Adding debian version 2:4.20.0+dfsg-1~exp1.debian/2%4.20.0+dfsg-1_exp1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 9823 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..5d91751
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,9823 @@
+samba (2:4.20.0+dfsg-1~exp1) experimental; urgency=medium
+
+  * new upstream release (4.20.0)
+  * d/control: bump tevent/talloc/tdb versions for Build-Depends
+  * d/libldb2.symbols, d/python3-ldb.symbols.in: add new version (2.9.0)
+  * d/patches/meaningful-error-if-no-python3-markdown.patch: fixup
+  * d/*.install: internal library names changed:
+    libfoo-samba4.so.0 => libfoo-private-samba.so.0
+  * d/samba-libs.install: update names for libdcerpc & libndr private libs
+  * d/samba-libs.install, d/samba-libs.links, d/samba-libs.symbols:
+    libndr has soversion 4 now.  This breaks binaries linked with libndr!
+  * d/samba-libs.symbols: update with new ndr4 symbols
+  * d/libsmbclient.symbols: update with new symbols
+  * d/samba-dev.install: add smb3posix.h
+  * d/not-installed: add usr/bin/wspsearch experimental windows search binary
+  * d/control: libperl-json is not needed for build anymore
+  * d/control: bump minimum mit-krb5 version in Build-Depends to 1.21
+    (for pkg.samba.mitkrb5 build profile)
+  * rebase on top of 4.19.5+dfsg-4
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 28 Mar 2024 10:51:16 +0300
+
+samba (2:4.19.5+dfsg-4) unstable; urgency=medium
+
+  * stop shipping python3/dist-packages/samba/tests
+    (Closes: #1064512, #1063149)
+  * add Debian-Specific tag to debian-specific patches
+  * d/genshlibs: run dh_makeshlibs on libsmbclient0
+    (Closes: #1065349)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 03 Mar 2024 15:37:16 +0300
+
+samba (2:4.19.5+dfsg-3) unstable; urgency=medium
+
+  * d/control: add versioned depends on dpkg-dev to avoid accidental
+    build of time64_t packages on older systems
+  * +lower-dns-lookup-mismatch-messages.patch (reduce log noise)
+  * d/control: add libtirpc-dev and rpcsvc-proto to Build-Depends-Arch
+    (Closes: #1065188)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 01 Mar 2024 19:18:35 +0300
+
+samba (2:4.19.5+dfsg-2) unstable; urgency=medium
+
+  * rename libsmbclient => libsmbclient0 for 64-bit time_t transition
+    Closes: #1064337
+  * d/libsmbclient.lintian-overrides: remove, soname now = package name
+  * add Breaks: of sssd packages to samba-libs
+  * +passchange-error-message.patch - fix password change error message
+  * +edns0.patch: enable EDNS0 support in internal UDP-only DNS client
+    https://bugzilla.samba.org/show_bug.cgi?id=15536
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 28 Feb 2024 19:38:48 +0300
+
+samba (2:4.19.5+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release (4.19.5)
+  * reformat previous changelog entry to fit in 80cols
+  * d/winbind.postrm: stop recursively removing plain files
+  * d/winbind.postrm: winbindd_cache.tdb is in /var/lib now,
+    not in /var/cache
+  * d/control: RulesRequiresRoot:no
+  * d/*.symbols: use #PACKAGE# placeholders where appropriate
+    (or add comments where it is not)
+  * +silence-can-not-convert-group-sid.diff -
+    make another log message less annoying
+  * -python-fix-invalid-escape-sequences.patch (applied upstream)
+  * d/control: replace pkg-config=>pkgconf in Build-Depends, remove
+    pkg-config from Depends of libldb-dev and python3-ldb-dev
+  * d/samba-libs.symbols, d/control: make libsmbldapN a virtual package
+    provided by samba-libs too, like libndrN
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 19 Feb 2024 15:21:14 +0300
+
+samba (2:4.19.4+dfsg-3) unstable; urgency=medium
+
+  * samba,winbind: remove logrotate scripts
+    samba does its own log rotation (max log size (=5000 by default) and
+    renaming to .old).  The two clashes with each other in an interesting way.
+  * d/samba-libs.symbols, d/control: make libndrN a virtual package
+    to ensure rdeps pick the right dependency
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 30 Jan 2024 12:12:42 +0300
+
+samba (2:4.19.4+dfsg-2) unstable; urgency=medium
+
+  * d/samba.smbd.service, d/samba.nmbd.service: expand forgotten @BINDIR@
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 08 Jan 2024 20:44:51 +0300
+
+samba (2:4.19.4+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release. See WHATSNEW.txt for details.
+  * d/control: drop pkg.samba.nouring build profile: was needed
+    for focal which we do not support anymore
+  * remove /etc/cron.daily/samba: there's no reason to keep backing it up,
+    most stuff is in ldb/tdb files these days.
+  * d/samba.maintscript, d/winbind.maintscript:
+    remove old rm_connfiles (pre-buster versions)
+  * d/rules, d/*.service: provide .service files directly instead of renaming
+    and patching upstream templates, and use dh_installsystemd to install them
+    (partially Closes: #1059187)
+  * d/rules: run dh_movetousr for libpam-winbind & libnss-winbind, if exists.
+    This fixes remaining files in /lib (hopefully). In a search for better
+    way to detect where to put system libs (/lib vs /usr/lib) as a configure
+    option.  Closes: #1059187
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 08 Jan 2024 19:11:37 +0300
+
+samba (2:4.19.3+dfsg-2) unstable; urgency=medium
+
+  * d/rules: simplify LDFLAGS assignment
+  * d/rules: add -mlong-jump-table-offsets to CFLAGS on m68k (fix FTBFS there)
+  * d/rules: CFLAGS += -ffile-prefix-map=../../=
+  * d/control: fix versioned dependency on samba for samba-ad-dc
+  * +python-fix-invalid-escape-sequences.patch from upstream (Closes: #1057668)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 11 Dec 2023 13:19:18 +0300
+
+samba (2:4.19.3+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release:
+   - https://bugzilla.samba.org/show_bug.cgi?id=13595
+     CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP
+     to normal users (Closes: #1034803).  Please see WHATSNEW.txt file for
+     more information about this issue: actual fix requires extra steps to
+     be performed against samba-based AD-DC
+   - https://bugzilla.samba.org/show_bug.cgi?id=15093
+     Files without "read attributes" NFS4 ACL permission are not listed
+     in directories
+   - https://bugzilla.samba.org/show_bug.cgi?id=15487
+     smbd crashes if asked to return full information on close of
+     a stream handle with delete on close disposition set
+   - https://bugzilla.samba.org/show_bug.cgi?id=15492
+     Kerberos TGS-REQ with User2User does not work for normal accounts
+   - https://bugzilla.samba.org/show_bug.cgi?id=15499
+     Improve logging for failover scenarios
+   - https://bugzilla.samba.org/show_bug.cgi?id=15507
+     vfs_gpfs stat calls fail due to file system permissions
+   - https://bugzilla.samba.org/show_bug.cgi?id=15513
+     Samba doesn't build with Python 3.12
+   - https://bugzilla.samba.org/show_bug.cgi?id=15520
+     sid_strings test broken by unix epoch > 1700000000
+   - https://bugzilla.samba.org/show_bug.cgi?id=15521
+     smbd: fix close order of base_fsp and stream_fsp
+     in smb_fname_fsp_destructor()
+  * d/samba-common.maintscript: fix version number for dhcp hook removal
+    (Closes: #1053780)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 27 Nov 2023 22:22:54 +0300
+
+samba (2:4.19.2+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release:
+   - https://bugzilla.samba.org/show_bug.cgi?id=15423
+     Use-after-free in aio_del_req_from_fsp during smbd shutdown
+     after failed IPC FSCTL_PIPE_TRANSCEIVE
+   - https://bugzilla.samba.org/show_bug.cgi?id=15426
+     clidfs.c do_connect() missing a "return" after a cli_shutdown() call
+   - https://bugzilla.samba.org/show_bug.cgi?id=15463
+     macOS mdfind returns only 50 results
+   - https://bugzilla.samba.org/show_bug.cgi?id=15481
+     GETREALFILENAME_CACHE can modify incoming new filename
+     with previous cache entry value
+   - https://bugzilla.samba.org/show_bug.cgi?id=15464
+     libnss_winbind causes memory corruption since samba-4.18,
+     impacts sendmail, zabbix, potentially more
+   - https://bugzilla.samba.org/show_bug.cgi?id=15479
+     ctdbd: setproctitle not initialized messages flooding logs
+   - https://bugzilla.samba.org/show_bug.cgi?id=15491
+     CVE-2023-5568 Heap buffer overflow with freshness tokens
+     in the Heimdal KDC in Samba 4.19
+   - https://bugzilla.samba.org/show_bug.cgi?id=15477
+     The heimdal KDC doesn't detect s4u2self correctly when fast is in use
+  * d/samba-common.maintscript: remove obsolete conffile
+    /etc/dhcp/dhclient-enter-hooks.d/samba (Closes: #1053780)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 16 Oct 2023 18:26:31 +0300
+
+samba (2:4.19.1+dfsg-4) unstable; urgency=medium
+
+  * d/samba-common.postinst: restore installing of smb.conf using ucf
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 22:33:32 +0300
+
+samba (2:4.19.1+dfsg-3) unstable; urgency=medium
+
+  * d/ctdb.install: sync ceph arch list
+  * d/control: mention other places where ceph arch list is used
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 20:12:20 +0300
+
+samba (2:4.19.1+dfsg-2) unstable; urgency=medium
+
+  * d/rules: sync with-ceph arch list from d/control
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 19:03:42 +0300
+
+samba (2:4.19.1+dfsg-1) unstable; urgency=medium
+
+  * new stable security bugfix release:
+    o CVE-2023-3961: https://www.samba.org/samba/security/CVE-2023-3961.html
+      Unsanitized pipe names allow SMB clients to connect as root
+      to existing unix domain sockets on the file system.
+    o CVE-2023-4091: https://www.samba.org/samba/security/CVE-2023-4091.html
+      SMB client can truncate files to 0 bytes by opening files with OVERWRITE
+      disposition when using the acl_xattr Samba VFS module with the smb.conf
+      setting "acl_xattr:ignore system acls = yes"
+    o CVE-2023-4154: https://www.samba.org/samba/security/CVE-2023-4154.html
+      An RODC and a user with the GET_CHANGES right can view all attributes,
+      including secrets and passwords.  Additionally, the access check fails
+      open on error conditions.
+    o CVE-2023-42669: https://www.samba.org/samba/security/CVE-2023-42669.html
+      Calls to the rpcecho server on the AD DC can request that the server
+      block for a user-defined amount of time, denying service.
+    o CVE-2023-42670: https://www.samba.org/samba/security/CVE-2023-42670.html
+      Samba can be made to start multiple incompatible RPC listeners,
+      disrupting service on the AD DC.
+  * remove debconf questions and wins dhcp hooks together with po files
+    (wins is not relevant today anymore)
+  * d/control: bump mit-krb5 build-dep (on mitkrb5 profile) to 1.20
+  * d/control: disable ceph (libcephfs-dev, librados-dev) on 32bit
+    architectures (Closes: #1053202)
+  * d/control: enable rados on riscv64 once it's available there
+  * d/control: samba-libs: depend on libldb of the same version since libldb
+    symbols might appear during previous stable series but they don't propagate
+    to next releases with previous minor version numbers.  This is ABI breakage
+    but the symbols are mostly internal to samba itself
+  * debian/libldb2.symbols: update
+  * drop attempts to keep ldb ABI versioning
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 18:02:05 +0300
+
+samba (2:4.19.0+dfsg-1) unstable; urgency=medium
+
+  * new upstream release. Some highlights:
+   o changed command-line interface of smbget utility
+   o improved winbindd logging
+   o AD database prepared to FL 2016 standards for new domains
+   o initial, partial implementation of AD FL 2012, 2012R2 and 2016
+   o samba-tool support for silos, claims, sites and subnets
+   o updated Heimdal import
+   o other improvements and changes, see WHATSNEW.txt file for details.
+  * d/patches: remove patches applied upstream, refresh patches
+  * d/control: update talloc/tevent/tdb build-deps
+  * d/smbclient.install: remove smbgetrc.5
+  * d/patches: add ldb 2.7.1 & 2.7.2 ABI files
+  * d/libldb2.symbols: add new symbols (ldb_val_as_*) and new version (2.8.0)
+  * d/python3-ldb.symbols: remove unused versions, add new version
+  * d/control: fix description of samba-common-bin (samba-client)
+  * d/samba-common-bin.install: install samba-log-parser (for winbindd for now)
+  * d/samba-libs.install: 2 new libs
+  * d/samba-libs.install, d/samba-testsuite.install: move libshares-samba4.so.0
+    from samba-libs to samba-testsuite
+  * d/samba-libs.install, d/samba-vfs-modules.install: move
+    libdfs-server-ad-samba4.so.0 from samba-libs to samba-vfs-modules
+  * d/samba-libs.install, d/samba-common-bin.install: move
+    libnet-keytab-samba4.so.0 from samba-libs to samba-common-bin (used by net)
+  * d/samba-libs.install, d/samba-common-bin.install: move
+    libRPC-WORKER-samba4.so.0 from samba-libs to samba-common-bin
+    (used by usr/libexec/samba/rpcd_*)
+  * samba-libs: add libndr 3.0.1 symbols
+  * d/source/lintian-overrides: remove unused source-is-missing override
+  * d/samba-vfs-modules.lintian-overrides: remove unused
+    spelling-error-in-binary override
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 04 Sep 2023 22:57:48 +0300
+
+samba (2:4.18.6+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release:
+   - https://bugzilla.samba.org/show_bug.cgi?id=9959
+     Windows client join fails if a second container CN=System exists somewhere
+   - https://bugzilla.samba.org/show_bug.cgi?id=15289
+     post-exec password redaction for samba-tool is more reliable for
+     fully random passwords as it no longer uses regular expressions
+     containing the password value itself
+   - https://bugzilla.samba.org/show_bug.cgi?id=15342
+     Spotlight sometimes returns no results on latest macOS
+   - https://bugzilla.samba.org/show_bug.cgi?id=15346
+     2-3min delays at reconnect with smb2_validate_sequence_number:
+     bad message_id 2
+   - https://bugzilla.samba.org/show_bug.cgi?id=15390
+     Python tarfile extraction needs change to avoid a warning
+     (CVE-2007-4559 mitigation)
+   - https://bugzilla.samba.org/show_bug.cgi?id=15400
+     rpcserver no longer accepts double backslash in dfs pathname
+   - https://bugzilla.samba.org/show_bug.cgi?id=15414
+     "net offlinejoin provision" does not work as non-root user
+   - https://bugzilla.samba.org/show_bug.cgi?id=15417
+     Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted
+     to remove the destination
+   - https://bugzilla.samba.org/show_bug.cgi?id=15420
+     reply_sesssetup_and_X() can dereference uninitialized tmp pointer
+   - https://bugzilla.samba.org/show_bug.cgi?id=15427
+     Spotlight results return wrong date in result list
+   - https://bugzilla.samba.org/show_bug.cgi?id=15430
+     Missing return in reply_exit_done()
+   - https://bugzilla.samba.org/show_bug.cgi?id=15433
+     cm_prepare_connection() calls close(fd) for the second time
+   - https://bugzilla.samba.org/show_bug.cgi?id=15435
+     Regression DFS not working with widelinks = true
+   - https://bugzilla.samba.org/show_bug.cgi?id=15441
+     samba-tool ntacl get segfault if aio_pthread appended
+   - https://bugzilla.samba.org/show_bug.cgi?id=15446
+     DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed
+   - https://bugzilla.samba.org/show_bug.cgi?id=15449
+     mdssvc: Do an early talloc_free() in _mdssvc_open()
+  * d/control: python3-testtools is only needed for selftest,
+    remove from Build-Depends for now
+  * d/rules: export PYTHONDONTWRITEBYTECODE=1 to stop python from generating
+    .pyc caches (Closes: #1048754)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 16 Aug 2023 20:11:26 +0300
+
+samba (2:4.18.5+dfsg-2) unstable; urgency=medium
+
+  * d/rules, d/control: only build glusterfs support on 64bits
+    (Closes: #1041996)
+  * d/rules: make ceph conditional similar to gluster
+  * d/rules: wrap _PYTHON_SYSCONFIGDATA_NAME setting to cross-compile case
+    On e.g. buster, _PYTHON_SYSCONFIGDATA_NAME is different, so this assignment
+    does not work right.  In order for it to work on buster, add condition on
+    host vs build gnu type. This breaks compilation with foreign python binary.
+  * d/control: fix description of samba-common-bin (samba-client)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 04 Aug 2023 17:29:06 +0300
+
+samba (2:4.18.5+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/security release 4.18.5, including:
+   o CVE-2022-2127:  When winbind is used for NTLM authentication,
+     a maliciously crafted request can trigger an out-of-bounds read
+     in winbind and possibly crash it.
+     https://www.samba.org/samba/security/CVE-2022-2127.html
+   o CVE-2023-3347:  SMB2 packet signing is not enforced if an admin
+     configured "server signing = required" or for SMB2 connections to
+     Domain Controllers where SMB2 packet signing is mandatory.
+     https://www.samba.org/samba/security/CVE-2023-3347.html
+   o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service
+     for Spotlight can be triggered by an unauthenticated attacker by
+     issuing a malformed RPC request.
+     https://www.samba.org/samba/security/CVE-2023-34966.html
+   o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service
+     for Spotlight can be used by an unauthenticated attacker to trigger
+     a process crash in a shared RPC mdssvc worker process.
+     https://www.samba.org/samba/security/CVE-2023-34967.html
+   o CVE-2023-34968: As part of the Spotlight protocol Samba discloses
+     the server-side absolute path of shares and files and directories
+     in search results.
+     https://www.samba.org/samba/security/CVE-2023-34968.html
+   o BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023.
+     https://bugzilla.samba.org/show_bug.cgi?id=15418
+     (this has been patched in the previous upload; Closes: #1041043)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Jul 2023 17:55:58 +0300
+
+samba (2:4.18.4+dfsg-2) unstable; urgency=medium
+
+  * +fix-unsupported-netr_LogonGetCapabilities-l2.patch
+    Fix windows logon/trust issues with 2023-07 windows updates:
+    https://bugzilla.samba.org/show_bug.cgi?id=15418
+  * d/copyright: also remove ctdb/doc/*.?.html pre-generated manpages
+    from the upstream tarball (forgotten previously)
+  * d/rules: add comment about -latomic gcc issue and drop --as-needed
+    there since it is already in use
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 14 Jul 2023 12:30:31 +0300
+
+samba (2:4.18.4+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release, including:
+   - https://bugzilla.samba.org/show_bug.cgi?id=2312
+     smbcacls and smbcquotas do not check // before the server
+   - https://bugzilla.samba.org/show_bug.cgi?id=14030
+     Named crashes on DLZ zone update (was in debian before)
+   - https://bugzilla.samba.org/show_bug.cgi?id=15355
+     NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry
+     and causes test timeouts
+   - https://bugzilla.samba.org/show_bug.cgi?id=15381
+     Register Samba processes with GPFS
+   - https://bugzilla.samba.org/show_bug.cgi?id=15382
+     cli_list loops 100% CPU against pre-lanman2 servers
+   - https://bugzilla.samba.org/show_bug.cgi?id=15383
+     Remove comments about deprecated 'write cache size'
+   - https://bugzilla.samba.org/show_bug.cgi?id=15384
+     net ads lookup (with unspecified realm) fails
+   - https://bugzilla.samba.org/show_bug.cgi?id=15390
+     Python tarfile extraction needs change to avoid a warning
+     (CVE-2007-4559 mitigation)
+   - https://bugzilla.samba.org/show_bug.cgi?id=15391
+     smbclient leaks fds with showacls
+   - https://bugzilla.samba.org/show_bug.cgi?id=15398
+     The winbind child segfaults when listing users with
+     `winbind scan trusted domains = yes`
+   - https://bugzilla.samba.org/show_bug.cgi?id=15402
+     smbd returns NOT_FOUND when creating files on a r/o filesystem
+   - https://bugzilla.samba.org/show_bug.cgi?id=15403
+     smbget memory leak if failed to download files recursively
+   - https://bugzilla.samba.org/show_bug.cgi?id=15404
+     Backport --pidl-developer fixes
+  * remove dnsserver-rename-dns_name_equal.patch (applied upstream)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 05 Jul 2023 18:14:20 +0300
+
+samba (2:4.18.3+dfsg-3) unstable; urgency=medium
+
+  * d/rules: query for DEB_HOST_ARCH, not DEB_HOST_ARCH_CPU,
+    for -latomic workaround
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 21 Jun 2023 23:11:59 +0300
+
+samba (2:4.18.3+dfsg-2) unstable; urgency=medium
+
+  * d/rules: include -latomic gcc issue workaround for select arches
+    apparently due to a gcc issue, some architectures (armel, mipsel, ...)
+    fail to link samba due to not finidng __atomic_load_8 etc symbols
+    after using atomic_load etc from stdatomic.h (part of gcc).
+    Add -latomic explicitly to the list of libraries we link with.
+  * d/rules: add libwbclient0 to the list of krb5-versioned packages
+   (thanks to Andrew Kornilov)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 20 Jun 2023 11:35:13 +0300
+
+samba (2:4.18.3+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release:
+   - https://bugzilla.samba.org/show_bug.cgi?id=15375
+     Symlinks to files can have random DOS mode information
+     in a directory listing
+   - https://bugzilla.samba.org/show_bug.cgi?id=15378
+     vfs_fruit might cause a failing open for delete
+   - https://bugzilla.samba.org/show_bug.cgi?id=15361
+     winbind recurses into itself via rpcd_lsad
+   - https://bugzilla.samba.org/show_bug.cgi?id=15366
+     wbinfo -u fails on ad dc with >1000 users
+   - https://bugzilla.samba.org/show_bug.cgi?id=15338
+     DS ACEs might be inherited to unrelated object classes
+   - https://bugzilla.samba.org/show_bug.cgi?id=15362
+     a lot of messages: get_static_share_mode_data:
+     get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND
+   - https://bugzilla.samba.org/show_bug.cgi?id=15374
+     aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse()
+   - https://bugzilla.samba.org/show_bug.cgi?id=15360
+     Setting veto files = /.*/ break listing directories
+   - https://bugzilla.samba.org/show_bug.cgi?id=15363
+     "samba-tool domain provision" does not run interactive mode
+     if no arguments are given
+   - https://bugzilla.samba.org/show_bug.cgi?id=15325
+     dsgetdcname: assumes local system uses IPv4
+  * dnsserver-rename-dns_name_equal.patch
+    (forgotten) patch from upstream targetting next stable
+    Fixes crashes of named with samba DLZ plugin due to
+    symbol name conflict (dns_name_equal() function).
+    There's no resulting code changes, just a symbol rename.
+    https://bugzilla.samba.org/show_bug.cgi?id=14030
+    Closes: #1036587, #927747
+  * remove generated manpage files upstream ships in
+    docs/manpages/ and ctdb/doc/
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 31 May 2023 20:09:05 +0300
+
+samba (2:4.18.2+dfsg-1) experimental; urgency=medium
+
+  * new upstream stable/bugfix release:
+   - https://bugzilla.samba.org/show_bug.cgi?id=15302
+     Log flood: smbd_calculate_access_mask_fsp: Access denied:
+     message level should be lower.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15306
+     Floating point exception (FPE) via cli_pull_send
+     at source3/libsmb/clireadwrite.c.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15328
+     test_tstream_more_tcp_user_timeout_spin fails intermittently
+     on Rackspace GitLab runners.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15329
+     Reduce flapping of ridalloc test.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15351
+     large_ldap test is unreliable.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15143
+     New filename parser doesn't check veto files smb.conf parameter.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15354
+     mdssvc may crash when initializing.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15313
+     large directory optimization broken for non-lcomp path elements.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15357
+     streams_depot fails to create streams.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15358
+     shadow_copy2 and streams_depot don't play well together.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15316
+     Flapping tests in samba_tool_drs_show_repl.py.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15317
+     winbindd idmap child contacts the domain controller without a need.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15318
+     idmap_autorid may fail to map sids of trusted domains for the first time.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15319
+     idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15323
+     net ads search -P doesn't work against servers in other domains.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15353
+     Temporary smbXsrv_tcon_global.tdb can't be parsed.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15316
+     Flapping tests in samba_tool_drs_show_repl.py.
+   - https://bugzilla.samba.org/show_bug.cgi?id=15343
+     Tests use depricated and removed methods like assertRegexpMatches.
+  * d/rules, d/libldb2.symbols; add ldb 2.6.2 version
+  * heimdal-to-support-KEYRING-ccache.patch: enable KEYRING in heimdal
+    (Closes: #1023609)
+  * d/control: build-depend on libkeyutils-dev
+    (it is pulled by some other dep, but better to be safe)
+  * -s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
+    (the change has been applied upstream)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Apr 2023 14:02:49 +0300
+
+samba (2:4.18.1+dfsg-1~exp1) experimental; urgency=high
+
+  * upstream stable/security/bugfix release, fixing the following issues:
+    o CVE-2023-0225: An incomplete access check on dnsHostName allows
+      authenticated but otherwise unprivileged users to delete this
+      attribute from any object in the directory.
+      https://www.samba.org/samba/security/CVE-2023-0225.html
+    o CVE-2023-0922: The Samba AD DC administration tool, when operating
+      against a remote LDAP server, will by default send new or reset
+      passwords over a signed-only connection.
+      https://www.samba.org/samba/security/CVE-2023-0922.html
+    o CVE-2023-0614: Fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919
+      Confidential attribute disclosure via LDAP filters was insufficient and
+      an attacker may be able to obtain confidential BitLocker recovery keys
+      from a Samba AD DC.  Installations with such secrets in their Samba AD
+      should assume they have been obtained and need replacing.
+      https://www.samba.org/samba/security/CVE-2023-0614.html
+    Closes: CVE-2023-0225 CVE-2023-0922 CVE-2023-0614
+  * update libldb symbols and versions
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 29 Mar 2023 17:59:17 +0300
+
+samba (2:4.18.0+dfsg-1~exp1) experimental; urgency=medium
+
+  * new upstream release (4.18.0):
+   * SMB Server performance improvements
+   * More succinct samba-tool error messages
+   * Colour output with samba-tool --color
+   * New samba-tool dsacl subcommand for deleting ACES
+   * New wbinfo option --change-secret-at
+   * New option to change the NT ACL default location
+   * Azure Active Directory / Office365 synchronisation improvements
+   * new smb.conf parameters:
+     server addresses
+     acl_xattr:security_acl_name
+   * For more details, please refer to WHATSNEW.txt file.
+  * d/control: bump talloc/tdb/tevent build-deps
+  * patches:
+    - refresh: hurd-compat.patch
+    - refresh: spelling.patch, remove many, add 3 new changes
+    - new: heimdal-spelling.patch, spelling fixes for third_party/heimdal
+    - remove: unwrap-getresgid-typo.patch, not needed
+  * d/samba-libs.install: add new internal library libstable-sort-samba4.so.0
+  * d/libldb2.symbols, python3-ldb.symbols.in: add new versions (2.7.0, 2.7.1)
+  * d/libwbclient0.symbols: add new version and two new symbols:
+     wbcChangeTrustCredentialsAt wbcCtxChangeTrustCredentialsAt
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 09 Mar 2023 14:47:05 +0300
+
+samba (2:4.17.6+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release 4.17.6:
+   * https://bugzilla.samba.org/show_bug.cgi?id=15314
+     streams_xattr is creating unexpected locks on folders.
+   * https://bugzilla.samba.org/show_bug.cgi?id=10635
+     Use of the Azure AD Connect cloud sync tool is now supported for password
+     hash synchronisation, allowing Samba AD Domains to synchronise passwords
+     with this popular cloud environment.
+   * https://bugzilla.samba.org/show_bug.cgi?id=15299
+     Spotlight doesn't work with latest macOS Ventura.
+   * https://bugzilla.samba.org/show_bug.cgi?id=15310
+     New samba-dcerpc architecture does not scale gracefully.
+   * https://bugzilla.samba.org/show_bug.cgi?id=15307
+     vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd()
+     in close and fstat.
+   * https://bugzilla.samba.org/show_bug.cgi?id=15293
+     With clustering enabled samba-bgqd can core dump due to use after free.
+   * https://bugzilla.samba.org/show_bug.cgi?id=15311
+     fd_load() function implicitly closes the fd where it should not.
+  * debian/po/ro.po update from Remus-Gabriel Chelu
+  * s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
+     makes smbd a bit less spammy in logs
+  * d/control: clarify some package descriptions (Closes: #1031922)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 09 Mar 2023 12:52:14 +0300
+
+samba (2:4.17.5+dfsg-2) unstable; urgency=medium
+
+  * d/control: samba: depends on exact version of python3-samba
+  * d/control: fix typo
+  * more tweaks for foreign/cross build
+  * d/control: work around autodep8 #904999 again
+  * introduce upstream-like aliases for debian .service names,
+    add rationale
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 04 Feb 2023 17:15:40 +0300
+
+samba (2:4.17.5+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/bugfix release. From WHATSNEW.txt:
+    * BUG 14808: smbc_getxattr() return value is incorrect.
+    * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX
+      are not handled correctly.
+    * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors.
+    * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs()
+      fails to find DC when there is only an AAAA record for the DC in DNS
+      (Closes: #1023606).
+    * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle.
+    * BUG 15277: DFS links don't work anymore on Mac clients since 4.17.
+    * BUG 15283: vfs_virusfilter segfault on access,
+      directory edgecase (accessing NULL value).
+    * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
+      based SChannel on NETLOGON (additional changes).
+    * BUG 15243: %U for include directive doesn't work for share listing
+      (netshareenum) (the fix was in debian before).
+    * BUG 15266: Shares missing from netshareenum response in samba 4.17.4
+      (the fix was in debian before).
+    * BUG 15269: ctdb: use-after-free in run_proc.
+    * BUG 15280: irpc_destructor may crash during shutdown.
+    * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo.
+    * BUG 15268: smbclient segfaults with use after free on an optimized build
+    * BUG 15282: smbstatus leaking files in msg.sock and msg.lock.
+    * BUG 15164: Leak in wbcCtxPingDc2.
+    * BUG 15265: Access based share enum does not work in Samba 4.16+.
+    * BUG 15267: Crash during share enumeration.
+    * BUG 15271: rep_listxattr on FreeBSD does not properly check
+      for reads off end of returned buffer.
+    * BUG 15281: Avoid relying on C89 features in a few places.
+  * remove patches applied upstream:
+   - reload-registry-shares-after-reloading-services.patch
+   - rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
+  * d/control: Standards-Version: 4.6.2 (no changes)
+  * d/control: put all doc-generating build-deps into one line
+  * little prep for cross-compilation
+    - build-depend on python3:any and python3-dev:any
+    - build-depend on libpython3-dev for actual module building,
+      and use arch-specific python3-config from there
+    - set and export _PYTHON_SYSCONFIGDATA_NAME to get foreign-arch values
+      provided by libpython3-dev (also helps when python itself is foreign)
+    - depend on perl:any not just perl
+    - export CC/CPP/LD/PKGCONFIG for ./configure (buildtools.mk)
+  * d/gbp.conf: unignore branch
+  * d/control: samba, ctdb, winbind: do not depend on lsb-base
+    (the script is in sysvinit-utils now)
+  * d/control: drop unused build-dep on libncurses5-dev
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 27 Jan 2023 11:15:01 +0300
+
+samba (2:4.17.4+dfsg-3) unstable; urgency=medium
+
+  * +rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
+    https://bugzilla.samba.org/show_bug.cgi?id=15265
+  * +reload-registry-shares-after-reloading-services.patch
+    https://bugzilla.samba.org/show_bug.cgi?id=15266
+  * d/samba.postinst: fix /var/spool/samba => /var/tmp handling
+    (old spooldir can be referred to in other sections too)
+  * create common script "is-configured" to check if the service is configured
+    in smb.conf, and stop masking services in postinst
+  * rewrite SysV init scripts (simplify, make consistent, etc)
+  * d/winbind.postinst: create/change /var/lib/samba/winbindd_privileged
+    at install time only (it should be in /run/samba/ somewhere these days)
+  * d/control: change version of samba which samba-ad-provisioning
+    Breaks to where provisioning was split out
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 03 Jan 2023 10:45:36 +0300
+
+samba (2:4.17.4+dfsg-2) unstable; urgency=medium
+
+  * d/control: samba-dc-provision Replaces+Breaks samba (< 4.17.4+dfsg-2).
+    Closes: #1026387
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 19 Dec 2022 16:36:00 +0300
+
+samba (2:4.17.4+dfsg-1) unstable; urgency=medium
+
+  * new upstream stable/security release, with the following changes:
+   - CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege
+     Vulnerability disclosed by Microsoft on Nov 8 2022, see
+     https://www.samba.org/samba/security/CVE-2022-37966.html
+   - CVE-2022-37967: Windows Kerberos Elevation of Privilege Vulnerability
+     disclosed by Microsoft on Nov 8 2022. See
+     https://www.samba.org/samba/security/CVE-2022-37967.html
+   - CVE-2022-38023: Weak "RC4" (rc4-hmac) protection of the NetLogon Secure
+     channel uses, see https://www.samba.org/samba/security/CVE-2022-38023.html
+    There are several important behavior changes included in this release,
+    which may cause compatibility problems interacting with system still
+    expecting the former behavior.  Please read the documents referenced above!
+    See also the WHATSNEW.txt document, as there are several new, changed
+    and deprecated smb.conf parameters.
+  * Other bugfixes in this release (from WHATSNEW.txt):
+    https://bugzilla.samba.org/show_bug.cgi?id=14929 CVE-2022-44640
+     Upstream Heimdal free of user-controlled pointer in FAST.
+    https://bugzilla.samba.org/show_bug.cgi?id=15219
+     Heimdal session key selection in AS-REQ examines wrong entry.
+    https://bugzilla.samba.org/show_bug.cgi?id=13135 The KDC logic around
+     msDs-supportedEncryptionTypes differs from Windows.
+    https://bugzilla.samba.org/show_bug.cgi?id=14611 CVE-2021-20251
+     Bad password count not incremented atomically.
+    https://bugzilla.samba.org/show_bug.cgi?id=15206 libnet: change_password()
+     doesn't work with dcerpc_samr_ChangePasswordUser4()
+    https://bugzilla.samba.org/show_bug.cgi?id=15230
+     Memory leak in snprintf replacement functions.
+    https://bugzilla.samba.org/show_bug.cgi?id=15253 RODC doesn't reset
+     badPwdCount reliable via an RWDC (CVE-2021-20251 regression).
+    https://bugzilla.samba.org/show_bug.cgi?id=15198
+     Prevent EBADF errors with vfs_glusterfs.
+    https://bugzilla.samba.org/show_bug.cgi?id=15243
+     %U for include directive doesn't work for share listing (netshareenum).
+    https://bugzilla.samba.org/show_bug.cgi?id=15257
+     Stack smashing in net offlinejoin requestodj.
+  * removed patches which are now included upstream:
+   - nsswitch-pam-data-time_t.patch
+   - CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 15 Dec 2022 21:54:31 +0300
+
+samba (2:4.17.3+dfsg-4) unstable; urgency=medium
+
+  * create samba-ad-provision package with contents of /usr/share/samba/setup.
+    It is recommended by samba, so can be uninstalled if not needed.
+  * create samba-ad-dc package. It is an empty metapackage for now, but with
+    dependencies needed to run an Active Directory Domain Controller (AD-DC)
+  * samba-ad-provision.lintian-overrides: license files
+  * print meaningful error message if samba-ad-provision is not installed
+    (meaningful-error-if-no-samba-ad-provision.patch)
+  * print meaningful error message if python3-markdown is not installed
+    (meaningful-error-if-no-python3-markdown.patch)
+  * ctdb: move rundir from /var/run to /run
+  * fix typo in fruit patch
+  * a few more spelling fixes
+  * add #DEBHELPER# tokens to libnss-winbind.{postinst,postrm}
+  * remove mentions of /var/spool/samba from samba.lintian-overrides
+    (moved to /var/tmp)
+  * change embedded-library heimdal lintian override in a way to be understood
+    by both old and new lintian, so the package can be uploaded
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 05 Dec 2022 14:39:43 +0300
+
+samba (2:4.17.3+dfsg-3) unstable; urgency=medium
+
+  * d/control: winbind should depend on the same binary:Version
+    of libwbclient, or else its components can't talk to the daemon.
+    Thank you Stefan Weichinger for the patience while finding this one!
+  * libnss-winbind: add postinst/postrm scripts to add/remove nsswitch.conf
+    entry for winbind (but not for wins)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 01 Dec 2022 22:38:07 +0300
+
+samba (2:4.17.3+dfsg-2) unstable; urgency=medium
+
+  * fruit-disable-useless-size_t-overflow-check.patch (Closes: #974868)
+  * CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
+    Fix regression on 32bit systems:
+    https://bugzilla.samba.org/show_bug.cgi?id=15203
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 21 Nov 2022 20:41:46 +0300
+
+samba (2:4.17.3+dfsg-1) unstable; urgency=medium
+
+  * new upstream security release 4.17.3, fixing the following issue:
+    CVE-2022-42898: Heimdal Kerberos libraries suffers from an integer
+    multiplication overflow vulnerability which affects 32bit platforms,
+    see https://www.samba.org/samba/security/CVE-2022-42898.html
+    This changes third_party/heimdal/, it does not affect mitkrb5 builds.
+  * d/rules: stop stripping +dfsg suffix from ldb version
+  * d/control: declare dependency on password (for groupadd in postinst)
+    for winbind and samba (Closes: #1023759)
+  * implement pkg.samba.mitkrb5 build profile to build with system mit-krb5
+    (with "mitkrb5" version suffix in some packages for now)
+  * d/control: mark libufing-dev build dep with <!pkg.samba.nouring>
+    (to simplify out-of-archive builds for older systems)
+  * d/rules: parametrise list of packages to omit (eg on ubuntu-i386)
+    with ${omit-pkgs}
+  * d/rules: use variables in a more consistent way, use single ${config-args}
+  * d/control: tdb-tools and lmdb-utils packages are also needed for tests
+    (everything is commented out for now anyway)
+  * d/rules: update knownfail tests
+  * d/rules: stop exporting buildflags, export compiler options when needed
+  * d/rules: always define rados:Depends & vfsmods:Depends substvars
+  * unwrap-getresgid-typo.patch - fix crash during p11-kit execution
+    (https://bugzilla.samba.org/show_bug.cgi?id=15227) (for the testsuite only)
+  * nsswitch-pam-data-time_t.patch - fix time_t not fit in a pointer (eg x32)
+    (https://bugzilla.samba.org/show_bug.cgi?id=15224)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 15 Nov 2022 19:26:10 +0300
+
+samba (2:4.17.2+dfsg-9) unstable; urgency=medium
+
+  * hurd-compat.patch: some minor compatibility tweaks for hurd
+  * d/rules compat work:
+    - ceph is linux-only like glusterfs
+    - d/rules: add another conditional, with_snapper
+    - combine linux features into single block
+  * d/rules: support "terse" build option for non-verbose build
+  * d/rules: remove third_party/heimdal/lib/gssapi/gssapi.h before build
+    (Closes: #1013205). This fixes -I path order and <gssapi/gssapi.h>
+    include mess which caused samba to FTBFS on sparc64 for quite some time
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 06 Nov 2022 20:13:19 +0300
+
+samba (2:4.17.2+dfsg-8) unstable; urgency=medium
+
+  * d/rules: do not explicitly enable quotas on non-linux:
+    enable everything interesting on linux explicitly and let ./configure
+    to figure it out in other systems.  This should fix FTBFS problem on hurd.
+  * d/rules: do not disable systemd on non-linux, let ./configure figure it out
+  * d/winbind.postinst: switch addgroup => groupadd and eliminate getent.
+    winbind package never declared dependency on adduser but always used
+    addgroup command in its postinst script. Finally this broke piuparts.
+    Switch to groupadd which is even easier to use.
+  * d/samba.postinst: switch addgroup => groupadd and eliminate getent
+  * d/smb.conf: use useradd in example create user script too
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 03 Nov 2022 15:04:46 +0300
+
+samba (2:4.17.2+dfsg-7) unstable; urgency=medium
+
+  * another way to work around #1013259: provide a compatibility symlink
+    libndr.so.2 pointing to libndr.so.3:
+    - libndr-debug-level-compat.diff, libndr-revert-so3.diff: remove
+    - d/samba-libs.symbols: adjust symbols/versions
+    - d/samba-libs.install: libndr.so.2 => libndr.so.3
+    - d/samba-libs.links: provide the compat libndr.so.2 symlink
+  * d/samba-libs.links: add comments describing libndr.so.N issue
+  * d/samba-libs.links: add libndr.so.1 compat symlink too (for bullseye sssd)
+  * d/control: unbreak bullseye/jammy sssd-ad-common, sssd-ad, sssd-ipa
+    by samba-libs once libndr.so.1 compat link is here
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 20:43:53 +0300
+
+samba (2:4.17.2+dfsg-6) unstable; urgency=medium
+
+  * d/control: fix comment in previous upload
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 10:45:26 +0300
+
+samba (2:4.17.2+dfsg-5) unstable; urgency=medium
+
+  * d/control: bump version of broken-by-samba-libs sssd
+    and add more affected sssd packages;
+    also reformat the comment there so dpkg-gencontrol does not complain
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 09:34:10 +0300
+
+samba (2:4.17.2+dfsg-4) unstable; urgency=medium
+
+  * d/control: stop suggesting old/orphaned/gone-upstream smbldap-tools
+  * libndr work (Closes: #1013259):
+   - d/control: samba-libs breaks bullseye sssd-ad due to libndr.so.1=>.2 bump
+   - d/samba-libs.install: be more explicit about sonames of public libs
+     to catch soname changes
+   - libndr-debug-level-compat.diff, libndr-revert-so3.diff: revert
+     libndr.so.2->3 soname bump by providing compat wrapper for new symbol
+   - d/samba-libs.symbols: provide symbols for libndr.so.2
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 01 Nov 2022 12:53:22 +0300
+
+samba (2:4.17.2+dfsg-3) unstable; urgency=low
+
+  * rebase on top of debian 4.16.6+dfsg-6 release, include some
+    history of 4.17.* experimental releases in changelog
+  * d/samba-libs.lintian-overrides: update package-name-doesnt-match-sonames
+    to match all libs
+  * urgency is set to low to delay unstable->testing transition a bit
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 30 Oct 2022 16:23:51 +0300
+
+samba (2:4.17.2+dfsg-2) experimental; urgency=medium
+
+  * d/rules: stop dh_installpam from installing samba.pam
+    to the samba package (Closes: #1022775, #1022776)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 20:13:53 +0300
+
+samba (2:4.17.2+dfsg-1) experimental; urgency=medium
+
+  * upstream 4.17.2 security release:
+   CVE-2022-3592 A malicious client can use a symlink to escape the exported
+   directory. https://www.samba.org/samba/security/CVE-2022-3592.html
+   (Samba 4.17 only)
+  * Remove poptGetArg-misuse-fixes-1022826.diff (applied to 4.17.2)
+  * d/rules: no need to build compile_et,asn1_compile intermediate targets
+    anymore; also remove now-unused ${WAFv} macro
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 14:30:44 +0300
+
+samba (2:4.17.1+dfsg-1) experimental; urgency=medium
+
+  * new upstream bugfix release containing a security fix:
+    * CVE-2021-20251 Bad password count not incremented atomically.
+  * Merge changes from 4.16.x (debian/master) branch.
+  * use-bzero-instead-of-memset_s.diff : use explicit_bzero() instead of
+    bzero() for the substitute of memset_s(). bzero() is wrong here because
+    it, just like memset, can be optimized out by the compiler.
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Oct 2022 21:34:11 +0300
+
+samba (2:4.17.0+dfsg-2) experimental; urgency=medium
+
+  * mention closing of CVE-2022-32743 by the 4.17.0 upload
+  * mention closing of CVE-2022-1615 by the 4.17.0 upload
+  * move libpac-samba4.so.0 from samba to samba-libs (Closes: #1021450)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 08 Oct 2022 23:00:05 +0300
+
+samba (2:4.17.0+dfsg-1) experimental; urgency=medium
+
+  * new upstream release 4.17.0
+    Closes: CVE-2022-1615
+    Closes: #1021022, CVE-2022-32743
+  * removed: spelling.patch (partially applied upstream)
+  * removed: weak-crypto-allowed-clarify.diff (applied upstream)
+  * refresh: ctdb-create-piddir.patch
+  * refresh: fix-nfs-service-name-to-nfs-kernel-server.patch
+  * d/control: update minimum versions for talloc/tevent/tdb
+  * d/rules: do not install ctdb.service, it is installed by upstream now
+  * d/ctdb.install: do not install ctdb_wrapper (not used anymore)
+  * d/libldb2.symbols, d/d/python3-ldb.symbols.in: new versions: 2.6.0 2.6.1
+    per upstream, re-version symbols added in 2.5.2 as added in 2.6.1
+    (ldb users needs to be recompiled anyway after updating libldb)
+  * new: spelling.patch: a few more spelling fixes
+  * d/control: bump Standards-Version to 4.6.1 (no changes)
+  * Remove dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch
+    (included in 4.17.0 already)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 13 Sep 2022 20:47:05 +0300
+
+samba (2:4.16.6+dfsg-6) unstable; urgency=medium
+
+  * d/rules: use the right dir for dh_shlibdeps -l (long-standing issue)
+  * rewrite shlibs/symbols-generating file d/genshlibs, make whole process
+    much more clean and strighforward, and 10x times faster too
+  * debian/libnss-winbind.triggers: activate ldconfig trigger
+  * add debian/samba-libs.symbols with libsmbldap library
+  * d/samba.examples: do not install smbadduser: csh considered harmful
+  * d/rules: remove long-unused commented-out override_dh_perl-arch
+  * d/samba.lintian-overrides: *docs-outside-share-doc usr/share/samba/setup/
+  * d/genshlibs: add the forgotten mkdir for d/$pkg/DEBIAN
+  * remove static/fixed branding d/patches/VERSION.patch
+  * d/rules: implement dynamic branding of VERSION file based on dpkg-vendor
+  * d/rules: simplify package interdependency checking rules
+  * d/rules: add a lot more interpackage dependency checks
+  * d/NEWS: merge it into d/samba.NEWS (removes several lintian warnings)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 29 Oct 2022 08:28:53 +0300
+
+samba (2:4.16.6+dfsg-5) unstable; urgency=medium
+
+  * move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz manpages to
+    winbind package where they belong and where actual idmap modules lives.
+    (install all idmap_*.8 manpages to winbind package)
+  * d/rules: install pam.d/samba with mode 0644, not 0755
+  * many lintian-override updates:
+   - source: ctdb/doc/*.html actually has sources
+   - source: +very-long-line-length-in-source-file * (for generated files)
+   - source: +debian-control-has-unusual-field-spacing Breaks
+   - winbind: +spare-manual-page for module manpages
+   - *: update some overrides for new lintian
+   - libpam-winbind: +spare-manual-page pam_winbind.8
+   - libldb2: +package-contains-empty-directory .../ldb/modules/ldb/
+   - *: +hardening-no-fortify-functions for some simple shared libs
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 26 Oct 2022 22:27:00 +0300
+
+samba (2:4.16.6+dfsg-4) unstable; urgency=medium
+
+  * poptGetArg-misuse-fixes-1022826.diff: fix poptGetArg() misuse
+    for popt-1.9 (Closes: #1022826)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 26 Oct 2022 19:45:38 +0300
+
+samba (2:4.16.6+dfsg-3) unstable; urgency=medium
+
+  * d/rules: stop dh_installpam from installing samba.pam
+    to the samba package (Closes: #1022775, #1022776)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 20:13:53 +0300
+
+samba (2:4.16.6+dfsg-2) unstable; urgency=medium
+
+  * d/rules: pam.d/samba should go to /etc, not /
+  * d/README.source.md: it is README.source.md not README.source
+  * d/control: bump Standards-Version to 4.6.1 (no changes)
+  * d/rules: verify that samba-libs does not depend on samba
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 13:55:33 +0300
+
+samba (2:4.16.6+dfsg-1) unstable; urgency=medium
+
+  * new upstream security release 4.16.6, fixing:
+    CVE-2022-3437:  There is a limited write heap buffer overflow in the GSSAPI
+    unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba).
+    https://www.samba.org/samba/security/CVE-2022-3437.html
+  * use explicit_bzero() instead of bzero() for the substitute of memset_s()
+  * d/rules: make it a bit more consistent with other samba packages
+  * d/rules: stop exporting ${PYTHON}
+  * a bunch of ubuntu-related changes:
+   - d/rules: omit glusterfs on ubuntu-i386
+   - apply Ubuntu changes to smb.conf at install time (d/smb.conf.ubuntu.diff)
+   - d/tests/: ensure io_uring module is built before testing it
+   - d/rules: inline parallel check from dpkg/buildopts.mk
+    (buildopts.mk does not exist on ubuntu 20.04 focal)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 12:48:20 +0300
+
+samba (2:4.16.5+dfsg-2) unstable; urgency=medium
+
+  [ Michael Tokarev ]
+  * d/tests/util: use printf for formatting password for smbpasswd,
+    not non-standard echo \n (mr !60)
+  * introduce LDB_2.4.4 version symbol (Closes: #1021371)
+    Create an empty ABI file just to make the scripts run during the build
+    stage to introduce LDB_2.4.4 version symbol into libldb.so, and remove
+    this empty file in the clean target. It is a bit hackish but works fine.
+    This is only needed to upgrade from bullseye to bookworm, from
+    4.13.13+dfsg-1~deb11u5+ to the next release, 4.16+.
+    Remove this for bookworm+.
+  * dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch:
+    GnuTLS gnutls_rnd() can fail and give predictable random values.
+    Closes: #1021024, CVE-2022-1615
+
+  [ John Paul Adrian Glaubitz ]
+  * disable ceph support on ppc64 and x32 (Closes: #1020781, #1012165)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 08 Oct 2022 15:11:15 +0300
+
+samba (2:4.16.5+dfsg-1) unstable; urgency=medium
+
+  * new (minor) upstream release 4.16.5
+  * removed fix-samba-tool-domain-join-segfault.patch (included upstream)
+  * d/gbp.conf: no need to filter orig.tar: uscan already does that
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 08 Sep 2022 12:44:38 +0300
+
+samba (2:4.16.4+dfsg-2) unstable; urgency=medium
+
+  * d/libldb2.symbols: include newly added symbols
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 01 Aug 2022 15:43:11 +0300
+
+samba (2:4.16.4+dfsg-1) unstable; urgency=high
+
+  * new upstream security release fixing:
+    o CVE-2022-2031: Samba AD users can bypass certain restrictions associated
+      with changing passwords.
+      https://www.samba.org/samba/security/CVE-2022-2031.html
+    o CVE-2022-32742: Server memory information leak via SMB1.
+      https://www.samba.org/samba/security/CVE-2022-32742.html
+    o CVE-2022-32744: Samba AD users can forge password change requests
+      for any user.
+      https://www.samba.org/samba/security/CVE-2022-32744.html
+    o CVE-2022-32745: Samba AD users can crash the server process with an LDAP
+      add or modify request.
+      https://www.samba.org/samba/security/CVE-2022-32745.html
+    o CVE-2022-32746: Samba AD users can induce a use-after-free in the server
+      process with an LDAP add or modify request.
+      https://www.samba.org/samba/security/CVE-2022-32746.html
+   * Closes: #1016449, CVE-2022-2031 CVE-2022-32742, CVE-2022-32744,
+     CVE-2022-32745, CVE-2022-32746
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 27 Jul 2022 18:35:53 +0300
+
+samba (2:4.16.3+dfsg-1) unstable; urgency=medium
+
+  [ Michael Tokarev ]
+  * new upstream minor/bugfix releae. See WHATSNEW.txt for details.
+  * d/watch: add the forgotten repacksuffix=+dfsg
+
+  [ Andreas Hasenack ]
+  * update nfs configuration examples for ctdb
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 18 Jul 2022 17:15:07 +0300
+
+samba (2:4.16.2+dfsg-1) unstable; urgency=medium
+
+  * new upstream minor/bugfix release.
+  * removed waf-add-support-for-GNU-kFreeBSD.patch (applied upstream)
+  * new minor version of libldb
+    (no code changes, just the build system update to support python 3.11)
+  * move samba-dcerpcd from samba package to samba-common-bin due to winbind
+    New in 4.16 samba-dcerpcd binary is used by smbd and winbind, so putting
+    it to samba package makes winbind unable to run it without samba.
+    For now, in order to fix this issue, move this binary from samba to
+    samba-common-bin package. It might be worth creating its own package
+    for this binary (or maybe some more binaries), once it is clear where
+    upstream is going to.  Making this binary a part of samba-common-bin
+    adds some more files to smbclient-only setup.
+    (Closes: #1012240)
+  * remove mksmbpasswd script and manpage: we have smbpasswd whcih can add
+    entries to smbpasswd file if needed, and can handle other passwod storage
+    formats too
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 13 Jun 2022 19:08:44 +0300
+
+samba (2:4.16.1+dfsg-8) unstable; urgency=medium
+
+  * fix the Breaks/Replaces versions in the previous upload for moving
+    libsamba-utils.so, and use the same Breaks/Replaces for the -dev
+    packages too
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 07 Jun 2022 14:11:09 +0300
+
+samba (2:4.16.1+dfsg-7) unstable; urgency=medium
+
+  * drop libunwind-dev build dependency again: it turned out the
+    internal stack unwind is better anyway
+  * move libsamba-utils.so and its dependencies from libwbclient0
+    into samba-libs. In the past, libwbclient were built using this
+    library, but it does not depend on libsamba-utils anymore
+  * d/control: libnss-winbind and libpam-winbind does not depend
+    on samba-common. None of the files in samba-common are used by
+    nss and pam modules; winbind does use them but not the modules.
+  * d/rules: add --with-sockets-dir=/run/samba (or else it was
+    /var/run/samba)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 07 Jun 2022 12:09:50 +0300
+
+samba (2:4.16.1+dfsg-6) unstable; urgency=medium
+
+  * d/control: specify arch list for libunwind-dev build-dep to be the same
+    as for libunwind itself (it is not built on all architectures)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 29 May 2022 12:09:22 +0300
+
+samba (2:4.16.1+dfsg-5) unstable; urgency=medium
+
+  * add-missing-libs-deps.diff: add missing dependencies for a few samba
+    libraries. Closes: #1010922
+  * point [printers] to /var/tmp/, stop shipping /var/spool/samba/.
+    For a long time, we shipped an alternative /var/tmp/ directory with mode
+    01777 (so that anyone can use it to store files) but without the same setup
+    as for regular /var/tmp/ (in particular, without removing old files and
+    since it is not a usual place to store temp files, no one actually looked
+    at it the same way someone would take care of /var/tmp/.  Change smb.conf
+    to use /var/tmp/ instead of /var/spool/samba/. In the postinst script,
+    remove /var/spool/samba/, check if it is still used in smb.conf,
+    and create a compatibility symlink pointing to tmp/, suggesting changing
+    smb.conf.  And remove this compat symlink in postrm.
+    This probably can be accomplished by a debconf question, but the
+    thing is complicated by the fact that smb.conf might be upgrading
+    too at the same time.
+  * debian/patches/weak-crypto-allowed-clarify.diff: update
+  * testparm-do-not-fail-if-pid-dir-does-not-exist.patch: also cover samba-tool
+    testparm too, not only regular stand-alone testparm.
+  * fix-samba-tool-domain-join-segfault.patch: fix segfault when joining an
+    AD-DC domain using samba-tool join.
+  * d/rules: enable --with-profilig-data to build samba with profiling
+    collection (if set in smb.conf)
+  * d/control: add libunwind-dev to build-deps, to compile in stack backtrace
+    logging in case of crash
+  * d/control: stop build-conflicting with now-unused libtracker-miner-2.0-dev
+  * d/control: stop build-conflicting with libtracker-sparql-2.0-dev: there's
+    no point in explicitly disabling libtracker-sparql support (bullseye-only
+    for now anyway)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 28 May 2022 22:50:43 +0300
+
+samba (2:4.16.1+dfsg-4) unstable; urgency=medium
+
+  [ Michael Tokarev ]
+  * fix spelling in disable-setuid-confchecks.patch
+  * d/NEWS: split it into different $package.NEWS files
+  * d/upstream/metadata: add Bug-Database
+  * d/samba.postinst: create sambashare group and usershare directory
+    on new install only
+  * libldb2: provide compat symlinks for bullseye ldb modules dir
+  * d/rules: provide Build-Depends-Package: for python3-ldb
+  * samba-vfs-modules.lintian-overrides: add spare-manual-page vfs_*.8 override
+  * winbind.lintian-overrides: add spare-manual-page idmap_*.8 override
+
+  [ Arnaud Rebillout ]
+  * Fix patch testparm-do-not-fail-if-pid-dir-does-not-exist (Closes: #1010835)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 11 May 2022 09:50:03 +0300
+
+samba (2:4.16.1+dfsg-3) unstable; urgency=medium
+
+  * fix ldb package version generation in d/make_shlibs
+    which was wrong in 2 previous uploads.
+    Will I *ever* make it actually work someday?
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 18:32:24 +0300
+
+samba (2:4.16.1+dfsg-2) unstable; urgency=medium
+
+  * rethink ldb version *again*, to be 2.5.0+smb4.16.1-2
+    or else 2.5.0+smb-1 from samba-4.16.1-2 sorts before
+    2.5.0+smb-7 from samba-4.16.0-7.
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 17:02:16 +0300
+
+samba (2:4.16.1+dfsg-1) unstable; urgency=medium
+
+  * new upstream minor release 4.16.1
+  * move-msg.sock-from-var-lib-samba-to-run-samba.patch:
+    move /var/lib/samba/private/msg.sock/ to /run/samba/msg.sock/.
+    This is a (private) socket directory for IPC, it should not be in /var.
+  * Remove /var/lib/samba/private/msg.sock/ in postinst
+  * testparm-do-not-fail-if-pid-dir-does-not-exist.patch:
+    testparm deliberately fails if /run/samba does not exist,
+    while testparam itself does not use it and daemons will
+    create it on demand.  Just make it a warning instead of a
+    fatal error, and we'll not need to pre-create this dir
+    in a random place using hackish ways
+  * ctdb-create-piddir.patch: create /run/ctdb/ in ctdb.service
+    and ctdb.init before invoking ctdbd (as the latter does not
+    create its pid directory on demand).
+  * stop (ab)using tmpfiles.d to pre-create /run/samba/ and /run/ctdb/
+    and stop creating /run/samba/ in samba-common-bin.postinst just to
+    make testparam happy.
+  * d/rules: minor tweaks
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 13:16:12 +0300
+
+samba (2:4.16.0+dfsg-7) unstable; urgency=medium
+
+  * another bunch of small tweaks to d/rules:
+   - set SHELL to /bin/sh -e
+   - rework the clean target
+   - provide fast replacement of architecture.mk
+   - better expression for DEB_REVISION
+   - rearrange configure options
+  * do not disable glusterfs on ubuntu-i386 (glusterfs is now in main)
+  * mention closing of #1001053 by the 4.16 upload
+  * change the ldb version string again, removing te "+samba*" suffix
+    to allow bin-NMUs +b1 (Closes: #1010100)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 24 Apr 2022 16:56:34 +0300
+
+samba (2:4.16.0+dfsg-6) unstable; urgency=medium
+
+  * another attempt to fix/work around #221618. Re-enable
+    libsmbclient-ensure-lfs-221618.patch and change it to just define
+    an extra type array int[sizeof(off_t)-7]. If off_t is small it will
+    become a compile error.  It is an ugly way to do it, but it should
+    actually work, unlike various static_assert/_Static_assert which are
+    language (C/C++) and standard-dependent.  Closes: #221618.
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 17:27:09 +0300
+
+samba (2:4.16.0+dfsg-5) unstable; urgency=medium
+
+  * disable libsmbclient-ensure-lfs-221618.patch for now.
+    It throws errors in one or another configuration no matter what.
+    Repoens: #221618
+  * d/salsa-ci.yml: re-allow blhc salsa-ci test to fail again
+    due to different bug in blhc
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 16:33:57 +0300
+
+samba (2:4.16.0+dfsg-4) unstable; urgency=medium
+
+  * libsmbclient-ensure-lfs-221618.patch: replace _Static_assert with
+    static_assert (and include <assert.h> to make C++ happy too
+    (Closes: #1009211)
+  * disable-setuid-confchecks.patch: when running configure tests,
+    samba tries to verify setuid/setgid etc calls are actually
+    *working*, not just exists. This is only possible when the
+    configure is running as root. But it turns out in some salsa-ci
+    configuration (namely in the reprotest), the second build is
+    actually running as root, and in that environment, actual
+    setegid call is failing somehow. Just disable the config-time
+    check for correctly working setgid and assume it "just works"
+    if present, exactly like non-root build will do.
+  * d/salsa-ci.yml: do not expect failure in blhc test (the original
+    prob has been fixed long ago), and stop requiring experimental
+  * mention closing of #999876 by 4.16
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 00:42:38 +0300
+
+samba (2:4.16.0+dfsg-3) unstable; urgency=medium
+
+  * d/control: comment out the selftest-mode build deps for now
+  * d/control: forgotten python3-samba:Replaces against samba package too,
+    not just samba-libs, when moving dckeytab python lib (Closes: #1009175)
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 08 Apr 2022 10:18:23 +0300
+
+samba (2:4.16.0+dfsg-2) unstable; urgency=medium
+
+  * use strict versioned dependency between samba-dsdb-modules and libldb2,
+    since they're tied to each other and are now built from the same source
+  * fix forgotten shlib symbols generation for python3-ldb
+  * change libldb versioning scheme
+     from   ldb_2:2.5.0+samba4.16.0-1
+     to     ldb_2:2.5.0-1+samba4.16.0
+    so that symbols versioning works correctly.  Unfortunately the previous
+    upload to experimental used the first form which is greather than the
+    correct one, so temporarily (just for this 2.5.0 version of ldb) use
+    this:   ldb_2:2.5.0+smb-1+samba4.16.0
+    (with "+smb" suffix to be removed for 2.5.1+)
+  * exclude samba-vfs-modules for i386 ubuntu build since this package
+    is useless without samba itself (which is not built on this environment)
+  * create selftest rules and add !nocheck build-dependencies
+    (but do not enable selftests for now as they're failing)
+  * split build system into -arch and -indep parts. We build only one arch-all
+    package (samba-common) which contains only static files from debian/,
+    there's no need to build whole samba to build this package.
+    Move almost all Build-Depends to Build-Depends-Arch (and reindent them).
+  * various updates to d/rules
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 07 Apr 2022 09:56:56 +0300
+
+samba (2:4.16.0+dfsg-1) experimental; urgency=medium
+
+  * New upstream major release.
+    Closes: #1004690, CVE-2021-20316: Fileserver symlink metadata share escape
+    Closes: #1004691, CVE-2021-43566: mkdir race condition allows share escape
+    Closes: #1004692, CVE-2021-44141: UNIX extensions in SMB1 disclose whether
+     the outside target of a symlink exists
+    Closes: #1005642 (windows client data corruption due to cache poisoning)
+    Closes: #1001053 (MIT-kerberos config broken after fix for CVE-2020-25717)
+    Closes: #988197 (legacy printing support, 47d79d7e7e406f7dd2)
+    Closes: #998423 (coredump connecting from macos to shares with var substs)
+    Closes: #999876 (winbind allow trusted domains = no regression)
+  * Notable changes in 4.16 series compared to 4.13:
+    - modular VFS (see The_New_VFS.txt)
+    - publishing printers in AD is more complete
+    - group policies for winbindd cilents (like linux systems)
+    - certificate auto enrollement in AD group policy
+    - large list of improvements in samba-tool
+    - SMB1 protocol has been deprecated, some subcommands has been removed
+    - more consistend options/subcommands in samba commands
+  * d/rules: export PYTHONHASHSEED=1. This makes lots of sporadic build-time
+    debian-specific failures to go away, by preserving order of waf hashes
+  * refresh patches, update build-depend versions (talloc, tdb, tevent)
+  * refresh lintian-overrides files, add many new overrides
+  * build-depend on python3-markdown
+  * build-depend on libjson-perl for new heimdal bits
+  * more consistent internal lib naming; refresh file lists everywhere
+  * samba: install new rpc_* services, install samba-dcerpc
+  * refresh symbols files
+  * build libldb from samba sources, not from separate source
+    (this moves ldb plugins from /usr/lib/$triple/ldb/plugin/ldb/ to
+     /usr/lib/$triple/samba/ldb/ - the same where dsdb modules are).
+  * optimizations for d/make_shlibs; also allow one to specify explicit
+    version for some packages
+  * as per clarifications for waf --{bundled,builtin}-libraries, remove
+    now-wrong usage there. This also fixes build failures with current
+    samba sources
+  * d/rules: various optimizations to reduce startup costs by eliminating
+    unnecessary external command calls during d/rules read by make.
+    Including caching of LDB version information in d/ldb-version.mk file.
+    This does not affect the buildd processing much (and does not affect
+    runtime at all), but helps with build procedure debugging.
+  * d/rules: numerous small fixes, cleanups and other changes, including:
+    - clean up the install target
+    - remove some now-irrelevant parts
+    - fix no-glusterfs-build on non-linux
+  * change build procedure: instead of `waf build', run `waf install'.
+    `waf build' builds samba to be run from the build dir, and `waf install'
+    rebuilds/relinks everything again for production. Build the production
+    variant only, no build-dir one.
+  * samba-common-bin.postinst: explicitly mkdir /run/samba before invoking
+    samba binaries (Closes: #953530)
+  * in the salsa git repository of samba, stop keeping debian patches in
+    applied form, keep them in d/patches/ only as most other packages do.
+  * move single python (helper) module, libsamba-policy, together with
+    2 internal libraries used by it, from samba-libs package to python3-samba.
+    This makes samba-libs to be free from python-related files, and makes
+    python3-samba to be the only python-providing package.
+    Closes: #1006875, #878612, #862338
+  * also move dckeytab python module from samba to python3-samba
+    (actually stop moving it from python3-samba to samba to incorrectly
+    avoid a circular dependency). Also verify that python3-samba does
+    not depend on samba package.
+  * weak-crypto-allowed-clarify.diff: clarify "weak crypto is allowed"
+    testparm message (Closes: #975882)
+  * spelling.patch: fix many common spelling mistakes in the source
+  * ctdb: simplify/cleanup instllation of READMEs/examples
+  * d/control: remove breaks/replaces/depends on ancient versions of some
+    packages (ancient dpkg version in Pre-Depends, ancient samba-libs)
+  * d/rules: rework wrong shlibdeps handling
+  * move helper programs from /usr/lib/$multiarch/ to /usr/libexec/
+    where they belongs. This should not affect users.
+  * smbclient: re-do the fix for an old bug, #221618. The original "fix"
+    did not fix anything (it is too late already to #define _FILE_OFFSET_BITS
+    when all types has already been defined).  From now on, raise an error
+    if off_t is less than 64bits (it should >=64 when #include'ing
+    <libsmbclient.h> with proper LFS defines).  In theory this can break
+    some sources which either included libsmbclient.h without a reason or
+    which didn't use any of the functions which deals with off_t (smbc_lseek
+    etc), - which did not explicitly enable LFS on a 32bit system.
+    Please email us if you faced such situation.
+  * drop 07_private_lib patch: we do not need to force rpath for
+    private libraries into every samba binary, upstream build system
+    does a good job here.
+
+ -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 05 Apr 2022 16:01:25 +0300
+
+samba (2:4.13.14+dfsg-1) unstable; urgency=high
+
+  * New upstream security release in order to address the following defects:
+    - CVE-2016-2124: don't fallback to non spnego authentication if we require
+      kerberos
+    - MS CVE-2020-17049 in Samba: 'Bronze bit' S4U2Proxy Constrained Delegation
+      bypass
+    - CVE-2020-25717: A user on the domain can become root on domain members
+    - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other
+      servers
+      + Bump build-depends ldb >= 2.2.3
+    - CVE-2020-25719: AD DC Username based races when no PAC is given
+    - CVE-2020-25721: Kerberos acceptors need easy access to stable AD
+      identifiers (eg objectSid)
+    - CVE-2020-25722: AD DC UPN vs samAccountName not checked (top-level bug
+      for AD DC validation issues)
+    - CVE-2021-3738: crash in dsdb stack
+    - CVE-2021-23192: dcerpc requests don't check all fragments against the
+      first auth_state
+      + Update d/samba-libs.install for libdcerpc-pkt-auth.so.0
+  * Add patch to fix "allow trusted domains"
+  * Bump ldb build-depends to 2.2.3
+  * Update d/samba-libs.install
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Nov 2021 20:53:03 +0100
+
+samba (2:4.13.13+dfsg-1) unstable; urgency=high
+
+  [ Athos Ribeiro ]
+  * Add autopkgtest to verify tmpfiles setup (LP: #1905387)
+    - d/t/reinstall-samba-common-bin: make sure /run/samba is created
+      by the samba-common-bin installation process (postinst script)
+    - d/t/control: run new reinstall-samba-common-bin test case
+
+  [ Paride Legovini ]
+  * samba.postinst: do not populate sambashare from the Ubuntu admin group
+    (LP: #1942195)
+
+  [ Mathieu Parent ]
+  * New upstream version
+    - Remove CVE-2021-20254.patch
+    - Bump build-depends ldb  >= 2.2.0
+  * libwbclient0: Add Breaks+Replaces: libsamba-util0 (<< 2:4.0.0)
+    (Closes: #988170)
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 01 Nov 2021 08:59:20 +0100
+
+samba (2:4.13.5+dfsg-2) unstable; urgency=high
+
+  * CVE-2021-20254: Negative idmap cache entries can cause incorrect group
+    entries in the Samba file server process token (Closes: #987811)
+  * Add Breaks+Replaces: samba-dev (<< 2:4.11) (Closes: #987209)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 06 May 2021 21:09:29 +0200
+
+samba (2:4.13.5+dfsg-1) unstable; urgency=medium
+
+  * New upstream version (Closes: #984863)
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 13 Mar 2021 08:31:27 +0100
+
+samba (2:4.13.4+dfsg-1) unstable; urgency=medium
+
+  * New upstream version
+    - GPG signature has changed
+    - Update samba-libs.install
+    - Update symbols
+  * Never use priority high when asking for DHCP integration (Closes: #981554)
+  * Sync CTDB patches with Ubuntu:
+    - Add "ctdb-config: enable syslog by default"
+    - Update "fix nfs related service names"
+  * d/rules: Ubuntu specifics
+    - No Ceph on i386
+    - Disable some i386 packages
+    - No GlusterFS
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Feb 2021 22:26:43 +0100
+
+samba (2:4.13.3+dfsg-1) unstable; urgency=medium
+
+  [ Andreas Hasenack ]
+  * d/control: enable the liburing vfs module (Closes: #976854)
+  * Add new DEP8 tests for the uring vfs module
+  * Factor out common DEP8 test code into d/t/util and change the tests to
+    source from it
+  * Add set -x and set -e to DEP8 tests
+
+  [ Mathieu Parent ]
+  * liburing-dev is linux-any
+  * New upstream version
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 16 Dec 2020 18:23:09 +0100
+
+samba (2:4.13.2+dfsg-3) unstable; urgency=medium
+
+  * Ensure systemd-tmpfiles is called before testparm (Closes: #975422)
+  * Only check configuration on configure step
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 22 Nov 2020 10:44:51 +0100
+
+samba (2:4.13.2+dfsg-2) unstable; urgency=medium
+
+  * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 18 Nov 2020 20:34:51 +0100
+
+samba (2:4.13.2+dfsg-1) experimental; urgency=medium
+
+  * New upstream major version
+    - Update d/gbp.conf, d/watch and d/README.source for 4.13
+    - Update patches
+    - Bump build-depends ldb >= 2.2.0
+    - Install new files
+    - Update symbols
+  * Includes the following security fixes:
+    - CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify
+      (Closes: #973400)
+    - CVE-2020-14323: Unprivileged user can crash winbind (Closes: #973399)
+    - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
+      easily crafted records (Closes: #973398)
+    - CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon")
+      (Closes: #971048)
+  * Includes the following fixes:
+    - Fixes "samba_dnsupdate gives depreacation warnings" (Closes: #973957)
+    - s3: libsmbclient.h: add missing time.h include (Closes: #946840)
+  * Remove unused python3-crypto dependency (Closes: #971292)
+  * Enable Spotlight with ES backend (Closes: #956096, #956482)
+  * Standards-Version: 4.5.0
+  * Add missing Build-Depends-Package in libsmbclient.symbols and
+    libwbclient0.symbols
+  * d/copyright: Fix duplicate-globbing-patterns
+  * Remove outdated/malformed lintian overrides
+  * d/winbind.logrotate: Only reload winbindd when running (Closes: #946821)
+  * Bump to debhelper compat 13
+  * Add another library-not-linked-against-libc override
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 12 Nov 2020 11:23:01 +0100
+
+samba (2:4.12.5+dfsg-3) unstable; urgency=high
+
+  * Add Breaks: sssd-ad-common (<< 2.3.0), due to libndr so bump
+    (Closes: #963971)
+  * Add patch traffic_packets: fix SyntaxWarning: "is" with a literal
+    (Closes: #964165)
+  * Add patch Rename mdfind to mdsearch (Closes: #963985)
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 04 Jul 2020 23:57:59 +0200
+
+samba (2:4.12.5+dfsg-2) unstable; urgency=high
+
+  * Add missing symbol (path_expand_tilde)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 02 Jul 2020 15:27:25 +0200
+
+samba (2:4.12.5+dfsg-1) unstable; urgency=high
+
+  * New upstream security release:
+    - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
+      DC LDAP Server with ASQ, VLV and paged_results
+    - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
+      excessive CPU
+    - CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
+      paged_results and VLV.
+    - CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.
+    - Bump build-depends ldb >= 2.1.4
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 02 Jul 2020 14:03:36 +0200
+
+samba (2:4.12.3+dfsg-2) unstable; urgency=medium
+
+  * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 28 Jun 2020 11:45:14 +0200
+
+samba (2:4.12.3+dfsg-1) experimental; urgency=medium
+
+  * New upstream major version (Closes: #963106)
+    - Update d/gbp.conf, d/watch and d/README.source for 4.12
+    - Drop merged patches
+    - Bump build-depends talloc >= 2.3.1, tdb >= 1.4.3, tevent >= 0.10.2 and
+      ldb >= 2.1.3
+    - Upstream fixes:
+      + pygpo: use correct method flags
+        (Closes: #963242, #961585, #960171, #956428)
+      + CVE-2020-10700: A use-after-free flaw was found in the way samba AD DC
+        LDAP servers, handled 'Paged Results' control is combined with the 'ASQ'
+        control. A malicious user in a samba AD could use this flaw to cause
+        denial of service (Closes: #960189)
+      + CVE-2020-10704: A flaw was found when using samba as an Active Directory
+        Domain Controller. Due to the way samba handles certain requests as an
+        Active Directory Domain Controller LDAP server, an unauthorized user can
+        cause a stack overflow leading to a denial of service. The highest
+        threat from this vulnerability is to system availability
+        (Closes: #960188)
+    - intel aes-ni no more needed as GnuTLS is used
+    - Install new files
+    - Update symbols
+    - Update samba-libs.lintian-overrides
+  * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915)
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 24 Jun 2020 23:12:11 +0200
+
+samba (2:4.11.5+dfsg-1) unstable; urgency=medium
+
+  * New upstream security release
+    - CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD
+      Directory not automatic.
+    - CVE-2019-14907: Crash after failed character conversion at log level 3 or
+      above.
+    - CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.
+    - Bump build-depends ldb >= 2.0.8
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 28 Jan 2020 07:19:46 +0100
+
+samba (2:4.11.3+dfsg-1) unstable; urgency=high
+
+  * New upstream security release
+    - Drop merged patches for previous security fixes
+    - CVE-2019-14861: An authenticated user can crash the DCE/RPC DNS management
+      server by creating records with matching the zone name.
+    - CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction was
+      not being applied when processing protocol transition requests (S4U2Self),
+      in the AD DC KDC.
+  * d/control: drop python3-matplotlib
+  * d/control: Fix stronger-dependency-implies-weaker
+    (samba depends -> recommends python3-dnspython)
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 16 Dec 2019 09:47:45 +0100
+
+samba (2:4.11.1+dfsg-3) unstable; urgency=medium
+
+  * Add some python dependencies:
+    - python3-matplotlib : samba-tool visualize
+    - python3-markdown   : samba-tool domain schemaupgrade
+    - python3-dnspython  : samba-tool dns
+  * Only build with default python3 (Closes: #943635)
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 17 Nov 2019 14:48:02 +0100
+
+samba (2:4.11.1+dfsg-2) unstable; urgency=high
+
+  * New upstream security release
+    - CVE-2019-10218: Malicious servers can cause Samba client code to return
+      filenames containing path separators to calling code.
+    - CVE-2019-14833: When the password contains multi-byte (non-ASCII)
+      characters, the check password script does not receive the full password
+      string.
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 18 Oct 2019 20:26:45 +0200
+
+samba (2:4.11.1+dfsg-1) unstable; urgency=medium
+
+  * New upstream release
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 18 Oct 2019 19:00:46 +0200
+
+samba (2:4.11.0+dfsg-11) unstable; urgency=medium
+
+  * Stop building with spotlight support which pulls glib (Closes: #941654)
+  * Force quota support (Closes: #941899)
+  * Standards-Version: 4.4.1, no change
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 14 Oct 2019 12:16:04 +0200
+
+samba (2:4.11.0+dfsg-10) unstable; urgency=medium
+
+  * Add libwbclient-dev to samba-dev depends as samba-util was moved there
+    (Closes: #941750)
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 05 Oct 2019 15:57:07 +0200
+
+samba (2:4.11.0+dfsg-9) unstable; urgency=medium
+
+  * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 03 Oct 2019 19:08:17 +0200
+
+samba (2:4.11.0+dfsg-8) unstable; urgency=medium
+
+  * d/gbp.conf: sign-tags = True
+  * Do not check smb.conf with testparm when server role=active directory domain
+    controller (Closes: #931734)
+  * Force one job during configure step with -j 1 (Closes: #941467).
+    Not setting -j leads to default which is number of cpus
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 03 Oct 2019 07:52:39 +0200
+
+samba (2:4.11.0+dfsg-7) unstable; urgency=medium
+
+  * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467)
+  * This version is built with talloc from sid (Closes: #940963)
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 02 Oct 2019 20:45:24 +0200
+
+samba (2:4.11.0+dfsg-6) unstable; urgency=medium
+
+  * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467)
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 01 Oct 2019 22:35:36 +0200
+
+samba (2:4.11.0+dfsg-5) experimental; urgency=medium
+
+  * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false
+  * Remove patches:
+    - "build: Remove tests for _readdir() and __readdir()"
+    - "build: Remove tests for rdchk()"
+    - "build: Remove tests for _pwrite() and __pwrite()"
+  * Add patches by Ralph Boehme:
+    - "wscript: remove all checks for _FUNC and __FUNC"
+    - "wscript: split function check to one per line and sort alphabetically"
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 30 Sep 2019 13:37:50 +0200
+
+samba (2:4.11.0+dfsg-4) experimental; urgency=medium
+
+  * Use the same arches for librados-dev than libcephfs-dev (Fix missing
+    build-depends on alpha and sh4)
+  * Split vfsmods:Recommends substvar into
+    {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable
+    and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also
+    alpha and sh4)
+  * Add patch for "build: Remove tests for _readdir() and _readdir()", to
+    hopefully fix FTBFS on armel
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 29 Sep 2019 09:29:03 +0200
+
+samba (2:4.11.0+dfsg-3) experimental; urgency=medium
+
+  * Try to fix FTBFS on armel (armhf is fixed):
+    - Add patch for build: Remove tests for rdchk()
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 28 Sep 2019 22:17:04 +0200
+
+samba (2:4.11.0+dfsg-2) experimental; urgency=medium
+
+  * d/gitlabracadabra.yml: Add samba-team/libsmb2
+  * Try to fix FTBFS on armel and armhf:
+    - Add patch for build: Remove tests for _pwrite() and __pwrite()
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 28 Sep 2019 11:47:56 +0200
+
+samba (2:4.11.0+dfsg-1) experimental; urgency=medium
+
+  [ Mathieu Parent ]
+  * Upload to experimental
+  * New upstream major release
+    - Update d/gbp.conf, d/watch and d/README.source for 4.11
+    - Import upstream release
+    - Update fix-nfs-service-name-to-nfs-kernel-server.patch
+    - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and
+      ldb >= 2:2.0.7
+    - libsamba-passdb.so bumped to 0.28.0
+    - libnon-posix-acls is now a subsystem
+    - Drop libparse-pidl-perl package (Closes: #939419)
+    - Add new files to d/*.install
+    - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies
+    - Move libsamba-util deps to libwbclient0
+  * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on
+    armel and armhf
+  * salsa-ci: Build on experimental
+
+  [ John Paul Adrian Glaubitz ]
+  * Disable cephfs support on architectures where it's not stable
+    (Closes: #940697)
+
+  [ Louis van Belle ]
+  * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build
+    dumpmscat
+  * d/control, d/rules: Enable spotlight (TimeMachine)
+  * d/control: Bump libtdb-dev (>= 2) in samba-dev deps
+  * Update libwbclient0.symbols
+  * d/rules: adjust LDB_DEPENDS
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 26 Sep 2019 09:37:51 +0200
+
+samba (2:4.10.8+dfsg-1) unstable; urgency=medium
+
+  * Upload to unstable
+  * New upstream release:
+    - CVE-2019-10197: Combination of parameters and permissions can allow user
+      to escape from the share path definition
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 10 Sep 2019 18:46:54 +0200
+
+samba (2:4.10.7+dfsg-1) experimental; urgency=medium
+
+  [ Mathieu Parent ]
+  * New upstream release
+    - Update patches
+    - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged
+    - libsamba-passdb.so bumped to 0.27.2
+    - Update symbols
+    - Update installed files
+  * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9)
+    (Closes: #910242)
+  * Add missing Breaks+Replace found by piuparts (Closes: #929217)
+  * Enable vfs_nfs4acl_xattr (Closes: #930540)
+  * ctdb:
+    - enable ceph and etcd recovery lock
+    - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends
+  * Add gitlabracadabra.yml
+  * Update salsa-ci.yml
+
+  [ Rafael David Tinoco ]
+  * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
+    (Closes: #931138)
+  * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201):
+    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
+      name from nfs to nfs-kernel-server
+    - ctdb-config: depend on /etc/ctdb/nodes file
+    - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
+      allow pid file to exist
+    - added /var/lib/ctdb/* directories
+    - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
+    - Add examples of NFS HA CTDB config files + helper script
+
+  [ Mathieu Parent ]
+  * Update d/gbp.conf, d/watch and d/README.source for 4.10
+  * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream
+  * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and
+    ldb >= 2:1.5.5
+  * Bump libcmocka-dev builddep to 1.1.3
+  * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS
+  * d/copyright:
+    - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/
+    - Move License details to end of file
+    - Add waf licences
+    - Add lib/replace licences
+    - Update lib/{ldb,talloc,tdb} licences
+  * Move to Python3 (from Ubuntu)
+  * Bump debhelper from old 11 to 12.
+  * Standards-Version: 4.4.0
+  * Replace all reference of /var/run to /run (Closes: #934540)
+  * Replace python shbang by python3 in d/*.py
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 29 Aug 2019 14:32:52 +0200
+
+samba (2:4.9.5+dfsg-1) experimental; urgency=medium
+
+  * New upstream release
+    - Bump ldb Build-Depends to 2:1.5.1+really1.4.6
+    - Drop s3-auth-ignore-create_builtin_guests-failing-without.patch, merged
+    - Drop and python-gpg.patch, merged
+  * Add Recommends: samba-dsdb-modules for samba-common-bin (Closes: #862467)
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 20 Mar 2019 21:07:02 +0100
+
+samba (2:4.9.4+dfsg-4) unstable; urgency=medium
+
+  * samba-libs: Add Breaks+Replaces: libndr-standard0 (<< 4) (Closes: #910242)
+  * Improve AppArmor integration (Closes: #896080)
+    - Install update-apparmor-samba-profile 1.2 from Christian Boltz (openSUSE)
+    - Adapt update-apparmor-samba-profile: Rename apparmor profile snippet, and
+      test for it's directory
+    - smbd.init: Run update-apparmor-samba-profile before start
+    - smbd.service: Run update-apparmor-samba-profile before start
+    - Remove /etc/apparmor.d/samba/smbd-shares on purge
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 26 Feb 2019 22:18:19 +0100
+
+samba (2:4.9.4+dfsg-3) unstable; urgency=medium
+
+  [ Ivo De Decker ]
+  * Remove myself from uploaders
+
+  [ Mathieu Parent ]
+  * Update debian/gitlab-ci.yml
+  * Standards-Version: 4.3.0
+  * Add upstream patch for python-gpg support
+  * Replace Suggests: python-gpgme by Recommends: python-gpg (Closes: #876984)
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 15 Feb 2019 11:14:10 +0100
+
+samba (2:4.9.4+dfsg-2) unstable; urgency=medium
+
+  * Append +really0.02 to libparse-pidl-perl version (Closes: #918564)
+  * Add apport hook (From Ubuntu)
+  * Change build dependency to libglusterfs-dev (Closes: #919667)
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 23 Jan 2019 20:59:08 +0100
+
+samba (2:4.9.4+dfsg-1) unstable; urgency=medium
+
+  * New upstream release
+    - Remove patches for previous security fixes, merged
+    - Remove unused lintian overrides (library-not-linked-against-libc)
+  * ignore create_builtin_guests() failing without a valid idmap configuration
+    (Closes: #909465, #899269)
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 22 Dec 2018 18:32:00 +0100
+
+samba (2:4.9.2+dfsg-2) unstable; urgency=high
+
+  * New upstream security release
+    - CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD
+      Internal DNS server
+    - CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT
+    - CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server
+    - CVE-2018-16852 NULL pointer de-reference in Samba AD DC DNS servers
+    - because of CVE-2018-16853 (Samba AD DC S4U2Self Crash in experimental
+      MIT Kerberos configuration (unsupported)), mark the MIT Kerberos build of
+      the Samba AD DC as experimental (not used in Debian package)
+    - CVE-2018-16857 Bad password count in AD DC not always effective
+  * Prepend 1.5.1+really to ldb version
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 24 Nov 2018 23:21:27 +0100
+
+samba (2:4.9.2+dfsg-1) unstable; urgency=medium
+
+  * New upstream release
+    - Bump build-dependencies to ldb 1.4.2
+    - Update debian/samba-libs.install
+  * d/gitlab-ci.yml:
+    - Update to use include
+    - allow_failure for reprotest until #912340 is fixed
+  * d/rules: Replace override_dh_perl by override_dh_perl-arch (Closes: #913143)
+  * debian/gitlab-ci.yml:
+    - Samba sometimes needs ldb from experimental
+    - Use ldb from experimental in piuparts
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 17 Nov 2018 17:25:10 +0100
+
+samba (2:4.9.1+dfsg-2) unstable; urgency=medium
+
+  [ Mathieu Parent ]
+  * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of
+    DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32
+  * Allow one to change password via passwd in default config
+    - third_party: Update pam_wrapper to version 1.0.7
+    - third_party: Add pam_set_items.so from pam_wrapper
+    - nsswitch: Add try_authtok option to pam_winbind
+    - tests: Check pam_winbind pw change with different options
+    - Patch for previous 4 commits
+    - debian/winbind.pam-config: Use the new try_authtok option allowing
+      password change while preserving current behavior with password strength
+      modules (Closes: #858923, LP: #570944)
+  * README.source: use gbp pull --track-missing
+  * Override library-not-linked-against-libc false positives (See #896012)
+  * Fix wrong-path-for-interpreter for pidl and findsmb
+  * ctdb.postrm: Fix to disable_legacy (found by piuparts) (Closes: #911530)
+
+  [ James Clarke ]
+  * Fix systemd-related build failures on non-Linux
+
+  [ Mathieu Parent ]
+  * Add Gitlab CI:
+    - Subscribe to salsa-ci-team/pipeline (See salsa-ci-team/pipeline!27 and
+      samba-team/samba!10)
+    - Copy /etc/apt/{sources.list.d,preferences.d} in the dockerbuilder
+      container (salsa-ci-team/images!9)
+    - Allow daemons to start during autopkgtest (salsa-ci-team/images!10)
+    - debian/gitlab-ci.yml: all jobs: Use ldb from experimental
+    - debian/gitlab-ci.yml: piuparts job: Add --scriptsdir, --allow-database
+      and --warn-on-leftovers-after-purge options
+    - debian/gitlab-ci.yml: piuparts job: Copy apt config to allow enabling
+      extra repositories
+    - debian/gitlab-ci.yml: piuparts job: Use image with the following changes:
+      + Add pre_install_copy_configs and post_install_remove_configs to copy,
+        resp. remove config files from /etc-target to /etc
+      + patch pre_remove_50_find_bad_permissions to workaround findutils bug
+        #912180. Also proposed another workaround in piuparts as bug #911334
+        which is merged but not yet released
+  * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 01 Nov 2018 21:13:37 +0100
+
+samba (2:4.9.1+dfsg-1) experimental; urgency=medium
+
+  * New upstream release
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 24 Sep 2018 13:33:21 +0200
+
+samba (2:4.9.0+dfsg-1) experimental; urgency=medium
+
+  * Upload to experimental
+  * New upstream release
+    - Update d/gbp.conf, d/watch and d/README.source for 4.9
+    - Remove Fix-pidl-manpage-sections.patch, Fix-spelling.patch and
+      Improve-vfs_linux_xfs_sgid-manpage.patch, merged upstream
+    - Bump build-depends talloc >= 2.1.14, tdb >= 1.3.16, tevent >= 0.9.37 and
+      ldb >= 2:1.4.2'
+    - Update paths
+    - Update libsmbclient.symbols
+    - ctdb.lintian-override: Remove script-not-executable override
+    - Add ctdb.NEWS: "Configuration has been completely overhauled"
+    - ctdb: Enable/disable legacy script in postinst/presinst
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 22 Sep 2018 23:04:11 +0200
+
+samba (2:4.8.5+dfsg-1) unstable; urgency=medium
+
+  * New upstream release
+    - Bump ldb Build-depends to 2:1.4.0+really1.3.6
+    - Fixes FTBFS on kFreeBSD (Closes: #883972)
+    - d/rules: winbind_krb5_locator is now in the correct path
+    - winbind_krb5_locator manpage has moved from section 7 to 8
+  * Standards-Version: 4.2.1
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 30 Aug 2018 19:32:24 +0200
+
+samba (2:4.8.4+dfsg-2) unstable; urgency=high
+
+  * Fix typo in previous release: s/usefull/useful/
+  * Prepend 1.4.0+really to ldb version to allow samba-dsdb-modules install
+    (Closes: #906562, #906568)
+  * Urgency still set to high
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 19 Aug 2018 10:08:22 +0200
+
+samba (2:4.8.4+dfsg-1) unstable; urgency=high
+
+  [ Andreas Hasenack ]
+  * d/samba.logrotate: only try to reload the services if they are running
+    (Closes: #902149)
+  * Remove the deprecated "syslog" and "syslog only" options (Closes: #901138)
+
+  [ Mathieu Parent ]
+  * New upstream security release
+    - CVE-2018-1139 Weak authentication protocol allowed
+    - CVE-2018-1140 Denial of Service Attack on DNS and LDAP server
+    - CVE-2018-10858 Insufficient input validation on client directory listing
+      in libsmbclient
+    - CVE-2018-10918 Denial of Service Attack on AD DC DRSUAPI server
+    - CVE-2018-10919 Confidential attribute disclosure from the AD LDAP server
+    - Urgency set to high
+    - Bump build-depends ldb >= 1.3.5 (actually 2:1.4.0+really1.3.5) for
+      CVE-2018-1140
+  * smb.conf: Remove "wins support" and "wins server" comments
+  * smb.conf: Improve "logging" comments
+  * smb.conf: Remove "dns proxy = no", only useful as a WINS server
+  * smb.conf: Propose better idmap config
+  * smb.conf: Remove "passdb backend = tdbsam" as this is the default
+  * smb.conf: Fix "usershare max shares" default (patched to 100 instead of 0)
+  * Standards-Version: 4.2.0
+  * Set Rules-Requires-Root: binary-targets as chmod is used
+  * Remove override_dh_strip target as dbgsym migration is complete
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 17 Aug 2018 16:30:18 +0200
+
+samba (2:4.8.2+dfsg-2) unstable; urgency=medium
+
+  * Update panic-action script message, samba-dbg renamed to samba-dbgsym
+    (Closes: #900242)
+  * Ensure /var/lib/samba/dhcp.conf exists (Closes: #901585)
+  * Check smb.conf with testparm, and also with samba-tool when
+    server role = active directory domain controller (Closes: #900908)
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 18 Jun 2018 23:39:41 +0200
+
+samba (2:4.8.2+dfsg-1) unstable; urgency=medium
+
+  * New upstream release
+    - Bump build-depends ldb >= 1.3.3
+  * Fix lintian warnings with patches recently merged upstream:
+    - Add Fix-pidl-manpage-sections.patch
+    - Add Fix-spelling.patch
+    - Add Improve-vfs_linux_xfs_sgid-manpage.patch
+  * Wrap very long lines in d/rules
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 17 May 2018 09:58:09 +0200
+
+samba (2:4.8.1+dfsg-2) unstable; urgency=low
+
+  * Upload to unstable
+  * Really ignore nmbd start errors when there is no non-loopback interface
+    (Closes: #893762)
+  * Ignore nmbd start errors when there is no local IPv4 non-loopback interface
+    (Closes: #859526)
+  * Fix possible-unindented-list-in-extended-description in samba-vfs-modules
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 15 May 2018 21:23:32 +0200
+
+samba (2:4.8.1+dfsg-1) experimental; urgency=medium
+
+  * New upstream release
+  * Add lintian override for "smbclient: executable-is-not-world-readable
+    usr/lib/x86_64-linux-gnu/samba/smbspool_krb5_wrapper 0700" (See #894720)
+  * Improve samba-vfs-modules description (Closes: #776505)
+  * Check smb.conf in samba-common-bin.postinst (Closes: #816301)
+  * Mark libparse-pidl-perl, samba-dev, samba-dsdb-modules and samba-vfs-modules
+    as"Multi-Arch: same"
+  * Standards-Version: 4.1.4, no change
+  * debian/smb.conf: Fix typo in comment line: sever -> server (Closes: #763648)
+  * Read smb.conf until [print$] section instead of [cdrom] to preserve
+    locally-defined shares (Closes: #776259)
+  * Fix and improve dhcp integration:
+    - dhclient3 was renamed to dhclient long time ago...
+    - Remove /etc/samba/dhcp.conf on purge (Closes: #784713)
+    - Move dhcp.conf out of /etc to allow ro root (Closes: #695362)
+    - Update template for "Move dhcp.conf out of /etc to allow ro root"
+  * Enable --accel-aes=intelaesni on DEB_HOST_GNU_CPU=x86_64 (Closes: #896196)
+    - Use dh-exec to install libaesni-intel.so.0 only on amd64
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 29 Apr 2018 12:54:06 +0200
+
+samba (2:4.8.0+dfsg-2) experimental; urgency=medium
+
+  * Remove unused and outdated debian/README.debian (debian/README.Debian is
+    used instead)
+  * Mask services as appropriate in samba and winbind postinst (Closes: #863285)
+    - mask samba-ad-dc unless server role = active directory domain controller
+      (as before)
+    - mask smbd and nmbd when server role = active directory domain controller
+    - mask nmbd when disable netbios = yes (Closes: #866125)
+  * Set smbspool_krb5_wrapper permissions to 0700 (Closes: #894720, #372270)
+  * Remove Depends: samba-libs of lib{nss,pam}-winbind
+  * Mark winbind "Multi-Arch: allowed" and make lib{pam,nss}-winbind depends on
+    winbind:any to allow co-installation (Closes: #881100)
+  * Ignore nmbd start errors when there is no non-loopback interface
+    (Closes: #893762)
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 08 Apr 2018 22:09:53 +0200
+
+samba (2:4.8.0+dfsg-1) experimental; urgency=medium
+
+  [ Mathieu Parent ]
+  * New major upstream version
+    - Update d/gbp.conf and d/watch for 4.8
+    - Update upstream source from tag 'upstream/4.8.0+dfsg'
+    - Re-apply patches
+    - Remove patches merged upstream:
+      + no_build_system.patch
+      + systemd-syslog.target-is-obsolete.patch
+      + Add-documentation-to-systemd-Unit-files.patch
+      + fix_kill_path_in_units.patch
+      + nmbd-requires-a-working-network.patch
+      + CVE-2018-1050-11343-4.7.patch
+      + CVE-2018-1057-v4-7.metze01.patches.txt
+    - Bump build-depends talloc >= 2.1.11~, tdb >= 1.3.15~, tevent >= 0.9.36~
+      and ldb >= 2:1.3.2~
+    - Drop Build-Conflicts-Arch: libaio-dev, vfs_aio_linux was dropped
+    - Update debian/*.install and use debian/not-installed
+    - Update debian/libsmbclient.symbols
+    - Upload to experimental
+  * debian/README.source
+    - Update instructions
+    - Convert to Markdown
+    - Add a symlink from README.source to README.source.md
+  * debian/rules:
+    - Use the new --systemd-install-services
+    - Use dh_missing --fail-missing
+    - Re-order debian/rules overrides in the order they are called
+    - Remove broken get-packaged-orig-source target
+    - Remove unused DEB_BUILD_OPT_FOO variables
+    - Add some comments
+    - Move all the custom installs from override_dh_install to
+      override_dh_auto_install
+    - Remove --sourcedir override to dh_install "since dh_install automatically
+      looks for files in debian/tmp in debhelper compatibility level 7 and
+      above"
+    - PIDFile= is now correctly set in *.service
+
+  [ Louis van Belle ]
+  * Update d/control, Relax Build-Depends to allow backport
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 19 Mar 2018 13:02:51 +0100
+
+samba (2:4.7.4+dfsg-2) unstable; urgency=high
+
+  [ Mathieu Parent ]
+  * This is a security release in order to address the following defects:
+    - CVE-2018-1050: Codenomicon crashes in spoolss server code
+    - CVE-2018-1057: Unprivileged user can change any user (and admin) password
+  * Fix "/etc/dhcp/dhclient-enter-hooks.d/samba returned non-zero exit status 1"
+    when samba.service is disabled
+    - Pick patch from Ubuntu for Launchpad #1579597
+    - Fix systemd check
+  * Replace override_dh_systemd_start by override_dh_installsystemd (Fixes
+    ctdb starting on install and restarting on upgrade since update to debhelper
+    compat 11)
+  * Replace --no-restart-on-upgrade by --no-stop-on-upgrade in dh_installinit
+    and dh_installsystemd
+  * Add missing dh_installsystemd calls to ensure that services are properly
+    unmasked and enabled in postinst
+
+  [ Andreas Hasenack ]
+  * Add extra DEP8 tests to samba (Closes: #890439):
+    - d/t/control, d/t/cifs-share-access: access a file in a share using cifs
+    - d/t/control, d/t/smbclient-anonymous-share-list: list available shares
+      anonymously
+    - d/t/control, d/t/smbclient-authenticated-share-list: list available
+      shares using an authenticated connection
+    - d/t/control, d/t/smbclient-share-access: create a share and download a
+      file from it
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 02 Mar 2018 20:55:06 +0100
+
+samba (2:4.7.4+dfsg-1) unstable; urgency=medium
+
+  * New upstream version
+    - Updates patches
+    - Bump ldb build-deps to 1.2.3
+  * Repository moved to salsa: Update Vcs-* fields
+  * d/README.source:
+    - ensure required branches exists
+    - sync all required branches
+  * Standards-Version: 4.1.3 (no change)
+  * Move to debhelper compat 11
+  * Move libpam-winbind: to section admin
+  * Move libnss-winbind: to section admin
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 11 Jan 2018 20:49:28 +0100
+
+samba (2:4.7.3+dfsg-1) unstable; urgency=high
+
+  * New upstream version
+    - Remove patches for CVE-2017-15275 and CVE-2017-14746, merged
+    - Bump libtevent-dev to 0.9.34, to fix upstream "BUG 13130: smbd on disk
+      file corruption bug under heavy threaded load"
+    - Set urgency to high for this fix
+  * Stop building vfs_aio_linux (Closes: #881239)
+  * Print "ignore the following error about deb-systemd-helper not finding
+    samba-ad-dc.service" on upgrade too (Closes: #882482).
+    Thanks Julian Gilbey for the patch
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 23 Nov 2017 16:39:19 +0100
+
+samba (2:4.7.1+dfsg-2) unstable; urgency=high
+
+  * This is a security release in order to address the following defects:
+    - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when
+      talloc buffer is grown.
+    - CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug.
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 12 Nov 2017 10:02:19 +0100
+
+samba (2:4.7.1+dfsg-1) unstable; urgency=medium
+
+  * New upstream version
+  * Add lintian-override about heimdal embedded-library
+  * Remove trailing spaces in debian/changelog
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 08 Nov 2017 07:48:31 +0100
+
+samba (2:4.7.0+dfsg-2) unstable; urgency=medium
+
+  * Upload to sid
+  * Bump libcmocka-dev builddep to 1.1.1 (Closes: #878357)
+  * Remove Skip-raw.write-tests.patch as we don't run tests
+  * Remove 05_share_ldb_module, not understood
+   - d/rules: /usr/lib/*/samba/share/ldb.so is not present anymore
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 26 Oct 2017 17:30:02 +0200
+
+samba (2:4.7.0+dfsg-1) experimental; urgency=medium
+
+  * New major upstream version
+    - Update d/gbp.conf and d/watch for 4.7
+    - Update patches
+    - Remove no_build_env.patch, no more needed
+    - Remove 4 patches merged upstream
+    - Bump build-depends ldb >= 2:1.2.2~, tdb >= 1.3.14~, tevent >= 0.9.33~
+    - Move replace from builtin to bundled libraries to fix FTBFS
+    - Update d/*.install
+    - Update symbols
+  * Rework all patches for dep5 and "gbp pq"
+  * Add libjansson-dev to Build-Depends to allow logging in JSON format
+  * Lintian fixes:
+    - build-depends: dh-systemd (>= 1.5) => use debhelper (>= 9.20160709)
+    - Move libsmbclient-dev from priority extra to optional
+    - Standards-Version: 4.1.1
+    - Update samba-libs.lintian-overrides (following libsmbldap bump)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 12 Oct 2017 22:09:19 +0200
+
+samba (2:4.6.7+dfsg-2) unstable; urgency=high
+
+  * This is a security release in order to address the following defects:
+    - CVE-2017-12150: Some code path don't enforce smb signing, when they should
+    - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects
+    - CVE-2017-12163: Server memory information leak over SMB1
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 19 Sep 2017 22:00:13 +0200
+
+samba (2:4.6.7+dfsg-1) unstable; urgency=medium
+
+  * New upstream version
+    - Removed CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch,
+      merged
+    - Remove s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch, merged
+  * README.source: Default merge-mode of gbp has changed to replace
+  * Fix samba.logrotate (Thanks Thomas A. Reim)
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 15 Aug 2017 23:06:36 +0200
+
+samba (2:4.6.5+dfsg-8) unstable; urgency=medium
+
+  * Remove dependency on update-inetd, not used anymore
+  * vfs_ceph and vfs_glusterfs are linux only (d/rules part)
+  * Remove build-dependency on faketime, not used anymore
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 23 Jul 2017 19:56:07 +0200
+
+samba (2:4.6.5+dfsg-7) unstable; urgency=medium
+
+  * xfslibs-dev is only available on linux
+  * Fix logrotate for /var/log/samba/log.samba to send SIGHUP to all processes
+    of the service (systemd only)
+  * Add reportbug script for samba-common, samba and winbind (Closes: #682861)
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 21 Jul 2017 06:19:57 +0200
+
+samba (2:4.6.5+dfsg-6) unstable; urgency=medium
+
+  * libcephfs-dev is only available on linux
+  * Fix libpam-winbind.prerm to be multiarch-safe (Closes: #647430)
+  * Add missing logrotate for /var/log/samba/log.samba (Closes: #803924)
+  * Use smbcontrol in logrotate when available (Closes: #804705)
+  * From upstream: Fix outdated DNS Root servers (Closes: #865406)
+  * Drop xsltproc_dont_build_smb.conf.5.patch, as #750593 is marked fixed
+    (Closes: #776223)
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 19 Jul 2017 22:53:50 +0200
+
+samba (2:4.6.5+dfsg-5) unstable; urgency=medium
+
+  * Remove bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch,
+    unused
+  * Remove samba-ad-dc.templates
+  * Remove upstart files on upgrade (Closes: #867688)
+  * glusterfs-common is only available on linux
+  * Remove the samba service
+  * Ensure /var/log/samba permissions are set (Closes: #711138)
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 18 Jul 2017 23:29:44 +0200
+
+samba (2:4.6.5+dfsg-4) unstable; urgency=high
+
+  * This is a security release in order to address the following defects:
+    - CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation
+      (Closes: #868209)
+  * Other fixes:
+    - Remove empty samba-common.maintscript (leading to empty preinst and
+      prerm)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 13 Jul 2017 14:38:32 +0200
+
+samba (2:4.6.5+dfsg-3) unstable; urgency=medium
+
+  * Remove upstart code
+  * Remove empty prerm for samba and samba-common-bin (Closes: #866258,
+    #866284)
+  * sysv: Use --pidfile in addition to --exec to avoid matching daemons in
+    containers (Closes: #810794)
+  * Standards-Version: 4.0.0
+    - Use https form of the copyright-format URL (Debian Policy 4.0.0)
+  * Remove debian/bzr-builddeb.conf
+  * Remove empty debian/diversions
+  * Remove "ugly workaround to get the manpages on every architecture to be
+    identical", xsltproc now honour SOURCE_DATE_EPOCH
+  * Remove dh-exec shbang in libnss-winbind.install
+  * Remove empty debian/libsmbclient.manpages
+  * Remove pre-jessie maintscript snipsets
+  * Move to debhelper compat 10 (Major change: dh_installinit command now
+    defaults to --restart-after-upgrade)
+  * Remove unused samba-ad-dc package metadata (Closes: #866138)
+  * Fix "Non-kerberos logins fails on winbind 4.X when krb5_auth is configured
+    in PAM" (Closes: #739768)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 29 Jun 2017 09:45:59 +0200
+
+samba (2:4.6.5+dfsg-2) unstable; urgency=medium
+
+  * Upload to unstable
+  * Move runtime dependencies of vfs_ceph and vfs_snapper to Recommends
+  * Fix typo s/DESTIDR/DESTDIR/ in d/rules
+  * Enable vfs_glusterfs (Closes: #864862)
+  * Add libdbus-1-dev as Build-Depends to allow vfs_snapper to build (Closes:
+    #804781). Patch by Willy Vanlid.
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 19 Jun 2017 23:56:56 +0200
+
+samba (2:4.6.5+dfsg-1) experimental; urgency=medium
+
+  * New upstream version (Closes: #859390)
+    - d/gbp.conf, d/watch: Change major version to 4.6
+    - Bump Build-dependencies of talloc, tdb, tevent and ldb to resp. 2.1.9,
+      1.3.12, O.9.31 and 1.1.29
+    - Remove CVE-2017-7494.patch: applied upstream
+    - Add Build-Depends: libcmocka-dev (>= 1.0)
+    - Update d/*.install
+    - d/samba-common.docs: Roadmap removed upstream
+  * Update README.source, about importing major versions
+  * d/control cleanup:
+    - Remove Conflicts and Replaces on pre-wheezy samba4 packages
+    - Remove Conflicts, Breaks and Replaces on pre-wheezy samba packages
+    - Remove Conflicts, Breaks and Replaces on pre-jessie samba packages
+    - Remove Conflicts, Breaks and Replaces on (pre-jessie) samba4 packages
+    - Remove Conflicts on pre-jessie libldb1 package
+    - Remove Breaks on pre-jessie qtsmbstatus-server package
+    - Remove Replaces on pre-wheezy smbget package
+    - wrap-and-sort
+  * Add libcephfs-dev as b-d to build vfs_ceph (Closes: #856998). Patch from
+    Ubuntu
+  * Enable avahi support (Closes: #859875). Patch from Laurent Bigonville.
+  * Translations:
+    - Portuguese translation for debconf messages (Closes: #864172). Patch from
+    Rui Branco
+    - Hungarian translation for debconf messages (Closes: #708277)
+  * Properly quote subshell invocation in samba-common.preinst (Closes: #771689)
+  * Add Build-Depends: xfslibs-dev, for XFS quotas
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 12 Jun 2017 08:09:43 +0200
+
+samba (2:4.5.8+dfsg-2) unstable; urgency=high
+
+  * CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 18 May 2017 11:53:47 +0200
+
+samba (2:4.5.8+dfsg-1) unstable; urgency=high
+
+  * New upstream version
+    - Drop CVE-2017-2619.patch: merged upstream
+    - Fix CVE-2017-2619 regression with "follow symlink = no" (Closes: #858564)
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 01 Apr 2017 20:39:17 +0200
+
+samba (2:4.5.6+dfsg-2) unstable; urgency=high
+
+  * This is a security release in order to address the following defects:
+    - CVE-2017-2619: symlink race permits opening files outside share directory
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 22 Mar 2017 08:03:34 +0100
+
+samba (2:4.5.6+dfsg-1) unstable; urgency=medium
+
+  * New upstream version
+  * Fix typo in smbd.service and winbind.service (s/nmb.service/nmbd.service)
+    (Closes: #857232)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 09 Mar 2017 15:42:37 +0100
+
+samba (2:4.5.5+dfsg-1) unstable; urgency=medium
+
+  * New upstream version
+    - Revert rewrite of the vfs_fruit module (Closes: #856561)
+  * Fix 'winbindd privileged socket directory' (Closes: #754339):
+    - Fix path from /var/run/samba/winbindd_privileged/ to
+      /var/lib/samba/winbindd_privileged/.
+    - Move mkdir+chgrp+chmod to postinst (to handle systemd also).
+    - Thanks to Jim Barber for the report.
+  * logrotate: Use delaycompress on all logs (Closes: #702201)
+    - Thanks to Matthew Gabeler-Lee for the proposed fix.
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 05 Mar 2017 23:21:09 +0100
+
+samba (2:4.5.4+dfsg-1) unstable; urgency=medium
+
+  [ Mathieu Parent ]
+  * New upstream version
+    - Drop security-2016-12-19.patch, was 4.5.3
+  * missing-build-dependency-for-dh_-command dh_python2 => dh-python
+
+  [ Vincent Blut ]
+  * d/control: Suggest chrony as an alternative to ntp (Closes: #851727)
+
+  [ Daniel A ]
+  * add gpgme support (Closes: #850908)
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 25 Jan 2017 21:25:40 +0100
+
+samba (2:4.5.2+dfsg-2) unstable; urgency=high
+
+  * This is a security release in order to address the following defects:
+    - CVE-2016-2123 (Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer
+      Overflow Remote Code Execution Vulnerability).
+    -  CVE-2016-2125 (Unconditional privilege delegation to Kerberos servers in
+      trusted realms).
+    -  CVE-2016-2126 (Flaws in Kerberos PAC validation can trigger privilege
+       elevation).
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 17 Dec 2016 22:54:35 +0100
+
+samba (2:4.5.2+dfsg-1) unstable; urgency=medium
+
+  * New upstream version
+    - Remove CTDB-Fix-samba-eventscript.patch: merged
+    - d/rules: /usr/share/ctdb-tests is now /usr/share/ctdb/tests
+  * Update gbp.conf with debian-branch = master
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 08 Dec 2016 20:21:52 +0100
+
+samba (2:4.5.1+dfsg-2) unstable; urgency=medium
+
+  * Upload to unstable
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 05 Dec 2016 07:01:35 +0100
+
+samba (2:4.5.1+dfsg-1) experimental; urgency=medium
+
+  * New upstream version
+    - Refresh patches
+    - Remove bug_12283_segfault_tevent_internals.patch
+    - Remove gencache-Bail-out-of-stabilize-if-we-can-not-get-the.patch
+    - Adding libdsdb-garbage-collect-tombstones.so.0 to samba-libs.install
+  * CTDB: Fix samba eventscript
+  * nmbd requires a working network (Closes: #698056, #842056, #840608,
+    LP: #1635491)
+  * Be more verbose about masking samba-ad-dc.service (Closes: #841147)
+  * Remove Fix_parallel_build.patch, not working
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 01 Nov 2016 13:54:29 +0100
+
+samba (2:4.5.0+dfsg-1) experimental; urgency=medium
+
+  * Upload to experimental
+  * New upstream version
+    + Remove patches:
+      - bug_601406_fix-perl-path-in-example.patch, similar applied
+      - waf_smbpasswd_location, applied
+      - Fix-privacy-breach-on-google.com.patch, doc moved out of source
+      - ctdb-Fix-detection-of-gnukfreebsd.patch, applied
+      - gcc_6.patch, applied
+    + Dumped dependencies
+      - libldb-dev (>= 2:1.1.27~)
+      - libtalloc-dev (>= 2.1.8~)
+      - libtdb-dev (>= 1.3.10~)
+      - libtevent-dev (>= 0.9.29~)
+      - python-talloc-dev (>= 2.1.8~)
+    + Install new files and update debian/ctdb.docs
+    + Update to libwbclient0.symbols
+    + Update samba-libs.lintian-overrides (libtevent-unix-util0 removed)
+    + /etc/default/ctdb is now /etc/ctdb/ctdbd.conf
+  * Add patch for https://bugzilla.samba.org/show_bug.cgi?id=12045
+  * ctdb/wscript: Call CHECK_XSLTPROC_MANPAGES() before checking
+    XSLTPROC_MANPAGES. This should fix parallel builds, including
+    tests.reproducible-builds.org. Thanks HW42 on IRC
+  * Depends: lsb-base (>= 3.0-6), for ctdb and winbind as they source
+    /lib/lsb/init-functions
+
+ -- Mathieu Parent <sathieu@debian.org>  Sun, 23 Oct 2016 15:56:59 +0200
+
+samba (2:4.4.6+dfsg-2) unstable; urgency=high
+
+  * Remove uses of tevent internals. This fixes segfault.
+    Closes: #840382, #840298.
+
+ -- Mathieu Parent <sathieu@debian.org>  Wed, 12 Oct 2016 05:53:33 +0200
+
+samba (2:4.4.6+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Use epoch in samba-vfs-modules Breaks and Replaces (Closes: #833164)
+  * Only fix PIDFile in {nmbd,samba-ad-dc,smbd,winbind}.service (i.e. not
+    ctdb.service) Closes: #838000.
+  * logrotate: Only reload smbd when needed. Thanks Roland Hieber.
+    Closes: #838796.
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 10 Oct 2016 22:23:45 +0200
+
+samba (2:4.4.5+dfsg-3) unstable; urgency=medium
+
+  [ Jelmer Vernooij ]
+  * Add strict dependencies on samba-libs, because of use of private
+    libraries without stable ABI across Samba binary packages.
+  * Add Breaks clauses for older versions of samba-libs and samba to
+    samba-vfs-modules, as some files have moved. Closes: #833164,
+    #832880
+
+  [ Mathieu Parent ]
+  * Remove /etc/systemd/system/samba-ad-dc.service (from postinst) on purge.
+    Closes: #832352
+  * Fix PIDFile in systemd service files. Closes: #830909
+  * Remove unused lintian overrides
+  * Use automatic debug packages (-dbgsym) (Closes: #819776)
+  * Remove Christian Perrier from uploaders (Closes: #836715). Thanks for all
+    you work, and thanks for bringing me in the team and as a DD.
+  * Update Turkish translation. Thanks Atila KOÇ. Closes: #791903
+  * Drop dependency on samba-libs in libwbclient0 to avoid
+    circular dependency.
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 09 Sep 2016 13:00:54 +0200
+
+samba (2:4.4.5+dfsg-2) unstable; urgency=medium
+
+  * Disable running of 'make quicktest' during build, as it takes very
+    long to run on x32 and enables building non-production NTVFS server.
+    Closes: #830571
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 09 Jul 2016 19:09:19 +0000
+
+samba (2:4.4.5+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+   + Fixes CVE-2016-2119: Client side SMB2/3 required signing can be
+     downgraded. Closes: #830195
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 07 Jul 2016 10:51:40 +0000
+
+samba (2:4.4.4+dfsg-3) unstable; urgency=medium
+
+  * Add patch gcc_6.patch, fixing compatibility with gcc 6.
+    Closes: #812264
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 04 Jul 2016 12:20:56 +0000
+
+samba (2:4.4.4+dfsg-2) unstable; urgency=medium
+
+  * Mask samba-ad-dc.service unless needed (Closes: #828137)
+  * Fix kill path in systemd units (Closes: #828730)
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 27 Jun 2016 21:37:58 +0200
+
+samba (2:4.4.4+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * The "Thanks lintian" release
+  * Fixes:
+    - Ensure that dpkg-buildflags are passed, and enable all hardening
+    - systemd
+      + Enable systemd (sd_notify) on Linux, and install systemd files
+      + Remove obsolete syslog.target from service files
+      + Add documentation field to unit files
+    - Drop fix-cluster-build.diff: no more needed
+    - Use secure Vcs-* URLs
+    - Fix copyright file
+    - samba.postinst: command-with-path-in-maintainer-script update-inetd
+    - samba-common-bin: package-contains-empty-directory usr/lib/samba/
+    - winbind: package-contains-empty-directory usr/lib/samba/nss_info/
+    - Add Description to init files
+  * No-op fixes:
+    - d/control: Drop XS-Testsuite field
+    - Drop redundant "Priority: optional" fields
+    - Drop redundant "Section: net" fields
+    - Describe non-standard-dir-perm var/spool/samba/
+    - Describe no_build_system.patch
+    - Remove README.build-upstream, as packaging/Debian/ is now empty
+    - Verify upstream tarball from uscan
+    - Update README.source and remove build-orig.sh
+
+ -- Mathieu Parent <sathieu@debian.org>  Mon, 13 Jun 2016 21:52:52 +0200
+
+samba (2:4.4.3+dfsg-4) unstable; urgency=medium
+
+  * Fix build with DEB_BUILD_OPTIONS=nocheck
+  * Still run "make quicktest" but ignore failures
+
+ -- Mathieu Parent <sathieu@debian.org>  Sat, 07 May 2016 13:18:53 +0200
+
+samba (2:4.4.3+dfsg-3) unstable; urgency=medium
+
+  * Skip raw.write tests for now as they fail on 32-bit
+
+ -- Mathieu Parent <sathieu@debian.org>  Fri, 06 May 2016 15:34:07 +0200
+
+samba (2:4.4.3+dfsg-2) unstable; urgency=medium
+
+  * Run quicktest during build
+  * Reproducibility:
+    - Drop no_build_options.patch as it breaks "make test"
+    - Remove unreproducible build environment instead
+  * Mention that patch waf_smbpasswd_location was submitted
+  * usershare.patch: Fix "usershare max shares" default in XML doc and in s4
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 03 May 2016 12:30:56 +0200
+
+samba (2:4.4.3+dfsg-1) unstable; urgency=medium
+
+  * Cleanup ctdb READMEs during 'clean' step.
+  * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 02 May 2016 14:12:46 +0000
+
+samba (2:4.4.2+dfsg-2) unstable; urgency=medium
+
+  * Merge in 4.3 package changes.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 27 Apr 2016 01:29:47 +0000
+
+samba (2:4.4.2+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Bump standards version to 3.9.8 (no changes).
+  * Drop build dependency on perl-modules; depend on perl instead.
+  * Upload to unstable.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 26 Apr 2016 23:29:54 +0000
+
+samba (2:4.4.1+dfsg-1) experimental; urgency=medium
+
+  * New upstream release
+   + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
+    - CVE-2015-5370 (Multiple errors in DCE-RPC code)
+    - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
+    - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
+    - CVE-2016-2112 (LDAP client and server don't enforce integrity)
+    - CVE-2016-2113 (Missing TLS certificate validation)
+    - CVE-2016-2114 ("server signing = mandatory" not enforced)
+    - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
+    - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
+  * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze
+
+ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Mon, 11 Apr 2016 16:09:59 +1200
+
+samba (2:4.4.0+dfsg-1) experimental; urgency=medium
+  [ Andrew Bartlett ]
+  * New upstream release.
+
+ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Wed, 06 Apr 2016 17:08:20 +1200
+
+samba (2:4.3.8+dfsg-1) unstable; urgency=low
+
+  [ Jelmer Vernooij ]
+  * Add patch no_build_system.patch: drop host-specific define that
+    prevents reproducible builds.
+  * New upstream release.
+   + Drop patch
+     security-2016-04-12-prerequisite-v4-3-regression-fixes.metze01.txt,
+     now included upstream.
+  * Bump version in Replaces: samba-libs for samba-vfs-modules to
+    4.3.2+dfsg-1, to fix jessie->stretch upgrades. Closes: #821070
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 16 Apr 2016 01:18:36 +0000
+
+samba (2:4.3.7+dfsg-1) unstable; urgency=high
+
+  * New upstream release.
+   + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
+    - CVE-2015-5370 (Multiple errors in DCE-RPC code)
+    - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
+    - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
+    - CVE-2016-2112 (LDAP client and server don't enforce integrity)
+    - CVE-2016-2113 (Missing TLS certificate validation)
+    - CVE-2016-2114 ("server signing = mandatory" not enforced)
+    - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
+    - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
+  * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze
+
+ -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Wed, 13 Apr 2016 10:24:17 +1200
+
+samba (2:4.3.6+dfsg-2) unstable; urgency=low
+  [ Mathieu Parent ]
+  * Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146). Patch by
+    Santiago Vila
+  * Drop samba from winbind depends and use samba-common* instead
+    (Closes: #732604)
+  * Add an override to script-not-executable etc/ctdb/events.d/10.external
+  * Add ufw integration (from Ubuntu)
+  * Don't build ctdb twice:
+    - Shorten build time
+    - Fix ctdb log path from /var/log/log.ctdb to /var/log/ctdb/log.ctdb
+    - Remove unused /usr/lib/*/ctdb/*.so files
+
+  [ Steven Chamberlain ]
+  * ctdb: Fix detection of gnukfreebsd (Closes: #802621)
+
+  [ Jelmer Vernooij ]
+  * Add no_build_options.patch: make package more reproducible by
+    disabling build options output.
+
+  [ Andrew Bartlett ]
+  * Allow to build/run the AD DC provision/dbcheck against talloc
+    2.1.6 (Closes: #820015)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 31 Mar 2016 22:26:11 +0200
+
+samba (2:4.3.6+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+   + Fixes:
+    - CVE-2015-7560: Incorrect ACL get/set allowed on symlink path.
+    - CVE-2016-0771 (Out-of-bounds read in internal DNS server.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 27 Feb 2016 23:28:53 +0000
+
+samba (2:4.3.5+dfsg-3) unstable; urgency=medium
+
+  * Fix dhclient hook if samba is not installed. Thanks, Jan Braun.
+    Closes: #801976
+  * Rebuild against current version of ldb in the archive. Closes:
+    #817036
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 08 Mar 2016 00:24:10 +0000
+
+samba (2:4.3.5+dfsg-2) unstable; urgency=medium
+
+  * Move strict ldb dependency to samba-dsdb-modules package, which
+    actually contains the modules. Closes: #816210
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 06 Mar 2016 22:51:53 +0000
+
+samba (2:4.3.5+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Fixed usershare.patch to apply against new version.
+  * Loosen dependencies on ldb to ldb >= 1.1.21, per upstream.
+  * Drop patch sockets-with-htons.patch: applied upstream.
+  * Bump standards version to 3.9.7 (no changes).
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 05 Mar 2016 15:56:42 +0000
+
+samba (2:4.3.3+dfsg-2) unstable; urgency=medium
+
+  [ Jelmer Vernooij ]
+  * Add dependency on libtevent-dev in samba-dev.
+
+  [ Mathieu Parent ]
+  * Fix CTDB behavior since CVE-2015-8543 (Closes: #813406)
+
+ -- Mathieu Parent <sathieu@debian.org>  Thu, 04 Feb 2016 13:25:01 +0100
+
+samba (2:4.3.3+dfsg-1) unstable; urgency=medium
+
+  * New upstream release. Closes: #808133.
+   + Drop subunit dependency, no longer used.
+   + Drop ntdb dependencies, no longer used.
+   + Fixes:
+    - CVE-2015-5252: Insufficient symlink verification in smbd
+    - CVE-2015-5296: Samba client requesting encryption vulnerable
+                     downgrade attack
+    - CVE-2015-5299: Missing access control check in shadow copy code
+    - CVE-2015-7540: Remote DoS in Samba (AD) LDAP server
+    - CVE-2015-8467: Denial of service attack against Windows Active Directory
+                     server
+    - CVE-2015-3223: Denial of service in Samba Active Directory server
+    - CVE-2015-5330: Remote memory read in Samba LDAP server
+  * Remove libpam-smbpasswd, which is broken and slated for removal
+    upstream. Closes: #799840
+  * Remove lib/zlib/contrib/dotzlib/DotZLib.chm from excluded files in
+    copyright; no longer shipped upstream.
+  * Remove wins2dns.awk example script.
+  * Remove the samba-doc package, and move examples files from it to
+    relevant other packages. Closes: #769385
+  * Move samba-dsdb-modules back from Depends to Recommends, as using
+    Samba as a standalone server doesn't require the dsdb modules.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 18 Dec 2015 01:18:42 +0000
+
+samba (2:4.3.0+dfsg-2) experimental; urgency=medium
+
+  * Re-enable cluster support.
+   + Build samba-cluster-support as built-in library, since its dependencies
+     are broken.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 28 Sep 2015 00:34:51 +0000
+
+samba (2:4.3.0+dfsg-1) experimental; urgency=medium
+
+  * Fix watch file.
+  * New upstream release.
+  * Drop no_wrapper patch: applied upstream.
+  * Drop patch ctdb_sockpath.patch: applied upstream.
+  * Drop Fix-CTDB-build-with-PMDA patch: applied upstream.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 19 Sep 2015 01:59:36 +0000
+
+samba (2:4.2.1+dfsg-1) experimental; urgency=medium
+
+  [ Jelmer Vernooij ]
+  * New upstream release.
+   + Drop patch do-not-install-smbclient4-and-nmbclient4: applied upstream.
+   + Drop patch
+     bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch:
+     present upstream.
+   + Refresh patch 26_heimdal_compat.26_heimdal_compat.
+   + Add build-dependency on libarchive-dev.
+  * Drop samba_bug_11077_torturetest.patch: applied upstream.
+  * Drop dependency on ctdb - now bundled with Samba.
+  * Use bundled Heimdal as the system Heimdal doesn't contain the
+    changes required for Samba.
+  * Add patch heimdal-rfc3454.txt: patch in truncated rfc3454.txt for
+    building bundled heimdal.
+  * Drop patches 25_heimdal_api_changes and 26_heimdal_compat.
+  * Disable cluster support; it breaks the build.
+  * Add patch no_wrapper: avoid dependencies on
+    {nss,uid,socket}_wrapper.
+  * Move some libraries around.
+  * Move ownership of var/lib/samba and var/lib/samba/private to samba-
+    common, remove obsolete samba4.dirs. Closes: #793866
+  * Remove ctdb-tests and ctdb-pcp-pmda packages as they contain problems
+    and unclear what they are useful for, now ctdb now longer provides
+    an external API.
+
+  [ Mathieu Parent ]
+  * Merge ctdb source package
+    - initial merge
+    - libctdb-dev has been dropped
+    - ctdb-dbg renamed to ctdb-tests, debug files moved to samba-dbg
+    - ctdb-tests depends on python
+  * Fix CTDB socketpath parsing
+  * Fix CTDB build with PMDA
+  * ctdb: Fix privacy breach on google.com (from documentation)
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Dec 2014 15:34:36 +0000
+
+samba (2:4.1.20+dfsg-1) unstable; urgency=medium
+
+  * New upstream release (last compatible with current OpenChange).
+  * samba_bug_11077_torturetest.patch: refresh.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 20 Sep 2015 17:48:59 +0000
+
+samba (2:4.1.17+dfsg-5) unstable; urgency=medium
+
+  * Rebuild against new ldb. Closes: #799569
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 20 Sep 2015 13:20:53 +0000
+
+samba (2:4.1.17+dfsg-4) unstable; urgency=medium
+
+  * Add pidl_reproducible.patch: Make pidl output reproducible.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 28 Apr 2015 00:10:21 +0000
+
+samba (2:4.1.17+dfsg-3) unstable; urgency=medium
+
+  * Rebuild against new ldb. Closes: #783424
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 27 Apr 2015 00:09:50 +0000
+
+samba (2:4.1.17+dfsg-2) unstable; urgency=medium
+
+  [ Andreas Beckmann ]
+  * Add samba.preinst to temporarily deactivate the old qtsmbstatusd
+    initscript which has dependencies incompatible with the new samba
+    initscript. This will ensure a clean upgrade path for samba if the
+    qtsmbstatus-server package was installed previously.  (Closes: #779666)
+
+ -- Ivo De Decker <ivodd@debian.org>  Sat, 07 Mar 2015 13:09:23 +0100
+
+samba (2:4.1.17+dfsg-1) unstable; urgency=high
+
+  * New upstream release. Fixes:
+  - CVE-2014-8143: Elevation of privilege to Active Directory Domain
+                   Controller. Closes: #776993
+  - CVE-2015-0240: Unexpected code execution in smbd. Closes: #779033
+  * Refresh patch add-so-version-to-private-libraries.
+  * Add new smbtorture test rpc.schannel_anon_setpw to detect the conditions
+    leading to CVE-2015-0240.
+  * Add breaks on qtsmbstatus-server (<< 2.2.1-3~). Closes: #775041
+  * Build-depend on reverted ldb version (with increased epoch).
+
+ -- Ivo De Decker <ivodd@debian.org>  Mon, 23 Feb 2015 20:20:21 +0100
+
+samba (2:4.1.13+dfsg-4) unstable; urgency=medium
+
+  * Revert previous patch, since ldb has an active module version check.
+    Instead, just depend on ldb 1.1.18. Closes: #771991
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 10 Dec 2014 18:13:42 +0000
+
+samba (2:4.1.13+dfsg-3) unstable; urgency=medium
+
+  * Update debian/rules to allow support for multiple upstream ldb
+    versions, when verified. Closes: #771991
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 04 Dec 2014 21:03:54 +0100
+
+samba (2:4.1.13+dfsg-2) unstable; urgency=medium
+
+  * Mask /etc/init.d/samba init script for systemd. This should make systemd
+    ignore the samba init script. Thanks to Michael Biebl for the suggestion.
+    Closes: #740942
+  * Disable samba init script on upgrade from wheezy to jessie.
+    Thanks again to Michael Biebl for the report.
+    Closes: #766690
+
+ -- Ivo De Decker <ivodd@debian.org>  Sat, 25 Oct 2014 00:49:12 +0200
+
+samba (2:4.1.13+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Bump standards version to 3.9.6 (no changes).
+
+ -- Ivo De Decker <ivodd@debian.org>  Tue, 21 Oct 2014 20:22:19 +0200
+
+samba (2:4.1.11+dfsg-2) unstable; urgency=medium
+
+  * Updated Italian translation. Thanks Luca Monducci. Closes: #760743
+  * Use HTTP in watch file, as ftp.samba.org is not working reliably for
+    me.
+  * Use Excluded-Files in debian/copyright for DFSG-nonfree files.
+  * Update Dutch translation. Thanks Frans Spiesschaert. Closes: #763650
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Sep 2014 20:52:27 +0200
+
+samba (2:4.1.11+dfsg-1) unstable; urgency=high
+
+  * New upstream release. Fixes:
+   + CVE-2014-3560: Remote code execution in nmbd. Closes: #756759
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 03 Aug 2014 03:47:07 +0200
+
+samba (2:4.1.9+dfsg-2) unstable; urgency=medium
+
+  [ Jelmer Vernooij ]
+  * Depend on libgnutls28-dev rather than libgnutls-dev. Closes: #753146
+  * Remove outdated-autotools-helper-file overrides for config.guess and
+    config.sub; files are no longer present upstream.
+  * Add branch to Vcs-Git header.
+  * samba.smbd.upstart: Remove leftover code for RUN_MODE=inetd, which
+    was already removed elsewhere.
+  * Move dsdb-module library from samba-dsdb-modules to samba-libs, to
+    prevent circular dependencies between samba-dsdb-modules and samba-
+    libs. This is necessary since dsdb-module is now used by the dcerpc-
+    server library.
+
+  [ Debconf translations ]
+  * New Brazilian Portugese translation from Adriano Rafael Gomes.
+    Closes: #752719
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 29 Jun 2014 19:43:52 +0200
+
+samba (2:4.1.9+dfsg-1) unstable; urgency=high
+
+  * New upstream security release. Fixes:
+    - CVE-2014-0244: nmbd denial of service
+    - CVE-2014-3493: smbd denial of service: server crash/memory corruption
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 23 Jun 2014 18:33:27 +0200
+
+samba (2:4.1.8+dfsg-1) unstable; urgency=medium
+
+  [ Jelmer Vernooij ]
+  * Remove smbd and nmbd from required-start and required-stop in
+    samba.init. Closes: #739887
+
+  [ Ivo De Decker ]
+  * Remove workaround for #745233.
+  * New upstream release. Fixes:
+    - CVE-2014-0239: dns: Don't reply to replies. Closes: #749845
+    - CVE-2014-0178: Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response.
+  * Use the upstream version of the smb.conf.5 manpage, instead of building
+    it. This is an ugly temporary workaround because xsltproc crashes on some
+    architectures when building this manpage (due to #750593).
+    This fixes the FTBFS, and should make samba installable with the new ldb
+    version. Closes: #750541, 750796
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 08 Jun 2014 23:37:53 +0200
+
+samba (2:4.1.7+dfsg-2) unstable; urgency=medium
+
+  * Build-depend on heimdal-dev instead of libkrb5-dev.
+  * Add versioned build-dep on libgmp10 for now, which should be pulled in by
+    libhogweed2, to be able to build in outdated build environments (like on
+    most buildds). This is a workaround for #745233.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 20 Apr 2014 13:44:39 +0200
+
+samba (2:4.1.7+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Remove readline63.patch, integrated upstream.
+  * Add build-dep on libkrb5-dev, no longer pulled in by libcups2-dev.
+  * Don't try to delete Parse/Yapp/Driver.pm, which is no longer installed.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 19 Apr 2014 13:39:09 +0200
+
+samba (2:4.1.6+dfsg-1) unstable; urgency=high
+
+  * New upstream security release. Fixes:
+    - CVE-2013-4496: password lockout not enforced for SAMR password changes
+    - CVE-2013-6442: smbcacls can remove a file or directory ACL by mistake
+  * Backport fix for readline 6.3 from master
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 15 Mar 2014 12:13:59 +0100
+
+samba (2:4.1.5+dfsg-1) unstable; urgency=medium
+
+  [ Jelmer Vernooij ]
+  * Fix watch file.
+
+  [ Ivo De Decker ]
+  * New upstream release.
+  * Remove the part of patch 26_heimdal_compat integrated upstream.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 22 Feb 2014 23:17:59 +0100
+
+samba (2:4.1.4+dfsg-3) unstable; urgency=medium
+
+  * Move samba.dckeytab module to samba package, as it relies on hdb.
+    Closes: #736405, #736430
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 24 Jan 2014 23:35:14 +0000
+
+samba (2:4.1.4+dfsg-2) unstable; urgency=medium
+
+  [ Jelmer Vernooij ]
+  * Depend on newer version of ctdb, as Samba won't build against older
+    versions without --enable-old-ctdb.
+  * Bump standards version to 3.9.5 (no changes).
+  * Move libpac, db_glue and hdb module from samba-libs to samba package
+    to reduce size and dependency set of libs package.
+  * Fix compatibility with newer versions of the Heimdal HDB API.
+    + Update 26_heimdal_compat: Fix initialization of HDB plugin. Thanks Jeff
+      Clark. Closes: #732342
+    + Add dependency on specific version of the Heimdal HDB API.
+      Closes: #732344
+
+  [ Steve Langasek ]
+  * dhcp3-client is superseded by dhcp-client; update the references in
+    the package.  Closes: #736070.
+  * Move the dhcp client hook from /etc/dhcp3 to /etc/dhcp.
+    Closes: #649100.
+  * debian/bin/xsltproc: don't use $FAKETIME as the variable name in our
+    wrapper script, this seems to make faketime unhappy.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 18 Jan 2014 20:26:35 +0000
+
+samba (2:4.1.4+dfsg-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Update version of talloc build-deps to 2.0.8.
+  * python-samba: add depends on python-ntdb.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 18 Jan 2014 14:07:15 +0100
+
+samba (2:4.1.3+dfsg-2) unstable; urgency=medium
+
+  * Add debug symbols for all binaries to samba-dbg. Closes: #732493
+  * Add lintian overrides for empty prerm scripts.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Fri, 27 Dec 2013 12:39:54 +0100
+
+samba (2:4.1.3+dfsg-1) experimental; urgency=low
+
+  [ Jelmer Vernooij ]
+  * New upstream release.
+   + Drop 0002-lib-replace-Allow-OS-vendor-to-assert-that-getpass-i.patch:
+     upstream no longer uses getpass.
+  * Add source dependency on libntdb1, and stop passing --disable-ntdb,
+    which has been removed.
+  * Remove handling for SWAT, which is no longer shipped upstream.
+  * Split VFS modules out from samba-libs into a separate binary
+    package.
+  * Move service and process_model modules from the samba-libs to the
+    samba package. Prevents dependencies on libkdc2-heimdal and
+    libhdb9-heimdal.
+
+  [ Ivo De Decker ]
+  * Add build-dep on python-ntdb.
+  * Add build-dep on libncurses5-dev.
+  * Add depends on python-ntdb to samba.
+  * New upstream release.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 09 Dec 2013 23:24:27 +0100
+
+samba (2:4.0.13+dfsg-2) UNRELEASED; urgency=low
+
+  [ Steve Langasek ]
+  * Check for alternative's presence before calling update-alternatives
+    --remove-all, instead of silently ignoring all errors from
+    update-alternatives.
+
+  [ Debconf translations ]
+  * Spanish (Javier Fernández-Sanguino).  Closes: #731800
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 09 Dec 2013 11:13:59 -0800
+
+samba (2:4.0.13+dfsg-1) unstable; urgency=high
+
+  [ Steve Langasek ]
+  * Move update-alternatives upgrade removal handling to the postinst, where
+    it belongs.  Closes: #730090.
+  * Really remove all references to encrypted passwords: the
+    samba-common.config script still included references, which could cause
+    upgrade failures in some cases.  Closes: #729167.
+
+  [ Ivo De Decker ]
+  * New upstream security release. Fixes:
+    - CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked
+    - CVE-2012-6150: pam_winbind login without require_membership_of
+                     restrictions
+  * Add empty prerm scripts for samba and samba-common-bin.prerm, to allow
+    upgrades from earlier versions with broken prerm script (bug introduced in
+    2:4.0.10+dfsg-3)
+  * Don't fail in postinst when removing old alternatives fails.
+
+  [ Jelmer Vernooij ]
+  * Fix invocations of 'update-alternatives --remove-all'. Closes: #731192
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 09 Dec 2013 18:34:07 +0100
+
+samba (2:4.0.12+dfsg-1) unstable; urgency=low
+
+  [ Ivo De Decker ]
+  * New upstream release.
+
+  [ Debconf translations ]
+  * Thai (Theppitak Karoonboonyanan).  Closes: #728525
+  * Norwegian Bokmål (Bjørn Steensrud).  Closes: #729070
+  * German (Holger Wansing).  Closes: #729210
+
+  [ Jelmer Vernooij ]
+  * Add 26_heimdal_compat: Fix compatibility with newer versions of
+    Heimdal.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 24 Nov 2013 07:48:20 +0100
+
+samba (2:4.0.11+dfsg-1) unstable; urgency=high
+
+  * New upstream security release. Fixes:
+    - CVE-2013-4475: ACLs are not checked on opening an alternate data stream
+                     on a file or directory
+    - CVE-2013-4476: Private key in key.pem world readable
+  * Move world-readable private key file on upgrade to allow
+    auto-regeneration.
+  * Add check in samba-ad-dc init script for wrong permission on private key
+    file that would prevent samba to start.
+  * Update samba-libs.lintian-overrides for moved libtorture0.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 11 Nov 2013 15:42:40 +0100
+
+samba (2:4.0.10+dfsg-4) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Mark one debconf string as non-translatable
+
+  [ Debconf translations ]
+  * French updated (Christian Perrier).
+  * Swedish (Martin Bagge / brother).  Closes: #727186
+  * Hebrew (Omer Zak).
+  * Japanese (Kenshi Muto).  Closes: #727218
+  * Indonesian (Al Qalit).  Closes: #727543
+  * Russian (Yuri Kozlov).  Closes: #727612
+  * Esperanto (Felipe Castro).  Closes: #727619
+  * Polish (Michał Kułach).  Closes: #727646
+  * Danish (Joe Hansen).  Closes: #727764
+  * Czech (Miroslav Kure).  Closes: #728100
+  * Basque (Iñaki Larrañaga Murgoitio).  Closes: #728315
+
+  [ Jelmer Vernooij ]
+  * Move libtorture0 to samba-testsuite to reduce size of samba-libs and
+    prevent dependency on libsubunit0.
+
+  [ Ivo De Decker ]
+  * Handle move of tdb files to private dir in samba-libs.preinst.
+    Closes: #726472
+  * Also do the tdb move in libpam-smbpass.preinst, to avoid breaking the pam
+    module if the upgrade fails.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 02 Nov 2013 11:27:25 +0100
+
+samba (2:4.0.10+dfsg-3) unstable; urgency=low
+
+  [ Ivo De Decker ]
+  * Remove Sesse from uploaders. Thanks for your work on samba4.
+  * Include /etc/pam.d/samba in samba-common. It got lost somewhere in the
+    samba4 merge. Closes: #726183
+  * Remove unused alternatives links on upgrade in samba-common-bin.prerm.
+  * Add support for 'status' in samba-ad-dc init script.
+  * Fix umask in make_shlibs to avoid lintian error
+    control-file-has-bad-permissions.
+  * Enable verbose build log.
+  * Run xsltproc under faketime to get the same date for manpages on different
+    architectures in Multi-Arch: same packages. Closes: #726314
+  * Restore build-dep on libcups2-dev, which got lost in the samba4 merge.
+    This should restore the cups printing functionality. Closes: #726726
+  * Add wrapper for cups-config to filter out
+    -L/usr/lib/${DEB_HOST_MULTIARCH}, to work around build-failure.
+  * Also add other build-deps which were present in samba 2:3.6.19-1.
+  * if the same tdb file is present in /var/lib/samba and
+    /var/lib/samba/private, abort the upgrade to work around #726472 for now.
+  * Document swat removal. Closes: #726751
+
+  [ Steve Langasek ]
+  * Don't fail on errors from testparm in the samba init script.
+    Closes: #726326
+  * debian/patches/bug_221618_precise-64bit-prototype.patch: adjust the LFS
+    handling to work independently of header include order.  Closes: #727065.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 22 Oct 2013 08:10:31 +0200
+
+samba (2:4.0.10+dfsg-2) unstable; urgency=low
+
+  * First upload the unified samba 4.x package to unstable.
+    Thanks to everyone who worked on these packages all these years.
+  * Remove Noël from uploaders. Thanks for your work on the samba packages
+  * Add myself to uploaders.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 12 Oct 2013 11:05:55 +0200
+
+samba (2:4.0.10+dfsg-1) experimental; urgency=low
+
+  * Team upload.
+
+  [ Ivo De Decker ]
+  * Update vcs urls to point to samba instead of samba4.
+  * New upstream release.
+  * Limit build-dep on libaio-dev to linux architectures.
+  * Merge init script changes from 3.6 packages.
+
+  [ Steve Langasek ]
+  * Don't put useless symlinks to nss modules in the libnss-winbind package.
+  * Add lintian overrides for another set of wrong lintian errors for the
+    NSS modules.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 10 Oct 2013 21:56:08 +0200
+
+samba (2:4.0.9+dfsg-1) experimental; urgency=low
+
+  * Team upload.
+
+  [ Steve Langasek ]
+  * The samba-ad-dc upstart job should be installed unconditionally, not just
+    in Ubuntu.
+  * Don't exclude our private libraries from the shlibs generation.
+  * Port debian/autodeps.py to python3 and build-depend on python3 so we can
+    invoke it correctly from debian/rules.
+
+  [ Jelmer Vernooij ]
+  * Bump standards version to 3.9.4 (no changes).
+  * Suggest libwireshark-dev for libparse-pidl-perl, as it is necessary
+    to build wireshark dissectors generated by pidl.
+  * samba-ad-dc: Drop suggests for removed packages swat2 and samba-gtk.
+  * samba: Remove inetd servers from suggests; inetd support was dropped
+    in 3.6.16-1.
+  * Fix database errors during upgrade. Closes: #700768
+  * Integrate libraries in samba-libs
+
+  [ Ivo De Decker ]
+  * New upstream release.
+  * Merge contents of samba-ad-dc into samba.
+  * Remove systemd support for now, as it is broken. Closes: #719477
+  * Add lintian override for samba-libs: package-name-doesnt-match-sonames.
+  * Add missing depends for dev packages.
+  * Generate correct shlibs for both public and private libs.
+
+  [ Jeroen Dekkers ]
+  * Drop 10_messaging_subsystem patch.
+  * Add patch to not install smbclient4 and nmblookup4 and remove
+    samba4-clients binary package.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 22 Sep 2013 17:19:44 +0200
+
+samba (2:4.0.8+dfsg-1) experimental; urgency=low
+
+  [ Christian Perrier ]
+  * Remove all mention of "Samba 4" and "experimental version of Samba"
+    in packages' description.  Samba version 4 is now production-ready.
+
+  [ Andrew Bartlett ]
+  * Update build-dependencies on Samba libraries using autodeps.py
+  * New upstream security release. Closes: #718781
+    Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation
+
+  [ Ivo De Decker ]
+  * New upstream release
+  * refresh patches for new upstream version
+  * remove patches integrated upstream
+  * Update build-dependencies for new upstream version
+  * Add replaces for python-samba for packages that take over files from it.
+    Closes: #719212
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 11 Aug 2013 23:45:16 +0200
+
+samba (2:4.0.6+dfsg-1) experimental; urgency=low
+
+  * Team upload.
+
+  [ Andrew Bartlett ]
+  * Converted to full AD DC package on the basis of the 3.6 package
+    - Samba now can be an Active Directory Domain controller
+    - The samba4-* packages are replaced by this package.
+    - This package now uses the s3fs file server by default, not the ntvfs
+      file server used in the samba4 packages.
+  * Provides a new library based package
+    - Upstream's new build system uses libraries extensively, so new
+      packages reflect that.
+    - This provides the libraries that Openchange and other projects depend on
+  * Move binary files out of /var/lib/samba to /var/lib/samba/private,
+    where they belong according to upstream Samba:
+    - schannel_store.tdb
+    - idmap2.tdb
+    - passdb.tdb
+    - secrets.tdb
+  * Remove most of the samba4 references, except for binaries ending in 4
+  * Removed debconf support for encrypted passwords
+  * Samba 3.x users upgrading can either upgrade to an AD DC or continue
+    using Samba without major changes.
+
+  [ Christian Perrier ]
+  * Move libnss_winbind.so.2 and libnss_wins.so.2 to /lib as in 3.6.*
+  * Use the same set of configure arguments than 3.6.15 (except those
+    eventually specific to version 4 and above)
+  * Add libctdb-dev to build dependencies as we're building with cluster
+    support just like 3.6 packages
+  * Re-introduce mksmbpasswd for compatibility with 3.* packages
+
+  [ Ivo De Decker ]
+  * Specify all paths using configure options, so that we can finally get rid
+    of the fhs patch. Closes: #705449
+
+  [ Steve Langasek ]
+  * Make samba-common Conflicts: swat, which is now obsolete and no longer
+    built from samba 4.0; the old versions of swat in the archive are
+    incompatible with smb.conf from samba 4.0, so force them off the system
+    to avoid configuration corruption.
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 20 Jun 2013 21:51:49 +0200
+
+samba4 (4.0.3+dfsg1-0.1) experimental; urgency=low
+
+  [ Andrew Bartlett ]
+  * Non-maintainer upload.
+  * New upstream relese: 4.0.3
+   + Fixes CVE-2013-0172 Samba 4.0.0 as an AD DC may provide authenticated users
+     with write access to LDAP directory objects
+   + Fixes many other ACL related issues in the AD DC
+   + Drop 08_waf_python_config as it is now upstream.
+  * Fix the forced use of NTVFS by setting the required options in the smb.conf
+    at configure time.
+  * Add depenencies to ensure python-samba requires exactly this binary version
+    of our core libraries. Closes: #700348
+
+ -- Andrew Bartlett <abartlet@samba.org>  Sat, 16 Feb 2013 17:06:34 +0100
+
+samba4 (4.0.0+dfsg1-1) experimental; urgency=low
+
+  [ Martin Pitt ]
+  * debian/tests/control: Fix dependency: python-samba4 does not exist, it's
+    python-samba. Closes: #695854
+
+  [ Jelmer Vernooij ]
+  * New upstream release: 4.0.0!
+   + Add 08_waf_python_config to cope with python-config no longer
+     being a script.
+  * Add 25_heimdal_api_changes, to update Samba to work with the
+    current Heimdal in Sid. Patch from
+    Samuel Cabrero Alamán <scabrero@zentyal.com>. Closes: #686227
+  * Add 11_force_ntvfs: Force the use of NTVFS, until the version of smbd in
+    the archive is new enough. Closes: #694697
+  * Drop dependency on libsmbclient; instead, build private copy.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 13 Dec 2012 16:27:20 +0100
+
+samba4 (4.0.0~rc6+dfsg1-1) experimental; urgency=low
+
+  * New upstream release.
+   + Drop 08_heimdal_config_h and 11_system_heimdal, now applied upstream.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 04 Dec 2012 14:39:40 +0100
+
+samba4 (4.0.0~rc5+dfsg1-1) experimental; urgency=low
+
+  * New upstream release.
+  * Add autopkgtest header. Closes: #692671
+  * Use Multi-Arch for winbind4.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 08 Nov 2012 15:13:43 +0100
+
+samba4 (4.0.0~rc4+dfsg1-1) experimental; urgency=low
+
+  * New upstream release.
+   + Bump minimum ldb version to 1.1.13.
+  * Switch to Git as VCS.
+  * Remove DM-Upload-Allowed field.
+  * Depend on heimdal-multidev rather than heimdal-dev.
+   + Add 11_system_heimdal to support building with system heimdal.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 28 Oct 2012 16:21:43 +0100
+
+samba4 (4.0.0~rc3+dfsg1-1) experimental; urgency=low
+
+  * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 16 Oct 2012 14:53:19 +0200
+
+samba4 (4.0.0~rc2+dfsg1-2) experimental; urgency=low
+
+  * Depend on at least ldb 1.1.12. Closes: #689594
+  * Suggest ntp daemon for ntpsignd integration.
+  * Support specifying 'none' as server role to disable provision.
+    Closes: #690138
+  * Prompt user for administrator password. Closes: #690139
+  * Bump debconf level of server role to 'high'.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 04 Oct 2012 13:22:40 +0200
+
+samba4 (4.0.0~rc2+dfsg1-1) experimental; urgency=low
+
+  * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 25 Sep 2012 03:34:08 +0200
+
+samba4 (4.0.0~beta2+dfsg1-3) unstable; urgency=low
+
+  * Fix setup when no domain is set. Closes: #681048
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 05 Aug 2012 16:52:02 +0200
+
+samba4 (4.0.0~beta2+dfsg1-2) unstable; urgency=low
+
+  * Use ntvfs while debian ships an old version of Samba 3. Closes: #679678
+  * Don't attempt to add shares to the configuration if it doesn't
+    exist. Closes: #681050
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 10 Jul 2012 11:52:44 +0200
+
+samba4 (4.0.0~beta2+dfsg1-1) unstable; urgency=low
+
+  * New upstream release.
+  * Update Slovak translation. Thanks Ivan Masár. Closes: #677906
+  * Add build dependency on libacl1-dev.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 18 Jun 2012 00:49:12 +0200
+
+samba4 (4.0.0~beta1+dfsg1-3) unstable; urgency=high
+
+  * Prevent adding share with invalid name when used in domain controller mode.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 17 Jun 2012 17:00:00 +0200
+
+samba4 (4.0.0~beta1+dfsg1-2) unstable; urgency=low
+
+  * Create leading directories in addshare script. Closes: #677643
+  * Use attr/attributes.h on GNU/kFreeBSD. Fixes finding of ATTR_ROOT.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 16 Jun 2012 01:42:10 +0200
+
+samba4 (4.0.0~beta1+dfsg1-1) unstable; urgency=medium
+
+  * New upstream release.
+  * Add 08_heimdal_config_h: Fixes compatibility with newer versions of
+    Heimdal. Closes: #674918
+  * Use standard spelling of domain controller in debconf templates.
+    Closes: #670413
+  * Switch to debhelper 9.
+  * samba4-clients: Drop conflicts with smbclient; upstream has renamed
+    the Samba4-specific smbclient and nmblookup binaries.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 30 May 2012 18:42:06 +0200
+
+samba4 (4.0.0~alpha20+dfsg1-1) unstable; urgency=medium
+
+  * New upstream release.
+   + No longer installs libkdc-policy.so. LP: #887537
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 01 May 2012 15:02:19 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-7) unstable; urgency=low
+
+  * Only update smb.conf if it exists. Closes: #670560
+  * Automatically add shares required for active directory controllers if they
+    don't exist. Closes: #670558
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 26 Apr 2012 19:59:26 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-6) unstable; urgency=low
+
+  * Rebuild against ldb 1.1.6.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 20 Apr 2012 12:47:15 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-5) unstable; urgency=low
+
+  * Use dbcheck when upgrading from recent versions of Samba4, as it's
+    both more reliable and quicker than upgradeprovision.
+  * Move samba-dsdb-modules from Recommends to Depends, as LDAP server
+    support has been dropped. Closes: #669331
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 19 Apr 2012 17:33:33 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-4) unstable; urgency=low
+
+  * Fix pattern matching line in setoption.py. Thanks Hleb Valoshka.
+    Closes: #669015
+  * setoption.py: Preserve mode on smb.conf file.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 16 Apr 2012 17:33:07 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-3) unstable; urgency=low
+
+  * Convert setoption.pl to Python to avoid dependency on perl-modules.
+    Closes: #668800
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 15 Apr 2012 15:50:57 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-2) unstable; urgency=low
+
+  * Correctly import server role and realm from existing smb.conf file.
+    LP: #936891 LP: #832465 Closes: #659775
+  * Force correct realm during upgradeprovision. LP: #728864
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 13 Apr 2012 16:47:37 +0200
+
+samba4 (4.0.0~alpha19+dfsg1-1) unstable; urgency=low
+
+  * New upstream release.
+   + Drop patches applied upstream: 06_upgradedns, 08_smb2_deps.
+   + Cope with missing sysvol folders during provision upgrade. LP: #930370
+   + Depend on tdb 1.2.10.
+   + Depend on ldb 1.1.5.
+   + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
+     beyond of allocated array.
+  * Fix replaces: samba-common field in samba4-common-bin.
+  * Update Catalan debconf translation. Thanks, Jordi Mallach.
+    Closes: #663737
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 11 Apr 2012 16:58:39 +0200
+
+samba4 (4.0.0~alpha18.dfsg1-4) unstable; urgency=low
+
+  * Add patch 08_smb2_deps: Remove (unnecessary) dependencies on various
+    private Samba 3 libraries, for which proper package Depends: lines were
+    missing.  Closes: #665295
+  * Add dependency on tdb-tools. This will be removed once upstream
+    removes the use of tdbbackup in provision. Closes: #664658
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 28 Mar 2012 16:20:21 +0200
+
+samba4 (4.0.0~alpha18.dfsg1-3) unstable; urgency=low
+
+  * Fix compatibility with newer versions of Heimdal. Fixes FTBFS.
+    Closes: #664820
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 21 Mar 2012 14:11:29 +0100
+
+samba4 (4.0.0~alpha18.dfsg1-2) unstable; urgency=low
+
+  * Add Replaces: python-samba to libsmbclient-raw0 as some
+    private libraries have moved. Thanks Axel Beckert. Closes: #663641
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 13 Mar 2012 16:39:12 +0100
+
+samba4 (4.0.0~alpha18.dfsg1-1) unstable; urgency=low
+
+  [ Jelmer Vernooij ]
+  * New upstream release.
+   + Depend on newer versions of ldb.
+   + Depend on tevent >= 0.9.15.
+   + Sanitizes NetBIOS names. LP: #938592
+   + Re-adds support for 'security = domain' parsing. LP: #916556
+  * Fix typo in recommendations of samba4: samba4-dsdb-modules ->
+    samba-dsdb-modules.
+  * Recommend attr package for Samba4.
+  * Create util.h -> samba_util.h symlink for backwards compatibility.
+  * Add dependency on libbsd-dev, used for strlcat and strlcpy.
+  * Extracts waf source code. Closes: #654500
+
+  [ Debconf translations ]
+  * Russian (Yuri Kozlov).  Closes: #651583
+  * Portuguese (Miguel Figueiredo).  Closes: #653557
+  * German (Holger Wansing).  Closes: #653714
+  * Norwegian Bokmål (Bjørn Steensrud).  Closes: #654284
+  * Spanish (Javier Fernández-Sanguino).  Closes: #656403
+  * Danish (Joe Hansen).  Closes: #656785
+  * Dutch (Jeroen Schot).  Closes: #657469
+  * Hebrew (Omer Zak).
+  * Polish (Michał Kułach).  Closes: #659570
+  * Czech (Miroslav Kure).  Closes: #659573
+  * Turkish (İsmail BAYDAN).  Closes: #659575
+  * Japanese (Kenshi Muto).  Closes: #659978
+  * Esperanto (Felipe Castro)
+
+  [ Jelmer Vernooij ]
+  * Rename upgradedns to less generic samba_upgradedns.
+  * Bump standards version to 3.9.3 (no changes).
+  * Use DEP-5 for copyright file.
+  * Indonesian (Mahyuddin Susanto).  Closes: #660031
+  * Italian (Luca Monducci).  Closes: #660150
+  * Use samba-tool to retrieve configuration options from debconf.
+    LP: #936891, Closes: #659775
+  * Add really basic autopkgtest test.
+  * Fix bundled libraries for samba.samba3 python module. LP: #889869
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 12 Mar 2012 19:01:00 +0100
+
+samba4 (4.0.0~alpha17.dfsg2-1) unstable; urgency=low
+
+  * Remove more non-free IETF files. Closes: #547280
+  * Rebuild for newer version of ldb.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 03 Dec 2011 01:41:49 +0100
+
+samba4 (4.0.0~alpha17.dfsg1-3) unstable; urgency=low
+
+  * Install libmemcache.so, libutil_str.so and various other private libraries
+    required by the samba3 module in python-samba. LP: #889864, LP: #889869
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 13 Nov 2011 17:03:29 +0100
+
+samba4 (4.0.0~alpha17.dfsg1-2) unstable; urgency=low
+
+  * Include upstart file to eliminate delta with Ubuntu.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 11 Nov 2011 16:13:58 +0100
+
+samba4 (4.0.0~alpha17.dfsg1-1) unstable; urgency=low
+
+  * Strip non-free IETF RFC files. Closes: #547280
+  * Rebuild against newer ldb. Closes: #648326
+  * Updated Swedish debconf translation. Thanks Martin Bagge.
+    Closes: #644942
+  * Updated French debconf translation. Thanks Christian Perrier.
+    Closes: #644465
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 11 Nov 2011 03:16:37 +0100
+
+samba4 (4.0.0~alpha17-3) unstable; urgency=low
+
+  * Upload to unstable. Closes: #642905
+  * Use default python version rather than 2.7.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 27 Sep 2011 00:11:31 +0200
+
+samba4 (4.0.0~alpha17-2) experimental; urgency=low
+
+  * In -dev package dependencies, depend on a specific version of other
+    Samba dev packages.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 24 Sep 2011 23:10:30 +0200
+
+samba4 (4.0.0~alpha17-1) experimental; urgency=low
+
+  * New upstream release.
+  * Add libsmbclient-{raw0,dev} packages, required for winexe.
+  * Add libsamba-credentials0 and libsamba-credentials-dev packages for
+    new public library for credentials management.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 18 Sep 2011 15:14:42 +0200
+
+samba4 (4.0.0~alpha17~git20110807.dfsg1-1) experimental; urgency=low
+
+  * New upstream snapshot.
+  * Depend on newer version of ldb. Closes: #636961
+  * Update Indonesian Debconf translation. Thanks Mahyuddin Susanto.
+    Closes: #608552
+  * Preserve server role set in smb.conf. LP: #815586
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Aug 2011 23:37:37 +0200
+
+samba4 (4.0.0~alpha17~git20110801.dfsg1-1) experimental; urgency=low
+
+  * Improve outdated package descriptions. Closes: #486370
+  * New upstream release.
+  * Bump standards version to 3.9.2 (no changes).
+  * Add new libsamdb-dev package, required by openchange which relies on the
+    samdb.pc file.
+   + No header files are shipped yet, but an upstream fix is pending.
+  * Recommend bind9utils in samba4 package.
+  * Remove complex dependency loop between library packages. Closes: #598842
+   + Disable currently unfinished ldb share module.
+   + Split dcerpc server libraries out into libdcerpc-server{0,-dev} to
+     cut dependency loop.
+   + New samba-dsdb-modules package with all DSDB related LDB modules.
+  * Move libwinbind-client library to libgensec0. Closes: #623327
+  * Add support for multi-arch.
+  * Switch to new style debhelper.
+  * Fix symbolic link for ldb modules. Closes: #632974
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 31 Jul 2011 20:16:03 +0200
+
+samba4 (4.0.0~alpha15.dfsg1-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 22 Apr 2011 02:57:04 +0200
+
+samba4 (4.0.0~alpha15~git20110410.dfsg1-1) experimental; urgency=low
+
+  * New upstream snapshot.
+   + Drop patch now applied upstream: 02_backupkey_private.diff
+  * Switch to dh_python2. Closes: #617059
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 05 Mar 2011 14:44:25 +0100
+
+samba4 (4.0.0~alpha15~git20110224.dfsg1-2) experimental; urgency=low
+
+  * Depend on newer version of Heimdal which exposes more hx509 symbols.
+    Fixes FTBFS.
+  * Tighten libldb1 dependency for LDB modules.
+  * Depend on newer version of pyldb.  Closes: #615631
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 28 Feb 2011 03:52:35 +0100
+
+samba4 (4.0.0~alpha15~git20110224.dfsg1-1) experimental; urgency=low
+
+  * New upstream release.
+   + Avoids unnecessary setlocale call to "C". LP: #519025, #519025
+  * Fix dependency on newer version of ldb. Closes: #614466
+  * Add missing dependency on python-samba, required for testparm. LP: #641082
+  * Use libwbclient. LP: #714344, Closes: #611214
+  * Make sure /var/run/samba exists. LP: #646037
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 23 Feb 2011 00:35:59 +0100
+
+samba4 (4.0.0~alpha15~git20110124.dfsg1-2) experimental; urgency=low
+
+  * Build-depend on newer version of heimdal-multidev with fixed kdc.h.
+  * Build-depend on versioned libkdc2-heimdal which includes kdc_log. Closes: #611112
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 25 Jan 2011 09:22:16 -0800
+
+samba4 (4.0.0~alpha15~git20110124.dfsg1-1) experimental; urgency=low
+
+  * New upstream snapshot.
+   + Removes unresolved symbols from libraries.
+     Closes: #596690, #599075, #602855.  LP: #658116, #592882, #646042
+  * Add dependency on comerr-dev.
+  * Update Spanish Debconf translation. Thanks Ricardo Fraile. Closes: #596075
+  * Update Danish debconf translation. Thanks Joe Dalton. Closes:
+    #598779
+  * Re-remove non-free IETF RFCs, add test to prevent future regression.
+    Closes: #547280
+  * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
+  * Upgrade provision data between releases. Closes: #600117
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 15 Oct 2010 01:32:48 +0200
+
+samba4 (4.0.0~alpha14~bzr13684.dfsg1-1) unstable; urgency=low
+
+  * New upstream snapshot.
+   + Depend on libsubunit-dev.
+  * Support talloc 2.0.1.
+  * Update dependency for ldb to be >= 0.9.14. Closes: #596745
+  * Support parallel builds.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 28 Sep 2010 09:46:54 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12785.dfsg1-1) experimental; urgency=low
+
+  * Install provision scripts to /usr/share/samba/setup.
+  * Move nsstest from samba4 to winbind4.
+  * Support building against tdb 1.2.1.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Fri, 10 Sep 2010 17:45:20 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12687.dfsg1-1) experimental; urgency=low
+
+  * New upstream snapshot.
+  * Mark as compatible with older versions of tdb (>= 1.2.2).
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 08 Sep 2010 03:30:03 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12670.dfsg1-1) experimental; urgency=low
+
+  * Add missing dependency on pkg-config.
+  * Require subunit >= 0.0.6, older versions have a broken tap2subunit.
+  * Debconf translations:
+    - Swedish (Martin Bagge).  Closes: #586819
+  * New upstream snapshot.
+    - Fixes symbols for LDB modules. Closes: #594763, #594771, #594773.
+  * Require tdb 1.2.3. Closes: #595644
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 05 Sep 2010 17:34:46 +0200
+
+samba4 (4.0.0~alpha13+git+bzr12292.dfsg1-1) experimental; urgency=low
+
+  * New upstream snapshot.
+   + Fixes provision to be able to find the data path again.
+  * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
+  * Suggest swat2.
+  * Migrate to Bazaar.
+  * Bump standards version to 3.9.1 (no changes).
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 22 Aug 2010 02:38:51 +0200
+
+samba4 (4.0.0~alpha13+git20100618.dfsg1-1) experimental; urgency=low
+
+  [ Jelmer Vernooij ]
+  * New upstream snapshot. Closes: #578009, #577880
+   + Add dependency on python-dnspython.
+   + Removes last Python string exception. Closes: #585327
+   + Installs all display specifiers. Closes: #548911
+
+  [ Christian Perrier ]
+  * Debconf translations:
+    - Swedish (Martin Bagge).  Closes: #552734
+    - Russian (Yuri Kozlov).  Closes: #563346
+    - Spanish (Omar Campagne).  Closes: #579099
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sun, 28 Feb 2010 02:33:37 +0100
+
+samba4 (4.0.0~alpha8+git20100227.dfsg1-1) experimental; urgency=low
+
+  * Fix sections of libndr-standard0 and libndr0.
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 22 Feb 2010 11:19:07 +0100
+
+samba4 (4.0.0~alpha8+git20100222.dfsg1-1) experimental; urgency=low
+
+  [ Christian Perrier ]
+  * Change "Provides:" in init script to avoid conflicting Provides
+    with samba. Closes: #547209
+  * Swedish debconf translation (Martin Bagge).  Closes: #552734
+
+  [ Jelmer Vernooij ]
+  * Depend on specific version of libldb. Closes: #562389
+  * Build against system Heimdal and remove the copy of Heimdal from the
+    Samba 4 source tree, since it contains non-free IETF RFC/I-D.
+    Closes: #547280
+  * Bump standards version to 3.8.4.
+  * Switch to dpkg-source 3.0 (quilt) format
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 03 Feb 2010 15:17:20 +0100
+
+samba4 (4.0.0~alpha8+git20090912-1) unstable; urgency=low
+
+  * Upload to unstable.
+  * Fix nmblookup.1.gz filename for alternatives.
+  * New upstream snapshot.
+   + Add new binary packages libndr-standard0 and libndr-standard-dev.
+  * Bump standards version to 3.8.3.
+  * Remove unused patch system.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 12 Sep 2009 13:28:33 +0200
+
+samba4 (4.0.0~alpha8+git20090718-1) experimental; urgency=low
+
+  * New upstream snapshot.
+  * The server package now suggests a version of bind9 that supports
+    update-policy.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 18 Jul 2009 17:34:30 +0200
+
+samba4 (4.0.0~alpha8~git20090620-1) experimental; urgency=low
+
+  * Support building against Python2.6.
+  * Add missing dependency on tdb >= 1.1.3. (Closes: #517171)
+  * Add missing dependencies on tdb-dev and libtalloc-dev to
+    libldb-samba4-dev. (Closes: #525885)
+  * Use newer version of tevent. (Closes: #531480, #533457, #533455)
+  * New upstream snapshot.
+  * Bump standards version to 3.8.2.
+  * Reorganization to let Samba 3 and Samba 4 co-exist on the same system:
+   + Depend on samba-common for smb.conf, /etc/samba/gdbcommands,
+     /usr/share/samba/{panic-action,*.dat}.
+   + Rename samba4-common to samba4-common-bin.
+  * samba4-testsuite now recommends subunit, since it can output subunit
+    streams.
+  * Document license for Active Directory schemas.
+  * Fix init script to run samba rather than smbd. (Closes: #522646)
+  * Removed libldb-samba4-{dev,0}, now using libldb{-dev,0} since there
+    are no longer any differences.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Thu, 18 Jun 2009 00:19:44 +0200
+
+samba4 (4.0.0~alpha7~20090225-1) experimental; urgency=low
+
+  * Build-depend on pkg-config, as we no longer seem to pull that in
+    through any other dependencies. (Closes: #516882)
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 25 Feb 2009 04:04:36 +0100
+
+samba4 (4.0.0~alpha7~20090223-1) experimental; urgency=low
+
+  * Add build dependency on libpopt-dev, so the system libpopt is always used
+    rather than the one included by Samba.
+  * Use the alternatives system for the smbstatus, nmblookup, net and testparm
+    binaries as well as various data files.
+  * Make the samba4 and samba4-testsuite packages conflict with
+    samba-tools. (Closes: #506236)
+  * Build against external libtevent.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Sat, 21 Feb 2009 17:46:41 +0100
+
+samba4 (4.0.0~alpha6-1) experimental; urgency=low
+
+  * New upstream release.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Tue, 20 Jan 2009 02:59:15 +0100
+
+samba4 (4.0.0~alpha5+20090105-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 05 Jan 2009 21:08:53 +0100
+
+samba4 (4.0.0~alpha5+20081126-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Wed, 26 Nov 2008 03:48:41 +0100
+
+samba4 (4.0.0~alpha5+20081101-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Sat, 01 Nov 2008 14:40:09 +0100
+
+samba4 (4.0.0~alpha5+20081031-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Fri, 31 Oct 2008 00:10:41 +0100
+
+samba4 (4.0.0~alpha5+20081014-1) experimental; urgency=low
+
+  * Fix typo in description. (Closes: 500811)
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Thu, 09 Oct 2008 18:41:59 +0200
+
+samba4 (4.0.0~alpha5+20080930-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Tue, 30 Sep 2008 16:19:22 +0200
+
+samba4 (4.0.0~alpha5+20080825-1) experimental; urgency=low
+
+  * Add watch file.
+  * Use policy-compliant sysconfdir and localstatedir. (Closes: #495944)
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Mon, 25 Aug 2008 17:42:44 +0200
+
+samba4 (4.0.0~alpha4~20080727-1) experimental; urgency=low
+
+  [ Steve Langasek ]
+  * Add missing dependency on libparse-yapp-perl to libparse-pidl-perl.
+
+  [ Jelmer Vernooij ]
+  * Make samba4-common conflict with samba-common. (Closes: #492088)
+  * New Slovak translation. (Closes: #487889)
+  * New Thai translation from Theppitak Karoonboonyanan. (Closes: #486614)
+  * New Vietnamese translation from Clytie Siddall. (Closes: #486618)
+  * New Bulgarian translation from Damyan Ivanov. (Closes: #486626)
+  * New Japanese translation from Kenshi Muto. (Closes: #486648)
+  * New Galician translation from Jacobo Tarrio. (Closes: #486701)
+  * New Turkish translation from Mehmet TURKER. (Closes: #487244)
+  * New Czech translation from Miroslav Kure. (Closes: #487265)
+  * New Arabic translation from Ossama Khayat. (Closes: #487322)
+  * New German translation from Holger Wansing. (Closes: #487542)
+  * New Italian translation from Luca Monducci. (Closes: #487720)
+  * New Portugese translation from the Portuguese Translation Team.
+    (Closes: #487753)
+  * New Korean translation from Sunjae Park. (Closes: #487894)
+  * New Lithuanian translation from Gintautas Miliauskas. (Closes: #487895)
+  * New Romanian translation from Eddy Petrișor. (Closes: #488874)
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Sun, 27 Jul 2008 15:38:41 +0200
+
+samba4 (4.0.0~alpha4~20080617-1) experimental; urgency=low
+
+  * Fixed maintainer email address.
+  * New upstream snapshot.
+  * Remove dependency on unpackaged libevents in ldb pkg-config file.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Mon, 16 Jun 2008 21:29:43 +0200
+
+samba4 (4.0.0~alpha4~20080616-1) experimental; urgency=low
+
+  * Fix dependency of libsamba-hostconfig-dev on libsamba-hostconfig0.
+  * Fix dependency of libldb-samba4-dev on libldb-samba4-0.
+  * Remove tdb binaries as they're already packaged elsewhere.
+    (Closes: #485619, #486270)
+  * New upstream snapshot.
+  * New French translation from Christian Perrier. (Closes: #486072)
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Sat, 14 Jun 2008 20:39:13 +0200
+
+samba4 (4.0.0~alpha4~20080522-1) experimental; urgency=low
+
+  * New upstream snapshot. (Closes: #478328)
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Thu, 22 May 2008 02:25:05 +0200
+
+samba4 (4.0.0~alpha4~20080403-1) experimental; urgency=low
+
+  * Rename source package to samba4.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Mon, 28 Jan 2008 17:23:58 +0100
+
+samba (4.0.0~alpha3~20080120-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Sat, 19 Jan 2008 22:34:08 +0100
+
+samba (4.0.0~alpha2~svn26294-1) experimental; urgency=low
+
+  * New upstream snapshot.
+  * Set Vcs-Svn field.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Sat, 19 Jan 2008 22:32:28 +0100
+
+samba (4.0.0~~tp5-1) experimental; urgency=low
+
+  * New upstream release.
+  * Set homepage field.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Sun, 25 Nov 2007 16:28:02 +0000
+
+samba (4.0.0~~svn22819-1) experimental; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Wed, 09 May 2007 15:28:50 +0200
+
+samba (4.0.0~~svn19515-1) experimental; urgency=low
+
+  * New upstream versions (svn snapshots of r19515).
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Mon, 30 Oct 2006 16:45:36 +0100
+
+samba (3.9.1+4.0.0tp2-1) experimental; urgency=low
+
+  * New upstream version (tech preview 2).
+
+  [ Jelmer Vernooij ]
+  * Remove setntacl utility (it doesn't do anything).
+  * Include oLschema2ldif.1 in the ldb-tools package.
+  * Enable shared library building.
+  * Put ldb, tdb, gtksamba, talloc and gensec libraries into seperate binary packages.
+  * Pass fewer options for paths to configure
+  * Adapt to new paths from upstream
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Thu, 23 Mar 2006 01:13:32 +0100
+
+samba (3.9.1+4.0.0tp1-1) experimental; urgency=low
+
+  * New upstream version (tech preview 1).
+
+  [ Steinar H. Gunderson ]
+  * Forward-port panic-action script from the Samba 3 packaging.
+    * Patch the smb.conf provisioning template (only used by swat in the
+      Debian packaging) to use the panic-action script by default.
+    * Patch the samba-common postinst to generate smb.conf files with the
+      same setting.
+  * Include ntlm_auth.1 and smbd.8 man pages in the samba package.
+  * Make the samba dependency on samba-common versioned.
+  * Install /usr/bin/setntacl manually; the upstream install target doesn't
+    seem to do it anymore.
+  * Ask for the realm (and give it to the upgrade script) when upgrading from
+    Samba 3; it can't be easily autodetected. (Note that upgrade still seems
+    to be broken for now.)
+
+  [ Jelmer Vernooij ]
+  * Remove gwsam utility.
+  * Include gwcrontab.1 and gepdump.1 man pages in the samba-gtk-frontends
+    package.
+  * Remove ldbtest utility from ldb-tools package.
+
+ -- Steinar H. Gunderson <sesse@debian.org>  Tue, 24 Jan 2006 16:01:59 +0100
+
+samba4 (3.9.0-SVN-build-6710-1) unstable; urgency=low
+
+  * Newer upstream version
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Thu, 12 May 2005 14:04:05 +0200
+
+samba4 (3.9.0-SVN-build-655-1) unstable; urgency=low
+
+  * Initial release.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Thu, 13 May 2004 01:38:41 +0200
+
+samba (3.9.0+SVN12946-1) experimental; urgency=low
+
+  * New upstream version.
+    * Fix upgrades from Samba 3 giving too few parameters to provision().
+      (Closes: #348079)
+  * Add sections to binary packages to match the archive:
+    * libparse-pidl-perl: perl
+    * samba-dev: devel
+    * samba-gtk-frontends: x11
+  * Adjust our export procedure we get the Subversion revision number in
+    include/version.h (and thus in the build itself), and document how in
+    README.building.
+  * Remove "reload" option from the init script, since Samba 4 doesn't
+    understand SIGHUP yet.
+
+ -- Steinar H. Gunderson <sesse@debian.org>  Sun, 15 Jan 2006 13:43:43 +0100
+
+samba (3.9.0+SVN12856-1) experimental; urgency=low
+
+  * New upstream version.
+  * Move testparm from samba into samba-common.
+    * Make samba-common Architecture: any.
+    * Make samba-common replace/conflict samba (<= 3.9.0+SVN12739-1).
+  * Make samba-clients depend on samba-common.
+  * Make samba-common depend on debconf.
+  * Replace debconf dependencies with ${misc:Depends}, to automatically
+    get the debconf-2.0 alternative right.
+  * Include the newuser binary in samba-server package.
+  * Add missing Build-Depends on: libgnutls-dev, libreadline5-dev,
+    libpam0g-dev. All were causing silent build failures (ie. the package
+    was simply built without the features).
+  * Remove Build-Depends on libldap-dev.
+  * Include NEWS file.
+
+ -- Steinar H. Gunderson <sesse@debian.org>  Wed, 11 Jan 2006 22:08:32 +0100
+
+samba (3.9.0+SVN12739-1) experimental; urgency=low
+
+  * Move /usr/lib/samba/setup from samba-common to samba.
+    * Make samba replace samba-common (<= 3.9.0+SVN12726-1)
+  * Add a missing db_stop in samba.postinst, probably causing problems
+    starting the daemon in some cases.
+  * Add orphan files from /usr/bin (and relevant manpages) into their
+    correct packages:
+    * ldb-tools: ldbrename, ldbtest, oLschema2ldif.
+    * samba: ntlm_auth.
+    * samba-clients: getntacl.
+    * samba-gtk-frontends: gwcrontab.
+    * winregistry-tools: winreg.
+    * samba3dump and tdbtorture remain orphans.
+  * Add new executable /usr/bin/testparm to samba package.
+    * Add /var/lib/samba directory to samba package; it's needed by
+      testparm.
+  * Rewrite configuration/bootstrapping to be able to install the client
+    only and still get a usable smb.conf. The basic idea is:
+    * samba-common looks for an smb.conf. If there is none, it asks for
+      realm and domain and generates a skeleton smb.conf.
+    * If samba notices an upgrade from Samba 3, it asks whether the user
+      wants to upgrade. If not, it leaves everything alone (and broken).
+    * Otherwise, samba asks whether the user wants to set up a PDC. If yes,
+      it adds "server role = pdc" to smb.conf and provisions the server.
+  * Removed unused file samba.conffiles.
+  * Run dh_installdebconf on architecture-independent packages as well, now
+    that samba-common has a config script.
+  * Let samba-clients conflict/replace samba-common (<< 3.9.0), as they share
+    /usr/bin/net.
+
+ -- Steinar H. Gunderson <sesse@debian.org>  Fri,  6 Jan 2006 14:25:50 +0100
+
+samba (3.9.0+SVN12726-1) experimental; urgency=low
+
+  * First upload to Debian main.
+
+  * Package renaming to get more in line with Samba 3 packaging:
+    * Rename samba-server package to just samba, for consistency with the
+      Samba 3 packaging.
+      * Rename samba.samba.init to samba.init, now that the init script and the
+        server package are called the same.
+    * Rename samba-swat to swat, and add a dependency from swat to samba.
+
+  * debian/rules changes:
+    * Change SOURCEPATH to reflect that we now have the packaging in debian/,
+      not packaging/debian/. This will have to be reverted whenever upstream
+      syncs with us.
+    * Removed debmake comment, it's hardly relevant any more.
+    * Removed comment that there aren't any architecture-independent packages
+      (because there are).
+    * Remove redundant "package=samba" variable.
+    * Do "make pch ; make all" instead of "make proto ; -make pch ; make all";
+      some build system bug prevents us from just doing "make pch all", but
+      since we're more or less guaranteed a recent gcc version, the pch target
+      shouldn't fail, so we won't allow it to.
+    * Remove autogen.sh call from configure; it should be done in the
+      upstream tarball, not in maintainer scripts.
+
+  * debian/control changes:
+    * Copied Uploaders: line from Samba 3 packaging, adding myself.
+    * Rename samba-client package to samba-clients.
+    * Make samba-clients Replaces/Conflicts smbclient.
+    * Build-depend on docbook-xml, not just docbook-xsl -- the documentation
+      needs data from both to build.
+    * Move the samba binary package to the top, so it's the one receiving
+      the README.* files, among others.
+
+  * Maintainer script changes:
+    * Attempt to upgrade from Samba 3 if that's what the user tries to do.
+      * Copy upgrade script into /usr/lib/samba/setup.
+      * Check for upgrade from << 3.9.0 in config, and ask the user for upgrade
+        if relevant.
+      * Check for upgrade from << 3.9.0 in postinst, and upgrade if the user
+        wished to.
+    * Only provision in samba.postinst if we're doing a fresh install.
+    * Support purging properly in postrm, both for samba and samba-common
+      (adapted from the Samba 3 packaging).
+    * Don't ask about an administrator password -- just let the provisioning
+      scripts make up a random one.
+      * Updated README.Debian to show the user how to change the password.
+      * Make samba recommend ldb-tools.
+    * Install README.building along with all the other documentation.
+    * Don't try to ask about the "done" question, which we nuked in a previous
+      release.
+
+  * Updated debian/copyright.
+    * Added Samba copyright holders.
+    * Noted that talloc, ldb and tdb are under the LGPL.
+    * Added copyright holders and licensing for the packaging itself.
+
+  * Remove a few unused files in the packaging.
+  * Change debhelper compatibility level to 5.
+    * Update versioned depends accordingly.
+  * Don't give --pidfile to start-stop-daemon when stopping -- current
+    versions of Samba 4 won't die when the parent is killed.
+  * Updated README.debian somewhat, and renamed to use a capital D.
+  * Rewritten README.building, to reflect the magic that has to be done
+    with the package in another repository.
+  * Update po/POTFILES.in to reflect name change (from samba4-server ->
+    samba-server -> samba).
+
+ -- Steinar H. Gunderson <sesse@debian.org>  Thu,  5 Jan 2006 21:27:13 +0100
+
+samba (3.9.0+SVN12395-1) unstable; urgency=low
+
+  * New snapshot, drop 4 suffix
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Tue, 20 Dec 2005 13:38:26 +0100
+
+samba4 (3.9.0+SVN12312-1) unstable; urgency=low
+
+  * New upstream snapshot.
+
+ -- Jelmer Vernooij <jelmer@samba.org>  Mon, 27 Jun 2005 11:25:57 +0200
+
+samba (2:3.6.19-1) unstable; urgency=low
+
+  * Team upload.
+  * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Wed, 25 Sep 2013 20:01:48 +0200
+
+samba (2:3.6.18-1) unstable; urgency=low
+
+  * Team upload.
+
+  [ Steve Langasek ]
+  * Split the samba init script into nmbd and smbd init scripts, for better
+    alignment with how init systems other than sysvinit work.  This also
+    drops the override of the arguments to update-rc.d in debian/rules,
+    no longer needed in the post-insserv world.
+  * Add upstart jobs from Ubuntu for smbd, nmbd, and winbind.
+
+  [ Ivo De Decker ]
+  * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 20 Aug 2013 22:06:45 +0200
+
+samba (2:3.6.17-1) unstable; urgency=high
+
+  * Team upload.
+  * New upstream security release. Closes: #718781
+    Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 05 Aug 2013 13:46:23 +0200
+
+samba (2:3.6.16-2) unstable; urgency=high
+
+  * Team upload.
+  * Make build-dep on libtevent-dev explicit.
+  * Fix waf-as-source.patch to make sure unpacking works in recent build
+    environment. Closes: #716932
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 16 Jul 2013 22:01:04 +0200
+
+samba (2:3.6.16-1) unstable; urgency=low
+
+  * Team upload.
+
+  [ Steve Langasek ]
+  * Drop support for running smbd from inetd; this is not well-supported
+    upstream, and can't correctly handle all of the long-running services
+    that are needed as part of modern samba.  Closes: #707622.
+
+  [ Ivo De Decker ]
+  * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Wed, 19 Jun 2013 21:05:07 +0200
+
+samba (2:3.6.15-1) unstable; urgency=high
+
+  * Team upload.
+  * New upstream bugfix release. Closes: #707042
+  * Update VCS URL's for new git repo.
+  * The recommends for the separate libnss-winbind and libpam-winbind
+    packages needed for the upgrade of winbind from squeeze to wheezy are no
+    longer needed. Lowering them to suggests.
+    Closes: #706434, #674853
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 09 May 2013 11:55:03 +0200
+
+samba (2:3.6.14-1) unstable; urgency=low
+
+  * Team upload.
+  * New upstream release
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 04 May 2013 22:02:15 +0200
+
+samba (2:3.6.13-2) experimental; urgency=low
+
+  * Team upload.
+  * Move binary files out of /etc/samba to /var/lib/samba,
+    where they belong according to the FHS:
+    - schannel_store.tdb
+    - idmap2.tdb
+    - MACHINE.sid
+    Closes: #454770
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 21 Apr 2013 12:54:03 +0200
+
+samba (2:3.6.13-1) experimental; urgency=low
+
+  * Team upload.
+  * New upstream release
+  * samba: Suggests winbind. Closes: #689857
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 18 Mar 2013 21:29:58 +0100
+
+samba (2:3.6.12-1) experimental; urgency=low
+
+  * Team upload.
+  * Security update, fixing the following issues:
+    - CVE-2013-0213: Clickjacking issue in SWAT
+    - CVE-2013-0214: Potential XSRF in SWAT
+  * New upstream release
+  * Install pkgconfig file in libsmbclient-dev. Closes: #700643
+
+ -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 17 Feb 2013 22:25:34 +0100
+
+samba (2:3.6.10-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 15 Dec 2012 08:03:03 +0100
+
+samba (2:3.6.9-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 01 Nov 2012 08:17:29 +0100
+
+samba (2:3.6.8-1) experimental; urgency=low
+
+  * New upstream release.
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 18 Sep 2012 07:13:41 +0200
+
+samba (2:3.6.7-1) experimental; urgency=low
+
+  * New upstream release.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 11 Aug 2012 21:37:38 +0200
+
+samba (2:3.6.6-3) unstable; urgency=low
+
+  [ Ansgar Burchardt ]
+  * debian/rules: Use xz compression for binary packages.
+    Closes: #683899
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 05 Aug 2012 12:19:12 +0200
+
+samba (2:3.6.6-2) unstable; urgency=low
+
+  * Restore the DHCP hook.
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 27 Jun 2012 09:31:15 -0700
+
+samba (2:3.6.6-1) unstable; urgency=low
+
+  [ Ivo De Decker ]
+  * Only enable swat in inetd.conf on first install. Closes: #658245
+  * Minor lintian fixes.
+  * Remove DHCP hook. Closes: #652942, #629406, #649100
+  * Don't reload smbd when running from inetd. Closes: #678741
+  * Don't start smbd when guest account doesn't exist. Closes: #653382
+  * Only export public symbols in libsmbclient and libwbclient.
+
+  [ Christian Perrier ]
+  * New upstream version
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 27 Jun 2012 06:03:17 +0200
+
+samba (2:3.6.5-7) unstable; urgency=low
+
+  * Allow installing smbclient package together with newer versions of
+    samba4-clients, which no longer ship the smbclient and nmblookup
+    binaries.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Mon, 11 Jun 2012 13:19:24 +0200
+
+samba (2:3.6.5-6) unstable; urgency=high
+
+  [ Ivo De Decker ]
+  * Update symbols file for linux-only symbols in libsmbclient. This should
+    fix the FTBFS on kfreebsd and hurd. Closes: #676170
+  * Enable ctdb for non-linux archs.
+  * Remove old if-up script during upgrade.
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 06 Jun 2012 19:10:02 +0200
+
+samba (2:3.6.5-5) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Make libpam-winbind depend on libnss-winbind.
+
+  [ Ivo De Decker ]
+  * Update symbols file for libsmbclient and libwbclient0
+  * Add lintian overrides for examples in samba-doc
+  * libpam-winbind: change Depends on libnss-winbind to Recommends
+  * libnss-winbind: Suggests libpam-winbind
+  * Update package description for winbind, libpam-winbind and libnss-winbind
+    to better reflect their content
+  * Backport vfs_shadow_copy2 from master, to allow shadow copy to work
+    without wide links
+
+  [ Luk Claes ]
+  * Ship wbclient.pc file in multiarch safe directory (Closes: #674215).
+
+  [ Sam Morris ]
+  * Add libutil_drop_AI_ADDRCONFIG.patch  that allows running nmbd when
+    no network interfaces have been assigned an address, therefore
+    removing the need for an if-up script. Closes: #640668,#640508
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 03 Jun 2012 20:00:56 +0200
+
+samba (2:3.6.5-3) unstable; urgency=low
+
+  [ Luk Claes ]
+  * Ship wbclient.pc so cifs-utils can be built again (Closes: #672733).
+  * Activate parallel building. Might need DEB_BUILD_OPTIONS as usual.
+
+  [ Christian Perrier ]
+  * Add Breaks and Replaces on libpam-winbind for newly created
+    libnss-winbind. Thanks to Colin Watson for pointing this and shame
+    on me for not properly checking the transition. Closes: #673122
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 17 May 2012 10:34:38 +0200
+
+samba (2:3.6.5-2) unstable; urgency=low
+
+  * The yearly "SambaXP bug cleaning party" release. 11 years
+    SambaXP, 20 years Samba and counting...
+  * Make samba-common "Multi-Arch: foreign"
+  * Adapt patch in upstream #7499 and stop nss_wins clobbering other
+    daemon's logfiles. Closes: #598313
+  * Add some mention about some use for the user information in Kerberos
+    environments in the smbspool manpage. Closes: #387266
+  * Drop link to no longer provided "Using Samba" documentation in
+    HTML documentation summary file. Closes: #604768
+  * Provide WHATSNEW.txt in samba-doc too as it is linked from the
+    documentation summary file. Do not compress that file.
+  * Fix link to WHATSNEW.txt in HTML documentation summary file. This
+    is the second part of the fix for #604768
+  * Use lp_state_dir() instead of get_dyn_STATEDIR() in
+    fhs-filespaths.patch as the latter does indeed hardcode the
+    location for passdb.tdb and secrets.tdb to /var/lib/samba
+    (the compile-time option for state directory and NOT the configurable
+    value). This is left to "state directory" instead of "private dir"
+    at least as of now, because if doesn't change anything to the
+    current behaviour, but allows the files' location to be configurable
+    through "state directory" (and not "private dir").
+    Closes: #249873
+  * Disable useless smbtorture4 build. Thanks to Ivo De Decker for the patch.
+    Closes: #670561
+  * Add upstream commit that adds waf source to the buildtools/
+    directory. As upstream will, one day or another, merge this, I
+    prefer this over removing the waf binary and repack upstream
+    tarball.
+    Closes: #654499
+  * Build-Conflict with python-ldb and python-ldb-dev to avoid build
+    failures when some versions of these packages are locally installed.
+    Closes: #657314
+  * Rename fix-samba.ldip-syntax.patch to fix-samba.ldif-syntax.patch
+  * Split NSS modules into a new libnss-winbind binary package.
+    Closes: #646292
+  * Add a NEWS.Debian entry about the libnss-winbind split and, while at
+    it, add an entry for libpam-winbind too (as it will affect upgrades
+    from squeeze).
+  * Drop code that was moving files around in samba.postinst and
+    winbind.postinst for pre-squeeze versions of the package.
+  * Drop code that was modifying a deprecated "passdb backend" setting
+    in smb.conf for pre-squeeze versions of the package (in
+    samba-common.config).
+  * Add Should-Start dependency to winbind init script to guarantee
+    that the samba init script is started before winbind if present.
+    Closes: #638066
+  * Provide a (basic) manpage to smbtorture(1). Closes: #528735
+  * Turkish debconf translation update (Atila KOÇ).  Closes: #672447
+  * Drop the code that generates an smbpasswd file from the system's
+    user list. This adds very long delays on systems with many users,
+    including those with external user backends. It also makes much
+    less sense nowadays and the use of libpam-smbpass can easily
+    fill most of the needs. Closes: #671926
+  * Merged from Ubuntu:
+    - Set 'usershare allow guests', so that usershare admins are
+      allowed to create public shares in addition to authenticated
+      ones.
+    - add map to guest = Bad user, maps bad username to guest access.
+    This allows for anonymous user shares. Closes: #672497
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 12 May 2012 14:30:58 +0200
+
+samba (2:3.6.5-1) unstable; urgency=low
+
+  * New upstream release. Fixes CVE-2012-2111: Incorrect permission
+    checks when granting/removing privileges can compromise file
+    server security.
+  * Build-Depend on debhelper >= 9~ (which is in unstable for a few
+    months now)
+  * Use "set -e" in maintainer scripts instead of passing -e in the
+    shebang line
+  * Update Standards to 3.9.3 (checked, no change)
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 01 May 2012 08:07:39 +0200
+
+samba (2:3.6.4-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Two changes in the previous version should indeed read:
+    - samba.postinst: Avoid scary pdbedit warnings on first import.
+    - samba-common.postinst: Add more informative error message for the case
+      where smb.conf was manually deleted.
+    Closes: #664509
+
+  [ Jelmer Vernooij ]
+  * New upstream release.
+   + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
+     beyond of allocated array.
+
+ -- Jelmer Vernooij <jelmer@debian.org>  Wed, 11 Apr 2012 23:25:41 +0200
+
+samba (2:3.6.3-2) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Fix example samba.ldif syntax. Closes: #659963
+  * Set minimal version of tdb ot 1.2.6 in Build-Depends
+    (thanks, backports!)
+  * Lower priority of debconf question to medium after some pondering.
+    After all, we have a sane default. Closes: #662801
+  * Merge some Ubuntu patches:
+    - samba.config: Avoid scary pdbedit warnings on first import.
+    - samba.postinst: Add more informative error message for the case
+      where smb.conf was manually deleted.
+
+  [ Maarten Bezemer ]
+  * Removed references to the testprns command from documentation
+  * Added notes that the smbsh command is not available in this package
+    Closes: #662243
+
+  [ Debconf translations ]
+  * Indonesian (Arief S Fitrianto).  Closes: #660312
+  * Slovak (Ivan Masár).  Closes: #661125
+
+  [ Steve Langasek ]
+  * Use Debian copyright-format 1.0 in debian/copyright.
+
+ -- Christian Perrier <bubulle@debian.org>  Mon, 12 Mar 2012 20:49:24 +0100
+
+samba (2:3.6.3-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release
+  * Fixes CVE-2012-0817:
+    The Samba File Serving daemon (smbd) in Samba versions
+    3.6.0 to 3.6.2 is affected by a memory leak that can
+    cause a server denial of service.
+
+  [ Debconf translations ]
+  * Polish (Michał Kułach).  Closes: #657770
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 31 Jan 2012 22:09:39 +0100
+
+samba (2:3.6.2-1) unstable; urgency=low
+
+  * New upstream release
+  * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream)
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 27 Jan 2012 21:38:52 +0100
+
+samba (2:3.6.1-3) unstable; urgency=low
+
+  [ Sam Hartman ]
+  * Increase libkrb5-dev dependency to avoid depending on
+    krb5_locate_kdc, Closes: #650541
+
+  [ Steve Langasek ]
+  * Fix the libpam-winbind description to more accurately identify the
+    protocols being used by nss_wins.  Closes: #650091.
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 01 Dec 2011 21:56:52 +0100
+
+samba (2:3.6.1-2) unstable; urgency=low
+
+  * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch
+  * debian/patches/initialize_password_db-null-deref: Avoid null
+    dereference in initialize_password_db().  Closes LP: #829221.
+  * Mark samba-common Multi-Arch: foreign.
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 27 Nov 2011 19:06:39 +0100
+
+samba (2:3.6.1-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 22 Oct 2011 10:56:17 +0200
+
+samba (2:3.6.0-1) experimental; urgency=low
+
+  * New upstream release
+  * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1
+    and 3.5.11~dfsg-1
+  * Drop wbc_async.h from libwbclient-dev as, according to upstream's
+    commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is
+    smbtorture3"
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 11 Aug 2011 09:14:53 +0200
+
+samba (2:3.6.0~rc3-1) experimental; urgency=low
+
+  * New upstream version
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 29 Jul 2011 23:11:10 +0200
+
+samba (2:3.6.0~rc2-1) experimental; urgency=low
+
+  * New upstream version
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 07 Jun 2011 23:09:41 +0200
+
+samba (2:3.6.0~rc1-2) experimental; urgency=low
+
+  * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file
+    in an existing directory. Closes: #628121
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 27 May 2011 15:35:44 +0200
+
+samba (2:3.6.0~rc1-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 19 May 2011 22:26:08 +0200
+
+samba (2:3.6.0~pre3-1) experimental; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release
+  * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled
+  * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it
+    was forgotten upstream
+  * libwbclient0.symbols: dropped several symbols related to
+    asynchronous actions that weren't working anyway (according
+    to Kai Blin at SambaXP)
+
+  [ Mathieu Parent ]
+  * Build against libctdb-dev (>= 1.10+git20110412) to have required control:
+    CTDB_CONTROL_SCHEDULE_FOR_DELETION.
+
+ -- Christian Perrier <bubulle@debian.org>  Mon, 09 May 2011 11:29:52 +0200
+
+samba (2:3.5.11~dfsg-4) unstable; urgency=low
+
+  * Lintian override for libpam-winbind; it's not a shared library so doesn't
+    really need the pre-depends on multiarch-support.
+  * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu.
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 21 Oct 2011 16:01:29 -0700
+
+samba (2:3.5.11~dfsg-3) unstable; urgency=low
+
+  * Split winbind into separate packages, winbind and libpam-winbind,
+    with the latter marked Multi-Arch: same and the former marked
+    Multi-Arch: foreign, so that we can install multiple copies of the
+    pam module and nss modules on the same system.
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 21 Oct 2011 20:00:13 +0000
+
+samba (2:3.5.11~dfsg-2) unstable; urgency=low
+
+  * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally.
+  * Use dh_links instead of manually creating directories and symlinks from
+    debian/rules.
+  * Switch from dh_movefiles to dh_install and adjust for debhelper compat
+    level 7, in preparation for moving to dh(1).
+  * Where possible, use dh_installman and dh_install's support for target
+    directories instead of moving files around in debian/rules.
+  * We don't need to mess with perms on usr/include/libsmbclient.h anymore
+    in debian/rules, the upstream install target gets it right
+  * Use debian/clean instead of removing left-behind files by hand in the
+    clean target
+  * Convert debian/rules to dh(1).
+  * Don't run debconf-updatepo on clean; not worth the divergence in
+    debian/rules anymore :)
+  * Don't install debian/README.build in the package; this is really only
+    relevant in the source.
+  * Bump to debhelper compat level 9 and build libraries for multiarch.
+  * Drop Makefile.internal from libsmbclient-dev examples so that we can mark
+    libsmbclient-dev Multi-Arch: same.
+  * Bump build-depends on debhelper to 8.9.4, so we ensure we have
+    dpkg-buildflags by default and get full build hardening enabled out of
+    the box - critical for a server like samba.
+  * Use DH_ALWAYS_EXCLUDE instead of passing override options to
+    dh_installexamples.
+  * Pass --sourcedirectory=source3 to dh instead of having to pass it to each
+    dh_auto_* command.
+  * Ironically, this means that we have to manually disable dh_auto_test,
+    which now finds the makefile targets but doesn't work unless we build an
+    extra wrapper library into our binaries that we don't want.
+  * Drop a few configure options from debian/rules that shadow the built-in
+    defaults.
+  * debian/libsmbclient.lintian-overrides: yes, we know the package name
+    doesn't match the soname - and it never should until there's an ABI
+    change.
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 07 Oct 2011 21:36:43 -0700
+
+samba (2:3.5.11~dfsg-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 05 Aug 2011 20:12:01 +0200
+
+samba (2:3.5.10~dfsg-1) unstable; urgency=low
+
+  * New upstream release
+  * Security update, fixing the following issues:
+    - CVE-2011-2694: possible XSS attack in SWAT
+    - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 28 Jul 2011 12:19:01 +0200
+
+samba (2:3.5.9~dfsg-1) unstable; urgency=low
+
+  * New upstream release
+  * Add "--quiet" to start-stop-daemon call in reload target in init
+    script. Closes: #572483
+  * Add examples/LDAP in examples for the samba package. With this,
+    samba.schema will be provided in some way in the package.
+    This very partially addresses #190162
+  * patches/bug_221618_precise-64bit-prototype.patch: precise
+    64bits prototype in libsmbclient-dev. Closes: #221618
+  * patches/no-unnecessary-cups.patch: dropped after upstream
+    changes to printing code
+  * Update Standards to 3.9.2 (checked, no change)
+  * Add build-arch and build-indep targets in debian/rules
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 18 Jun 2011 07:08:00 +0200
+
+samba (2:3.5.8~dfsg-5) unstable; urgency=low
+
+  * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo
+    in fhs-filespath.patch. Closes: #629183, LP: #789097
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 04 Jun 2011 13:48:32 +0200
+
+samba (2:3.5.8~dfsg-4) unstable; urgency=low
+
+  [ Debconf translations ]
+  * Spanish (Omar Campagne).  Closes: #627813
+  * Swedish (Martin Bagge / brother).  Closes: #627849
+  * Brazilian Portuguese (Adriano Rafael Gomes).  Closes: #627866
+
+  [ Christian Perrier ]
+  * bug_601406_fix-perl-path-in-example.patch:  fix path to perl
+    binary in example file. Closes: #601406
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 27 May 2011 12:23:05 +0200
+
+samba (2:3.5.8~dfsg-3) unstable; urgency=low
+
+  [ Debconf translations ]
+  * Italian (Luca Monducci).  Closes: #626674
+  * Dutch (Vincent Zweije).  Closes: #627519
+  * Czech (Miroslav Kure).  Closes: #627442
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 24 May 2011 22:40:04 +0200
+
+samba (2:3.5.8~dfsg-2) unstable; urgency=low
+
+  [ Jelmer Vernooij ]
+  * Add libwbclient-dev package.
+  * Build against external libtdb.
+  * Bump standards version to 3.9.1 (no changes).
+
+  [ Mathieu Parent ]
+  * Builddep on libctdb-dev or ctdb < 1.10
+
+  [ Christian Perrier ]
+  * Use db_settitle in debconf questions and make these
+    titles translatable. Closes: #560318
+  * Test the presence of testparm before trying to use it in init script
+    Closes: #606320
+  * Add cups to Should-{Start,Stop} in LSB headers of
+    samba init script to guarantee that CUPS is started
+    before samba. Closes: #619132
+  * Drop libsmbclient-dev useless dependency on samba-common
+    Closes: #597987
+
+  [ Debconf translations ]
+  * French (Christian Perrier)
+  * Japanese (Kenshi Muto).  Closes: #626474
+  * Galician (Miguel Anxo Bouzada).  Closes: #626477
+  * Thai (Theppitak Karoonboonyanan).  Closes: #626487
+  * Russian (Yuri Kozlov).  Closes: #626523
+  * Danish (Joe Hansen).  Closes: #626531
+  * Esperanto (Felipe Castro).  Closes: #626558
+  * Hebrew (Eran Cohen).  Closes: #626638
+  * Bokmål, (Bjørn Steensrud).
+  * Italian (Luca Monducci).  Closes: #626674
+  * Finnish (Tapio Lehtonen).  Closes: #626890
+  * Portuguese (Miguel Figueiredo).  Closes: #627224
+  * German (Holger Wansing).  Closes: #627354
+  * Czech (Miroslav Kure).  Closes: #627442
+
+ -- Christian Perrier <bubulle@sesostris.kheops.frmug.org>  Sun, 22 May 2011 21:15:21 +0200
+
+samba (2:3.5.8~dfsg-1) unstable; urgency=low
+
+  * New upstream release. This fixes the following bugs:
+    - Winbind leaks gids with idmap ldap backend (upstrem #7777)
+      Closes: #613624
+    - printing from Windows 7 fails with 0x000003e6
+      Closes: #617429
+  * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream
+    #7997
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 08 Mar 2011 22:38:32 +0100
+
+samba (2:3.5.7~dfsg-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release
+  * Security update, fixing the following issue:
+    - CVE-2011-0719: denial of service by memory corruption
+  * Use architecture wildcard "linux-any" in build dependencies
+    Closes: #563372
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 01 Mar 2011 20:59:34 +0100
+
+samba (2:3.5.6~dfsg-5) unstable; urgency=low
+
+  * Fix FTBFS on Hurd. Closes: #610678
+  * Only try parsing dhcpd.conf is it's not empty,
+    in dhclient-enter-hooks.d/samba.  Closes: #594088.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 05 Feb 2011 13:50:22 +0100
+
+samba (2:3.5.6~dfsg-4) unstable; urgency=low
+
+  * Fix pam_winbind file descriptor leak with a patch
+    proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265.
+    Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter
+    confirmed it is not while the patch applied here fixes the file
+    descriptor leak.
+    Closes: #574468
+
+  [ Debconf translations ]
+  * Brazilian Portuguese (Adriano Rafael Gomes).  Closes: #607402
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 15 Jan 2011 18:06:22 +0100
+
+samba (2:3.5.6~dfsg-3) unstable; urgency=low
+
+  [ Julien Cristau ]
+  * Bump libwbclient0 shlibs to match the newest version in the symbols file.
+  * Mark libwbclient0 as breaking other samba packages with versions older
+    than 2:3.4.1, as they were linked against libtalloc1 instead of
+    libtalloc2, and the combination causes crashes (closes: #593823).
+
+ -- Christian Perrier <bubulle@debian.org>  Mon, 06 Dec 2010 20:14:04 +0100
+
+samba (2:3.5.6~dfsg-2) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Fix debian/rules update-archs target to not add extra spaces on every
+    invocation...
+
+  [ Debconf translations ]
+  * Catalan (Jordi Mallach).  Closes: #601101
+  * Japanese (Kenshi Muto).  Closes: #601364
+  * Bulgarian (Damyan Ivanov).  Closes: #601366
+  * Hebrew (Omer Zak).  Closes: #601633
+  * Kurdish (Erdal Ronahî).  Closes: #601719
+  * Dutch (Remco Rijnders).  Closes: #602220
+  * Greek (Konstantinos Margaritis).
+
+  [ Christian Perrier ]
+  * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy
+    files from a SMB share using SMB signing.". Backported from
+    to be released 3.5.7 version
+    Closes: #605729
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 04 Dec 2010 07:44:22 +0100
+
+samba (2:3.5.6~dfsg-1) unstable; urgency=low
+
+  * New upstream release. Fixes the following Debian bug:
+    - rpcclient readline segfault. Closes: #597203
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 10 Oct 2010 09:59:37 +0200
+
+samba (2:3.5.5~dfsg-1) unstable; urgency=high
+
+  [ Christian Perrier ]
+  * New upstream release. Security release fixing:
+    - CVE-2019-3069: Buffer overrun vulnerability in sid_parse.
+      Closes: #596891.
+  * Fix comment in swat's postinst. It is not turned off by default
+    Closes: #596040
+  * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst
+
+  [ Steve Langasek ]
+  * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for
+    pam-auth-update.  Closes: #594325.
+
+  [ Debconf translations ]
+  * Arabic (Ossama Khayat).  Closes: #596164
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 14 Sep 2010 23:03:35 +0200
+
+samba (2:3.5.4~dfsg-2) unstable; urgency=low
+
+  * Release to unstable
+
+  [ Debconf translations ]
+  * Danish (Joe Dalton).  Closes: #592789.
+  * Galician (Jorge Barreiro).  Closes: #592809
+
+  [ Steve Langasek ]
+  * debian/patches/fhs-filespaths.patch, debian/samba.postinst,
+    debian/winbind.postinst: move some files from /etc/samba to
+    /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb,
+    and idmap2.tdb.
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 07 Sep 2010 17:47:32 +0200
+
+samba (2:3.6.0~pre1-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 04 Aug 2010 01:39:11 +0200
+
+samba (2:3.5.4~dfsg-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 29 Jun 2010 22:00:53 +0200
+
+samba (2:3.5.3~dfsg-1) experimental; urgency=low
+
+  * New upstream release. Fixes the following bugs:
+    - smbclient segfaults when used against old samba "security = share"
+      Closes: #574886
+  * Drop duplicate build dependency on ctdb
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 19 May 2010 22:07:49 +0200
+
+samba (2:3.5.2~dfsg-2) experimental; urgency=low
+
+  * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and
+    2:3.4.7~dfsg-2
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 04 May 2010 17:13:47 +0200
+
+samba (2:3.5.2~dfsg-1) experimental; urgency=low
+
+  * New upstream release
+  * Bugs fixed upstream:
+    - Fix parsing of the gecos field
+      Closes: #460494
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 08 Apr 2010 19:48:07 +0200
+
+samba (2:3.5.1~dfsg-1) experimental; urgency=low
+
+  * New upstream release. Security fix: all smbd processes inherited
+    CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
+    allowed even when permissions should have denied access.
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 09 Mar 2010 10:54:01 +0100
+
+samba (2:3.5.0dfsg-1) experimental; urgency=low
+
+  * New upstream release. Not using "3.5.0~dfsg" as version number
+    because we used a "higher" version number in previous versions.
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 02 Mar 2010 22:03:15 +0100
+
+samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low
+
+  * New upstream release candidate
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 20 Feb 2010 08:36:57 +0100
+
+samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low
+
+  * New upstream pre-release
+  * Use new --with-codepagedir option. Consequently drop
+    codepages-location.patch
+  * Drop "Using Samba" from the samba-doc file list as it was
+    removed upstream.
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 31 Jan 2010 11:53:48 +0100
+
+samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream pre-release
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 15 Jan 2010 23:31:01 +0100
+
+samba (2:3.4.8~dfsg-2) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Drop the per-release smb.conf templates, only needed for upgrade paths
+    that are no longer supported.
+  * Call /etc/init.d/samba directly from the logrotate script instead of
+    using invoke-rc.d, to address the irony that the only package I work on
+    that *has* a logrotate script is inconsistent with my position in
+    bug #445203.
+  * Fix a bashism in the samba postinst that can cause the package
+    installation to fail under dash.  LP: #576307.
+  * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to
+    /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new
+    isc-dhcp-client package.  Closes: #585056.
+
+  [ Christian Perrier ]
+  * Don't copy system accounts from /etc/passwd to
+    /var/lib/samba/passdb.tdb. Closes: #502801
+  * Update Standards to 3.9.0 (checked, no change)
+  * Backport patch for upstream bug #7139 to fix "owner of file not
+    available with kerberos"
+    Closes: #586337
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 14 Jul 2010 11:59:28 -0700
+
+samba (2:3.4.8~dfsg-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release
+  * Bugs fixed upstream:
+    - Fix writing with vfs_full_audit. Closes: #574011
+  * Drop deprecated 'share modes' parameter from default smb.conf
+    Closes: #580561
+  * Enable PIE during configure. Closes: #509135
+  * Avoid winbind's logrotate script to fail when there is no
+    /var/run/samba directory. Closes: #569926
+  * Add explanations about "passdb backend" default setting change
+    Closes: #553904
+
+  [ Debconf translations ]
+  * Spanish (Omar Campagne).  Closes: #579011
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 12 May 2010 05:45:52 +0200
+
+samba (2:3.4.7~dfsg-2) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Drop smbfs package (now provided by cifs-utils as a dummy transition
+    package)
+
+  [ Debconf translations ]
+  * Portuguese (Miguel Figueiredo).  Closes: #575958
+
+  [ Steve Langasek ]
+  * winbind.prerm: don't forget to remove the PAM profile on package
+    removal :/
+  * Fix winbind.pam-config to not interfere with password changes for
+    non-winbind accounts.  Closes: #573323, LP: #546874.
+  * debian/samba.if-up, debian/rules: add an if-up.d script for samba to
+    try to start nmbd, if it's not running because /etc/init.d/samba ran
+    before the network was up at boot time.  Closes: #576415, LP: #462169.
+  * debian/samba.if-up: allow "NetworkManager" as a recognized address
+    family... it's obviously /not/ an address family, but it's what gets
+    sent when using NM, so we'll cope for now.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 17 Apr 2010 07:49:49 +0200
+
+samba (2:3.4.7~dfsg-1) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Add a PAM profile for pam_winbind.  Closes: #566890, LP: #282751.
+  * Add the correct versioned build dependency on libtalloc-dev as
+    we need 2.0.1 to build samba. Closes: #572603
+  * Add avr32 to arches with a build dependency on ctdb. Closes: #572126
+
+  [ Christian Perrier ]
+  * New upstream release. Security fix: all smbd processes inherited
+    CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
+    allowed even when permissions should have denied access.
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 09 Mar 2010 10:52:24 +0100
+
+samba (2:3.4.6~dfsg-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 26 Feb 2010 22:39:50 +0100
+
+samba (2:3.4.5~dfsg-2) unstable; urgency=low
+
+  [ Steve langasek ]
+  * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar"
+    is explicitly allowed by Policy now, and this change introduced a
+    syntax error.  Closes: #566946.
+
+  [ Christian Perrier ]
+  * No longer maker (u)mount.cifs setuid root. Add a notice
+    about this in the package's NEWS.Debian file
+    Closes: #567554
+  * Use dh_lintian instead of manual install of lintian overrides
+  * Updated Standards to 3.8.4 (checked, no change)
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 13 Feb 2010 14:36:33 +0100
+
+samba (2:3.4.5~dfsg-1) unstable; urgency=low
+
+  * New upstream release. Bugs fixed by this release:
+    - Memory leak in smbd. Closes: #538819, #558453
+  * Declare a versioned dependency of winbind and samba on libwbclient0
+    Closes: #550481
+  * A few lintian fixes:
+  * Drop /var/run/samba from samba-common. The directory is created
+    by init scripts when needed.
+  * No longer prepend a path to the mksmbpasswd call in samba.postinst.
+    This prevents the local administrator to use a replacement version
+    for some local reason.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 23 Jan 2010 12:16:42 +0100
+
+samba (2:3.4.4~dfsg-1) unstable; urgency=low
+
+  * New upstream version.
+  * Drop all RFC files from upstream source, therefore using a "~dfsg"
+    suffix to upstream version number.
+  * Bugs fixed upstream:
+    - fixed list of workgroup servers in libsmbclient.
+      Closes: #555462, #561148
+    - fixed documentation of the credentials file format in
+      mount.cifs(8). Closes: #552250
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 14 Jan 2010 20:16:34 +0100
+
+samba (2:3.4.3-2) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Switch to source format 3.0 (quilt)
+  * Better adapt "add machine script" example to adduser
+    Thanks to Heiko Schlittermann for the suggestion
+    Closes: #555466
+
+  [ Steve Langasek ]
+  * The "I hate non-declarative alternatives" upload:
+    - debian/samba{,-common}.prerm: don't call update-alternatives --remove
+      on upgrade, /do/ call it on other invocations of the prerm script.  If
+      these tools ever go away, the removal needs to be handled on upgrade by
+      the maintainer scripts of the new package version.
+    - debian/samba{,-common-bin}.postinst: call update-alternatives
+      unconditionally, don't second-guess the maintainer script arguments.
+    - debian/samba.postinst: call update-alternatives after the debconf
+      handling, not before; debconf triggers a re-exec of the script so
+      anything done before invoking debconf is wasted because it will be
+      re-done, and if there's already a debconf frontend running when this
+      is called, the not-redirected update-alternatives output will confuse
+      it.  Closes: #558116.
+    - debian/samba-common.prerm: move to samba-common-bin, this is the package
+      that owns these binaries.
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 17 Dec 2009 16:53:13 +0100
+
+samba (2:3.4.3-1) unstable; urgency=low
+
+  * New upstream release. This fixes the following bugs:
+    - Do not attempt to update /etc/mtab if it is
+      a symbolic link. Closes: #408394
+  * Bump Standards-Version to 3.8.3 (checked)
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 31 Oct 2009 14:32:07 +0100
+
+samba (2:3.4.2-1) unstable; urgency=high
+
+  * New upstream release. Security update.
+  * CVE-2009-2813:
+    Connecting to the home share of a user will use the root of the
+    filesystem as the home directory if this user is misconfigured to
+    have an empty home directory in /etc/passwd.
+  * CVE-2009-2948:
+    If mount.cifs is installed as a setuid program, a user can pass it
+    a credential or password path to which he or she does not have
+    access and then use the --verbose option to view the first line of
+    that file.
+  * CVE-2009-2906:
+    Specially crafted SMB requests on authenticated SMB connections
+    can send smbd into a 100% CPU loop, causing a DoS on the Samba
+    server.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 03 Oct 2009 08:30:33 +0200
+
+samba (2:3.4.1-2) unstable; urgency=low
+
+  * ./configure --disable-avahi, to avoid accidentally picking up an avahi
+    dependency when libavahi-common-dev is installed.
+
+ -- Steve Langasek <vorlon@debian.org>  Sat, 26 Sep 2009 00:01:12 -0700
+
+samba (2:3.4.1-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release. This fixes the following bugs:
+    - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec
+      for the clever analysis and collaboration with upstream.
+      Closes: #541171
+    - Fix password change propagation with ldapsam. Closes: #505215
+    - Source package contains non-free IETF RFC/I-D. Closes: #538034
+  * Turn the build dependency on libreadline5-dev to libreadline-dev
+    to make further binNMUs easier when libreadline soname changes
+    Thanks to Matthias Klose for the suggestion
+
+  [ Steve Langasek ]
+  * Don't build talloctort when using --enable-external-talloc; and don't
+    try to include talloctort in the samba-tools package, since we're
+    building with --enable-external-talloc. :)  Closes: #546828.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 21 Sep 2009 22:20:22 -0700
+
+samba (2:3.4.0-5) unstable; urgency=low
+
+  * Move /etc/pam.d/samba back to samba-common, because it's shared with
+    samba4.  Closes: #545764.
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 08 Sep 2009 18:43:17 -0700
+
+samba (2:3.4.0-4) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * debian/samba.pamd: include common-session-noninteractive instead of
+    common-session, to avoid pulling in modules specific to interactive
+    logins such as pam_ck_connector.
+  * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the
+    above.
+  * rename debian/samba.pamd to debian/samba.pam and call dh_installpam
+    from debian/rules install, bringing us a smidge closer to a stock
+    debhelper build
+  * don't call pyversions from debian/rules, this throws a useless error
+    message during build.
+  * fix up the list of files that need to be removed by hand in the clean
+    target; the majority of these are now correctly handled upstream.
+  * debian/rules: fix the update-arch target for the case of unversioned
+    build-deps.
+  * Pull avr32 into the list of supported Linux archs.  Closes: #543543.
+  * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the
+    patch. Closes: #541367.
+
+  [ Christian Perrier ]
+  * Use DEP-3 for patches meta-information
+
+  [ Steve Langasek ]
+  * Change swat update-inetd call to use --remove only on purge,
+    and --disable on removal.
+  * Add missing build-dependency on pkg-config, needed to fix libtalloc
+    detection
+  * debian/patches/external-talloc-support.patch: fix the Makefile so it
+    works when using external talloc instead of giving a missing-depend
+    error.
+  * debian/patches/autoconf.patch: resurrect this patch, needed for the
+    above.
+  * debian/rules: build with --without-libtalloc
+    --enable-external-libtalloc, also needed to fix the build failure.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 07 Sep 2009 22:58:29 -0700
+
+samba (2:3.4.0-3) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * debian/control: samba-common-bin has no reason to depend on
+    libpam-modules.
+
+  [ Christian Perrier ]
+  * Fix "invalid argument" when trying to copy a file from smb share
+    Use an upstream patch that will be included in 3.4.1
+    Closes: #536757
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 21 Aug 2009 11:08:43 +0200
+
+samba (2:3.4.0-2) unstable; urgency=low
+
+  [ Debconf translations ]
+  * German. Closes: #536433
+
+  [ Steve Langasek ]
+  * Enable the ldap idmap module; thanks to Aaron J. Zirbes.  Closes: #536786.
+
+  [ Jelmer Vernooij ]
+  * Properly rename smbstatus.1 for alternatives. Closes: #534772
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 02 Aug 2009 12:20:51 +0200
+
+samba (2:3.4.0-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release: first upload to unstable for 3.4
+  * Correct dependencies for samba-common-bin. Closes: #534595
+
+  [ Debconf translations ]
+  * Czech. Closes: #534793
+  * Russian. Closes: #534796
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 07 Jul 2009 20:42:19 +0200
+
+samba (2:3.4.0~rc1-1) experimental; urgency=low
+
+  * New upstream version. That fixes the following bugs:
+    - Remove pidfile on clean shutdown. Closes: #299433, #454112
+  * Drop swat-de.patch that was applied upstream
+  * Bump debhelper compatibility level to 6 and declare a versioned
+    dependency on debhelper >= 6.0.0
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 20 Jun 2009 18:43:20 +0200
+
+samba (2:3.4.0~pre2-1) experimental; urgency=low
+
+  [ Jelmer Vernooij ]
+  * Split binaries out of samba-common into samba-common-bin.
+    Closes: #524661
+
+  [ Christian Perrier ]
+  * New upstream version. That fixes the following bugs:
+    - Do not limit the number of network interfaces. Closes: #428618
+    - Fix Connect4 in samr.idl. Closes: #526229
+  * "Using samba" is back.
+  * Drop non-linux-ports.patch that was integrated upstream
+  * Drop smbpasswd-syslog.patch that was integrated upstream
+  * Drop smbclient-link.patch that was integrated upstream
+
+  [ Debconf translations ]
+  * Italian. Closes: #529350
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 06 Jun 2009 11:45:35 +0200
+
+samba (2:3.4.0~pre1-1) experimental; urgency=low
+
+  * New upstream pre-release
+  * "Using samba" is dropped from upstream source. Therefore, drop
+    debian/samba-doc.doc-base.samba-using
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 20 May 2009 18:50:35 +0200
+
+samba (2:3.3.6-1) unstable; urgency=high
+
+  * New upstream release. Security release.
+  * CVE 2009-1886: Fix Formatstring vulnerability in smbclient
+  * CVE 2009-1888: Fix uninitialized read of a data value
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 26 Jun 2009 18:21:51 +0200
+
+samba (2:3.3.5-1) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * debian/patches/undefined-symbols.patch: fix up patch so that it's
+    suitable for submission upstream.
+  * debian/patches/proper-static-lib-linking.patch: apply the rules to
+    vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and
+    rpc_open_tcp.
+
+  [ Debconf translations ]
+  * Italian. Closes: #529350
+
+  [ Christian Perrier ]
+  * New upstream version
+  * Lintian fixes:
+    -  Declare versioned dependency on debhelper to fit what we have in
+       debian/compat
+    - samba.postinst: do not call mksmbpasswd with an absolute path
+  * Upgrade Standard to 3.8.2 (checked, no change)
+  * Upgrade debhelper compatibility level to 6
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 20 Jun 2009 08:01:16 +0200
+
+samba (2:3.3.4-2) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Do no compile with clustering support on non-Linux platforms
+    Closes: #528382
+
+  [ Debconf translations ]
+  * Basque. Closes: #528757
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 16 May 2009 17:31:09 +0200
+
+samba (2:3.3.4-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release:
+    - Fixed daily winbind crash when retrieving users from an ADS server
+      Closes: #522907.
+  * Add idmap_tdb2 module to winbind package
+  * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents
+    VFS modules to properly load. Closes: #524048.
+
+  [ Debconf translations ]
+  * Bengali added.
+
+  [ Steve Langasek ]
+  * Recommend logrotate instead of depending on it.  Closes: #504219.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 02 May 2009 10:06:16 +0200
+
+samba (2:3.3.3-1) unstable; urgency=low
+
+  * New upstream release:
+    - Fix map readonly. Closes: #521225
+    - Add missing whitespace in mount.cifs error message. Closes: #517021
+    - Includes our patch to fix detection of GNU ld version. As a
+      consequence, we dropped fix_wrong_gnu_ld_version_check.patch
+    - Fix segfault in lookup_sid. Closes: #521408
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 11 Apr 2009 10:12:23 +0200
+
+samba (2:3.3.2-2) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * libcap2-dev is only available on Linux, so make this build-dependency
+    conditional.  Closes: #519911.
+
+  [ Christian Perrier ]
+  * Switch samba-dbg to "Section: debug"
+  * Update debian/copyright for year 2009. Thanks to debian-devel
+    for the reminder.
+  * Dropping Adam Conrad from Uploaders
+  * Dropping Eloy Paris from Uploaders with special thanks for his tremendous
+    work maintaining the package between 1997 and 2004.
+
+  [ Mathieu Parent ]
+  * ensure clustering is enabled with --with-cluster-support=yes
+  * build-depends on ctdb >= 1.0.73. Closes: #520202.
+  * samba suggests ctdb
+
+  [ Debconf translations ]
+  * Esperanto updated.  Closes: #519237.
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 29 Mar 2009 09:23:35 +0200
+
+samba (2:3.3.2-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release. Closes: #519626
+    - mounts with -o guest will now automatically try to connect anonymously.
+      Closes: #423971.
+    - fix for brokenness when using 'force group'.  Closes: #517760.
+    - fix for saving files on Samba shares using MS Office 2007.
+      LP: #337037.
+  * Re-fix slave links for manual pages in samba-common. Closes: #517204.
+
+  [ Steve Langasek ]
+  * Add missing debhelper token to libpam-smbpass.prerm.
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 15 Mar 2009 12:16:48 +0100
+
+samba (2:3.3.1-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release. Closes: #516981
+    Upstream fixes in that release:
+    - Fixed various spelling errors/typos in manpages
+      Closes: #516047
+    - Fix renaming/deleting of files using Windows clients.
+      Closes: #516160
+    - Fix syntax error in mount.cifs(8). Closes: #454799
+  * Use a slave alternative for smbstatus.1 even though that manpage
+    is not provided by samba4
+
+  [ Jelmer Vernooij ]
+  * Fix slave links for manual pages in samba-common. Closes: #517204.
+
+  [ Steve Langasek ]
+  * Add Vcs-{Browser,Svn} fields to debian/control.
+  * When populating the sambashare group, it's not an error if the user
+    simply doesn't exist; test for this case and let the install continue
+    instead of aborting.  LP: #206036.
+  * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst,
+    debian/libpam-smbpass.files, debian/rules: provide a config block
+    for the new PAM framework, allowing this PAM module to
+    auto-configure itself
+  * debian/control: make libpam-smbpass depend on
+    libpam-runtime (>= 1.0.1-2ubuntu1) for the above
+  * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix
+    wrong detection of the GNU ld version, so that the symbol export scripts
+    will be properly applied when building.
+  * refresh debian/libsmbclient.symbols for 3.3.1.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 02 Mar 2009 00:30:35 -0800
+
+samba (2:3.3.0-4) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Build-Depend on libcap2-dev.  Closes: #515851.
+  * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype
+    for cache_path, which causes nearly undiagnoseable crashes when building
+    with -fPIE, because of a wrong return type!  LP: #330626.
+
+  [ Debconf translations ]
+  * Belarusian added.  Closes: #516052.
+  * Traditional Chinese updated. Closes: #516594
+  * Swedish updated.  Closes: #516681.
+
+  [ Mathieu Parent ]
+  * enable clustering by default (CTDB). Closes: #514050
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 24 Feb 2009 16:58:58 -0800
+
+samba (2:3.3.0-3) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable.
+  * Make samba conflict with samba4, not with itself.
+
+  [ Debconf translations ]
+  * Vietnamese updated.  Closes: #515235.
+  * Slovak updated.  Closes: #515240.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 16 Feb 2009 07:15:47 -0800
+
+samba (2:3.3.0-2) unstable; urgency=low
+
+  * Upload to unstable
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 14 Feb 2009 13:38:14 +0100
+
+samba (2:3.2.5-4) unstable; urgency=low
+
+  * Fix segfault whan accessign some NAS devices running old versions of Samba
+    Closes: #500129
+  * Fix process crush when using gethostbyname_r in several threads
+    Closes: #509101, #510450
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 08 Jan 2009 05:59:17 +0100
+
+samba (2:3.2.5-3) unstable; urgency=high
+
+  * Security update
+  * Fix Potential access to "/" in setups with registry shares enabled
+    This fixes CVE-2009-0022, backported from 3.2.7
+  * Fix links in HTML documentation index file.
+    Closes: #508388
+  * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new
+    file in the diff. Thanks to the release managers for spotting it
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 21 Dec 2008 08:09:31 +0100
+
+samba (2:3.2.5-2) unstable; urgency=low
+
+  * Fix typo in bug number in a comment for the default smb.conf file
+    Closes: #507620
+  * Document the need to set appropriate permissions on the printer
+    drivers directory, in the default smb.conf file. Also change
+    the example group from ntadmin to lpadmin
+    Closes: #459243
+  * Add missing rfc2307.so and sfu*.so links that prevent using the
+    'winbind nss info' feature properly
+    Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for
+    the patch. Closes: #506109
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 13 Dec 2008 13:56:07 +0100
+
+samba (2:3.2.5-1) unstable; urgency=high
+
+  * New upstream version. Security-only release.
+    This addresses CVE-2008-4314: potentially leaking
+    arbitrary memory contents to malicious clients.
+  * Better document cases where using a "master" file for smb.conf
+    is a bad idea. Closes: #483187
+  * Insert example "add machine script" and "add group script" scripts
+    in the default smb.conf. Closes: #349049
+  * Move homepage URL to Homepage filed in debian/control
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 27 Nov 2008 11:36:35 +0100
+
+samba (2:3.3.0-1) experimental; urgency=low
+
+  * New upstream release. Fixes the following bugs:
+    - smb file deletion gvfs. Closes: #510564
+    - smbclient du command does not recuse properly. Closes: #509258
+    - mention possible workgroup field in credential files in mount.cifs(8)
+      Closes: #400734
+    - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init
+      Closes: #489656
+    - describe '-g' option in smbclient man page. Closes: #510812
+    - fix swat status table layout. Closes: #511275
+
+  [ Jelmer Vernooij ]
+  * Use alternatives for the smbstatus, nmblookup, net and
+    testparm binaries and various data files in samba-common
+    to allow installation of Samba 3 together with Samba 4.
+  * Add myself to uploaders.
+
+  [ Christian Perrier ]
+  * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base,
+    smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to
+    libsmbclient's symbols file with 3.3.0 as version number
+  * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as
+    version number
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 30 Jan 2009 21:41:49 +0100
+
+samba (2:3.3.0~rc2-4) experimental; urgency=low
+
+  [ Steve Langasek ]
+  * Revert one of the template depersonalization changes from the -2 upload,
+    because it loses important context
+
+  [ Christian Perrier ]
+  * Use double quotation marks in debconf templates
+  * Add 'status" option to init scripts. Thansk to Dustin Kirkland for
+    providing the patch. Closes: #488275
+  * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997
+  * [Lintian] Add ${misc:Depends} to dependencies of binary packages
+    that didn't have it already as we're using debhelper in the source
+    package
+  * [Lintian] Don't ignore errors in swat.postrm
+  * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config
+    and samba-common.config
+  * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5)
+    Closes: #512843
+
+  [ Debconf translations ]
+  * Asturian added. Closes: #511730
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 24 Jan 2009 16:04:57 +0100
+
+samba (2:3.3.0~rc2-3) experimental; urgency=low
+
+  * Fix around the libsmbclient/libsmbclient-dev descriptions, which got
+    swapped in the last upload.
+  * Drop a boilerplate sentence from the samba-common, smbclient, swat,
+    samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions
+    that's not relevant for these packages.
+  * Hyphenate "command-line" in the smbclient short description.
+  * Fix up the smbclient description, which got crossed with the smbfs one.
+  * Fix the smbfs description, which was not actually fixed in the previous
+    upload.  Really closes: #496206.
+  * Further minor adjustments to the description of the swat package.
+  * Fix various inaccuracies in the winbind package description.
+  * Clarify in the description that samba-tools are extra, only useful for
+    testing.
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 30 Dec 2008 18:42:05 -0800
+
+samba (2:3.3.0~rc2-2) experimental; urgency=low
+
+  [ Steve Langasek ]
+  * Handle clearing out netbios settings whenever the DHCP server has gone
+    away.  Closes: #299618.
+
+  [ Christian Perrier ]
+  * Point the correct document about password encryption in debconf templates
+    Corrected in translations as well. Closes: #502838
+  * Reword debconf templates to avoid mentioning the local host as a "server".
+    Closes: #171177
+  * Use this opportunity for other minor rewording:
+    - replace "SMB" by "SMB/CIFS"
+    - more strongly discouraging the use of plain text passwords
+    - unpersonnalization
+  * Reword the libpam-smbpass package description
+    Thanks to Justin B. Rye for the very useful suggestions
+    Closes: #496196
+  * Improve the package descriptions by rewording the description overhaul
+    Also improve the specific information for samba and samba-dbg
+    Thanks again to Justin B. Rye for the invaluable help
+    Closes: #496200
+  * Improve libsmbclient package description. Closes: #496197
+  * Improve libwbclient0 package description. Closes: #496199
+  * Improve samba-doc package description. Closes: #496202
+  * Improve samba-tools package description. Closes: #496203
+  * Improve samba-common package description. Closes: #496204
+  * Improve smbclient package description. Closes: #496205
+  * Improve smbfs package description. Closes: #496206
+  * Improve swat package description. Closes: #496207
+  * Improve winbind package description. Closes: #496208
+  * Improve samba-doc-pdf package description. Closes: #496211
+  * Update French debconf translation
+
+ -- Christian Perrier <bubulle@debian.org>  Mon, 29 Dec 2008 11:50:04 +0100
+
+samba (2:3.3.0~rc2-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 17 Dec 2008 08:22:18 +0100
+
+samba (2:3.3.0~rc1-2) experimental; urgency=low
+
+  * Provide idmap_adex and idmap_hash in winbind.
+    Thanks to Jelmer Jaarsma for reporting and providing a patch
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 04 Dec 2008 19:59:23 +0100
+
+samba (2:3.3.0~rc1-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 28 Nov 2008 10:51:32 +0100
+
+samba (2:3.3.0~pre2-1) experimental; urgency=low
+
+  * New upstream release.
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 07 Nov 2008 20:52:36 +0100
+
+samba (2:3.2.4-1) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * New upstream release.
+    - debian/rules: we don't need to move cifs.upcall around, it's now
+      installed to the right place upstream.
+    - Fixed in this release:
+      - typo in cifs.upcall.8. Closes: #501499
+
+  [ Christian Perrier ]
+  * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for
+    the patch. Closes: #499359
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 18 Oct 2008 08:20:31 +0200
+
+samba (2:3.2.3-3) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing
+    this out.  Closes: #497857.
+  * Georgian debconf translation added. Closes: #498426
+  * Polish debconf translation added. Thanks to Łukasz Paździora.
+
+  [ Jelmer Vernooij ]
+  * Add ldb-tools to Suggests: of samba. Closes: #488384
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 03 Oct 2008 20:37:19 +0200
+
+samba (2:3.2.3-2) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Fix FTBFS on GNU/kFreeBSD. Closes: #496880
+
+ -- Steve Langasek <vorlon@debian.org>  Sat, 30 Aug 2008 00:46:07 -0700
+
+samba (2:3.2.3-1) unstable; urgency=high
+
+  * High-urgency upload for security fix
+  * New upstream release
+    - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default"
+      Closes: #491881
+    - Fix the default permissions on ldb databases.  Addresses
+      CVE-2008-3789; closes: #496073.
+    - debian/rules, debian/smbfs.files: build with cifs.upcall,
+      newly introduced to replace cifs.spnego
+    - debian/rules: no more need to rename libsmbclient.so to
+      libsmbclient.so.0, or libwbclient.so to libwbclient.so.0
+
+  [ Noèl Köthe ]
+  * fixing lintian warning "build-depends-on-1-revision"
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 27 Aug 2008 10:19:59 -0700
+
+samba (2:3.2.1-1) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Build-depend on keyutils only on the linux archs.  Closes: #493401.
+  * New patch debian/patches/shrink-dead-code.patch: throw all .o files into
+    a .a archive as a first pass before linking the final executables, so
+    that the executables don't end up with quite so much unused code bloating
+    the system.  Not applied to net or ntlm_auth, which have particularly
+    hairy linking needs.  Partially addresses: bug #474543; no code was
+    harmed in the making of this patch.
+  * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports.
+
+  [ Christian Perrier ]
+  * New upstream release
+    - Fix trusted domain handling in Winbindd. Closes: #493752
+    - Fix for print jobs that continued to show as active after printing
+      had completed.  Closes: #494899.
+
+ -- Steve Langasek <vorlon@debian.org>  Thu, 14 Aug 2008 16:13:24 -0700
+
+samba (2:3.2.0-4) unstable; urgency=low
+
+  * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch
+    that went missing somehow, causing samba to look for secrets.tdb in
+    /etc/samba instead of /var/lib/samba where it's been for years.  No
+    migration handling added, because this was only present in unstable for
+    about a day.  Thanks to Rick Nelson for pointing this out.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 21 Jul 2008 17:39:48 -0700
+
+samba (2:3.2.0-3) unstable; urgency=low
+
+  * Upload to unstable.
+  * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro
+    and Makefile.in to properly avoid linking .a libraries into other .a
+    libraries, since this bloats the libraries without providing any useful
+    functionality.
+  * Version the build-dependency on libtalloc-dev, to ensure we're building
+    against a package with the right symbols.
+  * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get
+    more fine-grained versioned library dependencies
+  * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols
+    have been added.
+  * Re-add docs/registry to samba-doc, restored upstream
+  * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it
+    belongs according to the FHS.  Closes: #454770.
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 20 Jul 2008 15:38:10 -0700
+
+samba (2:3.2.0-2) experimental; urgency=low
+
+  * Fix up the copyright file to correctly document that we're now under
+    GPLv3, not GPLv2.
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 08 Jul 2008 12:21:47 -0700
+
+samba (2:3.2.0-1) experimental; urgency=low
+
+  [ Christian Perrier ]
+  * New samba-tools package to provide all "torture" tools:
+    smbtorture msgtest masktest locktest locktest2 nsstest vfstest
+    pdbtest talloctort replacetort tdbtorture smbconftort
+  * Upgrade Standard to 3.8.0 (checked)
+  * Merged from unstable:
+    * Drop "invalid users = root" from the default smb.conf file
+      as it differs from upstream's behaviour and upstream is fairly
+      noisy about this choice of ours. Closes: #462046
+    * Drop commented "guest account = nobody". This is already upstream's
+      default
+    * Remove versioned Build-Depends when satisfied in etch (actually all
+      versioning in Build-Depends)
+    * Remove Conflicts with non-existing packages
+    * Drop dpkg-dev and binutils from Build-Depends, since the versioned
+      build-dep is no longer needed and these are both Build-Essential
+    * Mini-policy for settings in smb.conf:
+      - don't explicitly set settings to their default value
+      - commented settings with the default value are commented with "#"
+      - commented settings with a non-default value are commented with ";"
+    * Apply this policy to "socket options". Closes: #476104
+    * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
+      libsmbclient.so.0 as upstream doesn't assign versions
+    * Add idmap_*(8) man pages (idea taken from SerNet packages)
+    * Create the entire set of directories needed by clients for
+      Point-and-Click printing (including old clients!) in
+      /var/lib/samba/printers (idea taken from SerNet packages)
+    * Update copyright and README.debian information for current and past
+      maintainers. Remove redundant mention of Tridge (the copyright is enough)
+    * Add doc-base files for samba-doc-pdf. Closes: #451685
+    * add a soft dependency on slapd in init script to allow
+      proper operation when dependency-based boot sequence is enabled.
+      Thanks to Petter Reinholdtsen for reporting and providing a patch
+      Closes: #478800
+  * Rename libcupsys2-dev to libcups2-dev in build dependencies
+  * Localize SWAT in German. Closes: #487681
+
+  [ Debconf translations ]
+  * Merged from unstable:
+    * Kurdish. Closes: #480151
+    * Romanian updated. Closes: #488709.
+
+  [ Steve Langasek ]
+  * New upstream release
+  * Merged from unstable:
+    * debian/patches/no-unnecessary-cups.patch: don't try to connect to a
+      cups server when we know that no printers are configured.
+      Closes: #479512.
+
+  [ Jelmer Vernooij ]
+  * Merged from unstable:
+  * Fix bashism in smbtar. (Closes: #486056)
+
+  [ Peter Eisentraut ]
+  * Merged from unstable:
+    * Removed myself from Uploaders
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 06 Jul 2008 09:59:07 +0200
+
+samba (2:3.2.0~rc2-1) experimental; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release
+
+  [ Steve Langasek ]
+  * Enable building of cifs.spnego for the smbfs package, adding a
+    build-dependency on keyutils-dev, to allow kerberos-based authentication
+    of cifs mounts.  Closes: #480663, LP: #236830.
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 12 Jun 2008 17:17:38 +0200
+
+samba (2:3.2.0~rc1-2) experimental; urgency=low
+
+  * Reupload to experimental. Sigh.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 31 May 2008 11:08:14 +0200
+
+samba (1:3.2.0~rc1-1) unstable; urgency=low
+
+  * New upstream version
+  * debian/samba-doc.doc-base.samba-using: index file is no named toc.html
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 30 May 2008 20:22:57 +0200
+
+samba (1:3.2.0~pre3-1) experimental; urgency=low
+
+  * New upstream version
+  * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream
+  * docs/registry removed from samba-doc as missing from upstream tarball
+    (upstream bug #5421)
+  * debian/samba-doc.doc-base.samba-using: The index (and only) file
+    is now book.html
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 26 Apr 2008 08:20:21 +0200
+
+samba (1:3.2.0~pre2-2) experimental; urgency=low
+
+  [ Christian Perrier ]
+  * Upload to experimental with an epoch as the earlier version
+    accidentally went to unstable.
+
+  [ Peter Eisentraut ]
+  * Removed myself from Uploaders
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 06 Apr 2008 20:38:35 +0200
+
+samba (3.2.0~pre2-1) unstable; urgency=low
+
+  * New upstream (pre-)release. It closes the following bugs:
+    - typos in net.8. Closes: #460487, #460491
+    - mention insmb.conf(5) that logging still occurs when
+      "syslog only" is enabled and "syslog=0". Closes: #311300
+    - bad link in HTML docs. Closes: #358479
+    - enhance a useless and confusing debug message in pdb_ldap
+      Closes: #448546
+    - mention the correct default debug level in smbclient(1)
+      Closes: #292371
+    - no longer mention that "ip" parameter can use the host name
+      in mount.cifs(8). Closes: #296057
+    - wrong spelling of "its own" in source comments fixed
+      Closes: #448686
+    - fix "ldapsam_getgroup: Did not find group" debug message
+      Closes: #448546
+    - fix smbclient(1): useless use of cat. Closes: #429349
+
+  [ Steve Langasek ]
+  * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from
+    3.2.0pre2, which ended up with html entity encodings embedded in them
+    by mistake.  This patch is expected to go away again for 3.2.0pre3.
+  * fix up the FHS patches for the new upstream release:
+    - debian/patches/fhs-newpaths.patch has been merged upstream, drop it.
+    - debian/patches/fhs-filespaths.patch has been mostly applied; only one
+      path usage remains inconsistent, and a new .tdb has been added with
+      the wrong path so fix this up here too.
+    - debian/patches/fhs-filespaths-debatable.patch: updated for some new
+      uses of lock_path() which we map to cache_path().
+    - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4
+      instead of source/configure.in.
+  * debian/patches/smbstatus-locking.patch: merged upstream
+  * debian/patches/smbpasswd-syslog.patch: updated to account for new
+    calls to logging functions
+  * Handle the new libraries available in samba 3.2: ship libwbclient as a
+    shared library, link against the system libtalloc (adding a
+    build-dependency on libtalloc-dev - which is actually sort of kludgy
+    because this only works as long as the system libtalloc has the same
+    soname as the one within the samba tree, this should be fixed to
+    properly build against the system libtalloc), and suppress generation
+    of the tdb and netapi libraries which aren't useful to us right now.
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 05 Mar 2008 22:45:28 +0100
+
+samba (2:3.0.31-1) unstable; urgency=medium
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 12 Jul 2008 16:57:09 +0200
+
+samba (2:3.0.30-4) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Rename libcupsys2-dev to libcups2-dev in build dependencies
+  * Localize SWAT in German. Closes: #487681
+
+  [ Jelmer Vernooij ]
+  * Fix bashism in smbtar. (Closes: #486056)
+
+  [ Jamie Strandboge ]
+  * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly
+    calculate buffer sizes. This bug was introduced in the fix for
+    CVE-2008-1105. Closes: #488688
+
+  [ Debconf translations ]
+  * Romanian updated. Closes: #488709.
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 06 Jul 2008 11:43:53 +0200
+
+samba (2:3.0.30-3) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * add a soft dependency on slapd in init script to allow
+    proper operation when dependency-based boot sequence is enabled.
+    Thanks to Petter Reinholdtsen for reporting and providing a patch
+    Closes: #478800
+
+  [ Steve Langasek ]
+  * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups
+    server when we know that no printers are configured.  Closes: #479512.
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 10 Jun 2008 21:03:51 +0200
+
+samba (2:3.0.30-2) unstable; urgency=high
+
+  * Brown paper bag releae with epoch increased after yet another
+    accidental upload of 3.2.0 to unstable. Sigh and apologies to
+    autobuilders.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 31 May 2008 12:08:50 +0200
+
+samba (1:3.0.30-1) unstable; urgency=high
+
+  * New upstream release: fix a heap overflow when parsing SMB responses in
+    client code. (CVE-2008-1105). Closes: #483410
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 28 May 2008 22:38:44 +0200
+
+samba (1:3.0.29-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 22 May 2008 07:31:55 +0200
+
+samba (1:3.0.28a-3) unstable; urgency=low
+
+  * The "bug hunting at SambaXP" release
+  * Drop "invalid users = root" from the default smb.conf file
+    as it differs from upstream's behaviour and upstream is fairly
+    noisy about this choice of ours. Closes: #462046
+  * Drop commented "guest account = nobody". This is already upstream's
+    default
+  * Remove versioned Build-Depends when satisfied in etch (actually all
+    versioning in Build-Depends)
+  * Remove Conflicts with non-existing packages
+  * Drop dpkg-dev and binutils from Build-Depends, since the versioned
+    build-dep is no longer needed and these are both Build-Essential
+  * Mini-policy for settings in smb.conf:
+    - don't explicitly set settings to their default value
+    - commented settings with the default value are commented with "#"
+    - commented settings with a non-default value are commented with ";"
+  * Apply this policy to "socket options". Closes: #476104
+  * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
+    libsmbclient.so.0 as upstream doesn't assign versions
+  * Add idmap_*(8) man pages (idea taken from SerNet packages)
+  * Create the entire set of directories needed by clients for
+    Point-and-Click printing (including old clients!) in
+    /var/lib/samba/printers (idea taken from SerNet packages)
+  * Update copyright and README.debian information for current and past
+    maintainers. Remove redundant mention of Tridge (the copyright is enough)
+  * Add doc-base files for samba-doc-pdf. Closes: #451685
+  * Kurdish debconf translation. Closes: #480151
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 16 Apr 2008 23:14:46 +0200
+
+samba (1:3.0.28a-2) unstable; urgency=low
+
+  [ Peter Eisentraut ]
+  * Removed myself from Uploaders
+
+  [ Steve Langasek ]
+  * debian/patches/manpage-encoding.patch: fix up the manpage synopses to
+    not use embedded iso8859-1 non-break spaces, there is a roff escape
+    sequence that we should use instead.  Closes: #470844.
+
+  [ Christian Perrier ]
+  * Reupload with an epoch to supersede an accidental upload of 3.2.0
+    in unstable
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 05 Apr 2008 11:59:23 +0200
+
+samba (3.0.28a-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream release. This fixes the following Debian bugs:
+    - Prevent nmbd from shutting down when no network
+      interfaces can be located. Closes: #433449
+  * Debian patches dropped as applied upstream:
+    - make-distclean.patch
+    - linux-cifs-user-perms.patch
+    - cifs-umount-same-user.patch
+    - get_global_sam_sid-non-root.patch
+    - chgpasswd.patch
+    - cups.patch
+  * Fix doc-base section from Apps/Net to Network
+  * Fix copyright in debian/copyright
+  * Updated Standards-Version to 3.7.3 (no changes needed)
+  * [Lintian] No longer use -1 revision for the libacl-dev build
+    dependency
+
+  [ Steve Langasek ]
+  * Merge smb.conf changes from Ubuntu:
+    - correct an inconsistency inthe winbind enum comment
+    - correct default and example settings to use the canonical names for all
+      options, rather than historical synonyms
+    - clarify the comment for 'max log size'.
+    Thanks to Chuck Short and Richard Laager.
+  * Add an additional sed command to samba-common.postinst to cleverly
+    pick up any shares that have been appended to the default smb.conf
+    and exclude them from the ucf diff.
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 14 Mar 2008 21:28:16 +0100
+
+samba (3.0.28-4) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Brown paper bag: fix samba-common.files to list all of the smb.conf
+    templates, not just the current one.  Closes: #470138.
+  * Drop debian/patches/gcc42-arm-workaround.patch, which should have been
+    dropped in the previous upload
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 09 Mar 2008 04:09:26 -0700
+
+samba (3.0.28-3) unstable; urgency=low
+
+  * Drop the arm optimization workaround, as the compiler is now reported
+    to be fixed.
+  * Add missing eventlogadm(8) manpage.
+  * Refresh the list of Linux architectures from type-handling, to pick up
+    libacl-dev on armel.  Closes: #465121.
+  * Convert handling of smb.conf to use ucf, so that we can sanely manage
+    syntax changes going forward.
+  * In the process, fix the dhcp handling to allow proper reconfiguration
+    via debconf.
+
+  [ Debconf translations ]
+  * Indonesian added. Closes: #469976
+
+ -- Steve Langasek <vorlon@debian.org>  Sat, 08 Mar 2008 17:11:16 -0800
+
+samba (3.0.28-2) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Drop some further code in samba-common.postinst that's specific to
+    pre-3.0 upgrades.
+  * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script,
+    so we can use bash array variables and cope with arguments containing
+    embedded spaces (such as share names).  Thanks to Julian Gilbey
+    <jdg@debian.org> for the patch.  Closes: #457105.
+  * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler
+    problem by building rpc_parse/parse_prs.o with -O0 on this architecture.
+    Thanks to Martin Michlmayr for helping to pin down the problem file.
+    Closes: #445566.
+  * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is
+    a closer approximation of the semantics with cifs.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 05 Jan 2008 09:46:06 +0100
+
+samba (3.0.28-1) unstable; urgency=high
+
+  * New upstream release. Security fix
+  * Fix a remote code execution vulnerability when running as a domain
+    logon server (PDC or BDC).  (CVE-2007-6015)
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 11 Dec 2007 00:12:11 +0530
+
+samba (3.0.27a-2) unstable; urgency=low
+
+  * debian/patches/disable-weak-auth.patch: disable plaintext authentication
+    on the client, and lanman authentication on both client and server, by
+    default since these are only needed for Win9x or Samba with encrypted
+    passwords disabled and are potential password attack vectors.  This
+    change is backported from Samba 3.2.  LP: #163194.
+  * Don't build the userspace tools for the deprecated smbfs kernel driver
+    anymore; instead, use a shell wrapper around mount.cifs that translates
+    option names between the smbfs and cifs drivers.
+    Closes: #169624, #256637, #265468, #289179, #305210, #410075;
+    LP: #29413
+  * debian/panic-action: detect when we're on an Ubuntu system and direct bug
+    reporters to Launchpad instead of to the Debian BTS.  Closes: #452940.
+  * debian/samba.init: call log_progress_msg separately for each daemon on
+    stop rather than passing a second arg to log_daemon_msg, for greater
+    compatibility with both Debian and Ubuntu LSB initscript implementations.
+    Closes: #453350.
+  * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of
+    recommends/suggests which is now implemented correctly in apt.
+    Closes: #453144.
+  * Get rid of the build-dependency on type-handling:
+    - add a new target, "update-archs", to be invoked by hand to refresh
+      the list of known Linux architectures for the libacl1-dev
+      build-dep; this avoids the clean target making changes to
+      debian/control
+    - rework the sed line so that it works in-place on debian/control,
+      so we can get rid of debian/control.in as well and just update
+      debian/control directly
+    Closes: #340570.
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 04 Dec 2007 18:35:29 -0800
+
+samba (3.0.27a-1) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * New upstream release
+    - fix regression with smbfs clients, introduced by the security fix in
+      3.0.27.  Closes: #451839.
+    - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream.
+  * Drop the deprecated "printer admin" example from the default smb.conf.
+    Closes: #451273.
+  * Add a *new* debian/patches/cups.patch to *enable* cups as the default
+    printing system, because since the original introduction of this patch
+    in Debian there was a regression upstream that caused cups to never be
+    selected as the default print system.
+  * Set the default value for the workgroup question to "WORKGROUP" in
+    samba-common.templates, not just in the template smb.conf, so that the
+    debconf question comes out right every time; and always treat this
+    as a high-priority debconf question instead of selecting the
+    priority based on whether there's an existing value, since there's
+    now *always* an existing value but the value doesn't tell us
+    anything meaningful about the user's preference.  Closes: #451271.
+  * Drop some code from samba.postinst that only applies to upgrades from
+    pre-3.0 (i.e., pre-sarge) packages
+
+  [ Christian Perrier ]
+  * Update the "built by" part of README.debian
+  * Remove the very outdated parts of README.debian
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 23 Nov 2007 13:04:52 -0800
+
+samba (3.0.27-1) unstable; urgency=low
+
+  * New upstream version
+    - fixes a remote code execution vulnerability when running nmbd as a
+      WINS server. (CVE-2007-5398; closes: #451385)
+    - fixes a buffer overflow in nmbd when running as a domain controller
+      during processing of GETDC logon server requests. (CVE-2007-4572)
+
+  [ Steve Langasek ]
+  * fhs.patch: net usershares should also be stored under /var/lib, not under
+    /var/run.  No transition handling in maintainer scripts, since this
+    feature is not activated by default.
+  * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid()
+    from smbpasswd -L or pam_smbpass when running as non-root, to avoid a
+    foreseeable panic.  Closes: #346547, #450738.
+  * usershare.patch: enable "user shares" by default in the server with a
+    default limit of 100, to support user shares on both upgrades and new
+    installs with no need to munge config files.  Thanks to Mathias Gug
+    <mathiaz@ubuntu.com> for the patch.  Closes: #443230.
+  * On Ubuntu, support autopopulating the sambashare group using the existing
+    members of the admin group; no equivalent handling is done on Debian,
+    because there doesn't seem to be an appropriate template group we can use
+    that wouldn't be considered a privilege escalation for those users.
+  * Update Samba to explicitly use the C locale when doing password changes,
+    to account for Linux-PAM's recently adopted i18n support.
+    Closes: #451272.
+  * Enforce creation of the pid directory (/var/run/samba) in the samba
+    init script, for compatibility with systems that use a tmpfs for
+    /var/run.  Closes: #451270.
+  * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd
+    as the default printing system, as CUPS is now the dominant/default
+    printing system for Linux.
+
+  [ Debconf translations ]
+  * Hebrew added. Closes: #444054
+
+  [ Christian Perrier ]
+  * Split fhs.patch into 3 separate patches to make upstream integration
+    easier:
+    - fhs-newpaths.patch: introduce new paths
+    - fhs-filespaths.patch: assign files to new paths
+    - fhs-assignpaths.patch: assign paths to FHS-compatible locations
+  * Compile with DNS update support. Thanks to Matthias Gug for
+    reporting and contributions from Launchpad's #156686
+    Closes: #449422
+
+ -- Steve Langasek <vorlon@debian.org>  Thu, 15 Nov 2007 11:46:17 -0800
+
+samba (3.2.0~pre1-1) experimental; urgency=low
+
+  * New upstream (pre-)release
+
+  [ Steve Langasek ]
+  * fhs.patch: net usershares should also be stored under /var/lib, not under
+    /var/run.  No transition handling in maintainer scripts, since this
+    feature is not activated by default.
+  * Update smbstatus-locking.patch to use db_open() instead of
+    tdb_open(), per upstream recommendation.
+  * Use talloc_strdup() and talloc_asprintf() instead of static strings in
+    data_path(), state_path(), and cache_path(), as suggested by Volker
+    Lendecke.
+
+  [ Debconf translations ]
+  * Hebrew added. Closes: #444054
+
+  [ Christian Perrier ]
+  * Split fhs.patch into 4 separate patches to make upstream integration
+    easier:
+    - fhs-newpaths.patch: introduce new paths
+    - fhs-filespaths.patch: assign files to new paths
+    - fhs-filespaths-debatable.patch: assign files to new paths (part that
+      seems more difficult to be integrated upstream)
+    - fhs-assignpaths.patch: assign paths to FHS-compatible locations
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 21 Oct 2007 09:14:42 +0200
+
+samba (3.0.26a-1) unstable; urgency=low
+
+  * New upstream release.
+  * Remove the samba-common/unsupported-passdb debconf template and
+    the associated code in samba-common.postinst, that deals with pre-etch
+    versions transition
+  * Remove the samba/tdbsam template and the remaining line referencing
+    it (for no need) in samba.postinst. That code was removed in 3.0.23c-2
+    and was dealing with pre-3.0 transitions.
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 16 Sep 2007 10:16:29 +0200
+
+samba (3.0.26-1) unstable; urgency=high
+
+  * New upstream release: security update for CVE-2007-4138:
+    incorrect primary group assignment for domain users using the rfc2307 or
+    sfu winbind nss info plugin.
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 11 Sep 2007 19:16:32 +0200
+
+samba (3.0.25c-1) unstable; urgency=low
+
+  [ Noèl Köthe ]
+  * new upstream released from 2007-08-20
+    - added smbfs deprecation information to help and manpage
+      Closes: #360384
+    - fixed winbind leaking file descriptors
+      Closes: #410663
+    - fixed smbpasswd fails with errorcode SUCCESS as normal user
+      Closes: #155345
+
+  [ Christian Perrier ]
+  * Drop the (upstream unmaintained) python bindings (python-samba package)
+  * swat: turn the dependency on samba-doc to a Recommends:
+    Thanks to Peter Eisentraut for dealing with that issue and bringing it
+    back. Closes: #391742
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 26 Aug 2007 14:57:16 +0200
+
+samba (3.0.25b-2) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Don't start nmbd if 'disable netbios' is set in the config.
+    Closes: #429429.
+  * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid,
+    set to those of the invoking user, when called as non-root.
+    Closes: #431661.
+  * Fix up fhs.patch for some new FHS regressions:
+    - make sure all references to winbindd_idmap.tdb look in /var/lib/samba
+    - make sure all references to winbindd_cache.tdb look in /var/cache/samba
+    - share_info.tdb belongs in /var/lib/samba; this is a regression
+      introduced in 3.0.23-1, so fix up this path on samba upgrade
+    - move the ADS "gpo" cache directory to /var/cache/samba
+    - move idmap_cache.tdb to /var/cache/samba, and fix up the path on
+      winbind upgrade
+  * linux-cifs-user-perms.patch: also support setting a default uid and gid
+    value when mount.cifs is called as non-root
+  * cifs-umount-trailing-slashes.patch: canonicalize mount point names when
+    umount.cifs is called, to avoid unnecessarily leaving entries behind in
+    /etc/mtab if invoked with a trailing slash in the mount point name
+  * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check
+    in umount.cifs assumed that errors would return a value > 0, when in fact
+    the return value on failure is -1.  Correct this assumption, which was
+    allowing any user to unmount shares mounted by other users.
+  * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog()
+    and closelog(), since this will interfere with syslogging behavior
+    of the calling application.  Closes: #434372.
+  * swat should depend only on inet-superserver, not update-inetd, per
+    Marco d'Itri.
+
+  [ Christian Perrier ]
+  * debian/panic-action: bail out if there's no "mail" command
+    Patch from the Ubuntu samba packagers.
+  * debian/smb.conf: use the comment from Ubuntu package for the "valid users"
+    setting of [homes] as a basis for ours. Ubuntu's wording is better.
+
+  [ Peter Eisentraut ]
+  * Don't ignore errors from make distclean, as per lintian check
+
+  [ Debconf translations ]
+  * Gujarati updated. Closes: #436215
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 17 Aug 2007 18:38:58 -0700
+
+samba (3.0.25b-1) unstable; urgency=low
+
+  * New upstream version
+  * Bugs fixed upstream:
+    - correct default mentioned for "store dos attribute" in smb.conf(5)
+      Closes: #367379
+    - fix typo in pdbedit.c. Closes: #421758
+    - fixed crashes in idmap_rid. Closes: #428411
+    - misleading documentation in smb.conf(5). Closes: #218477
+    - don't crash when no eventlog names are defined in smb.conf
+      Closes: #424683
+    - typography errors in manpages. Closes: #427865, #418811
+    - fix compilation and linking of pam_smbpass.so. Closes: #430755
+  * Drop patches that have been applied upstream:
+    - nmbd-signalling.patch
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 27 Jun 2007 15:12:13 +0200
+
+samba (3.0.25a-2) unstable; urgency=low
+
+  [ Debconf translations ]
+  * Danish updated. Closes: #426773
+
+  [ Christian Perrier ]
+  * Clean out some remaining cruft that is not deleted
+    by "make clean". Taken from Ubuntu patches.
+  * Add missing userspace patches to properly pass uid and gid with 2.6
+    kernels. See #408033 and upstream's #999 for rationale
+  * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue
+    is fixed in 2.4 and 2.6 kernels (2.6 kernels need
+    missing_userspace_bugzilla999.patch, though)
+    Closes: #408033
+  * Add the samba-common and winbind packages to samba-dbg to get
+    debugging symbols for winbindd, net, etc.
+  * Replace all occurrences of ${Source:Version} by ${$binary:Version} in
+    dependencies. All these were Arch:any depending on Arch:any (the only
+    Arch:any depending on Arch:all already used ${source:Version}
+
+  [ Steve Langasek ]
+  * Update samba.config to not override user preference on passdb.tdb
+    creation after initial configuration.  Closes: #350926.
+  * Drop the last vestiges of the unified samba.patch; this reverts the
+    change for bug #112195 which it's been determined has no actual security
+    benefits, and drops the fix for bug #106976 which is superseded
+    upstream.
+
+  [ Debconf translations ]
+  * Vietnamese updated.  Closes: #426979.
+
+ -- Christian Perrier <bubulle@debian.org>  Wed, 13 Jun 2007 15:47:06 +0200
+
+samba (3.0.25a-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream version
+  * Bugs fixed upstream:
+    - password expiration loog on samba domain controllers. Closes: #425083
+    - no more login on samba servers that are members of samba domains
+      Closes: #425680, #426002
+    - users no longer have access according to their secondary groups
+      on shares with "force group". Closes: #424629
+  * Debian packaging fixes:
+    - Enforce building with "--with-ads" and therefore fail
+      when the build can't be done with kerberos support.
+      Closes: #424637
+    - debian/control: wrap long lines in packages' descriptions
+    - uncomment out use of type-handling in the clean target, because
+      type-handling has been fixed to support the new /usr/share/dpkg/ostable
+    - avoid installing extra COPYING files in /usr/share/doc/* (one was
+      installed along with the pcap2nbench example)
+  * Merge Ubuntu changes:
+    - use of PIDDIR instead of hardcoding it in samba.init and winbind.init
+  * Patches to upstream source:
+    - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory
+      instead of the lock directory. Thanks to C. K. Jester-Young for the
+      patch. Closes: #425640
+
+  [ Steve Langasek ]
+  * swat and samba depend on update-inetd instead of on netbase; swat also
+    depends on "openbsd-inetd | inet-superserver", for samba this is only a
+    Suggests.
+
+ -- Christian Perrier <bubulle@debian.org>  Sun, 27 May 2007 09:30:02 +0200
+
+samba (3.0.25-1) unstable; urgency=high
+
+  * New upstream version including security fixes
+  * Bugs fixed upstream:
+    - nmbd no longer segfaults on bad interface line
+      Closes: #265577, #386922, #359155, #366800
+    - documentation issues about displaycharset. Closes: #350790
+    - documentation makes it clear that case options such as
+      "default case" can only be set on a per-share basis.
+      Closes: #231229
+    - all occurrences of "encypt" fixed in smb.conf(5)
+      Closes: #408507
+    - two typos on "account" fixed in source/passdb/pdb_ldap.c and
+      source/utils/pdbedit.c. Closes: #402392
+    - no longer panic when using the (deprecated) "only user" option
+      in user level security. Closes: #388282
+    - CVE-2007-2444 (User privilege elevation because of a local SID/Name
+      translation bug)
+    - CVE-2007-2446 (Multiple heap overflows allow remote code execution)
+    - CVE-2007-2447 (Unescaped user input parameters are passed as
+                     arguments to /bin/sh allowing for remote command
+                     execution)
+
+  [ Debconf translations ]
+  * Marathi added. Closes: #416802
+  * Esperanto added. Closes: #417795.
+  * Basque updated. Closes: #418196.
+  * Wolof updated. Closes: #421636
+
+  [ Christian Perrier ]
+  * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba
+    before running invoke-rc.d. Closes: #414841
+
+  [ Steve Langasek ]
+  * Comment out use of type-handling in the clean target, because
+    type-handling is currently broken in unstable and clean shouldn't be
+    editing debian/control anyway.
+
+ -- Christian Perrier <bubulle@debian.org>  Mon, 14 May 2007 10:30:15 +0200
+
+samba (3.0.24-6) unstable; urgency=high
+
+  * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug
+    is still present :/  Fix a missing ] in the regexp for passdb backend
+    checking, really-closes: #415725.
+
+ -- Steve Langasek <vorlon@debian.org>  Sat, 24 Mar 2007 03:32:46 -0700
+
+samba (3.0.24-5) unstable; urgency=high
+
+  * The "see what you get for trusting the quality of my packages,
+    release team?  Release team, please unblock this package" release.
+  * High-urgency brown-paper-upload for etch-targetted fix for
+    regression introduced in the last version
+
+  [ Steve Langasek ]
+  * Fixed the regexp used for matching broken passdb backend settings,
+    since we were getting false positives on *all* values. :/  The
+    correct match should be: one or more non-space, non-comma
+    characters, followed by a space or a comma, followed by zero or more
+    spaces, followed by one or more non-space characters.  Closes: #415725.
+
+  [ Debconf translations ]
+  * Nepali
+  * Korean; closes: #414883.
+  * Russian
+  * Arabic
+  * Portuguese
+  * Greek. Closes: #415122
+  * Norwegian Nynorsk added.
+  * Marathi added. Closes: #416802
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 21 Mar 2007 13:49:46 -0700
+
+samba (3.0.24-4) unstable; urgency=medium
+
+  [ Steve Langasek ]
+  * Documentation fix for a problem affecting upgrades from sarge: if
+    passdb backend is still a comma- or space-separated list after any
+    attempts at automatic fix-ups, throw a debconf error notifying the
+    user that they'll need to fix this manually.  Closes: #408981.
+
+  [ Debconf translations ]
+  * French
+  * Spanish
+  * Galician; closes: #414605.
+  * Swedish; closes: #414610.
+  * Brazilian Portuguese; closes: #414603.
+  * German; closes: #414630.
+  * Norwegian Bokmål; closes: #414619.
+  * Bulgarian; closes: #414624.
+  * Romanian; closes: #414629.
+  * Tagalog; closes: #414637.
+  * Khmer; closes: #381833.
+  * Thai; closes: #414664.
+  * Slovak; closes: #414665.
+  * Slovenian
+  * Simplified Chinese; closes: #414671.
+  * Japanese; closes: #414673.
+  * Hungarian; closes: #414677.
+  * Dzongkha; closes: #414680.
+  * Estonian; closes: #414679.
+  * Catalan
+  * Malayalam; closes: #414728
+  * Traditional Chinese; closes: #414730
+  * Turkish
+  * Italian; closes: #414708
+  * Finnish; closes: #414736
+  * Dutch; closes: #414741
+  * Albanian; closes: #414778.
+  * Czech; closes: #414793.
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 13 Mar 2007 16:29:21 -0700
+
+samba (3.0.24-3) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Merge some Ubuntu changes:
+    - do not expose the Samba version anymore
+    - default workgroup set to WORKGROUP (default workgroup of
+      Windows workstations)
+  * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch
+    Closes: #394830
+  * Add commented "winbind enum*" settings in smb.conf
+    This will point users to these important settings which changed
+    their default behaviour between sarge and etch. Closes: #368251
+
+  [ Steve Langasek ]
+  * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first
+    time the script is called if the dhcp client was already running at
+    the time of install, and manually reload samba to get the updated
+    config files read.  Thanks to Bas Zoetekouw for the patch.
+    Closes: #407408.
+  * While we're at it, use atomic replace for /etc/samba/dhcp.conf just
+    in case someone else reloads samba while the script is running.  Low
+    impact, low-risk change.
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 11 Mar 2007 23:34:10 -0700
+
+samba (3.0.24-2) unstable; urgency=low
+
+  * Re-upload with a proper .orig.tar.gz.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon,  5 Feb 2007 19:55:34 -0800
+
+samba (3.0.24-1) unstable; urgency=high
+
+  * New upstream release, security update
+  * Fixes for the following security advisories:
+    - Directly affecting Debian:
+      - CVE-2007-0452 (Potential Denial of Service bug in smbd)
+    - Not affecting Debian:
+      - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind
+        NSS library on Solaris)
+      - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin)
+  * Correct paths for the documentation pointers in the default smb.conf
+    file. Thanks to Ted Percival for his care reporting this. Closes: #408898
+
+ -- Christian Perrier <bubulle@debian.org>  Mon,  5 Feb 2007 05:27:07 +0100
+
+samba (3.0.23d-4) unstable; urgency=low
+
+  * Debconf translation updates:
+    - Slovenian added.
+
+ -- Christian Perrier <bubulle@debian.org>  Wed,  3 Jan 2007 08:43:50 +0100
+
+samba (3.0.23d-3) unstable; urgency=low
+
+  * Debconf translation updates:
+    - Malayalam added. Closes: #403107
+    - Tamil added. Closes: #403353
+
+ -- Christian Perrier <bubulle@debian.org>  Mon,  1 Jan 2007 10:17:18 +0100
+
+samba (3.0.23d-2) unstable; urgency=low
+
+  * Build-Conflicts: libfam-dev to avoid problems accessing shares
+    when using GAMIN. Closes: #400617
+  * Lintian fixes:
+    - Run debconf-updatepo in the clean target to ensure up-to-date PO
+      and POT files
+    - debian/patches/no_unbreakable_spaces_in_man.patch:
+      Replace all non-breakable spaces by regular spaces in man pages.
+      They are encoded in ISO-8859-1 which is not recommended in man pages.
+      This should be submitted upstream.
+    - reformat too long lines in package description
+
+ -- Christian Perrier <bubulle@debian.org>  Sun,  3 Dec 2006 09:39:29 +0100
+
+samba (3.0.23d-1) unstable; urgency=low
+
+  * new upstream release (2006-11-15)
+
+  [ Noèl Köthe ]
+  * updated documentation.patch for 3.0.23d
+  * updated non-linux-ports.patch for 3.0.23d
+  * updated adapt_machine_creation_script.patch for 3.0.23d
+  * updated autoconf.patch for 3.0.23d
+
+  [ Debconf translations ]
+  * Added Bosnian. Closes: #396634
+  * Added Bulgarian. Closes: #397773
+
+ -- Noèl Köthe <noel@debian.org>  Thu, 16 Nov 2006 13:55:26 +0100
+
+samba (3.0.23c-4) unstable; urgency=low
+
+  [ Debconf translations ]
+  * Added Greek.
+  * Added Gujarati. Closes: #394430
+  * Added Korean. Closes: #394509
+  * Added Nepali.
+  * Updated Czech (typo fixed).
+  * Added Wolof. Closes: #396079
+
+ -- Christian Perrier <bubulle@debian.org>  Sun,  5 Nov 2006 09:42:40 +0100
+
+samba (3.0.23c-3) unstable; urgency=low
+
+  [ Debconf translations ]
+  * Updated Catalan; thanks to Guillem Jover for his help
+  * Updated Russian.
+  * Updated Spanish. Add a missing word and correct the copyright header
+  * Updated Vietnamese. Closes: #394164
+  * Added Albanian. Closes: #393777
+  * Added Chinese (Traditional).
+  * Added Thai.
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 21 Oct 2006 10:44:11 +0200
+
+samba (3.0.23c-2) unstable; urgency=low
+
+  [ Debconf translations ]
+  * Updated Swedish. Closes: #386510.
+  * Updated Japanese. Closes: #386534.
+  * Updated Italian. Closes: #386691.
+  * Updated Romanian. Closes: #388254.
+  * Updated German. Closes: #389072.
+  * Updated Brazilian Portuguese. Closes: #389097.
+  * Updated Basque. Closes: #389722.
+  * Updated Turkish. Closes: #390887
+  * Updated Danish. Closes: #390878
+  * Updated German. Closes: #390813
+  * Updated Simplified Chinese. Closes: #390959
+  * Updated Arabic.
+  * Updated Spanish. Closes: #391735
+  * Updated Dutch. Closes: #392082
+  * Added Slovak. Closes: #386847.
+  * Added Finnish. Closes: #390150.
+  * Added Estonian. Closes: #391102.
+  * Added Norwegian Bokmål. Closes: #391692
+  * Added Hungarian. Closes: #391746
+
+  [ Steve Langasek ]
+  * Change the Maintainer field at last to the mailing list... gives
+    our spam rules some testing, in response to popular demand :)
+  * Check for update-inetd on purge before trying to invoke it;
+    closes: #388606.
+
+  [ Peter Eisentraut ]
+  * Make swat binNMU-safe by using ${source:Version} for dependency on
+    samba-doc
+  * Make samba-common owner of /var/{cache,log,run}/samba, let samba and
+    winbind only delete files they know they're exclusive owners of.
+    Closes: #370718.
+  * Use python-central to manage installation of python-samba.
+    Closes: #386499.  (patch by Patrick Winnertz)
+  * Use upstream makefile to install Python module.
+  * Build-Depend on python-dev instead of python-all-dev.
+  * Removed old upgrade support.
+  * Remove possibly leftover comma from "passdb backend" setting in
+    smb.conf on upgrade. Closes: ##383307.
+  * Added libpam-smbpass logcheck file by martin f krafft.
+    Closes: #391487, #391916.
+
+  [ Christian Perrier ]
+  * Add LSB info to the init script
+
+ -- Christian Perrier <bubulle@debian.org>  Thu, 12 Oct 2006 18:31:46 +0200
+
+samba (3.0.23c-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * New upstream version
+  * Split out samba/run_mode with "__Choices".
+
+  [ Noèl Köthe ]
+  * corrected samba override disparity:
+    samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra.
+
+  [ Debconf translations ]
+  * Updated Galician. Closes: #383001.
+  * Updated Danish. Closes: #383025.
+  * Added Tagalog. Closes: #383039, #383252.
+  * Updated Khmer.
+  * Updated Arabic.
+  * Updated Dzongkha. Closes: #383125.
+  * Updated Vietnamese. Closes: #383126.
+  * Updated Czech. Closes: #384760.
+
+  [ Peter Eisentraut ]
+  * Preseed configure result for method to detect interfaces in
+    debian/config.cache; the test might otherwise fail if there are no
+    interfaces configured at build time. Closes: #382429.
+  * Refined panic-action script text. Closes: #382500.
+
+ -- Noèl Köthe <noel@debian.org>  Mon, 04 Sep 2006 12:10:28 +0200
+
+samba (3.0.23b-2) unstable; urgency=low
+
+  [ Debconf translations ]
+  * Updated Romanian. Closes: #382358
+  * Updated Dzongkha. Closes: #382448, #382948
+  * Updated Basque. Closes: #382456
+  * Added Simplified Chinese. Closes: #382489
+
+  [ Peter Eisentraut ]
+  * Remove no longer functioning "guest" value from "passdb backend"
+    setting in smb.conf on upgrade. Closes: #382296
+
+  [ Steve Langasek ]
+  * Drop code and debconf questions specific to upgrades from samba <= 2.2.
+  * Reword some debconf translations as discussed on the list.
+  * Rerun debconf-updatepo.
+  * Switch debian/ca.po to UTF-8.
+  * Restore some reverted strings for Galician, Czech, Brazilian Portuguese,
+    Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese.
+  * Update translations for Brazilian Portuguese, Spanish, French, Italian,
+    Catalan, and Portuguese.
+
+ -- Peter Eisentraut <petere@debian.org>  Mon, 14 Aug 2006 19:04:31 +0200
+
+samba (3.0.23b-1) unstable; urgency=low
+
+  * New upstream release
+
+  [ Debconf translations ]
+  * Updated Galician. Closes: #381988
+
+ -- Noèl Köthe <noel@debian.org>  Tue, 08 Aug 2006 22:28:00 +0200
+
+samba (3.0.23a-1) unstable; urgency=medium
+
+  * New upstream release
+
+  * Fixes the following Debian bugs:
+    - winbind: panic()s when started outside of a domain context.
+      Closes: #337070
+    - Make smbclient -L use RPC to list shares, fall back to RAP.
+      Closes: #168732
+    - Potential hang in nmbd. Upstream bug #3779. Closes: #367472
+    - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780).
+      Closes: #367507
+    - Erroneous permissions checks after 3.0.10 -> 3.0.14a
+      (upstream #2591). Closes: #307626
+    - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070
+    - ImportError exception raised when trying to import samba.smb
+      (upstream #3567). Closes: #350050
+    - Changed references from pam_pwdb to pam_unix (upstream #3225).
+      Closes: #206672
+    - SWAT segfault (upstream #3702). Closes: #363523
+
+  [ Adam Conrad ]
+  * Fix typo in smb.conf that causes all samba apps to whine.
+    Closes: #369782
+  * Add myself to Uploaders, on the off chance that I might upload.
+
+  [ Debconf translations ]
+  * Add Galician translation of debconf templates. Closes: #361204, #369403
+  * Add Basque translation of debconf templates. Closes: #375104
+  * Add Romanian translation of debconf templates. Closes: #379246
+  * Add Khmer translation of debconf templates. Closes: #381833
+  * Add Dzongkha translation of debconf templates.
+  * Updated Russian. Closes: #369375
+  * Updated Czech. Closes: #369408
+  * Updated Japanese. Closes: #369457
+  * Updated Italian. Closes: #369587
+  * Updated Swedish. Closes: #369730
+  * Updated Dutch. Closes: #376515
+  * Updated Vietnamese. Closes: #381557
+  * Updated French.
+  * Updated Brazilian.
+  * Updated Portuguese. Closes: #372632
+  * Updated Arabic.
+
+  [ Christian Perrier ]
+  * Add dependency on procps for samba, as ps is used in init scripts.
+    Thanks to Bastian Blank for reporting. Closes: #365618
+  * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's
+    Reference
+  * Add support for /etc/default/winbind. Closes: #262313, #374411
+    Thanks to Guido Guenther for the old patch and to Jérôme Warnier
+    for reminding us about it.
+  * Compile with --with-cifsmount which is now needed to properly compile
+    mount.cifs and umount.cifs. See samba bug #3799
+
+  [ Peter Eisentraut ]
+  * Use debian/compat instead of DH_COMPAT
+  * Updated Standards-Version to 3.7.2 (no changes needed)
+  * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the
+    required ldconfig calls appear in the maintainer scripts
+  * Adjusted debian/rules to get 3.0.23rc1 to build
+  * Updated to debhelper level 5
+  * Rearranged dh_strip calls so that build succeeds with
+    DEB_BUILD_OPTIONS=nostrip. Closes: #288995
+  * Create /var/spool/samba and use it as default printer spool.
+    Closes: #275241
+  * Made winbind init script more careful about returning proper exit code
+  * Added winbindd_priv group as owner of winbindd_privileged directory.
+    Closes: #307257
+  * Python transition preparations: renamed package to python-samba,
+    removed hardcoded references to Python version 2.3. Closes: #380939
+  * Removed unwanted swat debconf warning
+  * Put localized swat messages into /usr/share/samba, where swat looks for
+    them. Closes: #376991
+
+ -- Peter Eisentraut <petere@debian.org>  Mon,  7 Aug 2006 23:00:49 +0200
+
+samba (3.0.22-1) unstable; urgency=medium
+
+  [ Steve Langasek ]
+  * New upstream release
+    - CAN-2006-1059: fixes an information leak in logfiles of systems using
+      winbind with log level >= 5.
+  * Fix a typo in the default smb.conf (closes: #354495).
+
+  [ Noèl Köthe ]
+  * replacing SMB with SMB/CIFS in the descriptions like
+    named on the samba.org webpage. Closes: #356335
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 12 Mar 2006 22:40:28 +0100
+
+samba (3.0.21c-1) unstable; urgency=low
+
+  * New upstream release
+  * add a few logon-related parameters as good and safe
+    examples for *DC-type settings. Closes: #349051
+  * add an example "add user script". Closes: #349050
+  * drop outdated information from the smbfs package description
+    Closes: #352828
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 25 Feb 2006 11:58:45 +0100
+
+samba (3.0.21b-1) unstable; urgency=low
+
+  * The "Tridge" release: celebrates the 2005 Free Software Award winner
+
+  * New upstream release
+
+  * Upstream bugs fixed by the new upstream release:
+    - Support changing expired passwords in
+      pam_winbindd. Closes: #258302
+    - vfs_full_audit fixes for multiple connections. Closes: #348419
+    - crashes of smbd in security=server mode
+      Closes: #346045, #346069, #350598, #351448
+
+  [ Peter Eisentraut ]
+  * Put correct paths for Debian installations into the man pages, and
+    remove outdated swat setup instructions therein. Closes: #321005
+  * Fix lintian overrides and install them into the right packages.
+  * Remove swat inetd registration in remove, not purge. Closes: #313214
+  * Add findsmb script. Closes: #231806
+  * Fix sonames of libnss_win{bind,s}.so. Closes: #333290
+  * Remove autoconf build dependency.
+  * Remove remnants of old patch system.
+  * Install smbumount setgid root. Closes: #253437
+  * Add watch file.
+  * Activate kernel oplocks. Closes: #218511
+  * Disable PIE compilation. Closes: #346416
+
+  [ Christian Perrier ]
+  * activate building of idmap_rid. Closes: #284681.
+    Thanks to Ubuntu patches
+  * activate building of idmap_ad. Closes: #341814
+  * modify the long description of the libsmbclient-dev package to
+    avoid repeating the long description. Thanks, linda.
+
+  [ Steve Langasek ]
+  * Also enable setresuid()/setresgid() on alpha and sparc now that support
+    for Linux 2.2 is dropped.
+
+ -- Christian Perrier <bubulle@debian.org>  Mon,  6 Feb 2006 07:02:20 +0100
+
+samba (3.0.21a-4) unstable; urgency=low
+
+  [ Peter Eisentraut ]
+  * Add umount.cifs. Closes: #340967
+  * Really make mount.cifs and umount.cifs suid root. Closes: #340966
+
+  [ Christian Perrier ]
+  * Add "bind interfaces only" and "interfaces" options (commented)
+    to the default smb.conf file. Closes: #349043
+
+  [ Steve Langasek ]
+  * Add missing changes to source/include/config.h.in into the
+    autoconf.patch, so that samba looks for files in /var/lib/samba like it's
+    supposed to instead of in /var/run/samba!  Closes: #349372, #349464.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 23 Jan 2006 00:59:20 -0800
+
+samba (3.0.21a-3) unstable; urgency=low
+
+  * Add Build-Depends on quilt (>= 0.40 as we use quilt.make)
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 21 Jan 2006 23:02:32 +0100
+
+samba (3.0.21a-2) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Switch to quilt for patches management. Refresh all patches so
+    that they apply cleanly. Closes: #345557
+  * debian/patches/adapt_machine_creation_script.patch:
+    - adapt example machine creation script to Debian. Closes: #346234
+  * winbind.dirs:
+    - added /var/run/samba. Closes: #347585
+
+  [ Peter Eisentraut ]
+  * swat.links:
+    - file added. Closes: #346001
+
+  [ Noèl Köthe ]
+  * fixed typo in panic-script. Closes: #348410
+
+  [ Steve Langasek ]
+  * debian/patches/autoconf.patch:
+    - move changes to autogenerated files into their own patch now that we've
+      lost the script that was calling autogen.sh for us; this also helps
+      make debian/rules clean just a little bit cleaner.
+  * debian/patches/fhs.patch:
+    - fix new references to registry.tdb (closes: #348874).
+    - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba
+      where they belong
+
+ -- Christian Perrier <bubulle@debian.org>  Fri, 20 Jan 2006 14:20:35 +0100
+
+samba (3.0.21a-1) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * *Really* make samba-doc suggest samba-doc-pdf. This change finally
+    did not make it in the previous release.
+
+  [ Noèl Köthe ]
+  * new upstream release 3.0.21a
+    - removed smbsh.1 from debian/rules
+    - added new smbclient programm smbget (with conflict/replace
+      to existing Debian smbget package)
+    - added libsmbclient.7 to libsmbclient package
+    - added umount.cifs.8 to smbfs package
+    - added pam_winbind.7 to winbind package
+    - added new /usr/bin/eventlogadm to samba package which is
+      documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt
+    - fixed "cd command fails in smbclient". Closes: #307535
+    - fixed "file descriptor leak". Closes: #339564
+    - fixed "smbclient(1) doesn't list same options as
+      smbclient usage statement". Closes: #154184
+    - fixed "typo in smbmount.8". Closes: #260673
+    - fixed "smbmount manual page doesn't have a link to
+      smbumount". Closes: #297535
+    - fixed "smb.conf man page references non-existent
+      BROWSING.txt file". Closes: #316458
+    - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480
+    - fixed "fails to manage groups containing spaces". Closes: #299592
+    - corrected nonpic-libsmbclient.patch to apply
+    - corrected fhs.patch to apply
+  * added myself to Uploaders
+  * Rewording of the panic action script. Closes: #335051
+  * added missing swat translation to swat package
+
+ -- Noèl Köthe <noel@debian.org>  Sun, 01 Jan 2006 12:45:33 +0100
+
+samba (3.0.20b-4) unstable; urgency=low
+
+  [ Christian Perrier ]
+  * Remove the smbldap-tools-* directory from the examples of samba-doc
+    as these tools exist as an independent package. Closes: #341934
+  * Swedish debconf translation update. Closes: #342022
+  * Preserve the local admin settings for run_mode in /etc/default/samba
+    when upgrading. Closes: #234038, #267988, #269735
+  * Winbind also must depend on lsb-base. Closes: #343379
+  * Enable swat in inetd when installing it and remove it when
+    uninstalling. Closes: #87905, #230936, #268429
+
+  [ Peter Eisentraut ]
+  * Added separate samba-doc-pdf package, suggested by samba-doc.
+    Closes: #281971
+  * Removed duplicate documentation in swat package, symlinked to
+    samba-doc; swat now depends on samba-doc. Closes: #233447
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 20 Dec 2005 17:08:20 +0100
+
+samba (3.0.20b-3) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * Drop the FHS transition code from the samba postinst, since it's
+    not needed for upgrades from sarge (and most of it not for upgrades
+    from woody).
+
+  [ Noèl Köthe ]
+  * libpam-smbpass dependency on samba-common
+    Closes: #297923
+  * Updated swedish debconf translation. Closes: #335784
+  * Added Recommends: smbldap-tools. Closes: #227675
+
+  [ Peter Eisentraut ]
+  * Added doc-base support. Closes: #55580
+  * Fixed dh_installexamples call so the debian/*.examples files are
+    actually used.
+  * Patched libpam-smbpass README to refer to examples directory.
+    Closes: #215771
+
+  [ Christian Perrier ]
+  * Add a working passwd chat line to the default smb.conf file
+    Closes: #269746
+  * Add the profiles binary and man page to the shipped files. Closes: #225494
+  * Add a dependency on samba-common for winbind and force versions to match
+    Closes: #273007, #264855
+  * Add /var/log/samba to winbind directories. Closes: #340833
+  * Lintian cleaning:
+    - Add a few lintian overrides to avoid lintian complaining
+      for things done on purpose or just because it makes wrong assumptions
+    - Corrected FSF address in debian/copyright
+    - Make swat depend on netbase as it uses update-inetd in its postinst
+      script
+    - Correct shebang lines in config scripts
+    - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc
+    - Minor correction in libsmbclient-dev description to avoid strictly
+      repeating the short description in the long description
+    - Call confmodule in swat.postinst as this is the only way to guarantee
+      that the config script is run in all cases
+
+ -- Christian Perrier <bubulle@debian.org>  Sat,  3 Dec 2005 07:30:40 +0100
+
+samba (3.0.20b-2) unstable; urgency=low
+
+  * Don't build with -gstabs any more; -g no longer gives a problematic
+    size hit, and -gstabs is no longer supported on ia64.
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 19 Oct 2005 19:02:44 -0700
+
+samba (3.0.20b-1) unstable; urgency=low
+
+  * Christian Perrier:
+    - Debconf translations:
+      - Added Vietnamese. Closes: #317876
+      - Updated German. Closes: #322907
+  * Steve Langasek:
+    - Use ${misc:Depends} in debian/control instead of depending on
+      debconf directly, allowing use of cdebconf as an alternative.
+      Closes: #332088.
+  * Noèl Köthe
+    - corrected libsmbclient priority to optional. Closes: #310045
+    - corrected the path of ServerType.html in smb.conf. Closes: #296500
+    - updated Standards-Version to 3.6.2 (no changes needed)
+    - added homepage to description
+    - switched init scripts (samba and winbind) to lsb-functions
+      (took patches from ubuntu)
+    - added Swedish. Closes: #331437
+    - removed outdated "guest" value in "passdb backend" in default smb.conf
+      Closes: #289519
+    - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8)
+      is; Replaces: all previous versions of samba.  Closes: #253603
+    - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515
+      - support for Windows Vista. Closes: #323489
+      - Mac OS Tiger Problem fixed. Closes: #309836
+      - BUG 2688: re-implement support for the -P (--port) option.
+        Closes: #307746
+      - "man smb.conf" warnings fixed. Closes: #266320
+      - testprns removed by upstream so removed in samba.files
+      - corrected docs/*.pdf names (samba-doc.docs)
+      - corrected diagnosis.html path (samba.docs)
+      - removing patches which are included upstream:
+        dos7-xcopy-always-copies-files.patch
+           (* BUG 2622: Remove DPTR_MASK as it makes no sense.)
+        hide-special-file-fix.patch
+           (* Hide dot files and directory logic fixes.)
+        rap-printing-bigendian.patch
+           (* BUG 1998: Correct byte ordering bug when storing
+              16-bit RAP print job ids.)
+        smbclient-vfat-loop.patch
+        smbclient-vfat-loop2.patch
+           (* BUG 2698: Fix infinite listing loop in smbclient
+              caused by an invalid character set conversion.)
+      - fixed the following patches which didn't applied cleanly
+        fhs.patch
+        non-linux-ports.patch
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 18 Oct 2005 19:02:21 -0700
+
+samba (3.0.14a-6) unstable; urgency=low
+
+  * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect
+    Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9;
+    add a versioned build-depend accordingly.  Closes: #315955
+  * Switch to libreadline5.
+
+ -- Steve Langasek <vorlon@debian.org>  Fri,  1 Jul 2005 00:13:12 -0700
+
+samba (3.0.14a-5) unstable; urgency=low
+
+  * Fix libsmbclient.a to be built as non-PIC instead of PIC.
+    Closes: #279243.
+
+ -- Steve Langasek <vorlon@debian.org>  Wed,  8 Jun 2005 05:46:52 -0700
+
+samba (3.0.14a-4) unstable; urgency=high
+
+  * Last-minute upload for sarge, because I don't listen to anything
+    that RM guy says
+  * Patch smbmount to strip CAP_UNIX out of the capabilities passed to
+    the kernel when uid, gid, dmask, or fmask options have been
+    specified; this keeps the mount permissions from changing out from
+    under the user when upgrading to a server (or to a kernel) that
+    supports unix extensions.  Closes: #310982.
+  * Second patch to smbclient search continuation logic, from upstream:
+    preserve the original UCS2 filename to guard against lossy
+    conversions, and break out if we find ourselves looping.
+    Closes: #311157.
+  * Upstream fix to make print job cancellations work on big-endian
+    systems when talking to RAP-style clients (i.e., smbclient).
+    Closes: #311213.
+  * Add build-dependency on libpopt-dev, so that we consistently use the
+    system popt lib instead of the bundled one.
+
+ -- Steve Langasek <vorlon@debian.org>  Thu,  2 Jun 2005 07:02:46 -0700
+
+samba (3.0.14a-3) unstable; urgency=high
+
+  * Urgency set to high for a bug that makes smbclient/libsmbclient
+    /almost/ mostly unusable
+  * Fix smbclient's search continuation logic so that it works correctly
+    against 2K servers offering VFAT-hosted shares; many thanks to
+    Jeremy Allison for the timely upstream fix.  Closes: #309798.
+  * Update pt_BR debconf translation.  Thanks to Andre Luis Lopes
+    <andrelop@debian.org>. (closes: #308510)
+  * Add Russian debconf translation, thanks to Yuriy Talakan
+    <yt@amur.elektra.ru>. (closes: #310063)
+
+ -- Steve Langasek <vorlon@debian.org>  Thu, 26 May 2005 23:37:57 -0700
+
+samba (3.0.14a-2) unstable; urgency=low
+
+  * Point the sense of the file_is_special() check right way around;
+    thanks to Matthijs Mohlmann for catching this.  Closes: #305747.
+  * debian/patches/dos7-xcopy-always-copies-files.patch:
+    Fix the MS-DOS 7 XCOPY copying files over and over bug
+    Closes: #309003
+  * Steve Langasek <vorlon@debian.org>:
+    - Add Christian Perrier to Uploaders:.  Thanks, Christian :)
+
+ -- Steve Langasek <vorlon@debian.org>  Sun,  8 May 2005 04:43:21 -0700
+
+samba (3.0.14a-1) unstable; urgency=low
+
+  * New upstream version
+    - A more complete upstream fix for missing files in file listings,
+      should really give us working (closes: #302771); drop
+      xp-missing-files.patch, which has been superseded.
+  * Use the right path when removing mount.cifs binary in the clean
+    target.  Closes: #303318.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 18 Apr 2005 03:22:29 -0700
+
+samba (3.0.11-1) unstable; urgency=high
+
+  * New upstream version
+    - Fixes duplicated entry in swat(8) manpage (closes: #292957).
+    - Fix queue handling so that processes serving print clients don't
+      spin off into infinity and clobber the system (closes: #274969).
+    - Make sure we use C-locale toupper/tolower functions for case
+      conversion, since Turkish pairing rules are incompatible
+      (closes: #286174).
+  * Fix logrotate script to exit true instead of false when nmbd.pid is
+    missing (closes: #287263).
+  * Added Portuguese debconf translation. Thanks to Miguel Figueiredo
+    <elmig@debianpt.org>. (closes: #286375)
+  * Added Italian debconf translation. Thanks to Luca Monducci
+    <luca.mo@tiscali.it>. (closes: #284125)
+  * Add support for building on the Debian BSD and Hurd ports; thanks to
+    Robert Millan for the patch. (closes: #266693)
+  * debian/patches/xp-missing-files.patch: import patch from upstream to
+    fix missing entries in directory listings when talking to WinXP
+    servers (closes: #297771).
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 23 Mar 2005 00:13:16 -0800
+
+samba (3.0.10-1) unstable; urgency=high
+
+  * New upstream release.
+    - CAN-2004-1154: integer overflow can lead to remote code execution
+      by authenticated users; closes: #286023.
+  * High-urgency upload for sarge-targetted RC bugfix.
+  * Sync the fhs.patch to samba 3.0.10.
+  * Install mount.cifs suid root, to make user mounts possible
+    (closes: #283819).
+  * debian/patches/cups.patch: Change the default printing system, so we
+    can compile in CUPS support without making it the default -- CUPS is
+    not a reasonable default on Debian, at least for sarge.
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 17 Dec 2004 11:56:01 -0800
+
+samba (3.0.9-1) unstable; urgency=low
+
+  * New upstream release
+    - Fixes Win9x printing; closes: #283530, #282571, #283818.
+    - Fixes a problem with setting dosmodes on filesystems without ACL
+      support; closes: #283661.
+    - Drop ldapsam_compat.patch, redundant now that a fix is integrated
+      upstream
+
+ -- Steve Langasek <vorlon@debian.org>  Thu,  2 Dec 2004 01:11:39 -0800
+
+samba (3.0.8-2) unstable; urgency=low
+
+  * Fix the module paths for python2.3-samba so that "import foo from samba"
+    works, and include the __init__.py glue; closes: #222867).
+  * Enable quota support; closes: #246839.
+  * Fix missing symbols in libsmbclient (and libnss_wins), and add
+    -Wl,-z,defs to the libsmbclient link options to prevent future
+    instances of undefined symbols (closes: #281181).
+  * Fix for the legacy ldapsam_compat backend; thanks to Fabien
+    Chevalier for the patch (closes: #274155).
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 15 Nov 2004 06:54:13 -0800
+
+samba (3.0.8-1) unstable; urgency=high
+
+  * New upstream package. Urgency set to "high" because of a potential
+    Denial of Service vulnerability in previous 3.0.x releases
+    (CAN-2004-0930). (Eloy)
+  * Introduce new -dbg package, so we can make better sense out of the
+    cleverly-supplied backtrace emails. (Vorlon)
+  * Applied patch from Luke Mewburn <luke@mewburn.net> to fix missing
+    lock_path() to state_path() change in the FHS patches. (Eloy)
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon,  8 Nov 2004 13:39:34 -0500
+
+samba (3.0.7-2) unstable; urgency=high
+
+  * High-urgency upload for sarge-targetted RC fixes.
+  * Use autogen.sh in unpatch-source as well as in patch-source, to get
+    rid of the autom4te.cache cruft.
+  * debian/patches/make-distclean.patch: add some missing files to the
+    distclean target in source/Makefile.in (mostly-fixes: #276203).
+  * Change compile-time default of 'use sendfile' to 'no', since the
+    current Samba implementation is broken (closes: #261917, #275741,
+    #270175).
+  * Add mount.cifs into the smbfs package; thanks to Igor Belyi for
+    showing us just how simple this patch should be. ;)  Since cifs is
+    the preferred kernel driver in 2.6, bugs related to smbfs and 2.6
+    are considered closed unless someone can show that they exist with
+    the cifs driver as well (closes: #249890, #269443, #227791, #236869,
+    #260707, #261808, #270175).
+  * Fix FHS migration code so that it only affects upgrades from old
+    package versions, and doesn't cause us to mess with non-standard
+    directories that may have been re-added by the admin
+   (closes: #251858).
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 26 Oct 2004 01:35:23 -0700
+
+samba (3.0.7-1) unstable; urgency=high
+
+  * New upstream release. This release fixes two possible denial of
+    service conditions; one in nmbd and one in smbd. The CVE numbers
+    for these vulnerabilities are:
+
+    CAN-2004-0807 for the smbd DoS
+    CAN-2004-0808 for the nmbd DoS
+
+    Urgency is set to "high" because of these vulnerabilities; so this
+    new release propagates to testing ASAP.
+
+    Thanks to the Samba Team and the Debian Security Team for the
+    heads up.
+  * Remove post-3.0.6 patches that are now in 3.0.7.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 13 Sep 2004 00:53:38 -0400
+
+samba (3.0.6-4) unstable; urgency=low
+
+  * Update LDAP schema (closes: #269797).
+  * Applied a couple of upstream fixes that will be present in Samba 3.0.7.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  7 Sep 2004 15:28:42 -0400
+
+samba (3.0.6-3) unstable; urgency=low
+
+  * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704)
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 25 Aug 2004 01:58:37 -0400
+
+samba (3.0.6-2) unstable; urgency=low
+
+  * Added Danish debconf translation. Thanks to Claus Hindsgaul
+    <claus_h@image.dk>. (closes: #232884)
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Aug 2004 17:24:19 -0400
+
+samba (3.0.6-1) unstable; urgency=low
+
+  * New upstream version.
+  * Incorporate Turkish debconf translation; thanks to Recai Oktas
+    <roktas@omu.edu.tr>. (closes: #252031)
+  * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
+    <andrelop@debian.org>. (closes: #208113)
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Aug 2004 12:34:44 -0400
+
+samba (3.0.5-2) unstable; urgency=high
+
+  * Patches from Fabien Chevalier <fabien.chevalier@supelec.fr>
+    to fix:
+    + libnss_wins crashes other programs (closes: #252591)
+    + Can't list share files/dirs, but can acces deeper files/dirs
+      (closes: #264572)
+    + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871)
+  * Urgency "high" to make it into testing as soon as possible since
+    at least #265871 is pretty bad now that WinXP SP2 has been released.
+    Thanks for the help Fabien! Both Vorlon and I have been very busy
+    lately.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 18 Aug 2004 13:25:41 -0400
+
+samba (3.0.5-1) unstable; urgency=high
+
+  * New upstream version. Urgency "high" because of potential buffer
+    overflows. The security fixes are the only difference between
+    3.0.4 and 3.0.5.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 22 Jul 2004 08:07:36 -0400
+
+samba (3.0.4-5) unstable; urgency=low
+
+  * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4),
+    not an unversioned libcupsys2-dev. (closes: #250523)
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 25 May 2004 07:43:54 -0400
+
+samba (3.0.4-4) unstable; urgency=low
+
+  * Rebuilt with libcupsys2-gnutls10 for unstable.
+    Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736
+    Closes: #250742, #250733
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 24 May 2004 22:32:52 -0400
+
+samba (3.0.4-3) unstable; urgency=low
+
+  * Color me stupid; I uploaded an experimental version to unstable.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 22 May 2004 00:40:58 -0400
+
+samba (3.0.4-1) unstable; urgency=low
+
+  Eloy:
+
+  * New upstream version.
+    Closes: #247640 (New upstream version available)
+    Closes: #238905 (Printing crash fix)
+    Closes: #247090 (panic in viewing printerqueue)
+
+  Vorlon:
+
+  * Incorporate Catalan debconf translations; thanks to
+    Aleix Badia i Bosch <abadia@ica.es> and the Debian L10n Catalan Team.
+    (closes: #236640)
+  * Incorporate Czech debconf translations; thanks to
+    Miroslav Kure <kurem@upcase.inf.upol.cz> (closes: #236274).
+  * Update libsmbclient shlibs, due to an incompatibility with older
+    versions that prevents gnome-vfs from working correctly
+    (closes: #245869).
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 21 May 2004 11:42:19 -0400
+
+samba (3.0.2a-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 24 Feb 2004 10:30:47 -0500
+
+samba (3.0.2-2) unstable; urgency=high
+
+  * Apply patch from Urban Widmark <urban@teststation.com> to prevent
+    users from mounting remote filesystems containing suid files
+    (closes: 232327).  This represents an exploitable security hole on
+    systems running Linux 2.6 kernels.
+
+ -- Steve Langasek <vorlon@debian.org>  Thu, 12 Feb 2004 21:38:40 -0600
+
+samba (3.0.2-1) unstable; urgency=high
+
+  * New upstream release.
+    - LaMont Jones: correct false failure LFS test that resulted
+      in _GNU_SOURCE not being defined (thus resulting in strndup()
+      not being defined) (closes: #226694)
+    - Segfault fixes. (closes: #230012) (maybe more, but we need bug
+      reporters to confirm.)
+
+    Urgency "high" due to a password initialization bug that could grant
+    an attacker unauthorized access to a user account created by the
+    mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and
+    workarounds for those not wishing to upgrade (which is a bad idea
+    anyway since this new release fixes lots of other bugs.)
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun,  8 Feb 2004 10:06:29 -0500
+
+samba (3.0.1-2) unstable; urgency=low
+
+  * Include ntlm_auth's man page.
+  * Don't create directories outside of the source directory during
+    package build time. (closes: #227221, #227238, #225862)
+  * Don't include the "Using Samba" book in the swat package, just a
+    symlink that points to the book included in the samba-doc package.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 13 Jan 2004 13:48:13 -0500
+
+samba (3.0.1-1) unstable; urgency=low
+
+  * New upstream version (closes: #225565)
+  * Add support in the dhcp hook for netbios scope, and handle better
+    the case of multiple DHCP-using interfaces (closes: #224109).
+  * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant
+    tail works. Thanks to Paul Eggert <eggert@twinsun.com>.
+  * Include /usr/bin/ntlm_auth in the winbind package.
+  * Run configure with "--with-piddir=/var/run/samba" since the
+    default got changed to /var/run in this new upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 30 Dec 2003 16:21:31 -0500
+
+samba (3.0.0final-1) unstable; urgency=low
+
+  * It's here, it's here, it's here, Samba 3.0.0 is here!
+  * Incorporate Japanese debconf translations; thanks to Kenshi Muto
+    <kmuto@debian.org>. (closes: #209291)
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 25 Sep 2003 13:39:28 -0400
+
+samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 13 Sep 2003 08:47:56 -0400
+
+samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low
+
+  * New upstream release. Last Release Candidate according to the
+    Samba Team. Samba 3.0.0 is around the corner, in a week or so.
+    - Fixes use of non-PIC code in nss shared libraries (closes: #208773)
+    - 'unix password sync' option now runs the unix password program as
+      root again (closes: #209739).
+  * One-line patch to make packages buildable with distcc (closes: #210227)
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  9 Sep 2003 07:57:16 -0400
+
+samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low
+
+  * New upstream release.
+  * Link against libgnutls7 instead of libgnutls5. (closes: #208151)
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  2 Sep 2003 21:37:13 -0400
+
+samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low
+
+  * New upstream version (skipped samba 3.0.0beta3 due to time
+    constraints.) This ugly version number will go away when the final
+    Samba 3.0.0 is released.
+  * Drag new unpackaged tools into the packages: smbcquotas (smbclient),
+    vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8)
+    manpage (samba). (closes: #151158)
+  * Switch to DH_COMPAT level 4:
+    - no explicit conffile listings needed
+    - the postinst for libsmbclient is now completely autogenerated
+    - use the default init script handling (with support for
+      invoke-rc.d) in debhelper, instead of the currently buggy upgrade
+      path (closes: #185439)
+    - add support for ${misc:Depends} in control for those packages with
+      init scripts
+  * Add versioned dependency on libpam-runtime and change
+    /etc/pam.d/samba to use the new common PAM config blocks.
+  * New python2.3-samba package (old python2.2-samba is no more.)
+    (closes: #206171)
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 25 Aug 2003 17:05:14 -0400
+
+samba (3.0.0beta2-1) unstable; urgency=low
+
+  * New upstream release
+    - The smb.conf(5) manpage documents config options again
+      (closes: #197963).
+    - Handling of winbind/idmap has been restructured; domain members
+      should be able to map domain accounts to local accounts again
+      (closes: #196815).
+    - Use the locale charset for 'display charset' by default
+      (closes: #194406).
+    - Fix for segfault in smbclient when using the -b option
+      (closes: #196833).
+    - Handle an empty 'passdb backend' list gracefully (closes: #193946).
+  * Don't set 'display charset' anymore on upgrade, since this is now
+    grabbed from the locale by default -- a much better option.
+  * Removed time.c.patch which is now in the upstream sources.
+  * Update FHS patch for two new tdb files (netsamlogon_cache.tdb,
+    privilege.tdb).
+  * Remove python-linker.patch, since the Kerberos package has been
+    fixed to no longer use rpath
+  * Remove configure.patch: the hppa glibc bug this was added for is
+    long since fixed, and upstream isn't interested in supporting this
+    kludge.
+  * Update references to missing documentation in sample smb.conf file
+    (closes: #187632).
+  * Fix handling of krb5 link line, building on a patch from Stefan
+    Metzmacher <metze@metzemix.de>.
+  * Add patch so smbclient's tar support works with popt
+    (closes: #194921).
+
+ -- Steve Langasek <vorlon@debian.org>  Wed,  2 Jul 2003 20:59:09 -0500
+
+samba (3.0.0beta1-2) unstable; urgency=low
+
+  * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1)
+    to make sure we get the right shlib dependencies (closes: #193149).
+  * Update the dhcp config hooks so they're suitable for sourcing (i.e.,
+    don't call "exit") (closes: #196477).
+  * Bring package into line with current policy by adding support for
+    the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs)
+    by default
+  * Make sure libpam-smbpass is a self-contained DSO.
+  * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite
+    the server list.
+  * Fix python install script to ignore -Wl linker flags, as seen in the
+    output from the latest krb5-config.
+  * Add LDAP and Unicode information about upgrading from 2.2 to
+    README.debian.
+  * Remove dangerous and confusing browse options from the default
+    smb.conf (closes: #198804).
+  * Reorder smb.conf options for clearer grouping, and clarify the
+    comments.
+  * Add a default [print$] share to the sample smb.conf, and create the
+    necessary tree under /var/lib/samba/printers. (closes: #168173)
+  * s/winbind/idmap/ in smb.conf, since the option names have changed.
+  * Fix the patch for postexec handling, so that we chdir("/") at the
+    right time.
+
+ -- Steve Langasek <vorlon@debian.org>  Thu, 12 Jun 2003 15:02:00 -0500
+
+samba (3.0.0beta1-1) unstable; urgency=low
+
+  * New upstream version.
+    - fix for empty browselist bug (closes: #194553)
+    - fix for tab completion segfault in smbclient (closes: #194776)
+    - Samba now works as a domain member again without segfaulting
+      (closes: #194134, #194394, #194775)
+    - WinXP machines can join a Samba-controlled domain again
+      (closes: #195362)
+  * Build-depend on python-dev >= 2.2 instead of on just python-dev
+    (without version).
+  * Added Vorlon'n patch to source/lib/time.c to fix #194075.
+    (closes: #194075)
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun,  8 Jun 2003 22:26:43 -0400
+
+samba (2.999+3.0.alpha24-3) unstable; urgency=low
+
+  * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324)
+  * Rebuild against pristine Kerberos libs, to squelch warnings about
+    versioned symbols. (closes: #194431, #194396)
+
+ -- Steve Langasek <vorlon@debian.org>  Thu, 22 May 2003 15:32:00 -0500
+
+samba (2.999+3.0.alpha24-2) unstable; urgency=low
+
+  * Fixed description of the smbfs package. (closes: #194183)
+  * Negate the sense of the unixsam check when upgrading. (closes: #194234)
+
+ -- Steve Langasek <vorlon@debian.org>  Wed, 21 May 2003 12:21:53 -0400
+
+samba (2.999+3.0.alpha24-1) unstable; urgency=low
+
+  * New upstream version. (closes: #189354)
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 20 May 2003 13:55:57 -0400
+
+samba (2.999+3.0.alpha23-5) unstable; urgency=low
+
+  * Move the python package from section "net" to section "python".
+  * Make sure we use PIC code for python on all platforms.
+  * French translation of an additional debconf template, courtesy of
+    Christian Perrier <bubulle@debian.org>. (closes: #188832)
+  * Updated Brazilian Portuguese translation from André Luís Lopes
+    <andrelop@ig.com.br>.
+  * s/unixsam/guest/ everywhere, since the unixsam backend is now
+    deprecated. (closes: #190095)
+  * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not
+    only does using /tmp violate SELinux policies, it introduces the
+    possibility of data loss during the final copy if /tmp is a separate
+    filesystem. (closes: #189823)
+  * Pull in fix for SWAT, so that logins work again
+    (closes: #188255, #192077).
+  * Move passdb.tdb into /var/lib/samba, since it's not user-editable.
+  * Make sure with don't ship any .cvsignore files.
+  * Don't ship examples for python2.2-samba and samba-doc in an
+    "examples" directory inside another "examples" directory.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  6 May 2003 12:05:46 -0400
+
+samba (2.999+3.0.alpha23-4) unstable; urgency=low
+
+  * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all
+    non-RPC printing clients are working again.
+  * Change shlibs to 0 instead of 0.1.  The library already in the
+    archive is using this soname, and there are no packages depending
+    on libsmbclient, so skip changing the package name for now.
+    (closes: #188661)
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 11 Apr 2003 14:42:00 -0500
+
+samba (2.999+3.0.alpha23-3) unstable; urgency=low
+
+  * Put the Samba Python modules in /usr/lib/python2.2/site-packages/,
+    not in /usr/lib/python2.2/lib-dynload/.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed,  9 Apr 2003 19:49:25 -0400
+
+samba (2.999+3.0.alpha23-2) unstable; urgency=low
+
+  * New package python2.2-samba that includes the Python modules
+    included in the Samba sources. Feedback on these modules and the new
+    package is welcome, as we (Debian Samba maintainers) don't use them.
+    (closes: #170731, #173322)
+  * Move libsmbclient-dev from section "devel" to "libdevel".
+  * Fix panic action script to give a sensible error message instead of
+    an empty backtrace when we don't have permission to attach to the
+    process. (closes: #188164)
+  * Fix libpam-smbpass so that it really does something. (closes: #178245)
+  * Apply patch to fix printing-related segfaults. (closes: #188076)
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun,  6 Apr 2003 21:40:33 -0400
+
+samba (2.999+3.0.alpha23-1) unstable; urgency=high
+
+  * new upstream release, includes security fix for DSA-262
+  * tweak the debconf templates to avoid references to specific
+    front-ends (closes: #183718)
+
+ -- Steve Langasek <vorlon@debian.org>  Sun,  9 Mar 2003 14:58:00 -0600
+
+samba (2.999+3.0.alpha21-5) unstable; urgency=low
+
+  * touch up the package descriptions a little bit (caps, punctuation)
+  * remove addtosmbpass, which snuck back in when we weren't looking
+  * reverse the position of the wins server tag, after looking more
+    closely at the code (closes: #183061)
+  * fix a glitch in the Spanish .po that rendered it invalid, plus a typo
+  * updated Brazilian Portuguese templates (closes: #183295)
+  * fix a typo in upstream manpage (s/shave/share/) (closes: #180546)
+  * run sed before we run sed, to deal with crazybad special chars
+    in the workgroup name (!) (closes: #176717)
+
+ -- Steve Langasek <vorlon@debian.org>  Sat,  1 Mar 2003 15:14:00 -0600
+
+samba (2.999+3.0.alpha21-4) unstable; urgency=low
+
+  * add scripts to samba-common to grab the netbios-name-servers options
+    if we're running a DHCP client (closes: #38413)
+  * major rearrangement of build scripts: install target now operates on
+    debian/tmp, not debian/samba, so we can see when new files are
+    added and decide where to put them; several files that should have
+    been in samba-common but were in samba (for the above reason) --
+    smbcacls, -- have been moved, with a replaces: added.
+  * Fix rc script so that whitespace is consistent between inetd and
+    daemon modes (closes: #174677).
+  * smbclient -M must always connect to port 139, because port 445
+    doesn't support messaging and we can't do the port 135 stuff yet
+    (closes: #175292, #167859).
+  * Import the diff from upstream CVS, which has fixed a few bugs
+    (closes: #178219, #177583, #181467, #181487, #181603, #175864).
+    Remove a few patches of ours which are now superseded.
+  * Add po-debconf support to the tree, for better i18n.
+  * Install the libsmbclient.so symlink in the libsmbclient-dev package,
+    per policy (closes: #181466).
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 27 Dec 2002 00:37:00 -0600
+
+samba (2.999+3.0.alpha21-3) unstable; urgency=low
+
+  * Drop --with-ldapsam from the configure options, since this no longer
+    means what we thought it did.  Revert patch for changing the 'passdb
+    backend' defaults.
+  * Add patch from CVS HEAD to fix pdbedit segfault; postinst script
+    should work better now. (Closes: #173936)
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 22 Dec 2002 13:29:00 -0600
+
+samba (2.999+3.0.alpha21-2) unstable; urgency=low
+
+  * add CONFIGDIR to the set of directories exported in the install
+    target, so we don't try to write to /etc/ on the autobuilders.
+  * Reset the default 'passdb backend' value to something sensible, so
+    that we don't unnecessarily break upgrading systems (closes: #173731).
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 20 Dec 2002 09:13:00 -0600
+
+samba (2.999+3.0.alpha21-1) unstable; urgency=low
+
+  * new upstream release, many patches now incorporated upstream
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 16 Dec 2002 23:39:00 -0600
+
+samba (2.999+3.0.alpha20-4) unstable; urgency=low
+
+  * Remove obsolete comments about non-existant LDAP support in the
+    Debian Samba packages. (Closes: #165035)
+  * Apply patch for segfault in pam_smbpass when using the unixsam
+    backend.
+  * Drop support for nmbd in inetd, since it's not supported by
+    upstream and is reported to cause problems (closes: #23243, #137726,
+    165037).
+  * Clarify example printing configs in smb.conf (closes: #168174).
+  * Make sure nmbd still responds to SIGTERM if it has no interfaces to
+    listen on (closes: #168079).
+  * Fix to get samba working again on 64-bit archs, after a
+    pointer<->int size mismatch bug.  Already fixed in upstream CVS.
+  * Merge fix from CVS for broken libsmbclient.h references to internal
+    structures (closes: #162956).
+  * Add a default 'panic action' for Samba that will give us genuinely
+    useful debugging information after a crash.
+  * Fixed correct patch to example configurations in the libpam-smbpass
+    packages (closes: #169350).
+  * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead
+    (closes: #169682).
+  * Only ask the user for permission to edit if there's a chance of us
+    damaging something.
+
+ -- Steve Langasek <vorlon@debian.org>  Mon, 18 Nov 2002 19:53:00 -0500
+
+samba (2.999+3.0.alpha20-3) unstable; urgency=low
+
+  * Make sure smbstatus behavior is sane when Samba *has* been started,
+    as well as when it has not (closes: #164179).  Thank to Robbert Kouprie
+    <robbert@radium.jvb.tudelft.nl> for this patch.
+  * Not using 'killall' in any of the maintainer scripts (the last one
+    remaining was winbind.logrotate.) We now just use 'kill' to send
+    a SIGHUP to a specific PID (which is stored in a file in
+    /var/run/samba.)
+  * Do not depend on procps because we're not using killall anymore.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 15 Oct 2002 22:15:57 -0400
+
+samba (2.999+3.0.alpha20-2) unstable; urgency=low
+
+  * fix an off-by-one error in smbd/lanman.c, which should shut off the
+    flood of log messages (closes: #157432)
+  * add a --config-cache option to the configure invocation, since
+    autoconf 2.5 doesn't load config.cache by default (closes: #163504)
+
+ -- Steve Langasek <vorlon@debian.org>  Sat,  5 Oct 2002 01:40:00 -0500
+
+samba (2.999+3.0.alpha20-1) unstable; urgency=low
+
+  * new upstream release
+    - non-primary groups appear to work again (closes: #161271)
+  * the official beginning of the upstream 3.0 branch
+  * exit without error from smbstatus when no connections have
+    been seen yet (closes: #161489)
+
+ -- Steve Langasek <vorlon@debian.org>  Wed,  2 Oct 2002 19:02:00 -0500
+
+samba (2.999+3.0cvs20020906-1) unstable; urgency=low
+
+  * CVS update
+    - domain authentication works again (closes: #158698)
+  * Factor out common code in samba-common.config
+  * Handle character set settings in smb.conf on upgrade
+    (closes: #153913, #158770)
+  * Don't use killall in logrotate script; there are better ways
+    (closes: #160076)
+  * Ignore value of 'hostname lookups' for hosts allow/hosts deny
+    (closes: #154376)
+
+ -- Steve Langasek <vorlon@debian.org>  Sat,  7 Sep 2002 11:46:00 -0500
+
+samba (2.999+3.0cvs20020829-1) unstable; urgency=low
+
+  * CVS update.
+  * Move the smb.conf manpage to the samba-common package (closes: #159572)
+
+ -- Steve Langasek <vorlon@debian.org>  Thu, 29 Aug 2002 17:53:25 -0500
+
+samba (2.999+3.0cvs20020827-1) unstable; urgency=low
+
+  * CVS update. (Closes: #158508)
+  * Part 1 of 3 of the library separation patch that Vorlon wrote has
+    gone upstream - removed the patch from our patches/ directory.
+  * Debconf note to warn users that their smb.conf will be re-written
+    and changed if they use Swat to maintain it. (Closes: #158479)
+  * Fixed typo in samba.prerm.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Aug 2002 15:23:23 -0400
+
+samba (2.999+3.0cvs20020825-2) unstable; urgency=low
+
+  * scale back the tdbsam migration support, because of undesirable
+    side-effects; now always defaults to 'no'.
+  * strip out hyperactive library dependencies that are only needed by
+    smbd (closes: #155156).
+  * nuke any broken registry.tdb files left by previous CVS snapshots.
+  * support rolling back the smbpasswd->tdbsam conversion on downgrade,
+    since many people are likely to need to downgrade for a while.
+  * remove postrm handling of legacy directories, and add handling of
+    current ones.
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 28 Jul 2002 09:44:24 -0500
+
+samba (2.999+3.0cvs20020825-1) unstable; urgency=low
+
+  * CVS update. These packages are based on Samba 3.0alpha19 + any
+    code commited after 3.0alpha19 was released.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 25 Aug 2002 14:56:46 -0400
+
+samba (2.999+3.0cvs20020723-1) unstable; urgency=medium
+
+  * remove spurious line from samba.config
+  * migrate from smbpasswd to tdbsam
+  * re-add the pdbedit util and manpage
+  * compile in ldapsam support (closes: #146935)
+  * add PRIVATEDIR to the list of vars we override for the install
+    target, so Samba doesn't try to create /etc/samba (closes: #153746).
+  * fix makefile handling of LOGBASEDIR, so that logs always end up in
+    the right place (closes: 153727).
+  * Fixed bug in the FHS migration path that causes nmbd to read its
+    state from one location, but write it out to another. (closes: #154210)
+  * Make sure nmbd is always looking for wins.tdb in the same place.
+
+ -- Steve Langasek <vorlon@debian.org>  Fri, 19 Jul 2002 21:38:54 -0500
+
+samba (2.99.cvs.20020713-1) unstable; urgency=low
+
+  * first attempt for 3.0pre.
+  * only post a debconf note about moving logfiles if we're upgrading
+    from a version that had the logfiles in the old location
+    (closes: #152924).
+
+ -- Steve Langasek <vorlon@debian.org>  Sat, 13 Jul 2002 12:54:25 -0500
+
+samba (2.2.5-2) unstable; urgency=low
+
+  * No longer ship make_printerdef, which is deprecated. (closes: #63059)
+  * Clean up some empty directories from the samba package.
+  * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860).
+  * Clean up per-package documentation lists, to reduce clutter
+    (closes: #147638).
+  * Make sure we don't ship pdbedit's man page since we are still using
+    smbpasswd passwords. (closes: #152208)
+  * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find
+    it (closes: #148586).
+  * reorder postinst, so that installing samba-common from scratch loads
+    the debconf answers properly (closes: #151985).
+  * add lintian overrides for winbind, to eliminate some noise.
+  * rename pam_smbpass changelog to comply with policy.
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 23 Jun 2002 22:45:04 -0500
+
+samba (2.2.5-1) unstable; urgency=low
+
+  * New upstream release.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun,  9 Jun 2002 15:49:21 -0400
+
+samba (2.2.4+2.2.5pre1-1) experimental; urgency=low
+
+  * Getting ready for Samba 2.2.5.
+  * Remove patches/parse_spoolss.patch, now included upstream.
+  * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in
+    2.2.4-1. We don't use POSIX ACL support ourselves, so we'd
+    appreciate reports from those using this feature so we can
+    be sure this works.
+  * Fix the filename-matching algorithm used for smbtar's 'exclude'
+    functionality. (closes: #131571)
+  * Look for secrets.tdb in /var/lib/samba, and handle in the postinst.
+    This is not really a config file, because users don't edit it.
+    (closes: #147429)
+  * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen
+    <Tommi.Komulainen@iki.fi> for the patch. (closes: #144847)
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 28 May 2002 11:33:51 -0400
+
+samba (2.2.4-1) unstable; urgency=low
+
+  * New upstream release (closes: #144713)
+  * Building with POSIX ACL support (closes: #137819)
+  * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055)
+  * Compile with --with-automount, for NIS homedir support (closes: #123396)
+  * Add a proper 'flags' field to the mount entry we write to /etc/mtab;
+    fixes a display bug with mount (closes: #140397)
+  * Added logic to /etc/init.d/samba so a help message is printed out
+    when Samba is running from inetd _and_ we are not booting, i.e. the
+    user called the init script manually. Thanks to Francesco
+    Potorti <pot@gnu.org> for the suggestion on how to implement this.
+    (Closes: #139807, #140204)
+  * samba.postinst: added logic so we don't call /etc/init.d/samba if
+    we are running from inetd (this prevents the stupid help message
+    to be printed during package upgrades if we are running from inetd.)
+  * samba.prerm: idem.
+  * /etc/init.d/samba: delete stale PID files after nmbd and smbd are
+    stopped. This prevents start-stop-daemon from printing an ugly
+    error message when called from '/etc/init.d/samba stop'. I prefer
+    this than running start-stop-daemon with --oknodo because
+    start-stop-daemon might print other important error messages that with
+    --oknodo it would otherwise not print. (Closes: #102187, #109301)
+  * Patch from jerry@samba.org to fix parsing of spoolss structures.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 23 May 2002 23:16:52 -0400
+
+samba (2.2.3a-7) unstable; urgency=medium
+
+  * More README.debian updates.
+  * Neutralize the smb.conf 'lock dir' directive, which doesn't mean
+    what the FHS says it should, and causes us no end of grief.
+    (Closes: #122299)
+  * LPRng-handling patch so that jobs printed to recent versions of
+    LPRng show up properly as 'done' instead of 'paused' in the Windows
+    print queue.  Thanks to Jaroslav Serdula <serdula_jaroslav@vse.sk>
+    for this patch. (Closes: #139458)
+  * Applied patch from Urban Widmark <urban@teststation.com>
+    (smbfs upstream maintainer) to add a '-n' option to smbmount
+    that does the same as mount's '-n'. (Closes: #139590)
+  * Minor tweak to unpatch-source so we unpatch sources in the
+    reverse order we patched them.
+  * Don't depend on grep in samba.prerm to determine if Samba was
+    running before the upgrade starts.
+  * Tweak the wording of debconf templates.
+  * Incorporate debconf translations for French, Spanish and Portuguese;
+    thanks to Carlos Valdivia Yagüe <valyag@hotpop.com> (es),
+    Andre Luis Lopes <andrelop@ig.com.br> (pt_BR), and Philippe
+    Batailler and Denis Barbier <barbier@debian.org> (fr).
+    (closes: #142657, #142659, #141551, #141699, #141682)
+  * Fixed symlinks in the swat package so the point to /usr/share/doc/
+    instead of /usr/doc/. Added note to the description of the
+    swat packages that says that samba-doc must be installed for
+    the on-line documentation to work. Thanks to Torne Wuff
+    <torne@wolfpuppy.org.uk>. (Closes: #95437)
+  * 'dh_installinit -n' gives us no initscript handling -- we need to
+    handle all starting and stopping of daemons ourselves, which wasn't
+    happening in the {pre,post}rm scripts.
+  * Vary the priority of the debconf question "Do you want to generate
+    /etc/samba/smbpassd?" depending on whether the file already exists.
+    File exists -> priority 'medium', file does not exist -> priority
+    'low'. Changed priorities of all other questions from 'high' to 'medium'.
+
+ -- Steve Langasek <vorlon@debian.org>  Sat, 20 Apr 2002 17:48:27 -0400
+
+samba (2.2.3a-6) unstable; urgency=low
+
+  * Call db_stop as soon as we're done with debconf in the postinst, to
+    avoid hanging bugs (closes: #137813)
+  * Ony call 'update-inetd --add' on first installation, just as we only
+    call 'update-inetd --remove' on package purge.
+  * Bring our shipped smb.conf closer in line with the upstream
+    defaults: don't twiddle the send/recv buffer sizes, since the Linux
+    kernel already provides a much better default setting
+     (closes: #80966, #80934, #137415, #133477)
+  * Added libnss_wins.so to the winbind package (closes: #137201)
+  * Updates to README.debian.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 12 Mar 2002 10:57:40 -0500
+
+samba (2.2.3a-5) unstable; urgency=low
+
+  * Having multiple workgroup lines in your smb.conf, though wacky, is
+    perfectly valid.  Account for this in samba-common.config.
+    (closes: #137157)
+
+ -- Steve Langasek <vorlon@debian.org>  Sun, 10 Mar 2002 21:52:51 -0600
+
+samba (2.2.3a-4) unstable; urgency=low
+
+  * Fixed typo in samba.postinst. Cosmetic fixes there as well.
+  * Fix to improper usage of /usr/bin/tr in samba-common config script
+    (closes: #137744)
+
+ -- Steve Langasek <vorlon@debian.org>  Sat,  9 Mar 2002 14:14:02 -0500
+
+samba (2.2.3a-3) unstable; urgency=medium
+
+  * Make sure /etc/init.d/samba is executable before calling it
+    in the postinst. Quickly checked all other maintainer scripts
+    to make sure we are not calling an init script if it is not
+    executable. (closes: #137321)
+  * Fix up maintainer scripts to detect if samba was not running before
+    an upgrade. (closes: #33520, #130534)
+  * Make sure /etc/samba/ is included in the samba-common package.
+    Closes: #137157
+
+ -- Steve Langasek <vorlon@debian.org>  Fri,  8 Mar 2002 11:13:21 -0500
+
+samba (2.2.3a-2) unstable; urgency=low
+
+  * merge in debconf support:
+    - Moved all smb.conf-related questions to samba-common (smb.conf
+      is part of the samba-common package, not the samba package.)
+    - smb.conf is not a samba-common conffile anymore since it is
+      being managed by debconf. It is ABSOLUTELY necessary to make
+      sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes
+      made via debconf. In other words, any changes made by the user
+      should be honored by the debconf interface.
+    - samba.postinst now moves old log files from /var/log/ to
+      /var/log/samba/. There's a Debconf note that informs the user
+      the log files are stored now in a new location.
+    - debian/control:
+      + Make samba depend on debconf.
+    - New file debian/samba.templates.
+    - New file debian/samba.config.
+    - Re-worked debian/samba.postinst.
+      + Got rid of all /etc/samba/debian_config sillyness.
+    - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces
+      it.
+    - Removed debian/samba.prerm.
+    - Cleaned up /etc/init.d/samba.
+      + Added infrastructure for debconf.
+      + Got rid of all /etc/samba/debian_config sillyness.
+      + Got rid of /etc/samba/smbpasswd conversion stuff for
+        compatibility with versions of Samba < 2.0.0final-2.
+    (closes: #127959, #34408, #113594)
+  * make samba.postinst ignore the absence of /var/log/{s,n}mb*;
+    makes for a clean upgrade path.
+  * Building with MSDFS support (closes: #116793)
+
+ -- Steve Langasek <vorlon@debian.org>  Tue,  5 Mar 2002 14:14:33 -0600
+
+samba (2.2.3a-1) unstable; urgency=low
+
+  * New upstream version (closes: #135001)
+  * Potato builds were failing because debian/rules was not creating
+    debian/winbind/etc/logrotate.d/. A user having problems creating
+    Potato packages brought this to my attention. dh_installlogrotate
+    takes care of creating the directory for us, that's why we didn't
+    notice.
+  * Removed code that converts /etc/samba/smbpasswd from an ancient
+    format to the new format of Samba 2.0.0 and later.
+    Closes: #134375 - samba: postinst failed due to missing
+            /usr/bin/convert_smbpasswd.
+  * Re-organized FHS migration code in samba.postinst. Make sure we
+    don't fail when we move files that don't exist.
+    Closes: #133813 - samba: Install failed.
+  * Adding docs. to the libpam-smbpass package.
+  * Remove man pages for findsmb because we are not providing this
+    script.
+    Closes: #134181 - findsmb referenced, but not included.
+  * Removed replace.patch because it is now present upstream.
+  * Added patch from Jerry Carter to fix a problem when saving
+    document preferences for printing from NT clients.
+  * The real winbindd daemon is a forked process so we can't use
+    --make-pidfile when calling start-stop-daemon. Fixed
+    /etc/init.d/winbind to work around the issue. Thanks to
+    Lin Li <linl@xandros.com> for the patience and for reporting
+    the problems. Hopefully I got it right this time.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 20 Feb 2002 18:39:03 -0500
+
+samba (2.2.3-6) unstable; urgency=low
+
+  * Make sure there are actual files in /var/state/samba before trying
+    to move them (Closes: #133534, #133510).
+  * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly
+    again.
+
+ -- Steve Langasek <vorlon@debian.org>  Tue, 12 Feb 2002 09:19:29 -0600
+
+samba (2.2.3-5) unstable; urgency=low
+
+  * Whoops, missed a spot on the samba.postinst -- will fail badly if
+    /var/state/samba/ no longer exists.  Better get this fix into the
+    next upload. ;) (Closes: #133088)
+  * Regenerate configure only if it is older than configure.in.
+  * Fix smbd handling of network neighborhood lists, which was missed
+    in the FHS conversion (Closes: #133091)
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat,  9 Feb 2002 16:37:57 -0500
+
+samba (2.2.3-4) unstable; urgency=low
+
+  * FHS cleanup; files in /var are now properly sorted according to
+    their nature. (Closes: #102101)
+  * Remove patches to source/configure, since we now call autoconf to
+    regenerate this file cleanly.
+  * lintian fixes:
+      - Create winbind.conffiles and add /etc/logrotate.d/winbind and
+        /etc/init.d/winbind to it.
+      - Use a relative symlink for /usr/lib/cups/backend/smb.
+      - Removal of a .cvsignore file in the samba-doc package.
+  * winbind.init fixes:
+      - Corrected name of the pid file (Steve)
+      - Make start-stop-daemon create a pid file for winbindd since it
+        does not create one on his own.
+  * #DEBHELPER# is not needed in samba.postinst because we are adding
+    manually everything that debhelper adds automatically. In fact,
+    since we are calling update-rc.d without standard paramaters I
+    think we can't use #DEBHELPER#.
+  * Fix fatal syntax error in samba.prerm.
+
+ -- Steve Langasek <vorlon@debian.org>  Thu,  7 Feb 2002 13:12:08 -0500
+
+samba (2.2.3-3) unstable; urgency=low
+
+  * work on lintian-cleanness in the package (wrong permissions,
+    maintainer scripts in need of debhelpering)
+  * /lib/security/pam_smbpass.so is now being included in the
+    libpam-smbpass package only, and not in both the libpam-smbpass and
+    samba packages (which was the case prior to 2.2.3-3.)
+  * Instead of making our patch scripts executable in the rules file
+    we run them through /bin/sh.
+  * New 'winbind' package that has all the winbind stuff that was in the
+    samba package in 2.2.3-2 and before.
+  * Added replace.patch: patch from Jeremy Allison to fix problems when
+    replacing or overwriting files in a Samba share. Patch was sent to
+    the samba mailing list.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  5 Feb 2002 21:12:48 -0500
+
+samba (2.2.3-2) unstable; urgency=low
+
+  * add support to debian/scripts/{patch-source,unpatch-source} for
+    automatic updating and cleaning of <version.h>. This was a request
+    from the Samba Team: they wanted us to clearly mark our packages
+    so it is always known a user is running Samba with (possibly)
+    Debian-specific patches.
+  * Change init.d killscript link to K19samba, so we stop before autofs
+    (closes: 117327)
+  * Make our patch scripts executable in the rules file -- dpkg won't do
+    this for us (closes: #132415).
+
+ -- Steve Langasek <vorlon@debian.org>  Mon,  4 Feb 2002 09:51:00 -0600
+
+samba (2.2.3-1) unstable; urgency=low
+
+  * New upstream release (closes: #131228).
+  * Restructured build system that provides DBS-like separation of
+    patches
+  * Fix typo in smbfs description (closes: #116209).
+  * Use killall -q in logrotate.d script, to avoid spurious cron
+    emails (closes: #130100).
+
+ -- Steve Langasek <vorlon@debian.org>  Sat,  2 Feb 2002 19:56:18 -0500
+
+samba (2.2.2-12) unstable; urgency=high
+
+  * (Steve) Patch for source/client/client.c.
+    Closes: #86438 smbclient: Transfering several GB causes the average
+            speed to be messed up.
+  * Uploading with urgency=high to expedite the move from unstable
+    to testing because of the security problem fixed in -11.
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 25 Jan 2002 22:31:12 -0500
+
+samba (2.2.2-11) unstable; urgency=low
+
+  * Building with --with-libsmbclient. We have created two new
+    packages: libsmbclient and libsmbclient-dev. Hopefully this
+    will help some people that want to add the capability of
+    speaking SMB to their applications.
+    Closes: #117132 - libsmbclient support library?
+  * (Steve) Make swat do the right thing when reading (parsing)
+    the saved preferences in smb.conf.
+    Closes: #55617 swat mutilates the linpopup message command.
+  * Updated README.Debian. Updated descriptions in debian/control.
+  * Remembered to bump up version number in source/include/version.h
+    (need to automate this or else I'll keep forgetting.)
+  * (Steve) one liner for source/web/diagnose.c.
+    Closes: #106976 - smbd/nmbd not running message with swat/linuxconf.
+  * Added '|| true' to the post-rotate script so logrotate doesn't
+    fail if either nmbd or smbd is not running.
+    Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process.
+  * Fixed incorrect file locations in swat's man page and added a
+    Debian-specific note to /usr/share/doc/swat/README.
+    Closes: #71586 swat: needs documentation fixes for debian.
+  * smbmount in the smbfs package does not have the setuid bit set.
+    Apparently, smbmount uses libsmb without checking the environment.
+    Thanks to Christian Jaeger <christian.jaeger@sl.ethz.ch> for
+    finding the local root exploit.
+  * Applied old patch from Jerry) Carter" <jerry@samba.org> to correct
+    the following two problems in Samba 2.2.2:
+    - %U and %G could not be used in services names
+      in smb.conf.
+    - %G would fail to be expanded in an "include = ..."
+      line.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 19 Jan 2002 21:35:26 -0500
+
+samba (2.2.2-10) unstable; urgency=low
+
+  * (Steve) Add missing manual pages.
+    Closes: Bug#128928: missing manpages in smbfs.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 13 Jan 2002 14:39:55 -0500
+
+samba (2.2.2-9) unstable; urgency=low
+
+  * (Steve) Fix broken URL's in HTML docs.
+    Closes: Bug#17741: bad links in html docs (at last!!!)
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 11 Jan 2002 13:37:07 -0500
+
+samba (2.2.2-8) unstable; urgency=low
+
+  * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in
+    debian/control so rpcclient.1, which was in samba-2.2.2-5, does not
+    cause problems now that it is part of smbclient (>= 2.2.2-6).  Closes:
+    Closes: Bug#128684: error upgrading smbclient in sid.
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 11 Jan 2002 11:42:40 -0500
+
+samba (2.2.2-7) unstable; urgency=low
+
+  * (Steve) Patch to make behavior honor what the docs. say about "hosts allow"
+    taking precedence over "hosts deny".
+    Closes: Bug#49249: swat: error with host deny ?!
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 10 Jan 2002 12:36:58 -0500
+
+samba (2.2.2-6) unstable; urgency=low
+
+  * (Steve) Adds manpage for rpcclient to the proper file,
+    removes smbtorture from the distro because this tool isn't intended for
+    widespread consumption.
+    Closes: #63057 - no manual page for smbtorture.
+  * (Steve) Removed -gnu from the configure arguments (--build, --host) in
+    debian/rules so config.sub is able to properly create the host and target
+    tuples.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed,  9 Jan 2002 14:39:51 -0500
+
+samba (2.2.2-5) unstable; urgency=low
+
+  * Fixes from vorlon:
+  * Use /usr/bin/pager instead of more.
+    Closes: #125603: smbclient violates pager policy.
+  * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd
+    a SIGHUP to have the log files reopened, fixes to
+    /etc/logrotate.d/samba.
+    Closes: #127897: log file rotation.
+    Closes: #118277: /etc/logrotate.d/samba not listed in conffiles.
+  * s/covert/convert/.
+    Closes: #121653 probable typo in install message.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun,  6 Jan 2002 03:14:58 -0500
+
+samba (2.2.2-4) unstable; urgency=low
+
+  * Applied patch from Steve to work around problem in glibc that affects the
+    HPPA architecure. The patch detects the error condition at configure time
+    and compiles without LFS support if necessary.
+    Closes: Bug#126763: samba completely broken on hppa.
+  * Including unicode_map.1251.
+    Closes: Bug#126719: samba-common: unicode_map.1251 missing.
+  * Updated smbd daemon version to match Debian package version.
+    Closes: Bug#127199: Package version and smbd daemon version don't match.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 31 Dec 2001 14:32:47 -0500
+
+samba (2.2.2-3) unstable; urgency=low
+
+  * Added some spaces in package description in debian/control.
+    Closes: #120730 - missing spaces in package description for nice
+            alignment.
+  * Spelling fixes.
+    Closes: #125328, #125329, #125330, #125367, #125365, #125403.
+  * Steve Langasek <vorlon@debian.org> is the co-maintainer of the Debian
+    Samba packages!!! Added him to the uploaders field in debian/control.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 18 Dec 2001 00:54:25 -0500
+
+samba (2.2.2-2) unstable; urgency=low
+
+  * Backed out changes to source/filename.c per Andrew Tridgell's request.
+    This changes were introduced in 2.2.1a-7 as an attempt to fix #47493.
+    Tridge found out that they break smbd.
+  * Changed version number in source/includes/version.h so it is clear that
+    this is a version of Samba packaged for Debian. This is another request from
+    Tridge and will help the Samba Team to get bogus bug reports.
+  * Added Samba-HOWTO-Collection.pdf and other README files to the
+    /usr/share/doc/<package>/ directories.
+  * Installing libnss_winbind.so and pam_winbind.so.
+    Closes: #116790: nss and pam modules for winbind missing.
+  * Removed user-emacs-settings from changelog.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 29 Oct 2001 19:16:26 -0500
+
+samba (2.2.2-1) unstable; urgency=low
+
+  * New upstream version.
+  * Temporary fix for #113763 (Steve Langasek)
+  * Quick hack to avoid smbmount reveal password length. Please note
+    that even with this hack there is a small window when password is
+    completely visible with 'ps aux'. There are other methods that should
+    be used to automate mounting of SMB shares.
+    Closes: #112195: smbmount-2.2.x reveals password length.
+  * Applied patch from Steve Langasek <vorlon@debian.org> to prevent
+    forcing use of setresuid() in Sparc.
+    Closes: #112779: samba build forces use of setresuid, which causes
+                     smbd to fail on Sparc.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 15 Oct 2001 10:26:10 -0400
+
+samba (2.2.1a-9) unstable; urgency=low
+
+  * Replaced $(LD) with $(CC) all the way through source/Makefile.
+    Closes: #111036: ld shouldn't be used to link shlibs.
+  * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and
+    sgml as well.)
+    Closes: #110963: smb.conf: mail should be /usr/bin/mail.
+  * Documented better smbclient's -W behavior. Patch from Steve
+    Langasek.
+    Closes: #53672: smbclient: -W flag is interpreted as domain, not
+            workgroup.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  4 Sep 2001 23:10:41 -0400
+
+samba (2.2.1a-8) unstable; urgency=low
+
+  * Set some reasonable default perms for the samba logdir (again,
+    thanks to vorlon :-)
+    Closes: #72529: insecure permissions on log files.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 26 Aug 2001 15:40:47 -0400
+
+samba (2.2.1a-7) unstable; urgency=low
+
+  * Another attempt at fixing #47493. Patch from Steve Langasek
+    <vorlon@netexpress.net>. Let's keep our fingers crossed Steve!
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 26 Aug 2001 13:37:06 -0400
+
+samba (2.2.1a-6) unstable; urgency=low
+
+  * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing
+    smbd to die with signal 11 under some unidentified situations.
+    Closes: #109774: Latest debian version breaks printer driver download.
+    Closes: #109946: not all files appear in samba-exported directories.
+  * Another patch from Steve Langasek. This one adds quotes around
+    printer names for print systems it's reasonable for Debian to
+    support. Together with the patch in #29957 (see changelog for
+    2.2.1a-4), this should take care of the problems with multi-word
+    printer names in Samba.
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 24 Aug 2001 21:12:27 -0400
+
+samba (2.2.1a-5) unstable; urgency=low
+
+  * Important changes that affect how Samba is built on Debian
+    machines are implemented in this release. All of this changes
+    were suggested by the energetic Steve Langasek <vorlon@debian.org>,
+    and his arguments were so sound and reasonable that I decided
+    to implement them. Here's Steve's original changelog:
+
+       * Fix up the build system to avoid needing to run configure
+         as root to answer questions we already know the answers to.
+       * In the process, make surprising progress towards being able to
+         cross-compile the samba packages.
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 24 Aug 2001 01:08:06 -0400
+
+samba (2.2.1a-4) unstable; urgency=low
+
+  * Fixed typo in smbmount's mount page.
+    Closes: #109317: smbfs: mistype in smbmount manpage.
+  * Included symlink to smbspool to better support CUPS printing.
+    Closes: #109509: include symlink for cups samba support.
+  * Applied patch from Steve Langasek <vorlon@netexpress.net> to
+    fix bug #29957.
+    Closes: #29957: samba strips trailing " from strings in smb.conf.
+  * First attempt at fixing #47493. Another patch from Steve "I want
+    a bug-free Samba" Langasek.
+    Closes: #47493: Samba doesn't handle ':' in dir names right.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 21 Aug 2001 23:26:38 -0400
+
+samba (2.2.1a-3) unstable; urgency=low
+
+  * Steve Langasek <vorlon@netexpress.net> has been hard at work in
+    the last few days looking at the long list of open bugs filed
+    against the Samba packages. I don't know how to thank him. It's been
+    a pleasure working with Steve, and all the fixes, patches, etc. in
+    this release come from him. The bug list is greatly reduced thanks
+    to Steve's efforts.
+  * Steve's additions/modifications/patches/etc. are:
+    - New package that (libpam-smbpass) provides pam_smbpass. Before, this
+      was provided in another package but now the sources are part of
+      the Samba sources so we can start providing it from here.
+      Closes: #107043 - pam_smbpass now present in Samba source,
+        should be built from there
+    - Patch to source/smbd/service.c that allows admins to call
+      /bin/umount from the root postexec of a Samba share.
+      Closes: #40561 - samba pre/postexec commands do not work.
+    - Clear TMPDIR before starting smbd in /etc/init.d/samba.
+      Closes: #51295 - Problems with Samba and TMPDIR.
+    - Correction to documentation of "guest only".
+      Closes #38282 - "guest only" share still requires a password.
+  * Applied patch from Santiago Vila <sanvila@unex.es> to convert
+    /usr/sbin/mksmbpasswd from a shell script into a real awk script.
+    Sorry it took so long, Santiago; I hadn't realized you even
+    provided a patch :-)
+    Closes: #77891 - mksmbpasswd could be a real awk script.
+  * Updated description of the smbfs and smbclient packages. Also have
+    each package recommend the other.
+    Closes: #108650: Should suggest or recommend smbfs.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 13 Aug 2001 22:21:55 -0400
+
+samba (2.2.1a-2) unstable; urgency=low
+
+  * Build-depends: depend on debhelper (>=2.0.103).
+    Closes: #105795: Build-Depends are wrong.
+  * Run samba's preinst and postinst scripts without -e so failed commands
+    do not abort installation.
+    Closes: #106384: postinstall crashes abnormally. (And really closes
+      #104471.)
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 26 Jul 2001 00:30:37 -0400
+
+samba (2.2.1a-1) unstable; urgency=low
+
+  * New upstream version.
+  * Make sure samba's postinst script exits with a zero status.
+    Closes: #104471: Samba postinst problem.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 12 Jul 2001 21:55:21 -0400
+
+samba (2.2.1-1) unstable; urgency=low
+
+  * New upstream version.
+    Closes: #103339: config.guess and config.sub update required.
+    Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to
+                    incompatibility with PAM.
+    Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2.
+    Closes: #95777: Samba 2.2 is unable to join or authenticate against
+                    Samba 2.2 PDC domain.
+    Closes: #68842: samba should use PAM for password changing (I
+                    haven't personally tried this one, but it's been
+                    advertised this works.)
+    Closes: #102506: PAM account checking fails.
+    Closes: #102518: Complains about unknown paramter "obey pam
+                     restrictions"
+    Closes: #94774: Build failure on PARISC machines.
+  * Moved away from /etc/cron.weekly/samba for log file rotation.
+    Now using logrotate.
+    Closes: #95548: typo in /etc/cron.weekly/samba.
+    Closes: #74951: nmbd does not rename its log file.
+  * Removed Debian-specific addtosmbpass.8 man page since this script
+    is not longer provided upstream. Users should use the smbpasswd
+    program instead.
+  * Updated sample /etc/samba/smb.conf to reflect the recent changes
+    affecting handling of PAM authentication. Also updated
+    /etc/pam.d/samba.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 11 Jul 2001 00:44:14 -0400
+
+samba (2.2.0.final.a-1) unstable; urgency=high
+
+  * New upstream version (contains security fix from DSA-065-1.)
+    Closes: #97241: samba 2.2.0 fails to process hostnames in
+      "hosts allow" config line.
+  * Removed Debian-specific addtosmbpass.8 man page since this script
+    is not longer provided upstream. Users should use the smbpasswd
+    program instead.
+    Closes: #98365: addtosmbpass is missing from 2.2.0.final-2.
+  * Updated sample /etc/samba/smb.conf to reflect the recent changes
+    affecting handling of PAM authentication. Also updated
+    /etc/pam.d/samba.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 24 Jun 2001 11:11:59 -0400
+
+samba (2.2.0.final-2) unstable; urgency=low
+
+  * Added libcupsys2-dev to Build-Depends.
+  * Samba depends now (again) on netbase so update-inetd is always
+    available for the Samba maintainer scripts.
+    Closes: #86063: Fails to uninstall if inetd is not installed.
+  * Updated source/config.{sub,guess} so ARM built doesn't fail.
+    Closes: #94480: config.sub out of date; can't build on arm.
+    Closes: #85801: config.sub/guess out of date.
+  * Not using brace expansion, i.e. {foo,bar} in any of the maintainers
+    scripts nor in debian/rules.
+    Closes: #88007: samba postrm has is not POSIX sh compliant.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 21 Apr 2001 17:27:18 -0400
+
+samba (2.2.0.final-1) unstable; urgency=low
+
+  * New upstream release. Lots of new things. See WHATSNEW.txt.
+  * Goofy version number because of my stupidity when assigning version
+    numbers to the CVS packages I have been uploading to experimental.
+    Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release
+    will follow soon.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 17 Apr 2001 22:58:14 -0400
+
+samba (2.2.0.cvs20010416-1) experimental; urgency=low
+
+  * CVS update.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 16 Apr 2001 21:25:15 -0400
+
+samba (2.2.0.cvs20010410-1) experimental; urgency=low
+
+  * CVS update.
+  * Added libreadline4-dev to Build-Depends.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 10 Apr 2001 16:53:45 -0400
+
+samba (2.2.0.cvs20010407-1) experimental; urgency=low
+
+  * CVS update. Includes what is in 2.2.0alpha3.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat,  7 Apr 2001 16:00:33 -0400
+
+samba (2.2.0.cvs20010316-1) experimental; urgency=low
+
+  * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch
+    from Samba CVS.
+  * Not compiling rpctorture as it has compile errors. Change in
+    debian/rules.
+  * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now
+    the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is
+    needed to use smbfs. Updated debian/control, debian/rules and
+    README.Debian to reflect this change.
+  * Added to swat a versioned dependency on samba (so a user is forced to
+    install a new version of swat each time a new version of samba is
+    installed.)
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 18 Mar 2001 14:21:14 -0500
+
+samba (2.0.7-5) unstable; urgency=medium
+
+  * Transition from suidmanager to dpkg-statoverride.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 18 Jan 2001 23:51:56 -0500
+
+samba (2.0.7-4) unstable; urgency=medium
+
+  * Applied Urban Widmark <urban@teststation.com> fixes to smbmount. Urban
+    is the maintainer of the smbfs in the kernel and of the userland
+    utilities.
+  * Links to HTML documents are correct now.
+    Closes: #69439: swat: Broken help file symlinks
+    Closes: #72615: samba-doc directory changed: removed htmldocs from path
+    Closes: #75847: swat: Wrong symlink
+    Closes: #66857: Wrong links to html documents.
+    Closes: #77912: misplaced documentation symlinks for swat
+  * Building Samba with CUPS support. For this I reverted the change to
+    source/configure.in that I did in 2.0.7-3 and re-ran autoconf.
+    Closes: #59038: samba: not compiled with cups support.
+  * Fix against previous known/unknown user time difference patch to swat
+    (make username / password lookups take the same time.) Remove CGI
+    logging code in Swat.
+    Closes: #76341 - Security holes in swat
+  * Updated Build-depends.
+  * Updated debian/copyright to refer to the correct location of the GPL.
+  * debian/rules: changed DESTDIR to `pwd`/debian/samba (was
+    `pwd`/debian/tmp.)
+  * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some
+    strange reason dh_installdirs is not creating debian/tmp/ so I needed
+    to tweak everything to install stuff in debian/samba rather than in
+    debian/tmp.)
+  * debian/control: changed section of samba-docs to 'doc' (was 'docs')
+  * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules
+    and source/scripts/installswat.sh.)
+  * Fixed (by tweaking debian/rules)
+    /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid.
+  * Added "Provides: samba-client" to smbclient's section in control.
+    Closes: #71143: smbclient: Smbclient should provide samba-client.
+  * Fix for desired_access being zero in map_share_mode() (patch to
+    source/smbd/nttrans.c.) Thanks to Gary Wilson
+    <wilsong@sergievsky.cpmc.columbia.edu> for bringing this patch to my
+    attention.
+  * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and
+    2.2.x kernels even when the build is done in a system running
+    a 2.2.x kernel.
+    Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but
+                    doesnt depend on it.
+    Closes: #72758: README.Debian should comment on 2.0.x kernels.
+    Closes: #56935: Samba 2.0.6 and Kernel 2.0.x.
+    Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info.
+    Closes: #60580: samba: failed to set gid.
+    Closes: #64280: Samba panics, can't set gid.
+    Closes: #66816: Must deal with brokenness under 2.0.x.
+    Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK.
+    Closes: #69735: PANIC: failed to set gid
+    Closes: #66122: "smbclient -L localhost -U%" returns with "tree
+                    connect failed: code 0".
+    Closes: #57637: Samba says tree connect error.
+    Closes: #58015: potato samba wins support is broken.
+  * Fixed comments in sample smb.conf to point to the correct location.
+    Closes: #69578: comments in smb.conf points to wrong path.
+  * Move codepages from /etc/samba/codepages/ to
+    /usr/share/samba/codepages/.
+    Closes: #63813: samba; codepages should go in /usr/lib.
+  * Moved /var/samba/ to /var/state/samba/.
+    Closes: #49011: samba package not FHS compliant.
+  * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain()
+    is found.
+    Closes: #44558: netgroup support missing in samba 2.0.5a-1.
+  * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and
+    --exec. Got rid of --exec so --pidfile works.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Jan 2001 00:15:57 -0500
+
+samba (2.0.7-3) frozen unstable; urgency=high
+
+  * Release manager: this closes a RC bug.
+  * Commented out the section in source/configure.in that auto-detects
+    CUPS support and then ran autoconf to generate a new configure
+    script. This was done to prevent machines that have libcupsys-dev
+    installed from detecting CUPS support and adding an unwanted
+    dependency on libcupsys. This way the whole printing system
+    won't break on upgrades. CUPS support should be added after
+    Potato is released.
+    Closes: #65185: samba-common: Upgrading removes printing system.
+    Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys.
+  * Updated README.debian.
+    Closes: #64594: Old README.Debian in /usr/share/doc/samba.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 20 Jun 2000 19:16:04 -0400
+
+samba (2.0.7-2) frozen unstable; urgency=high
+
+  * Release manager: this closes RC bug #63839 that prevents Samba
+    to be built from source.
+  * Fixed a stupid typo in debian/rules that was preventing Samba
+    to be built from source.
+    Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir)
+  * I forgot to mention that O'Reilly's book "Using Samba" was donated
+    to the Open Source community. The book was included in Samba 2.0.7
+    in HTML format and is part of the Debian Samba package since
+    Samba 2.0.7-1.
+  * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help
+    files were supposed to be provided in both the swat and the samba-doc
+    packages. This duplication was a waste of space. Starting with
+    Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML
+    files are included only in samba-doc, and are accessed via symlinks
+    from within swat.
+    Closes: #58810: superfluous files in swat?
+  * Added a 'echo "."' to /etc/init.d/samba in the reload) section.
+    Closes: #63394: "echo ." missing in reload section of init.d script
+  * Fixed typo in docs/htmldocs/using_samba/ch06_05.html.
+    Closes: #64344: typo "encrypted passwords"
+  * Cleaned up samba's postrm script so important common files aren't
+    deleted when samba is purged. Created a samba-common.postrm script.
+    Closes: #62675: purging samba removes /etc/samba/smb.conf.
+    Closes: #63386: samba --purge removes /etc/samba dir even though
+            smbclient/smbfs/samba-common packages are still installed
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed,  3 May 2000 02:42:07 -0400
+
+samba (2.0.7-1) frozen unstable; urgency=low
+
+  * New upstream version. Dear Release Manager: please allow this
+    package to go to frozen as it contains fixes to a _lot_ of problems.
+    You can take a look at all the problems fixed by this release in
+    the official upstream announcement at
+    http://us1.samba.org/samba/whatsnew/samba-2.0.7.html.
+  * Added --with-utmp to add utmp support to smbd (this is new in Samba
+    2.0.7)
+  * Closes: #62148 - samba not rotating filled logs.
+  * Closes: #56711: Samba doesn't manage well long share name (please note
+      that it's possible to connect to shares with names longer than
+      14 characters but the share will be listed with a name truncated to
+      13 characters.)
+  * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67).
+    Closes: #50907 - logon path not working.
+    This is not a bug, it's just Samba doing the same thing an NT server
+    does. See WHATSNEW.txt and smb.conf's man page for details.
+  * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper
+    is not supported anymore.)
+  * Closes: #58994 swat: typo in swat description.
+  * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware
+    problems, person that reported the bug never came back.)
+    Closes: #54398 - smbadduser fails, looks for ypcat.
+  * Fixed swat's man page to include Debian specific installation
+    instructions. There's not necessary to edit /etc/services or
+    /etc/inetd.conf.
+    (Closes: #58616 - incomplete install config && incorrect installation
+      instructions.)
+  * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat
+    to look for smbd and nmbd in the wrong place when requested to start or
+    stop smbd or nmbd.
+    (Closes: #55028 - swat can't start samba servers.)
+  * Closes: #37274: smbclient does not honour pot. (Tested and seems to be
+    working now.)
+  * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492,
+    #50479, #39818, #54383, #59411.
+    (please re-open any of this if the problem still exists - I was unable
+    to confirm any of this because I could never reproduce them.)
+    Closes: #56699 - Samba's nmbd causes random kernel oops several
+      times in a row.
+    Closes: #62185 - nmbd's forking until no more file descriptors are
+      available.
+    Closes: #56247 - session setup failed: ERRSRV - ERRbadpw.
+    Closes: #52218 - Either wins proxy does not work, or I don't understand
+      it.
+    Closes: #43492 - intermittent problem changing password.
+    Closes: #50479 - Can't access windows 2000 shares with samba.
+    Closes: #39818 - samba-common: Upgrading Samba from the Slink version.
+    Closes: #54383 - samba-common: Missing /etc/smb.conf.
+    Closes: #59411 - smbclient: cannot browse Win2k shares.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 27 Apr 2000 16:07:45 -0400
+
+samba (2.0.6-5) frozen unstable; urgency=low
+
+  * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries
+    in this package are broken unless libcupsys1 is installed.
+    samba-common has a "grave" bug because of this. Instead of adding
+    libcupsys1 to the Depends: list of each package in debian/control
+    I investigated why dh_shlibs was not picking the dependency
+    automatically. It turns out that it's probably a bug in libcupsys1
+    because the format of its shlibs file is not correct. I fixed that
+    file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are
+    picked correctly. I'll talk to the libcupsys1 maintainer.
+
+    I think the addition of CUPS support to Samba is a big change that
+    should not go into Frozen. So, I decided to back up the addition
+    of CUPS support I did in 2.0.6-4 to minimize problems. I'll add
+    CUPS support again when I start working on Samba for Woody.
+    (Closes: #59337 - samba-common has a missing dependency)
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed,  1 Mar 2000 08:40:02 -0500
+
+samba (2.0.6-4) frozen unstable; urgency=low
+
+  * It seems that sometimes nmbd or smbd are not killed when upgrading.
+    I think it is because in samba's prerm script I was calling
+    start-stop-daemon with the --pidfile switch and in old versions of
+    Samba the nmbd and smbd daemons did not store their PIDs in a file in
+    /var/samba/. I changed debian/samba.prerm so the existence of the
+    PID files is checked before calling "start-stop-daemon --pidfile ..."
+    If the PID files do not exist then start-stop-daemon is called
+    without the --pidfile parameter.
+    (Closes: #58058 - upgrade from slink went badly)
+  * Fixed typo in description of swat package in debian/control.
+  * Installed libcupsys1-dev so the configure script picks up CUPS
+    and Samba is compiled with CUPS support. Also added libcupsys1 to
+    the Depends: list of package samba in debian/control.
+    (Closes: #59038 - samba not compiled with cups support)
+  * Added a small paragraph to debian/README.debian warning about possible
+    problems with the WINS code in Samba 2.0.6.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 28 Feb 2000 14:00:42 -0500
+
+samba (2.0.6-3) frozen unstable; urgency=low
+
+  * Applied patch posted by Jeremy Allison to the samba mailing list
+    that should take care of the internal errors reported in bug #52698
+    (release-critical). Wichert: please test as I never could reproduce
+    it here.
+    (Closes: #52698 - samba gets interbal errors)
+  * Moved samba-docs to the 'docs' section.
+    (Closes: #51077 - samba-doc: wrong section)
+  * Added reload capability to /etc/init.d/samba (only for smbd because
+    nmbd does not support reloading after receiving a signal).
+    (Closes: #50954 - patch to add reload support to /etc/init.d/samba)
+  * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so
+    Unix password syncronization works with the passwd program currently
+    in Potato. Thanks to Augustin Luton <aluton@hybrigenics.fr> for
+    the correct chat script.
+  * Stole source/lib/util_sec.c from the CVS tree of what will become
+    Samba 2.0.7 or whatever so we can use the same binaries under
+    both 2.0.x and 2.2.x kernels.
+    (Closes: #51331 - PANIC: failed to set gid)
+  * smbadduser is now provided as an example and it's customized for Debian.
+    I am not providing this script in /usr/sbin/ because then I would need
+    a dependency on csh, something that I don't want to do.
+    (Closes: #51697, #54052)
+  * Fixed the short description of the smbfs package in debian/control.
+    (Closes: 53534 - one-line description out of date).
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 23 Nov 1999 16:32:12 -0500
+
+samba (2.0.6-2) unstable; urgency=low
+
+  * samba-common now depends on libpam-modules (not on libpam-pwdb, which
+    I have been told is obsolete). I modified /etc/pam.d/samba accordingly
+    to reflect the change.
+    (Closes: Bug#50722: pam pwdb dependence?).
+  * The old /etc/pam.d/samba file which had references to pam_pwdb caused
+    smbd to die with a signal 11. The new /etc/pam.d/samba file fixes
+    this problem.
+    (Closes: #50876, #50838, #50698)
+  * Compiled with syslog support (use at your own risk: syslog support
+    is still experimental in Samba). I added the parameters "syslog = 0"
+    and "syslog only = no" to the sample smb.conf to avoid pestering
+    users that do not want Samba to log through syslog.
+    (Closes: Bug#50703 - syslog only option doesn't work)
+  * Removed the stupid code in the smbmount wrapper script that tries
+    to load the smbfs module if smbfs is not listed in /proc/filesystems.
+    (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled
+    as a module in the kernel)
+  * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so
+    'mount -t smb ...' works just as 'mount -t smbfs ...'.
+    (Closes: Bug#50763 - 'mount -t smb' doesn't work)
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 20 Nov 1999 18:53:35 -0500
+
+samba (2.0.6-1) unstable; urgency=low
+
+  * Samba 2.0.6 has been released. This is the first try of the Debian
+    Samba packages. I know for sure that smbd won't work properly on
+    2.0.x kernels because the patch that Wichert sent me does not apply
+    to the new source/lib/util_sec.c in Samba 2.0.6. That file was
+    completely re-written by Tridge.
+  * Updated README.Debian.
+  * A new client utility called smbspool appeared in Samba 2.0.6. I added
+    this utility to the smbclient package, although I haven't tried it yet.
+  * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount.
+    This is to be able to type "mouont -t smbfs ...". This symlink goes
+    in the smbfs package, of course.
+  * This new release should close the following bugs (some of these
+    are fixed for sure in this new upstream release, some others I could
+    not reproduce but I believe they are fixed if they were real bugs.
+    As always, please feel free to re-open the bugs if the problem is not
+    solved).
+      Closes: Bug#33240: icmp mask needs a bug workaround.
+      Closes: Bug#37692: samba: Has problems detecting interfaces.
+      Closes: Bug#38988: samba: Truly bizzare behavour from nmbd.
+      Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast
+                          properly.
+      Closes: Bug#44131: smbfs: no longer possible to set file and
+                          directory-modes.
+      Closes: Bug#46992: smbmount-2.2.x manpage wrong.
+      Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline.
+      Closes: Bug#46605: smbmnt segfaults.
+      Closes: Bug#48186: smbmount.
+      Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included].
+      Closes: Bug#47332: smbmount: could -f and -P be added back?
+  * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM
+    module). To succesfully add PAM support, I created /etc/pam.d/samba and
+    added this file as a conffile for the samba-common package. I also made
+    samba-common depend on libpam-pwdb.
+  * Added simple man pages for the wrapper scripts smbmount and smbmount.
+    (Closes: Bug#44705 - Missing smbmount man page)
+  * Installed libreadlineg2-dev in my system so smbclient now has a
+    "history" command and libreadline support :-)
+  * This time I did add a check to the smbmount wrapper script to see if
+    the kernel has support for smbfs, as suggested by Jeroen Schaap
+    <J.Schaap@physiology.medfac.leidenuniv.nl>. I mentioned in the changelog
+    for samba-2.0.5a-3 that I did this but I forgot at the end.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Nov 1999 12:08:15 -0500
+
+samba (2.0.5a-5) unstable; urgency=low
+
+  * I am sorry to report that the smbwrapper package is gone for the
+    moment. The reason for this is twofold: first of all, smbwrapper
+    is completely broken in Samba-2.0.5a (it compiles but it doesn't
+    run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second,
+    when I asked Andrew Tridgell (father of Samba) about the state of
+    smbwrapper he told me that Ulrich Drepper (head of the glibc project)
+    broke on purpose the glibc stuff in which smbwrapper is based.
+    Consequently, Tridge recommended me to compile Samba without
+    support for smbwrapper. When, I have no idea. Sorry folks. Here is
+    the original message I received from Andrew:
+
+    > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's
+    > smbwrapper doesn't even compile under glibc2.1.
+
+    yep, Ulrich deliberately broke it. It won't get fixed till glibc
+    allows the sorts of games it plays to work again. I suggest you turn
+    it off in your build scripts until that gets sorted out.
+
+  * Swat's file are now in /usr/share/samba/ instead of
+    /usr/lib/samba/ (bug #49011).
+  * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011).
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  2 Nov 1999 12:59:13 -0500
+
+samba (2.0.5a-4) unstable; urgency=low
+
+  * Applied patch from our fearless leader (Wichert) to fix the darn bug
+    that prevents Samba to work on 2.0.x kernels if it was compiled
+    in a system running a 2.2.x kernel. This closes #40645 (build uses
+    setresuid which doesn't work under 2.0.34 (does apparently under
+    2.2.x) ).
+  * Fixed the entry that swat's postinst script adds to /etc/inetd.conf
+    so it is '#<off># swat\t\tstream\ttcp\tnowait.400 ...' instead of
+    '#<off>#swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused
+    'update-inetd --enable swat' to leave the entry for swat disabled.
+    Thanks to Dave Burchell <burchell@inetnebr.com> for finding out
+    this problem. This closes #48762 (swat uses non-standard syntax to
+    comment out inetd.conf entry).
+  * /usr/sbin/swat does not think anymore that the smbd daemon lives
+    in /usr/local/samba/bin/. To fix this I am running now source/configure
+    with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba
+    'swat' fails: incorrect hardwired path in the binary).
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 31 Oct 1999 03:42:38 -0500
+
+samba (2.0.5a-3) unstable; urgency=low
+
+  * I am pretty darn busy with my MBA, I apologize for the long time it's
+    taking to squash bugs in the Samba packages.
+  * Built with debhelper v2 for FHS compliancy. Changed a couple of
+    things in debian/rules to accomodate for the new place for the docs.
+    I also had to change debian/{samba.postinst,samba.prerm,swat.postinst}
+    to make sure that the symlink from /usr/doc/xxx exists and points to
+    /usr/share/doc/xxx (the reason for this is that I am not letting
+    debhelper to create these scripts for me automatically).
+  * Built with latest libc6.
+  * smbfs: finally, the nasty bug that causes smbmount to die after
+    a while is gone thanks to Ben Tilly <Ben_Tilly@trepp.com>.
+    The problem was just a typo in source/client/smbmount.c.
+    This closes grave bug #42764 (smbmount dies) and #43341
+    (smbfs-2.2.x won't function after a while).
+  * Fixed the smbmount wrapper script to eliminate a bashism (closes
+    #45202 - "wrapper scripts use $* instead of "$@") and to recognize
+    2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize
+    kernel 2.3.x").
+  * Added a check to the smbmount wrapper script to see if the
+    kernel has support for smbfs, as suggested by Jeroen Schaap
+    <J.Schaap@physiology.medfac.leidenuniv.nl>.
+  * swat's man page is now part of the swat package, not of the samba
+    package. This closes #44808 (Samba has a man page for swat, but
+    the binary is not included).
+  * The interface program smbrun is not longer needed by smbd because
+    of the availability of execl() under Linux. Because of this, the
+    smbrun is not even being compiled. Since there is no need for smbrun
+    now, the smbrun man page was taken out of the samba package. This
+    closes #45266 (/usr/bin/smbrun missing).
+  * smbpasswd is now part of the samba-common package, and not part of
+    the samba package. This is to let administrators that do not want
+    to install a full Samba server administer passwords in remote
+    machines. This closes bug #42624 (smbpasswd should be included in
+    smbclient). This bug report also suggests that swat becomes part of
+    the samba package, that smbfs becomes part of the smbclient package,
+    and that the binary smbpasswd becomes part of the smbclient package.
+    I moved smbpasswd to the samba-common package but I am reluctant to
+    do the other things the bug report suggests.
+  * In order to keep dpkg happy when moving smbpasswd from the samba
+    package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)"
+    in the control section of the samba-common package and a
+    "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the
+    samba package (in debian.control).
+  * Samba is now being compiled with the "--with-netatalk" option. This
+    closes #47480 (Could samba be compiled with the --with-netatalk option).
+  * All packages that depend on samba-common have a versioned dependency
+    now. This was accomplished by adding "(= ${Source-Version})" to the
+    relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho
+    <gaia@iki.fi> for the hint. This closes #42985 (samba should probably
+    have a versioned depends on samba-common).
+  * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all
+    the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file).
+  * Added the smbadduser helper script to the samba package. This closes
+    #44480 (Samba doesn't come with the smbadduser program).
+  * Applied patch from szasz@triton.sch.bme.hu that prevents smbmount
+    to leave an entry in /etc/mtab for a share that could not be mounted
+    because of invalid user of password. The patch also allows smbumount
+    to unmount the share in the event that something goes wrong with the
+    smbmount process. This closes bug #48613 (Mount/umount problems +
+    patch) as well as #44130 (failed mount is still mounted).
+  * smbmount-2.2.x is now setuid root. This is needed for the patch
+    applied above to be effective. If smbmount-2.2.x is not setuid root
+    then an entry will be left in /etc/mtab even when the mount
+    fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid
+    for this to work.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 27 Oct 1999 10:36:13 -0400
+
+samba (2.0.5a-2) unstable; urgency=low
+
+  * This version is basically the same as 2.0.5a-1 but it was compiled
+    on a Potato system with glibc2.1. See below the change log for 2.0.5a-1
+    for more information.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jul 1999 02:25:29 -0400
+
+samba (2.0.5a-1) stable; urgency=high
+
+  * I'm back from the Honey Moon. We are pretty busy because we are moving
+    to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still
+    have plenty of things to pack and to do. Samba 2.0.5 was released
+    while I was in the Honey Moon and it is just now (almost 3 AM) when
+    I have time to package it.
+  * Because of the security problems fixed in 2.0.5, this upload goes
+    to both stable and unstable (the Security Team asked for this).
+  * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will
+    be compiled on a Potato system.
+  * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common
+    section in debian/control (as suggested by Steve Haslam
+    <araqnid@debian.org>) to fix the problems that appear when upgrading
+    from the Samba package in Slink. Please test this as I am completely
+    unable to do so. This should fix bug #39818 (Upgrading Samba from the
+    Slink version).
+  * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in
+    order to have defined several socket options when compiling with
+    Linux 2.2.x kernel headers - the fix is now upstream.
+  * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command
+    line syntax similar to the one used by the old smbmount (for 2.0.x
+    kernels). This means that the wrapper script is no longer necessary
+    so I removed it. In its place there is a simple wrapper script that
+    calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is
+    running.
+  * Because of the wedding, the Honey Moon, and our move to Pittsburgh,
+    I can't work on fixing other bugs in this release.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jul 1999 02:18:51 -0400
+
+samba (2.0.4b-3) unstable; urgency=low
+
+  * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files
+    and because of this /usr/bin/smbumount was part of the samba package
+    instead of part of the smbfs package.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu,  1 Jul 1999 01:51:24 -0400
+
+samba (2.0.4b-2) unstable; urgency=low
+
+  * Dark (and archive maintainers): please remove from Potato the smbfsx
+    binary package and also the old source package for smbfs. smbfs and
+    smbfsx have been merged starting with this version.
+  * Merged the old smbfs package with Samba. Now there is only one package
+    for the smbfs utilities and is called "smbfs". The package smbfsx
+    does not exist any more and this new smbfs package must be used
+    for both 2.0.x and > 2.1.x kernels.
+  * A wrapper script was added to handle the syntax change in smbmount
+    in the new smbfs utilities (required for kernels > 2.1.70). The
+    home page for this script is http://www.wittsend.com/mhw/smbmount.html.
+    Please _note_ that this will change (for good) in Samba 2.0.5 :-)
+  * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x
+    or smbumount-2.0.x depending on the kernel currently running.
+  * Not using -t for savelog in cron.weekly script.
+  * Recompiled without libreadlineg-dev (Samba does not seem to be using
+    it so unnecessary dependencies are produced).
+  * glibc2.1 build.
+  * Removed smbpasswd.8 man page from the debian/ directory because it is
+    now being provided upstream.
+  * Got rid of the ugly hack I put in source/lib/util_sock.c to have
+    IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the
+    autoconf stuff to #include <netinet/ip.h>. I've sent the patch to
+    Jeremy Allison so we have this upstream.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 28 Jun 1999 17:47:19 -0400
+
+samba (2.0.4b-1) unstable; urgency=low
+
+  * New upstream release. This release fixes the following Debian bugs:
+    #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and
+    #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy
+    Allison released Samba 2.0.4 and found out that there were a couple
+    of minor bugs so he released 2.0.4a. Then he found out about more
+    serious bugs and released 2.0.4b. I have built this package several
+    times between yesterday and today because of this. Now I am releasing
+    the Debian packages for Samba with what I believe will be the latest
+    release the Samba Team will make at least in the next 4 days (Jeremy
+    is taking a short vacation).
+  * Still compiling against glibc2.0 (sorry about that :-)
+  * Hacked source/smbwrapper/smbsh.c to fix the problem
+    of smbsh not finding the shared library smbwrapper.so. It looks
+    now in /usr/lib/samba/ for this file. This fixes #32971, #32989,
+    #33278, #34911 and #36317.
+  * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf
+    and /etc/samba/codepages/. This fixes #33128 (smbmount complains about
+    missing /etc/smb.conf).
+  * Package swat does not depend on httpd anymore (there's no need to).
+    This fixes #35795 (swat requires httpd).
+  * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and
+    smbumount-2.2.x. Same applies to the man pages.
+  * Changed minor type in smbmount's man page (changed "\"" by "\'"). This
+    fixes #34070 (wrong quotes in manpage).
+  * Used Fabrizio Polacco's <fpolacco@icenet.fi> procedure to create the
+    Debian package for Samba. This closes #35781 (samba has no pristine
+    source).
+  * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only
+    if the size of either is different than 0. Also, added comments at the
+    beginning of this script to explain how rotation of log files works in
+    Samba. Thanks to ujr@physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler)
+    for the suggestions. This closes #37490 (cron.weekly script rotates not
+    used [sn]mb.old files). As I side effect, this should also close
+    #31462 (still trouble with /etc/cron.weekly/samba).
+  * Check for old /etc/pam.d/samba file which is not provided by this version
+    of the Debian Samba package but was provided in older versions. If this
+    file exists we delete it. We check for this in the postinst. This closes
+    #37356 (samba put stuff in pam.d that pam complains about) and #34312
+    (libpam0g: questions during upgrade).
+  * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done
+    in the postinst script. This closes #35730 (Security problem with
+    /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1).
+  * I have just checked and it looks like #28748 (smbfsx doesn't "return ")
+    has been fixed. This might have been fixed since a long time ago.
+  * Long long standing bug #18488 (smbclient: internal tar is broken) is
+    closed in this release of Samba. The bug might have been closed for a
+    long long time, but I did not check for this before.
+  * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY"
+    message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works),
+    #34148 (warnings from smbd) and #35333 (samba warnings).
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 20 May 1999 00:35:57 -0400
+
+samba (2.0.3-1) unstable; urgency=low
+
+  * New upstream version.
+  * Removed the convert_smbpasswd.pl program I created and put in
+    /usr/doc/samba/ because there's a convert_smbpasswd script in the
+    upstream sources that does the same thing. I modified the postinst
+    script to use this script instead of the one I created.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 28 Feb 1999 01:35:37 -0400
+
+samba (2.0.2-2) unstable; urgency=low
+
+  * Updated the README.Debian file.
+  * Updated the description of the samba package in the control file.
+  * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now
+    installed setuid root as they should be. This was done by doing a
+    a "chmod u+s" for each binary in debian/rules and by creating the
+    file debian/smbfsx.suid.
+  * Minor patch to source/client/smbumount.c to allow normal users
+    to umount what they have mounted (problem was a kernel vs. libc6
+    size mismatch). I sent the patch upstream.
+  * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is
+    created.
+  * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to
+    debian/smbwrapper/usr/lib/samba/.
+  * Hacked source/smbwrapper/smbsh.c to fix the problem
+    of smbsh not finding the shared library smbwrapper.so.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Feb 1999 18:11:34 -0400
+
+samba (2.0.2-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Feb 1999 01:35:51 -0400
+
+samba (2.0.1-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat,  6 Feb 1999 06:51:18 -0400
+
+samba (2.0.0final-4) unstable; urgency=low
+
+  * The samba postinst made an unwarranted assumption that the file
+    /etc/samba/smbpasswd exists. If the file did not exist (which is
+    perfectly valid) the postinst will fail. This fixes #32953.
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri,  5 Feb 1999 23:32:46 -0400
+
+samba (2.0.0final-3) unstable; urgency=low
+
+  * Added to debian/control a "Depends: ${shlibs:Depends}" line for the
+    samba-common package so dependencies for this package are set
+    correctly (thanks to Dark for pointing this out).
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu,  4 Feb 1999 09:45:21 -0400
+
+samba (2.0.0final-2) unstable; urgency=low
+
+  * Finally!!! The first upload to unstable. Sorry for the delay folks
+    but I have been quite busy lately :-) Another reason for the delay
+    is that I wanted to ease the migration from Samba 1.9.18p10 and
+    before to Samba 2.0.0. I changed the location of the config. files
+    from /etc/ to /etc/samba/ and this made things a little bit harder.
+  * This package needs 2.2 kernel headers to compile (well, this is
+    true for the smbfsx package, all others compile fine with 2.0 kernel
+    headers).
+  * Created a preinst script for the samba package to take care of the
+    location migration of smb.conf (from /etc/ to /etc/samba/). The
+    preinst script also takes care of moving /etc/smbpasswd to its new
+    location (/etc/samba/).
+  * Created postinst and postrm scripts to add/remove an entry for swat
+    in /etc/inetd.conf.
+  * I had forgotten to install the sambaconfig script so I changed
+    debian/rules to install this script.
+  * Added a postrm script for the samba package (I had forgotten to add
+    this script to the new Samba packages after the migration from 1.9.18
+    to 2.0.0).
+  * Created a small Perl script that is called from the samba postinst
+    to convert the smbpasswd from the old format used in version prior
+    to 2.0.0 to the new one used in 2.0.0 and beyond.
+  * The upgrade process should be automatically now. Please let me know
+    of any problems you encounter.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 23 Jan 1999 09:34:10 -0400
+
+samba (2.0.0final-1) experimental; urgency=low
+
+  * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable
+    because I still have to work out the migration from the old
+    samba packages to the new ones. I also need to work more on the
+    new swat package.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 14 Jan 1999 22:40:02 -0400
+
+samba (2.0.0beta5-1) experimental; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  5 Jan 1999 00:37:57 -0400
+
+samba (2.0.0beta4-1) experimental; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 23 Dec 1998 18:37:45 -0400
+
+samba (2.0.0beta3-1) experimental; urgency=low
+
+  * New upstream version.
+  * I have just realized that the documentation patches (for man pages)
+    that I used for the 1.9.18 release are not longer necessary because
+    there was a major re-write of all the Samba documentation that added
+    the missing bits of information. So, I have just removed these minor
+    patches.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue,  8 Dec 1998 12:00:30 -0400
+
+samba (2.0.0beta2-1) experimental; urgency=low
+
+  * New upstream version.
+  * This new version fixes the potential security problem that
+    was posted to debian-private (using the "message command" parameter
+    to execute arbitrary commands from messages sent from LinPopUp).
+  * Changed /etc/init.d/samba to use one of the variables stored in
+    /etc/samba/debian_config to know how Samba is being run (from inetd or
+    as daemons) instead of grepping /etc/inetd.conf which may not exist
+    if the user is running xinetd (this fixes bug #29687 - assumes using
+    vanilla inetd)
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Nov 1998 23:32:03 -0400
+
+samba (2.0.0beta1-1) experimental; urgency=low
+
+  * First beta release of the samba-2.0.0 code. Before the beta I was
+    working with sources downloaded directly from the CVS server. This
+    package goes into experimental and I plan to release the new
+    samba to unstable as soon as it gets out of beta.
+  * Created several packages out of the Samba sources. They are:
+    samba (nmbd and smbd daemons + related programs), smbclient (FTP
+    like command line utility to retrieve files from SMB servers),
+    swat (Samba Web Administration Tool), samba-common (common files
+    used by samba, smbclient and swat), smbfsx (smbfs utilities for
+    kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation).
+  * Refreshed debian/samba-doc.docs so recently added docs. are
+    installed in the samba-doc package. New additions include man
+    pages in the /usr/doc/samba-doc/htmldocs/ directory.
+  * Deleted Debian specific nmblookup(1) man page as it is now upstream.
+  * Added smbtorture to smbclient package.
+  * Moved rpcclient from the samba package to the smbclient package.
+  * The Samba daemons (nmbd and smbd) now create a PID file so I changed
+    all calls to start-stop-daemon to use the PID file.
+  * Fixed debian/rules to install mksmbpasswd (fixes #27655).
+  * Modified /etc/init.d/samba so nmbd is started without the -a (append
+    to the log file instead of overwrite) switch. The new behavior of
+    nmbd is to NOT overwrite log files, so the -a switch can be deleted
+    safely.
+  * Moved from debstd to debhelper.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu,  1 Oct 1998 08:37:41 -0400
+
+samba (1.9.18p10-5) frozen unstable; urgency=high
+
+  * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than
+    the one I was trying to fix: in /etc/init.d/samba I got rid of the test
+    that tells us whether the Samba daemons are running from inetd or as
+    standalone daemons. I corrected the problem by editing again
+    /etc/init.d/samba to uncomment the test.
+  * Wishlist bug #28298 (typos in samba) was fixed.
+  * Wishlist bug #28309 (typos in smb.conf) was fixed.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 28 Oct 1998 09:11:47 -0400
+
+samba (1.9.18p10-4) unstable; urgency=low
+
+  * Minor patch to debian/rules to delete *substvars instead of only
+    substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz
+    <dmj@andrew.cmu.edu> for this).
+  * Small patch to source/shmem_sysv.c that eases compilation under
+    glibc-2.1 (thanks to Daniel <dmj@andrew.cmu.edu> for this).
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 17 Sep 1998 15:33:49 -0400
+
+samba (1.9.18p10-3) unstable; urgency=low
+
+  * Patched smbclient again to fix minor formatting problem introduced
+    by Magosanyi Arpad's smbclient patch.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu,  3 Sep 1998 11:03:23 -0400
+
+samba (1.9.18p10-2) unstable; urgency=low
+
+  * Sync'ed include files for the smbfs utilities with the ones in
+    kernel 2.1.119.
+  * Added to the /usr/doc/samba/examples/ directory a new script called
+    wins2dns (courtesy of Jason Gunthorpe <jgg@deltatee.com>) that
+    generates BIND sonze files for hosts in the WINS database.
+  * Patched smbclient to include enhancements by Magosanyi Arpad
+    <mag@bunuel.tii.matav.hu> that make scripting easier.
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 28 Aug 1998 13:34:54 -0400
+
+samba (1.9.18p10-1) stable unstable; urgency=low
+
+  * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
+    description of what has changed). I built a 1.9.18p9-1 but I
+    never released it because an obscure bug was found just a couple
+    of days before the official release, so the Samba Team stopped
+    the rollover of 1.9.18p9.
+  * Updated documentation (new files were added to the docs/ directory
+    that were not installed in /usr/doc/samba/).
+  * Fixed long standing bug #7695 (smb.conf's man page doesn't document
+    'printing=lprng') - I made a couple of changes to the man page to
+    include references to lprng.
+  * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it
+    is necessary to make samba suggest psmisc just because the postinst
+    script mentions to call killall. So, I removed all references to
+    "killall" in the scripts.
+  * Fixes bug #25999 (Samba does not by default work with unix password
+    sync): I added the "passwd program" and "passwd chat" parameters to
+    the sample smb.conf to reflect the Debian environment.
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 21 Aug 1998 08:59:18 -0400
+
+samba (1.9.18p9-1) unstable; urgency=low
+
+  * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
+    description of what has changed).
+  * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is
+    now part of the new upstream version.
+  * Corrected small typo in addtosmbpass' man page (fixes #25629).
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 11 Aug 1998 08:53:08 -0400
+
+samba (1.9.18p8-2) frozen unstable; urgency=medium
+
+  * Applied patch received from Jeremy Allison (Samba Team) that fixes
+    "grave" bug #23903 (samba maps username before authenicating with
+    NT password server).
+  * Added a "sleep 2" between "start-stop-daemon --stop" and
+    "start-stop-daemon --start" in /etc/init.d/samba so when this script
+    is called with the "restart" parameter the Samba daemons are restarted
+    properly. This fixes bug #24211 (init.d script doesn't restart).
+  * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to
+    avoid annoying warning messages.
+  * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096
+    and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't
+    find who sent this suggestion to me. If you are listening, drop me a
+    note and I'll put your name here :-)
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 29 Jun 1998 08:45:01 -0400
+
+samba (1.9.18p8-1) frozen unstable; urgency=low
+
+  * New upstream release that fixes _lots_ of "ugly" bugs. The list of
+    fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt).
+  * Fixed postinst to quote arguments to if [ arg .. ] constructs
+    (fixes #22881).
+  * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing
+    list) that solves a problem with username maps (the Samba Team did
+    not catch this problem before final 1.9.18p8).
+  * Made /etc/init.d/samba to print out a warning when Samba is running
+    from inetd and the user runs /etc/init.d/samba to start|stop|restart
+    Samba (there's no point on doing this because inetd will start the
+    daemons again when there is traffic on UDP port 137-139).
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 13 Jun 1998 00:18:25 -0400
+
+samba (1.9.18p7-4) frozen unstable; urgency=medium
+
+  * Fixes the serious problem of having the WINS name server
+    database getting deleted at boot time. That happened because the
+    WINS database was being stored under /var/lock/samba/ and all files
+    under /var/lock/ are deleted at boot time. The place where the WINS
+    database is stored was moved to /var/samba/.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 18 May 1998 20:24:29 -0400
+
+samba (1.9.18p7-3) stable; urgency=high
+
+  * Libc5 version for Bo (stable) that fixes the recently reported
+    security hole.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 18 May 1998 20:19:33 -0400
+
+samba (1.9.18p7-2) frozen unstable; urgency=low
+
+  * Added patches from the non-mantainer upload that make us able
+    to compile Samba on Alpha systems. This fixes bug #22379.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 13 May 1998 20:38:51 -0400
+
+samba (1.9.18p7-1) frozen unstable; urgency=low
+
+  * New upstream release (just bug fixes, no new functionality).
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 13 May 1998 11:47:32 -0400
+
+samba (1.9.18p6-2) frozen unstable; urgency=low
+
+  * Uploaded to frozen (I forgot to upload last version to frozen
+    so it got installed only in unstable).
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 12 May 1998 18:10:17 -0400
+
+samba (1.9.18p6-1.1) unstable; urgency=low
+
+  * non-maintainer upload for Alpha
+  * patch needed for source/quota.c (_syscall4() confusion)
+
+ -- Paul Slootman <paul@debian.org>  Tue, 12 May 1998 20:39:13 +0200
+
+samba (1.9.18p6-1) unstable; urgency=low
+
+  * New upstream release that fixes a possible buffer overflow.
+    This security hole was reported on BugTraq by Drago. The
+    previous Debian version (1.9.18p5-1) was not released because
+    1.9.18p5 and 1.9.18p6 were released very closely.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 11 May 1998 20:28:33 -0400
+
+samba (1.9.18p5-1) unstable; urgency=low
+
+  * New upstream release (no new funcionality, just bug fixes - see
+    /usr/doc/samba/WHATSNEW.txt.gz).
+  * Backed off Debian patches that were added upstream.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 11 May 1998 08:43:53 -0400
+
+samba (1.9.18p4-2) frozen unstable; urgency=low
+
+  * Patched smbclient(1) man page to not reference the unsopported
+    -A parameter (fixes #6863).
+  * Changes to start nmbd with the -a option (in /etc/init.d/samba
+    and in the entry added to /etc/inetd.conf).
+  * Fixed typo in sample smb.conf (fixes #21484).
+  * Fixed yet another typo in sample smb.conf (fixes #21447).
+
+ -- Eloy A. Paris <peloy@debian.org>  Fri, 17 Apr 1998 22:19:23 -0400
+
+samba (1.9.18p4-1) frozen unstable; urgency=low
+
+  * New upstream version that fixes several bugs.
+  * New scheme for keeping track of Debian specific configuration.
+    This new scheme fixes bug #18624 (Samba always asks the user about
+    configuration options). New scheme stores Debian specific
+    configuration information in /etc/samba/debian_config.
+  * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the
+    new configuration scheme.
+  * Moved required kernel 2.1.x include files inside the source tree
+    so I don't have to do very nasty things like creating crazy
+    symlinks in /usr/include to make this package compile. This
+    allows non-root users to build the package and fixes bug
+    #20104.
+  * Fixed address of the FSF in /usr/doc/samba/copyright (problem
+    reported by lintian).
+  * The /etc/init.d/samba script now supports the force-reload
+    argument, as required by the policy (problem reported by lintian).
+  * Added a "rm /etc/cron.weekly/samba" at the end of the postinst.
+  * Now the samba package can be installed even if no nmbd or smbd processes
+    are running. This fixes the following bugs: #8917, #9334, #10268,
+    #10411, #11146 and #13387.
+  * Provides the original README in /usr/doc/samba. This fixes bug #9693.
+  * Added a --no-reload option to sambaconfig to not reload Samba
+    after configuration.
+  * Created man pages for sambaconfig(8), addtosmbpass(8),
+    mksmbpasswd(8) and nmblookup(1).
+  * Corrected small typo in sample /etc/smb.conf.
+  * Added two new parameters to /etc/smb.conf: "preserver case" and
+    "short preserve case".
+  * "rm -Rf /var/lock/samba" in postrm when package is being purged.
+  * Patched upstream source (nmbd.c) to not overwrite log files when
+    nmbd is called with the -a parameter (fixes #17704: nmbd ignores
+    -a option).
+  * /etc/init.d/samba now starts the nmbd daemon with the -a parameter
+    to not overwrite log files.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Mar 1998 21:22:03 -0400
+
+samba (1.9.18p3-1) unstable; urgency=low
+
+  * New upstream version.
+  * Oppsss!!! I really screwed it up (actually, debstd did).
+    1.9.18p2-2 still contained man pages (smbmount and smbumount) part
+    of other packages. This version does have this corrected. If not,
+    I no longer deserve to be a Debian developer! So, this version
+    fixes bug #18438 and some of the bugs I claimed to fix in
+    1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd
+    with -m in debian/rules (man pages are installed by "make install"
+    so it's a bad idea to re-install man pages with debstd).
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Feb 1998 17:32:42 -0400
+
+samba (1.9.18p2-2) unstable; urgency=low
+
+  * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided
+    a man page for smbmount, which conflicts with package smbfs. This
+    was solved by creating a multi-binary package that produces
+    package samba and new package smbfsx.
+  * Fixes bug #18000 (typo in postinst).
+  * Fixes bug #17958 (postinst asks obsolete question). Actually,
+    the question is still asked, but only if Samba is run as daemons.
+  * Created a multi-binary package from the Samba sources: package
+    samba and new package smbfsx which provides SMB mount utilities
+    for kernels > 2.1.70.
+
+ -- Eloy A. Paris <peloy@debian.org>  Mon,  9 Feb 1998 19:47:05 -0400
+
+samba (1.9.18p2-1) unstable; urgency=low
+
+  * New upstream version.
+  * Removed /etc/cron.weekly/samba because Samba does not handle well
+    rotation of log files (if the log file is rotated Samba will
+    continue to log to the rotated file, instead of the just created
+    one). In any case, Samba will rotate log files after an specific
+    file size.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jan 1998 22:34:27 -0400
+
+samba (1.9.18p1-2) unstable; urgency=low
+
+  * Created a multi-binary package out of the Samba sources to provide
+    packages samba and smbfsx (userland utilities to work with
+    smbfs with kernels > 2.1.x.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sat, 17 Jan 1998 09:23:48 -0400
+
+samba (1.9.18p1-1) unstable; urgency=low
+
+  * New upstream version.
+  * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in
+    /var/backups/smbpasswd.bak.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 14 Jan 1998 13:40:56 -0400
+
+samba (1.9.18alpha14-1) unstable; urgency=low
+
+  * New upstream version.
+  * Added a note to the postinst script telling the user that he/she
+    needs to run smbpasswd manually after creating a new /etc/smbpasswd
+    from /etc/passwd.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 23 Dec 1997 23:44:37 -0400
+
+samba (1.9.18alpha13-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 16 Dec 1997 13:02:32 -0400
+
+samba (1.9.18alpha12-1) unstable; urgency=low
+
+  * New upstream version.
+  * Conflicts with the sambades package because the new Samba 1.9.18
+    series do not depend on the DES libraries to support encrypted
+    passwords.
+  * Added parameter "encrypt passwords = yes" to /etc/smb.conf.
+  * Compiled with support for quotas in disk_free().
+  * Home directories are now exported read only by default.
+  * Re-worked debian/rules.
+  * Re-worked sample smb.conf.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu,  4 Dec 1997 22:50:34 -0400
+
+samba (1.9.17p4-1) unstable; urgency=low
+
+  * New upstream version.
+  * Made /etc/smb.conf readable by everybody because some Samba utilities
+    will fail otherwise when run by non-root users.
+  * Dropped PAM support while the PAM libraries are ported to libc6.
+
+ -- Eloy A. Paris <peloy@debian.org>  Tue, 21 Oct 1997 18:08:49 -0400
+
+samba (1.9.17p3-1) unstable; urgency=low
+
+  * New upstream version.
+  * Made /etc/smb.conf readable only by root as suggested by smbd's man page.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 15 Oct 1997 09:21:25 -0400
+
+samba (1.9.17p2-2) unstable; urgency=low
+
+  * Running Samba as daemons instead of from inetd.
+  * Removing netbios entries in /etc/inetd.conf.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 9 Oct 1997 23:37:25 -0400
+
+samba (1.9.17p2-1) unstable; urgency=low
+
+  * New upstream version that fixes a serious security hole.
+  * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because
+    these patches are now part of the upstream release.
+
+ -- Eloy A. Paris <peloy@debian.org>  Sun, 28 Sep 1997 22:54:33 -0400
+
+samba (1.9.17p1-1) unstable; urgency=low
+
+  * New upstream version.
+  * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up
+    compiler warnings.
+  * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings.
+  * Included crypt.h to have function prototype for crypt().
+  * Included netinet/tcp.h to have some socket options included.
+  * Included netinet/ip.h to have some socket options included.
+  * Linking with libcrypt (LIBM='... -lcrypt'). Without including this
+    library smbd generates a seg. fault when authenticating users (?).
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 10 Sep 1997 22:09:18 -0400
+
+samba (1.9.17-1) unstable; urgency=low
+
+  * New upstream version (called the "Browse Fix Release")
+  * Added the option --oknodo to the start-stop-daemon invocation in prerm
+    script. This was because the prerm was failing because start-stop-daemon
+    was returning an error code if no nmbd or smbd daemons were found
+    to kill.
+  * The function yp_get_default_domain(), referenced in three source
+    files was part of libc5 but with libc6 (glibc2) it has been moved
+    to libnss_nis. Since the linker was unable to find the function
+    I had to add LIBSM='-lnss_nis' to debian/rules.
+  * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules
+    because compiling was failing because of conflicts with glibc2.
+  * Patched source/includes.h to include termios.h if GLIBC2 is defined.
+
+ -- Eloy A. Paris <peloy@debian.org>  Wed, 27 Aug 1997 08:39:32 -0400
+
+samba (1.9.17alpha5-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Eloy A. Paris <peloy@debian.org>  Thu, 14 Aug 1997 18:05:02 -0400
+
+samba (1.9.16p11-3) unstable; urgency=low
+
+  * Fixed accidental omission of /etc/pam.d/samba.
+
+ -- Klee Dienes <klee@debian.org>  Sat, 15 Mar 1997 22:31:26 -0500
+
+samba (1.9.16p11-2) unstable; urgency=low
+
+  * Recompiled against newer PAM libraries.
+  * Added /etc/pam.d/samba.
+
+ -- Klee Dienes <klee@debian.org>  Sat, 8 Mar 1997 01:16:28 -0500
+
+samba (1.9.16p11-1) unstable; urgency=low
+
+  * New upstream release.
+  * Added PAM support.
+
+ -- Klee Dienes <klee@debian.org>  Tue, 25 Feb 1997 18:00:12 -0500
+
+samba (1.9.16p9-2) unstable; urgency=low
+
+  * minor packaging changes
+
+ -- Klee Dienes <klee@sauron.sedona.com>  Sun, 3 Nov 1996 11:45:37 -0700
+
+samba (1.9.16p9-1) unstable; urgency=low
+
+  * upgraded to new upstream version
+
+ -- Klee Dienes <klee@sauron.sedona.com>  Sat, 26 Oct 1996 21:38:20 -0700
+
+1.9.16alpha10-1:
+ 960714
+ * Removed Package_Revision from control file.
+ * Removed -m486 compiler option.
+ * Added Architecture, Section and Priority fields to control file.
+ * Upgraded to latest upstream version.
+ * Uses update-inetd now.
+ * Added shadow passwords support.
+ * Fixed Bug#1946: nmbd won't browse
+
+1.9.15p4-1:
+ 951128
+ * Upgraded to latest upstream version.
+   * Fixed many bugs.
+   * Adds Master Browsing support.
+ * Converted to ELF.
+ * Fixed bug #1825 - nmbd is now killed when removing samba.
+
+1.9.14-1:
+ 950926 Andrew Howell <andrew@it.com.au>
+ * Upgraded to latest version.
+ * Fixed Bug #1139 - samba won't print
+
+1.9.14alpha5-1:
+ * Fixes killing of inetd problem in debian.postint and debian.postrm
+
+1.9.14alpha5-0:
+ 950704 Andrew Howell <andrew@it.com.au>
+ * Taken over samba package from Bruce Perens.
+ * Upgraded to newest version of samba.
+
+1.9.02-1:
+ 9-January-1994 Bruce Perens <Bruce@Pixar.com>
+ * Added Debian GNU/Linux package maintenance system files, and
+   configured for Debian systems.