if they are running
++ (Closes: #902149)
++ * Remove the deprecated "syslog" and "syslog only" options (Closes: #901138)
++
++ [ Mathieu Parent ]
++ * New upstream security release
++ - CVE-2018-1139 Weak authentication protocol allowed
++ - CVE-2018-1140 Denial of Service Attack on DNS and LDAP server
++ - CVE-2018-10858 Insufficient input validation on client directory listing
++ in libsmbclient
++ - CVE-2018-10918 Denial of Service Attack on AD DC DRSUAPI server
++ - CVE-2018-10919 Confidential attribute disclosure from the AD LDAP server
++ - Urgency set to high
++ - Bump build-depends ldb >= 1.3.5 (actually 2:1.4.0+really1.3.5) for
++ CVE-2018-1140
++ * smb.conf: Remove "wins support" and "wins server" comments
++ * smb.conf: Improve "logging" comments
++ * smb.conf: Remove "dns proxy = no", only useful as a WINS server
++ * smb.conf: Propose better idmap config
++ * smb.conf: Remove "passdb backend = tdbsam" as this is the default
++ * smb.conf: Fix "usershare max shares" default (patched to 100 instead of 0)
++ * Standards-Version: 4.2.0
++ * Set Rules-Requires-Root: binary-targets as chmod is used
++ * Remove override_dh_strip target as dbgsym migration is complete
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 17 Aug 2018 16:30:18 +0200
++
++samba (2:4.8.2+dfsg-2) unstable; urgency=medium
++
++ * Update panic-action script message, samba-dbg renamed to samba-dbgsym
++ (Closes: #900242)
++ * Ensure /var/lib/samba/dhcp.conf exists (Closes: #901585)
++ * Check smb.conf with testparm, and also with samba-tool when
++ server role = active directory domain controller (Closes: #900908)
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 18 Jun 2018 23:39:41 +0200
++
++samba (2:4.8.2+dfsg-1) unstable; urgency=medium
++
++ * New upstream release
++ - Bump build-depends ldb >= 1.3.3
++ * Fix lintian warnings with patches recently merged upstream:
++ - Add Fix-pidl-manpage-sections.patch
++ - Add Fix-spelling.patch
++ - Add Improve-vfs_linux_xfs_sgid-manpage.patch
++ * Wrap very long lines in d/rules
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 17 May 2018 09:58:09 +0200
++
++samba (2:4.8.1+dfsg-2) unstable; urgency=low
++
++ * Upload to unstable
++ * Really ignore nmbd start errors when there is no non-loopback interface
++ (Closes: #893762)
++ * Ignore nmbd start errors when there is no local IPv4 non-loopback interface
++ (Closes: #859526)
++ * Fix possible-unindented-list-in-extended-description in samba-vfs-modules
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 15 May 2018 21:23:32 +0200
++
++samba (2:4.8.1+dfsg-1) experimental; urgency=medium
++
++ * New upstream release
++ * Add lintian override for "smbclient: executable-is-not-world-readable
++ usr/lib/x86_64-linux-gnu/samba/smbspool_krb5_wrapper 0700" (See #894720)
++ * Improve samba-vfs-modules description (Closes: #776505)
++ * Check smb.conf in samba-common-bin.postinst (Closes: #816301)
++ * Mark libparse-pidl-perl, samba-dev, samba-dsdb-modules and samba-vfs-modules
++ as"Multi-Arch: same"
++ * Standards-Version: 4.1.4, no change
++ * debian/smb.conf: Fix typo in comment line: sever -> server (Closes: #763648)
++ * Read smb.conf until [print$] section instead of [cdrom] to preserve
++ locally-defined shares (Closes: #776259)
++ * Fix and improve dhcp integration:
++ - dhclient3 was renamed to dhclient long time ago...
++ - Remove /etc/samba/dhcp.conf on purge (Closes: #784713)
++ - Move dhcp.conf out of /etc to allow ro root (Closes: #695362)
++ - Update template for "Move dhcp.conf out of /etc to allow ro root"
++ * Enable --accel-aes=intelaesni on DEB_HOST_GNU_CPU=x86_64 (Closes: #896196)
++ - Use dh-exec to install libaesni-intel.so.0 only on amd64
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 29 Apr 2018 12:54:06 +0200
++
++samba (2:4.8.0+dfsg-2) experimental; urgency=medium
++
++ * Remove unused and outdated debian/README.debian (debian/README.Debian is
++ used instead)
++ * Mask services as appropriate in samba and winbind postinst (Closes: #863285)
++ - mask samba-ad-dc unless server role = active directory domain controller
++ (as before)
++ - mask smbd and nmbd when server role = active directory domain controller
++ - mask nmbd when disable netbios = yes (Closes: #866125)
++ * Set smbspool_krb5_wrapper permissions to 0700 (Closes: #894720, #372270)
++ * Remove Depends: samba-libs of lib{nss,pam}-winbind
++ * Mark winbind "Multi-Arch: allowed" and make lib{pam,nss}-winbind depends on
++ winbind:any to allow co-installation (Closes: #881100)
++ * Ignore nmbd start errors when there is no non-loopback interface
++ (Closes: #893762)
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 08 Apr 2018 22:09:53 +0200
++
++samba (2:4.8.0+dfsg-1) experimental; urgency=medium
++
++ [ Mathieu Parent ]
++ * New major upstream version
++ - Update d/gbp.conf and d/watch for 4.8
++ - Update upstream source from tag 'upstream/4.8.0+dfsg'
++ - Re-apply patches
++ - Remove patches merged upstream:
++ + no_build_system.patch
++ + systemd-syslog.target-is-obsolete.patch
++ + Add-documentation-to-systemd-Unit-files.patch
++ + fix_kill_path_in_units.patch
++ + nmbd-requires-a-working-network.patch
++ + CVE-2018-1050-11343-4.7.patch
++ + CVE-2018-1057-v4-7.metze01.patches.txt
++ - Bump build-depends talloc >= 2.1.11~, tdb >= 1.3.15~, tevent >= 0.9.36~
++ and ldb >= 2:1.3.2~
++ - Drop Build-Conflicts-Arch: libaio-dev, vfs_aio_linux was dropped
++ - Update debian/*.install and use debian/not-installed
++ - Update debian/libsmbclient.symbols
++ - Upload to experimental
++ * debian/README.source
++ - Update instructions
++ - Convert to Markdown
++ - Add a symlink from README.source to README.source.md
++ * debian/rules:
++ - Use the new --systemd-install-services
++ - Use dh_missing --fail-missing
++ - Re-order debian/rules overrides in the order they are called
++ - Remove broken get-packaged-orig-source target
++ - Remove unused DEB_BUILD_OPT_FOO variables
++ - Add some comments
++ - Move all the custom installs from override_dh_install to
++ override_dh_auto_install
++ - Remove --sourcedir override to dh_install "since dh_install automatically
++ looks for files in debian/tmp in debhelper compatibility level 7 and
++ above"
++ - PIDFile= is now correctly set in *.service
++
++ [ Louis van Belle ]
++ * Update d/control, Relax Build-Depends to allow backport
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 19 Mar 2018 13:02:51 +0100
++
++samba (2:4.7.4+dfsg-2) unstable; urgency=high
++
++ [ Mathieu Parent ]
++ * This is a security release in order to address the following defects:
++ - CVE-2018-1050: Codenomicon crashes in spoolss server code
++ - CVE-2018-1057: Unprivileged user can change any user (and admin) password
++ * Fix "/etc/dhcp/dhclient-enter-hooks.d/samba returned non-zero exit status 1"
++ when samba.service is disabled
++ - Pick patch from Ubuntu for Launchpad #1579597
++ - Fix systemd check
++ * Replace override_dh_systemd_start by override_dh_installsystemd (Fixes
++ ctdb starting on install and restarting on upgrade since update to debhelper
++ compat 11)
++ * Replace --no-restart-on-upgrade by --no-stop-on-upgrade in dh_installinit
++ and dh_installsystemd
++ * Add missing dh_installsystemd calls to ensure that services are properly
++ unmasked and enabled in postinst
++
++ [ Andreas Hasenack ]
++ * Add extra DEP8 tests to samba (Closes: #890439):
++ - d/t/control, d/t/cifs-share-access: access a file in a share using cifs
++ - d/t/control, d/t/smbclient-anonymous-share-list: list available shares
++ anonymously
++ - d/t/control, d/t/smbclient-authenticated-share-list: list available
++ shares using an authenticated connection
++ - d/t/control, d/t/smbclient-share-access: create a share and download a
++ file from it
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 02 Mar 2018 20:55:06 +0100
++
++samba (2:4.7.4+dfsg-1) unstable; urgency=medium
++
++ * New upstream version
++ - Updates patches
++ - Bump ldb build-deps to 1.2.3
++ * Repository moved to salsa: Update Vcs-* fields
++ * d/README.source:
++ - ensure required branches exists
++ - sync all required branches
++ * Standards-Version: 4.1.3 (no change)
++ * Move to debhelper compat 11
++ * Move libpam-winbind: to section admin
++ * Move libnss-winbind: to section admin
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 11 Jan 2018 20:49:28 +0100
++
++samba (2:4.7.3+dfsg-1) unstable; urgency=high
++
++ * New upstream version
++ - Remove patches for CVE-2017-15275 and CVE-2017-14746, merged
++ - Bump libtevent-dev to 0.9.34, to fix upstream "BUG 13130: smbd on disk
++ file corruption bug under heavy threaded load"
++ - Set urgency to high for this fix
++ * Stop building vfs_aio_linux (Closes: #881239)
++ * Print "ignore the following error about deb-systemd-helper not finding
++ samba-ad-dc.service" on upgrade too (Closes: #882482).
++ Thanks Julian Gilbey for the patch
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 23 Nov 2017 16:39:19 +0100
++
++samba (2:4.7.1+dfsg-2) unstable; urgency=high
++
++ * This is a security release in order to address the following defects:
++ - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when
++ talloc buffer is grown.
++ - CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug.
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 12 Nov 2017 10:02:19 +0100
++
++samba (2:4.7.1+dfsg-1) unstable; urgency=medium
++
++ * New upstream version
++ * Add lintian-override about heimdal embedded-library
++ * Remove trailing spaces in debian/changelog
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 08 Nov 2017 07:48:31 +0100
++
++samba (2:4.7.0+dfsg-2) unstable; urgency=medium
++
++ * Upload to sid
++ * Bump libcmocka-dev builddep to 1.1.1 (Closes: #878357)
++ * Remove Skip-raw.write-tests.patch as we don't run tests
++ * Remove 05_share_ldb_module, not understood
++ - d/rules: /usr/lib/*/samba/share/ldb.so is not present anymore
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 26 Oct 2017 17:30:02 +0200
++
++samba (2:4.7.0+dfsg-1) experimental; urgency=medium
++
++ * New major upstream version
++ - Update d/gbp.conf and d/watch for 4.7
++ - Update patches
++ - Remove no_build_env.patch, no more needed
++ - Remove 4 patches merged upstream
++ - Bump build-depends ldb >= 2:1.2.2~, tdb >= 1.3.14~, tevent >= 0.9.33~
++ - Move replace from builtin to bundled libraries to fix FTBFS
++ - Update d/*.install
++ - Update symbols
++ * Rework all patches for dep5 and "gbp pq"
++ * Add libjansson-dev to Build-Depends to allow logging in JSON format
++ * Lintian fixes:
++ - build-depends: dh-systemd (>= 1.5) => use debhelper (>= 9.20160709)
++ - Move libsmbclient-dev from priority extra to optional
++ - Standards-Version: 4.1.1
++ - Update samba-libs.lintian-overrides (following libsmbldap bump)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 12 Oct 2017 22:09:19 +0200
++
++samba (2:4.6.7+dfsg-2) unstable; urgency=high
++
++ * This is a security release in order to address the following defects:
++ - CVE-2017-12150: Some code path don't enforce smb signing, when they should
++ - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects
++ - CVE-2017-12163: Server memory information leak over SMB1
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 19 Sep 2017 22:00:13 +0200
++
++samba (2:4.6.7+dfsg-1) unstable; urgency=medium
++
++ * New upstream version
++ - Removed CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch,
++ merged
++ - Remove s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch, merged
++ * README.source: Default merge-mode of gbp has changed to replace
++ * Fix samba.logrotate (Thanks Thomas A. Reim)
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 15 Aug 2017 23:06:36 +0200
++
++samba (2:4.6.5+dfsg-8) unstable; urgency=medium
++
++ * Remove dependency on update-inetd, not used anymore
++ * vfs_ceph and vfs_glusterfs are linux only (d/rules part)
++ * Remove build-dependency on faketime, not used anymore
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 23 Jul 2017 19:56:07 +0200
++
++samba (2:4.6.5+dfsg-7) unstable; urgency=medium
++
++ * xfslibs-dev is only available on linux
++ * Fix logrotate for /var/log/samba/log.samba to send SIGHUP to all processes
++ of the service (systemd only)
++ * Add reportbug script for samba-common, samba and winbind (Closes: #682861)
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 21 Jul 2017 06:19:57 +0200
++
++samba (2:4.6.5+dfsg-6) unstable; urgency=medium
++
++ * libcephfs-dev is only available on linux
++ * Fix libpam-winbind.prerm to be multiarch-safe (Closes: #647430)
++ * Add missing logrotate for /var/log/samba/log.samba (Closes: #803924)
++ * Use smbcontrol in logrotate when available (Closes: #804705)
++ * From upstream: Fix outdated DNS Root servers (Closes: #865406)
++ * Drop xsltproc_dont_build_smb.conf.5.patch, as #750593 is marked fixed
++ (Closes: #776223)
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 19 Jul 2017 22:53:50 +0200
++
++samba (2:4.6.5+dfsg-5) unstable; urgency=medium
++
++ * Remove bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch,
++ unused
++ * Remove samba-ad-dc.templates
++ * Remove upstart files on upgrade (Closes: #867688)
++ * glusterfs-common is only available on linux
++ * Remove the samba service
++ * Ensure /var/log/samba permissions are set (Closes: #711138)
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 18 Jul 2017 23:29:44 +0200
++
++samba (2:4.6.5+dfsg-4) unstable; urgency=high
++
++ * This is a security release in order to address the following defects:
++ - CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation
++ (Closes: #868209)
++ * Other fixes:
++ - Remove empty samba-common.maintscript (leading to empty preinst and
++ prerm)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 13 Jul 2017 14:38:32 +0200
++
++samba (2:4.6.5+dfsg-3) unstable; urgency=medium
++
++ * Remove upstart code
++ * Remove empty prerm for samba and samba-common-bin (Closes: #866258,
++ #866284)
++ * sysv: Use --pidfile in addition to --exec to avoid matching daemons in
++ containers (Closes: #810794)
++ * Standards-Version: 4.0.0
++ - Use https form of the copyright-format URL (Debian Policy 4.0.0)
++ * Remove debian/bzr-builddeb.conf
++ * Remove empty debian/diversions
++ * Remove "ugly workaround to get the manpages on every architecture to be
++ identical", xsltproc now honour SOURCE_DATE_EPOCH
++ * Remove dh-exec shbang in libnss-winbind.install
++ * Remove empty debian/libsmbclient.manpages
++ * Remove pre-jessie maintscript snipsets
++ * Move to debhelper compat 10 (Major change: dh_installinit command now
++ defaults to --restart-after-upgrade)
++ * Remove unused samba-ad-dc package metadata (Closes: #866138)
++ * Fix "Non-kerberos logins fails on winbind 4.X when krb5_auth is configured
++ in PAM" (Closes: #739768)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 29 Jun 2017 09:45:59 +0200
++
++samba (2:4.6.5+dfsg-2) unstable; urgency=medium
++
++ * Upload to unstable
++ * Move runtime dependencies of vfs_ceph and vfs_snapper to Recommends
++ * Fix typo s/DESTIDR/DESTDIR/ in d/rules
++ * Enable vfs_glusterfs (Closes: #864862)
++ * Add libdbus-1-dev as Build-Depends to allow vfs_snapper to build (Closes:
++ #804781). Patch by Willy Vanlid.
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 19 Jun 2017 23:56:56 +0200
++
++samba (2:4.6.5+dfsg-1) experimental; urgency=medium
++
++ * New upstream version (Closes: #859390)
++ - d/gbp.conf, d/watch: Change major version to 4.6
++ - Bump Build-dependencies of talloc, tdb, tevent and ldb to resp. 2.1.9,
++ 1.3.12, O.9.31 and 1.1.29
++ - Remove CVE-2017-7494.patch: applied upstream
++ - Add Build-Depends: libcmocka-dev (>= 1.0)
++ - Update d/*.install
++ - d/samba-common.docs: Roadmap removed upstream
++ * Update README.source, about importing major versions
++ * d/control cleanup:
++ - Remove Conflicts and Replaces on pre-wheezy samba4 packages
++ - Remove Conflicts, Breaks and Replaces on pre-wheezy samba packages
++ - Remove Conflicts, Breaks and Replaces on pre-jessie samba packages
++ - Remove Conflicts, Breaks and Replaces on (pre-jessie) samba4 packages
++ - Remove Conflicts on pre-jessie libldb1 package
++ - Remove Breaks on pre-jessie qtsmbstatus-server package
++ - Remove Replaces on pre-wheezy smbget package
++ - wrap-and-sort
++ * Add libcephfs-dev as b-d to build vfs_ceph (Closes: #856998). Patch from
++ Ubuntu
++ * Enable avahi support (Closes: #859875). Patch from Laurent Bigonville.
++ * Translations:
++ - Portuguese translation for debconf messages (Closes: #864172). Patch from
++ Rui Branco
++ - Hungarian translation for debconf messages (Closes: #708277)
++ * Properly quote subshell invocation in samba-common.preinst (Closes: #771689)
++ * Add Build-Depends: xfslibs-dev, for XFS quotas
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 12 Jun 2017 08:09:43 +0200
++
++samba (2:4.5.8+dfsg-2) unstable; urgency=high
++
++ * CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 18 May 2017 11:53:47 +0200
++
++samba (2:4.5.8+dfsg-1) unstable; urgency=high
++
++ * New upstream version
++ - Drop CVE-2017-2619.patch: merged upstream
++ - Fix CVE-2017-2619 regression with "follow symlink = no" (Closes: #858564)
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 01 Apr 2017 20:39:17 +0200
++
++samba (2:4.5.6+dfsg-2) unstable; urgency=high
++
++ * This is a security release in order to address the following defects:
++ - CVE-2017-2619: symlink race permits opening files outside share directory
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 22 Mar 2017 08:03:34 +0100
++
++samba (2:4.5.6+dfsg-1) unstable; urgency=medium
++
++ * New upstream version
++ * Fix typo in smbd.service and winbind.service (s/nmb.service/nmbd.service)
++ (Closes: #857232)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 09 Mar 2017 15:42:37 +0100
++
++samba (2:4.5.5+dfsg-1) unstable; urgency=medium
++
++ * New upstream version
++ - Revert rewrite of the vfs_fruit module (Closes: #856561)
++ * Fix 'winbindd privileged socket directory' (Closes: #754339):
++ - Fix path from /var/run/samba/winbindd_privileged/ to
++ /var/lib/samba/winbindd_privileged/.
++ - Move mkdir+chgrp+chmod to postinst (to handle systemd also).
++ - Thanks to Jim Barber for the report.
++ * logrotate: Use delaycompress on all logs (Closes: #702201)
++ - Thanks to Matthew Gabeler-Lee for the proposed fix.
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 05 Mar 2017 23:21:09 +0100
++
++samba (2:4.5.4+dfsg-1) unstable; urgency=medium
++
++ [ Mathieu Parent ]
++ * New upstream version
++ - Drop security-2016-12-19.patch, was 4.5.3
++ * missing-build-dependency-for-dh_-command dh_python2 => dh-python
++
++ [ Vincent Blut ]
++ * d/control: Suggest chrony as an alternative to ntp (Closes: #851727)
++
++ [ Daniel A ]
++ * add gpgme support (Closes: #850908)
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 25 Jan 2017 21:25:40 +0100
++
++samba (2:4.5.2+dfsg-2) unstable; urgency=high
++
++ * This is a security release in order to address the following defects:
++ - CVE-2016-2123 (Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer
++ Overflow Remote Code Execution Vulnerability).
++ - CVE-2016-2125 (Unconditional privilege delegation to Kerberos servers in
++ trusted realms).
++ - CVE-2016-2126 (Flaws in Kerberos PAC validation can trigger privilege
++ elevation).
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 17 Dec 2016 22:54:35 +0100
++
++samba (2:4.5.2+dfsg-1) unstable; urgency=medium
++
++ * New upstream version
++ - Remove CTDB-Fix-samba-eventscript.patch: merged
++ - d/rules: /usr/share/ctdb-tests is now /usr/share/ctdb/tests
++ * Update gbp.conf with debian-branch = master
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 08 Dec 2016 20:21:52 +0100
++
++samba (2:4.5.1+dfsg-2) unstable; urgency=medium
++
++ * Upload to unstable
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 05 Dec 2016 07:01:35 +0100
++
++samba (2:4.5.1+dfsg-1) experimental; urgency=medium
++
++ * New upstream version
++ - Refresh patches
++ - Remove bug_12283_segfault_tevent_internals.patch
++ - Remove gencache-Bail-out-of-stabilize-if-we-can-not-get-the.patch
++ - Adding libdsdb-garbage-collect-tombstones.so.0 to samba-libs.install
++ * CTDB: Fix samba eventscript
++ * nmbd requires a working network (Closes: #698056, #842056, #840608,
++ LP: #1635491)
++ * Be more verbose about masking samba-ad-dc.service (Closes: #841147)
++ * Remove Fix_parallel_build.patch, not working
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 01 Nov 2016 13:54:29 +0100
++
++samba (2:4.5.0+dfsg-1) experimental; urgency=medium
++
++ * Upload to experimental
++ * New upstream version
++ + Remove patches:
++ - bug_601406_fix-perl-path-in-example.patch, similar applied
++ - waf_smbpasswd_location, applied
++ - Fix-privacy-breach-on-google.com.patch, doc moved out of source
++ - ctdb-Fix-detection-of-gnukfreebsd.patch, applied
++ - gcc_6.patch, applied
++ + Dumped dependencies
++ - libldb-dev (>= 2:1.1.27~)
++ - libtalloc-dev (>= 2.1.8~)
++ - libtdb-dev (>= 1.3.10~)
++ - libtevent-dev (>= 0.9.29~)
++ - python-talloc-dev (>= 2.1.8~)
++ + Install new files and update debian/ctdb.docs
++ + Update to libwbclient0.symbols
++ + Update samba-libs.lintian-overrides (libtevent-unix-util0 removed)
++ + /etc/default/ctdb is now /etc/ctdb/ctdbd.conf
++ * Add patch for https://bugzilla.samba.org/show_bug.cgi?id=12045
++ * ctdb/wscript: Call CHECK_XSLTPROC_MANPAGES() before checking
++ XSLTPROC_MANPAGES. This should fix parallel builds, including
++ tests.reproducible-builds.org. Thanks HW42 on IRC
++ * Depends: lsb-base (>= 3.0-6), for ctdb and winbind as they source
++ /lib/lsb/init-functions
++
++ -- Mathieu Parent <sathieu@debian.org> Sun, 23 Oct 2016 15:56:59 +0200
++
++samba (2:4.4.6+dfsg-2) unstable; urgency=high
++
++ * Remove uses of tevent internals. This fixes segfault.
++ Closes: #840382, #840298.
++
++ -- Mathieu Parent <sathieu@debian.org> Wed, 12 Oct 2016 05:53:33 +0200
++
++samba (2:4.4.6+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ * Use epoch in samba-vfs-modules Breaks and Replaces (Closes: #833164)
++ * Only fix PIDFile in {nmbd,samba-ad-dc,smbd,winbind}.service (i.e. not
++ ctdb.service) Closes: #838000.
++ * logrotate: Only reload smbd when needed. Thanks Roland Hieber.
++ Closes: #838796.
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 10 Oct 2016 22:23:45 +0200
++
++samba (2:4.4.5+dfsg-3) unstable; urgency=medium
++
++ [ Jelmer Vernooij ]
++ * Add strict dependencies on samba-libs, because of use of private
++ libraries without stable ABI across Samba binary packages.
++ * Add Breaks clauses for older versions of samba-libs and samba to
++ samba-vfs-modules, as some files have moved. Closes: #833164,
++ #832880
++
++ [ Mathieu Parent ]
++ * Remove /etc/systemd/system/samba-ad-dc.service (from postinst) on purge.
++ Closes: #832352
++ * Fix PIDFile in systemd service files. Closes: #830909
++ * Remove unused lintian overrides
++ * Use automatic debug packages (-dbgsym) (Closes: #819776)
++ * Remove Christian Perrier from uploaders (Closes: #836715). Thanks for all
++ you work, and thanks for bringing me in the team and as a DD.
++ * Update Turkish translation. Thanks Atila KOÇ. Closes: #791903
++ * Drop dependency on samba-libs in libwbclient0 to avoid
++ circular dependency.
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 09 Sep 2016 13:00:54 +0200
++
++samba (2:4.4.5+dfsg-2) unstable; urgency=medium
++
++ * Disable running of 'make quicktest' during build, as it takes very
++ long to run on x32 and enables building non-production NTVFS server.
++ Closes: #830571
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 09 Jul 2016 19:09:19 +0000
++
++samba (2:4.4.5+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ + Fixes CVE-2016-2119: Client side SMB2/3 required signing can be
++ downgraded. Closes: #830195
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 07 Jul 2016 10:51:40 +0000
++
++samba (2:4.4.4+dfsg-3) unstable; urgency=medium
++
++ * Add patch gcc_6.patch, fixing compatibility with gcc 6.
++ Closes: #812264
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 04 Jul 2016 12:20:56 +0000
++
++samba (2:4.4.4+dfsg-2) unstable; urgency=medium
++
++ * Mask samba-ad-dc.service unless needed (Closes: #828137)
++ * Fix kill path in systemd units (Closes: #828730)
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 27 Jun 2016 21:37:58 +0200
++
++samba (2:4.4.4+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ * The "Thanks lintian" release
++ * Fixes:
++ - Ensure that dpkg-buildflags are passed, and enable all hardening
++ - systemd
++ + Enable systemd (sd_notify) on Linux, and install systemd files
++ + Remove obsolete syslog.target from service files
++ + Add documentation field to unit files
++ - Drop fix-cluster-build.diff: no more needed
++ - Use secure Vcs-* URLs
++ - Fix copyright file
++ - samba.postinst: command-with-path-in-maintainer-script update-inetd
++ - samba-common-bin: package-contains-empty-directory usr/lib/samba/
++ - winbind: package-contains-empty-directory usr/lib/samba/nss_info/
++ - Add Description to init files
++ * No-op fixes:
++ - d/control: Drop XS-Testsuite field
++ - Drop redundant "Priority: optional" fields
++ - Drop redundant "Section: net" fields
++ - Describe non-standard-dir-perm var/spool/samba/
++ - Describe no_build_system.patch
++ - Remove README.build-upstream, as packaging/Debian/ is now empty
++ - Verify upstream tarball from uscan
++ - Update README.source and remove build-orig.sh
++
++ -- Mathieu Parent <sathieu@debian.org> Mon, 13 Jun 2016 21:52:52 +0200
++
++samba (2:4.4.3+dfsg-4) unstable; urgency=medium
++
++ * Fix build with DEB_BUILD_OPTIONS=nocheck
++ * Still run "make quicktest" but ignore failures
++
++ -- Mathieu Parent <sathieu@debian.org> Sat, 07 May 2016 13:18:53 +0200
++
++samba (2:4.4.3+dfsg-3) unstable; urgency=medium
++
++ * Skip raw.write tests for now as they fail on 32-bit
++
++ -- Mathieu Parent <sathieu@debian.org> Fri, 06 May 2016 15:34:07 +0200
++
++samba (2:4.4.3+dfsg-2) unstable; urgency=medium
++
++ * Run quicktest during build
++ * Reproducibility:
++ - Drop no_build_options.patch as it breaks "make test"
++ - Remove unreproducible build environment instead
++ * Mention that patch waf_smbpasswd_location was submitted
++ * usershare.patch: Fix "usershare max shares" default in XML doc and in s4
++
++ -- Mathieu Parent <sathieu@debian.org> Tue, 03 May 2016 12:30:56 +0200
++
++samba (2:4.4.3+dfsg-1) unstable; urgency=medium
++
++ * Cleanup ctdb READMEs during 'clean' step.
++ * New upstream release.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 02 May 2016 14:12:46 +0000
++
++samba (2:4.4.2+dfsg-2) unstable; urgency=medium
++
++ * Merge in 4.3 package changes.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 27 Apr 2016 01:29:47 +0000
++
++samba (2:4.4.2+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ * Bump standards version to 3.9.8 (no changes).
++ * Drop build dependency on perl-modules; depend on perl instead.
++ * Upload to unstable.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 26 Apr 2016 23:29:54 +0000
++
++samba (2:4.4.1+dfsg-1) experimental; urgency=medium
++
++ * New upstream release
++ + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
++ - CVE-2015-5370 (Multiple errors in DCE-RPC code)
++ - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
++ - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
++ - CVE-2016-2112 (LDAP client and server don't enforce integrity)
++ - CVE-2016-2113 (Missing TLS certificate validation)
++ - CVE-2016-2114 ("server signing = mandatory" not enforced)
++ - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
++ - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
++ * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze
++
++ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz> Mon, 11 Apr 2016 16:09:59 +1200
++
++samba (2:4.4.0+dfsg-1) experimental; urgency=medium
++ [ Andrew Bartlett ]
++ * New upstream release.
++
++ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz> Wed, 06 Apr 2016 17:08:20 +1200
++
++samba (2:4.3.8+dfsg-1) unstable; urgency=low
++
++ [ Jelmer Vernooij ]
++ * Add patch no_build_system.patch: drop host-specific define that
++ prevents reproducible builds.
++ * New upstream release.
++ + Drop patch
++ security-2016-04-12-prerequisite-v4-3-regression-fixes.metze01.txt,
++ now included upstream.
++ * Bump version in Replaces: samba-libs for samba-vfs-modules to
++ 4.3.2+dfsg-1, to fix jessie->stretch upgrades. Closes: #821070
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 16 Apr 2016 01:18:36 +0000
++
++samba (2:4.3.7+dfsg-1) unstable; urgency=high
++
++ * New upstream release.
++ + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
++ - CVE-2015-5370 (Multiple errors in DCE-RPC code)
++ - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
++ - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
++ - CVE-2016-2112 (LDAP client and server don't enforce integrity)
++ - CVE-2016-2113 (Missing TLS certificate validation)
++ - CVE-2016-2114 ("server signing = mandatory" not enforced)
++ - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
++ - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
++ * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze
++
++ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz> Wed, 13 Apr 2016 10:24:17 +1200
++
++samba (2:4.3.6+dfsg-2) unstable; urgency=low
++ [ Mathieu Parent ]
++ * Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146). Patch by
++ Santiago Vila
++ * Drop samba from winbind depends and use samba-common* instead
++ (Closes: #732604)
++ * Add an override to script-not-executable etc/ctdb/events.d/10.external
++ * Add ufw integration (from Ubuntu)
++ * Don't build ctdb twice:
++ - Shorten build time
++ - Fix ctdb log path from /var/log/log.ctdb to /var/log/ctdb/log.ctdb
++ - Remove unused /usr/lib/*/ctdb/*.so files
++
++ [ Steven Chamberlain ]
++ * ctdb: Fix detection of gnukfreebsd (Closes: #802621)
++
++ [ Jelmer Vernooij ]
++ * Add no_build_options.patch: make package more reproducible by
++ disabling build options output.
++
++ [ Andrew Bartlett ]
++ * Allow to build/run the AD DC provision/dbcheck against talloc
++ 2.1.6 (Closes: #820015)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 31 Mar 2016 22:26:11 +0200
++
++samba (2:4.3.6+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ + Fixes:
++ - CVE-2015-7560: Incorrect ACL get/set allowed on symlink path.
++ - CVE-2016-0771 (Out-of-bounds read in internal DNS server.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 27 Feb 2016 23:28:53 +0000
++
++samba (2:4.3.5+dfsg-3) unstable; urgency=medium
++
++ * Fix dhclient hook if samba is not installed. Thanks, Jan Braun.
++ Closes: #801976
++ * Rebuild against current version of ldb in the archive. Closes:
++ #817036
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 08 Mar 2016 00:24:10 +0000
++
++samba (2:4.3.5+dfsg-2) unstable; urgency=medium
++
++ * Move strict ldb dependency to samba-dsdb-modules package, which
++ actually contains the modules. Closes: #816210
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 06 Mar 2016 22:51:53 +0000
++
++samba (2:4.3.5+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ * Fixed usershare.patch to apply against new version.
++ * Loosen dependencies on ldb to ldb >= 1.1.21, per upstream.
++ * Drop patch sockets-with-htons.patch: applied upstream.
++ * Bump standards version to 3.9.7 (no changes).
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 05 Mar 2016 15:56:42 +0000
++
++samba (2:4.3.3+dfsg-2) unstable; urgency=medium
++
++ [ Jelmer Vernooij ]
++ * Add dependency on libtevent-dev in samba-dev.
++
++ [ Mathieu Parent ]
++ * Fix CTDB behavior since CVE-2015-8543 (Closes: #813406)
++
++ -- Mathieu Parent <sathieu@debian.org> Thu, 04 Feb 2016 13:25:01 +0100
++
++samba (2:4.3.3+dfsg-1) unstable; urgency=medium
++
++ * New upstream release. Closes: #808133.
++ + Drop subunit dependency, no longer used.
++ + Drop ntdb dependencies, no longer used.
++ + Fixes:
++ - CVE-2015-5252: Insufficient symlink verification in smbd
++ - CVE-2015-5296: Samba client requesting encryption vulnerable
++ downgrade attack
++ - CVE-2015-5299: Missing access control check in shadow copy code
++ - CVE-2015-7540: Remote DoS in Samba (AD) LDAP server
++ - CVE-2015-8467: Denial of service attack against Windows Active Directory
++ server
++ - CVE-2015-3223: Denial of service in Samba Active Directory server
++ - CVE-2015-5330: Remote memory read in Samba LDAP server
++ * Remove libpam-smbpasswd, which is broken and slated for removal
++ upstream. Closes: #799840
++ * Remove lib/zlib/contrib/dotzlib/DotZLib.chm from excluded files in
++ copyright; no longer shipped upstream.
++ * Remove wins2dns.awk example script.
++ * Remove the samba-doc package, and move examples files from it to
++ relevant other packages. Closes: #769385
++ * Move samba-dsdb-modules back from Depends to Recommends, as using
++ Samba as a standalone server doesn't require the dsdb modules.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 18 Dec 2015 01:18:42 +0000
++
++samba (2:4.3.0+dfsg-2) experimental; urgency=medium
++
++ * Re-enable cluster support.
++ + Build samba-cluster-support as built-in library, since its dependencies
++ are broken.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 28 Sep 2015 00:34:51 +0000
++
++samba (2:4.3.0+dfsg-1) experimental; urgency=medium
++
++ * Fix watch file.
++ * New upstream release.
++ * Drop no_wrapper patch: applied upstream.
++ * Drop patch ctdb_sockpath.patch: applied upstream.
++ * Drop Fix-CTDB-build-with-PMDA patch: applied upstream.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 19 Sep 2015 01:59:36 +0000
++
++samba (2:4.2.1+dfsg-1) experimental; urgency=medium
++
++ [ Jelmer Vernooij ]
++ * New upstream release.
++ + Drop patch do-not-install-smbclient4-and-nmbclient4: applied upstream.
++ + Drop patch
++ bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch:
++ present upstream.
++ + Refresh patch 26_heimdal_compat.26_heimdal_compat.
++ + Add build-dependency on libarchive-dev.
++ * Drop samba_bug_11077_torturetest.patch: applied upstream.
++ * Drop dependency on ctdb - now bundled with Samba.
++ * Use bundled Heimdal as the system Heimdal doesn't contain the
++ changes required for Samba.
++ * Add patch heimdal-rfc3454.txt: patch in truncated rfc3454.txt for
++ building bundled heimdal.
++ * Drop patches 25_heimdal_api_changes and 26_heimdal_compat.
++ * Disable cluster support; it breaks the build.
++ * Add patch no_wrapper: avoid dependencies on
++ {nss,uid,socket}_wrapper.
++ * Move some libraries around.
++ * Move ownership of var/lib/samba and var/lib/samba/private to samba-
++ common, remove obsolete samba4.dirs. Closes: #793866
++ * Remove ctdb-tests and ctdb-pcp-pmda packages as they contain problems
++ and unclear what they are useful for, now ctdb now longer provides
++ an external API.
++
++ [ Mathieu Parent ]
++ * Merge ctdb source package
++ - initial merge
++ - libctdb-dev has been dropped
++ - ctdb-dbg renamed to ctdb-tests, debug files moved to samba-dbg
++ - ctdb-tests depends on python
++ * Fix CTDB socketpath parsing
++ * Fix CTDB build with PMDA
++ * ctdb: Fix privacy breach on google.com (from documentation)
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 07 Dec 2014 15:34:36 +0000
++
++samba (2:4.1.20+dfsg-1) unstable; urgency=medium
++
++ * New upstream release (last compatible with current OpenChange).
++ * samba_bug_11077_torturetest.patch: refresh.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 20 Sep 2015 17:48:59 +0000
++
++samba (2:4.1.17+dfsg-5) unstable; urgency=medium
++
++ * Rebuild against new ldb. Closes: #799569
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 20 Sep 2015 13:20:53 +0000
++
++samba (2:4.1.17+dfsg-4) unstable; urgency=medium
++
++ * Add pidl_reproducible.patch: Make pidl output reproducible.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 28 Apr 2015 00:10:21 +0000
++
++samba (2:4.1.17+dfsg-3) unstable; urgency=medium
++
++ * Rebuild against new ldb. Closes: #783424
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 27 Apr 2015 00:09:50 +0000
++
++samba (2:4.1.17+dfsg-2) unstable; urgency=medium
++
++ [ Andreas Beckmann ]
++ * Add samba.preinst to temporarily deactivate the old qtsmbstatusd
++ initscript which has dependencies incompatible with the new samba
++ initscript. This will ensure a clean upgrade path for samba if the
++ qtsmbstatus-server package was installed previously. (Closes: #779666)
++
++ -- Ivo De Decker <ivodd@debian.org> Sat, 07 Mar 2015 13:09:23 +0100
++
++samba (2:4.1.17+dfsg-1) unstable; urgency=high
++
++ * New upstream release. Fixes:
++ - CVE-2014-8143: Elevation of privilege to Active Directory Domain
++ Controller. Closes: #776993
++ - CVE-2015-0240: Unexpected code execution in smbd. Closes: #779033
++ * Refresh patch add-so-version-to-private-libraries.
++ * Add new smbtorture test rpc.schannel_anon_setpw to detect the conditions
++ leading to CVE-2015-0240.
++ * Add breaks on qtsmbstatus-server (<< 2.2.1-3~). Closes: #775041
++ * Build-depend on reverted ldb version (with increased epoch).
++
++ -- Ivo De Decker <ivodd@debian.org> Mon, 23 Feb 2015 20:20:21 +0100
++
++samba (2:4.1.13+dfsg-4) unstable; urgency=medium
++
++ * Revert previous patch, since ldb has an active module version check.
++ Instead, just depend on ldb 1.1.18. Closes: #771991
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 10 Dec 2014 18:13:42 +0000
++
++samba (2:4.1.13+dfsg-3) unstable; urgency=medium
++
++ * Update debian/rules to allow support for multiple upstream ldb
++ versions, when verified. Closes: #771991
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 04 Dec 2014 21:03:54 +0100
++
++samba (2:4.1.13+dfsg-2) unstable; urgency=medium
++
++ * Mask /etc/init.d/samba init script for systemd. This should make systemd
++ ignore the samba init script. Thanks to Michael Biebl for the suggestion.
++ Closes: #740942
++ * Disable samba init script on upgrade from wheezy to jessie.
++ Thanks again to Michael Biebl for the report.
++ Closes: #766690
++
++ -- Ivo De Decker <ivodd@debian.org> Sat, 25 Oct 2014 00:49:12 +0200
++
++samba (2:4.1.13+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ * Bump standards version to 3.9.6 (no changes).
++
++ -- Ivo De Decker <ivodd@debian.org> Tue, 21 Oct 2014 20:22:19 +0200
++
++samba (2:4.1.11+dfsg-2) unstable; urgency=medium
++
++ * Updated Italian translation. Thanks Luca Monducci. Closes: #760743
++ * Use HTTP in watch file, as ftp.samba.org is not working reliably for
++ me.
++ * Use Excluded-Files in debian/copyright for DFSG-nonfree files.
++ * Update Dutch translation. Thanks Frans Spiesschaert. Closes: #763650
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 07 Sep 2014 20:52:27 +0200
++
++samba (2:4.1.11+dfsg-1) unstable; urgency=high
++
++ * New upstream release. Fixes:
++ + CVE-2014-3560: Remote code execution in nmbd. Closes: #756759
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 03 Aug 2014 03:47:07 +0200
++
++samba (2:4.1.9+dfsg-2) unstable; urgency=medium
++
++ [ Jelmer Vernooij ]
++ * Depend on libgnutls28-dev rather than libgnutls-dev. Closes: #753146
++ * Remove outdated-autotools-helper-file overrides for config.guess and
++ config.sub; files are no longer present upstream.
++ * Add branch to Vcs-Git header.
++ * samba.smbd.upstart: Remove leftover code for RUN_MODE=inetd, which
++ was already removed elsewhere.
++ * Move dsdb-module library from samba-dsdb-modules to samba-libs, to
++ prevent circular dependencies between samba-dsdb-modules and samba-
++ libs. This is necessary since dsdb-module is now used by the dcerpc-
++ server library.
++
++ [ Debconf translations ]
++ * New Brazilian Portugese translation from Adriano Rafael Gomes.
++ Closes: #752719
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 29 Jun 2014 19:43:52 +0200
++
++samba (2:4.1.9+dfsg-1) unstable; urgency=high
++
++ * New upstream security release. Fixes:
++ - CVE-2014-0244: nmbd denial of service
++ - CVE-2014-3493: smbd denial of service: server crash/memory corruption
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 23 Jun 2014 18:33:27 +0200
++
++samba (2:4.1.8+dfsg-1) unstable; urgency=medium
++
++ [ Jelmer Vernooij ]
++ * Remove smbd and nmbd from required-start and required-stop in
++ samba.init. Closes: #739887
++
++ [ Ivo De Decker ]
++ * Remove workaround for #745233.
++ * New upstream release. Fixes:
++ - CVE-2014-0239: dns: Don't reply to replies. Closes: #749845
++ - CVE-2014-0178: Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response.
++ * Use the upstream version of the smb.conf.5 manpage, instead of building
++ it. This is an ugly temporary workaround because xsltproc crashes on some
++ architectures when building this manpage (due to #750593).
++ This fixes the FTBFS, and should make samba installable with the new ldb
++ version. Closes: #750541, 750796
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 08 Jun 2014 23:37:53 +0200
++
++samba (2:4.1.7+dfsg-2) unstable; urgency=medium
++
++ * Build-depend on heimdal-dev instead of libkrb5-dev.
++ * Add versioned build-dep on libgmp10 for now, which should be pulled in by
++ libhogweed2, to be able to build in outdated build environments (like on
++ most buildds). This is a workaround for #745233.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 20 Apr 2014 13:44:39 +0200
++
++samba (2:4.1.7+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ * Remove readline63.patch, integrated upstream.
++ * Add build-dep on libkrb5-dev, no longer pulled in by libcups2-dev.
++ * Don't try to delete Parse/Yapp/Driver.pm, which is no longer installed.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 19 Apr 2014 13:39:09 +0200
++
++samba (2:4.1.6+dfsg-1) unstable; urgency=high
++
++ * New upstream security release. Fixes:
++ - CVE-2013-4496: password lockout not enforced for SAMR password changes
++ - CVE-2013-6442: smbcacls can remove a file or directory ACL by mistake
++ * Backport fix for readline 6.3 from master
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 15 Mar 2014 12:13:59 +0100
++
++samba (2:4.1.5+dfsg-1) unstable; urgency=medium
++
++ [ Jelmer Vernooij ]
++ * Fix watch file.
++
++ [ Ivo De Decker ]
++ * New upstream release.
++ * Remove the part of patch 26_heimdal_compat integrated upstream.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 22 Feb 2014 23:17:59 +0100
++
++samba (2:4.1.4+dfsg-3) unstable; urgency=medium
++
++ * Move samba.dckeytab module to samba package, as it relies on hdb.
++ Closes: #736405, #736430
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 24 Jan 2014 23:35:14 +0000
++
++samba (2:4.1.4+dfsg-2) unstable; urgency=medium
++
++ [ Jelmer Vernooij ]
++ * Depend on newer version of ctdb, as Samba won't build against older
++ versions without --enable-old-ctdb.
++ * Bump standards version to 3.9.5 (no changes).
++ * Move libpac, db_glue and hdb module from samba-libs to samba package
++ to reduce size and dependency set of libs package.
++ * Fix compatibility with newer versions of the Heimdal HDB API.
++ + Update 26_heimdal_compat: Fix initialization of HDB plugin. Thanks Jeff
++ Clark. Closes: #732342
++ + Add dependency on specific version of the Heimdal HDB API.
++ Closes: #732344
++
++ [ Steve Langasek ]
++ * dhcp3-client is superseded by dhcp-client; update the references in
++ the package. Closes: #736070.
++ * Move the dhcp client hook from /etc/dhcp3 to /etc/dhcp.
++ Closes: #649100.
++ * debian/bin/xsltproc: don't use $FAKETIME as the variable name in our
++ wrapper script, this seems to make faketime unhappy.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 18 Jan 2014 20:26:35 +0000
++
++samba (2:4.1.4+dfsg-1) unstable; urgency=medium
++
++ * New upstream release.
++ * Update version of talloc build-deps to 2.0.8.
++ * python-samba: add depends on python-ntdb.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 18 Jan 2014 14:07:15 +0100
++
++samba (2:4.1.3+dfsg-2) unstable; urgency=medium
++
++ * Add debug symbols for all binaries to samba-dbg. Closes: #732493
++ * Add lintian overrides for empty prerm scripts.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Fri, 27 Dec 2013 12:39:54 +0100
++
++samba (2:4.1.3+dfsg-1) experimental; urgency=low
++
++ [ Jelmer Vernooij ]
++ * New upstream release.
++ + Drop 0002-lib-replace-Allow-OS-vendor-to-assert-that-getpass-i.patch:
++ upstream no longer uses getpass.
++ * Add source dependency on libntdb1, and stop passing --disable-ntdb,
++ which has been removed.
++ * Remove handling for SWAT, which is no longer shipped upstream.
++ * Split VFS modules out from samba-libs into a separate binary
++ package.
++ * Move service and process_model modules from the samba-libs to the
++ samba package. Prevents dependencies on libkdc2-heimdal and
++ libhdb9-heimdal.
++
++ [ Ivo De Decker ]
++ * Add build-dep on python-ntdb.
++ * Add build-dep on libncurses5-dev.
++ * Add depends on python-ntdb to samba.
++ * New upstream release.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 09 Dec 2013 23:24:27 +0100
++
++samba (2:4.0.13+dfsg-2) UNRELEASED; urgency=low
++
++ [ Steve Langasek ]
++ * Check for alternative's presence before calling update-alternatives
++ --remove-all, instead of silently ignoring all errors from
++ update-alternatives.
++
++ [ Debconf translations ]
++ * Spanish (Javier Fernández-Sanguino). Closes: #731800
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 09 Dec 2013 11:13:59 -0800
++
++samba (2:4.0.13+dfsg-1) unstable; urgency=high
++
++ [ Steve Langasek ]
++ * Move update-alternatives upgrade removal handling to the postinst, where
++ it belongs. Closes: #730090.
++ * Really remove all references to encrypted passwords: the
++ samba-common.config script still included references, which could cause
++ upgrade failures in some cases. Closes: #729167.
++
++ [ Ivo De Decker ]
++ * New upstream security release. Fixes:
++ - CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked
++ - CVE-2012-6150: pam_winbind login without require_membership_of
++ restrictions
++ * Add empty prerm scripts for samba and samba-common-bin.prerm, to allow
++ upgrades from earlier versions with broken prerm script (bug introduced in
++ 2:4.0.10+dfsg-3)
++ * Don't fail in postinst when removing old alternatives fails.
++
++ [ Jelmer Vernooij ]
++ * Fix invocations of 'update-alternatives --remove-all'. Closes: #731192
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 09 Dec 2013 18:34:07 +0100
++
++samba (2:4.0.12+dfsg-1) unstable; urgency=low
++
++ [ Ivo De Decker ]
++ * New upstream release.
++
++ [ Debconf translations ]
++ * Thai (Theppitak Karoonboonyanan). Closes: #728525
++ * Norwegian Bokmål (Bjørn Steensrud). Closes: #729070
++ * German (Holger Wansing). Closes: #729210
++
++ [ Jelmer Vernooij ]
++ * Add 26_heimdal_compat: Fix compatibility with newer versions of
++ Heimdal.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 24 Nov 2013 07:48:20 +0100
++
++samba (2:4.0.11+dfsg-1) unstable; urgency=high
++
++ * New upstream security release. Fixes:
++ - CVE-2013-4475: ACLs are not checked on opening an alternate data stream
++ on a file or directory
++ - CVE-2013-4476: Private key in key.pem world readable
++ * Move world-readable private key file on upgrade to allow
++ auto-regeneration.
++ * Add check in samba-ad-dc init script for wrong permission on private key
++ file that would prevent samba to start.
++ * Update samba-libs.lintian-overrides for moved libtorture0.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 11 Nov 2013 15:42:40 +0100
++
++samba (2:4.0.10+dfsg-4) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Mark one debconf string as non-translatable
++
++ [ Debconf translations ]
++ * French updated (Christian Perrier).
++ * Swedish (Martin Bagge / brother). Closes: #727186
++ * Hebrew (Omer Zak).
++ * Japanese (Kenshi Muto). Closes: #727218
++ * Indonesian (Al Qalit). Closes: #727543
++ * Russian (Yuri Kozlov). Closes: #727612
++ * Esperanto (Felipe Castro). Closes: #727619
++ * Polish (Michał Kułach). Closes: #727646
++ * Danish (Joe Hansen). Closes: #727764
++ * Czech (Miroslav Kure). Closes: #728100
++ * Basque (Iñaki Larrañaga Murgoitio). Closes: #728315
++
++ [ Jelmer Vernooij ]
++ * Move libtorture0 to samba-testsuite to reduce size of samba-libs and
++ prevent dependency on libsubunit0.
++
++ [ Ivo De Decker ]
++ * Handle move of tdb files to private dir in samba-libs.preinst.
++ Closes: #726472
++ * Also do the tdb move in libpam-smbpass.preinst, to avoid breaking the pam
++ module if the upgrade fails.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 02 Nov 2013 11:27:25 +0100
++
++samba (2:4.0.10+dfsg-3) unstable; urgency=low
++
++ [ Ivo De Decker ]
++ * Remove Sesse from uploaders. Thanks for your work on samba4.
++ * Include /etc/pam.d/samba in samba-common. It got lost somewhere in the
++ samba4 merge. Closes: #726183
++ * Remove unused alternatives links on upgrade in samba-common-bin.prerm.
++ * Add support for 'status' in samba-ad-dc init script.
++ * Fix umask in make_shlibs to avoid lintian error
++ control-file-has-bad-permissions.
++ * Enable verbose build log.
++ * Run xsltproc under faketime to get the same date for manpages on different
++ architectures in Multi-Arch: same packages. Closes: #726314
++ * Restore build-dep on libcups2-dev, which got lost in the samba4 merge.
++ This should restore the cups printing functionality. Closes: #726726
++ * Add wrapper for cups-config to filter out
++ -L/usr/lib/${DEB_HOST_MULTIARCH}, to work around build-failure.
++ * Also add other build-deps which were present in samba 2:3.6.19-1.
++ * if the same tdb file is present in /var/lib/samba and
++ /var/lib/samba/private, abort the upgrade to work around #726472 for now.
++ * Document swat removal. Closes: #726751
++
++ [ Steve Langasek ]
++ * Don't fail on errors from testparm in the samba init script.
++ Closes: #726326
++ * debian/patches/bug_221618_precise-64bit-prototype.patch: adjust the LFS
++ handling to work independently of header include order. Closes: #727065.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Tue, 22 Oct 2013 08:10:31 +0200
++
++samba (2:4.0.10+dfsg-2) unstable; urgency=low
++
++ * First upload the unified samba 4.x package to unstable.
++ Thanks to everyone who worked on these packages all these years.
++ * Remove Noël from uploaders. Thanks for your work on the samba packages
++ * Add myself to uploaders.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 12 Oct 2013 11:05:55 +0200
++
++samba (2:4.0.10+dfsg-1) experimental; urgency=low
++
++ * Team upload.
++
++ [ Ivo De Decker ]
++ * Update vcs urls to point to samba instead of samba4.
++ * New upstream release.
++ * Limit build-dep on libaio-dev to linux architectures.
++ * Merge init script changes from 3.6 packages.
++
++ [ Steve Langasek ]
++ * Don't put useless symlinks to nss modules in the libnss-winbind package.
++ * Add lintian overrides for another set of wrong lintian errors for the
++ NSS modules.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Thu, 10 Oct 2013 21:56:08 +0200
++
++samba (2:4.0.9+dfsg-1) experimental; urgency=low
++
++ * Team upload.
++
++ [ Steve Langasek ]
++ * The samba-ad-dc upstart job should be installed unconditionally, not just
++ in Ubuntu.
++ * Don't exclude our private libraries from the shlibs generation.
++ * Port debian/autodeps.py to python3 and build-depend on python3 so we can
++ invoke it correctly from debian/rules.
++
++ [ Jelmer Vernooij ]
++ * Bump standards version to 3.9.4 (no changes).
++ * Suggest libwireshark-dev for libparse-pidl-perl, as it is necessary
++ to build wireshark dissectors generated by pidl.
++ * samba-ad-dc: Drop suggests for removed packages swat2 and samba-gtk.
++ * samba: Remove inetd servers from suggests; inetd support was dropped
++ in 3.6.16-1.
++ * Fix database errors during upgrade. Closes: #700768
++ * Integrate libraries in samba-libs
++
++ [ Ivo De Decker ]
++ * New upstream release.
++ * Merge contents of samba-ad-dc into samba.
++ * Remove systemd support for now, as it is broken. Closes: #719477
++ * Add lintian override for samba-libs: package-name-doesnt-match-sonames.
++ * Add missing depends for dev packages.
++ * Generate correct shlibs for both public and private libs.
++
++ [ Jeroen Dekkers ]
++ * Drop 10_messaging_subsystem patch.
++ * Add patch to not install smbclient4 and nmblookup4 and remove
++ samba4-clients binary package.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 22 Sep 2013 17:19:44 +0200
++
++samba (2:4.0.8+dfsg-1) experimental; urgency=low
++
++ [ Christian Perrier ]
++ * Remove all mention of "Samba 4" and "experimental version of Samba"
++ in packages' description. Samba version 4 is now production-ready.
++
++ [ Andrew Bartlett ]
++ * Update build-dependencies on Samba libraries using autodeps.py
++ * New upstream security release. Closes: #718781
++ Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation
++
++ [ Ivo De Decker ]
++ * New upstream release
++ * refresh patches for new upstream version
++ * remove patches integrated upstream
++ * Update build-dependencies for new upstream version
++ * Add replaces for python-samba for packages that take over files from it.
++ Closes: #719212
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 11 Aug 2013 23:45:16 +0200
++
++samba (2:4.0.6+dfsg-1) experimental; urgency=low
++
++ * Team upload.
++
++ [ Andrew Bartlett ]
++ * Converted to full AD DC package on the basis of the 3.6 package
++ - Samba now can be an Active Directory Domain controller
++ - The samba4-* packages are replaced by this package.
++ - This package now uses the s3fs file server by default, not the ntvfs
++ file server used in the samba4 packages.
++ * Provides a new library based package
++ - Upstream's new build system uses libraries extensively, so new
++ packages reflect that.
++ - This provides the libraries that Openchange and other projects depend on
++ * Move binary files out of /var/lib/samba to /var/lib/samba/private,
++ where they belong according to upstream Samba:
++ - schannel_store.tdb
++ - idmap2.tdb
++ - passdb.tdb
++ - secrets.tdb
++ * Remove most of the samba4 references, except for binaries ending in 4
++ * Removed debconf support for encrypted passwords
++ * Samba 3.x users upgrading can either upgrade to an AD DC or continue
++ using Samba without major changes.
++
++ [ Christian Perrier ]
++ * Move libnss_winbind.so.2 and libnss_wins.so.2 to /lib as in 3.6.*
++ * Use the same set of configure arguments than 3.6.15 (except those
++ eventually specific to version 4 and above)
++ * Add libctdb-dev to build dependencies as we're building with cluster
++ support just like 3.6 packages
++ * Re-introduce mksmbpasswd for compatibility with 3.* packages
++
++ [ Ivo De Decker ]
++ * Specify all paths using configure options, so that we can finally get rid
++ of the fhs patch. Closes: #705449
++
++ [ Steve Langasek ]
++ * Make samba-common Conflicts: swat, which is now obsolete and no longer
++ built from samba 4.0; the old versions of swat in the archive are
++ incompatible with smb.conf from samba 4.0, so force them off the system
++ to avoid configuration corruption.
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Thu, 20 Jun 2013 21:51:49 +0200
++
++samba4 (4.0.3+dfsg1-0.1) experimental; urgency=low
++
++ [ Andrew Bartlett ]
++ * Non-maintainer upload.
++ * New upstream relese: 4.0.3
++ + Fixes CVE-2013-0172 Samba 4.0.0 as an AD DC may provide authenticated users
++ with write access to LDAP directory objects
++ + Fixes many other ACL related issues in the AD DC
++ + Drop 08_waf_python_config as it is now upstream.
++ * Fix the forced use of NTVFS by setting the required options in the smb.conf
++ at configure time.
++ * Add depenencies to ensure python-samba requires exactly this binary version
++ of our core libraries. Closes: #700348
++
++ -- Andrew Bartlett <abartlet@samba.org> Sat, 16 Feb 2013 17:06:34 +0100
++
++samba4 (4.0.0+dfsg1-1) experimental; urgency=low
++
++ [ Martin Pitt ]
++ * debian/tests/control: Fix dependency: python-samba4 does not exist, it's
++ python-samba. Closes: #695854
++
++ [ Jelmer Vernooij ]
++ * New upstream release: 4.0.0!
++ + Add 08_waf_python_config to cope with python-config no longer
++ being a script.
++ * Add 25_heimdal_api_changes, to update Samba to work with the
++ current Heimdal in Sid. Patch from
++ Samuel Cabrero Alamán <scabrero@zentyal.com>. Closes: #686227
++ * Add 11_force_ntvfs: Force the use of NTVFS, until the version of smbd in
++ the archive is new enough. Closes: #694697
++ * Drop dependency on libsmbclient; instead, build private copy.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 13 Dec 2012 16:27:20 +0100
++
++samba4 (4.0.0~rc6+dfsg1-1) experimental; urgency=low
++
++ * New upstream release.
++ + Drop 08_heimdal_config_h and 11_system_heimdal, now applied upstream.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 04 Dec 2012 14:39:40 +0100
++
++samba4 (4.0.0~rc5+dfsg1-1) experimental; urgency=low
++
++ * New upstream release.
++ * Add autopkgtest header. Closes: #692671
++ * Use Multi-Arch for winbind4.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 08 Nov 2012 15:13:43 +0100
++
++samba4 (4.0.0~rc4+dfsg1-1) experimental; urgency=low
++
++ * New upstream release.
++ + Bump minimum ldb version to 1.1.13.
++ * Switch to Git as VCS.
++ * Remove DM-Upload-Allowed field.
++ * Depend on heimdal-multidev rather than heimdal-dev.
++ + Add 11_system_heimdal to support building with system heimdal.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 28 Oct 2012 16:21:43 +0100
++
++samba4 (4.0.0~rc3+dfsg1-1) experimental; urgency=low
++
++ * New upstream release.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 16 Oct 2012 14:53:19 +0200
++
++samba4 (4.0.0~rc2+dfsg1-2) experimental; urgency=low
++
++ * Depend on at least ldb 1.1.12. Closes: #689594
++ * Suggest ntp daemon for ntpsignd integration.
++ * Support specifying 'none' as server role to disable provision.
++ Closes: #690138
++ * Prompt user for administrator password. Closes: #690139
++ * Bump debconf level of server role to 'high'.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 04 Oct 2012 13:22:40 +0200
++
++samba4 (4.0.0~rc2+dfsg1-1) experimental; urgency=low
++
++ * New upstream release.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 25 Sep 2012 03:34:08 +0200
++
++samba4 (4.0.0~beta2+dfsg1-3) unstable; urgency=low
++
++ * Fix setup when no domain is set. Closes: #681048
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 05 Aug 2012 16:52:02 +0200
++
++samba4 (4.0.0~beta2+dfsg1-2) unstable; urgency=low
++
++ * Use ntvfs while debian ships an old version of Samba 3. Closes: #679678
++ * Don't attempt to add shares to the configuration if it doesn't
++ exist. Closes: #681050
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 10 Jul 2012 11:52:44 +0200
++
++samba4 (4.0.0~beta2+dfsg1-1) unstable; urgency=low
++
++ * New upstream release.
++ * Update Slovak translation. Thanks Ivan Masár. Closes: #677906
++ * Add build dependency on libacl1-dev.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 18 Jun 2012 00:49:12 +0200
++
++samba4 (4.0.0~beta1+dfsg1-3) unstable; urgency=high
++
++ * Prevent adding share with invalid name when used in domain controller mode.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 17 Jun 2012 17:00:00 +0200
++
++samba4 (4.0.0~beta1+dfsg1-2) unstable; urgency=low
++
++ * Create leading directories in addshare script. Closes: #677643
++ * Use attr/attributes.h on GNU/kFreeBSD. Fixes finding of ATTR_ROOT.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 16 Jun 2012 01:42:10 +0200
++
++samba4 (4.0.0~beta1+dfsg1-1) unstable; urgency=medium
++
++ * New upstream release.
++ * Add 08_heimdal_config_h: Fixes compatibility with newer versions of
++ Heimdal. Closes: #674918
++ * Use standard spelling of domain controller in debconf templates.
++ Closes: #670413
++ * Switch to debhelper 9.
++ * samba4-clients: Drop conflicts with smbclient; upstream has renamed
++ the Samba4-specific smbclient and nmblookup binaries.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 30 May 2012 18:42:06 +0200
++
++samba4 (4.0.0~alpha20+dfsg1-1) unstable; urgency=medium
++
++ * New upstream release.
++ + No longer installs libkdc-policy.so. LP: #887537
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 01 May 2012 15:02:19 +0200
++
++samba4 (4.0.0~alpha19+dfsg1-7) unstable; urgency=low
++
++ * Only update smb.conf if it exists. Closes: #670560
++ * Automatically add shares required for active directory controllers if they
++ don't exist. Closes: #670558
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 26 Apr 2012 19:59:26 +0200
++
++samba4 (4.0.0~alpha19+dfsg1-6) unstable; urgency=low
++
++ * Rebuild against ldb 1.1.6.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 20 Apr 2012 12:47:15 +0200
++
++samba4 (4.0.0~alpha19+dfsg1-5) unstable; urgency=low
++
++ * Use dbcheck when upgrading from recent versions of Samba4, as it's
++ both more reliable and quicker than upgradeprovision.
++ * Move samba-dsdb-modules from Recommends to Depends, as LDAP server
++ support has been dropped. Closes: #669331
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 19 Apr 2012 17:33:33 +0200
++
++samba4 (4.0.0~alpha19+dfsg1-4) unstable; urgency=low
++
++ * Fix pattern matching line in setoption.py. Thanks Hleb Valoshka.
++ Closes: #669015
++ * setoption.py: Preserve mode on smb.conf file.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 16 Apr 2012 17:33:07 +0200
++
++samba4 (4.0.0~alpha19+dfsg1-3) unstable; urgency=low
++
++ * Convert setoption.pl to Python to avoid dependency on perl-modules.
++ Closes: #668800
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 15 Apr 2012 15:50:57 +0200
++
++samba4 (4.0.0~alpha19+dfsg1-2) unstable; urgency=low
++
++ * Correctly import server role and realm from existing smb.conf file.
++ LP: #936891 LP: #832465 Closes: #659775
++ * Force correct realm during upgradeprovision. LP: #728864
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 13 Apr 2012 16:47:37 +0200
++
++samba4 (4.0.0~alpha19+dfsg1-1) unstable; urgency=low
++
++ * New upstream release.
++ + Drop patches applied upstream: 06_upgradedns, 08_smb2_deps.
++ + Cope with missing sysvol folders during provision upgrade. LP: #930370
++ + Depend on tdb 1.2.10.
++ + Depend on ldb 1.1.5.
++ + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
++ beyond of allocated array.
++ * Fix replaces: samba-common field in samba4-common-bin.
++ * Update Catalan debconf translation. Thanks, Jordi Mallach.
++ Closes: #663737
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 11 Apr 2012 16:58:39 +0200
++
++samba4 (4.0.0~alpha18.dfsg1-4) unstable; urgency=low
++
++ * Add patch 08_smb2_deps: Remove (unnecessary) dependencies on various
++ private Samba 3 libraries, for which proper package Depends: lines were
++ missing. Closes: #665295
++ * Add dependency on tdb-tools. This will be removed once upstream
++ removes the use of tdbbackup in provision. Closes: #664658
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 28 Mar 2012 16:20:21 +0200
++
++samba4 (4.0.0~alpha18.dfsg1-3) unstable; urgency=low
++
++ * Fix compatibility with newer versions of Heimdal. Fixes FTBFS.
++ Closes: #664820
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 21 Mar 2012 14:11:29 +0100
++
++samba4 (4.0.0~alpha18.dfsg1-2) unstable; urgency=low
++
++ * Add Replaces: python-samba to libsmbclient-raw0 as some
++ private libraries have moved. Thanks Axel Beckert. Closes: #663641
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 13 Mar 2012 16:39:12 +0100
++
++samba4 (4.0.0~alpha18.dfsg1-1) unstable; urgency=low
++
++ [ Jelmer Vernooij ]
++ * New upstream release.
++ + Depend on newer versions of ldb.
++ + Depend on tevent >= 0.9.15.
++ + Sanitizes NetBIOS names. LP: #938592
++ + Re-adds support for 'security = domain' parsing. LP: #916556
++ * Fix typo in recommendations of samba4: samba4-dsdb-modules ->
++ samba-dsdb-modules.
++ * Recommend attr package for Samba4.
++ * Create util.h -> samba_util.h symlink for backwards compatibility.
++ * Add dependency on libbsd-dev, used for strlcat and strlcpy.
++ * Extracts waf source code. Closes: #654500
++
++ [ Debconf translations ]
++ * Russian (Yuri Kozlov). Closes: #651583
++ * Portuguese (Miguel Figueiredo). Closes: #653557
++ * German (Holger Wansing). Closes: #653714
++ * Norwegian Bokmål (Bjørn Steensrud). Closes: #654284
++ * Spanish (Javier Fernández-Sanguino). Closes: #656403
++ * Danish (Joe Hansen). Closes: #656785
++ * Dutch (Jeroen Schot). Closes: #657469
++ * Hebrew (Omer Zak).
++ * Polish (Michał Kułach). Closes: #659570
++ * Czech (Miroslav Kure). Closes: #659573
++ * Turkish (İsmail BAYDAN). Closes: #659575
++ * Japanese (Kenshi Muto). Closes: #659978
++ * Esperanto (Felipe Castro)
++
++ [ Jelmer Vernooij ]
++ * Rename upgradedns to less generic samba_upgradedns.
++ * Bump standards version to 3.9.3 (no changes).
++ * Use DEP-5 for copyright file.
++ * Indonesian (Mahyuddin Susanto). Closes: #660031
++ * Italian (Luca Monducci). Closes: #660150
++ * Use samba-tool to retrieve configuration options from debconf.
++ LP: #936891, Closes: #659775
++ * Add really basic autopkgtest test.
++ * Fix bundled libraries for samba.samba3 python module. LP: #889869
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 12 Mar 2012 19:01:00 +0100
++
++samba4 (4.0.0~alpha17.dfsg2-1) unstable; urgency=low
++
++ * Remove more non-free IETF files. Closes: #547280
++ * Rebuild for newer version of ldb.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 03 Dec 2011 01:41:49 +0100
++
++samba4 (4.0.0~alpha17.dfsg1-3) unstable; urgency=low
++
++ * Install libmemcache.so, libutil_str.so and various other private libraries
++ required by the samba3 module in python-samba. LP: #889864, LP: #889869
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 13 Nov 2011 17:03:29 +0100
++
++samba4 (4.0.0~alpha17.dfsg1-2) unstable; urgency=low
++
++ * Include upstart file to eliminate delta with Ubuntu.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 11 Nov 2011 16:13:58 +0100
++
++samba4 (4.0.0~alpha17.dfsg1-1) unstable; urgency=low
++
++ * Strip non-free IETF RFC files. Closes: #547280
++ * Rebuild against newer ldb. Closes: #648326
++ * Updated Swedish debconf translation. Thanks Martin Bagge.
++ Closes: #644942
++ * Updated French debconf translation. Thanks Christian Perrier.
++ Closes: #644465
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 11 Nov 2011 03:16:37 +0100
++
++samba4 (4.0.0~alpha17-3) unstable; urgency=low
++
++ * Upload to unstable. Closes: #642905
++ * Use default python version rather than 2.7.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 27 Sep 2011 00:11:31 +0200
++
++samba4 (4.0.0~alpha17-2) experimental; urgency=low
++
++ * In -dev package dependencies, depend on a specific version of other
++ Samba dev packages.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 24 Sep 2011 23:10:30 +0200
++
++samba4 (4.0.0~alpha17-1) experimental; urgency=low
++
++ * New upstream release.
++ * Add libsmbclient-{raw0,dev} packages, required for winexe.
++ * Add libsamba-credentials0 and libsamba-credentials-dev packages for
++ new public library for credentials management.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 18 Sep 2011 15:14:42 +0200
++
++samba4 (4.0.0~alpha17~git20110807.dfsg1-1) experimental; urgency=low
++
++ * New upstream snapshot.
++ * Depend on newer version of ldb. Closes: #636961
++ * Update Indonesian Debconf translation. Thanks Mahyuddin Susanto.
++ Closes: #608552
++ * Preserve server role set in smb.conf. LP: #815586
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 07 Aug 2011 23:37:37 +0200
++
++samba4 (4.0.0~alpha17~git20110801.dfsg1-1) experimental; urgency=low
++
++ * Improve outdated package descriptions. Closes: #486370
++ * New upstream release.
++ * Bump standards version to 3.9.2 (no changes).
++ * Add new libsamdb-dev package, required by openchange which relies on the
++ samdb.pc file.
++ + No header files are shipped yet, but an upstream fix is pending.
++ * Recommend bind9utils in samba4 package.
++ * Remove complex dependency loop between library packages. Closes: #598842
++ + Disable currently unfinished ldb share module.
++ + Split dcerpc server libraries out into libdcerpc-server{0,-dev} to
++ cut dependency loop.
++ + New samba-dsdb-modules package with all DSDB related LDB modules.
++ * Move libwinbind-client library to libgensec0. Closes: #623327
++ * Add support for multi-arch.
++ * Switch to new style debhelper.
++ * Fix symbolic link for ldb modules. Closes: #632974
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 31 Jul 2011 20:16:03 +0200
++
++samba4 (4.0.0~alpha15.dfsg1-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 22 Apr 2011 02:57:04 +0200
++
++samba4 (4.0.0~alpha15~git20110410.dfsg1-1) experimental; urgency=low
++
++ * New upstream snapshot.
++ + Drop patch now applied upstream: 02_backupkey_private.diff
++ * Switch to dh_python2. Closes: #617059
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 05 Mar 2011 14:44:25 +0100
++
++samba4 (4.0.0~alpha15~git20110224.dfsg1-2) experimental; urgency=low
++
++ * Depend on newer version of Heimdal which exposes more hx509 symbols.
++ Fixes FTBFS.
++ * Tighten libldb1 dependency for LDB modules.
++ * Depend on newer version of pyldb. Closes: #615631
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 28 Feb 2011 03:52:35 +0100
++
++samba4 (4.0.0~alpha15~git20110224.dfsg1-1) experimental; urgency=low
++
++ * New upstream release.
++ + Avoids unnecessary setlocale call to "C". LP: #519025, #519025
++ * Fix dependency on newer version of ldb. Closes: #614466
++ * Add missing dependency on python-samba, required for testparm. LP: #641082
++ * Use libwbclient. LP: #714344, Closes: #611214
++ * Make sure /var/run/samba exists. LP: #646037
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 23 Feb 2011 00:35:59 +0100
++
++samba4 (4.0.0~alpha15~git20110124.dfsg1-2) experimental; urgency=low
++
++ * Build-depend on newer version of heimdal-multidev with fixed kdc.h.
++ * Build-depend on versioned libkdc2-heimdal which includes kdc_log. Closes: #611112
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 25 Jan 2011 09:22:16 -0800
++
++samba4 (4.0.0~alpha15~git20110124.dfsg1-1) experimental; urgency=low
++
++ * New upstream snapshot.
++ + Removes unresolved symbols from libraries.
++ Closes: #596690, #599075, #602855. LP: #658116, #592882, #646042
++ * Add dependency on comerr-dev.
++ * Update Spanish Debconf translation. Thanks Ricardo Fraile. Closes: #596075
++ * Update Danish debconf translation. Thanks Joe Dalton. Closes:
++ #598779
++ * Re-remove non-free IETF RFCs, add test to prevent future regression.
++ Closes: #547280
++ * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
++ * Upgrade provision data between releases. Closes: #600117
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 15 Oct 2010 01:32:48 +0200
++
++samba4 (4.0.0~alpha14~bzr13684.dfsg1-1) unstable; urgency=low
++
++ * New upstream snapshot.
++ + Depend on libsubunit-dev.
++ * Support talloc 2.0.1.
++ * Update dependency for ldb to be >= 0.9.14. Closes: #596745
++ * Support parallel builds.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 28 Sep 2010 09:46:54 +0200
++
++samba4 (4.0.0~alpha13+git+bzr12785.dfsg1-1) experimental; urgency=low
++
++ * Install provision scripts to /usr/share/samba/setup.
++ * Move nsstest from samba4 to winbind4.
++ * Support building against tdb 1.2.1.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Fri, 10 Sep 2010 17:45:20 +0200
++
++samba4 (4.0.0~alpha13+git+bzr12687.dfsg1-1) experimental; urgency=low
++
++ * New upstream snapshot.
++ * Mark as compatible with older versions of tdb (>= 1.2.2).
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 08 Sep 2010 03:30:03 +0200
++
++samba4 (4.0.0~alpha13+git+bzr12670.dfsg1-1) experimental; urgency=low
++
++ * Add missing dependency on pkg-config.
++ * Require subunit >= 0.0.6, older versions have a broken tap2subunit.
++ * Debconf translations:
++ - Swedish (Martin Bagge). Closes: #586819
++ * New upstream snapshot.
++ - Fixes symbols for LDB modules. Closes: #594763, #594771, #594773.
++ * Require tdb 1.2.3. Closes: #595644
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 05 Sep 2010 17:34:46 +0200
++
++samba4 (4.0.0~alpha13+git+bzr12292.dfsg1-1) experimental; urgency=low
++
++ * New upstream snapshot.
++ + Fixes provision to be able to find the data path again.
++ * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
++ * Suggest swat2.
++ * Migrate to Bazaar.
++ * Bump standards version to 3.9.1 (no changes).
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 22 Aug 2010 02:38:51 +0200
++
++samba4 (4.0.0~alpha13+git20100618.dfsg1-1) experimental; urgency=low
++
++ [ Jelmer Vernooij ]
++ * New upstream snapshot. Closes: #578009, #577880
++ + Add dependency on python-dnspython.
++ + Removes last Python string exception. Closes: #585327
++ + Installs all display specifiers. Closes: #548911
++
++ [ Christian Perrier ]
++ * Debconf translations:
++ - Swedish (Martin Bagge). Closes: #552734
++ - Russian (Yuri Kozlov). Closes: #563346
++ - Spanish (Omar Campagne). Closes: #579099
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sun, 28 Feb 2010 02:33:37 +0100
++
++samba4 (4.0.0~alpha8+git20100227.dfsg1-1) experimental; urgency=low
++
++ * Fix sections of libndr-standard0 and libndr0.
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 22 Feb 2010 11:19:07 +0100
++
++samba4 (4.0.0~alpha8+git20100222.dfsg1-1) experimental; urgency=low
++
++ [ Christian Perrier ]
++ * Change "Provides:" in init script to avoid conflicting Provides
++ with samba. Closes: #547209
++ * Swedish debconf translation (Martin Bagge). Closes: #552734
++
++ [ Jelmer Vernooij ]
++ * Depend on specific version of libldb. Closes: #562389
++ * Build against system Heimdal and remove the copy of Heimdal from the
++ Samba 4 source tree, since it contains non-free IETF RFC/I-D.
++ Closes: #547280
++ * Bump standards version to 3.8.4.
++ * Switch to dpkg-source 3.0 (quilt) format
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 03 Feb 2010 15:17:20 +0100
++
++samba4 (4.0.0~alpha8+git20090912-1) unstable; urgency=low
++
++ * Upload to unstable.
++ * Fix nmblookup.1.gz filename for alternatives.
++ * New upstream snapshot.
++ + Add new binary packages libndr-standard0 and libndr-standard-dev.
++ * Bump standards version to 3.8.3.
++ * Remove unused patch system.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 12 Sep 2009 13:28:33 +0200
++
++samba4 (4.0.0~alpha8+git20090718-1) experimental; urgency=low
++
++ * New upstream snapshot.
++ * The server package now suggests a version of bind9 that supports
++ update-policy.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 18 Jul 2009 17:34:30 +0200
++
++samba4 (4.0.0~alpha8~git20090620-1) experimental; urgency=low
++
++ * Support building against Python2.6.
++ * Add missing dependency on tdb >= 1.1.3. (Closes: #517171)
++ * Add missing dependencies on tdb-dev and libtalloc-dev to
++ libldb-samba4-dev. (Closes: #525885)
++ * Use newer version of tevent. (Closes: #531480, #533457, #533455)
++ * New upstream snapshot.
++ * Bump standards version to 3.8.2.
++ * Reorganization to let Samba 3 and Samba 4 co-exist on the same system:
++ + Depend on samba-common for smb.conf, /etc/samba/gdbcommands,
++ /usr/share/samba/{panic-action,*.dat}.
++ + Rename samba4-common to samba4-common-bin.
++ * samba4-testsuite now recommends subunit, since it can output subunit
++ streams.
++ * Document license for Active Directory schemas.
++ * Fix init script to run samba rather than smbd. (Closes: #522646)
++ * Removed libldb-samba4-{dev,0}, now using libldb{-dev,0} since there
++ are no longer any differences.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Thu, 18 Jun 2009 00:19:44 +0200
++
++samba4 (4.0.0~alpha7~20090225-1) experimental; urgency=low
++
++ * Build-depend on pkg-config, as we no longer seem to pull that in
++ through any other dependencies. (Closes: #516882)
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 25 Feb 2009 04:04:36 +0100
++
++samba4 (4.0.0~alpha7~20090223-1) experimental; urgency=low
++
++ * Add build dependency on libpopt-dev, so the system libpopt is always used
++ rather than the one included by Samba.
++ * Use the alternatives system for the smbstatus, nmblookup, net and testparm
++ binaries as well as various data files.
++ * Make the samba4 and samba4-testsuite packages conflict with
++ samba-tools. (Closes: #506236)
++ * Build against external libtevent.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Sat, 21 Feb 2009 17:46:41 +0100
++
++samba4 (4.0.0~alpha6-1) experimental; urgency=low
++
++ * New upstream release.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Tue, 20 Jan 2009 02:59:15 +0100
++
++samba4 (4.0.0~alpha5+20090105-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 05 Jan 2009 21:08:53 +0100
++
++samba4 (4.0.0~alpha5+20081126-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Wed, 26 Nov 2008 03:48:41 +0100
++
++samba4 (4.0.0~alpha5+20081101-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Sat, 01 Nov 2008 14:40:09 +0100
++
++samba4 (4.0.0~alpha5+20081031-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Fri, 31 Oct 2008 00:10:41 +0100
++
++samba4 (4.0.0~alpha5+20081014-1) experimental; urgency=low
++
++ * Fix typo in description. (Closes: 500811)
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Thu, 09 Oct 2008 18:41:59 +0200
++
++samba4 (4.0.0~alpha5+20080930-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Tue, 30 Sep 2008 16:19:22 +0200
++
++samba4 (4.0.0~alpha5+20080825-1) experimental; urgency=low
++
++ * Add watch file.
++ * Use policy-compliant sysconfdir and localstatedir. (Closes: #495944)
++
++ -- Jelmer Vernooij <jelmer@samba.org> Mon, 25 Aug 2008 17:42:44 +0200
++
++samba4 (4.0.0~alpha4~20080727-1) experimental; urgency=low
++
++ [ Steve Langasek ]
++ * Add missing dependency on libparse-yapp-perl to libparse-pidl-perl.
++
++ [ Jelmer Vernooij ]
++ * Make samba4-common conflict with samba-common. (Closes: #492088)
++ * New Slovak translation. (Closes: #487889)
++ * New Thai translation from Theppitak Karoonboonyanan. (Closes: #486614)
++ * New Vietnamese translation from Clytie Siddall. (Closes: #486618)
++ * New Bulgarian translation from Damyan Ivanov. (Closes: #486626)
++ * New Japanese translation from Kenshi Muto. (Closes: #486648)
++ * New Galician translation from Jacobo Tarrio. (Closes: #486701)
++ * New Turkish translation from Mehmet TURKER. (Closes: #487244)
++ * New Czech translation from Miroslav Kure. (Closes: #487265)
++ * New Arabic translation from Ossama Khayat. (Closes: #487322)
++ * New German translation from Holger Wansing. (Closes: #487542)
++ * New Italian translation from Luca Monducci. (Closes: #487720)
++ * New Portugese translation from the Portuguese Translation Team.
++ (Closes: #487753)
++ * New Korean translation from Sunjae Park. (Closes: #487894)
++ * New Lithuanian translation from Gintautas Miliauskas. (Closes: #487895)
++ * New Romanian translation from Eddy Petrișor. (Closes: #488874)
++
++ -- Jelmer Vernooij <jelmer@samba.org> Sun, 27 Jul 2008 15:38:41 +0200
++
++samba4 (4.0.0~alpha4~20080617-1) experimental; urgency=low
++
++ * Fixed maintainer email address.
++ * New upstream snapshot.
++ * Remove dependency on unpackaged libevents in ldb pkg-config file.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Mon, 16 Jun 2008 21:29:43 +0200
++
++samba4 (4.0.0~alpha4~20080616-1) experimental; urgency=low
++
++ * Fix dependency of libsamba-hostconfig-dev on libsamba-hostconfig0.
++ * Fix dependency of libldb-samba4-dev on libldb-samba4-0.
++ * Remove tdb binaries as they're already packaged elsewhere.
++ (Closes: #485619, #486270)
++ * New upstream snapshot.
++ * New French translation from Christian Perrier. (Closes: #486072)
++
++ -- Jelmer Vernooij <jelmer@samba.org> Sat, 14 Jun 2008 20:39:13 +0200
++
++samba4 (4.0.0~alpha4~20080522-1) experimental; urgency=low
++
++ * New upstream snapshot. (Closes: #478328)
++
++ -- Jelmer Vernooij <jelmer@samba.org> Thu, 22 May 2008 02:25:05 +0200
++
++samba4 (4.0.0~alpha4~20080403-1) experimental; urgency=low
++
++ * Rename source package to samba4.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Mon, 28 Jan 2008 17:23:58 +0100
++
++samba (4.0.0~alpha3~20080120-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Sat, 19 Jan 2008 22:34:08 +0100
++
++samba (4.0.0~alpha2~svn26294-1) experimental; urgency=low
++
++ * New upstream snapshot.
++ * Set Vcs-Svn field.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Sat, 19 Jan 2008 22:32:28 +0100
++
++samba (4.0.0~~tp5-1) experimental; urgency=low
++
++ * New upstream release.
++ * Set homepage field.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Sun, 25 Nov 2007 16:28:02 +0000
++
++samba (4.0.0~~svn22819-1) experimental; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Wed, 09 May 2007 15:28:50 +0200
++
++samba (4.0.0~~svn19515-1) experimental; urgency=low
++
++ * New upstream versions (svn snapshots of r19515).
++
++ -- Jelmer Vernooij <jelmer@samba.org> Mon, 30 Oct 2006 16:45:36 +0100
++
++samba (3.9.1+4.0.0tp2-1) experimental; urgency=low
++
++ * New upstream version (tech preview 2).
++
++ [ Jelmer Vernooij ]
++ * Remove setntacl utility (it doesn't do anything).
++ * Include oLschema2ldif.1 in the ldb-tools package.
++ * Enable shared library building.
++ * Put ldb, tdb, gtksamba, talloc and gensec libraries into seperate binary packages.
++ * Pass fewer options for paths to configure
++ * Adapt to new paths from upstream
++
++ -- Jelmer Vernooij <jelmer@samba.org> Thu, 23 Mar 2006 01:13:32 +0100
++
++samba (3.9.1+4.0.0tp1-1) experimental; urgency=low
++
++ * New upstream version (tech preview 1).
++
++ [ Steinar H. Gunderson ]
++ * Forward-port panic-action script from the Samba 3 packaging.
++ * Patch the smb.conf provisioning template (only used by swat in the
++ Debian packaging) to use the panic-action script by default.
++ * Patch the samba-common postinst to generate smb.conf files with the
++ same setting.
++ * Include ntlm_auth.1 and smbd.8 man pages in the samba package.
++ * Make the samba dependency on samba-common versioned.
++ * Install /usr/bin/setntacl manually; the upstream install target doesn't
++ seem to do it anymore.
++ * Ask for the realm (and give it to the upgrade script) when upgrading from
++ Samba 3; it can't be easily autodetected. (Note that upgrade still seems
++ to be broken for now.)
++
++ [ Jelmer Vernooij ]
++ * Remove gwsam utility.
++ * Include gwcrontab.1 and gepdump.1 man pages in the samba-gtk-frontends
++ package.
++ * Remove ldbtest utility from ldb-tools package.
++
++ -- Steinar H. Gunderson <sesse@debian.org> Tue, 24 Jan 2006 16:01:59 +0100
++
++samba4 (3.9.0-SVN-build-6710-1) unstable; urgency=low
++
++ * Newer upstream version
++
++ -- Jelmer Vernooij <jelmer@samba.org> Thu, 12 May 2005 14:04:05 +0200
++
++samba4 (3.9.0-SVN-build-655-1) unstable; urgency=low
++
++ * Initial release.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Thu, 13 May 2004 01:38:41 +0200
++
++samba (3.9.0+SVN12946-1) experimental; urgency=low
++
++ * New upstream version.
++ * Fix upgrades from Samba 3 giving too few parameters to provision().
++ (Closes: #348079)
++ * Add sections to binary packages to match the archive:
++ * libparse-pidl-perl: perl
++ * samba-dev: devel
++ * samba-gtk-frontends: x11
++ * Adjust our export procedure we get the Subversion revision number in
++ include/version.h (and thus in the build itself), and document how in
++ README.building.
++ * Remove "reload" option from the init script, since Samba 4 doesn't
++ understand SIGHUP yet.
++
++ -- Steinar H. Gunderson <sesse@debian.org> Sun, 15 Jan 2006 13:43:43 +0100
++
++samba (3.9.0+SVN12856-1) experimental; urgency=low
++
++ * New upstream version.
++ * Move testparm from samba into samba-common.
++ * Make samba-common Architecture: any.
++ * Make samba-common replace/conflict samba (<= 3.9.0+SVN12739-1).
++ * Make samba-clients depend on samba-common.
++ * Make samba-common depend on debconf.
++ * Replace debconf dependencies with ${misc:Depends}, to automatically
++ get the debconf-2.0 alternative right.
++ * Include the newuser binary in samba-server package.
++ * Add missing Build-Depends on: libgnutls-dev, libreadline5-dev,
++ libpam0g-dev. All were causing silent build failures (ie. the package
++ was simply built without the features).
++ * Remove Build-Depends on libldap-dev.
++ * Include NEWS file.
++
++ -- Steinar H. Gunderson <sesse@debian.org> Wed, 11 Jan 2006 22:08:32 +0100
++
++samba (3.9.0+SVN12739-1) experimental; urgency=low
++
++ * Move /usr/lib/samba/setup from samba-common to samba.
++ * Make samba replace samba-common (<= 3.9.0+SVN12726-1)
++ * Add a missing db_stop in samba.postinst, probably causing problems
++ starting the daemon in some cases.
++ * Add orphan files from /usr/bin (and relevant manpages) into their
++ correct packages:
++ * ldb-tools: ldbrename, ldbtest, oLschema2ldif.
++ * samba: ntlm_auth.
++ * samba-clients: getntacl.
++ * samba-gtk-frontends: gwcrontab.
++ * winregistry-tools: winreg.
++ * samba3dump and tdbtorture remain orphans.
++ * Add new executable /usr/bin/testparm to samba package.
++ * Add /var/lib/samba directory to samba package; it's needed by
++ testparm.
++ * Rewrite configuration/bootstrapping to be able to install the client
++ only and still get a usable smb.conf. The basic idea is:
++ * samba-common looks for an smb.conf. If there is none, it asks for
++ realm and domain and generates a skeleton smb.conf.
++ * If samba notices an upgrade from Samba 3, it asks whether the user
++ wants to upgrade. If not, it leaves everything alone (and broken).
++ * Otherwise, samba asks whether the user wants to set up a PDC. If yes,
++ it adds "server role = pdc" to smb.conf and provisions the server.
++ * Removed unused file samba.conffiles.
++ * Run dh_installdebconf on architecture-independent packages as well, now
++ that samba-common has a config script.
++ * Let samba-clients conflict/replace samba-common (<< 3.9.0), as they share
++ /usr/bin/net.
++
++ -- Steinar H. Gunderson <sesse@debian.org> Fri, 6 Jan 2006 14:25:50 +0100
++
++samba (3.9.0+SVN12726-1) experimental; urgency=low
++
++ * First upload to Debian main.
++
++ * Package renaming to get more in line with Samba 3 packaging:
++ * Rename samba-server package to just samba, for consistency with the
++ Samba 3 packaging.
++ * Rename samba.samba.init to samba.init, now that the init script and the
++ server package are called the same.
++ * Rename samba-swat to swat, and add a dependency from swat to samba.
++
++ * debian/rules changes:
++ * Change SOURCEPATH to reflect that we now have the packaging in debian/,
++ not packaging/debian/. This will have to be reverted whenever upstream
++ syncs with us.
++ * Removed debmake comment, it's hardly relevant any more.
++ * Removed comment that there aren't any architecture-independent packages
++ (because there are).
++ * Remove redundant "package=samba" variable.
++ * Do "make pch ; make all" instead of "make proto ; -make pch ; make all";
++ some build system bug prevents us from just doing "make pch all", but
++ since we're more or less guaranteed a recent gcc version, the pch target
++ shouldn't fail, so we won't allow it to.
++ * Remove autogen.sh call from configure; it should be done in the
++ upstream tarball, not in maintainer scripts.
++
++ * debian/control changes:
++ * Copied Uploaders: line from Samba 3 packaging, adding myself.
++ * Rename samba-client package to samba-clients.
++ * Make samba-clients Replaces/Conflicts smbclient.
++ * Build-depend on docbook-xml, not just docbook-xsl -- the documentation
++ needs data from both to build.
++ * Move the samba binary package to the top, so it's the one receiving
++ the README.* files, among others.
++
++ * Maintainer script changes:
++ * Attempt to upgrade from Samba 3 if that's what the user tries to do.
++ * Copy upgrade script into /usr/lib/samba/setup.
++ * Check for upgrade from << 3.9.0 in config, and ask the user for upgrade
++ if relevant.
++ * Check for upgrade from << 3.9.0 in postinst, and upgrade if the user
++ wished to.
++ * Only provision in samba.postinst if we're doing a fresh install.
++ * Support purging properly in postrm, both for samba and samba-common
++ (adapted from the Samba 3 packaging).
++ * Don't ask about an administrator password -- just let the provisioning
++ scripts make up a random one.
++ * Updated README.Debian to show the user how to change the password.
++ * Make samba recommend ldb-tools.
++ * Install README.building along with all the other documentation.
++ * Don't try to ask about the "done" question, which we nuked in a previous
++ release.
++
++ * Updated debian/copyright.
++ * Added Samba copyright holders.
++ * Noted that talloc, ldb and tdb are under the LGPL.
++ * Added copyright holders and licensing for the packaging itself.
++
++ * Remove a few unused files in the packaging.
++ * Change debhelper compatibility level to 5.
++ * Update versioned depends accordingly.
++ * Don't give --pidfile to start-stop-daemon when stopping -- current
++ versions of Samba 4 won't die when the parent is killed.
++ * Updated README.debian somewhat, and renamed to use a capital D.
++ * Rewritten README.building, to reflect the magic that has to be done
++ with the package in another repository.
++ * Update po/POTFILES.in to reflect name change (from samba4-server ->
++ samba-server -> samba).
++
++ -- Steinar H. Gunderson <sesse@debian.org> Thu, 5 Jan 2006 21:27:13 +0100
++
++samba (3.9.0+SVN12395-1) unstable; urgency=low
++
++ * New snapshot, drop 4 suffix
++
++ -- Jelmer Vernooij <jelmer@samba.org> Tue, 20 Dec 2005 13:38:26 +0100
++
++samba4 (3.9.0+SVN12312-1) unstable; urgency=low
++
++ * New upstream snapshot.
++
++ -- Jelmer Vernooij <jelmer@samba.org> Mon, 27 Jun 2005 11:25:57 +0200
++
++samba (2:3.6.19-1) unstable; urgency=low
++
++ * Team upload.
++ * New upstream release
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Wed, 25 Sep 2013 20:01:48 +0200
++
++samba (2:3.6.18-1) unstable; urgency=low
++
++ * Team upload.
++
++ [ Steve Langasek ]
++ * Split the samba init script into nmbd and smbd init scripts, for better
++ alignment with how init systems other than sysvinit work. This also
++ drops the override of the arguments to update-rc.d in debian/rules,
++ no longer needed in the post-insserv world.
++ * Add upstart jobs from Ubuntu for smbd, nmbd, and winbind.
++
++ [ Ivo De Decker ]
++ * New upstream release
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Tue, 20 Aug 2013 22:06:45 +0200
++
++samba (2:3.6.17-1) unstable; urgency=high
++
++ * Team upload.
++ * New upstream security release. Closes: #718781
++ Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 05 Aug 2013 13:46:23 +0200
++
++samba (2:3.6.16-2) unstable; urgency=high
++
++ * Team upload.
++ * Make build-dep on libtevent-dev explicit.
++ * Fix waf-as-source.patch to make sure unpacking works in recent build
++ environment. Closes: #716932
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Tue, 16 Jul 2013 22:01:04 +0200
++
++samba (2:3.6.16-1) unstable; urgency=low
++
++ * Team upload.
++
++ [ Steve Langasek ]
++ * Drop support for running smbd from inetd; this is not well-supported
++ upstream, and can't correctly handle all of the long-running services
++ that are needed as part of modern samba. Closes: #707622.
++
++ [ Ivo De Decker ]
++ * New upstream release
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Wed, 19 Jun 2013 21:05:07 +0200
++
++samba (2:3.6.15-1) unstable; urgency=high
++
++ * Team upload.
++ * New upstream bugfix release. Closes: #707042
++ * Update VCS URL's for new git repo.
++ * The recommends for the separate libnss-winbind and libpam-winbind
++ packages needed for the upgrade of winbind from squeeze to wheezy are no
++ longer needed. Lowering them to suggests.
++ Closes: #706434, #674853
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Thu, 09 May 2013 11:55:03 +0200
++
++samba (2:3.6.14-1) unstable; urgency=low
++
++ * Team upload.
++ * New upstream release
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sat, 04 May 2013 22:02:15 +0200
++
++samba (2:3.6.13-2) experimental; urgency=low
++
++ * Team upload.
++ * Move binary files out of /etc/samba to /var/lib/samba,
++ where they belong according to the FHS:
++ - schannel_store.tdb
++ - idmap2.tdb
++ - MACHINE.sid
++ Closes: #454770
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 21 Apr 2013 12:54:03 +0200
++
++samba (2:3.6.13-1) experimental; urgency=low
++
++ * Team upload.
++ * New upstream release
++ * samba: Suggests winbind. Closes: #689857
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Mon, 18 Mar 2013 21:29:58 +0100
++
++samba (2:3.6.12-1) experimental; urgency=low
++
++ * Team upload.
++ * Security update, fixing the following issues:
++ - CVE-2013-0213: Clickjacking issue in SWAT
++ - CVE-2013-0214: Potential XSRF in SWAT
++ * New upstream release
++ * Install pkgconfig file in libsmbclient-dev. Closes: #700643
++
++ -- Ivo De Decker <ivo.dedecker@ugent.be> Sun, 17 Feb 2013 22:25:34 +0100
++
++samba (2:3.6.10-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 15 Dec 2012 08:03:03 +0100
++
++samba (2:3.6.9-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 01 Nov 2012 08:17:29 +0100
++
++samba (2:3.6.8-1) experimental; urgency=low
++
++ * New upstream release.
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 18 Sep 2012 07:13:41 +0200
++
++samba (2:3.6.7-1) experimental; urgency=low
++
++ * New upstream release.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 11 Aug 2012 21:37:38 +0200
++
++samba (2:3.6.6-3) unstable; urgency=low
++
++ [ Ansgar Burchardt ]
++ * debian/rules: Use xz compression for binary packages.
++ Closes: #683899
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 05 Aug 2012 12:19:12 +0200
++
++samba (2:3.6.6-2) unstable; urgency=low
++
++ * Restore the DHCP hook.
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 27 Jun 2012 09:31:15 -0700
++
++samba (2:3.6.6-1) unstable; urgency=low
++
++ [ Ivo De Decker ]
++ * Only enable swat in inetd.conf on first install. Closes: #658245
++ * Minor lintian fixes.
++ * Remove DHCP hook. Closes: #652942, #629406, #649100
++ * Don't reload smbd when running from inetd. Closes: #678741
++ * Don't start smbd when guest account doesn't exist. Closes: #653382
++ * Only export public symbols in libsmbclient and libwbclient.
++
++ [ Christian Perrier ]
++ * New upstream version
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 27 Jun 2012 06:03:17 +0200
++
++samba (2:3.6.5-7) unstable; urgency=low
++
++ * Allow installing smbclient package together with newer versions of
++ samba4-clients, which no longer ship the smbclient and nmblookup
++ binaries.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Mon, 11 Jun 2012 13:19:24 +0200
++
++samba (2:3.6.5-6) unstable; urgency=high
++
++ [ Ivo De Decker ]
++ * Update symbols file for linux-only symbols in libsmbclient. This should
++ fix the FTBFS on kfreebsd and hurd. Closes: #676170
++ * Enable ctdb for non-linux archs.
++ * Remove old if-up script during upgrade.
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 06 Jun 2012 19:10:02 +0200
++
++samba (2:3.6.5-5) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Make libpam-winbind depend on libnss-winbind.
++
++ [ Ivo De Decker ]
++ * Update symbols file for libsmbclient and libwbclient0
++ * Add lintian overrides for examples in samba-doc
++ * libpam-winbind: change Depends on libnss-winbind to Recommends
++ * libnss-winbind: Suggests libpam-winbind
++ * Update package description for winbind, libpam-winbind and libnss-winbind
++ to better reflect their content
++ * Backport vfs_shadow_copy2 from master, to allow shadow copy to work
++ without wide links
++
++ [ Luk Claes ]
++ * Ship wbclient.pc file in multiarch safe directory (Closes: #674215).
++
++ [ Sam Morris ]
++ * Add libutil_drop_AI_ADDRCONFIG.patch that allows running nmbd when
++ no network interfaces have been assigned an address, therefore
++ removing the need for an if-up script. Closes: #640668,#640508
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 03 Jun 2012 20:00:56 +0200
++
++samba (2:3.6.5-3) unstable; urgency=low
++
++ [ Luk Claes ]
++ * Ship wbclient.pc so cifs-utils can be built again (Closes: #672733).
++ * Activate parallel building. Might need DEB_BUILD_OPTIONS as usual.
++
++ [ Christian Perrier ]
++ * Add Breaks and Replaces on libpam-winbind for newly created
++ libnss-winbind. Thanks to Colin Watson for pointing this and shame
++ on me for not properly checking the transition. Closes: #673122
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 17 May 2012 10:34:38 +0200
++
++samba (2:3.6.5-2) unstable; urgency=low
++
++ * The yearly "SambaXP bug cleaning party" release. 11 years
++ SambaXP, 20 years Samba and counting...
++ * Make samba-common "Multi-Arch: foreign"
++ * Adapt patch in upstream #7499 and stop nss_wins clobbering other
++ daemon's logfiles. Closes: #598313
++ * Add some mention about some use for the user information in Kerberos
++ environments in the smbspool manpage. Closes: #387266
++ * Drop link to no longer provided "Using Samba" documentation in
++ HTML documentation summary file. Closes: #604768
++ * Provide WHATSNEW.txt in samba-doc too as it is linked from the
++ documentation summary file. Do not compress that file.
++ * Fix link to WHATSNEW.txt in HTML documentation summary file. This
++ is the second part of the fix for #604768
++ * Use lp_state_dir() instead of get_dyn_STATEDIR() in
++ fhs-filespaths.patch as the latter does indeed hardcode the
++ location for passdb.tdb and secrets.tdb to /var/lib/samba
++ (the compile-time option for state directory and NOT the configurable
++ value). This is left to "state directory" instead of "private dir"
++ at least as of now, because if doesn't change anything to the
++ current behaviour, but allows the files' location to be configurable
++ through "state directory" (and not "private dir").
++ Closes: #249873
++ * Disable useless smbtorture4 build. Thanks to Ivo De Decker for the patch.
++ Closes: #670561
++ * Add upstream commit that adds waf source to the buildtools/
++ directory. As upstream will, one day or another, merge this, I
++ prefer this over removing the waf binary and repack upstream
++ tarball.
++ Closes: #654499
++ * Build-Conflict with python-ldb and python-ldb-dev to avoid build
++ failures when some versions of these packages are locally installed.
++ Closes: #657314
++ * Rename fix-samba.ldip-syntax.patch to fix-samba.ldif-syntax.patch
++ * Split NSS modules into a new libnss-winbind binary package.
++ Closes: #646292
++ * Add a NEWS.Debian entry about the libnss-winbind split and, while at
++ it, add an entry for libpam-winbind too (as it will affect upgrades
++ from squeeze).
++ * Drop code that was moving files around in samba.postinst and
++ winbind.postinst for pre-squeeze versions of the package.
++ * Drop code that was modifying a deprecated "passdb backend" setting
++ in smb.conf for pre-squeeze versions of the package (in
++ samba-common.config).
++ * Add Should-Start dependency to winbind init script to guarantee
++ that the samba init script is started before winbind if present.
++ Closes: #638066
++ * Provide a (basic) manpage to smbtorture(1). Closes: #528735
++ * Turkish debconf translation update (Atila KOÇ). Closes: #672447
++ * Drop the code that generates an smbpasswd file from the system's
++ user list. This adds very long delays on systems with many users,
++ including those with external user backends. It also makes much
++ less sense nowadays and the use of libpam-smbpass can easily
++ fill most of the needs. Closes: #671926
++ * Merged from Ubuntu:
++ - Set 'usershare allow guests', so that usershare admins are
++ allowed to create public shares in addition to authenticated
++ ones.
++ - add map to guest = Bad user, maps bad username to guest access.
++ This allows for anonymous user shares. Closes: #672497
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 12 May 2012 14:30:58 +0200
++
++samba (2:3.6.5-1) unstable; urgency=low
++
++ * New upstream release. Fixes CVE-2012-2111: Incorrect permission
++ checks when granting/removing privileges can compromise file
++ server security.
++ * Build-Depend on debhelper >= 9~ (which is in unstable for a few
++ months now)
++ * Use "set -e" in maintainer scripts instead of passing -e in the
++ shebang line
++ * Update Standards to 3.9.3 (checked, no change)
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 01 May 2012 08:07:39 +0200
++
++samba (2:3.6.4-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Two changes in the previous version should indeed read:
++ - samba.postinst: Avoid scary pdbedit warnings on first import.
++ - samba-common.postinst: Add more informative error message for the case
++ where smb.conf was manually deleted.
++ Closes: #664509
++
++ [ Jelmer Vernooij ]
++ * New upstream release.
++ + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
++ beyond of allocated array.
++
++ -- Jelmer Vernooij <jelmer@debian.org> Wed, 11 Apr 2012 23:25:41 +0200
++
++samba (2:3.6.3-2) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Fix example samba.ldif syntax. Closes: #659963
++ * Set minimal version of tdb ot 1.2.6 in Build-Depends
++ (thanks, backports!)
++ * Lower priority of debconf question to medium after some pondering.
++ After all, we have a sane default. Closes: #662801
++ * Merge some Ubuntu patches:
++ - samba.config: Avoid scary pdbedit warnings on first import.
++ - samba.postinst: Add more informative error message for the case
++ where smb.conf was manually deleted.
++
++ [ Maarten Bezemer ]
++ * Removed references to the testprns command from documentation
++ * Added notes that the smbsh command is not available in this package
++ Closes: #662243
++
++ [ Debconf translations ]
++ * Indonesian (Arief S Fitrianto). Closes: #660312
++ * Slovak (Ivan Masár). Closes: #661125
++
++ [ Steve Langasek ]
++ * Use Debian copyright-format 1.0 in debian/copyright.
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 12 Mar 2012 20:49:24 +0100
++
++samba (2:3.6.3-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release
++ * Fixes CVE-2012-0817:
++ The Samba File Serving daemon (smbd) in Samba versions
++ 3.6.0 to 3.6.2 is affected by a memory leak that can
++ cause a server denial of service.
++
++ [ Debconf translations ]
++ * Polish (Michał Kułach). Closes: #657770
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 31 Jan 2012 22:09:39 +0100
++
++samba (2:3.6.2-1) unstable; urgency=low
++
++ * New upstream release
++ * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream)
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 27 Jan 2012 21:38:52 +0100
++
++samba (2:3.6.1-3) unstable; urgency=low
++
++ [ Sam Hartman ]
++ * Increase libkrb5-dev dependency to avoid depending on
++ krb5_locate_kdc, Closes: #650541
++
++ [ Steve Langasek ]
++ * Fix the libpam-winbind description to more accurately identify the
++ protocols being used by nss_wins. Closes: #650091.
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 01 Dec 2011 21:56:52 +0100
++
++samba (2:3.6.1-2) unstable; urgency=low
++
++ * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch
++ * debian/patches/initialize_password_db-null-deref: Avoid null
++ dereference in initialize_password_db(). Closes LP: #829221.
++ * Mark samba-common Multi-Arch: foreign.
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 27 Nov 2011 19:06:39 +0100
++
++samba (2:3.6.1-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 22 Oct 2011 10:56:17 +0200
++
++samba (2:3.6.0-1) experimental; urgency=low
++
++ * New upstream release
++ * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1
++ and 3.5.11~dfsg-1
++ * Drop wbc_async.h from libwbclient-dev as, according to upstream's
++ commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is
++ smbtorture3"
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 11 Aug 2011 09:14:53 +0200
++
++samba (2:3.6.0~rc3-1) experimental; urgency=low
++
++ * New upstream version
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 29 Jul 2011 23:11:10 +0200
++
++samba (2:3.6.0~rc2-1) experimental; urgency=low
++
++ * New upstream version
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 07 Jun 2011 23:09:41 +0200
++
++samba (2:3.6.0~rc1-2) experimental; urgency=low
++
++ * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file
++ in an existing directory. Closes: #628121
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 27 May 2011 15:35:44 +0200
++
++samba (2:3.6.0~rc1-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 19 May 2011 22:26:08 +0200
++
++samba (2:3.6.0~pre3-1) experimental; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release
++ * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled
++ * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it
++ was forgotten upstream
++ * libwbclient0.symbols: dropped several symbols related to
++ asynchronous actions that weren't working anyway (according
++ to Kai Blin at SambaXP)
++
++ [ Mathieu Parent ]
++ * Build against libctdb-dev (>= 1.10+git20110412) to have required control:
++ CTDB_CONTROL_SCHEDULE_FOR_DELETION.
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 09 May 2011 11:29:52 +0200
++
++samba (2:3.5.11~dfsg-4) unstable; urgency=low
++
++ * Lintian override for libpam-winbind; it's not a shared library so doesn't
++ really need the pre-depends on multiarch-support.
++ * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu.
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 21 Oct 2011 16:01:29 -0700
++
++samba (2:3.5.11~dfsg-3) unstable; urgency=low
++
++ * Split winbind into separate packages, winbind and libpam-winbind,
++ with the latter marked Multi-Arch: same and the former marked
++ Multi-Arch: foreign, so that we can install multiple copies of the
++ pam module and nss modules on the same system.
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 21 Oct 2011 20:00:13 +0000
++
++samba (2:3.5.11~dfsg-2) unstable; urgency=low
++
++ * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally.
++ * Use dh_links instead of manually creating directories and symlinks from
++ debian/rules.
++ * Switch from dh_movefiles to dh_install and adjust for debhelper compat
++ level 7, in preparation for moving to dh(1).
++ * Where possible, use dh_installman and dh_install's support for target
++ directories instead of moving files around in debian/rules.
++ * We don't need to mess with perms on usr/include/libsmbclient.h anymore
++ in debian/rules, the upstream install target gets it right
++ * Use debian/clean instead of removing left-behind files by hand in the
++ clean target
++ * Convert debian/rules to dh(1).
++ * Don't run debconf-updatepo on clean; not worth the divergence in
++ debian/rules anymore :)
++ * Don't install debian/README.build in the package; this is really only
++ relevant in the source.
++ * Bump to debhelper compat level 9 and build libraries for multiarch.
++ * Drop Makefile.internal from libsmbclient-dev examples so that we can mark
++ libsmbclient-dev Multi-Arch: same.
++ * Bump build-depends on debhelper to 8.9.4, so we ensure we have
++ dpkg-buildflags by default and get full build hardening enabled out of
++ the box - critical for a server like samba.
++ * Use DH_ALWAYS_EXCLUDE instead of passing override options to
++ dh_installexamples.
++ * Pass --sourcedirectory=source3 to dh instead of having to pass it to each
++ dh_auto_* command.
++ * Ironically, this means that we have to manually disable dh_auto_test,
++ which now finds the makefile targets but doesn't work unless we build an
++ extra wrapper library into our binaries that we don't want.
++ * Drop a few configure options from debian/rules that shadow the built-in
++ defaults.
++ * debian/libsmbclient.lintian-overrides: yes, we know the package name
++ doesn't match the soname - and it never should until there's an ABI
++ change.
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 07 Oct 2011 21:36:43 -0700
++
++samba (2:3.5.11~dfsg-1) unstable; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 05 Aug 2011 20:12:01 +0200
++
++samba (2:3.5.10~dfsg-1) unstable; urgency=low
++
++ * New upstream release
++ * Security update, fixing the following issues:
++ - CVE-2011-2694: possible XSS attack in SWAT
++ - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 28 Jul 2011 12:19:01 +0200
++
++samba (2:3.5.9~dfsg-1) unstable; urgency=low
++
++ * New upstream release
++ * Add "--quiet" to start-stop-daemon call in reload target in init
++ script. Closes: #572483
++ * Add examples/LDAP in examples for the samba package. With this,
++ samba.schema will be provided in some way in the package.
++ This very partially addresses #190162
++ * patches/bug_221618_precise-64bit-prototype.patch: precise
++ 64bits prototype in libsmbclient-dev. Closes: #221618
++ * patches/no-unnecessary-cups.patch: dropped after upstream
++ changes to printing code
++ * Update Standards to 3.9.2 (checked, no change)
++ * Add build-arch and build-indep targets in debian/rules
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 18 Jun 2011 07:08:00 +0200
++
++samba (2:3.5.8~dfsg-5) unstable; urgency=low
++
++ * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo
++ in fhs-filespath.patch. Closes: #629183, LP: #789097
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 04 Jun 2011 13:48:32 +0200
++
++samba (2:3.5.8~dfsg-4) unstable; urgency=low
++
++ [ Debconf translations ]
++ * Spanish (Omar Campagne). Closes: #627813
++ * Swedish (Martin Bagge / brother). Closes: #627849
++ * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #627866
++
++ [ Christian Perrier ]
++ * bug_601406_fix-perl-path-in-example.patch: fix path to perl
++ binary in example file. Closes: #601406
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 27 May 2011 12:23:05 +0200
++
++samba (2:3.5.8~dfsg-3) unstable; urgency=low
++
++ [ Debconf translations ]
++ * Italian (Luca Monducci). Closes: #626674
++ * Dutch (Vincent Zweije). Closes: #627519
++ * Czech (Miroslav Kure). Closes: #627442
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 24 May 2011 22:40:04 +0200
++
++samba (2:3.5.8~dfsg-2) unstable; urgency=low
++
++ [ Jelmer Vernooij ]
++ * Add libwbclient-dev package.
++ * Build against external libtdb.
++ * Bump standards version to 3.9.1 (no changes).
++
++ [ Mathieu Parent ]
++ * Builddep on libctdb-dev or ctdb < 1.10
++
++ [ Christian Perrier ]
++ * Use db_settitle in debconf questions and make these
++ titles translatable. Closes: #560318
++ * Test the presence of testparm before trying to use it in init script
++ Closes: #606320
++ * Add cups to Should-{Start,Stop} in LSB headers of
++ samba init script to guarantee that CUPS is started
++ before samba. Closes: #619132
++ * Drop libsmbclient-dev useless dependency on samba-common
++ Closes: #597987
++
++ [ Debconf translations ]
++ * French (Christian Perrier)
++ * Japanese (Kenshi Muto). Closes: #626474
++ * Galician (Miguel Anxo Bouzada). Closes: #626477
++ * Thai (Theppitak Karoonboonyanan). Closes: #626487
++ * Russian (Yuri Kozlov). Closes: #626523
++ * Danish (Joe Hansen). Closes: #626531
++ * Esperanto (Felipe Castro). Closes: #626558
++ * Hebrew (Eran Cohen). Closes: #626638
++ * Bokmål, (Bjørn Steensrud).
++ * Italian (Luca Monducci). Closes: #626674
++ * Finnish (Tapio Lehtonen). Closes: #626890
++ * Portuguese (Miguel Figueiredo). Closes: #627224
++ * German (Holger Wansing). Closes: #627354
++ * Czech (Miroslav Kure). Closes: #627442
++
++ -- Christian Perrier <bubulle@sesostris.kheops.frmug.org> Sun, 22 May 2011 21:15:21 +0200
++
++samba (2:3.5.8~dfsg-1) unstable; urgency=low
++
++ * New upstream release. This fixes the following bugs:
++ - Winbind leaks gids with idmap ldap backend (upstrem #7777)
++ Closes: #613624
++ - printing from Windows 7 fails with 0x000003e6
++ Closes: #617429
++ * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream
++ #7997
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 08 Mar 2011 22:38:32 +0100
++
++samba (2:3.5.7~dfsg-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release
++ * Security update, fixing the following issue:
++ - CVE-2011-0719: denial of service by memory corruption
++ * Use architecture wildcard "linux-any" in build dependencies
++ Closes: #563372
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 01 Mar 2011 20:59:34 +0100
++
++samba (2:3.5.6~dfsg-5) unstable; urgency=low
++
++ * Fix FTBFS on Hurd. Closes: #610678
++ * Only try parsing dhcpd.conf is it's not empty,
++ in dhclient-enter-hooks.d/samba. Closes: #594088.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 05 Feb 2011 13:50:22 +0100
++
++samba (2:3.5.6~dfsg-4) unstable; urgency=low
++
++ * Fix pam_winbind file descriptor leak with a patch
++ proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265.
++ Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter
++ confirmed it is not while the patch applied here fixes the file
++ descriptor leak.
++ Closes: #574468
++
++ [ Debconf translations ]
++ * Brazilian Portuguese (Adriano Rafael Gomes). Closes: #607402
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 15 Jan 2011 18:06:22 +0100
++
++samba (2:3.5.6~dfsg-3) unstable; urgency=low
++
++ [ Julien Cristau ]
++ * Bump libwbclient0 shlibs to match the newest version in the symbols file.
++ * Mark libwbclient0 as breaking other samba packages with versions older
++ than 2:3.4.1, as they were linked against libtalloc1 instead of
++ libtalloc2, and the combination causes crashes (closes: #593823).
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 06 Dec 2010 20:14:04 +0100
++
++samba (2:3.5.6~dfsg-2) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Fix debian/rules update-archs target to not add extra spaces on every
++ invocation...
++
++ [ Debconf translations ]
++ * Catalan (Jordi Mallach). Closes: #601101
++ * Japanese (Kenshi Muto). Closes: #601364
++ * Bulgarian (Damyan Ivanov). Closes: #601366
++ * Hebrew (Omer Zak). Closes: #601633
++ * Kurdish (Erdal Ronahî). Closes: #601719
++ * Dutch (Remco Rijnders). Closes: #602220
++ * Greek (Konstantinos Margaritis).
++
++ [ Christian Perrier ]
++ * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy
++ files from a SMB share using SMB signing.". Backported from
++ to be released 3.5.7 version
++ Closes: #605729
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 04 Dec 2010 07:44:22 +0100
++
++samba (2:3.5.6~dfsg-1) unstable; urgency=low
++
++ * New upstream release. Fixes the following Debian bug:
++ - rpcclient readline segfault. Closes: #597203
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 10 Oct 2010 09:59:37 +0200
++
++samba (2:3.5.5~dfsg-1) unstable; urgency=high
++
++ [ Christian Perrier ]
++ * New upstream release. Security release fixing:
++ - CVE-2019-3069: Buffer overrun vulnerability in sid_parse.
++ Closes: #596891.
++ * Fix comment in swat's postinst. It is not turned off by default
++ Closes: #596040
++ * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst
++
++ [ Steve Langasek ]
++ * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for
++ pam-auth-update. Closes: #594325.
++
++ [ Debconf translations ]
++ * Arabic (Ossama Khayat). Closes: #596164
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 14 Sep 2010 23:03:35 +0200
++
++samba (2:3.5.4~dfsg-2) unstable; urgency=low
++
++ * Release to unstable
++
++ [ Debconf translations ]
++ * Danish (Joe Dalton). Closes: #592789.
++ * Galician (Jorge Barreiro). Closes: #592809
++
++ [ Steve Langasek ]
++ * debian/patches/fhs-filespaths.patch, debian/samba.postinst,
++ debian/winbind.postinst: move some files from /etc/samba to
++ /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb,
++ and idmap2.tdb.
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 07 Sep 2010 17:47:32 +0200
++
++samba (2:3.6.0~pre1-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 04 Aug 2010 01:39:11 +0200
++
++samba (2:3.5.4~dfsg-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 29 Jun 2010 22:00:53 +0200
++
++samba (2:3.5.3~dfsg-1) experimental; urgency=low
++
++ * New upstream release. Fixes the following bugs:
++ - smbclient segfaults when used against old samba "security = share"
++ Closes: #574886
++ * Drop duplicate build dependency on ctdb
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 19 May 2010 22:07:49 +0200
++
++samba (2:3.5.2~dfsg-2) experimental; urgency=low
++
++ * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and
++ 2:3.4.7~dfsg-2
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 04 May 2010 17:13:47 +0200
++
++samba (2:3.5.2~dfsg-1) experimental; urgency=low
++
++ * New upstream release
++ * Bugs fixed upstream:
++ - Fix parsing of the gecos field
++ Closes: #460494
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 08 Apr 2010 19:48:07 +0200
++
++samba (2:3.5.1~dfsg-1) experimental; urgency=low
++
++ * New upstream release. Security fix: all smbd processes inherited
++ CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
++ allowed even when permissions should have denied access.
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 09 Mar 2010 10:54:01 +0100
++
++samba (2:3.5.0dfsg-1) experimental; urgency=low
++
++ * New upstream release. Not using "3.5.0~dfsg" as version number
++ because we used a "higher" version number in previous versions.
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 02 Mar 2010 22:03:15 +0100
++
++samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low
++
++ * New upstream release candidate
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 20 Feb 2010 08:36:57 +0100
++
++samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low
++
++ * New upstream pre-release
++ * Use new --with-codepagedir option. Consequently drop
++ codepages-location.patch
++ * Drop "Using Samba" from the samba-doc file list as it was
++ removed upstream.
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 31 Jan 2010 11:53:48 +0100
++
++samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream pre-release
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 15 Jan 2010 23:31:01 +0100
++
++samba (2:3.4.8~dfsg-2) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Drop the per-release smb.conf templates, only needed for upgrade paths
++ that are no longer supported.
++ * Call /etc/init.d/samba directly from the logrotate script instead of
++ using invoke-rc.d, to address the irony that the only package I work on
++ that *has* a logrotate script is inconsistent with my position in
++ bug #445203.
++ * Fix a bashism in the samba postinst that can cause the package
++ installation to fail under dash. LP: #576307.
++ * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to
++ /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new
++ isc-dhcp-client package. Closes: #585056.
++
++ [ Christian Perrier ]
++ * Don't copy system accounts from /etc/passwd to
++ /var/lib/samba/passdb.tdb. Closes: #502801
++ * Update Standards to 3.9.0 (checked, no change)
++ * Backport patch for upstream bug #7139 to fix "owner of file not
++ available with kerberos"
++ Closes: #586337
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 14 Jul 2010 11:59:28 -0700
++
++samba (2:3.4.8~dfsg-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release
++ * Bugs fixed upstream:
++ - Fix writing with vfs_full_audit. Closes: #574011
++ * Drop deprecated 'share modes' parameter from default smb.conf
++ Closes: #580561
++ * Enable PIE during configure. Closes: #509135
++ * Avoid winbind's logrotate script to fail when there is no
++ /var/run/samba directory. Closes: #569926
++ * Add explanations about "passdb backend" default setting change
++ Closes: #553904
++
++ [ Debconf translations ]
++ * Spanish (Omar Campagne). Closes: #579011
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 12 May 2010 05:45:52 +0200
++
++samba (2:3.4.7~dfsg-2) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Drop smbfs package (now provided by cifs-utils as a dummy transition
++ package)
++
++ [ Debconf translations ]
++ * Portuguese (Miguel Figueiredo). Closes: #575958
++
++ [ Steve Langasek ]
++ * winbind.prerm: don't forget to remove the PAM profile on package
++ removal :/
++ * Fix winbind.pam-config to not interfere with password changes for
++ non-winbind accounts. Closes: #573323, LP: #546874.
++ * debian/samba.if-up, debian/rules: add an if-up.d script for samba to
++ try to start nmbd, if it's not running because /etc/init.d/samba ran
++ before the network was up at boot time. Closes: #576415, LP: #462169.
++ * debian/samba.if-up: allow "NetworkManager" as a recognized address
++ family... it's obviously /not/ an address family, but it's what gets
++ sent when using NM, so we'll cope for now.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 17 Apr 2010 07:49:49 +0200
++
++samba (2:3.4.7~dfsg-1) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Add a PAM profile for pam_winbind. Closes: #566890, LP: #282751.
++ * Add the correct versioned build dependency on libtalloc-dev as
++ we need 2.0.1 to build samba. Closes: #572603
++ * Add avr32 to arches with a build dependency on ctdb. Closes: #572126
++
++ [ Christian Perrier ]
++ * New upstream release. Security fix: all smbd processes inherited
++ CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
++ allowed even when permissions should have denied access.
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 09 Mar 2010 10:52:24 +0100
++
++samba (2:3.4.6~dfsg-1) unstable; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 26 Feb 2010 22:39:50 +0100
++
++samba (2:3.4.5~dfsg-2) unstable; urgency=low
++
++ [ Steve langasek ]
++ * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar"
++ is explicitly allowed by Policy now, and this change introduced a
++ syntax error. Closes: #566946.
++
++ [ Christian Perrier ]
++ * No longer maker (u)mount.cifs setuid root. Add a notice
++ about this in the package's NEWS.Debian file
++ Closes: #567554
++ * Use dh_lintian instead of manual install of lintian overrides
++ * Updated Standards to 3.8.4 (checked, no change)
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 13 Feb 2010 14:36:33 +0100
++
++samba (2:3.4.5~dfsg-1) unstable; urgency=low
++
++ * New upstream release. Bugs fixed by this release:
++ - Memory leak in smbd. Closes: #538819, #558453
++ * Declare a versioned dependency of winbind and samba on libwbclient0
++ Closes: #550481
++ * A few lintian fixes:
++ * Drop /var/run/samba from samba-common. The directory is created
++ by init scripts when needed.
++ * No longer prepend a path to the mksmbpasswd call in samba.postinst.
++ This prevents the local administrator to use a replacement version
++ for some local reason.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 23 Jan 2010 12:16:42 +0100
++
++samba (2:3.4.4~dfsg-1) unstable; urgency=low
++
++ * New upstream version.
++ * Drop all RFC files from upstream source, therefore using a "~dfsg"
++ suffix to upstream version number.
++ * Bugs fixed upstream:
++ - fixed list of workgroup servers in libsmbclient.
++ Closes: #555462, #561148
++ - fixed documentation of the credentials file format in
++ mount.cifs(8). Closes: #552250
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 14 Jan 2010 20:16:34 +0100
++
++samba (2:3.4.3-2) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Switch to source format 3.0 (quilt)
++ * Better adapt "add machine script" example to adduser
++ Thanks to Heiko Schlittermann for the suggestion
++ Closes: #555466
++
++ [ Steve Langasek ]
++ * The "I hate non-declarative alternatives" upload:
++ - debian/samba{,-common}.prerm: don't call update-alternatives --remove
++ on upgrade, /do/ call it on other invocations of the prerm script. If
++ these tools ever go away, the removal needs to be handled on upgrade by
++ the maintainer scripts of the new package version.
++ - debian/samba{,-common-bin}.postinst: call update-alternatives
++ unconditionally, don't second-guess the maintainer script arguments.
++ - debian/samba.postinst: call update-alternatives after the debconf
++ handling, not before; debconf triggers a re-exec of the script so
++ anything done before invoking debconf is wasted because it will be
++ re-done, and if there's already a debconf frontend running when this
++ is called, the not-redirected update-alternatives output will confuse
++ it. Closes: #558116.
++ - debian/samba-common.prerm: move to samba-common-bin, this is the package
++ that owns these binaries.
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 17 Dec 2009 16:53:13 +0100
++
++samba (2:3.4.3-1) unstable; urgency=low
++
++ * New upstream release. This fixes the following bugs:
++ - Do not attempt to update /etc/mtab if it is
++ a symbolic link. Closes: #408394
++ * Bump Standards-Version to 3.8.3 (checked)
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 31 Oct 2009 14:32:07 +0100
++
++samba (2:3.4.2-1) unstable; urgency=high
++
++ * New upstream release. Security update.
++ * CVE-2009-2813:
++ Connecting to the home share of a user will use the root of the
++ filesystem as the home directory if this user is misconfigured to
++ have an empty home directory in /etc/passwd.
++ * CVE-2009-2948:
++ If mount.cifs is installed as a setuid program, a user can pass it
++ a credential or password path to which he or she does not have
++ access and then use the --verbose option to view the first line of
++ that file.
++ * CVE-2009-2906:
++ Specially crafted SMB requests on authenticated SMB connections
++ can send smbd into a 100% CPU loop, causing a DoS on the Samba
++ server.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 03 Oct 2009 08:30:33 +0200
++
++samba (2:3.4.1-2) unstable; urgency=low
++
++ * ./configure --disable-avahi, to avoid accidentally picking up an avahi
++ dependency when libavahi-common-dev is installed.
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 26 Sep 2009 00:01:12 -0700
++
++samba (2:3.4.1-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release. This fixes the following bugs:
++ - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec
++ for the clever analysis and collaboration with upstream.
++ Closes: #541171
++ - Fix password change propagation with ldapsam. Closes: #505215
++ - Source package contains non-free IETF RFC/I-D. Closes: #538034
++ * Turn the build dependency on libreadline5-dev to libreadline-dev
++ to make further binNMUs easier when libreadline soname changes
++ Thanks to Matthias Klose for the suggestion
++
++ [ Steve Langasek ]
++ * Don't build talloctort when using --enable-external-talloc; and don't
++ try to include talloctort in the samba-tools package, since we're
++ building with --enable-external-talloc. :) Closes: #546828.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 21 Sep 2009 22:20:22 -0700
++
++samba (2:3.4.0-5) unstable; urgency=low
++
++ * Move /etc/pam.d/samba back to samba-common, because it's shared with
++ samba4. Closes: #545764.
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 08 Sep 2009 18:43:17 -0700
++
++samba (2:3.4.0-4) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * debian/samba.pamd: include common-session-noninteractive instead of
++ common-session, to avoid pulling in modules specific to interactive
++ logins such as pam_ck_connector.
++ * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the
++ above.
++ * rename debian/samba.pamd to debian/samba.pam and call dh_installpam
++ from debian/rules install, bringing us a smidge closer to a stock
++ debhelper build
++ * don't call pyversions from debian/rules, this throws a useless error
++ message during build.
++ * fix up the list of files that need to be removed by hand in the clean
++ target; the majority of these are now correctly handled upstream.
++ * debian/rules: fix the update-arch target for the case of unversioned
++ build-deps.
++ * Pull avr32 into the list of supported Linux archs. Closes: #543543.
++ * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the
++ patch. Closes: #541367.
++
++ [ Christian Perrier ]
++ * Use DEP-3 for patches meta-information
++
++ [ Steve Langasek ]
++ * Change swat update-inetd call to use --remove only on purge,
++ and --disable on removal.
++ * Add missing build-dependency on pkg-config, needed to fix libtalloc
++ detection
++ * debian/patches/external-talloc-support.patch: fix the Makefile so it
++ works when using external talloc instead of giving a missing-depend
++ error.
++ * debian/patches/autoconf.patch: resurrect this patch, needed for the
++ above.
++ * debian/rules: build with --without-libtalloc
++ --enable-external-libtalloc, also needed to fix the build failure.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 07 Sep 2009 22:58:29 -0700
++
++samba (2:3.4.0-3) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * debian/control: samba-common-bin has no reason to depend on
++ libpam-modules.
++
++ [ Christian Perrier ]
++ * Fix "invalid argument" when trying to copy a file from smb share
++ Use an upstream patch that will be included in 3.4.1
++ Closes: #536757
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 21 Aug 2009 11:08:43 +0200
++
++samba (2:3.4.0-2) unstable; urgency=low
++
++ [ Debconf translations ]
++ * German. Closes: #536433
++
++ [ Steve Langasek ]
++ * Enable the ldap idmap module; thanks to Aaron J. Zirbes. Closes: #536786.
++
++ [ Jelmer Vernooij ]
++ * Properly rename smbstatus.1 for alternatives. Closes: #534772
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 02 Aug 2009 12:20:51 +0200
++
++samba (2:3.4.0-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release: first upload to unstable for 3.4
++ * Correct dependencies for samba-common-bin. Closes: #534595
++
++ [ Debconf translations ]
++ * Czech. Closes: #534793
++ * Russian. Closes: #534796
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 07 Jul 2009 20:42:19 +0200
++
++samba (2:3.4.0~rc1-1) experimental; urgency=low
++
++ * New upstream version. That fixes the following bugs:
++ - Remove pidfile on clean shutdown. Closes: #299433, #454112
++ * Drop swat-de.patch that was applied upstream
++ * Bump debhelper compatibility level to 6 and declare a versioned
++ dependency on debhelper >= 6.0.0
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 20 Jun 2009 18:43:20 +0200
++
++samba (2:3.4.0~pre2-1) experimental; urgency=low
++
++ [ Jelmer Vernooij ]
++ * Split binaries out of samba-common into samba-common-bin.
++ Closes: #524661
++
++ [ Christian Perrier ]
++ * New upstream version. That fixes the following bugs:
++ - Do not limit the number of network interfaces. Closes: #428618
++ - Fix Connect4 in samr.idl. Closes: #526229
++ * "Using samba" is back.
++ * Drop non-linux-ports.patch that was integrated upstream
++ * Drop smbpasswd-syslog.patch that was integrated upstream
++ * Drop smbclient-link.patch that was integrated upstream
++
++ [ Debconf translations ]
++ * Italian. Closes: #529350
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 06 Jun 2009 11:45:35 +0200
++
++samba (2:3.4.0~pre1-1) experimental; urgency=low
++
++ * New upstream pre-release
++ * "Using samba" is dropped from upstream source. Therefore, drop
++ debian/samba-doc.doc-base.samba-using
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 20 May 2009 18:50:35 +0200
++
++samba (2:3.3.6-1) unstable; urgency=high
++
++ * New upstream release. Security release.
++ * CVE 2009-1886: Fix Formatstring vulnerability in smbclient
++ * CVE 2009-1888: Fix uninitialized read of a data value
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 26 Jun 2009 18:21:51 +0200
++
++samba (2:3.3.5-1) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * debian/patches/undefined-symbols.patch: fix up patch so that it's
++ suitable for submission upstream.
++ * debian/patches/proper-static-lib-linking.patch: apply the rules to
++ vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and
++ rpc_open_tcp.
++
++ [ Debconf translations ]
++ * Italian. Closes: #529350
++
++ [ Christian Perrier ]
++ * New upstream version
++ * Lintian fixes:
++ - Declare versioned dependency on debhelper to fit what we have in
++ debian/compat
++ - samba.postinst: do not call mksmbpasswd with an absolute path
++ * Upgrade Standard to 3.8.2 (checked, no change)
++ * Upgrade debhelper compatibility level to 6
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 20 Jun 2009 08:01:16 +0200
++
++samba (2:3.3.4-2) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Do no compile with clustering support on non-Linux platforms
++ Closes: #528382
++
++ [ Debconf translations ]
++ * Basque. Closes: #528757
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 16 May 2009 17:31:09 +0200
++
++samba (2:3.3.4-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release:
++ - Fixed daily winbind crash when retrieving users from an ADS server
++ Closes: #522907.
++ * Add idmap_tdb2 module to winbind package
++ * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents
++ VFS modules to properly load. Closes: #524048.
++
++ [ Debconf translations ]
++ * Bengali added.
++
++ [ Steve Langasek ]
++ * Recommend logrotate instead of depending on it. Closes: #504219.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 02 May 2009 10:06:16 +0200
++
++samba (2:3.3.3-1) unstable; urgency=low
++
++ * New upstream release:
++ - Fix map readonly. Closes: #521225
++ - Add missing whitespace in mount.cifs error message. Closes: #517021
++ - Includes our patch to fix detection of GNU ld version. As a
++ consequence, we dropped fix_wrong_gnu_ld_version_check.patch
++ - Fix segfault in lookup_sid. Closes: #521408
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 11 Apr 2009 10:12:23 +0200
++
++samba (2:3.3.2-2) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * libcap2-dev is only available on Linux, so make this build-dependency
++ conditional. Closes: #519911.
++
++ [ Christian Perrier ]
++ * Switch samba-dbg to "Section: debug"
++ * Update debian/copyright for year 2009. Thanks to debian-devel
++ for the reminder.
++ * Dropping Adam Conrad from Uploaders
++ * Dropping Eloy Paris from Uploaders with special thanks for his tremendous
++ work maintaining the package between 1997 and 2004.
++
++ [ Mathieu Parent ]
++ * ensure clustering is enabled with --with-cluster-support=yes
++ * build-depends on ctdb >= 1.0.73. Closes: #520202.
++ * samba suggests ctdb
++
++ [ Debconf translations ]
++ * Esperanto updated. Closes: #519237.
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 29 Mar 2009 09:23:35 +0200
++
++samba (2:3.3.2-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release. Closes: #519626
++ - mounts with -o guest will now automatically try to connect anonymously.
++ Closes: #423971.
++ - fix for brokenness when using 'force group'. Closes: #517760.
++ - fix for saving files on Samba shares using MS Office 2007.
++ LP: #337037.
++ * Re-fix slave links for manual pages in samba-common. Closes: #517204.
++
++ [ Steve Langasek ]
++ * Add missing debhelper token to libpam-smbpass.prerm.
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 15 Mar 2009 12:16:48 +0100
++
++samba (2:3.3.1-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release. Closes: #516981
++ Upstream fixes in that release:
++ - Fixed various spelling errors/typos in manpages
++ Closes: #516047
++ - Fix renaming/deleting of files using Windows clients.
++ Closes: #516160
++ - Fix syntax error in mount.cifs(8). Closes: #454799
++ * Use a slave alternative for smbstatus.1 even though that manpage
++ is not provided by samba4
++
++ [ Jelmer Vernooij ]
++ * Fix slave links for manual pages in samba-common. Closes: #517204.
++
++ [ Steve Langasek ]
++ * Add Vcs-{Browser,Svn} fields to debian/control.
++ * When populating the sambashare group, it's not an error if the user
++ simply doesn't exist; test for this case and let the install continue
++ instead of aborting. LP: #206036.
++ * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst,
++ debian/libpam-smbpass.files, debian/rules: provide a config block
++ for the new PAM framework, allowing this PAM module to
++ auto-configure itself
++ * debian/control: make libpam-smbpass depend on
++ libpam-runtime (>= 1.0.1-2ubuntu1) for the above
++ * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix
++ wrong detection of the GNU ld version, so that the symbol export scripts
++ will be properly applied when building.
++ * refresh debian/libsmbclient.symbols for 3.3.1.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 02 Mar 2009 00:30:35 -0800
++
++samba (2:3.3.0-4) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Build-Depend on libcap2-dev. Closes: #515851.
++ * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype
++ for cache_path, which causes nearly undiagnoseable crashes when building
++ with -fPIE, because of a wrong return type! LP: #330626.
++
++ [ Debconf translations ]
++ * Belarusian added. Closes: #516052.
++ * Traditional Chinese updated. Closes: #516594
++ * Swedish updated. Closes: #516681.
++
++ [ Mathieu Parent ]
++ * enable clustering by default (CTDB). Closes: #514050
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 24 Feb 2009 16:58:58 -0800
++
++samba (2:3.3.0-3) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable.
++ * Make samba conflict with samba4, not with itself.
++
++ [ Debconf translations ]
++ * Vietnamese updated. Closes: #515235.
++ * Slovak updated. Closes: #515240.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 16 Feb 2009 07:15:47 -0800
++
++samba (2:3.3.0-2) unstable; urgency=low
++
++ * Upload to unstable
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 14 Feb 2009 13:38:14 +0100
++
++samba (2:3.2.5-4) unstable; urgency=low
++
++ * Fix segfault whan accessign some NAS devices running old versions of Samba
++ Closes: #500129
++ * Fix process crush when using gethostbyname_r in several threads
++ Closes: #509101, #510450
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 08 Jan 2009 05:59:17 +0100
++
++samba (2:3.2.5-3) unstable; urgency=high
++
++ * Security update
++ * Fix Potential access to "/" in setups with registry shares enabled
++ This fixes CVE-2009-0022, backported from 3.2.7
++ * Fix links in HTML documentation index file.
++ Closes: #508388
++ * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new
++ file in the diff. Thanks to the release managers for spotting it
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 21 Dec 2008 08:09:31 +0100
++
++samba (2:3.2.5-2) unstable; urgency=low
++
++ * Fix typo in bug number in a comment for the default smb.conf file
++ Closes: #507620
++ * Document the need to set appropriate permissions on the printer
++ drivers directory, in the default smb.conf file. Also change
++ the example group from ntadmin to lpadmin
++ Closes: #459243
++ * Add missing rfc2307.so and sfu*.so links that prevent using the
++ 'winbind nss info' feature properly
++ Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for
++ the patch. Closes: #506109
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 13 Dec 2008 13:56:07 +0100
++
++samba (2:3.2.5-1) unstable; urgency=high
++
++ * New upstream version. Security-only release.
++ This addresses CVE-2008-4314: potentially leaking
++ arbitrary memory contents to malicious clients.
++ * Better document cases where using a "master" file for smb.conf
++ is a bad idea. Closes: #483187
++ * Insert example "add machine script" and "add group script" scripts
++ in the default smb.conf. Closes: #349049
++ * Move homepage URL to Homepage filed in debian/control
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 27 Nov 2008 11:36:35 +0100
++
++samba (2:3.3.0-1) experimental; urgency=low
++
++ * New upstream release. Fixes the following bugs:
++ - smb file deletion gvfs. Closes: #510564
++ - smbclient du command does not recuse properly. Closes: #509258
++ - mention possible workgroup field in credential files in mount.cifs(8)
++ Closes: #400734
++ - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init
++ Closes: #489656
++ - describe '-g' option in smbclient man page. Closes: #510812
++ - fix swat status table layout. Closes: #511275
++
++ [ Jelmer Vernooij ]
++ * Use alternatives for the smbstatus, nmblookup, net and
++ testparm binaries and various data files in samba-common
++ to allow installation of Samba 3 together with Samba 4.
++ * Add myself to uploaders.
++
++ [ Christian Perrier ]
++ * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base,
++ smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to
++ libsmbclient's symbols file with 3.3.0 as version number
++ * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as
++ version number
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 30 Jan 2009 21:41:49 +0100
++
++samba (2:3.3.0~rc2-4) experimental; urgency=low
++
++ [ Steve Langasek ]
++ * Revert one of the template depersonalization changes from the -2 upload,
++ because it loses important context
++
++ [ Christian Perrier ]
++ * Use double quotation marks in debconf templates
++ * Add 'status" option to init scripts. Thansk to Dustin Kirkland for
++ providing the patch. Closes: #488275
++ * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997
++ * [Lintian] Add ${misc:Depends} to dependencies of binary packages
++ that didn't have it already as we're using debhelper in the source
++ package
++ * [Lintian] Don't ignore errors in swat.postrm
++ * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config
++ and samba-common.config
++ * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5)
++ Closes: #512843
++
++ [ Debconf translations ]
++ * Asturian added. Closes: #511730
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 24 Jan 2009 16:04:57 +0100
++
++samba (2:3.3.0~rc2-3) experimental; urgency=low
++
++ * Fix around the libsmbclient/libsmbclient-dev descriptions, which got
++ swapped in the last upload.
++ * Drop a boilerplate sentence from the samba-common, smbclient, swat,
++ samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions
++ that's not relevant for these packages.
++ * Hyphenate "command-line" in the smbclient short description.
++ * Fix up the smbclient description, which got crossed with the smbfs one.
++ * Fix the smbfs description, which was not actually fixed in the previous
++ upload. Really closes: #496206.
++ * Further minor adjustments to the description of the swat package.
++ * Fix various inaccuracies in the winbind package description.
++ * Clarify in the description that samba-tools are extra, only useful for
++ testing.
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 30 Dec 2008 18:42:05 -0800
++
++samba (2:3.3.0~rc2-2) experimental; urgency=low
++
++ [ Steve Langasek ]
++ * Handle clearing out netbios settings whenever the DHCP server has gone
++ away. Closes: #299618.
++
++ [ Christian Perrier ]
++ * Point the correct document about password encryption in debconf templates
++ Corrected in translations as well. Closes: #502838
++ * Reword debconf templates to avoid mentioning the local host as a "server".
++ Closes: #171177
++ * Use this opportunity for other minor rewording:
++ - replace "SMB" by "SMB/CIFS"
++ - more strongly discouraging the use of plain text passwords
++ - unpersonnalization
++ * Reword the libpam-smbpass package description
++ Thanks to Justin B. Rye for the very useful suggestions
++ Closes: #496196
++ * Improve the package descriptions by rewording the description overhaul
++ Also improve the specific information for samba and samba-dbg
++ Thanks again to Justin B. Rye for the invaluable help
++ Closes: #496200
++ * Improve libsmbclient package description. Closes: #496197
++ * Improve libwbclient0 package description. Closes: #496199
++ * Improve samba-doc package description. Closes: #496202
++ * Improve samba-tools package description. Closes: #496203
++ * Improve samba-common package description. Closes: #496204
++ * Improve smbclient package description. Closes: #496205
++ * Improve smbfs package description. Closes: #496206
++ * Improve swat package description. Closes: #496207
++ * Improve winbind package description. Closes: #496208
++ * Improve samba-doc-pdf package description. Closes: #496211
++ * Update French debconf translation
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 29 Dec 2008 11:50:04 +0100
++
++samba (2:3.3.0~rc2-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 17 Dec 2008 08:22:18 +0100
++
++samba (2:3.3.0~rc1-2) experimental; urgency=low
++
++ * Provide idmap_adex and idmap_hash in winbind.
++ Thanks to Jelmer Jaarsma for reporting and providing a patch
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 04 Dec 2008 19:59:23 +0100
++
++samba (2:3.3.0~rc1-1) experimental; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 28 Nov 2008 10:51:32 +0100
++
++samba (2:3.3.0~pre2-1) experimental; urgency=low
++
++ * New upstream release.
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 07 Nov 2008 20:52:36 +0100
++
++samba (2:3.2.4-1) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * New upstream release.
++ - debian/rules: we don't need to move cifs.upcall around, it's now
++ installed to the right place upstream.
++ - Fixed in this release:
++ - typo in cifs.upcall.8. Closes: #501499
++
++ [ Christian Perrier ]
++ * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for
++ the patch. Closes: #499359
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 18 Oct 2008 08:20:31 +0200
++
++samba (2:3.2.3-3) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing
++ this out. Closes: #497857.
++ * Georgian debconf translation added. Closes: #498426
++ * Polish debconf translation added. Thanks to Łukasz Paździora.
++
++ [ Jelmer Vernooij ]
++ * Add ldb-tools to Suggests: of samba. Closes: #488384
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 03 Oct 2008 20:37:19 +0200
++
++samba (2:3.2.3-2) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Fix FTBFS on GNU/kFreeBSD. Closes: #496880
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 30 Aug 2008 00:46:07 -0700
++
++samba (2:3.2.3-1) unstable; urgency=high
++
++ * High-urgency upload for security fix
++ * New upstream release
++ - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default"
++ Closes: #491881
++ - Fix the default permissions on ldb databases. Addresses
++ CVE-2008-3789; closes: #496073.
++ - debian/rules, debian/smbfs.files: build with cifs.upcall,
++ newly introduced to replace cifs.spnego
++ - debian/rules: no more need to rename libsmbclient.so to
++ libsmbclient.so.0, or libwbclient.so to libwbclient.so.0
++
++ [ Noèl Köthe ]
++ * fixing lintian warning "build-depends-on-1-revision"
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 27 Aug 2008 10:19:59 -0700
++
++samba (2:3.2.1-1) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Build-depend on keyutils only on the linux archs. Closes: #493401.
++ * New patch debian/patches/shrink-dead-code.patch: throw all .o files into
++ a .a archive as a first pass before linking the final executables, so
++ that the executables don't end up with quite so much unused code bloating
++ the system. Not applied to net or ntlm_auth, which have particularly
++ hairy linking needs. Partially addresses: bug #474543; no code was
++ harmed in the making of this patch.
++ * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports.
++
++ [ Christian Perrier ]
++ * New upstream release
++ - Fix trusted domain handling in Winbindd. Closes: #493752
++ - Fix for print jobs that continued to show as active after printing
++ had completed. Closes: #494899.
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 14 Aug 2008 16:13:24 -0700
++
++samba (2:3.2.0-4) unstable; urgency=low
++
++ * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch
++ that went missing somehow, causing samba to look for secrets.tdb in
++ /etc/samba instead of /var/lib/samba where it's been for years. No
++ migration handling added, because this was only present in unstable for
++ about a day. Thanks to Rick Nelson for pointing this out.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 21 Jul 2008 17:39:48 -0700
++
++samba (2:3.2.0-3) unstable; urgency=low
++
++ * Upload to unstable.
++ * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro
++ and Makefile.in to properly avoid linking .a libraries into other .a
++ libraries, since this bloats the libraries without providing any useful
++ functionality.
++ * Version the build-dependency on libtalloc-dev, to ensure we're building
++ against a package with the right symbols.
++ * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get
++ more fine-grained versioned library dependencies
++ * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols
++ have been added.
++ * Re-add docs/registry to samba-doc, restored upstream
++ * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it
++ belongs according to the FHS. Closes: #454770.
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 20 Jul 2008 15:38:10 -0700
++
++samba (2:3.2.0-2) experimental; urgency=low
++
++ * Fix up the copyright file to correctly document that we're now under
++ GPLv3, not GPLv2.
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 08 Jul 2008 12:21:47 -0700
++
++samba (2:3.2.0-1) experimental; urgency=low
++
++ [ Christian Perrier ]
++ * New samba-tools package to provide all "torture" tools:
++ smbtorture msgtest masktest locktest locktest2 nsstest vfstest
++ pdbtest talloctort replacetort tdbtorture smbconftort
++ * Upgrade Standard to 3.8.0 (checked)
++ * Merged from unstable:
++ * Drop "invalid users = root" from the default smb.conf file
++ as it differs from upstream's behaviour and upstream is fairly
++ noisy about this choice of ours. Closes: #462046
++ * Drop commented "guest account = nobody". This is already upstream's
++ default
++ * Remove versioned Build-Depends when satisfied in etch (actually all
++ versioning in Build-Depends)
++ * Remove Conflicts with non-existing packages
++ * Drop dpkg-dev and binutils from Build-Depends, since the versioned
++ build-dep is no longer needed and these are both Build-Essential
++ * Mini-policy for settings in smb.conf:
++ - don't explicitly set settings to their default value
++ - commented settings with the default value are commented with "#"
++ - commented settings with a non-default value are commented with ";"
++ * Apply this policy to "socket options". Closes: #476104
++ * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
++ libsmbclient.so.0 as upstream doesn't assign versions
++ * Add idmap_*(8) man pages (idea taken from SerNet packages)
++ * Create the entire set of directories needed by clients for
++ Point-and-Click printing (including old clients!) in
++ /var/lib/samba/printers (idea taken from SerNet packages)
++ * Update copyright and README.debian information for current and past
++ maintainers. Remove redundant mention of Tridge (the copyright is enough)
++ * Add doc-base files for samba-doc-pdf. Closes: #451685
++ * add a soft dependency on slapd in init script to allow
++ proper operation when dependency-based boot sequence is enabled.
++ Thanks to Petter Reinholdtsen for reporting and providing a patch
++ Closes: #478800
++ * Rename libcupsys2-dev to libcups2-dev in build dependencies
++ * Localize SWAT in German. Closes: #487681
++
++ [ Debconf translations ]
++ * Merged from unstable:
++ * Kurdish. Closes: #480151
++ * Romanian updated. Closes: #488709.
++
++ [ Steve Langasek ]
++ * New upstream release
++ * Merged from unstable:
++ * debian/patches/no-unnecessary-cups.patch: don't try to connect to a
++ cups server when we know that no printers are configured.
++ Closes: #479512.
++
++ [ Jelmer Vernooij ]
++ * Merged from unstable:
++ * Fix bashism in smbtar. (Closes: #486056)
++
++ [ Peter Eisentraut ]
++ * Merged from unstable:
++ * Removed myself from Uploaders
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 06 Jul 2008 09:59:07 +0200
++
++samba (2:3.2.0~rc2-1) experimental; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release
++
++ [ Steve Langasek ]
++ * Enable building of cifs.spnego for the smbfs package, adding a
++ build-dependency on keyutils-dev, to allow kerberos-based authentication
++ of cifs mounts. Closes: #480663, LP: #236830.
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 12 Jun 2008 17:17:38 +0200
++
++samba (2:3.2.0~rc1-2) experimental; urgency=low
++
++ * Reupload to experimental. Sigh.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 31 May 2008 11:08:14 +0200
++
++samba (1:3.2.0~rc1-1) unstable; urgency=low
++
++ * New upstream version
++ * debian/samba-doc.doc-base.samba-using: index file is no named toc.html
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 30 May 2008 20:22:57 +0200
++
++samba (1:3.2.0~pre3-1) experimental; urgency=low
++
++ * New upstream version
++ * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream
++ * docs/registry removed from samba-doc as missing from upstream tarball
++ (upstream bug #5421)
++ * debian/samba-doc.doc-base.samba-using: The index (and only) file
++ is now book.html
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 26 Apr 2008 08:20:21 +0200
++
++samba (1:3.2.0~pre2-2) experimental; urgency=low
++
++ [ Christian Perrier ]
++ * Upload to experimental with an epoch as the earlier version
++ accidentally went to unstable.
++
++ [ Peter Eisentraut ]
++ * Removed myself from Uploaders
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 06 Apr 2008 20:38:35 +0200
++
++samba (3.2.0~pre2-1) unstable; urgency=low
++
++ * New upstream (pre-)release. It closes the following bugs:
++ - typos in net.8. Closes: #460487, #460491
++ - mention insmb.conf(5) that logging still occurs when
++ "syslog only" is enabled and "syslog=0". Closes: #311300
++ - bad link in HTML docs. Closes: #358479
++ - enhance a useless and confusing debug message in pdb_ldap
++ Closes: #448546
++ - mention the correct default debug level in smbclient(1)
++ Closes: #292371
++ - no longer mention that "ip" parameter can use the host name
++ in mount.cifs(8). Closes: #296057
++ - wrong spelling of "its own" in source comments fixed
++ Closes: #448686
++ - fix "ldapsam_getgroup: Did not find group" debug message
++ Closes: #448546
++ - fix smbclient(1): useless use of cat. Closes: #429349
++
++ [ Steve Langasek ]
++ * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from
++ 3.2.0pre2, which ended up with html entity encodings embedded in them
++ by mistake. This patch is expected to go away again for 3.2.0pre3.
++ * fix up the FHS patches for the new upstream release:
++ - debian/patches/fhs-newpaths.patch has been merged upstream, drop it.
++ - debian/patches/fhs-filespaths.patch has been mostly applied; only one
++ path usage remains inconsistent, and a new .tdb has been added with
++ the wrong path so fix this up here too.
++ - debian/patches/fhs-filespaths-debatable.patch: updated for some new
++ uses of lock_path() which we map to cache_path().
++ - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4
++ instead of source/configure.in.
++ * debian/patches/smbstatus-locking.patch: merged upstream
++ * debian/patches/smbpasswd-syslog.patch: updated to account for new
++ calls to logging functions
++ * Handle the new libraries available in samba 3.2: ship libwbclient as a
++ shared library, link against the system libtalloc (adding a
++ build-dependency on libtalloc-dev - which is actually sort of kludgy
++ because this only works as long as the system libtalloc has the same
++ soname as the one within the samba tree, this should be fixed to
++ properly build against the system libtalloc), and suppress generation
++ of the tdb and netapi libraries which aren't useful to us right now.
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 05 Mar 2008 22:45:28 +0100
++
++samba (2:3.0.31-1) unstable; urgency=medium
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 12 Jul 2008 16:57:09 +0200
++
++samba (2:3.0.30-4) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Rename libcupsys2-dev to libcups2-dev in build dependencies
++ * Localize SWAT in German. Closes: #487681
++
++ [ Jelmer Vernooij ]
++ * Fix bashism in smbtar. (Closes: #486056)
++
++ [ Jamie Strandboge ]
++ * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly
++ calculate buffer sizes. This bug was introduced in the fix for
++ CVE-2008-1105. Closes: #488688
++
++ [ Debconf translations ]
++ * Romanian updated. Closes: #488709.
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 06 Jul 2008 11:43:53 +0200
++
++samba (2:3.0.30-3) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * add a soft dependency on slapd in init script to allow
++ proper operation when dependency-based boot sequence is enabled.
++ Thanks to Petter Reinholdtsen for reporting and providing a patch
++ Closes: #478800
++
++ [ Steve Langasek ]
++ * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups
++ server when we know that no printers are configured. Closes: #479512.
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 10 Jun 2008 21:03:51 +0200
++
++samba (2:3.0.30-2) unstable; urgency=high
++
++ * Brown paper bag releae with epoch increased after yet another
++ accidental upload of 3.2.0 to unstable. Sigh and apologies to
++ autobuilders.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 31 May 2008 12:08:50 +0200
++
++samba (1:3.0.30-1) unstable; urgency=high
++
++ * New upstream release: fix a heap overflow when parsing SMB responses in
++ client code. (CVE-2008-1105). Closes: #483410
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 28 May 2008 22:38:44 +0200
++
++samba (1:3.0.29-1) unstable; urgency=low
++
++ * New upstream release
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 22 May 2008 07:31:55 +0200
++
++samba (1:3.0.28a-3) unstable; urgency=low
++
++ * The "bug hunting at SambaXP" release
++ * Drop "invalid users = root" from the default smb.conf file
++ as it differs from upstream's behaviour and upstream is fairly
++ noisy about this choice of ours. Closes: #462046
++ * Drop commented "guest account = nobody". This is already upstream's
++ default
++ * Remove versioned Build-Depends when satisfied in etch (actually all
++ versioning in Build-Depends)
++ * Remove Conflicts with non-existing packages
++ * Drop dpkg-dev and binutils from Build-Depends, since the versioned
++ build-dep is no longer needed and these are both Build-Essential
++ * Mini-policy for settings in smb.conf:
++ - don't explicitly set settings to their default value
++ - commented settings with the default value are commented with "#"
++ - commented settings with a non-default value are commented with ";"
++ * Apply this policy to "socket options". Closes: #476104
++ * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
++ libsmbclient.so.0 as upstream doesn't assign versions
++ * Add idmap_*(8) man pages (idea taken from SerNet packages)
++ * Create the entire set of directories needed by clients for
++ Point-and-Click printing (including old clients!) in
++ /var/lib/samba/printers (idea taken from SerNet packages)
++ * Update copyright and README.debian information for current and past
++ maintainers. Remove redundant mention of Tridge (the copyright is enough)
++ * Add doc-base files for samba-doc-pdf. Closes: #451685
++ * Kurdish debconf translation. Closes: #480151
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 16 Apr 2008 23:14:46 +0200
++
++samba (1:3.0.28a-2) unstable; urgency=low
++
++ [ Peter Eisentraut ]
++ * Removed myself from Uploaders
++
++ [ Steve Langasek ]
++ * debian/patches/manpage-encoding.patch: fix up the manpage synopses to
++ not use embedded iso8859-1 non-break spaces, there is a roff escape
++ sequence that we should use instead. Closes: #470844.
++
++ [ Christian Perrier ]
++ * Reupload with an epoch to supersede an accidental upload of 3.2.0
++ in unstable
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 05 Apr 2008 11:59:23 +0200
++
++samba (3.0.28a-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream release. This fixes the following Debian bugs:
++ - Prevent nmbd from shutting down when no network
++ interfaces can be located. Closes: #433449
++ * Debian patches dropped as applied upstream:
++ - make-distclean.patch
++ - linux-cifs-user-perms.patch
++ - cifs-umount-same-user.patch
++ - get_global_sam_sid-non-root.patch
++ - chgpasswd.patch
++ - cups.patch
++ * Fix doc-base section from Apps/Net to Network
++ * Fix copyright in debian/copyright
++ * Updated Standards-Version to 3.7.3 (no changes needed)
++ * [Lintian] No longer use -1 revision for the libacl-dev build
++ dependency
++
++ [ Steve Langasek ]
++ * Merge smb.conf changes from Ubuntu:
++ - correct an inconsistency inthe winbind enum comment
++ - correct default and example settings to use the canonical names for all
++ options, rather than historical synonyms
++ - clarify the comment for 'max log size'.
++ Thanks to Chuck Short and Richard Laager.
++ * Add an additional sed command to samba-common.postinst to cleverly
++ pick up any shares that have been appended to the default smb.conf
++ and exclude them from the ucf diff.
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 14 Mar 2008 21:28:16 +0100
++
++samba (3.0.28-4) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Brown paper bag: fix samba-common.files to list all of the smb.conf
++ templates, not just the current one. Closes: #470138.
++ * Drop debian/patches/gcc42-arm-workaround.patch, which should have been
++ dropped in the previous upload
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 09 Mar 2008 04:09:26 -0700
++
++samba (3.0.28-3) unstable; urgency=low
++
++ * Drop the arm optimization workaround, as the compiler is now reported
++ to be fixed.
++ * Add missing eventlogadm(8) manpage.
++ * Refresh the list of Linux architectures from type-handling, to pick up
++ libacl-dev on armel. Closes: #465121.
++ * Convert handling of smb.conf to use ucf, so that we can sanely manage
++ syntax changes going forward.
++ * In the process, fix the dhcp handling to allow proper reconfiguration
++ via debconf.
++
++ [ Debconf translations ]
++ * Indonesian added. Closes: #469976
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 08 Mar 2008 17:11:16 -0800
++
++samba (3.0.28-2) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Drop some further code in samba-common.postinst that's specific to
++ pre-3.0 upgrades.
++ * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script,
++ so we can use bash array variables and cope with arguments containing
++ embedded spaces (such as share names). Thanks to Julian Gilbey
++ <jdg@debian.org> for the patch. Closes: #457105.
++ * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler
++ problem by building rpc_parse/parse_prs.o with -O0 on this architecture.
++ Thanks to Martin Michlmayr for helping to pin down the problem file.
++ Closes: #445566.
++ * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is
++ a closer approximation of the semantics with cifs.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 05 Jan 2008 09:46:06 +0100
++
++samba (3.0.28-1) unstable; urgency=high
++
++ * New upstream release. Security fix
++ * Fix a remote code execution vulnerability when running as a domain
++ logon server (PDC or BDC). (CVE-2007-6015)
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 11 Dec 2007 00:12:11 +0530
++
++samba (3.0.27a-2) unstable; urgency=low
++
++ * debian/patches/disable-weak-auth.patch: disable plaintext authentication
++ on the client, and lanman authentication on both client and server, by
++ default since these are only needed for Win9x or Samba with encrypted
++ passwords disabled and are potential password attack vectors. This
++ change is backported from Samba 3.2. LP: #163194.
++ * Don't build the userspace tools for the deprecated smbfs kernel driver
++ anymore; instead, use a shell wrapper around mount.cifs that translates
++ option names between the smbfs and cifs drivers.
++ Closes: #169624, #256637, #265468, #289179, #305210, #410075;
++ LP: #29413
++ * debian/panic-action: detect when we're on an Ubuntu system and direct bug
++ reporters to Launchpad instead of to the Debian BTS. Closes: #452940.
++ * debian/samba.init: call log_progress_msg separately for each daemon on
++ stop rather than passing a second arg to log_daemon_msg, for greater
++ compatibility with both Debian and Ubuntu LSB initscript implementations.
++ Closes: #453350.
++ * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of
++ recommends/suggests which is now implemented correctly in apt.
++ Closes: #453144.
++ * Get rid of the build-dependency on type-handling:
++ - add a new target, "update-archs", to be invoked by hand to refresh
++ the list of known Linux architectures for the libacl1-dev
++ build-dep; this avoids the clean target making changes to
++ debian/control
++ - rework the sed line so that it works in-place on debian/control,
++ so we can get rid of debian/control.in as well and just update
++ debian/control directly
++ Closes: #340570.
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 04 Dec 2007 18:35:29 -0800
++
++samba (3.0.27a-1) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * New upstream release
++ - fix regression with smbfs clients, introduced by the security fix in
++ 3.0.27. Closes: #451839.
++ - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream.
++ * Drop the deprecated "printer admin" example from the default smb.conf.
++ Closes: #451273.
++ * Add a *new* debian/patches/cups.patch to *enable* cups as the default
++ printing system, because since the original introduction of this patch
++ in Debian there was a regression upstream that caused cups to never be
++ selected as the default print system.
++ * Set the default value for the workgroup question to "WORKGROUP" in
++ samba-common.templates, not just in the template smb.conf, so that the
++ debconf question comes out right every time; and always treat this
++ as a high-priority debconf question instead of selecting the
++ priority based on whether there's an existing value, since there's
++ now *always* an existing value but the value doesn't tell us
++ anything meaningful about the user's preference. Closes: #451271.
++ * Drop some code from samba.postinst that only applies to upgrades from
++ pre-3.0 (i.e., pre-sarge) packages
++
++ [ Christian Perrier ]
++ * Update the "built by" part of README.debian
++ * Remove the very outdated parts of README.debian
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 23 Nov 2007 13:04:52 -0800
++
++samba (3.0.27-1) unstable; urgency=low
++
++ * New upstream version
++ - fixes a remote code execution vulnerability when running nmbd as a
++ WINS server. (CVE-2007-5398; closes: #451385)
++ - fixes a buffer overflow in nmbd when running as a domain controller
++ during processing of GETDC logon server requests. (CVE-2007-4572)
++
++ [ Steve Langasek ]
++ * fhs.patch: net usershares should also be stored under /var/lib, not under
++ /var/run. No transition handling in maintainer scripts, since this
++ feature is not activated by default.
++ * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid()
++ from smbpasswd -L or pam_smbpass when running as non-root, to avoid a
++ foreseeable panic. Closes: #346547, #450738.
++ * usershare.patch: enable "user shares" by default in the server with a
++ default limit of 100, to support user shares on both upgrades and new
++ installs with no need to munge config files. Thanks to Mathias Gug
++ <mathiaz@ubuntu.com> for the patch. Closes: #443230.
++ * On Ubuntu, support autopopulating the sambashare group using the existing
++ members of the admin group; no equivalent handling is done on Debian,
++ because there doesn't seem to be an appropriate template group we can use
++ that wouldn't be considered a privilege escalation for those users.
++ * Update Samba to explicitly use the C locale when doing password changes,
++ to account for Linux-PAM's recently adopted i18n support.
++ Closes: #451272.
++ * Enforce creation of the pid directory (/var/run/samba) in the samba
++ init script, for compatibility with systems that use a tmpfs for
++ /var/run. Closes: #451270.
++ * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd
++ as the default printing system, as CUPS is now the dominant/default
++ printing system for Linux.
++
++ [ Debconf translations ]
++ * Hebrew added. Closes: #444054
++
++ [ Christian Perrier ]
++ * Split fhs.patch into 3 separate patches to make upstream integration
++ easier:
++ - fhs-newpaths.patch: introduce new paths
++ - fhs-filespaths.patch: assign files to new paths
++ - fhs-assignpaths.patch: assign paths to FHS-compatible locations
++ * Compile with DNS update support. Thanks to Matthias Gug for
++ reporting and contributions from Launchpad's #156686
++ Closes: #449422
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 15 Nov 2007 11:46:17 -0800
++
++samba (3.2.0~pre1-1) experimental; urgency=low
++
++ * New upstream (pre-)release
++
++ [ Steve Langasek ]
++ * fhs.patch: net usershares should also be stored under /var/lib, not under
++ /var/run. No transition handling in maintainer scripts, since this
++ feature is not activated by default.
++ * Update smbstatus-locking.patch to use db_open() instead of
++ tdb_open(), per upstream recommendation.
++ * Use talloc_strdup() and talloc_asprintf() instead of static strings in
++ data_path(), state_path(), and cache_path(), as suggested by Volker
++ Lendecke.
++
++ [ Debconf translations ]
++ * Hebrew added. Closes: #444054
++
++ [ Christian Perrier ]
++ * Split fhs.patch into 4 separate patches to make upstream integration
++ easier:
++ - fhs-newpaths.patch: introduce new paths
++ - fhs-filespaths.patch: assign files to new paths
++ - fhs-filespaths-debatable.patch: assign files to new paths (part that
++ seems more difficult to be integrated upstream)
++ - fhs-assignpaths.patch: assign paths to FHS-compatible locations
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 21 Oct 2007 09:14:42 +0200
++
++samba (3.0.26a-1) unstable; urgency=low
++
++ * New upstream release.
++ * Remove the samba-common/unsupported-passdb debconf template and
++ the associated code in samba-common.postinst, that deals with pre-etch
++ versions transition
++ * Remove the samba/tdbsam template and the remaining line referencing
++ it (for no need) in samba.postinst. That code was removed in 3.0.23c-2
++ and was dealing with pre-3.0 transitions.
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 16 Sep 2007 10:16:29 +0200
++
++samba (3.0.26-1) unstable; urgency=high
++
++ * New upstream release: security update for CVE-2007-4138:
++ incorrect primary group assignment for domain users using the rfc2307 or
++ sfu winbind nss info plugin.
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 11 Sep 2007 19:16:32 +0200
++
++samba (3.0.25c-1) unstable; urgency=low
++
++ [ Noèl Köthe ]
++ * new upstream released from 2007-08-20
++ - added smbfs deprecation information to help and manpage
++ Closes: #360384
++ - fixed winbind leaking file descriptors
++ Closes: #410663
++ - fixed smbpasswd fails with errorcode SUCCESS as normal user
++ Closes: #155345
++
++ [ Christian Perrier ]
++ * Drop the (upstream unmaintained) python bindings (python-samba package)
++ * swat: turn the dependency on samba-doc to a Recommends:
++ Thanks to Peter Eisentraut for dealing with that issue and bringing it
++ back. Closes: #391742
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 26 Aug 2007 14:57:16 +0200
++
++samba (3.0.25b-2) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Don't start nmbd if 'disable netbios' is set in the config.
++ Closes: #429429.
++ * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid,
++ set to those of the invoking user, when called as non-root.
++ Closes: #431661.
++ * Fix up fhs.patch for some new FHS regressions:
++ - make sure all references to winbindd_idmap.tdb look in /var/lib/samba
++ - make sure all references to winbindd_cache.tdb look in /var/cache/samba
++ - share_info.tdb belongs in /var/lib/samba; this is a regression
++ introduced in 3.0.23-1, so fix up this path on samba upgrade
++ - move the ADS "gpo" cache directory to /var/cache/samba
++ - move idmap_cache.tdb to /var/cache/samba, and fix up the path on
++ winbind upgrade
++ * linux-cifs-user-perms.patch: also support setting a default uid and gid
++ value when mount.cifs is called as non-root
++ * cifs-umount-trailing-slashes.patch: canonicalize mount point names when
++ umount.cifs is called, to avoid unnecessarily leaving entries behind in
++ /etc/mtab if invoked with a trailing slash in the mount point name
++ * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check
++ in umount.cifs assumed that errors would return a value > 0, when in fact
++ the return value on failure is -1. Correct this assumption, which was
++ allowing any user to unmount shares mounted by other users.
++ * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog()
++ and closelog(), since this will interfere with syslogging behavior
++ of the calling application. Closes: #434372.
++ * swat should depend only on inet-superserver, not update-inetd, per
++ Marco d'Itri.
++
++ [ Christian Perrier ]
++ * debian/panic-action: bail out if there's no "mail" command
++ Patch from the Ubuntu samba packagers.
++ * debian/smb.conf: use the comment from Ubuntu package for the "valid users"
++ setting of [homes] as a basis for ours. Ubuntu's wording is better.
++
++ [ Peter Eisentraut ]
++ * Don't ignore errors from make distclean, as per lintian check
++
++ [ Debconf translations ]
++ * Gujarati updated. Closes: #436215
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 17 Aug 2007 18:38:58 -0700
++
++samba (3.0.25b-1) unstable; urgency=low
++
++ * New upstream version
++ * Bugs fixed upstream:
++ - correct default mentioned for "store dos attribute" in smb.conf(5)
++ Closes: #367379
++ - fix typo in pdbedit.c. Closes: #421758
++ - fixed crashes in idmap_rid. Closes: #428411
++ - misleading documentation in smb.conf(5). Closes: #218477
++ - don't crash when no eventlog names are defined in smb.conf
++ Closes: #424683
++ - typography errors in manpages. Closes: #427865, #418811
++ - fix compilation and linking of pam_smbpass.so. Closes: #430755
++ * Drop patches that have been applied upstream:
++ - nmbd-signalling.patch
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 27 Jun 2007 15:12:13 +0200
++
++samba (3.0.25a-2) unstable; urgency=low
++
++ [ Debconf translations ]
++ * Danish updated. Closes: #426773
++
++ [ Christian Perrier ]
++ * Clean out some remaining cruft that is not deleted
++ by "make clean". Taken from Ubuntu patches.
++ * Add missing userspace patches to properly pass uid and gid with 2.6
++ kernels. See #408033 and upstream's #999 for rationale
++ * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue
++ is fixed in 2.4 and 2.6 kernels (2.6 kernels need
++ missing_userspace_bugzilla999.patch, though)
++ Closes: #408033
++ * Add the samba-common and winbind packages to samba-dbg to get
++ debugging symbols for winbindd, net, etc.
++ * Replace all occurrences of ${Source:Version} by ${$binary:Version} in
++ dependencies. All these were Arch:any depending on Arch:any (the only
++ Arch:any depending on Arch:all already used ${source:Version}
++
++ [ Steve Langasek ]
++ * Update samba.config to not override user preference on passdb.tdb
++ creation after initial configuration. Closes: #350926.
++ * Drop the last vestiges of the unified samba.patch; this reverts the
++ change for bug #112195 which it's been determined has no actual security
++ benefits, and drops the fix for bug #106976 which is superseded
++ upstream.
++
++ [ Debconf translations ]
++ * Vietnamese updated. Closes: #426979.
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 13 Jun 2007 15:47:06 +0200
++
++samba (3.0.25a-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream version
++ * Bugs fixed upstream:
++ - password expiration loog on samba domain controllers. Closes: #425083
++ - no more login on samba servers that are members of samba domains
++ Closes: #425680, #426002
++ - users no longer have access according to their secondary groups
++ on shares with "force group". Closes: #424629
++ * Debian packaging fixes:
++ - Enforce building with "--with-ads" and therefore fail
++ when the build can't be done with kerberos support.
++ Closes: #424637
++ - debian/control: wrap long lines in packages' descriptions
++ - uncomment out use of type-handling in the clean target, because
++ type-handling has been fixed to support the new /usr/share/dpkg/ostable
++ - avoid installing extra COPYING files in /usr/share/doc/* (one was
++ installed along with the pcap2nbench example)
++ * Merge Ubuntu changes:
++ - use of PIDDIR instead of hardcoding it in samba.init and winbind.init
++ * Patches to upstream source:
++ - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory
++ instead of the lock directory. Thanks to C. K. Jester-Young for the
++ patch. Closes: #425640
++
++ [ Steve Langasek ]
++ * swat and samba depend on update-inetd instead of on netbase; swat also
++ depends on "openbsd-inetd | inet-superserver", for samba this is only a
++ Suggests.
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 27 May 2007 09:30:02 +0200
++
++samba (3.0.25-1) unstable; urgency=high
++
++ * New upstream version including security fixes
++ * Bugs fixed upstream:
++ - nmbd no longer segfaults on bad interface line
++ Closes: #265577, #386922, #359155, #366800
++ - documentation issues about displaycharset. Closes: #350790
++ - documentation makes it clear that case options such as
++ "default case" can only be set on a per-share basis.
++ Closes: #231229
++ - all occurrences of "encypt" fixed in smb.conf(5)
++ Closes: #408507
++ - two typos on "account" fixed in source/passdb/pdb_ldap.c and
++ source/utils/pdbedit.c. Closes: #402392
++ - no longer panic when using the (deprecated) "only user" option
++ in user level security. Closes: #388282
++ - CVE-2007-2444 (User privilege elevation because of a local SID/Name
++ translation bug)
++ - CVE-2007-2446 (Multiple heap overflows allow remote code execution)
++ - CVE-2007-2447 (Unescaped user input parameters are passed as
++ arguments to /bin/sh allowing for remote command
++ execution)
++
++ [ Debconf translations ]
++ * Marathi added. Closes: #416802
++ * Esperanto added. Closes: #417795.
++ * Basque updated. Closes: #418196.
++ * Wolof updated. Closes: #421636
++
++ [ Christian Perrier ]
++ * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba
++ before running invoke-rc.d. Closes: #414841
++
++ [ Steve Langasek ]
++ * Comment out use of type-handling in the clean target, because
++ type-handling is currently broken in unstable and clean shouldn't be
++ editing debian/control anyway.
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 14 May 2007 10:30:15 +0200
++
++samba (3.0.24-6) unstable; urgency=high
++
++ * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug
++ is still present :/ Fix a missing ] in the regexp for passdb backend
++ checking, really-closes: #415725.
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 24 Mar 2007 03:32:46 -0700
++
++samba (3.0.24-5) unstable; urgency=high
++
++ * The "see what you get for trusting the quality of my packages,
++ release team? Release team, please unblock this package" release.
++ * High-urgency brown-paper-upload for etch-targetted fix for
++ regression introduced in the last version
++
++ [ Steve Langasek ]
++ * Fixed the regexp used for matching broken passdb backend settings,
++ since we were getting false positives on *all* values. :/ The
++ correct match should be: one or more non-space, non-comma
++ characters, followed by a space or a comma, followed by zero or more
++ spaces, followed by one or more non-space characters. Closes: #415725.
++
++ [ Debconf translations ]
++ * Nepali
++ * Korean; closes: #414883.
++ * Russian
++ * Arabic
++ * Portuguese
++ * Greek. Closes: #415122
++ * Norwegian Nynorsk added.
++ * Marathi added. Closes: #416802
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 21 Mar 2007 13:49:46 -0700
++
++samba (3.0.24-4) unstable; urgency=medium
++
++ [ Steve Langasek ]
++ * Documentation fix for a problem affecting upgrades from sarge: if
++ passdb backend is still a comma- or space-separated list after any
++ attempts at automatic fix-ups, throw a debconf error notifying the
++ user that they'll need to fix this manually. Closes: #408981.
++
++ [ Debconf translations ]
++ * French
++ * Spanish
++ * Galician; closes: #414605.
++ * Swedish; closes: #414610.
++ * Brazilian Portuguese; closes: #414603.
++ * German; closes: #414630.
++ * Norwegian Bokmål; closes: #414619.
++ * Bulgarian; closes: #414624.
++ * Romanian; closes: #414629.
++ * Tagalog; closes: #414637.
++ * Khmer; closes: #381833.
++ * Thai; closes: #414664.
++ * Slovak; closes: #414665.
++ * Slovenian
++ * Simplified Chinese; closes: #414671.
++ * Japanese; closes: #414673.
++ * Hungarian; closes: #414677.
++ * Dzongkha; closes: #414680.
++ * Estonian; closes: #414679.
++ * Catalan
++ * Malayalam; closes: #414728
++ * Traditional Chinese; closes: #414730
++ * Turkish
++ * Italian; closes: #414708
++ * Finnish; closes: #414736
++ * Dutch; closes: #414741
++ * Albanian; closes: #414778.
++ * Czech; closes: #414793.
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 13 Mar 2007 16:29:21 -0700
++
++samba (3.0.24-3) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Merge some Ubuntu changes:
++ - do not expose the Samba version anymore
++ - default workgroup set to WORKGROUP (default workgroup of
++ Windows workstations)
++ * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch
++ Closes: #394830
++ * Add commented "winbind enum*" settings in smb.conf
++ This will point users to these important settings which changed
++ their default behaviour between sarge and etch. Closes: #368251
++
++ [ Steve Langasek ]
++ * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first
++ time the script is called if the dhcp client was already running at
++ the time of install, and manually reload samba to get the updated
++ config files read. Thanks to Bas Zoetekouw for the patch.
++ Closes: #407408.
++ * While we're at it, use atomic replace for /etc/samba/dhcp.conf just
++ in case someone else reloads samba while the script is running. Low
++ impact, low-risk change.
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 11 Mar 2007 23:34:10 -0700
++
++samba (3.0.24-2) unstable; urgency=low
++
++ * Re-upload with a proper .orig.tar.gz.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 5 Feb 2007 19:55:34 -0800
++
++samba (3.0.24-1) unstable; urgency=high
++
++ * New upstream release, security update
++ * Fixes for the following security advisories:
++ - Directly affecting Debian:
++ - CVE-2007-0452 (Potential Denial of Service bug in smbd)
++ - Not affecting Debian:
++ - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind
++ NSS library on Solaris)
++ - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin)
++ * Correct paths for the documentation pointers in the default smb.conf
++ file. Thanks to Ted Percival for his care reporting this. Closes: #408898
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 5 Feb 2007 05:27:07 +0100
++
++samba (3.0.23d-4) unstable; urgency=low
++
++ * Debconf translation updates:
++ - Slovenian added.
++
++ -- Christian Perrier <bubulle@debian.org> Wed, 3 Jan 2007 08:43:50 +0100
++
++samba (3.0.23d-3) unstable; urgency=low
++
++ * Debconf translation updates:
++ - Malayalam added. Closes: #403107
++ - Tamil added. Closes: #403353
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 1 Jan 2007 10:17:18 +0100
++
++samba (3.0.23d-2) unstable; urgency=low
++
++ * Build-Conflicts: libfam-dev to avoid problems accessing shares
++ when using GAMIN. Closes: #400617
++ * Lintian fixes:
++ - Run debconf-updatepo in the clean target to ensure up-to-date PO
++ and POT files
++ - debian/patches/no_unbreakable_spaces_in_man.patch:
++ Replace all non-breakable spaces by regular spaces in man pages.
++ They are encoded in ISO-8859-1 which is not recommended in man pages.
++ This should be submitted upstream.
++ - reformat too long lines in package description
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 3 Dec 2006 09:39:29 +0100
++
++samba (3.0.23d-1) unstable; urgency=low
++
++ * new upstream release (2006-11-15)
++
++ [ Noèl Köthe ]
++ * updated documentation.patch for 3.0.23d
++ * updated non-linux-ports.patch for 3.0.23d
++ * updated adapt_machine_creation_script.patch for 3.0.23d
++ * updated autoconf.patch for 3.0.23d
++
++ [ Debconf translations ]
++ * Added Bosnian. Closes: #396634
++ * Added Bulgarian. Closes: #397773
++
++ -- Noèl Köthe <noel@debian.org> Thu, 16 Nov 2006 13:55:26 +0100
++
++samba (3.0.23c-4) unstable; urgency=low
++
++ [ Debconf translations ]
++ * Added Greek.
++ * Added Gujarati. Closes: #394430
++ * Added Korean. Closes: #394509
++ * Added Nepali.
++ * Updated Czech (typo fixed).
++ * Added Wolof. Closes: #396079
++
++ -- Christian Perrier <bubulle@debian.org> Sun, 5 Nov 2006 09:42:40 +0100
++
++samba (3.0.23c-3) unstable; urgency=low
++
++ [ Debconf translations ]
++ * Updated Catalan; thanks to Guillem Jover for his help
++ * Updated Russian.
++ * Updated Spanish. Add a missing word and correct the copyright header
++ * Updated Vietnamese. Closes: #394164
++ * Added Albanian. Closes: #393777
++ * Added Chinese (Traditional).
++ * Added Thai.
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 21 Oct 2006 10:44:11 +0200
++
++samba (3.0.23c-2) unstable; urgency=low
++
++ [ Debconf translations ]
++ * Updated Swedish. Closes: #386510.
++ * Updated Japanese. Closes: #386534.
++ * Updated Italian. Closes: #386691.
++ * Updated Romanian. Closes: #388254.
++ * Updated German. Closes: #389072.
++ * Updated Brazilian Portuguese. Closes: #389097.
++ * Updated Basque. Closes: #389722.
++ * Updated Turkish. Closes: #390887
++ * Updated Danish. Closes: #390878
++ * Updated German. Closes: #390813
++ * Updated Simplified Chinese. Closes: #390959
++ * Updated Arabic.
++ * Updated Spanish. Closes: #391735
++ * Updated Dutch. Closes: #392082
++ * Added Slovak. Closes: #386847.
++ * Added Finnish. Closes: #390150.
++ * Added Estonian. Closes: #391102.
++ * Added Norwegian Bokmål. Closes: #391692
++ * Added Hungarian. Closes: #391746
++
++ [ Steve Langasek ]
++ * Change the Maintainer field at last to the mailing list... gives
++ our spam rules some testing, in response to popular demand :)
++ * Check for update-inetd on purge before trying to invoke it;
++ closes: #388606.
++
++ [ Peter Eisentraut ]
++ * Make swat binNMU-safe by using ${source:Version} for dependency on
++ samba-doc
++ * Make samba-common owner of /var/{cache,log,run}/samba, let samba and
++ winbind only delete files they know they're exclusive owners of.
++ Closes: #370718.
++ * Use python-central to manage installation of python-samba.
++ Closes: #386499. (patch by Patrick Winnertz)
++ * Use upstream makefile to install Python module.
++ * Build-Depend on python-dev instead of python-all-dev.
++ * Removed old upgrade support.
++ * Remove possibly leftover comma from "passdb backend" setting in
++ smb.conf on upgrade. Closes: ##383307.
++ * Added libpam-smbpass logcheck file by martin f krafft.
++ Closes: #391487, #391916.
++
++ [ Christian Perrier ]
++ * Add LSB info to the init script
++
++ -- Christian Perrier <bubulle@debian.org> Thu, 12 Oct 2006 18:31:46 +0200
++
++samba (3.0.23c-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * New upstream version
++ * Split out samba/run_mode with "__Choices".
++
++ [ Noèl Köthe ]
++ * corrected samba override disparity:
++ samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra.
++
++ [ Debconf translations ]
++ * Updated Galician. Closes: #383001.
++ * Updated Danish. Closes: #383025.
++ * Added Tagalog. Closes: #383039, #383252.
++ * Updated Khmer.
++ * Updated Arabic.
++ * Updated Dzongkha. Closes: #383125.
++ * Updated Vietnamese. Closes: #383126.
++ * Updated Czech. Closes: #384760.
++
++ [ Peter Eisentraut ]
++ * Preseed configure result for method to detect interfaces in
++ debian/config.cache; the test might otherwise fail if there are no
++ interfaces configured at build time. Closes: #382429.
++ * Refined panic-action script text. Closes: #382500.
++
++ -- Noèl Köthe <noel@debian.org> Mon, 04 Sep 2006 12:10:28 +0200
++
++samba (3.0.23b-2) unstable; urgency=low
++
++ [ Debconf translations ]
++ * Updated Romanian. Closes: #382358
++ * Updated Dzongkha. Closes: #382448, #382948
++ * Updated Basque. Closes: #382456
++ * Added Simplified Chinese. Closes: #382489
++
++ [ Peter Eisentraut ]
++ * Remove no longer functioning "guest" value from "passdb backend"
++ setting in smb.conf on upgrade. Closes: #382296
++
++ [ Steve Langasek ]
++ * Drop code and debconf questions specific to upgrades from samba <= 2.2.
++ * Reword some debconf translations as discussed on the list.
++ * Rerun debconf-updatepo.
++ * Switch debian/ca.po to UTF-8.
++ * Restore some reverted strings for Galician, Czech, Brazilian Portuguese,
++ Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese.
++ * Update translations for Brazilian Portuguese, Spanish, French, Italian,
++ Catalan, and Portuguese.
++
++ -- Peter Eisentraut <petere@debian.org> Mon, 14 Aug 2006 19:04:31 +0200
++
++samba (3.0.23b-1) unstable; urgency=low
++
++ * New upstream release
++
++ [ Debconf translations ]
++ * Updated Galician. Closes: #381988
++
++ -- Noèl Köthe <noel@debian.org> Tue, 08 Aug 2006 22:28:00 +0200
++
++samba (3.0.23a-1) unstable; urgency=medium
++
++ * New upstream release
++
++ * Fixes the following Debian bugs:
++ - winbind: panic()s when started outside of a domain context.
++ Closes: #337070
++ - Make smbclient -L use RPC to list shares, fall back to RAP.
++ Closes: #168732
++ - Potential hang in nmbd. Upstream bug #3779. Closes: #367472
++ - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780).
++ Closes: #367507
++ - Erroneous permissions checks after 3.0.10 -> 3.0.14a
++ (upstream #2591). Closes: #307626
++ - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070
++ - ImportError exception raised when trying to import samba.smb
++ (upstream #3567). Closes: #350050
++ - Changed references from pam_pwdb to pam_unix (upstream #3225).
++ Closes: #206672
++ - SWAT segfault (upstream #3702). Closes: #363523
++
++ [ Adam Conrad ]
++ * Fix typo in smb.conf that causes all samba apps to whine.
++ Closes: #369782
++ * Add myself to Uploaders, on the off chance that I might upload.
++
++ [ Debconf translations ]
++ * Add Galician translation of debconf templates. Closes: #361204, #369403
++ * Add Basque translation of debconf templates. Closes: #375104
++ * Add Romanian translation of debconf templates. Closes: #379246
++ * Add Khmer translation of debconf templates. Closes: #381833
++ * Add Dzongkha translation of debconf templates.
++ * Updated Russian. Closes: #369375
++ * Updated Czech. Closes: #369408
++ * Updated Japanese. Closes: #369457
++ * Updated Italian. Closes: #369587
++ * Updated Swedish. Closes: #369730
++ * Updated Dutch. Closes: #376515
++ * Updated Vietnamese. Closes: #381557
++ * Updated French.
++ * Updated Brazilian.
++ * Updated Portuguese. Closes: #372632
++ * Updated Arabic.
++
++ [ Christian Perrier ]
++ * Add dependency on procps for samba, as ps is used in init scripts.
++ Thanks to Bastian Blank for reporting. Closes: #365618
++ * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's
++ Reference
++ * Add support for /etc/default/winbind. Closes: #262313, #374411
++ Thanks to Guido Guenther for the old patch and to Jérôme Warnier
++ for reminding us about it.
++ * Compile with --with-cifsmount which is now needed to properly compile
++ mount.cifs and umount.cifs. See samba bug #3799
++
++ [ Peter Eisentraut ]
++ * Use debian/compat instead of DH_COMPAT
++ * Updated Standards-Version to 3.7.2 (no changes needed)
++ * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the
++ required ldconfig calls appear in the maintainer scripts
++ * Adjusted debian/rules to get 3.0.23rc1 to build
++ * Updated to debhelper level 5
++ * Rearranged dh_strip calls so that build succeeds with
++ DEB_BUILD_OPTIONS=nostrip. Closes: #288995
++ * Create /var/spool/samba and use it as default printer spool.
++ Closes: #275241
++ * Made winbind init script more careful about returning proper exit code
++ * Added winbindd_priv group as owner of winbindd_privileged directory.
++ Closes: #307257
++ * Python transition preparations: renamed package to python-samba,
++ removed hardcoded references to Python version 2.3. Closes: #380939
++ * Removed unwanted swat debconf warning
++ * Put localized swat messages into /usr/share/samba, where swat looks for
++ them. Closes: #376991
++
++ -- Peter Eisentraut <petere@debian.org> Mon, 7 Aug 2006 23:00:49 +0200
++
++samba (3.0.22-1) unstable; urgency=medium
++
++ [ Steve Langasek ]
++ * New upstream release
++ - CAN-2006-1059: fixes an information leak in logfiles of systems using
++ winbind with log level >= 5.
++ * Fix a typo in the default smb.conf (closes: #354495).
++
++ [ Noèl Köthe ]
++ * replacing SMB with SMB/CIFS in the descriptions like
++ named on the samba.org webpage. Closes: #356335
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 12 Mar 2006 22:40:28 +0100
++
++samba (3.0.21c-1) unstable; urgency=low
++
++ * New upstream release
++ * add a few logon-related parameters as good and safe
++ examples for *DC-type settings. Closes: #349051
++ * add an example "add user script". Closes: #349050
++ * drop outdated information from the smbfs package description
++ Closes: #352828
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 25 Feb 2006 11:58:45 +0100
++
++samba (3.0.21b-1) unstable; urgency=low
++
++ * The "Tridge" release: celebrates the 2005 Free Software Award winner
++
++ * New upstream release
++
++ * Upstream bugs fixed by the new upstream release:
++ - Support changing expired passwords in
++ pam_winbindd. Closes: #258302
++ - vfs_full_audit fixes for multiple connections. Closes: #348419
++ - crashes of smbd in security=server mode
++ Closes: #346045, #346069, #350598, #351448
++
++ [ Peter Eisentraut ]
++ * Put correct paths for Debian installations into the man pages, and
++ remove outdated swat setup instructions therein. Closes: #321005
++ * Fix lintian overrides and install them into the right packages.
++ * Remove swat inetd registration in remove, not purge. Closes: #313214
++ * Add findsmb script. Closes: #231806
++ * Fix sonames of libnss_win{bind,s}.so. Closes: #333290
++ * Remove autoconf build dependency.
++ * Remove remnants of old patch system.
++ * Install smbumount setgid root. Closes: #253437
++ * Add watch file.
++ * Activate kernel oplocks. Closes: #218511
++ * Disable PIE compilation. Closes: #346416
++
++ [ Christian Perrier ]
++ * activate building of idmap_rid. Closes: #284681.
++ Thanks to Ubuntu patches
++ * activate building of idmap_ad. Closes: #341814
++ * modify the long description of the libsmbclient-dev package to
++ avoid repeating the long description. Thanks, linda.
++
++ [ Steve Langasek ]
++ * Also enable setresuid()/setresgid() on alpha and sparc now that support
++ for Linux 2.2 is dropped.
++
++ -- Christian Perrier <bubulle@debian.org> Mon, 6 Feb 2006 07:02:20 +0100
++
++samba (3.0.21a-4) unstable; urgency=low
++
++ [ Peter Eisentraut ]
++ * Add umount.cifs. Closes: #340967
++ * Really make mount.cifs and umount.cifs suid root. Closes: #340966
++
++ [ Christian Perrier ]
++ * Add "bind interfaces only" and "interfaces" options (commented)
++ to the default smb.conf file. Closes: #349043
++
++ [ Steve Langasek ]
++ * Add missing changes to source/include/config.h.in into the
++ autoconf.patch, so that samba looks for files in /var/lib/samba like it's
++ supposed to instead of in /var/run/samba! Closes: #349372, #349464.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 23 Jan 2006 00:59:20 -0800
++
++samba (3.0.21a-3) unstable; urgency=low
++
++ * Add Build-Depends on quilt (>= 0.40 as we use quilt.make)
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 21 Jan 2006 23:02:32 +0100
++
++samba (3.0.21a-2) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Switch to quilt for patches management. Refresh all patches so
++ that they apply cleanly. Closes: #345557
++ * debian/patches/adapt_machine_creation_script.patch:
++ - adapt example machine creation script to Debian. Closes: #346234
++ * winbind.dirs:
++ - added /var/run/samba. Closes: #347585
++
++ [ Peter Eisentraut ]
++ * swat.links:
++ - file added. Closes: #346001
++
++ [ Noèl Köthe ]
++ * fixed typo in panic-script. Closes: #348410
++
++ [ Steve Langasek ]
++ * debian/patches/autoconf.patch:
++ - move changes to autogenerated files into their own patch now that we've
++ lost the script that was calling autogen.sh for us; this also helps
++ make debian/rules clean just a little bit cleaner.
++ * debian/patches/fhs.patch:
++ - fix new references to registry.tdb (closes: #348874).
++ - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba
++ where they belong
++
++ -- Christian Perrier <bubulle@debian.org> Fri, 20 Jan 2006 14:20:35 +0100
++
++samba (3.0.21a-1) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * *Really* make samba-doc suggest samba-doc-pdf. This change finally
++ did not make it in the previous release.
++
++ [ Noèl Köthe ]
++ * new upstream release 3.0.21a
++ - removed smbsh.1 from debian/rules
++ - added new smbclient programm smbget (with conflict/replace
++ to existing Debian smbget package)
++ - added libsmbclient.7 to libsmbclient package
++ - added umount.cifs.8 to smbfs package
++ - added pam_winbind.7 to winbind package
++ - added new /usr/bin/eventlogadm to samba package which is
++ documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt
++ - fixed "cd command fails in smbclient". Closes: #307535
++ - fixed "file descriptor leak". Closes: #339564
++ - fixed "smbclient(1) doesn't list same options as
++ smbclient usage statement". Closes: #154184
++ - fixed "typo in smbmount.8". Closes: #260673
++ - fixed "smbmount manual page doesn't have a link to
++ smbumount". Closes: #297535
++ - fixed "smb.conf man page references non-existent
++ BROWSING.txt file". Closes: #316458
++ - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480
++ - fixed "fails to manage groups containing spaces". Closes: #299592
++ - corrected nonpic-libsmbclient.patch to apply
++ - corrected fhs.patch to apply
++ * added myself to Uploaders
++ * Rewording of the panic action script. Closes: #335051
++ * added missing swat translation to swat package
++
++ -- Noèl Köthe <noel@debian.org> Sun, 01 Jan 2006 12:45:33 +0100
++
++samba (3.0.20b-4) unstable; urgency=low
++
++ [ Christian Perrier ]
++ * Remove the smbldap-tools-* directory from the examples of samba-doc
++ as these tools exist as an independent package. Closes: #341934
++ * Swedish debconf translation update. Closes: #342022
++ * Preserve the local admin settings for run_mode in /etc/default/samba
++ when upgrading. Closes: #234038, #267988, #269735
++ * Winbind also must depend on lsb-base. Closes: #343379
++ * Enable swat in inetd when installing it and remove it when
++ uninstalling. Closes: #87905, #230936, #268429
++
++ [ Peter Eisentraut ]
++ * Added separate samba-doc-pdf package, suggested by samba-doc.
++ Closes: #281971
++ * Removed duplicate documentation in swat package, symlinked to
++ samba-doc; swat now depends on samba-doc. Closes: #233447
++
++ -- Christian Perrier <bubulle@debian.org> Tue, 20 Dec 2005 17:08:20 +0100
++
++samba (3.0.20b-3) unstable; urgency=low
++
++ [ Steve Langasek ]
++ * Drop the FHS transition code from the samba postinst, since it's
++ not needed for upgrades from sarge (and most of it not for upgrades
++ from woody).
++
++ [ Noèl Köthe ]
++ * libpam-smbpass dependency on samba-common
++ Closes: #297923
++ * Updated swedish debconf translation. Closes: #335784
++ * Added Recommends: smbldap-tools. Closes: #227675
++
++ [ Peter Eisentraut ]
++ * Added doc-base support. Closes: #55580
++ * Fixed dh_installexamples call so the debian/*.examples files are
++ actually used.
++ * Patched libpam-smbpass README to refer to examples directory.
++ Closes: #215771
++
++ [ Christian Perrier ]
++ * Add a working passwd chat line to the default smb.conf file
++ Closes: #269746
++ * Add the profiles binary and man page to the shipped files. Closes: #225494
++ * Add a dependency on samba-common for winbind and force versions to match
++ Closes: #273007, #264855
++ * Add /var/log/samba to winbind directories. Closes: #340833
++ * Lintian cleaning:
++ - Add a few lintian overrides to avoid lintian complaining
++ for things done on purpose or just because it makes wrong assumptions
++ - Corrected FSF address in debian/copyright
++ - Make swat depend on netbase as it uses update-inetd in its postinst
++ script
++ - Correct shebang lines in config scripts
++ - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc
++ - Minor correction in libsmbclient-dev description to avoid strictly
++ repeating the short description in the long description
++ - Call confmodule in swat.postinst as this is the only way to guarantee
++ that the config script is run in all cases
++
++ -- Christian Perrier <bubulle@debian.org> Sat, 3 Dec 2005 07:30:40 +0100
++
++samba (3.0.20b-2) unstable; urgency=low
++
++ * Don't build with -gstabs any more; -g no longer gives a problematic
++ size hit, and -gstabs is no longer supported on ia64.
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 19 Oct 2005 19:02:44 -0700
++
++samba (3.0.20b-1) unstable; urgency=low
++
++ * Christian Perrier:
++ - Debconf translations:
++ - Added Vietnamese. Closes: #317876
++ - Updated German. Closes: #322907
++ * Steve Langasek:
++ - Use ${misc:Depends} in debian/control instead of depending on
++ debconf directly, allowing use of cdebconf as an alternative.
++ Closes: #332088.
++ * Noèl Köthe
++ - corrected libsmbclient priority to optional. Closes: #310045
++ - corrected the path of ServerType.html in smb.conf. Closes: #296500
++ - updated Standards-Version to 3.6.2 (no changes needed)
++ - added homepage to description
++ - switched init scripts (samba and winbind) to lsb-functions
++ (took patches from ubuntu)
++ - added Swedish. Closes: #331437
++ - removed outdated "guest" value in "passdb backend" in default smb.conf
++ Closes: #289519
++ - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8)
++ is; Replaces: all previous versions of samba. Closes: #253603
++ - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515
++ - support for Windows Vista. Closes: #323489
++ - Mac OS Tiger Problem fixed. Closes: #309836
++ - BUG 2688: re-implement support for the -P (--port) option.
++ Closes: #307746
++ - "man smb.conf" warnings fixed. Closes: #266320
++ - testprns removed by upstream so removed in samba.files
++ - corrected docs/*.pdf names (samba-doc.docs)
++ - corrected diagnosis.html path (samba.docs)
++ - removing patches which are included upstream:
++ dos7-xcopy-always-copies-files.patch
++ (* BUG 2622: Remove DPTR_MASK as it makes no sense.)
++ hide-special-file-fix.patch
++ (* Hide dot files and directory logic fixes.)
++ rap-printing-bigendian.patch
++ (* BUG 1998: Correct byte ordering bug when storing
++ 16-bit RAP print job ids.)
++ smbclient-vfat-loop.patch
++ smbclient-vfat-loop2.patch
++ (* BUG 2698: Fix infinite listing loop in smbclient
++ caused by an invalid character set conversion.)
++ - fixed the following patches which didn't applied cleanly
++ fhs.patch
++ non-linux-ports.patch
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 18 Oct 2005 19:02:21 -0700
++
++samba (3.0.14a-6) unstable; urgency=low
++
++ * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect
++ Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9;
++ add a versioned build-depend accordingly. Closes: #315955
++ * Switch to libreadline5.
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 1 Jul 2005 00:13:12 -0700
++
++samba (3.0.14a-5) unstable; urgency=low
++
++ * Fix libsmbclient.a to be built as non-PIC instead of PIC.
++ Closes: #279243.
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 8 Jun 2005 05:46:52 -0700
++
++samba (3.0.14a-4) unstable; urgency=high
++
++ * Last-minute upload for sarge, because I don't listen to anything
++ that RM guy says
++ * Patch smbmount to strip CAP_UNIX out of the capabilities passed to
++ the kernel when uid, gid, dmask, or fmask options have been
++ specified; this keeps the mount permissions from changing out from
++ under the user when upgrading to a server (or to a kernel) that
++ supports unix extensions. Closes: #310982.
++ * Second patch to smbclient search continuation logic, from upstream:
++ preserve the original UCS2 filename to guard against lossy
++ conversions, and break out if we find ourselves looping.
++ Closes: #311157.
++ * Upstream fix to make print job cancellations work on big-endian
++ systems when talking to RAP-style clients (i.e., smbclient).
++ Closes: #311213.
++ * Add build-dependency on libpopt-dev, so that we consistently use the
++ system popt lib instead of the bundled one.
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 2 Jun 2005 07:02:46 -0700
++
++samba (3.0.14a-3) unstable; urgency=high
++
++ * Urgency set to high for a bug that makes smbclient/libsmbclient
++ /almost/ mostly unusable
++ * Fix smbclient's search continuation logic so that it works correctly
++ against 2K servers offering VFAT-hosted shares; many thanks to
++ Jeremy Allison for the timely upstream fix. Closes: #309798.
++ * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
++ <andrelop@debian.org>. (closes: #308510)
++ * Add Russian debconf translation, thanks to Yuriy Talakan
++ <yt@amur.elektra.ru>. (closes: #310063)
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 26 May 2005 23:37:57 -0700
++
++samba (3.0.14a-2) unstable; urgency=low
++
++ * Point the sense of the file_is_special() check right way around;
++ thanks to Matthijs Mohlmann for catching this. Closes: #305747.
++ * debian/patches/dos7-xcopy-always-copies-files.patch:
++ Fix the MS-DOS 7 XCOPY copying files over and over bug
++ Closes: #309003
++ * Steve Langasek <vorlon@debian.org>:
++ - Add Christian Perrier to Uploaders:. Thanks, Christian :)
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 8 May 2005 04:43:21 -0700
++
++samba (3.0.14a-1) unstable; urgency=low
++
++ * New upstream version
++ - A more complete upstream fix for missing files in file listings,
++ should really give us working (closes: #302771); drop
++ xp-missing-files.patch, which has been superseded.
++ * Use the right path when removing mount.cifs binary in the clean
++ target. Closes: #303318.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 18 Apr 2005 03:22:29 -0700
++
++samba (3.0.11-1) unstable; urgency=high
++
++ * New upstream version
++ - Fixes duplicated entry in swat(8) manpage (closes: #292957).
++ - Fix queue handling so that processes serving print clients don't
++ spin off into infinity and clobber the system (closes: #274969).
++ - Make sure we use C-locale toupper/tolower functions for case
++ conversion, since Turkish pairing rules are incompatible
++ (closes: #286174).
++ * Fix logrotate script to exit true instead of false when nmbd.pid is
++ missing (closes: #287263).
++ * Added Portuguese debconf translation. Thanks to Miguel Figueiredo
++ <elmig@debianpt.org>. (closes: #286375)
++ * Added Italian debconf translation. Thanks to Luca Monducci
++ <luca.mo@tiscali.it>. (closes: #284125)
++ * Add support for building on the Debian BSD and Hurd ports; thanks to
++ Robert Millan for the patch. (closes: #266693)
++ * debian/patches/xp-missing-files.patch: import patch from upstream to
++ fix missing entries in directory listings when talking to WinXP
++ servers (closes: #297771).
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 23 Mar 2005 00:13:16 -0800
++
++samba (3.0.10-1) unstable; urgency=high
++
++ * New upstream release.
++ - CAN-2004-1154: integer overflow can lead to remote code execution
++ by authenticated users; closes: #286023.
++ * High-urgency upload for sarge-targetted RC bugfix.
++ * Sync the fhs.patch to samba 3.0.10.
++ * Install mount.cifs suid root, to make user mounts possible
++ (closes: #283819).
++ * debian/patches/cups.patch: Change the default printing system, so we
++ can compile in CUPS support without making it the default -- CUPS is
++ not a reasonable default on Debian, at least for sarge.
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 17 Dec 2004 11:56:01 -0800
++
++samba (3.0.9-1) unstable; urgency=low
++
++ * New upstream release
++ - Fixes Win9x printing; closes: #283530, #282571, #283818.
++ - Fixes a problem with setting dosmodes on filesystems without ACL
++ support; closes: #283661.
++ - Drop ldapsam_compat.patch, redundant now that a fix is integrated
++ upstream
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 2 Dec 2004 01:11:39 -0800
++
++samba (3.0.8-2) unstable; urgency=low
++
++ * Fix the module paths for python2.3-samba so that "import foo from samba"
++ works, and include the __init__.py glue; closes: #222867).
++ * Enable quota support; closes: #246839.
++ * Fix missing symbols in libsmbclient (and libnss_wins), and add
++ -Wl,-z,defs to the libsmbclient link options to prevent future
++ instances of undefined symbols (closes: #281181).
++ * Fix for the legacy ldapsam_compat backend; thanks to Fabien
++ Chevalier for the patch (closes: #274155).
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 15 Nov 2004 06:54:13 -0800
++
++samba (3.0.8-1) unstable; urgency=high
++
++ * New upstream package. Urgency set to "high" because of a potential
++ Denial of Service vulnerability in previous 3.0.x releases
++ (CAN-2004-0930). (Eloy)
++ * Introduce new -dbg package, so we can make better sense out of the
++ cleverly-supplied backtrace emails. (Vorlon)
++ * Applied patch from Luke Mewburn <luke@mewburn.net> to fix missing
++ lock_path() to state_path() change in the FHS patches. (Eloy)
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 8 Nov 2004 13:39:34 -0500
++
++samba (3.0.7-2) unstable; urgency=high
++
++ * High-urgency upload for sarge-targetted RC fixes.
++ * Use autogen.sh in unpatch-source as well as in patch-source, to get
++ rid of the autom4te.cache cruft.
++ * debian/patches/make-distclean.patch: add some missing files to the
++ distclean target in source/Makefile.in (mostly-fixes: #276203).
++ * Change compile-time default of 'use sendfile' to 'no', since the
++ current Samba implementation is broken (closes: #261917, #275741,
++ #270175).
++ * Add mount.cifs into the smbfs package; thanks to Igor Belyi for
++ showing us just how simple this patch should be. ;) Since cifs is
++ the preferred kernel driver in 2.6, bugs related to smbfs and 2.6
++ are considered closed unless someone can show that they exist with
++ the cifs driver as well (closes: #249890, #269443, #227791, #236869,
++ #260707, #261808, #270175).
++ * Fix FHS migration code so that it only affects upgrades from old
++ package versions, and doesn't cause us to mess with non-standard
++ directories that may have been re-added by the admin
++ (closes: #251858).
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 26 Oct 2004 01:35:23 -0700
++
++samba (3.0.7-1) unstable; urgency=high
++
++ * New upstream release. This release fixes two possible denial of
++ service conditions; one in nmbd and one in smbd. The CVE numbers
++ for these vulnerabilities are:
++
++ CAN-2004-0807 for the smbd DoS
++ CAN-2004-0808 for the nmbd DoS
++
++ Urgency is set to "high" because of these vulnerabilities; so this
++ new release propagates to testing ASAP.
++
++ Thanks to the Samba Team and the Debian Security Team for the
++ heads up.
++ * Remove post-3.0.6 patches that are now in 3.0.7.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 13 Sep 2004 00:53:38 -0400
++
++samba (3.0.6-4) unstable; urgency=low
++
++ * Update LDAP schema (closes: #269797).
++ * Applied a couple of upstream fixes that will be present in Samba 3.0.7.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 7 Sep 2004 15:28:42 -0400
++
++samba (3.0.6-3) unstable; urgency=low
++
++ * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704)
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 25 Aug 2004 01:58:37 -0400
++
++samba (3.0.6-2) unstable; urgency=low
++
++ * Added Danish debconf translation. Thanks to Claus Hindsgaul
++ <claus_h@image.dk>. (closes: #232884)
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Aug 2004 17:24:19 -0400
++
++samba (3.0.6-1) unstable; urgency=low
++
++ * New upstream version.
++ * Incorporate Turkish debconf translation; thanks to Recai Oktas
++ <roktas@omu.edu.tr>. (closes: #252031)
++ * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
++ <andrelop@debian.org>. (closes: #208113)
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Aug 2004 12:34:44 -0400
++
++samba (3.0.5-2) unstable; urgency=high
++
++ * Patches from Fabien Chevalier <fabien.chevalier@supelec.fr>
++ to fix:
++ + libnss_wins crashes other programs (closes: #252591)
++ + Can't list share files/dirs, but can acces deeper files/dirs
++ (closes: #264572)
++ + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871)
++ * Urgency "high" to make it into testing as soon as possible since
++ at least #265871 is pretty bad now that WinXP SP2 has been released.
++ Thanks for the help Fabien! Both Vorlon and I have been very busy
++ lately.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 18 Aug 2004 13:25:41 -0400
++
++samba (3.0.5-1) unstable; urgency=high
++
++ * New upstream version. Urgency "high" because of potential buffer
++ overflows. The security fixes are the only difference between
++ 3.0.4 and 3.0.5.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 22 Jul 2004 08:07:36 -0400
++
++samba (3.0.4-5) unstable; urgency=low
++
++ * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4),
++ not an unversioned libcupsys2-dev. (closes: #250523)
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 25 May 2004 07:43:54 -0400
++
++samba (3.0.4-4) unstable; urgency=low
++
++ * Rebuilt with libcupsys2-gnutls10 for unstable.
++ Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736
++ Closes: #250742, #250733
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 24 May 2004 22:32:52 -0400
++
++samba (3.0.4-3) unstable; urgency=low
++
++ * Color me stupid; I uploaded an experimental version to unstable.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 22 May 2004 00:40:58 -0400
++
++samba (3.0.4-1) unstable; urgency=low
++
++ Eloy:
++
++ * New upstream version.
++ Closes: #247640 (New upstream version available)
++ Closes: #238905 (Printing crash fix)
++ Closes: #247090 (panic in viewing printerqueue)
++
++ Vorlon:
++
++ * Incorporate Catalan debconf translations; thanks to
++ Aleix Badia i Bosch <abadia@ica.es> and the Debian L10n Catalan Team.
++ (closes: #236640)
++ * Incorporate Czech debconf translations; thanks to
++ Miroslav Kure <kurem@upcase.inf.upol.cz> (closes: #236274).
++ * Update libsmbclient shlibs, due to an incompatibility with older
++ versions that prevents gnome-vfs from working correctly
++ (closes: #245869).
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 21 May 2004 11:42:19 -0400
++
++samba (3.0.2a-1) unstable; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 24 Feb 2004 10:30:47 -0500
++
++samba (3.0.2-2) unstable; urgency=high
++
++ * Apply patch from Urban Widmark <urban@teststation.com> to prevent
++ users from mounting remote filesystems containing suid files
++ (closes: 232327). This represents an exploitable security hole on
++ systems running Linux 2.6 kernels.
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 12 Feb 2004 21:38:40 -0600
++
++samba (3.0.2-1) unstable; urgency=high
++
++ * New upstream release.
++ - LaMont Jones: correct false failure LFS test that resulted
++ in _GNU_SOURCE not being defined (thus resulting in strndup()
++ not being defined) (closes: #226694)
++ - Segfault fixes. (closes: #230012) (maybe more, but we need bug
++ reporters to confirm.)
++
++ Urgency "high" due to a password initialization bug that could grant
++ an attacker unauthorized access to a user account created by the
++ mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and
++ workarounds for those not wishing to upgrade (which is a bad idea
++ anyway since this new release fixes lots of other bugs.)
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 8 Feb 2004 10:06:29 -0500
++
++samba (3.0.1-2) unstable; urgency=low
++
++ * Include ntlm_auth's man page.
++ * Don't create directories outside of the source directory during
++ package build time. (closes: #227221, #227238, #225862)
++ * Don't include the "Using Samba" book in the swat package, just a
++ symlink that points to the book included in the samba-doc package.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 13 Jan 2004 13:48:13 -0500
++
++samba (3.0.1-1) unstable; urgency=low
++
++ * New upstream version (closes: #225565)
++ * Add support in the dhcp hook for netbios scope, and handle better
++ the case of multiple DHCP-using interfaces (closes: #224109).
++ * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant
++ tail works. Thanks to Paul Eggert <eggert@twinsun.com>.
++ * Include /usr/bin/ntlm_auth in the winbind package.
++ * Run configure with "--with-piddir=/var/run/samba" since the
++ default got changed to /var/run in this new upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 30 Dec 2003 16:21:31 -0500
++
++samba (3.0.0final-1) unstable; urgency=low
++
++ * It's here, it's here, it's here, Samba 3.0.0 is here!
++ * Incorporate Japanese debconf translations; thanks to Kenshi Muto
++ <kmuto@debian.org>. (closes: #209291)
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 25 Sep 2003 13:39:28 -0400
++
++samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 13 Sep 2003 08:47:56 -0400
++
++samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low
++
++ * New upstream release. Last Release Candidate according to the
++ Samba Team. Samba 3.0.0 is around the corner, in a week or so.
++ - Fixes use of non-PIC code in nss shared libraries (closes: #208773)
++ - 'unix password sync' option now runs the unix password program as
++ root again (closes: #209739).
++ * One-line patch to make packages buildable with distcc (closes: #210227)
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 9 Sep 2003 07:57:16 -0400
++
++samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low
++
++ * New upstream release.
++ * Link against libgnutls7 instead of libgnutls5. (closes: #208151)
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 2 Sep 2003 21:37:13 -0400
++
++samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low
++
++ * New upstream version (skipped samba 3.0.0beta3 due to time
++ constraints.) This ugly version number will go away when the final
++ Samba 3.0.0 is released.
++ * Drag new unpackaged tools into the packages: smbcquotas (smbclient),
++ vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8)
++ manpage (samba). (closes: #151158)
++ * Switch to DH_COMPAT level 4:
++ - no explicit conffile listings needed
++ - the postinst for libsmbclient is now completely autogenerated
++ - use the default init script handling (with support for
++ invoke-rc.d) in debhelper, instead of the currently buggy upgrade
++ path (closes: #185439)
++ - add support for ${misc:Depends} in control for those packages with
++ init scripts
++ * Add versioned dependency on libpam-runtime and change
++ /etc/pam.d/samba to use the new common PAM config blocks.
++ * New python2.3-samba package (old python2.2-samba is no more.)
++ (closes: #206171)
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 25 Aug 2003 17:05:14 -0400
++
++samba (3.0.0beta2-1) unstable; urgency=low
++
++ * New upstream release
++ - The smb.conf(5) manpage documents config options again
++ (closes: #197963).
++ - Handling of winbind/idmap has been restructured; domain members
++ should be able to map domain accounts to local accounts again
++ (closes: #196815).
++ - Use the locale charset for 'display charset' by default
++ (closes: #194406).
++ - Fix for segfault in smbclient when using the -b option
++ (closes: #196833).
++ - Handle an empty 'passdb backend' list gracefully (closes: #193946).
++ * Don't set 'display charset' anymore on upgrade, since this is now
++ grabbed from the locale by default -- a much better option.
++ * Removed time.c.patch which is now in the upstream sources.
++ * Update FHS patch for two new tdb files (netsamlogon_cache.tdb,
++ privilege.tdb).
++ * Remove python-linker.patch, since the Kerberos package has been
++ fixed to no longer use rpath
++ * Remove configure.patch: the hppa glibc bug this was added for is
++ long since fixed, and upstream isn't interested in supporting this
++ kludge.
++ * Update references to missing documentation in sample smb.conf file
++ (closes: #187632).
++ * Fix handling of krb5 link line, building on a patch from Stefan
++ Metzmacher <metze@metzemix.de>.
++ * Add patch so smbclient's tar support works with popt
++ (closes: #194921).
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 2 Jul 2003 20:59:09 -0500
++
++samba (3.0.0beta1-2) unstable; urgency=low
++
++ * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1)
++ to make sure we get the right shlib dependencies (closes: #193149).
++ * Update the dhcp config hooks so they're suitable for sourcing (i.e.,
++ don't call "exit") (closes: #196477).
++ * Bring package into line with current policy by adding support for
++ the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs)
++ by default
++ * Make sure libpam-smbpass is a self-contained DSO.
++ * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite
++ the server list.
++ * Fix python install script to ignore -Wl linker flags, as seen in the
++ output from the latest krb5-config.
++ * Add LDAP and Unicode information about upgrading from 2.2 to
++ README.debian.
++ * Remove dangerous and confusing browse options from the default
++ smb.conf (closes: #198804).
++ * Reorder smb.conf options for clearer grouping, and clarify the
++ comments.
++ * Add a default [print$] share to the sample smb.conf, and create the
++ necessary tree under /var/lib/samba/printers. (closes: #168173)
++ * s/winbind/idmap/ in smb.conf, since the option names have changed.
++ * Fix the patch for postexec handling, so that we chdir("/") at the
++ right time.
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 12 Jun 2003 15:02:00 -0500
++
++samba (3.0.0beta1-1) unstable; urgency=low
++
++ * New upstream version.
++ - fix for empty browselist bug (closes: #194553)
++ - fix for tab completion segfault in smbclient (closes: #194776)
++ - Samba now works as a domain member again without segfaulting
++ (closes: #194134, #194394, #194775)
++ - WinXP machines can join a Samba-controlled domain again
++ (closes: #195362)
++ * Build-depend on python-dev >= 2.2 instead of on just python-dev
++ (without version).
++ * Added Vorlon'n patch to source/lib/time.c to fix #194075.
++ (closes: #194075)
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 8 Jun 2003 22:26:43 -0400
++
++samba (2.999+3.0.alpha24-3) unstable; urgency=low
++
++ * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324)
++ * Rebuild against pristine Kerberos libs, to squelch warnings about
++ versioned symbols. (closes: #194431, #194396)
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 22 May 2003 15:32:00 -0500
++
++samba (2.999+3.0.alpha24-2) unstable; urgency=low
++
++ * Fixed description of the smbfs package. (closes: #194183)
++ * Negate the sense of the unixsam check when upgrading. (closes: #194234)
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 21 May 2003 12:21:53 -0400
++
++samba (2.999+3.0.alpha24-1) unstable; urgency=low
++
++ * New upstream version. (closes: #189354)
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 20 May 2003 13:55:57 -0400
++
++samba (2.999+3.0.alpha23-5) unstable; urgency=low
++
++ * Move the python package from section "net" to section "python".
++ * Make sure we use PIC code for python on all platforms.
++ * French translation of an additional debconf template, courtesy of
++ Christian Perrier <bubulle@debian.org>. (closes: #188832)
++ * Updated Brazilian Portuguese translation from André Luís Lopes
++ <andrelop@ig.com.br>.
++ * s/unixsam/guest/ everywhere, since the unixsam backend is now
++ deprecated. (closes: #190095)
++ * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not
++ only does using /tmp violate SELinux policies, it introduces the
++ possibility of data loss during the final copy if /tmp is a separate
++ filesystem. (closes: #189823)
++ * Pull in fix for SWAT, so that logins work again
++ (closes: #188255, #192077).
++ * Move passdb.tdb into /var/lib/samba, since it's not user-editable.
++ * Make sure with don't ship any .cvsignore files.
++ * Don't ship examples for python2.2-samba and samba-doc in an
++ "examples" directory inside another "examples" directory.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 6 May 2003 12:05:46 -0400
++
++samba (2.999+3.0.alpha23-4) unstable; urgency=low
++
++ * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all
++ non-RPC printing clients are working again.
++ * Change shlibs to 0 instead of 0.1. The library already in the
++ archive is using this soname, and there are no packages depending
++ on libsmbclient, so skip changing the package name for now.
++ (closes: #188661)
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 11 Apr 2003 14:42:00 -0500
++
++samba (2.999+3.0.alpha23-3) unstable; urgency=low
++
++ * Put the Samba Python modules in /usr/lib/python2.2/site-packages/,
++ not in /usr/lib/python2.2/lib-dynload/.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 9 Apr 2003 19:49:25 -0400
++
++samba (2.999+3.0.alpha23-2) unstable; urgency=low
++
++ * New package python2.2-samba that includes the Python modules
++ included in the Samba sources. Feedback on these modules and the new
++ package is welcome, as we (Debian Samba maintainers) don't use them.
++ (closes: #170731, #173322)
++ * Move libsmbclient-dev from section "devel" to "libdevel".
++ * Fix panic action script to give a sensible error message instead of
++ an empty backtrace when we don't have permission to attach to the
++ process. (closes: #188164)
++ * Fix libpam-smbpass so that it really does something. (closes: #178245)
++ * Apply patch to fix printing-related segfaults. (closes: #188076)
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 6 Apr 2003 21:40:33 -0400
++
++samba (2.999+3.0.alpha23-1) unstable; urgency=high
++
++ * new upstream release, includes security fix for DSA-262
++ * tweak the debconf templates to avoid references to specific
++ front-ends (closes: #183718)
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 9 Mar 2003 14:58:00 -0600
++
++samba (2.999+3.0.alpha21-5) unstable; urgency=low
++
++ * touch up the package descriptions a little bit (caps, punctuation)
++ * remove addtosmbpass, which snuck back in when we weren't looking
++ * reverse the position of the wins server tag, after looking more
++ closely at the code (closes: #183061)
++ * fix a glitch in the Spanish .po that rendered it invalid, plus a typo
++ * updated Brazilian Portuguese templates (closes: #183295)
++ * fix a typo in upstream manpage (s/shave/share/) (closes: #180546)
++ * run sed before we run sed, to deal with crazybad special chars
++ in the workgroup name (!) (closes: #176717)
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 1 Mar 2003 15:14:00 -0600
++
++samba (2.999+3.0.alpha21-4) unstable; urgency=low
++
++ * add scripts to samba-common to grab the netbios-name-servers options
++ if we're running a DHCP client (closes: #38413)
++ * major rearrangement of build scripts: install target now operates on
++ debian/tmp, not debian/samba, so we can see when new files are
++ added and decide where to put them; several files that should have
++ been in samba-common but were in samba (for the above reason) --
++ smbcacls, -- have been moved, with a replaces: added.
++ * Fix rc script so that whitespace is consistent between inetd and
++ daemon modes (closes: #174677).
++ * smbclient -M must always connect to port 139, because port 445
++ doesn't support messaging and we can't do the port 135 stuff yet
++ (closes: #175292, #167859).
++ * Import the diff from upstream CVS, which has fixed a few bugs
++ (closes: #178219, #177583, #181467, #181487, #181603, #175864).
++ Remove a few patches of ours which are now superseded.
++ * Add po-debconf support to the tree, for better i18n.
++ * Install the libsmbclient.so symlink in the libsmbclient-dev package,
++ per policy (closes: #181466).
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 27 Dec 2002 00:37:00 -0600
++
++samba (2.999+3.0.alpha21-3) unstable; urgency=low
++
++ * Drop --with-ldapsam from the configure options, since this no longer
++ means what we thought it did. Revert patch for changing the 'passdb
++ backend' defaults.
++ * Add patch from CVS HEAD to fix pdbedit segfault; postinst script
++ should work better now. (Closes: #173936)
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 22 Dec 2002 13:29:00 -0600
++
++samba (2.999+3.0.alpha21-2) unstable; urgency=low
++
++ * add CONFIGDIR to the set of directories exported in the install
++ target, so we don't try to write to /etc/ on the autobuilders.
++ * Reset the default 'passdb backend' value to something sensible, so
++ that we don't unnecessarily break upgrading systems (closes: #173731).
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 20 Dec 2002 09:13:00 -0600
++
++samba (2.999+3.0.alpha21-1) unstable; urgency=low
++
++ * new upstream release, many patches now incorporated upstream
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 16 Dec 2002 23:39:00 -0600
++
++samba (2.999+3.0.alpha20-4) unstable; urgency=low
++
++ * Remove obsolete comments about non-existant LDAP support in the
++ Debian Samba packages. (Closes: #165035)
++ * Apply patch for segfault in pam_smbpass when using the unixsam
++ backend.
++ * Drop support for nmbd in inetd, since it's not supported by
++ upstream and is reported to cause problems (closes: #23243, #137726,
++ 165037).
++ * Clarify example printing configs in smb.conf (closes: #168174).
++ * Make sure nmbd still responds to SIGTERM if it has no interfaces to
++ listen on (closes: #168079).
++ * Fix to get samba working again on 64-bit archs, after a
++ pointer<->int size mismatch bug. Already fixed in upstream CVS.
++ * Merge fix from CVS for broken libsmbclient.h references to internal
++ structures (closes: #162956).
++ * Add a default 'panic action' for Samba that will give us genuinely
++ useful debugging information after a crash.
++ * Fixed correct patch to example configurations in the libpam-smbpass
++ packages (closes: #169350).
++ * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead
++ (closes: #169682).
++ * Only ask the user for permission to edit if there's a chance of us
++ damaging something.
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 18 Nov 2002 19:53:00 -0500
++
++samba (2.999+3.0.alpha20-3) unstable; urgency=low
++
++ * Make sure smbstatus behavior is sane when Samba *has* been started,
++ as well as when it has not (closes: #164179). Thank to Robbert Kouprie
++ <robbert@radium.jvb.tudelft.nl> for this patch.
++ * Not using 'killall' in any of the maintainer scripts (the last one
++ remaining was winbind.logrotate.) We now just use 'kill' to send
++ a SIGHUP to a specific PID (which is stored in a file in
++ /var/run/samba.)
++ * Do not depend on procps because we're not using killall anymore.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 15 Oct 2002 22:15:57 -0400
++
++samba (2.999+3.0.alpha20-2) unstable; urgency=low
++
++ * fix an off-by-one error in smbd/lanman.c, which should shut off the
++ flood of log messages (closes: #157432)
++ * add a --config-cache option to the configure invocation, since
++ autoconf 2.5 doesn't load config.cache by default (closes: #163504)
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 5 Oct 2002 01:40:00 -0500
++
++samba (2.999+3.0.alpha20-1) unstable; urgency=low
++
++ * new upstream release
++ - non-primary groups appear to work again (closes: #161271)
++ * the official beginning of the upstream 3.0 branch
++ * exit without error from smbstatus when no connections have
++ been seen yet (closes: #161489)
++
++ -- Steve Langasek <vorlon@debian.org> Wed, 2 Oct 2002 19:02:00 -0500
++
++samba (2.999+3.0cvs20020906-1) unstable; urgency=low
++
++ * CVS update
++ - domain authentication works again (closes: #158698)
++ * Factor out common code in samba-common.config
++ * Handle character set settings in smb.conf on upgrade
++ (closes: #153913, #158770)
++ * Don't use killall in logrotate script; there are better ways
++ (closes: #160076)
++ * Ignore value of 'hostname lookups' for hosts allow/hosts deny
++ (closes: #154376)
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 7 Sep 2002 11:46:00 -0500
++
++samba (2.999+3.0cvs20020829-1) unstable; urgency=low
++
++ * CVS update.
++ * Move the smb.conf manpage to the samba-common package (closes: #159572)
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 29 Aug 2002 17:53:25 -0500
++
++samba (2.999+3.0cvs20020827-1) unstable; urgency=low
++
++ * CVS update. (Closes: #158508)
++ * Part 1 of 3 of the library separation patch that Vorlon wrote has
++ gone upstream - removed the patch from our patches/ directory.
++ * Debconf note to warn users that their smb.conf will be re-written
++ and changed if they use Swat to maintain it. (Closes: #158479)
++ * Fixed typo in samba.prerm.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Aug 2002 15:23:23 -0400
++
++samba (2.999+3.0cvs20020825-2) unstable; urgency=low
++
++ * scale back the tdbsam migration support, because of undesirable
++ side-effects; now always defaults to 'no'.
++ * strip out hyperactive library dependencies that are only needed by
++ smbd (closes: #155156).
++ * nuke any broken registry.tdb files left by previous CVS snapshots.
++ * support rolling back the smbpasswd->tdbsam conversion on downgrade,
++ since many people are likely to need to downgrade for a while.
++ * remove postrm handling of legacy directories, and add handling of
++ current ones.
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 28 Jul 2002 09:44:24 -0500
++
++samba (2.999+3.0cvs20020825-1) unstable; urgency=low
++
++ * CVS update. These packages are based on Samba 3.0alpha19 + any
++ code commited after 3.0alpha19 was released.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 25 Aug 2002 14:56:46 -0400
++
++samba (2.999+3.0cvs20020723-1) unstable; urgency=medium
++
++ * remove spurious line from samba.config
++ * migrate from smbpasswd to tdbsam
++ * re-add the pdbedit util and manpage
++ * compile in ldapsam support (closes: #146935)
++ * add PRIVATEDIR to the list of vars we override for the install
++ target, so Samba doesn't try to create /etc/samba (closes: #153746).
++ * fix makefile handling of LOGBASEDIR, so that logs always end up in
++ the right place (closes: 153727).
++ * Fixed bug in the FHS migration path that causes nmbd to read its
++ state from one location, but write it out to another. (closes: #154210)
++ * Make sure nmbd is always looking for wins.tdb in the same place.
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 19 Jul 2002 21:38:54 -0500
++
++samba (2.99.cvs.20020713-1) unstable; urgency=low
++
++ * first attempt for 3.0pre.
++ * only post a debconf note about moving logfiles if we're upgrading
++ from a version that had the logfiles in the old location
++ (closes: #152924).
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 13 Jul 2002 12:54:25 -0500
++
++samba (2.2.5-2) unstable; urgency=low
++
++ * No longer ship make_printerdef, which is deprecated. (closes: #63059)
++ * Clean up some empty directories from the samba package.
++ * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860).
++ * Clean up per-package documentation lists, to reduce clutter
++ (closes: #147638).
++ * Make sure we don't ship pdbedit's man page since we are still using
++ smbpasswd passwords. (closes: #152208)
++ * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find
++ it (closes: #148586).
++ * reorder postinst, so that installing samba-common from scratch loads
++ the debconf answers properly (closes: #151985).
++ * add lintian overrides for winbind, to eliminate some noise.
++ * rename pam_smbpass changelog to comply with policy.
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 23 Jun 2002 22:45:04 -0500
++
++samba (2.2.5-1) unstable; urgency=low
++
++ * New upstream release.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 9 Jun 2002 15:49:21 -0400
++
++samba (2.2.4+2.2.5pre1-1) experimental; urgency=low
++
++ * Getting ready for Samba 2.2.5.
++ * Remove patches/parse_spoolss.patch, now included upstream.
++ * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in
++ 2.2.4-1. We don't use POSIX ACL support ourselves, so we'd
++ appreciate reports from those using this feature so we can
++ be sure this works.
++ * Fix the filename-matching algorithm used for smbtar's 'exclude'
++ functionality. (closes: #131571)
++ * Look for secrets.tdb in /var/lib/samba, and handle in the postinst.
++ This is not really a config file, because users don't edit it.
++ (closes: #147429)
++ * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen
++ <Tommi.Komulainen@iki.fi> for the patch. (closes: #144847)
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 28 May 2002 11:33:51 -0400
++
++samba (2.2.4-1) unstable; urgency=low
++
++ * New upstream release (closes: #144713)
++ * Building with POSIX ACL support (closes: #137819)
++ * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055)
++ * Compile with --with-automount, for NIS homedir support (closes: #123396)
++ * Add a proper 'flags' field to the mount entry we write to /etc/mtab;
++ fixes a display bug with mount (closes: #140397)
++ * Added logic to /etc/init.d/samba so a help message is printed out
++ when Samba is running from inetd _and_ we are not booting, i.e. the
++ user called the init script manually. Thanks to Francesco
++ Potorti <pot@gnu.org> for the suggestion on how to implement this.
++ (Closes: #139807, #140204)
++ * samba.postinst: added logic so we don't call /etc/init.d/samba if
++ we are running from inetd (this prevents the stupid help message
++ to be printed during package upgrades if we are running from inetd.)
++ * samba.prerm: idem.
++ * /etc/init.d/samba: delete stale PID files after nmbd and smbd are
++ stopped. This prevents start-stop-daemon from printing an ugly
++ error message when called from '/etc/init.d/samba stop'. I prefer
++ this than running start-stop-daemon with --oknodo because
++ start-stop-daemon might print other important error messages that with
++ --oknodo it would otherwise not print. (Closes: #102187, #109301)
++ * Patch from jerry@samba.org to fix parsing of spoolss structures.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 23 May 2002 23:16:52 -0400
++
++samba (2.2.3a-7) unstable; urgency=medium
++
++ * More README.debian updates.
++ * Neutralize the smb.conf 'lock dir' directive, which doesn't mean
++ what the FHS says it should, and causes us no end of grief.
++ (Closes: #122299)
++ * LPRng-handling patch so that jobs printed to recent versions of
++ LPRng show up properly as 'done' instead of 'paused' in the Windows
++ print queue. Thanks to Jaroslav Serdula <serdula_jaroslav@vse.sk>
++ for this patch. (Closes: #139458)
++ * Applied patch from Urban Widmark <urban@teststation.com>
++ (smbfs upstream maintainer) to add a '-n' option to smbmount
++ that does the same as mount's '-n'. (Closes: #139590)
++ * Minor tweak to unpatch-source so we unpatch sources in the
++ reverse order we patched them.
++ * Don't depend on grep in samba.prerm to determine if Samba was
++ running before the upgrade starts.
++ * Tweak the wording of debconf templates.
++ * Incorporate debconf translations for French, Spanish and Portuguese;
++ thanks to Carlos Valdivia Yagüe <valyag@hotpop.com> (es),
++ Andre Luis Lopes <andrelop@ig.com.br> (pt_BR), and Philippe
++ Batailler and Denis Barbier <barbier@debian.org> (fr).
++ (closes: #142657, #142659, #141551, #141699, #141682)
++ * Fixed symlinks in the swat package so the point to /usr/share/doc/
++ instead of /usr/doc/. Added note to the description of the
++ swat packages that says that samba-doc must be installed for
++ the on-line documentation to work. Thanks to Torne Wuff
++ <torne@wolfpuppy.org.uk>. (Closes: #95437)
++ * 'dh_installinit -n' gives us no initscript handling -- we need to
++ handle all starting and stopping of daemons ourselves, which wasn't
++ happening in the {pre,post}rm scripts.
++ * Vary the priority of the debconf question "Do you want to generate
++ /etc/samba/smbpassd?" depending on whether the file already exists.
++ File exists -> priority 'medium', file does not exist -> priority
++ 'low'. Changed priorities of all other questions from 'high' to 'medium'.
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 20 Apr 2002 17:48:27 -0400
++
++samba (2.2.3a-6) unstable; urgency=low
++
++ * Call db_stop as soon as we're done with debconf in the postinst, to
++ avoid hanging bugs (closes: #137813)
++ * Ony call 'update-inetd --add' on first installation, just as we only
++ call 'update-inetd --remove' on package purge.
++ * Bring our shipped smb.conf closer in line with the upstream
++ defaults: don't twiddle the send/recv buffer sizes, since the Linux
++ kernel already provides a much better default setting
++ (closes: #80966, #80934, #137415, #133477)
++ * Added libnss_wins.so to the winbind package (closes: #137201)
++ * Updates to README.debian.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 12 Mar 2002 10:57:40 -0500
++
++samba (2.2.3a-5) unstable; urgency=low
++
++ * Having multiple workgroup lines in your smb.conf, though wacky, is
++ perfectly valid. Account for this in samba-common.config.
++ (closes: #137157)
++
++ -- Steve Langasek <vorlon@debian.org> Sun, 10 Mar 2002 21:52:51 -0600
++
++samba (2.2.3a-4) unstable; urgency=low
++
++ * Fixed typo in samba.postinst. Cosmetic fixes there as well.
++ * Fix to improper usage of /usr/bin/tr in samba-common config script
++ (closes: #137744)
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 9 Mar 2002 14:14:02 -0500
++
++samba (2.2.3a-3) unstable; urgency=medium
++
++ * Make sure /etc/init.d/samba is executable before calling it
++ in the postinst. Quickly checked all other maintainer scripts
++ to make sure we are not calling an init script if it is not
++ executable. (closes: #137321)
++ * Fix up maintainer scripts to detect if samba was not running before
++ an upgrade. (closes: #33520, #130534)
++ * Make sure /etc/samba/ is included in the samba-common package.
++ Closes: #137157
++
++ -- Steve Langasek <vorlon@debian.org> Fri, 8 Mar 2002 11:13:21 -0500
++
++samba (2.2.3a-2) unstable; urgency=low
++
++ * merge in debconf support:
++ - Moved all smb.conf-related questions to samba-common (smb.conf
++ is part of the samba-common package, not the samba package.)
++ - smb.conf is not a samba-common conffile anymore since it is
++ being managed by debconf. It is ABSOLUTELY necessary to make
++ sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes
++ made via debconf. In other words, any changes made by the user
++ should be honored by the debconf interface.
++ - samba.postinst now moves old log files from /var/log/ to
++ /var/log/samba/. There's a Debconf note that informs the user
++ the log files are stored now in a new location.
++ - debian/control:
++ + Make samba depend on debconf.
++ - New file debian/samba.templates.
++ - New file debian/samba.config.
++ - Re-worked debian/samba.postinst.
++ + Got rid of all /etc/samba/debian_config sillyness.
++ - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces
++ it.
++ - Removed debian/samba.prerm.
++ - Cleaned up /etc/init.d/samba.
++ + Added infrastructure for debconf.
++ + Got rid of all /etc/samba/debian_config sillyness.
++ + Got rid of /etc/samba/smbpasswd conversion stuff for
++ compatibility with versions of Samba < 2.0.0final-2.
++ (closes: #127959, #34408, #113594)
++ * make samba.postinst ignore the absence of /var/log/{s,n}mb*;
++ makes for a clean upgrade path.
++ * Building with MSDFS support (closes: #116793)
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 5 Mar 2002 14:14:33 -0600
++
++samba (2.2.3a-1) unstable; urgency=low
++
++ * New upstream version (closes: #135001)
++ * Potato builds were failing because debian/rules was not creating
++ debian/winbind/etc/logrotate.d/. A user having problems creating
++ Potato packages brought this to my attention. dh_installlogrotate
++ takes care of creating the directory for us, that's why we didn't
++ notice.
++ * Removed code that converts /etc/samba/smbpasswd from an ancient
++ format to the new format of Samba 2.0.0 and later.
++ Closes: #134375 - samba: postinst failed due to missing
++ /usr/bin/convert_smbpasswd.
++ * Re-organized FHS migration code in samba.postinst. Make sure we
++ don't fail when we move files that don't exist.
++ Closes: #133813 - samba: Install failed.
++ * Adding docs. to the libpam-smbpass package.
++ * Remove man pages for findsmb because we are not providing this
++ script.
++ Closes: #134181 - findsmb referenced, but not included.
++ * Removed replace.patch because it is now present upstream.
++ * Added patch from Jerry Carter to fix a problem when saving
++ document preferences for printing from NT clients.
++ * The real winbindd daemon is a forked process so we can't use
++ --make-pidfile when calling start-stop-daemon. Fixed
++ /etc/init.d/winbind to work around the issue. Thanks to
++ Lin Li <linl@xandros.com> for the patience and for reporting
++ the problems. Hopefully I got it right this time.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 20 Feb 2002 18:39:03 -0500
++
++samba (2.2.3-6) unstable; urgency=low
++
++ * Make sure there are actual files in /var/state/samba before trying
++ to move them (Closes: #133534, #133510).
++ * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly
++ again.
++
++ -- Steve Langasek <vorlon@debian.org> Tue, 12 Feb 2002 09:19:29 -0600
++
++samba (2.2.3-5) unstable; urgency=low
++
++ * Whoops, missed a spot on the samba.postinst -- will fail badly if
++ /var/state/samba/ no longer exists. Better get this fix into the
++ next upload. ;) (Closes: #133088)
++ * Regenerate configure only if it is older than configure.in.
++ * Fix smbd handling of network neighborhood lists, which was missed
++ in the FHS conversion (Closes: #133091)
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 9 Feb 2002 16:37:57 -0500
++
++samba (2.2.3-4) unstable; urgency=low
++
++ * FHS cleanup; files in /var are now properly sorted according to
++ their nature. (Closes: #102101)
++ * Remove patches to source/configure, since we now call autoconf to
++ regenerate this file cleanly.
++ * lintian fixes:
++ - Create winbind.conffiles and add /etc/logrotate.d/winbind and
++ /etc/init.d/winbind to it.
++ - Use a relative symlink for /usr/lib/cups/backend/smb.
++ - Removal of a .cvsignore file in the samba-doc package.
++ * winbind.init fixes:
++ - Corrected name of the pid file (Steve)
++ - Make start-stop-daemon create a pid file for winbindd since it
++ does not create one on his own.
++ * #DEBHELPER# is not needed in samba.postinst because we are adding
++ manually everything that debhelper adds automatically. In fact,
++ since we are calling update-rc.d without standard paramaters I
++ think we can't use #DEBHELPER#.
++ * Fix fatal syntax error in samba.prerm.
++
++ -- Steve Langasek <vorlon@debian.org> Thu, 7 Feb 2002 13:12:08 -0500
++
++samba (2.2.3-3) unstable; urgency=low
++
++ * work on lintian-cleanness in the package (wrong permissions,
++ maintainer scripts in need of debhelpering)
++ * /lib/security/pam_smbpass.so is now being included in the
++ libpam-smbpass package only, and not in both the libpam-smbpass and
++ samba packages (which was the case prior to 2.2.3-3.)
++ * Instead of making our patch scripts executable in the rules file
++ we run them through /bin/sh.
++ * New 'winbind' package that has all the winbind stuff that was in the
++ samba package in 2.2.3-2 and before.
++ * Added replace.patch: patch from Jeremy Allison to fix problems when
++ replacing or overwriting files in a Samba share. Patch was sent to
++ the samba mailing list.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 5 Feb 2002 21:12:48 -0500
++
++samba (2.2.3-2) unstable; urgency=low
++
++ * add support to debian/scripts/{patch-source,unpatch-source} for
++ automatic updating and cleaning of <version.h>. This was a request
++ from the Samba Team: they wanted us to clearly mark our packages
++ so it is always known a user is running Samba with (possibly)
++ Debian-specific patches.
++ * Change init.d killscript link to K19samba, so we stop before autofs
++ (closes: 117327)
++ * Make our patch scripts executable in the rules file -- dpkg won't do
++ this for us (closes: #132415).
++
++ -- Steve Langasek <vorlon@debian.org> Mon, 4 Feb 2002 09:51:00 -0600
++
++samba (2.2.3-1) unstable; urgency=low
++
++ * New upstream release (closes: #131228).
++ * Restructured build system that provides DBS-like separation of
++ patches
++ * Fix typo in smbfs description (closes: #116209).
++ * Use killall -q in logrotate.d script, to avoid spurious cron
++ emails (closes: #130100).
++
++ -- Steve Langasek <vorlon@debian.org> Sat, 2 Feb 2002 19:56:18 -0500
++
++samba (2.2.2-12) unstable; urgency=high
++
++ * (Steve) Patch for source/client/client.c.
++ Closes: #86438 smbclient: Transfering several GB causes the average
++ speed to be messed up.
++ * Uploading with urgency=high to expedite the move from unstable
++ to testing because of the security problem fixed in -11.
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 25 Jan 2002 22:31:12 -0500
++
++samba (2.2.2-11) unstable; urgency=low
++
++ * Building with --with-libsmbclient. We have created two new
++ packages: libsmbclient and libsmbclient-dev. Hopefully this
++ will help some people that want to add the capability of
++ speaking SMB to their applications.
++ Closes: #117132 - libsmbclient support library?
++ * (Steve) Make swat do the right thing when reading (parsing)
++ the saved preferences in smb.conf.
++ Closes: #55617 swat mutilates the linpopup message command.
++ * Updated README.Debian. Updated descriptions in debian/control.
++ * Remembered to bump up version number in source/include/version.h
++ (need to automate this or else I'll keep forgetting.)
++ * (Steve) one liner for source/web/diagnose.c.
++ Closes: #106976 - smbd/nmbd not running message with swat/linuxconf.
++ * Added '|| true' to the post-rotate script so logrotate doesn't
++ fail if either nmbd or smbd is not running.
++ Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process.
++ * Fixed incorrect file locations in swat's man page and added a
++ Debian-specific note to /usr/share/doc/swat/README.
++ Closes: #71586 swat: needs documentation fixes for debian.
++ * smbmount in the smbfs package does not have the setuid bit set.
++ Apparently, smbmount uses libsmb without checking the environment.
++ Thanks to Christian Jaeger <christian.jaeger@sl.ethz.ch> for
++ finding the local root exploit.
++ * Applied old patch from Jerry) Carter" <jerry@samba.org> to correct
++ the following two problems in Samba 2.2.2:
++ - %U and %G could not be used in services names
++ in smb.conf.
++ - %G would fail to be expanded in an "include = ..."
++ line.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 19 Jan 2002 21:35:26 -0500
++
++samba (2.2.2-10) unstable; urgency=low
++
++ * (Steve) Add missing manual pages.
++ Closes: Bug#128928: missing manpages in smbfs.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 13 Jan 2002 14:39:55 -0500
++
++samba (2.2.2-9) unstable; urgency=low
++
++ * (Steve) Fix broken URL's in HTML docs.
++ Closes: Bug#17741: bad links in html docs (at last!!!)
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 11 Jan 2002 13:37:07 -0500
++
++samba (2.2.2-8) unstable; urgency=low
++
++ * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in
++ debian/control so rpcclient.1, which was in samba-2.2.2-5, does not
++ cause problems now that it is part of smbclient (>= 2.2.2-6). Closes:
++ Closes: Bug#128684: error upgrading smbclient in sid.
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 11 Jan 2002 11:42:40 -0500
++
++samba (2.2.2-7) unstable; urgency=low
++
++ * (Steve) Patch to make behavior honor what the docs. say about "hosts allow"
++ taking precedence over "hosts deny".
++ Closes: Bug#49249: swat: error with host deny ?!
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 10 Jan 2002 12:36:58 -0500
++
++samba (2.2.2-6) unstable; urgency=low
++
++ * (Steve) Adds manpage for rpcclient to the proper file,
++ removes smbtorture from the distro because this tool isn't intended for
++ widespread consumption.
++ Closes: #63057 - no manual page for smbtorture.
++ * (Steve) Removed -gnu from the configure arguments (--build, --host) in
++ debian/rules so config.sub is able to properly create the host and target
++ tuples.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 9 Jan 2002 14:39:51 -0500
++
++samba (2.2.2-5) unstable; urgency=low
++
++ * Fixes from vorlon:
++ * Use /usr/bin/pager instead of more.
++ Closes: #125603: smbclient violates pager policy.
++ * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd
++ a SIGHUP to have the log files reopened, fixes to
++ /etc/logrotate.d/samba.
++ Closes: #127897: log file rotation.
++ Closes: #118277: /etc/logrotate.d/samba not listed in conffiles.
++ * s/covert/convert/.
++ Closes: #121653 probable typo in install message.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 6 Jan 2002 03:14:58 -0500
++
++samba (2.2.2-4) unstable; urgency=low
++
++ * Applied patch from Steve to work around problem in glibc that affects the
++ HPPA architecure. The patch detects the error condition at configure time
++ and compiles without LFS support if necessary.
++ Closes: Bug#126763: samba completely broken on hppa.
++ * Including unicode_map.1251.
++ Closes: Bug#126719: samba-common: unicode_map.1251 missing.
++ * Updated smbd daemon version to match Debian package version.
++ Closes: Bug#127199: Package version and smbd daemon version don't match.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 31 Dec 2001 14:32:47 -0500
++
++samba (2.2.2-3) unstable; urgency=low
++
++ * Added some spaces in package description in debian/control.
++ Closes: #120730 - missing spaces in package description for nice
++ alignment.
++ * Spelling fixes.
++ Closes: #125328, #125329, #125330, #125367, #125365, #125403.
++ * Steve Langasek <vorlon@debian.org> is the co-maintainer of the Debian
++ Samba packages!!! Added him to the uploaders field in debian/control.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 18 Dec 2001 00:54:25 -0500
++
++samba (2.2.2-2) unstable; urgency=low
++
++ * Backed out changes to source/filename.c per Andrew Tridgell's request.
++ This changes were introduced in 2.2.1a-7 as an attempt to fix #47493.
++ Tridge found out that they break smbd.
++ * Changed version number in source/includes/version.h so it is clear that
++ this is a version of Samba packaged for Debian. This is another request from
++ Tridge and will help the Samba Team to get bogus bug reports.
++ * Added Samba-HOWTO-Collection.pdf and other README files to the
++ /usr/share/doc/<package>/ directories.
++ * Installing libnss_winbind.so and pam_winbind.so.
++ Closes: #116790: nss and pam modules for winbind missing.
++ * Removed user-emacs-settings from changelog.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 29 Oct 2001 19:16:26 -0500
++
++samba (2.2.2-1) unstable; urgency=low
++
++ * New upstream version.
++ * Temporary fix for #113763 (Steve Langasek)
++ * Quick hack to avoid smbmount reveal password length. Please note
++ that even with this hack there is a small window when password is
++ completely visible with 'ps aux'. There are other methods that should
++ be used to automate mounting of SMB shares.
++ Closes: #112195: smbmount-2.2.x reveals password length.
++ * Applied patch from Steve Langasek <vorlon@debian.org> to prevent
++ forcing use of setresuid() in Sparc.
++ Closes: #112779: samba build forces use of setresuid, which causes
++ smbd to fail on Sparc.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 15 Oct 2001 10:26:10 -0400
++
++samba (2.2.1a-9) unstable; urgency=low
++
++ * Replaced $(LD) with $(CC) all the way through source/Makefile.
++ Closes: #111036: ld shouldn't be used to link shlibs.
++ * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and
++ sgml as well.)
++ Closes: #110963: smb.conf: mail should be /usr/bin/mail.
++ * Documented better smbclient's -W behavior. Patch from Steve
++ Langasek.
++ Closes: #53672: smbclient: -W flag is interpreted as domain, not
++ workgroup.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 4 Sep 2001 23:10:41 -0400
++
++samba (2.2.1a-8) unstable; urgency=low
++
++ * Set some reasonable default perms for the samba logdir (again,
++ thanks to vorlon :-)
++ Closes: #72529: insecure permissions on log files.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 26 Aug 2001 15:40:47 -0400
++
++samba (2.2.1a-7) unstable; urgency=low
++
++ * Another attempt at fixing #47493. Patch from Steve Langasek
++ <vorlon@netexpress.net>. Let's keep our fingers crossed Steve!
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 26 Aug 2001 13:37:06 -0400
++
++samba (2.2.1a-6) unstable; urgency=low
++
++ * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing
++ smbd to die with signal 11 under some unidentified situations.
++ Closes: #109774: Latest debian version breaks printer driver download.
++ Closes: #109946: not all files appear in samba-exported directories.
++ * Another patch from Steve Langasek. This one adds quotes around
++ printer names for print systems it's reasonable for Debian to
++ support. Together with the patch in #29957 (see changelog for
++ 2.2.1a-4), this should take care of the problems with multi-word
++ printer names in Samba.
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 24 Aug 2001 21:12:27 -0400
++
++samba (2.2.1a-5) unstable; urgency=low
++
++ * Important changes that affect how Samba is built on Debian
++ machines are implemented in this release. All of this changes
++ were suggested by the energetic Steve Langasek <vorlon@debian.org>,
++ and his arguments were so sound and reasonable that I decided
++ to implement them. Here's Steve's original changelog:
++
++ * Fix up the build system to avoid needing to run configure
++ as root to answer questions we already know the answers to.
++ * In the process, make surprising progress towards being able to
++ cross-compile the samba packages.
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 24 Aug 2001 01:08:06 -0400
++
++samba (2.2.1a-4) unstable; urgency=low
++
++ * Fixed typo in smbmount's mount page.
++ Closes: #109317: smbfs: mistype in smbmount manpage.
++ * Included symlink to smbspool to better support CUPS printing.
++ Closes: #109509: include symlink for cups samba support.
++ * Applied patch from Steve Langasek <vorlon@netexpress.net> to
++ fix bug #29957.
++ Closes: #29957: samba strips trailing " from strings in smb.conf.
++ * First attempt at fixing #47493. Another patch from Steve "I want
++ a bug-free Samba" Langasek.
++ Closes: #47493: Samba doesn't handle ':' in dir names right.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 21 Aug 2001 23:26:38 -0400
++
++samba (2.2.1a-3) unstable; urgency=low
++
++ * Steve Langasek <vorlon@netexpress.net> has been hard at work in
++ the last few days looking at the long list of open bugs filed
++ against the Samba packages. I don't know how to thank him. It's been
++ a pleasure working with Steve, and all the fixes, patches, etc. in
++ this release come from him. The bug list is greatly reduced thanks
++ to Steve's efforts.
++ * Steve's additions/modifications/patches/etc. are:
++ - New package that (libpam-smbpass) provides pam_smbpass. Before, this
++ was provided in another package but now the sources are part of
++ the Samba sources so we can start providing it from here.
++ Closes: #107043 - pam_smbpass now present in Samba source,
++ should be built from there
++ - Patch to source/smbd/service.c that allows admins to call
++ /bin/umount from the root postexec of a Samba share.
++ Closes: #40561 - samba pre/postexec commands do not work.
++ - Clear TMPDIR before starting smbd in /etc/init.d/samba.
++ Closes: #51295 - Problems with Samba and TMPDIR.
++ - Correction to documentation of "guest only".
++ Closes #38282 - "guest only" share still requires a password.
++ * Applied patch from Santiago Vila <sanvila@unex.es> to convert
++ /usr/sbin/mksmbpasswd from a shell script into a real awk script.
++ Sorry it took so long, Santiago; I hadn't realized you even
++ provided a patch :-)
++ Closes: #77891 - mksmbpasswd could be a real awk script.
++ * Updated description of the smbfs and smbclient packages. Also have
++ each package recommend the other.
++ Closes: #108650: Should suggest or recommend smbfs.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 13 Aug 2001 22:21:55 -0400
++
++samba (2.2.1a-2) unstable; urgency=low
++
++ * Build-depends: depend on debhelper (>=2.0.103).
++ Closes: #105795: Build-Depends are wrong.
++ * Run samba's preinst and postinst scripts without -e so failed commands
++ do not abort installation.
++ Closes: #106384: postinstall crashes abnormally. (And really closes
++ #104471.)
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 26 Jul 2001 00:30:37 -0400
++
++samba (2.2.1a-1) unstable; urgency=low
++
++ * New upstream version.
++ * Make sure samba's postinst script exits with a zero status.
++ Closes: #104471: Samba postinst problem.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 12 Jul 2001 21:55:21 -0400
++
++samba (2.2.1-1) unstable; urgency=low
++
++ * New upstream version.
++ Closes: #103339: config.guess and config.sub update required.
++ Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to
++ incompatibility with PAM.
++ Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2.
++ Closes: #95777: Samba 2.2 is unable to join or authenticate against
++ Samba 2.2 PDC domain.
++ Closes: #68842: samba should use PAM for password changing (I
++ haven't personally tried this one, but it's been
++ advertised this works.)
++ Closes: #102506: PAM account checking fails.
++ Closes: #102518: Complains about unknown paramter "obey pam
++ restrictions"
++ Closes: #94774: Build failure on PARISC machines.
++ * Moved away from /etc/cron.weekly/samba for log file rotation.
++ Now using logrotate.
++ Closes: #95548: typo in /etc/cron.weekly/samba.
++ Closes: #74951: nmbd does not rename its log file.
++ * Removed Debian-specific addtosmbpass.8 man page since this script
++ is not longer provided upstream. Users should use the smbpasswd
++ program instead.
++ * Updated sample /etc/samba/smb.conf to reflect the recent changes
++ affecting handling of PAM authentication. Also updated
++ /etc/pam.d/samba.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 11 Jul 2001 00:44:14 -0400
++
++samba (2.2.0.final.a-1) unstable; urgency=high
++
++ * New upstream version (contains security fix from DSA-065-1.)
++ Closes: #97241: samba 2.2.0 fails to process hostnames in
++ "hosts allow" config line.
++ * Removed Debian-specific addtosmbpass.8 man page since this script
++ is not longer provided upstream. Users should use the smbpasswd
++ program instead.
++ Closes: #98365: addtosmbpass is missing from 2.2.0.final-2.
++ * Updated sample /etc/samba/smb.conf to reflect the recent changes
++ affecting handling of PAM authentication. Also updated
++ /etc/pam.d/samba.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 24 Jun 2001 11:11:59 -0400
++
++samba (2.2.0.final-2) unstable; urgency=low
++
++ * Added libcupsys2-dev to Build-Depends.
++ * Samba depends now (again) on netbase so update-inetd is always
++ available for the Samba maintainer scripts.
++ Closes: #86063: Fails to uninstall if inetd is not installed.
++ * Updated source/config.{sub,guess} so ARM built doesn't fail.
++ Closes: #94480: config.sub out of date; can't build on arm.
++ Closes: #85801: config.sub/guess out of date.
++ * Not using brace expansion, i.e. {foo,bar} in any of the maintainers
++ scripts nor in debian/rules.
++ Closes: #88007: samba postrm has is not POSIX sh compliant.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 21 Apr 2001 17:27:18 -0400
++
++samba (2.2.0.final-1) unstable; urgency=low
++
++ * New upstream release. Lots of new things. See WHATSNEW.txt.
++ * Goofy version number because of my stupidity when assigning version
++ numbers to the CVS packages I have been uploading to experimental.
++ Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release
++ will follow soon.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 17 Apr 2001 22:58:14 -0400
++
++samba (2.2.0.cvs20010416-1) experimental; urgency=low
++
++ * CVS update.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 16 Apr 2001 21:25:15 -0400
++
++samba (2.2.0.cvs20010410-1) experimental; urgency=low
++
++ * CVS update.
++ * Added libreadline4-dev to Build-Depends.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 10 Apr 2001 16:53:45 -0400
++
++samba (2.2.0.cvs20010407-1) experimental; urgency=low
++
++ * CVS update. Includes what is in 2.2.0alpha3.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 7 Apr 2001 16:00:33 -0400
++
++samba (2.2.0.cvs20010316-1) experimental; urgency=low
++
++ * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch
++ from Samba CVS.
++ * Not compiling rpctorture as it has compile errors. Change in
++ debian/rules.
++ * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now
++ the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is
++ needed to use smbfs. Updated debian/control, debian/rules and
++ README.Debian to reflect this change.
++ * Added to swat a versioned dependency on samba (so a user is forced to
++ install a new version of swat each time a new version of samba is
++ installed.)
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 18 Mar 2001 14:21:14 -0500
++
++samba (2.0.7-5) unstable; urgency=medium
++
++ * Transition from suidmanager to dpkg-statoverride.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 18 Jan 2001 23:51:56 -0500
++
++samba (2.0.7-4) unstable; urgency=medium
++
++ * Applied Urban Widmark <urban@teststation.com> fixes to smbmount. Urban
++ is the maintainer of the smbfs in the kernel and of the userland
++ utilities.
++ * Links to HTML documents are correct now.
++ Closes: #69439: swat: Broken help file symlinks
++ Closes: #72615: samba-doc directory changed: removed htmldocs from path
++ Closes: #75847: swat: Wrong symlink
++ Closes: #66857: Wrong links to html documents.
++ Closes: #77912: misplaced documentation symlinks for swat
++ * Building Samba with CUPS support. For this I reverted the change to
++ source/configure.in that I did in 2.0.7-3 and re-ran autoconf.
++ Closes: #59038: samba: not compiled with cups support.
++ * Fix against previous known/unknown user time difference patch to swat
++ (make username / password lookups take the same time.) Remove CGI
++ logging code in Swat.
++ Closes: #76341 - Security holes in swat
++ * Updated Build-depends.
++ * Updated debian/copyright to refer to the correct location of the GPL.
++ * debian/rules: changed DESTDIR to `pwd`/debian/samba (was
++ `pwd`/debian/tmp.)
++ * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some
++ strange reason dh_installdirs is not creating debian/tmp/ so I needed
++ to tweak everything to install stuff in debian/samba rather than in
++ debian/tmp.)
++ * debian/control: changed section of samba-docs to 'doc' (was 'docs')
++ * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules
++ and source/scripts/installswat.sh.)
++ * Fixed (by tweaking debian/rules)
++ /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid.
++ * Added "Provides: samba-client" to smbclient's section in control.
++ Closes: #71143: smbclient: Smbclient should provide samba-client.
++ * Fix for desired_access being zero in map_share_mode() (patch to
++ source/smbd/nttrans.c.) Thanks to Gary Wilson
++ <wilsong@sergievsky.cpmc.columbia.edu> for bringing this patch to my
++ attention.
++ * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and
++ 2.2.x kernels even when the build is done in a system running
++ a 2.2.x kernel.
++ Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but
++ doesnt depend on it.
++ Closes: #72758: README.Debian should comment on 2.0.x kernels.
++ Closes: #56935: Samba 2.0.6 and Kernel 2.0.x.
++ Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info.
++ Closes: #60580: samba: failed to set gid.
++ Closes: #64280: Samba panics, can't set gid.
++ Closes: #66816: Must deal with brokenness under 2.0.x.
++ Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK.
++ Closes: #69735: PANIC: failed to set gid
++ Closes: #66122: "smbclient -L localhost -U%" returns with "tree
++ connect failed: code 0".
++ Closes: #57637: Samba says tree connect error.
++ Closes: #58015: potato samba wins support is broken.
++ * Fixed comments in sample smb.conf to point to the correct location.
++ Closes: #69578: comments in smb.conf points to wrong path.
++ * Move codepages from /etc/samba/codepages/ to
++ /usr/share/samba/codepages/.
++ Closes: #63813: samba; codepages should go in /usr/lib.
++ * Moved /var/samba/ to /var/state/samba/.
++ Closes: #49011: samba package not FHS compliant.
++ * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain()
++ is found.
++ Closes: #44558: netgroup support missing in samba 2.0.5a-1.
++ * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and
++ --exec. Got rid of --exec so --pidfile works.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Jan 2001 00:15:57 -0500
++
++samba (2.0.7-3) frozen unstable; urgency=high
++
++ * Release manager: this closes a RC bug.
++ * Commented out the section in source/configure.in that auto-detects
++ CUPS support and then ran autoconf to generate a new configure
++ script. This was done to prevent machines that have libcupsys-dev
++ installed from detecting CUPS support and adding an unwanted
++ dependency on libcupsys. This way the whole printing system
++ won't break on upgrades. CUPS support should be added after
++ Potato is released.
++ Closes: #65185: samba-common: Upgrading removes printing system.
++ Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys.
++ * Updated README.debian.
++ Closes: #64594: Old README.Debian in /usr/share/doc/samba.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 20 Jun 2000 19:16:04 -0400
++
++samba (2.0.7-2) frozen unstable; urgency=high
++
++ * Release manager: this closes RC bug #63839 that prevents Samba
++ to be built from source.
++ * Fixed a stupid typo in debian/rules that was preventing Samba
++ to be built from source.
++ Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir)
++ * I forgot to mention that O'Reilly's book "Using Samba" was donated
++ to the Open Source community. The book was included in Samba 2.0.7
++ in HTML format and is part of the Debian Samba package since
++ Samba 2.0.7-1.
++ * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help
++ files were supposed to be provided in both the swat and the samba-doc
++ packages. This duplication was a waste of space. Starting with
++ Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML
++ files are included only in samba-doc, and are accessed via symlinks
++ from within swat.
++ Closes: #58810: superfluous files in swat?
++ * Added a 'echo "."' to /etc/init.d/samba in the reload) section.
++ Closes: #63394: "echo ." missing in reload section of init.d script
++ * Fixed typo in docs/htmldocs/using_samba/ch06_05.html.
++ Closes: #64344: typo "encrypted passwords"
++ * Cleaned up samba's postrm script so important common files aren't
++ deleted when samba is purged. Created a samba-common.postrm script.
++ Closes: #62675: purging samba removes /etc/samba/smb.conf.
++ Closes: #63386: samba --purge removes /etc/samba dir even though
++ smbclient/smbfs/samba-common packages are still installed
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 3 May 2000 02:42:07 -0400
++
++samba (2.0.7-1) frozen unstable; urgency=low
++
++ * New upstream version. Dear Release Manager: please allow this
++ package to go to frozen as it contains fixes to a _lot_ of problems.
++ You can take a look at all the problems fixed by this release in
++ the official upstream announcement at
++ http://us1.samba.org/samba/whatsnew/samba-2.0.7.html.
++ * Added --with-utmp to add utmp support to smbd (this is new in Samba
++ 2.0.7)
++ * Closes: #62148 - samba not rotating filled logs.
++ * Closes: #56711: Samba doesn't manage well long share name (please note
++ that it's possible to connect to shares with names longer than
++ 14 characters but the share will be listed with a name truncated to
++ 13 characters.)
++ * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67).
++ Closes: #50907 - logon path not working.
++ This is not a bug, it's just Samba doing the same thing an NT server
++ does. See WHATSNEW.txt and smb.conf's man page for details.
++ * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper
++ is not supported anymore.)
++ * Closes: #58994 swat: typo in swat description.
++ * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware
++ problems, person that reported the bug never came back.)
++ Closes: #54398 - smbadduser fails, looks for ypcat.
++ * Fixed swat's man page to include Debian specific installation
++ instructions. There's not necessary to edit /etc/services or
++ /etc/inetd.conf.
++ (Closes: #58616 - incomplete install config && incorrect installation
++ instructions.)
++ * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat
++ to look for smbd and nmbd in the wrong place when requested to start or
++ stop smbd or nmbd.
++ (Closes: #55028 - swat can't start samba servers.)
++ * Closes: #37274: smbclient does not honour pot. (Tested and seems to be
++ working now.)
++ * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492,
++ #50479, #39818, #54383, #59411.
++ (please re-open any of this if the problem still exists - I was unable
++ to confirm any of this because I could never reproduce them.)
++ Closes: #56699 - Samba's nmbd causes random kernel oops several
++ times in a row.
++ Closes: #62185 - nmbd's forking until no more file descriptors are
++ available.
++ Closes: #56247 - session setup failed: ERRSRV - ERRbadpw.
++ Closes: #52218 - Either wins proxy does not work, or I don't understand
++ it.
++ Closes: #43492 - intermittent problem changing password.
++ Closes: #50479 - Can't access windows 2000 shares with samba.
++ Closes: #39818 - samba-common: Upgrading Samba from the Slink version.
++ Closes: #54383 - samba-common: Missing /etc/smb.conf.
++ Closes: #59411 - smbclient: cannot browse Win2k shares.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 27 Apr 2000 16:07:45 -0400
++
++samba (2.0.6-5) frozen unstable; urgency=low
++
++ * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries
++ in this package are broken unless libcupsys1 is installed.
++ samba-common has a "grave" bug because of this. Instead of adding
++ libcupsys1 to the Depends: list of each package in debian/control
++ I investigated why dh_shlibs was not picking the dependency
++ automatically. It turns out that it's probably a bug in libcupsys1
++ because the format of its shlibs file is not correct. I fixed that
++ file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are
++ picked correctly. I'll talk to the libcupsys1 maintainer.
++
++ I think the addition of CUPS support to Samba is a big change that
++ should not go into Frozen. So, I decided to back up the addition
++ of CUPS support I did in 2.0.6-4 to minimize problems. I'll add
++ CUPS support again when I start working on Samba for Woody.
++ (Closes: #59337 - samba-common has a missing dependency)
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 1 Mar 2000 08:40:02 -0500
++
++samba (2.0.6-4) frozen unstable; urgency=low
++
++ * It seems that sometimes nmbd or smbd are not killed when upgrading.
++ I think it is because in samba's prerm script I was calling
++ start-stop-daemon with the --pidfile switch and in old versions of
++ Samba the nmbd and smbd daemons did not store their PIDs in a file in
++ /var/samba/. I changed debian/samba.prerm so the existence of the
++ PID files is checked before calling "start-stop-daemon --pidfile ..."
++ If the PID files do not exist then start-stop-daemon is called
++ without the --pidfile parameter.
++ (Closes: #58058 - upgrade from slink went badly)
++ * Fixed typo in description of swat package in debian/control.
++ * Installed libcupsys1-dev so the configure script picks up CUPS
++ and Samba is compiled with CUPS support. Also added libcupsys1 to
++ the Depends: list of package samba in debian/control.
++ (Closes: #59038 - samba not compiled with cups support)
++ * Added a small paragraph to debian/README.debian warning about possible
++ problems with the WINS code in Samba 2.0.6.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 28 Feb 2000 14:00:42 -0500
++
++samba (2.0.6-3) frozen unstable; urgency=low
++
++ * Applied patch posted by Jeremy Allison to the samba mailing list
++ that should take care of the internal errors reported in bug #52698
++ (release-critical). Wichert: please test as I never could reproduce
++ it here.
++ (Closes: #52698 - samba gets interbal errors)
++ * Moved samba-docs to the 'docs' section.
++ (Closes: #51077 - samba-doc: wrong section)
++ * Added reload capability to /etc/init.d/samba (only for smbd because
++ nmbd does not support reloading after receiving a signal).
++ (Closes: #50954 - patch to add reload support to /etc/init.d/samba)
++ * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so
++ Unix password syncronization works with the passwd program currently
++ in Potato. Thanks to Augustin Luton <aluton@hybrigenics.fr> for
++ the correct chat script.
++ * Stole source/lib/util_sec.c from the CVS tree of what will become
++ Samba 2.0.7 or whatever so we can use the same binaries under
++ both 2.0.x and 2.2.x kernels.
++ (Closes: #51331 - PANIC: failed to set gid)
++ * smbadduser is now provided as an example and it's customized for Debian.
++ I am not providing this script in /usr/sbin/ because then I would need
++ a dependency on csh, something that I don't want to do.
++ (Closes: #51697, #54052)
++ * Fixed the short description of the smbfs package in debian/control.
++ (Closes: 53534 - one-line description out of date).
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 23 Nov 1999 16:32:12 -0500
++
++samba (2.0.6-2) unstable; urgency=low
++
++ * samba-common now depends on libpam-modules (not on libpam-pwdb, which
++ I have been told is obsolete). I modified /etc/pam.d/samba accordingly
++ to reflect the change.
++ (Closes: Bug#50722: pam pwdb dependence?).
++ * The old /etc/pam.d/samba file which had references to pam_pwdb caused
++ smbd to die with a signal 11. The new /etc/pam.d/samba file fixes
++ this problem.
++ (Closes: #50876, #50838, #50698)
++ * Compiled with syslog support (use at your own risk: syslog support
++ is still experimental in Samba). I added the parameters "syslog = 0"
++ and "syslog only = no" to the sample smb.conf to avoid pestering
++ users that do not want Samba to log through syslog.
++ (Closes: Bug#50703 - syslog only option doesn't work)
++ * Removed the stupid code in the smbmount wrapper script that tries
++ to load the smbfs module if smbfs is not listed in /proc/filesystems.
++ (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled
++ as a module in the kernel)
++ * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so
++ 'mount -t smb ...' works just as 'mount -t smbfs ...'.
++ (Closes: Bug#50763 - 'mount -t smb' doesn't work)
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 20 Nov 1999 18:53:35 -0500
++
++samba (2.0.6-1) unstable; urgency=low
++
++ * Samba 2.0.6 has been released. This is the first try of the Debian
++ Samba packages. I know for sure that smbd won't work properly on
++ 2.0.x kernels because the patch that Wichert sent me does not apply
++ to the new source/lib/util_sec.c in Samba 2.0.6. That file was
++ completely re-written by Tridge.
++ * Updated README.Debian.
++ * A new client utility called smbspool appeared in Samba 2.0.6. I added
++ this utility to the smbclient package, although I haven't tried it yet.
++ * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount.
++ This is to be able to type "mouont -t smbfs ...". This symlink goes
++ in the smbfs package, of course.
++ * This new release should close the following bugs (some of these
++ are fixed for sure in this new upstream release, some others I could
++ not reproduce but I believe they are fixed if they were real bugs.
++ As always, please feel free to re-open the bugs if the problem is not
++ solved).
++ Closes: Bug#33240: icmp mask needs a bug workaround.
++ Closes: Bug#37692: samba: Has problems detecting interfaces.
++ Closes: Bug#38988: samba: Truly bizzare behavour from nmbd.
++ Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast
++ properly.
++ Closes: Bug#44131: smbfs: no longer possible to set file and
++ directory-modes.
++ Closes: Bug#46992: smbmount-2.2.x manpage wrong.
++ Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline.
++ Closes: Bug#46605: smbmnt segfaults.
++ Closes: Bug#48186: smbmount.
++ Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included].
++ Closes: Bug#47332: smbmount: could -f and -P be added back?
++ * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM
++ module). To succesfully add PAM support, I created /etc/pam.d/samba and
++ added this file as a conffile for the samba-common package. I also made
++ samba-common depend on libpam-pwdb.
++ * Added simple man pages for the wrapper scripts smbmount and smbmount.
++ (Closes: Bug#44705 - Missing smbmount man page)
++ * Installed libreadlineg2-dev in my system so smbclient now has a
++ "history" command and libreadline support :-)
++ * This time I did add a check to the smbmount wrapper script to see if
++ the kernel has support for smbfs, as suggested by Jeroen Schaap
++ <J.Schaap@physiology.medfac.leidenuniv.nl>. I mentioned in the changelog
++ for samba-2.0.5a-3 that I did this but I forgot at the end.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Nov 1999 12:08:15 -0500
++
++samba (2.0.5a-5) unstable; urgency=low
++
++ * I am sorry to report that the smbwrapper package is gone for the
++ moment. The reason for this is twofold: first of all, smbwrapper
++ is completely broken in Samba-2.0.5a (it compiles but it doesn't
++ run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second,
++ when I asked Andrew Tridgell (father of Samba) about the state of
++ smbwrapper he told me that Ulrich Drepper (head of the glibc project)
++ broke on purpose the glibc stuff in which smbwrapper is based.
++ Consequently, Tridge recommended me to compile Samba without
++ support for smbwrapper. When, I have no idea. Sorry folks. Here is
++ the original message I received from Andrew:
++
++ > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's
++ > smbwrapper doesn't even compile under glibc2.1.
++
++ yep, Ulrich deliberately broke it. It won't get fixed till glibc
++ allows the sorts of games it plays to work again. I suggest you turn
++ it off in your build scripts until that gets sorted out.
++
++ * Swat's file are now in /usr/share/samba/ instead of
++ /usr/lib/samba/ (bug #49011).
++ * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011).
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 2 Nov 1999 12:59:13 -0500
++
++samba (2.0.5a-4) unstable; urgency=low
++
++ * Applied patch from our fearless leader (Wichert) to fix the darn bug
++ that prevents Samba to work on 2.0.x kernels if it was compiled
++ in a system running a 2.2.x kernel. This closes #40645 (build uses
++ setresuid which doesn't work under 2.0.34 (does apparently under
++ 2.2.x) ).
++ * Fixed the entry that swat's postinst script adds to /etc/inetd.conf
++ so it is '#<off># swat\t\tstream\ttcp\tnowait.400 ...' instead of
++ '#<off>#swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused
++ 'update-inetd --enable swat' to leave the entry for swat disabled.
++ Thanks to Dave Burchell <burchell@inetnebr.com> for finding out
++ this problem. This closes #48762 (swat uses non-standard syntax to
++ comment out inetd.conf entry).
++ * /usr/sbin/swat does not think anymore that the smbd daemon lives
++ in /usr/local/samba/bin/. To fix this I am running now source/configure
++ with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba
++ 'swat' fails: incorrect hardwired path in the binary).
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 31 Oct 1999 03:42:38 -0500
++
++samba (2.0.5a-3) unstable; urgency=low
++
++ * I am pretty darn busy with my MBA, I apologize for the long time it's
++ taking to squash bugs in the Samba packages.
++ * Built with debhelper v2 for FHS compliancy. Changed a couple of
++ things in debian/rules to accomodate for the new place for the docs.
++ I also had to change debian/{samba.postinst,samba.prerm,swat.postinst}
++ to make sure that the symlink from /usr/doc/xxx exists and points to
++ /usr/share/doc/xxx (the reason for this is that I am not letting
++ debhelper to create these scripts for me automatically).
++ * Built with latest libc6.
++ * smbfs: finally, the nasty bug that causes smbmount to die after
++ a while is gone thanks to Ben Tilly <Ben_Tilly@trepp.com>.
++ The problem was just a typo in source/client/smbmount.c.
++ This closes grave bug #42764 (smbmount dies) and #43341
++ (smbfs-2.2.x won't function after a while).
++ * Fixed the smbmount wrapper script to eliminate a bashism (closes
++ #45202 - "wrapper scripts use $* instead of "$@") and to recognize
++ 2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize
++ kernel 2.3.x").
++ * Added a check to the smbmount wrapper script to see if the
++ kernel has support for smbfs, as suggested by Jeroen Schaap
++ <J.Schaap@physiology.medfac.leidenuniv.nl>.
++ * swat's man page is now part of the swat package, not of the samba
++ package. This closes #44808 (Samba has a man page for swat, but
++ the binary is not included).
++ * The interface program smbrun is not longer needed by smbd because
++ of the availability of execl() under Linux. Because of this, the
++ smbrun is not even being compiled. Since there is no need for smbrun
++ now, the smbrun man page was taken out of the samba package. This
++ closes #45266 (/usr/bin/smbrun missing).
++ * smbpasswd is now part of the samba-common package, and not part of
++ the samba package. This is to let administrators that do not want
++ to install a full Samba server administer passwords in remote
++ machines. This closes bug #42624 (smbpasswd should be included in
++ smbclient). This bug report also suggests that swat becomes part of
++ the samba package, that smbfs becomes part of the smbclient package,
++ and that the binary smbpasswd becomes part of the smbclient package.
++ I moved smbpasswd to the samba-common package but I am reluctant to
++ do the other things the bug report suggests.
++ * In order to keep dpkg happy when moving smbpasswd from the samba
++ package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)"
++ in the control section of the samba-common package and a
++ "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the
++ samba package (in debian.control).
++ * Samba is now being compiled with the "--with-netatalk" option. This
++ closes #47480 (Could samba be compiled with the --with-netatalk option).
++ * All packages that depend on samba-common have a versioned dependency
++ now. This was accomplished by adding "(= ${Source-Version})" to the
++ relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho
++ <gaia@iki.fi> for the hint. This closes #42985 (samba should probably
++ have a versioned depends on samba-common).
++ * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all
++ the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file).
++ * Added the smbadduser helper script to the samba package. This closes
++ #44480 (Samba doesn't come with the smbadduser program).
++ * Applied patch from szasz@triton.sch.bme.hu that prevents smbmount
++ to leave an entry in /etc/mtab for a share that could not be mounted
++ because of invalid user of password. The patch also allows smbumount
++ to unmount the share in the event that something goes wrong with the
++ smbmount process. This closes bug #48613 (Mount/umount problems +
++ patch) as well as #44130 (failed mount is still mounted).
++ * smbmount-2.2.x is now setuid root. This is needed for the patch
++ applied above to be effective. If smbmount-2.2.x is not setuid root
++ then an entry will be left in /etc/mtab even when the mount
++ fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid
++ for this to work.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 27 Oct 1999 10:36:13 -0400
++
++samba (2.0.5a-2) unstable; urgency=low
++
++ * This version is basically the same as 2.0.5a-1 but it was compiled
++ on a Potato system with glibc2.1. See below the change log for 2.0.5a-1
++ for more information.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Jul 1999 02:25:29 -0400
++
++samba (2.0.5a-1) stable; urgency=high
++
++ * I'm back from the Honey Moon. We are pretty busy because we are moving
++ to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still
++ have plenty of things to pack and to do. Samba 2.0.5 was released
++ while I was in the Honey Moon and it is just now (almost 3 AM) when
++ I have time to package it.
++ * Because of the security problems fixed in 2.0.5, this upload goes
++ to both stable and unstable (the Security Team asked for this).
++ * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will
++ be compiled on a Potato system.
++ * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common
++ section in debian/control (as suggested by Steve Haslam
++ <araqnid@debian.org>) to fix the problems that appear when upgrading
++ from the Samba package in Slink. Please test this as I am completely
++ unable to do so. This should fix bug #39818 (Upgrading Samba from the
++ Slink version).
++ * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in
++ order to have defined several socket options when compiling with
++ Linux 2.2.x kernel headers - the fix is now upstream.
++ * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command
++ line syntax similar to the one used by the old smbmount (for 2.0.x
++ kernels). This means that the wrapper script is no longer necessary
++ so I removed it. In its place there is a simple wrapper script that
++ calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is
++ running.
++ * Because of the wedding, the Honey Moon, and our move to Pittsburgh,
++ I can't work on fixing other bugs in this release.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Jul 1999 02:18:51 -0400
++
++samba (2.0.4b-3) unstable; urgency=low
++
++ * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files
++ and because of this /usr/bin/smbumount was part of the samba package
++ instead of part of the smbfs package.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 1 Jul 1999 01:51:24 -0400
++
++samba (2.0.4b-2) unstable; urgency=low
++
++ * Dark (and archive maintainers): please remove from Potato the smbfsx
++ binary package and also the old source package for smbfs. smbfs and
++ smbfsx have been merged starting with this version.
++ * Merged the old smbfs package with Samba. Now there is only one package
++ for the smbfs utilities and is called "smbfs". The package smbfsx
++ does not exist any more and this new smbfs package must be used
++ for both 2.0.x and > 2.1.x kernels.
++ * A wrapper script was added to handle the syntax change in smbmount
++ in the new smbfs utilities (required for kernels > 2.1.70). The
++ home page for this script is http://www.wittsend.com/mhw/smbmount.html.
++ Please _note_ that this will change (for good) in Samba 2.0.5 :-)
++ * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x
++ or smbumount-2.0.x depending on the kernel currently running.
++ * Not using -t for savelog in cron.weekly script.
++ * Recompiled without libreadlineg-dev (Samba does not seem to be using
++ it so unnecessary dependencies are produced).
++ * glibc2.1 build.
++ * Removed smbpasswd.8 man page from the debian/ directory because it is
++ now being provided upstream.
++ * Got rid of the ugly hack I put in source/lib/util_sock.c to have
++ IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the
++ autoconf stuff to #include <netinet/ip.h>. I've sent the patch to
++ Jeremy Allison so we have this upstream.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 28 Jun 1999 17:47:19 -0400
++
++samba (2.0.4b-1) unstable; urgency=low
++
++ * New upstream release. This release fixes the following Debian bugs:
++ #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and
++ #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy
++ Allison released Samba 2.0.4 and found out that there were a couple
++ of minor bugs so he released 2.0.4a. Then he found out about more
++ serious bugs and released 2.0.4b. I have built this package several
++ times between yesterday and today because of this. Now I am releasing
++ the Debian packages for Samba with what I believe will be the latest
++ release the Samba Team will make at least in the next 4 days (Jeremy
++ is taking a short vacation).
++ * Still compiling against glibc2.0 (sorry about that :-)
++ * Hacked source/smbwrapper/smbsh.c to fix the problem
++ of smbsh not finding the shared library smbwrapper.so. It looks
++ now in /usr/lib/samba/ for this file. This fixes #32971, #32989,
++ #33278, #34911 and #36317.
++ * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf
++ and /etc/samba/codepages/. This fixes #33128 (smbmount complains about
++ missing /etc/smb.conf).
++ * Package swat does not depend on httpd anymore (there's no need to).
++ This fixes #35795 (swat requires httpd).
++ * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and
++ smbumount-2.2.x. Same applies to the man pages.
++ * Changed minor type in smbmount's man page (changed "\"" by "\'"). This
++ fixes #34070 (wrong quotes in manpage).
++ * Used Fabrizio Polacco's <fpolacco@icenet.fi> procedure to create the
++ Debian package for Samba. This closes #35781 (samba has no pristine
++ source).
++ * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only
++ if the size of either is different than 0. Also, added comments at the
++ beginning of this script to explain how rotation of log files works in
++ Samba. Thanks to ujr@physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler)
++ for the suggestions. This closes #37490 (cron.weekly script rotates not
++ used [sn]mb.old files). As I side effect, this should also close
++ #31462 (still trouble with /etc/cron.weekly/samba).
++ * Check for old /etc/pam.d/samba file which is not provided by this version
++ of the Debian Samba package but was provided in older versions. If this
++ file exists we delete it. We check for this in the postinst. This closes
++ #37356 (samba put stuff in pam.d that pam complains about) and #34312
++ (libpam0g: questions during upgrade).
++ * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done
++ in the postinst script. This closes #35730 (Security problem with
++ /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1).
++ * I have just checked and it looks like #28748 (smbfsx doesn't "return ")
++ has been fixed. This might have been fixed since a long time ago.
++ * Long long standing bug #18488 (smbclient: internal tar is broken) is
++ closed in this release of Samba. The bug might have been closed for a
++ long long time, but I did not check for this before.
++ * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY"
++ message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works),
++ #34148 (warnings from smbd) and #35333 (samba warnings).
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 20 May 1999 00:35:57 -0400
++
++samba (2.0.3-1) unstable; urgency=low
++
++ * New upstream version.
++ * Removed the convert_smbpasswd.pl program I created and put in
++ /usr/doc/samba/ because there's a convert_smbpasswd script in the
++ upstream sources that does the same thing. I modified the postinst
++ script to use this script instead of the one I created.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 28 Feb 1999 01:35:37 -0400
++
++samba (2.0.2-2) unstable; urgency=low
++
++ * Updated the README.Debian file.
++ * Updated the description of the samba package in the control file.
++ * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now
++ installed setuid root as they should be. This was done by doing a
++ a "chmod u+s" for each binary in debian/rules and by creating the
++ file debian/smbfsx.suid.
++ * Minor patch to source/client/smbumount.c to allow normal users
++ to umount what they have mounted (problem was a kernel vs. libc6
++ size mismatch). I sent the patch upstream.
++ * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is
++ created.
++ * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to
++ debian/smbwrapper/usr/lib/samba/.
++ * Hacked source/smbwrapper/smbsh.c to fix the problem
++ of smbsh not finding the shared library smbwrapper.so.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Feb 1999 18:11:34 -0400
++
++samba (2.0.2-1) unstable; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 11 Feb 1999 01:35:51 -0400
++
++samba (2.0.1-1) unstable; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 6 Feb 1999 06:51:18 -0400
++
++samba (2.0.0final-4) unstable; urgency=low
++
++ * The samba postinst made an unwarranted assumption that the file
++ /etc/samba/smbpasswd exists. If the file did not exist (which is
++ perfectly valid) the postinst will fail. This fixes #32953.
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 5 Feb 1999 23:32:46 -0400
++
++samba (2.0.0final-3) unstable; urgency=low
++
++ * Added to debian/control a "Depends: ${shlibs:Depends}" line for the
++ samba-common package so dependencies for this package are set
++ correctly (thanks to Dark for pointing this out).
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 4 Feb 1999 09:45:21 -0400
++
++samba (2.0.0final-2) unstable; urgency=low
++
++ * Finally!!! The first upload to unstable. Sorry for the delay folks
++ but I have been quite busy lately :-) Another reason for the delay
++ is that I wanted to ease the migration from Samba 1.9.18p10 and
++ before to Samba 2.0.0. I changed the location of the config. files
++ from /etc/ to /etc/samba/ and this made things a little bit harder.
++ * This package needs 2.2 kernel headers to compile (well, this is
++ true for the smbfsx package, all others compile fine with 2.0 kernel
++ headers).
++ * Created a preinst script for the samba package to take care of the
++ location migration of smb.conf (from /etc/ to /etc/samba/). The
++ preinst script also takes care of moving /etc/smbpasswd to its new
++ location (/etc/samba/).
++ * Created postinst and postrm scripts to add/remove an entry for swat
++ in /etc/inetd.conf.
++ * I had forgotten to install the sambaconfig script so I changed
++ debian/rules to install this script.
++ * Added a postrm script for the samba package (I had forgotten to add
++ this script to the new Samba packages after the migration from 1.9.18
++ to 2.0.0).
++ * Created a small Perl script that is called from the samba postinst
++ to convert the smbpasswd from the old format used in version prior
++ to 2.0.0 to the new one used in 2.0.0 and beyond.
++ * The upgrade process should be automatically now. Please let me know
++ of any problems you encounter.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 23 Jan 1999 09:34:10 -0400
++
++samba (2.0.0final-1) experimental; urgency=low
++
++ * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable
++ because I still have to work out the migration from the old
++ samba packages to the new ones. I also need to work more on the
++ new swat package.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 14 Jan 1999 22:40:02 -0400
++
++samba (2.0.0beta5-1) experimental; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 5 Jan 1999 00:37:57 -0400
++
++samba (2.0.0beta4-1) experimental; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 23 Dec 1998 18:37:45 -0400
++
++samba (2.0.0beta3-1) experimental; urgency=low
++
++ * New upstream version.
++ * I have just realized that the documentation patches (for man pages)
++ that I used for the 1.9.18 release are not longer necessary because
++ there was a major re-write of all the Samba documentation that added
++ the missing bits of information. So, I have just removed these minor
++ patches.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 8 Dec 1998 12:00:30 -0400
++
++samba (2.0.0beta2-1) experimental; urgency=low
++
++ * New upstream version.
++ * This new version fixes the potential security problem that
++ was posted to debian-private (using the "message command" parameter
++ to execute arbitrary commands from messages sent from LinPopUp).
++ * Changed /etc/init.d/samba to use one of the variables stored in
++ /etc/samba/debian_config to know how Samba is being run (from inetd or
++ as daemons) instead of grepping /etc/inetd.conf which may not exist
++ if the user is running xinetd (this fixes bug #29687 - assumes using
++ vanilla inetd)
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Nov 1998 23:32:03 -0400
++
++samba (2.0.0beta1-1) experimental; urgency=low
++
++ * First beta release of the samba-2.0.0 code. Before the beta I was
++ working with sources downloaded directly from the CVS server. This
++ package goes into experimental and I plan to release the new
++ samba to unstable as soon as it gets out of beta.
++ * Created several packages out of the Samba sources. They are:
++ samba (nmbd and smbd daemons + related programs), smbclient (FTP
++ like command line utility to retrieve files from SMB servers),
++ swat (Samba Web Administration Tool), samba-common (common files
++ used by samba, smbclient and swat), smbfsx (smbfs utilities for
++ kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation).
++ * Refreshed debian/samba-doc.docs so recently added docs. are
++ installed in the samba-doc package. New additions include man
++ pages in the /usr/doc/samba-doc/htmldocs/ directory.
++ * Deleted Debian specific nmblookup(1) man page as it is now upstream.
++ * Added smbtorture to smbclient package.
++ * Moved rpcclient from the samba package to the smbclient package.
++ * The Samba daemons (nmbd and smbd) now create a PID file so I changed
++ all calls to start-stop-daemon to use the PID file.
++ * Fixed debian/rules to install mksmbpasswd (fixes #27655).
++ * Modified /etc/init.d/samba so nmbd is started without the -a (append
++ to the log file instead of overwrite) switch. The new behavior of
++ nmbd is to NOT overwrite log files, so the -a switch can be deleted
++ safely.
++ * Moved from debstd to debhelper.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 1 Oct 1998 08:37:41 -0400
++
++samba (1.9.18p10-5) frozen unstable; urgency=high
++
++ * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than
++ the one I was trying to fix: in /etc/init.d/samba I got rid of the test
++ that tells us whether the Samba daemons are running from inetd or as
++ standalone daemons. I corrected the problem by editing again
++ /etc/init.d/samba to uncomment the test.
++ * Wishlist bug #28298 (typos in samba) was fixed.
++ * Wishlist bug #28309 (typos in smb.conf) was fixed.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 28 Oct 1998 09:11:47 -0400
++
++samba (1.9.18p10-4) unstable; urgency=low
++
++ * Minor patch to debian/rules to delete *substvars instead of only
++ substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz
++ <dmj@andrew.cmu.edu> for this).
++ * Small patch to source/shmem_sysv.c that eases compilation under
++ glibc-2.1 (thanks to Daniel <dmj@andrew.cmu.edu> for this).
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 17 Sep 1998 15:33:49 -0400
++
++samba (1.9.18p10-3) unstable; urgency=low
++
++ * Patched smbclient again to fix minor formatting problem introduced
++ by Magosanyi Arpad's smbclient patch.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 3 Sep 1998 11:03:23 -0400
++
++samba (1.9.18p10-2) unstable; urgency=low
++
++ * Sync'ed include files for the smbfs utilities with the ones in
++ kernel 2.1.119.
++ * Added to the /usr/doc/samba/examples/ directory a new script called
++ wins2dns (courtesy of Jason Gunthorpe <jgg@deltatee.com>) that
++ generates BIND sonze files for hosts in the WINS database.
++ * Patched smbclient to include enhancements by Magosanyi Arpad
++ <mag@bunuel.tii.matav.hu> that make scripting easier.
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 28 Aug 1998 13:34:54 -0400
++
++samba (1.9.18p10-1) stable unstable; urgency=low
++
++ * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
++ description of what has changed). I built a 1.9.18p9-1 but I
++ never released it because an obscure bug was found just a couple
++ of days before the official release, so the Samba Team stopped
++ the rollover of 1.9.18p9.
++ * Updated documentation (new files were added to the docs/ directory
++ that were not installed in /usr/doc/samba/).
++ * Fixed long standing bug #7695 (smb.conf's man page doesn't document
++ 'printing=lprng') - I made a couple of changes to the man page to
++ include references to lprng.
++ * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it
++ is necessary to make samba suggest psmisc just because the postinst
++ script mentions to call killall. So, I removed all references to
++ "killall" in the scripts.
++ * Fixes bug #25999 (Samba does not by default work with unix password
++ sync): I added the "passwd program" and "passwd chat" parameters to
++ the sample smb.conf to reflect the Debian environment.
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 21 Aug 1998 08:59:18 -0400
++
++samba (1.9.18p9-1) unstable; urgency=low
++
++ * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
++ description of what has changed).
++ * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is
++ now part of the new upstream version.
++ * Corrected small typo in addtosmbpass' man page (fixes #25629).
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 11 Aug 1998 08:53:08 -0400
++
++samba (1.9.18p8-2) frozen unstable; urgency=medium
++
++ * Applied patch received from Jeremy Allison (Samba Team) that fixes
++ "grave" bug #23903 (samba maps username before authenicating with
++ NT password server).
++ * Added a "sleep 2" between "start-stop-daemon --stop" and
++ "start-stop-daemon --start" in /etc/init.d/samba so when this script
++ is called with the "restart" parameter the Samba daemons are restarted
++ properly. This fixes bug #24211 (init.d script doesn't restart).
++ * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to
++ avoid annoying warning messages.
++ * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096
++ and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't
++ find who sent this suggestion to me. If you are listening, drop me a
++ note and I'll put your name here :-)
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 29 Jun 1998 08:45:01 -0400
++
++samba (1.9.18p8-1) frozen unstable; urgency=low
++
++ * New upstream release that fixes _lots_ of "ugly" bugs. The list of
++ fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt).
++ * Fixed postinst to quote arguments to if [ arg .. ] constructs
++ (fixes #22881).
++ * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing
++ list) that solves a problem with username maps (the Samba Team did
++ not catch this problem before final 1.9.18p8).
++ * Made /etc/init.d/samba to print out a warning when Samba is running
++ from inetd and the user runs /etc/init.d/samba to start|stop|restart
++ Samba (there's no point on doing this because inetd will start the
++ daemons again when there is traffic on UDP port 137-139).
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 13 Jun 1998 00:18:25 -0400
++
++samba (1.9.18p7-4) frozen unstable; urgency=medium
++
++ * Fixes the serious problem of having the WINS name server
++ database getting deleted at boot time. That happened because the
++ WINS database was being stored under /var/lock/samba/ and all files
++ under /var/lock/ are deleted at boot time. The place where the WINS
++ database is stored was moved to /var/samba/.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 18 May 1998 20:24:29 -0400
++
++samba (1.9.18p7-3) stable; urgency=high
++
++ * Libc5 version for Bo (stable) that fixes the recently reported
++ security hole.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 18 May 1998 20:19:33 -0400
++
++samba (1.9.18p7-2) frozen unstable; urgency=low
++
++ * Added patches from the non-mantainer upload that make us able
++ to compile Samba on Alpha systems. This fixes bug #22379.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 13 May 1998 20:38:51 -0400
++
++samba (1.9.18p7-1) frozen unstable; urgency=low
++
++ * New upstream release (just bug fixes, no new functionality).
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 13 May 1998 11:47:32 -0400
++
++samba (1.9.18p6-2) frozen unstable; urgency=low
++
++ * Uploaded to frozen (I forgot to upload last version to frozen
++ so it got installed only in unstable).
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 12 May 1998 18:10:17 -0400
++
++samba (1.9.18p6-1.1) unstable; urgency=low
++
++ * non-maintainer upload for Alpha
++ * patch needed for source/quota.c (_syscall4() confusion)
++
++ -- Paul Slootman <paul@debian.org> Tue, 12 May 1998 20:39:13 +0200
++
++samba (1.9.18p6-1) unstable; urgency=low
++
++ * New upstream release that fixes a possible buffer overflow.
++ This security hole was reported on BugTraq by Drago. The
++ previous Debian version (1.9.18p5-1) was not released because
++ 1.9.18p5 and 1.9.18p6 were released very closely.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 11 May 1998 20:28:33 -0400
++
++samba (1.9.18p5-1) unstable; urgency=low
++
++ * New upstream release (no new funcionality, just bug fixes - see
++ /usr/doc/samba/WHATSNEW.txt.gz).
++ * Backed off Debian patches that were added upstream.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 11 May 1998 08:43:53 -0400
++
++samba (1.9.18p4-2) frozen unstable; urgency=low
++
++ * Patched smbclient(1) man page to not reference the unsopported
++ -A parameter (fixes #6863).
++ * Changes to start nmbd with the -a option (in /etc/init.d/samba
++ and in the entry added to /etc/inetd.conf).
++ * Fixed typo in sample smb.conf (fixes #21484).
++ * Fixed yet another typo in sample smb.conf (fixes #21447).
++
++ -- Eloy A. Paris <peloy@debian.org> Fri, 17 Apr 1998 22:19:23 -0400
++
++samba (1.9.18p4-1) frozen unstable; urgency=low
++
++ * New upstream version that fixes several bugs.
++ * New scheme for keeping track of Debian specific configuration.
++ This new scheme fixes bug #18624 (Samba always asks the user about
++ configuration options). New scheme stores Debian specific
++ configuration information in /etc/samba/debian_config.
++ * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the
++ new configuration scheme.
++ * Moved required kernel 2.1.x include files inside the source tree
++ so I don't have to do very nasty things like creating crazy
++ symlinks in /usr/include to make this package compile. This
++ allows non-root users to build the package and fixes bug
++ #20104.
++ * Fixed address of the FSF in /usr/doc/samba/copyright (problem
++ reported by lintian).
++ * The /etc/init.d/samba script now supports the force-reload
++ argument, as required by the policy (problem reported by lintian).
++ * Added a "rm /etc/cron.weekly/samba" at the end of the postinst.
++ * Now the samba package can be installed even if no nmbd or smbd processes
++ are running. This fixes the following bugs: #8917, #9334, #10268,
++ #10411, #11146 and #13387.
++ * Provides the original README in /usr/doc/samba. This fixes bug #9693.
++ * Added a --no-reload option to sambaconfig to not reload Samba
++ after configuration.
++ * Created man pages for sambaconfig(8), addtosmbpass(8),
++ mksmbpasswd(8) and nmblookup(1).
++ * Corrected small typo in sample /etc/smb.conf.
++ * Added two new parameters to /etc/smb.conf: "preserver case" and
++ "short preserve case".
++ * "rm -Rf /var/lock/samba" in postrm when package is being purged.
++ * Patched upstream source (nmbd.c) to not overwrite log files when
++ nmbd is called with the -a parameter (fixes #17704: nmbd ignores
++ -a option).
++ * /etc/init.d/samba now starts the nmbd daemon with the -a parameter
++ to not overwrite log files.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Mar 1998 21:22:03 -0400
++
++samba (1.9.18p3-1) unstable; urgency=low
++
++ * New upstream version.
++ * Oppsss!!! I really screwed it up (actually, debstd did).
++ 1.9.18p2-2 still contained man pages (smbmount and smbumount) part
++ of other packages. This version does have this corrected. If not,
++ I no longer deserve to be a Debian developer! So, this version
++ fixes bug #18438 and some of the bugs I claimed to fix in
++ 1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd
++ with -m in debian/rules (man pages are installed by "make install"
++ so it's a bad idea to re-install man pages with debstd).
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 23 Feb 1998 17:32:42 -0400
++
++samba (1.9.18p2-2) unstable; urgency=low
++
++ * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided
++ a man page for smbmount, which conflicts with package smbfs. This
++ was solved by creating a multi-binary package that produces
++ package samba and new package smbfsx.
++ * Fixes bug #18000 (typo in postinst).
++ * Fixes bug #17958 (postinst asks obsolete question). Actually,
++ the question is still asked, but only if Samba is run as daemons.
++ * Created a multi-binary package from the Samba sources: package
++ samba and new package smbfsx which provides SMB mount utilities
++ for kernels > 2.1.70.
++
++ -- Eloy A. Paris <peloy@debian.org> Mon, 9 Feb 1998 19:47:05 -0400
++
++samba (1.9.18p2-1) unstable; urgency=low
++
++ * New upstream version.
++ * Removed /etc/cron.weekly/samba because Samba does not handle well
++ rotation of log files (if the log file is rotated Samba will
++ continue to log to the rotated file, instead of the just created
++ one). In any case, Samba will rotate log files after an specific
++ file size.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 27 Jan 1998 22:34:27 -0400
++
++samba (1.9.18p1-2) unstable; urgency=low
++
++ * Created a multi-binary package out of the Samba sources to provide
++ packages samba and smbfsx (userland utilities to work with
++ smbfs with kernels > 2.1.x.
++
++ -- Eloy A. Paris <peloy@debian.org> Sat, 17 Jan 1998 09:23:48 -0400
++
++samba (1.9.18p1-1) unstable; urgency=low
++
++ * New upstream version.
++ * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in
++ /var/backups/smbpasswd.bak.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 14 Jan 1998 13:40:56 -0400
++
++samba (1.9.18alpha14-1) unstable; urgency=low
++
++ * New upstream version.
++ * Added a note to the postinst script telling the user that he/she
++ needs to run smbpasswd manually after creating a new /etc/smbpasswd
++ from /etc/passwd.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 23 Dec 1997 23:44:37 -0400
++
++samba (1.9.18alpha13-1) unstable; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 16 Dec 1997 13:02:32 -0400
++
++samba (1.9.18alpha12-1) unstable; urgency=low
++
++ * New upstream version.
++ * Conflicts with the sambades package because the new Samba 1.9.18
++ series do not depend on the DES libraries to support encrypted
++ passwords.
++ * Added parameter "encrypt passwords = yes" to /etc/smb.conf.
++ * Compiled with support for quotas in disk_free().
++ * Home directories are now exported read only by default.
++ * Re-worked debian/rules.
++ * Re-worked sample smb.conf.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 4 Dec 1997 22:50:34 -0400
++
++samba (1.9.17p4-1) unstable; urgency=low
++
++ * New upstream version.
++ * Made /etc/smb.conf readable by everybody because some Samba utilities
++ will fail otherwise when run by non-root users.
++ * Dropped PAM support while the PAM libraries are ported to libc6.
++
++ -- Eloy A. Paris <peloy@debian.org> Tue, 21 Oct 1997 18:08:49 -0400
++
++samba (1.9.17p3-1) unstable; urgency=low
++
++ * New upstream version.
++ * Made /etc/smb.conf readable only by root as suggested by smbd's man page.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 15 Oct 1997 09:21:25 -0400
++
++samba (1.9.17p2-2) unstable; urgency=low
++
++ * Running Samba as daemons instead of from inetd.
++ * Removing netbios entries in /etc/inetd.conf.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 9 Oct 1997 23:37:25 -0400
++
++samba (1.9.17p2-1) unstable; urgency=low
++
++ * New upstream version that fixes a serious security hole.
++ * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because
++ these patches are now part of the upstream release.
++
++ -- Eloy A. Paris <peloy@debian.org> Sun, 28 Sep 1997 22:54:33 -0400
++
++samba (1.9.17p1-1) unstable; urgency=low
++
++ * New upstream version.
++ * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up
++ compiler warnings.
++ * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings.
++ * Included crypt.h to have function prototype for crypt().
++ * Included netinet/tcp.h to have some socket options included.
++ * Included netinet/ip.h to have some socket options included.
++ * Linking with libcrypt (LIBM='... -lcrypt'). Without including this
++ library smbd generates a seg. fault when authenticating users (?).
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 10 Sep 1997 22:09:18 -0400
++
++samba (1.9.17-1) unstable; urgency=low
++
++ * New upstream version (called the "Browse Fix Release")
++ * Added the option --oknodo to the start-stop-daemon invocation in prerm
++ script. This was because the prerm was failing because start-stop-daemon
++ was returning an error code if no nmbd or smbd daemons were found
++ to kill.
++ * The function yp_get_default_domain(), referenced in three source
++ files was part of libc5 but with libc6 (glibc2) it has been moved
++ to libnss_nis. Since the linker was unable to find the function
++ I had to add LIBSM='-lnss_nis' to debian/rules.
++ * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules
++ because compiling was failing because of conflicts with glibc2.
++ * Patched source/includes.h to include termios.h if GLIBC2 is defined.
++
++ -- Eloy A. Paris <peloy@debian.org> Wed, 27 Aug 1997 08:39:32 -0400
++
++samba (1.9.17alpha5-1) unstable; urgency=low
++
++ * New upstream version.
++
++ -- Eloy A. Paris <peloy@debian.org> Thu, 14 Aug 1997 18:05:02 -0400
++
++samba (1.9.16p11-3) unstable; urgency=low
++
++ * Fixed accidental omission of /etc/pam.d/samba.
++
++ -- Klee Dienes <klee@debian.org> Sat, 15 Mar 1997 22:31:26 -0500
++
++samba (1.9.16p11-2) unstable; urgency=low
++
++ * Recompiled against newer PAM libraries.
++ * Added /etc/pam.d/samba.
++
++ -- Klee Dienes <klee@debian.org> Sat, 8 Mar 1997 01:16:28 -0500
++
++samba (1.9.16p11-1) unstable; urgency=low
++
++ * New upstream release.
++ * Added PAM support.
++
++ -- Klee Dienes <klee@debian.org> Tue, 25 Feb 1997 18:00:12 -0500
++
++samba (1.9.16p9-2) unstable; urgency=low
++
++ * minor packaging changes
++
++ -- Klee Dienes <klee@sauron.sedona.com> Sun, 3 Nov 1996 11:45:37 -0700
++
++samba (1.9.16p9-1) unstable; urgency=low
++
++ * upgraded to new upstream version
++
++ -- Klee Dienes <klee@sauron.sedona.com> Sat, 26 Oct 1996 21:38:20 -0700
++
++1.9.16alpha10-1:
++ 960714
++ * Removed Package_Revision from control file.
++ * Removed -m486 compiler option.
++ * Added Architecture, Section and Priority fields to control file.
++ * Upgraded to latest upstream version.
++ * Uses update-inetd now.
++ * Added shadow passwords support.
++ * Fixed Bug#1946: nmbd won't browse
++
++1.9.15p4-1:
++ 951128
++ * Upgraded to latest upstream version.
++ * Fixed many bugs.
++ * Adds Master Browsing support.
++ * Converted to ELF.
++ * Fixed bug #1825 - nmbd is now killed when removing samba.
++
++1.9.14-1:
++ 950926 Andrew Howell <andrew@it.com.au>
++ * Upgraded to latest version.
++ * Fixed Bug #1139 - samba won't print
++
++1.9.14alpha5-1:
++ * Fixes killing of inetd problem in debian.postint and debian.postrm
++
++1.9.14alpha5-0:
++ 950704 Andrew Howell <andrew@it.com.au>
++ * Taken over samba package from Bruce Perens.
++ * Upgraded to newest version of samba.
++
++1.9.02-1:
++ 9-January-1994 Bruce Perens <Bruce@Pixar.com>
++ * Added Debian GNU/Linux package maintenance system files, and
++ configured for Debian systems.
projects / samba.git / commitdiff