summaryrefslogtreecommitdiffstats
path: root/debian/changelog
blob: 5d917514702ebab96ed8fd21bbe2f5fa15a0e787 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533
1534
1535
1536
1537
1538
1539
1540
1541
1542
1543
1544
1545
1546
1547
1548
1549
1550
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560
1561
1562
1563
1564
1565
1566
1567
1568
1569
1570
1571
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
1587
1588
1589
1590
1591
1592
1593
1594
1595
1596
1597
1598
1599
1600
1601
1602
1603
1604
1605
1606
1607
1608
1609
1610
1611
1612
1613
1614
1615
1616
1617
1618
1619
1620
1621
1622
1623
1624
1625
1626
1627
1628
1629
1630
1631
1632
1633
1634
1635
1636
1637
1638
1639
1640
1641
1642
1643
1644
1645
1646
1647
1648
1649
1650
1651
1652
1653
1654
1655
1656
1657
1658
1659
1660
1661
1662
1663
1664
1665
1666
1667
1668
1669
1670
1671
1672
1673
1674
1675
1676
1677
1678
1679
1680
1681
1682
1683
1684
1685
1686
1687
1688
1689
1690
1691
1692
1693
1694
1695
1696
1697
1698
1699
1700
1701
1702
1703
1704
1705
1706
1707
1708
1709
1710
1711
1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
1723
1724
1725
1726
1727
1728
1729
1730
1731
1732
1733
1734
1735
1736
1737
1738
1739
1740
1741
1742
1743
1744
1745
1746
1747
1748
1749
1750
1751
1752
1753
1754
1755
1756
1757
1758
1759
1760
1761
1762
1763
1764
1765
1766
1767
1768
1769
1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
1824
1825
1826
1827
1828
1829
1830
1831
1832
1833
1834
1835
1836
1837
1838
1839
1840
1841
1842
1843
1844
1845
1846
1847
1848
1849
1850
1851
1852
1853
1854
1855
1856
1857
1858
1859
1860
1861
1862
1863
1864
1865
1866
1867
1868
1869
1870
1871
1872
1873
1874
1875
1876
1877
1878
1879
1880
1881
1882
1883
1884
1885
1886
1887
1888
1889
1890
1891
1892
1893
1894
1895
1896
1897
1898
1899
1900
1901
1902
1903
1904
1905
1906
1907
1908
1909
1910
1911
1912
1913
1914
1915
1916
1917
1918
1919
1920
1921
1922
1923
1924
1925
1926
1927
1928
1929
1930
1931
1932
1933
1934
1935
1936
1937
1938
1939
1940
1941
1942
1943
1944
1945
1946
1947
1948
1949
1950
1951
1952
1953
1954
1955
1956
1957
1958
1959
1960
1961
1962
1963
1964
1965
1966
1967
1968
1969
1970
1971
1972
1973
1974
1975
1976
1977
1978
1979
1980
1981
1982
1983
1984
1985
1986
1987
1988
1989
1990
1991
1992
1993
1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
2027
2028
2029
2030
2031
2032
2033
2034
2035
2036
2037
2038
2039
2040
2041
2042
2043
2044
2045
2046
2047
2048
2049
2050
2051
2052
2053
2054
2055
2056
2057
2058
2059
2060
2061
2062
2063
2064
2065
2066
2067
2068
2069
2070
2071
2072
2073
2074
2075
2076
2077
2078
2079
2080
2081
2082
2083
2084
2085
2086
2087
2088
2089
2090
2091
2092
2093
2094
2095
2096
2097
2098
2099
2100
2101
2102
2103
2104
2105
2106
2107
2108
2109
2110
2111
2112
2113
2114
2115
2116
2117
2118
2119
2120
2121
2122
2123
2124
2125
2126
2127
2128
2129
2130
2131
2132
2133
2134
2135
2136
2137
2138
2139
2140
2141
2142
2143
2144
2145
2146
2147
2148
2149
2150
2151
2152
2153
2154
2155
2156
2157
2158
2159
2160
2161
2162
2163
2164
2165
2166
2167
2168
2169
2170
2171
2172
2173
2174
2175
2176
2177
2178
2179
2180
2181
2182
2183
2184
2185
2186
2187
2188
2189
2190
2191
2192
2193
2194
2195
2196
2197
2198
2199
2200
2201
2202
2203
2204
2205
2206
2207
2208
2209
2210
2211
2212
2213
2214
2215
2216
2217
2218
2219
2220
2221
2222
2223
2224
2225
2226
2227
2228
2229
2230
2231
2232
2233
2234
2235
2236
2237
2238
2239
2240
2241
2242
2243
2244
2245
2246
2247
2248
2249
2250
2251
2252
2253
2254
2255
2256
2257
2258
2259
2260
2261
2262
2263
2264
2265
2266
2267
2268
2269
2270
2271
2272
2273
2274
2275
2276
2277
2278
2279
2280
2281
2282
2283
2284
2285
2286
2287
2288
2289
2290
2291
2292
2293
2294
2295
2296
2297
2298
2299
2300
2301
2302
2303
2304
2305
2306
2307
2308
2309
2310
2311
2312
2313
2314
2315
2316
2317
2318
2319
2320
2321
2322
2323
2324
2325
2326
2327
2328
2329
2330
2331
2332
2333
2334
2335
2336
2337
2338
2339
2340
2341
2342
2343
2344
2345
2346
2347
2348
2349
2350
2351
2352
2353
2354
2355
2356
2357
2358
2359
2360
2361
2362
2363
2364
2365
2366
2367
2368
2369
2370
2371
2372
2373
2374
2375
2376
2377
2378
2379
2380
2381
2382
2383
2384
2385
2386
2387
2388
2389
2390
2391
2392
2393
2394
2395
2396
2397
2398
2399
2400
2401
2402
2403
2404
2405
2406
2407
2408
2409
2410
2411
2412
2413
2414
2415
2416
2417
2418
2419
2420
2421
2422
2423
2424
2425
2426
2427
2428
2429
2430
2431
2432
2433
2434
2435
2436
2437
2438
2439
2440
2441
2442
2443
2444
2445
2446
2447
2448
2449
2450
2451
2452
2453
2454
2455
2456
2457
2458
2459
2460
2461
2462
2463
2464
2465
2466
2467
2468
2469
2470
2471
2472
2473
2474
2475
2476
2477
2478
2479
2480
2481
2482
2483
2484
2485
2486
2487
2488
2489
2490
2491
2492
2493
2494
2495
2496
2497
2498
2499
2500
2501
2502
2503
2504
2505
2506
2507
2508
2509
2510
2511
2512
2513
2514
2515
2516
2517
2518
2519
2520
2521
2522
2523
2524
2525
2526
2527
2528
2529
2530
2531
2532
2533
2534
2535
2536
2537
2538
2539
2540
2541
2542
2543
2544
2545
2546
2547
2548
2549
2550
2551
2552
2553
2554
2555
2556
2557
2558
2559
2560
2561
2562
2563
2564
2565
2566
2567
2568
2569
2570
2571
2572
2573
2574
2575
2576
2577
2578
2579
2580
2581
2582
2583
2584
2585
2586
2587
2588
2589
2590
2591
2592
2593
2594
2595
2596
2597
2598
2599
2600
2601
2602
2603
2604
2605
2606
2607
2608
2609
2610
2611
2612
2613
2614
2615
2616
2617
2618
2619
2620
2621
2622
2623
2624
2625
2626
2627
2628
2629
2630
2631
2632
2633
2634
2635
2636
2637
2638
2639
2640
2641
2642
2643
2644
2645
2646
2647
2648
2649
2650
2651
2652
2653
2654
2655
2656
2657
2658
2659
2660
2661
2662
2663
2664
2665
2666
2667
2668
2669
2670
2671
2672
2673
2674
2675
2676
2677
2678
2679
2680
2681
2682
2683
2684
2685
2686
2687
2688
2689
2690
2691
2692
2693
2694
2695
2696
2697
2698
2699
2700
2701
2702
2703
2704
2705
2706
2707
2708
2709
2710
2711
2712
2713
2714
2715
2716
2717
2718
2719
2720
2721
2722
2723
2724
2725
2726
2727
2728
2729
2730
2731
2732
2733
2734
2735
2736
2737
2738
2739
2740
2741
2742
2743
2744
2745
2746
2747
2748
2749
2750
2751
2752
2753
2754
2755
2756
2757
2758
2759
2760
2761
2762
2763
2764
2765
2766
2767
2768
2769
2770
2771
2772
2773
2774
2775
2776
2777
2778
2779
2780
2781
2782
2783
2784
2785
2786
2787
2788
2789
2790
2791
2792
2793
2794
2795
2796
2797
2798
2799
2800
2801
2802
2803
2804
2805
2806
2807
2808
2809
2810
2811
2812
2813
2814
2815
2816
2817
2818
2819
2820
2821
2822
2823
2824
2825
2826
2827
2828
2829
2830
2831
2832
2833
2834
2835
2836
2837
2838
2839
2840
2841
2842
2843
2844
2845
2846
2847
2848
2849
2850
2851
2852
2853
2854
2855
2856
2857
2858
2859
2860
2861
2862
2863
2864
2865
2866
2867
2868
2869
2870
2871
2872
2873
2874
2875
2876
2877
2878
2879
2880
2881
2882
2883
2884
2885
2886
2887
2888
2889
2890
2891
2892
2893
2894
2895
2896
2897
2898
2899
2900
2901
2902
2903
2904
2905
2906
2907
2908
2909
2910
2911
2912
2913
2914
2915
2916
2917
2918
2919
2920
2921
2922
2923
2924
2925
2926
2927
2928
2929
2930
2931
2932
2933
2934
2935
2936
2937
2938
2939
2940
2941
2942
2943
2944
2945
2946
2947
2948
2949
2950
2951
2952
2953
2954
2955
2956
2957
2958
2959
2960
2961
2962
2963
2964
2965
2966
2967
2968
2969
2970
2971
2972
2973
2974
2975
2976
2977
2978
2979
2980
2981
2982
2983
2984
2985
2986
2987
2988
2989
2990
2991
2992
2993
2994
2995
2996
2997
2998
2999
3000
3001
3002
3003
3004
3005
3006
3007
3008
3009
3010
3011
3012
3013
3014
3015
3016
3017
3018
3019
3020
3021
3022
3023
3024
3025
3026
3027
3028
3029
3030
3031
3032
3033
3034
3035
3036
3037
3038
3039
3040
3041
3042
3043
3044
3045
3046
3047
3048
3049
3050
3051
3052
3053
3054
3055
3056
3057
3058
3059
3060
3061
3062
3063
3064
3065
3066
3067
3068
3069
3070
3071
3072
3073
3074
3075
3076
3077
3078
3079
3080
3081
3082
3083
3084
3085
3086
3087
3088
3089
3090
3091
3092
3093
3094
3095
3096
3097
3098
3099
3100
3101
3102
3103
3104
3105
3106
3107
3108
3109
3110
3111
3112
3113
3114
3115
3116
3117
3118
3119
3120
3121
3122
3123
3124
3125
3126
3127
3128
3129
3130
3131
3132
3133
3134
3135
3136
3137
3138
3139
3140
3141
3142
3143
3144
3145
3146
3147
3148
3149
3150
3151
3152
3153
3154
3155
3156
3157
3158
3159
3160
3161
3162
3163
3164
3165
3166
3167
3168
3169
3170
3171
3172
3173
3174
3175
3176
3177
3178
3179
3180
3181
3182
3183
3184
3185
3186
3187
3188
3189
3190
3191
3192
3193
3194
3195
3196
3197
3198
3199
3200
3201
3202
3203
3204
3205
3206
3207
3208
3209
3210
3211
3212
3213
3214
3215
3216
3217
3218
3219
3220
3221
3222
3223
3224
3225
3226
3227
3228
3229
3230
3231
3232
3233
3234
3235
3236
3237
3238
3239
3240
3241
3242
3243
3244
3245
3246
3247
3248
3249
3250
3251
3252
3253
3254
3255
3256
3257
3258
3259
3260
3261
3262
3263
3264
3265
3266
3267
3268
3269
3270
3271
3272
3273
3274
3275
3276
3277
3278
3279
3280
3281
3282
3283
3284
3285
3286
3287
3288
3289
3290
3291
3292
3293
3294
3295
3296
3297
3298
3299
3300
3301
3302
3303
3304
3305
3306
3307
3308
3309
3310
3311
3312
3313
3314
3315
3316
3317
3318
3319
3320
3321
3322
3323
3324
3325
3326
3327
3328
3329
3330
3331
3332
3333
3334
3335
3336
3337
3338
3339
3340
3341
3342
3343
3344
3345
3346
3347
3348
3349
3350
3351
3352
3353
3354
3355
3356
3357
3358
3359
3360
3361
3362
3363
3364
3365
3366
3367
3368
3369
3370
3371
3372
3373
3374
3375
3376
3377
3378
3379
3380
3381
3382
3383
3384
3385
3386
3387
3388
3389
3390
3391
3392
3393
3394
3395
3396
3397
3398
3399
3400
3401
3402
3403
3404
3405
3406
3407
3408
3409
3410
3411
3412
3413
3414
3415
3416
3417
3418
3419
3420
3421
3422
3423
3424
3425
3426
3427
3428
3429
3430
3431
3432
3433
3434
3435
3436
3437
3438
3439
3440
3441
3442
3443
3444
3445
3446
3447
3448
3449
3450
3451
3452
3453
3454
3455
3456
3457
3458
3459
3460
3461
3462
3463
3464
3465
3466
3467
3468
3469
3470
3471
3472
3473
3474
3475
3476
3477
3478
3479
3480
3481
3482
3483
3484
3485
3486
3487
3488
3489
3490
3491
3492
3493
3494
3495
3496
3497
3498
3499
3500
3501
3502
3503
3504
3505
3506
3507
3508
3509
3510
3511
3512
3513
3514
3515
3516
3517
3518
3519
3520
3521
3522
3523
3524
3525
3526
3527
3528
3529
3530
3531
3532
3533
3534
3535
3536
3537
3538
3539
3540
3541
3542
3543
3544
3545
3546
3547
3548
3549
3550
3551
3552
3553
3554
3555
3556
3557
3558
3559
3560
3561
3562
3563
3564
3565
3566
3567
3568
3569
3570
3571
3572
3573
3574
3575
3576
3577
3578
3579
3580
3581
3582
3583
3584
3585
3586
3587
3588
3589
3590
3591
3592
3593
3594
3595
3596
3597
3598
3599
3600
3601
3602
3603
3604
3605
3606
3607
3608
3609
3610
3611
3612
3613
3614
3615
3616
3617
3618
3619
3620
3621
3622
3623
3624
3625
3626
3627
3628
3629
3630
3631
3632
3633
3634
3635
3636
3637
3638
3639
3640
3641
3642
3643
3644
3645
3646
3647
3648
3649
3650
3651
3652
3653
3654
3655
3656
3657
3658
3659
3660
3661
3662
3663
3664
3665
3666
3667
3668
3669
3670
3671
3672
3673
3674
3675
3676
3677
3678
3679
3680
3681
3682
3683
3684
3685
3686
3687
3688
3689
3690
3691
3692
3693
3694
3695
3696
3697
3698
3699
3700
3701
3702
3703
3704
3705
3706
3707
3708
3709
3710
3711
3712
3713
3714
3715
3716
3717
3718
3719
3720
3721
3722
3723
3724
3725
3726
3727
3728
3729
3730
3731
3732
3733
3734
3735
3736
3737
3738
3739
3740
3741
3742
3743
3744
3745
3746
3747
3748
3749
3750
3751
3752
3753
3754
3755
3756
3757
3758
3759
3760
3761
3762
3763
3764
3765
3766
3767
3768
3769
3770
3771
3772
3773
3774
3775
3776
3777
3778
3779
3780
3781
3782
3783
3784
3785
3786
3787
3788
3789
3790
3791
3792
3793
3794
3795
3796
3797
3798
3799
3800
3801
3802
3803
3804
3805
3806
3807
3808
3809
3810
3811
3812
3813
3814
3815
3816
3817
3818
3819
3820
3821
3822
3823
3824
3825
3826
3827
3828
3829
3830
3831
3832
3833
3834
3835
3836
3837
3838
3839
3840
3841
3842
3843
3844
3845
3846
3847
3848
3849
3850
3851
3852
3853
3854
3855
3856
3857
3858
3859
3860
3861
3862
3863
3864
3865
3866
3867
3868
3869
3870
3871
3872
3873
3874
3875
3876
3877
3878
3879
3880
3881
3882
3883
3884
3885
3886
3887
3888
3889
3890
3891
3892
3893
3894
3895
3896
3897
3898
3899
3900
3901
3902
3903
3904
3905
3906
3907
3908
3909
3910
3911
3912
3913
3914
3915
3916
3917
3918
3919
3920
3921
3922
3923
3924
3925
3926
3927
3928
3929
3930
3931
3932
3933
3934
3935
3936
3937
3938
3939
3940
3941
3942
3943
3944
3945
3946
3947
3948
3949
3950
3951
3952
3953
3954
3955
3956
3957
3958
3959
3960
3961
3962
3963
3964
3965
3966
3967
3968
3969
3970
3971
3972
3973
3974
3975
3976
3977
3978
3979
3980
3981
3982
3983
3984
3985
3986
3987
3988
3989
3990
3991
3992
3993
3994
3995
3996
3997
3998
3999
4000
4001
4002
4003
4004
4005
4006
4007
4008
4009
4010
4011
4012
4013
4014
4015
4016
4017
4018
4019
4020
4021
4022
4023
4024
4025
4026
4027
4028
4029
4030
4031
4032
4033
4034
4035
4036
4037
4038
4039
4040
4041
4042
4043
4044
4045
4046
4047
4048
4049
4050
4051
4052
4053
4054
4055
4056
4057
4058
4059
4060
4061
4062
4063
4064
4065
4066
4067
4068
4069
4070
4071
4072
4073
4074
4075
4076
4077
4078
4079
4080
4081
4082
4083
4084
4085
4086
4087
4088
4089
4090
4091
4092
4093
4094
4095
4096
4097
4098
4099
4100
4101
4102
4103
4104
4105
4106
4107
4108
4109
4110
4111
4112
4113
4114
4115
4116
4117
4118
4119
4120
4121
4122
4123
4124
4125
4126
4127
4128
4129
4130
4131
4132
4133
4134
4135
4136
4137
4138
4139
4140
4141
4142
4143
4144
4145
4146
4147
4148
4149
4150
4151
4152
4153
4154
4155
4156
4157
4158
4159
4160
4161
4162
4163
4164
4165
4166
4167
4168
4169
4170
4171
4172
4173
4174
4175
4176
4177
4178
4179
4180
4181
4182
4183
4184
4185
4186
4187
4188
4189
4190
4191
4192
4193
4194
4195
4196
4197
4198
4199
4200
4201
4202
4203
4204
4205
4206
4207
4208
4209
4210
4211
4212
4213
4214
4215
4216
4217
4218
4219
4220
4221
4222
4223
4224
4225
4226
4227
4228
4229
4230
4231
4232
4233
4234
4235
4236
4237
4238
4239
4240
4241
4242
4243
4244
4245
4246
4247
4248
4249
4250
4251
4252
4253
4254
4255
4256
4257
4258
4259
4260
4261
4262
4263
4264
4265
4266
4267
4268
4269
4270
4271
4272
4273
4274
4275
4276
4277
4278
4279
4280
4281
4282
4283
4284
4285
4286
4287
4288
4289
4290
4291
4292
4293
4294
4295
4296
4297
4298
4299
4300
4301
4302
4303
4304
4305
4306
4307
4308
4309
4310
4311
4312
4313
4314
4315
4316
4317
4318
4319
4320
4321
4322
4323
4324
4325
4326
4327
4328
4329
4330
4331
4332
4333
4334
4335
4336
4337
4338
4339
4340
4341
4342
4343
4344
4345
4346
4347
4348
4349
4350
4351
4352
4353
4354
4355
4356
4357
4358
4359
4360
4361
4362
4363
4364
4365
4366
4367
4368
4369
4370
4371
4372
4373
4374
4375
4376
4377
4378
4379
4380
4381
4382
4383
4384
4385
4386
4387
4388
4389
4390
4391
4392
4393
4394
4395
4396
4397
4398
4399
4400
4401
4402
4403
4404
4405
4406
4407
4408
4409
4410
4411
4412
4413
4414
4415
4416
4417
4418
4419
4420
4421
4422
4423
4424
4425
4426
4427
4428
4429
4430
4431
4432
4433
4434
4435
4436
4437
4438
4439
4440
4441
4442
4443
4444
4445
4446
4447
4448
4449
4450
4451
4452
4453
4454
4455
4456
4457
4458
4459
4460
4461
4462
4463
4464
4465
4466
4467
4468
4469
4470
4471
4472
4473
4474
4475
4476
4477
4478
4479
4480
4481
4482
4483
4484
4485
4486
4487
4488
4489
4490
4491
4492
4493
4494
4495
4496
4497
4498
4499
4500
4501
4502
4503
4504
4505
4506
4507
4508
4509
4510
4511
4512
4513
4514
4515
4516
4517
4518
4519
4520
4521
4522
4523
4524
4525
4526
4527
4528
4529
4530
4531
4532
4533
4534
4535
4536
4537
4538
4539
4540
4541
4542
4543
4544
4545
4546
4547
4548
4549
4550
4551
4552
4553
4554
4555
4556
4557
4558
4559
4560
4561
4562
4563
4564
4565
4566
4567
4568
4569
4570
4571
4572
4573
4574
4575
4576
4577
4578
4579
4580
4581
4582
4583
4584
4585
4586
4587
4588
4589
4590
4591
4592
4593
4594
4595
4596
4597
4598
4599
4600
4601
4602
4603
4604
4605
4606
4607
4608
4609
4610
4611
4612
4613
4614
4615
4616
4617
4618
4619
4620
4621
4622
4623
4624
4625
4626
4627
4628
4629
4630
4631
4632
4633
4634
4635
4636
4637
4638
4639
4640
4641
4642
4643
4644
4645
4646
4647
4648
4649
4650
4651
4652
4653
4654
4655
4656
4657
4658
4659
4660
4661
4662
4663
4664
4665
4666
4667
4668
4669
4670
4671
4672
4673
4674
4675
4676
4677
4678
4679
4680
4681
4682
4683
4684
4685
4686
4687
4688
4689
4690
4691
4692
4693
4694
4695
4696
4697
4698
4699
4700
4701
4702
4703
4704
4705
4706
4707
4708
4709
4710
4711
4712
4713
4714
4715
4716
4717
4718
4719
4720
4721
4722
4723
4724
4725
4726
4727
4728
4729
4730
4731
4732
4733
4734
4735
4736
4737
4738
4739
4740
4741
4742
4743
4744
4745
4746
4747
4748
4749
4750
4751
4752
4753
4754
4755
4756
4757
4758
4759
4760
4761
4762
4763
4764
4765
4766
4767
4768
4769
4770
4771
4772
4773
4774
4775
4776
4777
4778
4779
4780
4781
4782
4783
4784
4785
4786
4787
4788
4789
4790
4791
4792
4793
4794
4795
4796
4797
4798
4799
4800
4801
4802
4803
4804
4805
4806
4807
4808
4809
4810
4811
4812
4813
4814
4815
4816
4817
4818
4819
4820
4821
4822
4823
4824
4825
4826
4827
4828
4829
4830
4831
4832
4833
4834
4835
4836
4837
4838
4839
4840
4841
4842
4843
4844
4845
4846
4847
4848
4849
4850
4851
4852
4853
4854
4855
4856
4857
4858
4859
4860
4861
4862
4863
4864
4865
4866
4867
4868
4869
4870
4871
4872
4873
4874
4875
4876
4877
4878
4879
4880
4881
4882
4883
4884
4885
4886
4887
4888
4889
4890
4891
4892
4893
4894
4895
4896
4897
4898
4899
4900
4901
4902
4903
4904
4905
4906
4907
4908
4909
4910
4911
4912
4913
4914
4915
4916
4917
4918
4919
4920
4921
4922
4923
4924
4925
4926
4927
4928
4929
4930
4931
4932
4933
4934
4935
4936
4937
4938
4939
4940
4941
4942
4943
4944
4945
4946
4947
4948
4949
4950
4951
4952
4953
4954
4955
4956
4957
4958
4959
4960
4961
4962
4963
4964
4965
4966
4967
4968
4969
4970
4971
4972
4973
4974
4975
4976
4977
4978
4979
4980
4981
4982
4983
4984
4985
4986
4987
4988
4989
4990
4991
4992
4993
4994
4995
4996
4997
4998
4999
5000
5001
5002
5003
5004
5005
5006
5007
5008
5009
5010
5011
5012
5013
5014
5015
5016
5017
5018
5019
5020
5021
5022
5023
5024
5025
5026
5027
5028
5029
5030
5031
5032
5033
5034
5035
5036
5037
5038
5039
5040
5041
5042
5043
5044
5045
5046
5047
5048
5049
5050
5051
5052
5053
5054
5055
5056
5057
5058
5059
5060
5061
5062
5063
5064
5065
5066
5067
5068
5069
5070
5071
5072
5073
5074
5075
5076
5077
5078
5079
5080
5081
5082
5083
5084
5085
5086
5087
5088
5089
5090
5091
5092
5093
5094
5095
5096
5097
5098
5099
5100
5101
5102
5103
5104
5105
5106
5107
5108
5109
5110
5111
5112
5113
5114
5115
5116
5117
5118
5119
5120
5121
5122
5123
5124
5125
5126
5127
5128
5129
5130
5131
5132
5133
5134
5135
5136
5137
5138
5139
5140
5141
5142
5143
5144
5145
5146
5147
5148
5149
5150
5151
5152
5153
5154
5155
5156
5157
5158
5159
5160
5161
5162
5163
5164
5165
5166
5167
5168
5169
5170
5171
5172
5173
5174
5175
5176
5177
5178
5179
5180
5181
5182
5183
5184
5185
5186
5187
5188
5189
5190
5191
5192
5193
5194
5195
5196
5197
5198
5199
5200
5201
5202
5203
5204
5205
5206
5207
5208
5209
5210
5211
5212
5213
5214
5215
5216
5217
5218
5219
5220
5221
5222
5223
5224
5225
5226
5227
5228
5229
5230
5231
5232
5233
5234
5235
5236
5237
5238
5239
5240
5241
5242
5243
5244
5245
5246
5247
5248
5249
5250
5251
5252
5253
5254
5255
5256
5257
5258
5259
5260
5261
5262
5263
5264
5265
5266
5267
5268
5269
5270
5271
5272
5273
5274
5275
5276
5277
5278
5279
5280
5281
5282
5283
5284
5285
5286
5287
5288
5289
5290
5291
5292
5293
5294
5295
5296
5297
5298
5299
5300
5301
5302
5303
5304
5305
5306
5307
5308
5309
5310
5311
5312
5313
5314
5315
5316
5317
5318
5319
5320
5321
5322
5323
5324
5325
5326
5327
5328
5329
5330
5331
5332
5333
5334
5335
5336
5337
5338
5339
5340
5341
5342
5343
5344
5345
5346
5347
5348
5349
5350
5351
5352
5353
5354
5355
5356
5357
5358
5359
5360
5361
5362
5363
5364
5365
5366
5367
5368
5369
5370
5371
5372
5373
5374
5375
5376
5377
5378
5379
5380
5381
5382
5383
5384
5385
5386
5387
5388
5389
5390
5391
5392
5393
5394
5395
5396
5397
5398
5399
5400
5401
5402
5403
5404
5405
5406
5407
5408
5409
5410
5411
5412
5413
5414
5415
5416
5417
5418
5419
5420
5421
5422
5423
5424
5425
5426
5427
5428
5429
5430
5431
5432
5433
5434
5435
5436
5437
5438
5439
5440
5441
5442
5443
5444
5445
5446
5447
5448
5449
5450
5451
5452
5453
5454
5455
5456
5457
5458
5459
5460
5461
5462
5463
5464
5465
5466
5467
5468
5469
5470
5471
5472
5473
5474
5475
5476
5477
5478
5479
5480
5481
5482
5483
5484
5485
5486
5487
5488
5489
5490
5491
5492
5493
5494
5495
5496
5497
5498
5499
5500
5501
5502
5503
5504
5505
5506
5507
5508
5509
5510
5511
5512
5513
5514
5515
5516
5517
5518
5519
5520
5521
5522
5523
5524
5525
5526
5527
5528
5529
5530
5531
5532
5533
5534
5535
5536
5537
5538
5539
5540
5541
5542
5543
5544
5545
5546
5547
5548
5549
5550
5551
5552
5553
5554
5555
5556
5557
5558
5559
5560
5561
5562
5563
5564
5565
5566
5567
5568
5569
5570
5571
5572
5573
5574
5575
5576
5577
5578
5579
5580
5581
5582
5583
5584
5585
5586
5587
5588
5589
5590
5591
5592
5593
5594
5595
5596
5597
5598
5599
5600
5601
5602
5603
5604
5605
5606
5607
5608
5609
5610
5611
5612
5613
5614
5615
5616
5617
5618
5619
5620
5621
5622
5623
5624
5625
5626
5627
5628
5629
5630
5631
5632
5633
5634
5635
5636
5637
5638
5639
5640
5641
5642
5643
5644
5645
5646
5647
5648
5649
5650
5651
5652
5653
5654
5655
5656
5657
5658
5659
5660
5661
5662
5663
5664
5665
5666
5667
5668
5669
5670
5671
5672
5673
5674
5675
5676
5677
5678
5679
5680
5681
5682
5683
5684
5685
5686
5687
5688
5689
5690
5691
5692
5693
5694
5695
5696
5697
5698
5699
5700
5701
5702
5703
5704
5705
5706
5707
5708
5709
5710
5711
5712
5713
5714
5715
5716
5717
5718
5719
5720
5721
5722
5723
5724
5725
5726
5727
5728
5729
5730
5731
5732
5733
5734
5735
5736
5737
5738
5739
5740
5741
5742
5743
5744
5745
5746
5747
5748
5749
5750
5751
5752
5753
5754
5755
5756
5757
5758
5759
5760
5761
5762
5763
5764
5765
5766
5767
5768
5769
5770
5771
5772
5773
5774
5775
5776
5777
5778
5779
5780
5781
5782
5783
5784
5785
5786
5787
5788
5789
5790
5791
5792
5793
5794
5795
5796
5797
5798
5799
5800
5801
5802
5803
5804
5805
5806
5807
5808
5809
5810
5811
5812
5813
5814
5815
5816
5817
5818
5819
5820
5821
5822
5823
5824
5825
5826
5827
5828
5829
5830
5831
5832
5833
5834
5835
5836
5837
5838
5839
5840
5841
5842
5843
5844
5845
5846
5847
5848
5849
5850
5851
5852
5853
5854
5855
5856
5857
5858
5859
5860
5861
5862
5863
5864
5865
5866
5867
5868
5869
5870
5871
5872
5873
5874
5875
5876
5877
5878
5879
5880
5881
5882
5883
5884
5885
5886
5887
5888
5889
5890
5891
5892
5893
5894
5895
5896
5897
5898
5899
5900
5901
5902
5903
5904
5905
5906
5907
5908
5909
5910
5911
5912
5913
5914
5915
5916
5917
5918
5919
5920
5921
5922
5923
5924
5925
5926
5927
5928
5929
5930
5931
5932
5933
5934
5935
5936
5937
5938
5939
5940
5941
5942
5943
5944
5945
5946
5947
5948
5949
5950
5951
5952
5953
5954
5955
5956
5957
5958
5959
5960
5961
5962
5963
5964
5965
5966
5967
5968
5969
5970
5971
5972
5973
5974
5975
5976
5977
5978
5979
5980
5981
5982
5983
5984
5985
5986
5987
5988
5989
5990
5991
5992
5993
5994
5995
5996
5997
5998
5999
6000
6001
6002
6003
6004
6005
6006
6007
6008
6009
6010
6011
6012
6013
6014
6015
6016
6017
6018
6019
6020
6021
6022
6023
6024
6025
6026
6027
6028
6029
6030
6031
6032
6033
6034
6035
6036
6037
6038
6039
6040
6041
6042
6043
6044
6045
6046
6047
6048
6049
6050
6051
6052
6053
6054
6055
6056
6057
6058
6059
6060
6061
6062
6063
6064
6065
6066
6067
6068
6069
6070
6071
6072
6073
6074
6075
6076
6077
6078
6079
6080
6081
6082
6083
6084
6085
6086
6087
6088
6089
6090
6091
6092
6093
6094
6095
6096
6097
6098
6099
6100
6101
6102
6103
6104
6105
6106
6107
6108
6109
6110
6111
6112
6113
6114
6115
6116
6117
6118
6119
6120
6121
6122
6123
6124
6125
6126
6127
6128
6129
6130
6131
6132
6133
6134
6135
6136
6137
6138
6139
6140
6141
6142
6143
6144
6145
6146
6147
6148
6149
6150
6151
6152
6153
6154
6155
6156
6157
6158
6159
6160
6161
6162
6163
6164
6165
6166
6167
6168
6169
6170
6171
6172
6173
6174
6175
6176
6177
6178
6179
6180
6181
6182
6183
6184
6185
6186
6187
6188
6189
6190
6191
6192
6193
6194
6195
6196
6197
6198
6199
6200
6201
6202
6203
6204
6205
6206
6207
6208
6209
6210
6211
6212
6213
6214
6215
6216
6217
6218
6219
6220
6221
6222
6223
6224
6225
6226
6227
6228
6229
6230
6231
6232
6233
6234
6235
6236
6237
6238
6239
6240
6241
6242
6243
6244
6245
6246
6247
6248
6249
6250
6251
6252
6253
6254
6255
6256
6257
6258
6259
6260
6261
6262
6263
6264
6265
6266
6267
6268
6269
6270
6271
6272
6273
6274
6275
6276
6277
6278
6279
6280
6281
6282
6283
6284
6285
6286
6287
6288
6289
6290
6291
6292
6293
6294
6295
6296
6297
6298
6299
6300
6301
6302
6303
6304
6305
6306
6307
6308
6309
6310
6311
6312
6313
6314
6315
6316
6317
6318
6319
6320
6321
6322
6323
6324
6325
6326
6327
6328
6329
6330
6331
6332
6333
6334
6335
6336
6337
6338
6339
6340
6341
6342
6343
6344
6345
6346
6347
6348
6349
6350
6351
6352
6353
6354
6355
6356
6357
6358
6359
6360
6361
6362
6363
6364
6365
6366
6367
6368
6369
6370
6371
6372
6373
6374
6375
6376
6377
6378
6379
6380
6381
6382
6383
6384
6385
6386
6387
6388
6389
6390
6391
6392
6393
6394
6395
6396
6397
6398
6399
6400
6401
6402
6403
6404
6405
6406
6407
6408
6409
6410
6411
6412
6413
6414
6415
6416
6417
6418
6419
6420
6421
6422
6423
6424
6425
6426
6427
6428
6429
6430
6431
6432
6433
6434
6435
6436
6437
6438
6439
6440
6441
6442
6443
6444
6445
6446
6447
6448
6449
6450
6451
6452
6453
6454
6455
6456
6457
6458
6459
6460
6461
6462
6463
6464
6465
6466
6467
6468
6469
6470
6471
6472
6473
6474
6475
6476
6477
6478
6479
6480
6481
6482
6483
6484
6485
6486
6487
6488
6489
6490
6491
6492
6493
6494
6495
6496
6497
6498
6499
6500
6501
6502
6503
6504
6505
6506
6507
6508
6509
6510
6511
6512
6513
6514
6515
6516
6517
6518
6519
6520
6521
6522
6523
6524
6525
6526
6527
6528
6529
6530
6531
6532
6533
6534
6535
6536
6537
6538
6539
6540
6541
6542
6543
6544
6545
6546
6547
6548
6549
6550
6551
6552
6553
6554
6555
6556
6557
6558
6559
6560
6561
6562
6563
6564
6565
6566
6567
6568
6569
6570
6571
6572
6573
6574
6575
6576
6577
6578
6579
6580
6581
6582
6583
6584
6585
6586
6587
6588
6589
6590
6591
6592
6593
6594
6595
6596
6597
6598
6599
6600
6601
6602
6603
6604
6605
6606
6607
6608
6609
6610
6611
6612
6613
6614
6615
6616
6617
6618
6619
6620
6621
6622
6623
6624
6625
6626
6627
6628
6629
6630
6631
6632
6633
6634
6635
6636
6637
6638
6639
6640
6641
6642
6643
6644
6645
6646
6647
6648
6649
6650
6651
6652
6653
6654
6655
6656
6657
6658
6659
6660
6661
6662
6663
6664
6665
6666
6667
6668
6669
6670
6671
6672
6673
6674
6675
6676
6677
6678
6679
6680
6681
6682
6683
6684
6685
6686
6687
6688
6689
6690
6691
6692
6693
6694
6695
6696
6697
6698
6699
6700
6701
6702
6703
6704
6705
6706
6707
6708
6709
6710
6711
6712
6713
6714
6715
6716
6717
6718
6719
6720
6721
6722
6723
6724
6725
6726
6727
6728
6729
6730
6731
6732
6733
6734
6735
6736
6737
6738
6739
6740
6741
6742
6743
6744
6745
6746
6747
6748
6749
6750
6751
6752
6753
6754
6755
6756
6757
6758
6759
6760
6761
6762
6763
6764
6765
6766
6767
6768
6769
6770
6771
6772
6773
6774
6775
6776
6777
6778
6779
6780
6781
6782
6783
6784
6785
6786
6787
6788
6789
6790
6791
6792
6793
6794
6795
6796
6797
6798
6799
6800
6801
6802
6803
6804
6805
6806
6807
6808
6809
6810
6811
6812
6813
6814
6815
6816
6817
6818
6819
6820
6821
6822
6823
6824
6825
6826
6827
6828
6829
6830
6831
6832
6833
6834
6835
6836
6837
6838
6839
6840
6841
6842
6843
6844
6845
6846
6847
6848
6849
6850
6851
6852
6853
6854
6855
6856
6857
6858
6859
6860
6861
6862
6863
6864
6865
6866
6867
6868
6869
6870
6871
6872
6873
6874
6875
6876
6877
6878
6879
6880
6881
6882
6883
6884
6885
6886
6887
6888
6889
6890
6891
6892
6893
6894
6895
6896
6897
6898
6899
6900
6901
6902
6903
6904
6905
6906
6907
6908
6909
6910
6911
6912
6913
6914
6915
6916
6917
6918
6919
6920
6921
6922
6923
6924
6925
6926
6927
6928
6929
6930
6931
6932
6933
6934
6935
6936
6937
6938
6939
6940
6941
6942
6943
6944
6945
6946
6947
6948
6949
6950
6951
6952
6953
6954
6955
6956
6957
6958
6959
6960
6961
6962
6963
6964
6965
6966
6967
6968
6969
6970
6971
6972
6973
6974
6975
6976
6977
6978
6979
6980
6981
6982
6983
6984
6985
6986
6987
6988
6989
6990
6991
6992
6993
6994
6995
6996
6997
6998
6999
7000
7001
7002
7003
7004
7005
7006
7007
7008
7009
7010
7011
7012
7013
7014
7015
7016
7017
7018
7019
7020
7021
7022
7023
7024
7025
7026
7027
7028
7029
7030
7031
7032
7033
7034
7035
7036
7037
7038
7039
7040
7041
7042
7043
7044
7045
7046
7047
7048
7049
7050
7051
7052
7053
7054
7055
7056
7057
7058
7059
7060
7061
7062
7063
7064
7065
7066
7067
7068
7069
7070
7071
7072
7073
7074
7075
7076
7077
7078
7079
7080
7081
7082
7083
7084
7085
7086
7087
7088
7089
7090
7091
7092
7093
7094
7095
7096
7097
7098
7099
7100
7101
7102
7103
7104
7105
7106
7107
7108
7109
7110
7111
7112
7113
7114
7115
7116
7117
7118
7119
7120
7121
7122
7123
7124
7125
7126
7127
7128
7129
7130
7131
7132
7133
7134
7135
7136
7137
7138
7139
7140
7141
7142
7143
7144
7145
7146
7147
7148
7149
7150
7151
7152
7153
7154
7155
7156
7157
7158
7159
7160
7161
7162
7163
7164
7165
7166
7167
7168
7169
7170
7171
7172
7173
7174
7175
7176
7177
7178
7179
7180
7181
7182
7183
7184
7185
7186
7187
7188
7189
7190
7191
7192
7193
7194
7195
7196
7197
7198
7199
7200
7201
7202
7203
7204
7205
7206
7207
7208
7209
7210
7211
7212
7213
7214
7215
7216
7217
7218
7219
7220
7221
7222
7223
7224
7225
7226
7227
7228
7229
7230
7231
7232
7233
7234
7235
7236
7237
7238
7239
7240
7241
7242
7243
7244
7245
7246
7247
7248
7249
7250
7251
7252
7253
7254
7255
7256
7257
7258
7259
7260
7261
7262
7263
7264
7265
7266
7267
7268
7269
7270
7271
7272
7273
7274
7275
7276
7277
7278
7279
7280
7281
7282
7283
7284
7285
7286
7287
7288
7289
7290
7291
7292
7293
7294
7295
7296
7297
7298
7299
7300
7301
7302
7303
7304
7305
7306
7307
7308
7309
7310
7311
7312
7313
7314
7315
7316
7317
7318
7319
7320
7321
7322
7323
7324
7325
7326
7327
7328
7329
7330
7331
7332
7333
7334
7335
7336
7337
7338
7339
7340
7341
7342
7343
7344
7345
7346
7347
7348
7349
7350
7351
7352
7353
7354
7355
7356
7357
7358
7359
7360
7361
7362
7363
7364
7365
7366
7367
7368
7369
7370
7371
7372
7373
7374
7375
7376
7377
7378
7379
7380
7381
7382
7383
7384
7385
7386
7387
7388
7389
7390
7391
7392
7393
7394
7395
7396
7397
7398
7399
7400
7401
7402
7403
7404
7405
7406
7407
7408
7409
7410
7411
7412
7413
7414
7415
7416
7417
7418
7419
7420
7421
7422
7423
7424
7425
7426
7427
7428
7429
7430
7431
7432
7433
7434
7435
7436
7437
7438
7439
7440
7441
7442
7443
7444
7445
7446
7447
7448
7449
7450
7451
7452
7453
7454
7455
7456
7457
7458
7459
7460
7461
7462
7463
7464
7465
7466
7467
7468
7469
7470
7471
7472
7473
7474
7475
7476
7477
7478
7479
7480
7481
7482
7483
7484
7485
7486
7487
7488
7489
7490
7491
7492
7493
7494
7495
7496
7497
7498
7499
7500
7501
7502
7503
7504
7505
7506
7507
7508
7509
7510
7511
7512
7513
7514
7515
7516
7517
7518
7519
7520
7521
7522
7523
7524
7525
7526
7527
7528
7529
7530
7531
7532
7533
7534
7535
7536
7537
7538
7539
7540
7541
7542
7543
7544
7545
7546
7547
7548
7549
7550
7551
7552
7553
7554
7555
7556
7557
7558
7559
7560
7561
7562
7563
7564
7565
7566
7567
7568
7569
7570
7571
7572
7573
7574
7575
7576
7577
7578
7579
7580
7581
7582
7583
7584
7585
7586
7587
7588
7589
7590
7591
7592
7593
7594
7595
7596
7597
7598
7599
7600
7601
7602
7603
7604
7605
7606
7607
7608
7609
7610
7611
7612
7613
7614
7615
7616
7617
7618
7619
7620
7621
7622
7623
7624
7625
7626
7627
7628
7629
7630
7631
7632
7633
7634
7635
7636
7637
7638
7639
7640
7641
7642
7643
7644
7645
7646
7647
7648
7649
7650
7651
7652
7653
7654
7655
7656
7657
7658
7659
7660
7661
7662
7663
7664
7665
7666
7667
7668
7669
7670
7671
7672
7673
7674
7675
7676
7677
7678
7679
7680
7681
7682
7683
7684
7685
7686
7687
7688
7689
7690
7691
7692
7693
7694
7695
7696
7697
7698
7699
7700
7701
7702
7703
7704
7705
7706
7707
7708
7709
7710
7711
7712
7713
7714
7715
7716
7717
7718
7719
7720
7721
7722
7723
7724
7725
7726
7727
7728
7729
7730
7731
7732
7733
7734
7735
7736
7737
7738
7739
7740
7741
7742
7743
7744
7745
7746
7747
7748
7749
7750
7751
7752
7753
7754
7755
7756
7757
7758
7759
7760
7761
7762
7763
7764
7765
7766
7767
7768
7769
7770
7771
7772
7773
7774
7775
7776
7777
7778
7779
7780
7781
7782
7783
7784
7785
7786
7787
7788
7789
7790
7791
7792
7793
7794
7795
7796
7797
7798
7799
7800
7801
7802
7803
7804
7805
7806
7807
7808
7809
7810
7811
7812
7813
7814
7815
7816
7817
7818
7819
7820
7821
7822
7823
7824
7825
7826
7827
7828
7829
7830
7831
7832
7833
7834
7835
7836
7837
7838
7839
7840
7841
7842
7843
7844
7845
7846
7847
7848
7849
7850
7851
7852
7853
7854
7855
7856
7857
7858
7859
7860
7861
7862
7863
7864
7865
7866
7867
7868
7869
7870
7871
7872
7873
7874
7875
7876
7877
7878
7879
7880
7881
7882
7883
7884
7885
7886
7887
7888
7889
7890
7891
7892
7893
7894
7895
7896
7897
7898
7899
7900
7901
7902
7903
7904
7905
7906
7907
7908
7909
7910
7911
7912
7913
7914
7915
7916
7917
7918
7919
7920
7921
7922
7923
7924
7925
7926
7927
7928
7929
7930
7931
7932
7933
7934
7935
7936
7937
7938
7939
7940
7941
7942
7943
7944
7945
7946
7947
7948
7949
7950
7951
7952
7953
7954
7955
7956
7957
7958
7959
7960
7961
7962
7963
7964
7965
7966
7967
7968
7969
7970
7971
7972
7973
7974
7975
7976
7977
7978
7979
7980
7981
7982
7983
7984
7985
7986
7987
7988
7989
7990
7991
7992
7993
7994
7995
7996
7997
7998
7999
8000
8001
8002
8003
8004
8005
8006
8007
8008
8009
8010
8011
8012
8013
8014
8015
8016
8017
8018
8019
8020
8021
8022
8023
8024
8025
8026
8027
8028
8029
8030
8031
8032
8033
8034
8035
8036
8037
8038
8039
8040
8041
8042
8043
8044
8045
8046
8047
8048
8049
8050
8051
8052
8053
8054
8055
8056
8057
8058
8059
8060
8061
8062
8063
8064
8065
8066
8067
8068
8069
8070
8071
8072
8073
8074
8075
8076
8077
8078
8079
8080
8081
8082
8083
8084
8085
8086
8087
8088
8089
8090
8091
8092
8093
8094
8095
8096
8097
8098
8099
8100
8101
8102
8103
8104
8105
8106
8107
8108
8109
8110
8111
8112
8113
8114
8115
8116
8117
8118
8119
8120
8121
8122
8123
8124
8125
8126
8127
8128
8129
8130
8131
8132
8133
8134
8135
8136
8137
8138
8139
8140
8141
8142
8143
8144
8145
8146
8147
8148
8149
8150
8151
8152
8153
8154
8155
8156
8157
8158
8159
8160
8161
8162
8163
8164
8165
8166
8167
8168
8169
8170
8171
8172
8173
8174
8175
8176
8177
8178
8179
8180
8181
8182
8183
8184
8185
8186
8187
8188
8189
8190
8191
8192
8193
8194
8195
8196
8197
8198
8199
8200
8201
8202
8203
8204
8205
8206
8207
8208
8209
8210
8211
8212
8213
8214
8215
8216
8217
8218
8219
8220
8221
8222
8223
8224
8225
8226
8227
8228
8229
8230
8231
8232
8233
8234
8235
8236
8237
8238
8239
8240
8241
8242
8243
8244
8245
8246
8247
8248
8249
8250
8251
8252
8253
8254
8255
8256
8257
8258
8259
8260
8261
8262
8263
8264
8265
8266
8267
8268
8269
8270
8271
8272
8273
8274
8275
8276
8277
8278
8279
8280
8281
8282
8283
8284
8285
8286
8287
8288
8289
8290
8291
8292
8293
8294
8295
8296
8297
8298
8299
8300
8301
8302
8303
8304
8305
8306
8307
8308
8309
8310
8311
8312
8313
8314
8315
8316
8317
8318
8319
8320
8321
8322
8323
8324
8325
8326
8327
8328
8329
8330
8331
8332
8333
8334
8335
8336
8337
8338
8339
8340
8341
8342
8343
8344
8345
8346
8347
8348
8349
8350
8351
8352
8353
8354
8355
8356
8357
8358
8359
8360
8361
8362
8363
8364
8365
8366
8367
8368
8369
8370
8371
8372
8373
8374
8375
8376
8377
8378
8379
8380
8381
8382
8383
8384
8385
8386
8387
8388
8389
8390
8391
8392
8393
8394
8395
8396
8397
8398
8399
8400
8401
8402
8403
8404
8405
8406
8407
8408
8409
8410
8411
8412
8413
8414
8415
8416
8417
8418
8419
8420
8421
8422
8423
8424
8425
8426
8427
8428
8429
8430
8431
8432
8433
8434
8435
8436
8437
8438
8439
8440
8441
8442
8443
8444
8445
8446
8447
8448
8449
8450
8451
8452
8453
8454
8455
8456
8457
8458
8459
8460
8461
8462
8463
8464
8465
8466
8467
8468
8469
8470
8471
8472
8473
8474
8475
8476
8477
8478
8479
8480
8481
8482
8483
8484
8485
8486
8487
8488
8489
8490
8491
8492
8493
8494
8495
8496
8497
8498
8499
8500
8501
8502
8503
8504
8505
8506
8507
8508
8509
8510
8511
8512
8513
8514
8515
8516
8517
8518
8519
8520
8521
8522
8523
8524
8525
8526
8527
8528
8529
8530
8531
8532
8533
8534
8535
8536
8537
8538
8539
8540
8541
8542
8543
8544
8545
8546
8547
8548
8549
8550
8551
8552
8553
8554
8555
8556
8557
8558
8559
8560
8561
8562
8563
8564
8565
8566
8567
8568
8569
8570
8571
8572
8573
8574
8575
8576
8577
8578
8579
8580
8581
8582
8583
8584
8585
8586
8587
8588
8589
8590
8591
8592
8593
8594
8595
8596
8597
8598
8599
8600
8601
8602
8603
8604
8605
8606
8607
8608
8609
8610
8611
8612
8613
8614
8615
8616
8617
8618
8619
8620
8621
8622
8623
8624
8625
8626
8627
8628
8629
8630
8631
8632
8633
8634
8635
8636
8637
8638
8639
8640
8641
8642
8643
8644
8645
8646
8647
8648
8649
8650
8651
8652
8653
8654
8655
8656
8657
8658
8659
8660
8661
8662
8663
8664
8665
8666
8667
8668
8669
8670
8671
8672
8673
8674
8675
8676
8677
8678
8679
8680
8681
8682
8683
8684
8685
8686
8687
8688
8689
8690
8691
8692
8693
8694
8695
8696
8697
8698
8699
8700
8701
8702
8703
8704
8705
8706
8707
8708
8709
8710
8711
8712
8713
8714
8715
8716
8717
8718
8719
8720
8721
8722
8723
8724
8725
8726
8727
8728
8729
8730
8731
8732
8733
8734
8735
8736
8737
8738
8739
8740
8741
8742
8743
8744
8745
8746
8747
8748
8749
8750
8751
8752
8753
8754
8755
8756
8757
8758
8759
8760
8761
8762
8763
8764
8765
8766
8767
8768
8769
8770
8771
8772
8773
8774
8775
8776
8777
8778
8779
8780
8781
8782
8783
8784
8785
8786
8787
8788
8789
8790
8791
8792
8793
8794
8795
8796
8797
8798
8799
8800
8801
8802
8803
8804
8805
8806
8807
8808
8809
8810
8811
8812
8813
8814
8815
8816
8817
8818
8819
8820
8821
8822
8823
8824
8825
8826
8827
8828
8829
8830
8831
8832
8833
8834
8835
8836
8837
8838
8839
8840
8841
8842
8843
8844
8845
8846
8847
8848
8849
8850
8851
8852
8853
8854
8855
8856
8857
8858
8859
8860
8861
8862
8863
8864
8865
8866
8867
8868
8869
8870
8871
8872
8873
8874
8875
8876
8877
8878
8879
8880
8881
8882
8883
8884
8885
8886
8887
8888
8889
8890
8891
8892
8893
8894
8895
8896
8897
8898
8899
8900
8901
8902
8903
8904
8905
8906
8907
8908
8909
8910
8911
8912
8913
8914
8915
8916
8917
8918
8919
8920
8921
8922
8923
8924
8925
8926
8927
8928
8929
8930
8931
8932
8933
8934
8935
8936
8937
8938
8939
8940
8941
8942
8943
8944
8945
8946
8947
8948
8949
8950
8951
8952
8953
8954
8955
8956
8957
8958
8959
8960
8961
8962
8963
8964
8965
8966
8967
8968
8969
8970
8971
8972
8973
8974
8975
8976
8977
8978
8979
8980
8981
8982
8983
8984
8985
8986
8987
8988
8989
8990
8991
8992
8993
8994
8995
8996
8997
8998
8999
9000
9001
9002
9003
9004
9005
9006
9007
9008
9009
9010
9011
9012
9013
9014
9015
9016
9017
9018
9019
9020
9021
9022
9023
9024
9025
9026
9027
9028
9029
9030
9031
9032
9033
9034
9035
9036
9037
9038
9039
9040
9041
9042
9043
9044
9045
9046
9047
9048
9049
9050
9051
9052
9053
9054
9055
9056
9057
9058
9059
9060
9061
9062
9063
9064
9065
9066
9067
9068
9069
9070
9071
9072
9073
9074
9075
9076
9077
9078
9079
9080
9081
9082
9083
9084
9085
9086
9087
9088
9089
9090
9091
9092
9093
9094
9095
9096
9097
9098
9099
9100
9101
9102
9103
9104
9105
9106
9107
9108
9109
9110
9111
9112
9113
9114
9115
9116
9117
9118
9119
9120
9121
9122
9123
9124
9125
9126
9127
9128
9129
9130
9131
9132
9133
9134
9135
9136
9137
9138
9139
9140
9141
9142
9143
9144
9145
9146
9147
9148
9149
9150
9151
9152
9153
9154
9155
9156
9157
9158
9159
9160
9161
9162
9163
9164
9165
9166
9167
9168
9169
9170
9171
9172
9173
9174
9175
9176
9177
9178
9179
9180
9181
9182
9183
9184
9185
9186
9187
9188
9189
9190
9191
9192
9193
9194
9195
9196
9197
9198
9199
9200
9201
9202
9203
9204
9205
9206
9207
9208
9209
9210
9211
9212
9213
9214
9215
9216
9217
9218
9219
9220
9221
9222
9223
9224
9225
9226
9227
9228
9229
9230
9231
9232
9233
9234
9235
9236
9237
9238
9239
9240
9241
9242
9243
9244
9245
9246
9247
9248
9249
9250
9251
9252
9253
9254
9255
9256
9257
9258
9259
9260
9261
9262
9263
9264
9265
9266
9267
9268
9269
9270
9271
9272
9273
9274
9275
9276
9277
9278
9279
9280
9281
9282
9283
9284
9285
9286
9287
9288
9289
9290
9291
9292
9293
9294
9295
9296
9297
9298
9299
9300
9301
9302
9303
9304
9305
9306
9307
9308
9309
9310
9311
9312
9313
9314
9315
9316
9317
9318
9319
9320
9321
9322
9323
9324
9325
9326
9327
9328
9329
9330
9331
9332
9333
9334
9335
9336
9337
9338
9339
9340
9341
9342
9343
9344
9345
9346
9347
9348
9349
9350
9351
9352
9353
9354
9355
9356
9357
9358
9359
9360
9361
9362
9363
9364
9365
9366
9367
9368
9369
9370
9371
9372
9373
9374
9375
9376
9377
9378
9379
9380
9381
9382
9383
9384
9385
9386
9387
9388
9389
9390
9391
9392
9393
9394
9395
9396
9397
9398
9399
9400
9401
9402
9403
9404
9405
9406
9407
9408
9409
9410
9411
9412
9413
9414
9415
9416
9417
9418
9419
9420
9421
9422
9423
9424
9425
9426
9427
9428
9429
9430
9431
9432
9433
9434
9435
9436
9437
9438
9439
9440
9441
9442
9443
9444
9445
9446
9447
9448
9449
9450
9451
9452
9453
9454
9455
9456
9457
9458
9459
9460
9461
9462
9463
9464
9465
9466
9467
9468
9469
9470
9471
9472
9473
9474
9475
9476
9477
9478
9479
9480
9481
9482
9483
9484
9485
9486
9487
9488
9489
9490
9491
9492
9493
9494
9495
9496
9497
9498
9499
9500
9501
9502
9503
9504
9505
9506
9507
9508
9509
9510
9511
9512
9513
9514
9515
9516
9517
9518
9519
9520
9521
9522
9523
9524
9525
9526
9527
9528
9529
9530
9531
9532
9533
9534
9535
9536
9537
9538
9539
9540
9541
9542
9543
9544
9545
9546
9547
9548
9549
9550
9551
9552
9553
9554
9555
9556
9557
9558
9559
9560
9561
9562
9563
9564
9565
9566
9567
9568
9569
9570
9571
9572
9573
9574
9575
9576
9577
9578
9579
9580
9581
9582
9583
9584
9585
9586
9587
9588
9589
9590
9591
9592
9593
9594
9595
9596
9597
9598
9599
9600
9601
9602
9603
9604
9605
9606
9607
9608
9609
9610
9611
9612
9613
9614
9615
9616
9617
9618
9619
9620
9621
9622
9623
9624
9625
9626
9627
9628
9629
9630
9631
9632
9633
9634
9635
9636
9637
9638
9639
9640
9641
9642
9643
9644
9645
9646
9647
9648
9649
9650
9651
9652
9653
9654
9655
9656
9657
9658
9659
9660
9661
9662
9663
9664
9665
9666
9667
9668
9669
9670
9671
9672
9673
9674
9675
9676
9677
9678
9679
9680
9681
9682
9683
9684
9685
9686
9687
9688
9689
9690
9691
9692
9693
9694
9695
9696
9697
9698
9699
9700
9701
9702
9703
9704
9705
9706
9707
9708
9709
9710
9711
9712
9713
9714
9715
9716
9717
9718
9719
9720
9721
9722
9723
9724
9725
9726
9727
9728
9729
9730
9731
9732
9733
9734
9735
9736
9737
9738
9739
9740
9741
9742
9743
9744
9745
9746
9747
9748
9749
9750
9751
9752
9753
9754
9755
9756
9757
9758
9759
9760
9761
9762
9763
9764
9765
9766
9767
9768
9769
9770
9771
9772
9773
9774
9775
9776
9777
9778
9779
9780
9781
9782
9783
9784
9785
9786
9787
9788
9789
9790
9791
9792
9793
9794
9795
9796
9797
9798
9799
9800
9801
9802
9803
9804
9805
9806
9807
9808
9809
9810
9811
9812
9813
9814
9815
9816
9817
9818
9819
9820
9821
9822
9823
samba (2:4.20.0+dfsg-1~exp1) experimental; urgency=medium

  * new upstream release (4.20.0)
  * d/control: bump tevent/talloc/tdb versions for Build-Depends
  * d/libldb2.symbols, d/python3-ldb.symbols.in: add new version (2.9.0)
  * d/patches/meaningful-error-if-no-python3-markdown.patch: fixup
  * d/*.install: internal library names changed:
    libfoo-samba4.so.0 => libfoo-private-samba.so.0
  * d/samba-libs.install: update names for libdcerpc & libndr private libs
  * d/samba-libs.install, d/samba-libs.links, d/samba-libs.symbols:
    libndr has soversion 4 now.  This breaks binaries linked with libndr!
  * d/samba-libs.symbols: update with new ndr4 symbols
  * d/libsmbclient.symbols: update with new symbols
  * d/samba-dev.install: add smb3posix.h
  * d/not-installed: add usr/bin/wspsearch experimental windows search binary
  * d/control: libperl-json is not needed for build anymore
  * d/control: bump minimum mit-krb5 version in Build-Depends to 1.21
    (for pkg.samba.mitkrb5 build profile)
  * rebase on top of 4.19.5+dfsg-4

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 28 Mar 2024 10:51:16 +0300

samba (2:4.19.5+dfsg-4) unstable; urgency=medium

  * stop shipping python3/dist-packages/samba/tests
    (Closes: #1064512, #1063149)
  * add Debian-Specific tag to debian-specific patches
  * d/genshlibs: run dh_makeshlibs on libsmbclient0
    (Closes: #1065349)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 03 Mar 2024 15:37:16 +0300

samba (2:4.19.5+dfsg-3) unstable; urgency=medium

  * d/control: add versioned depends on dpkg-dev to avoid accidental
    build of time64_t packages on older systems
  * +lower-dns-lookup-mismatch-messages.patch (reduce log noise)
  * d/control: add libtirpc-dev and rpcsvc-proto to Build-Depends-Arch
    (Closes: #1065188)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 01 Mar 2024 19:18:35 +0300

samba (2:4.19.5+dfsg-2) unstable; urgency=medium

  * rename libsmbclient => libsmbclient0 for 64-bit time_t transition
    Closes: #1064337
  * d/libsmbclient.lintian-overrides: remove, soname now = package name
  * add Breaks: of sssd packages to samba-libs
  * +passchange-error-message.patch - fix password change error message
  * +edns0.patch: enable EDNS0 support in internal UDP-only DNS client
    https://bugzilla.samba.org/show_bug.cgi?id=15536

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 28 Feb 2024 19:38:48 +0300

samba (2:4.19.5+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release (4.19.5)
  * reformat previous changelog entry to fit in 80cols
  * d/winbind.postrm: stop recursively removing plain files
  * d/winbind.postrm: winbindd_cache.tdb is in /var/lib now,
    not in /var/cache
  * d/control: RulesRequiresRoot:no
  * d/*.symbols: use #PACKAGE# placeholders where appropriate
    (or add comments where it is not)
  * +silence-can-not-convert-group-sid.diff -
    make another log message less annoying
  * -python-fix-invalid-escape-sequences.patch (applied upstream)
  * d/control: replace pkg-config=>pkgconf in Build-Depends, remove
    pkg-config from Depends of libldb-dev and python3-ldb-dev
  * d/samba-libs.symbols, d/control: make libsmbldapN a virtual package
    provided by samba-libs too, like libndrN

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 19 Feb 2024 15:21:14 +0300

samba (2:4.19.4+dfsg-3) unstable; urgency=medium

  * samba,winbind: remove logrotate scripts
    samba does its own log rotation (max log size (=5000 by default) and
    renaming to .old).  The two clashes with each other in an interesting way.
  * d/samba-libs.symbols, d/control: make libndrN a virtual package
    to ensure rdeps pick the right dependency

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 30 Jan 2024 12:12:42 +0300

samba (2:4.19.4+dfsg-2) unstable; urgency=medium

  * d/samba.smbd.service, d/samba.nmbd.service: expand forgotten @BINDIR@

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 08 Jan 2024 20:44:51 +0300

samba (2:4.19.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release. See WHATSNEW.txt for details.
  * d/control: drop pkg.samba.nouring build profile: was needed
    for focal which we do not support anymore
  * remove /etc/cron.daily/samba: there's no reason to keep backing it up,
    most stuff is in ldb/tdb files these days.
  * d/samba.maintscript, d/winbind.maintscript:
    remove old rm_connfiles (pre-buster versions)
  * d/rules, d/*.service: provide .service files directly instead of renaming
    and patching upstream templates, and use dh_installsystemd to install them
    (partially Closes: #1059187)
  * d/rules: run dh_movetousr for libpam-winbind & libnss-winbind, if exists.
    This fixes remaining files in /lib (hopefully). In a search for better
    way to detect where to put system libs (/lib vs /usr/lib) as a configure
    option.  Closes: #1059187

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 08 Jan 2024 19:11:37 +0300

samba (2:4.19.3+dfsg-2) unstable; urgency=medium

  * d/rules: simplify LDFLAGS assignment
  * d/rules: add -mlong-jump-table-offsets to CFLAGS on m68k (fix FTBFS there)
  * d/rules: CFLAGS += -ffile-prefix-map=../../=
  * d/control: fix versioned dependency on samba for samba-ad-dc
  * +python-fix-invalid-escape-sequences.patch from upstream (Closes: #1057668)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 11 Dec 2023 13:19:18 +0300

samba (2:4.19.3+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=13595
     CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP
     to normal users (Closes: #1034803).  Please see WHATSNEW.txt file for
     more information about this issue: actual fix requires extra steps to
     be performed against samba-based AD-DC
   - https://bugzilla.samba.org/show_bug.cgi?id=15093
     Files without "read attributes" NFS4 ACL permission are not listed
     in directories
   - https://bugzilla.samba.org/show_bug.cgi?id=15487
     smbd crashes if asked to return full information on close of
     a stream handle with delete on close disposition set
   - https://bugzilla.samba.org/show_bug.cgi?id=15492
     Kerberos TGS-REQ with User2User does not work for normal accounts
   - https://bugzilla.samba.org/show_bug.cgi?id=15499
     Improve logging for failover scenarios
   - https://bugzilla.samba.org/show_bug.cgi?id=15507
     vfs_gpfs stat calls fail due to file system permissions
   - https://bugzilla.samba.org/show_bug.cgi?id=15513
     Samba doesn't build with Python 3.12
   - https://bugzilla.samba.org/show_bug.cgi?id=15520
     sid_strings test broken by unix epoch > 1700000000
   - https://bugzilla.samba.org/show_bug.cgi?id=15521
     smbd: fix close order of base_fsp and stream_fsp
     in smb_fname_fsp_destructor()
  * d/samba-common.maintscript: fix version number for dhcp hook removal
    (Closes: #1053780)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 27 Nov 2023 22:22:54 +0300

samba (2:4.19.2+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15423
     Use-after-free in aio_del_req_from_fsp during smbd shutdown
     after failed IPC FSCTL_PIPE_TRANSCEIVE
   - https://bugzilla.samba.org/show_bug.cgi?id=15426
     clidfs.c do_connect() missing a "return" after a cli_shutdown() call
   - https://bugzilla.samba.org/show_bug.cgi?id=15463
     macOS mdfind returns only 50 results
   - https://bugzilla.samba.org/show_bug.cgi?id=15481
     GETREALFILENAME_CACHE can modify incoming new filename
     with previous cache entry value
   - https://bugzilla.samba.org/show_bug.cgi?id=15464
     libnss_winbind causes memory corruption since samba-4.18,
     impacts sendmail, zabbix, potentially more
   - https://bugzilla.samba.org/show_bug.cgi?id=15479
     ctdbd: setproctitle not initialized messages flooding logs
   - https://bugzilla.samba.org/show_bug.cgi?id=15491
     CVE-2023-5568 Heap buffer overflow with freshness tokens
     in the Heimdal KDC in Samba 4.19
   - https://bugzilla.samba.org/show_bug.cgi?id=15477
     The heimdal KDC doesn't detect s4u2self correctly when fast is in use
  * d/samba-common.maintscript: remove obsolete conffile
    /etc/dhcp/dhclient-enter-hooks.d/samba (Closes: #1053780)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 16 Oct 2023 18:26:31 +0300

samba (2:4.19.1+dfsg-4) unstable; urgency=medium

  * d/samba-common.postinst: restore installing of smb.conf using ucf

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 22:33:32 +0300

samba (2:4.19.1+dfsg-3) unstable; urgency=medium

  * d/ctdb.install: sync ceph arch list
  * d/control: mention other places where ceph arch list is used

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 20:12:20 +0300

samba (2:4.19.1+dfsg-2) unstable; urgency=medium

  * d/rules: sync with-ceph arch list from d/control

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 19:03:42 +0300

samba (2:4.19.1+dfsg-1) unstable; urgency=medium

  * new stable security bugfix release:
    o CVE-2023-3961: https://www.samba.org/samba/security/CVE-2023-3961.html
      Unsanitized pipe names allow SMB clients to connect as root
      to existing unix domain sockets on the file system.
    o CVE-2023-4091: https://www.samba.org/samba/security/CVE-2023-4091.html
      SMB client can truncate files to 0 bytes by opening files with OVERWRITE
      disposition when using the acl_xattr Samba VFS module with the smb.conf
      setting "acl_xattr:ignore system acls = yes"
    o CVE-2023-4154: https://www.samba.org/samba/security/CVE-2023-4154.html
      An RODC and a user with the GET_CHANGES right can view all attributes,
      including secrets and passwords.  Additionally, the access check fails
      open on error conditions.
    o CVE-2023-42669: https://www.samba.org/samba/security/CVE-2023-42669.html
      Calls to the rpcecho server on the AD DC can request that the server
      block for a user-defined amount of time, denying service.
    o CVE-2023-42670: https://www.samba.org/samba/security/CVE-2023-42670.html
      Samba can be made to start multiple incompatible RPC listeners,
      disrupting service on the AD DC.
  * remove debconf questions and wins dhcp hooks together with po files
    (wins is not relevant today anymore)
  * d/control: bump mit-krb5 build-dep (on mitkrb5 profile) to 1.20
  * d/control: disable ceph (libcephfs-dev, librados-dev) on 32bit
    architectures (Closes: #1053202)
  * d/control: enable rados on riscv64 once it's available there
  * d/control: samba-libs: depend on libldb of the same version since libldb
    symbols might appear during previous stable series but they don't propagate
    to next releases with previous minor version numbers.  This is ABI breakage
    but the symbols are mostly internal to samba itself
  * debian/libldb2.symbols: update
  * drop attempts to keep ldb ABI versioning

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 18:02:05 +0300

samba (2:4.19.0+dfsg-1) unstable; urgency=medium

  * new upstream release. Some highlights:
   o changed command-line interface of smbget utility
   o improved winbindd logging
   o AD database prepared to FL 2016 standards for new domains
   o initial, partial implementation of AD FL 2012, 2012R2 and 2016
   o samba-tool support for silos, claims, sites and subnets
   o updated Heimdal import
   o other improvements and changes, see WHATSNEW.txt file for details.
  * d/patches: remove patches applied upstream, refresh patches
  * d/control: update talloc/tevent/tdb build-deps
  * d/smbclient.install: remove smbgetrc.5
  * d/patches: add ldb 2.7.1 & 2.7.2 ABI files
  * d/libldb2.symbols: add new symbols (ldb_val_as_*) and new version (2.8.0)
  * d/python3-ldb.symbols: remove unused versions, add new version
  * d/control: fix description of samba-common-bin (samba-client)
  * d/samba-common-bin.install: install samba-log-parser (for winbindd for now)
  * d/samba-libs.install: 2 new libs
  * d/samba-libs.install, d/samba-testsuite.install: move libshares-samba4.so.0
    from samba-libs to samba-testsuite
  * d/samba-libs.install, d/samba-vfs-modules.install: move
    libdfs-server-ad-samba4.so.0 from samba-libs to samba-vfs-modules
  * d/samba-libs.install, d/samba-common-bin.install: move
    libnet-keytab-samba4.so.0 from samba-libs to samba-common-bin (used by net)
  * d/samba-libs.install, d/samba-common-bin.install: move
    libRPC-WORKER-samba4.so.0 from samba-libs to samba-common-bin
    (used by usr/libexec/samba/rpcd_*)
  * samba-libs: add libndr 3.0.1 symbols
  * d/source/lintian-overrides: remove unused source-is-missing override
  * d/samba-vfs-modules.lintian-overrides: remove unused
    spelling-error-in-binary override

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 04 Sep 2023 22:57:48 +0300

samba (2:4.18.6+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=9959
     Windows client join fails if a second container CN=System exists somewhere
   - https://bugzilla.samba.org/show_bug.cgi?id=15289
     post-exec password redaction for samba-tool is more reliable for
     fully random passwords as it no longer uses regular expressions
     containing the password value itself
   - https://bugzilla.samba.org/show_bug.cgi?id=15342
     Spotlight sometimes returns no results on latest macOS
   - https://bugzilla.samba.org/show_bug.cgi?id=15346
     2-3min delays at reconnect with smb2_validate_sequence_number:
     bad message_id 2
   - https://bugzilla.samba.org/show_bug.cgi?id=15390
     Python tarfile extraction needs change to avoid a warning
     (CVE-2007-4559 mitigation)
   - https://bugzilla.samba.org/show_bug.cgi?id=15400
     rpcserver no longer accepts double backslash in dfs pathname
   - https://bugzilla.samba.org/show_bug.cgi?id=15414
     "net offlinejoin provision" does not work as non-root user
   - https://bugzilla.samba.org/show_bug.cgi?id=15417
     Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted
     to remove the destination
   - https://bugzilla.samba.org/show_bug.cgi?id=15420
     reply_sesssetup_and_X() can dereference uninitialized tmp pointer
   - https://bugzilla.samba.org/show_bug.cgi?id=15427
     Spotlight results return wrong date in result list
   - https://bugzilla.samba.org/show_bug.cgi?id=15430
     Missing return in reply_exit_done()
   - https://bugzilla.samba.org/show_bug.cgi?id=15433
     cm_prepare_connection() calls close(fd) for the second time
   - https://bugzilla.samba.org/show_bug.cgi?id=15435
     Regression DFS not working with widelinks = true
   - https://bugzilla.samba.org/show_bug.cgi?id=15441
     samba-tool ntacl get segfault if aio_pthread appended
   - https://bugzilla.samba.org/show_bug.cgi?id=15446
     DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed
   - https://bugzilla.samba.org/show_bug.cgi?id=15449
     mdssvc: Do an early talloc_free() in _mdssvc_open()
  * d/control: python3-testtools is only needed for selftest,
    remove from Build-Depends for now
  * d/rules: export PYTHONDONTWRITEBYTECODE=1 to stop python from generating
    .pyc caches (Closes: #1048754)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 16 Aug 2023 20:11:26 +0300

samba (2:4.18.5+dfsg-2) unstable; urgency=medium

  * d/rules, d/control: only build glusterfs support on 64bits
    (Closes: #1041996)
  * d/rules: make ceph conditional similar to gluster
  * d/rules: wrap _PYTHON_SYSCONFIGDATA_NAME setting to cross-compile case
    On e.g. buster, _PYTHON_SYSCONFIGDATA_NAME is different, so this assignment
    does not work right.  In order for it to work on buster, add condition on
    host vs build gnu type. This breaks compilation with foreign python binary.
  * d/control: fix description of samba-common-bin (samba-client)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 04 Aug 2023 17:29:06 +0300

samba (2:4.18.5+dfsg-1) unstable; urgency=medium

  * new upstream stable/security release 4.18.5, including:
   o CVE-2022-2127:  When winbind is used for NTLM authentication,
     a maliciously crafted request can trigger an out-of-bounds read
     in winbind and possibly crash it.
     https://www.samba.org/samba/security/CVE-2022-2127.html
   o CVE-2023-3347:  SMB2 packet signing is not enforced if an admin
     configured "server signing = required" or for SMB2 connections to
     Domain Controllers where SMB2 packet signing is mandatory.
     https://www.samba.org/samba/security/CVE-2023-3347.html
   o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service
     for Spotlight can be triggered by an unauthenticated attacker by
     issuing a malformed RPC request.
     https://www.samba.org/samba/security/CVE-2023-34966.html
   o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service
     for Spotlight can be used by an unauthenticated attacker to trigger
     a process crash in a shared RPC mdssvc worker process.
     https://www.samba.org/samba/security/CVE-2023-34967.html
   o CVE-2023-34968: As part of the Spotlight protocol Samba discloses
     the server-side absolute path of shares and files and directories
     in search results.
     https://www.samba.org/samba/security/CVE-2023-34968.html
   o BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023.
     https://bugzilla.samba.org/show_bug.cgi?id=15418
     (this has been patched in the previous upload; Closes: #1041043)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Jul 2023 17:55:58 +0300

samba (2:4.18.4+dfsg-2) unstable; urgency=medium

  * +fix-unsupported-netr_LogonGetCapabilities-l2.patch
    Fix windows logon/trust issues with 2023-07 windows updates:
    https://bugzilla.samba.org/show_bug.cgi?id=15418
  * d/copyright: also remove ctdb/doc/*.?.html pre-generated manpages
    from the upstream tarball (forgotten previously)
  * d/rules: add comment about -latomic gcc issue and drop --as-needed
    there since it is already in use

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 14 Jul 2023 12:30:31 +0300

samba (2:4.18.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release, including:
   - https://bugzilla.samba.org/show_bug.cgi?id=2312
     smbcacls and smbcquotas do not check // before the server
   - https://bugzilla.samba.org/show_bug.cgi?id=14030
     Named crashes on DLZ zone update (was in debian before)
   - https://bugzilla.samba.org/show_bug.cgi?id=15355
     NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry
     and causes test timeouts
   - https://bugzilla.samba.org/show_bug.cgi?id=15381
     Register Samba processes with GPFS
   - https://bugzilla.samba.org/show_bug.cgi?id=15382
     cli_list loops 100% CPU against pre-lanman2 servers
   - https://bugzilla.samba.org/show_bug.cgi?id=15383
     Remove comments about deprecated 'write cache size'
   - https://bugzilla.samba.org/show_bug.cgi?id=15384
     net ads lookup (with unspecified realm) fails
   - https://bugzilla.samba.org/show_bug.cgi?id=15390
     Python tarfile extraction needs change to avoid a warning
     (CVE-2007-4559 mitigation)
   - https://bugzilla.samba.org/show_bug.cgi?id=15391
     smbclient leaks fds with showacls
   - https://bugzilla.samba.org/show_bug.cgi?id=15398
     The winbind child segfaults when listing users with
     `winbind scan trusted domains = yes`
   - https://bugzilla.samba.org/show_bug.cgi?id=15402
     smbd returns NOT_FOUND when creating files on a r/o filesystem
   - https://bugzilla.samba.org/show_bug.cgi?id=15403
     smbget memory leak if failed to download files recursively
   - https://bugzilla.samba.org/show_bug.cgi?id=15404
     Backport --pidl-developer fixes
  * remove dnsserver-rename-dns_name_equal.patch (applied upstream)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 05 Jul 2023 18:14:20 +0300

samba (2:4.18.3+dfsg-3) unstable; urgency=medium

  * d/rules: query for DEB_HOST_ARCH, not DEB_HOST_ARCH_CPU,
    for -latomic workaround

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 21 Jun 2023 23:11:59 +0300

samba (2:4.18.3+dfsg-2) unstable; urgency=medium

  * d/rules: include -latomic gcc issue workaround for select arches
    apparently due to a gcc issue, some architectures (armel, mipsel, ...)
    fail to link samba due to not finidng __atomic_load_8 etc symbols
    after using atomic_load etc from stdatomic.h (part of gcc).
    Add -latomic explicitly to the list of libraries we link with.
  * d/rules: add libwbclient0 to the list of krb5-versioned packages
   (thanks to Andrew Kornilov)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 20 Jun 2023 11:35:13 +0300

samba (2:4.18.3+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15375
     Symlinks to files can have random DOS mode information
     in a directory listing
   - https://bugzilla.samba.org/show_bug.cgi?id=15378
     vfs_fruit might cause a failing open for delete
   - https://bugzilla.samba.org/show_bug.cgi?id=15361
     winbind recurses into itself via rpcd_lsad
   - https://bugzilla.samba.org/show_bug.cgi?id=15366
     wbinfo -u fails on ad dc with >1000 users
   - https://bugzilla.samba.org/show_bug.cgi?id=15338
     DS ACEs might be inherited to unrelated object classes
   - https://bugzilla.samba.org/show_bug.cgi?id=15362
     a lot of messages: get_static_share_mode_data:
     get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND
   - https://bugzilla.samba.org/show_bug.cgi?id=15374
     aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse()
   - https://bugzilla.samba.org/show_bug.cgi?id=15360
     Setting veto files = /.*/ break listing directories
   - https://bugzilla.samba.org/show_bug.cgi?id=15363
     "samba-tool domain provision" does not run interactive mode
     if no arguments are given
   - https://bugzilla.samba.org/show_bug.cgi?id=15325
     dsgetdcname: assumes local system uses IPv4
  * dnsserver-rename-dns_name_equal.patch
    (forgotten) patch from upstream targetting next stable
    Fixes crashes of named with samba DLZ plugin due to
    symbol name conflict (dns_name_equal() function).
    There's no resulting code changes, just a symbol rename.
    https://bugzilla.samba.org/show_bug.cgi?id=14030
    Closes: #1036587, #927747
  * remove generated manpage files upstream ships in
    docs/manpages/ and ctdb/doc/

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 31 May 2023 20:09:05 +0300

samba (2:4.18.2+dfsg-1) experimental; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15302
     Log flood: smbd_calculate_access_mask_fsp: Access denied:
     message level should be lower.
   - https://bugzilla.samba.org/show_bug.cgi?id=15306
     Floating point exception (FPE) via cli_pull_send
     at source3/libsmb/clireadwrite.c.
   - https://bugzilla.samba.org/show_bug.cgi?id=15328
     test_tstream_more_tcp_user_timeout_spin fails intermittently
     on Rackspace GitLab runners.
   - https://bugzilla.samba.org/show_bug.cgi?id=15329
     Reduce flapping of ridalloc test.
   - https://bugzilla.samba.org/show_bug.cgi?id=15351
     large_ldap test is unreliable.
   - https://bugzilla.samba.org/show_bug.cgi?id=15143
     New filename parser doesn't check veto files smb.conf parameter.
   - https://bugzilla.samba.org/show_bug.cgi?id=15354
     mdssvc may crash when initializing.
   - https://bugzilla.samba.org/show_bug.cgi?id=15313
     large directory optimization broken for non-lcomp path elements.
   - https://bugzilla.samba.org/show_bug.cgi?id=15357
     streams_depot fails to create streams.
   - https://bugzilla.samba.org/show_bug.cgi?id=15358
     shadow_copy2 and streams_depot don't play well together.
   - https://bugzilla.samba.org/show_bug.cgi?id=15316
     Flapping tests in samba_tool_drs_show_repl.py.
   - https://bugzilla.samba.org/show_bug.cgi?id=15317
     winbindd idmap child contacts the domain controller without a need.
   - https://bugzilla.samba.org/show_bug.cgi?id=15318
     idmap_autorid may fail to map sids of trusted domains for the first time.
   - https://bugzilla.samba.org/show_bug.cgi?id=15319
     idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings.
   - https://bugzilla.samba.org/show_bug.cgi?id=15323
     net ads search -P doesn't work against servers in other domains.
   - https://bugzilla.samba.org/show_bug.cgi?id=15353
     Temporary smbXsrv_tcon_global.tdb can't be parsed.
   - https://bugzilla.samba.org/show_bug.cgi?id=15316
     Flapping tests in samba_tool_drs_show_repl.py.
   - https://bugzilla.samba.org/show_bug.cgi?id=15343
     Tests use depricated and removed methods like assertRegexpMatches.
  * d/rules, d/libldb2.symbols; add ldb 2.6.2 version
  * heimdal-to-support-KEYRING-ccache.patch: enable KEYRING in heimdal
    (Closes: #1023609)
  * d/control: build-depend on libkeyutils-dev
    (it is pulled by some other dep, but better to be safe)
  * -s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
    (the change has been applied upstream)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Apr 2023 14:02:49 +0300

samba (2:4.18.1+dfsg-1~exp1) experimental; urgency=high

  * upstream stable/security/bugfix release, fixing the following issues:
    o CVE-2023-0225: An incomplete access check on dnsHostName allows
      authenticated but otherwise unprivileged users to delete this
      attribute from any object in the directory.
      https://www.samba.org/samba/security/CVE-2023-0225.html
    o CVE-2023-0922: The Samba AD DC administration tool, when operating
      against a remote LDAP server, will by default send new or reset
      passwords over a signed-only connection.
      https://www.samba.org/samba/security/CVE-2023-0922.html
    o CVE-2023-0614: Fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919
      Confidential attribute disclosure via LDAP filters was insufficient and
      an attacker may be able to obtain confidential BitLocker recovery keys
      from a Samba AD DC.  Installations with such secrets in their Samba AD
      should assume they have been obtained and need replacing.
      https://www.samba.org/samba/security/CVE-2023-0614.html
    Closes: CVE-2023-0225 CVE-2023-0922 CVE-2023-0614
  * update libldb symbols and versions

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 29 Mar 2023 17:59:17 +0300

samba (2:4.18.0+dfsg-1~exp1) experimental; urgency=medium

  * new upstream release (4.18.0):
   * SMB Server performance improvements
   * More succinct samba-tool error messages
   * Colour output with samba-tool --color
   * New samba-tool dsacl subcommand for deleting ACES
   * New wbinfo option --change-secret-at
   * New option to change the NT ACL default location
   * Azure Active Directory / Office365 synchronisation improvements
   * new smb.conf parameters:
     server addresses
     acl_xattr:security_acl_name
   * For more details, please refer to WHATSNEW.txt file.
  * d/control: bump talloc/tdb/tevent build-deps
  * patches:
    - refresh: hurd-compat.patch
    - refresh: spelling.patch, remove many, add 3 new changes
    - new: heimdal-spelling.patch, spelling fixes for third_party/heimdal
    - remove: unwrap-getresgid-typo.patch, not needed
  * d/samba-libs.install: add new internal library libstable-sort-samba4.so.0
  * d/libldb2.symbols, python3-ldb.symbols.in: add new versions (2.7.0, 2.7.1)
  * d/libwbclient0.symbols: add new version and two new symbols:
     wbcChangeTrustCredentialsAt wbcCtxChangeTrustCredentialsAt

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 09 Mar 2023 14:47:05 +0300

samba (2:4.17.6+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release 4.17.6:
   * https://bugzilla.samba.org/show_bug.cgi?id=15314
     streams_xattr is creating unexpected locks on folders.
   * https://bugzilla.samba.org/show_bug.cgi?id=10635
     Use of the Azure AD Connect cloud sync tool is now supported for password
     hash synchronisation, allowing Samba AD Domains to synchronise passwords
     with this popular cloud environment.
   * https://bugzilla.samba.org/show_bug.cgi?id=15299
     Spotlight doesn't work with latest macOS Ventura.
   * https://bugzilla.samba.org/show_bug.cgi?id=15310
     New samba-dcerpc architecture does not scale gracefully.
   * https://bugzilla.samba.org/show_bug.cgi?id=15307
     vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd()
     in close and fstat.
   * https://bugzilla.samba.org/show_bug.cgi?id=15293
     With clustering enabled samba-bgqd can core dump due to use after free.
   * https://bugzilla.samba.org/show_bug.cgi?id=15311
     fd_load() function implicitly closes the fd where it should not.
  * debian/po/ro.po update from Remus-Gabriel Chelu
  * s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
     makes smbd a bit less spammy in logs
  * d/control: clarify some package descriptions (Closes: #1031922)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 09 Mar 2023 12:52:14 +0300

samba (2:4.17.5+dfsg-2) unstable; urgency=medium

  * d/control: samba: depends on exact version of python3-samba
  * d/control: fix typo
  * more tweaks for foreign/cross build
  * d/control: work around autodep8 #904999 again
  * introduce upstream-like aliases for debian .service names,
    add rationale

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 04 Feb 2023 17:15:40 +0300

samba (2:4.17.5+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release. From WHATSNEW.txt:
    * BUG 14808: smbc_getxattr() return value is incorrect.
    * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX
      are not handled correctly.
    * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors.
    * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs()
      fails to find DC when there is only an AAAA record for the DC in DNS
      (Closes: #1023606).
    * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle.
    * BUG 15277: DFS links don't work anymore on Mac clients since 4.17.
    * BUG 15283: vfs_virusfilter segfault on access,
      directory edgecase (accessing NULL value).
    * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
      based SChannel on NETLOGON (additional changes).
    * BUG 15243: %U for include directive doesn't work for share listing
      (netshareenum) (the fix was in debian before).
    * BUG 15266: Shares missing from netshareenum response in samba 4.17.4
      (the fix was in debian before).
    * BUG 15269: ctdb: use-after-free in run_proc.
    * BUG 15280: irpc_destructor may crash during shutdown.
    * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo.
    * BUG 15268: smbclient segfaults with use after free on an optimized build
    * BUG 15282: smbstatus leaking files in msg.sock and msg.lock.
    * BUG 15164: Leak in wbcCtxPingDc2.
    * BUG 15265: Access based share enum does not work in Samba 4.16+.
    * BUG 15267: Crash during share enumeration.
    * BUG 15271: rep_listxattr on FreeBSD does not properly check
      for reads off end of returned buffer.
    * BUG 15281: Avoid relying on C89 features in a few places.
  * remove patches applied upstream:
   - reload-registry-shares-after-reloading-services.patch
   - rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
  * d/control: Standards-Version: 4.6.2 (no changes)
  * d/control: put all doc-generating build-deps into one line
  * little prep for cross-compilation
    - build-depend on python3:any and python3-dev:any
    - build-depend on libpython3-dev for actual module building,
      and use arch-specific python3-config from there
    - set and export _PYTHON_SYSCONFIGDATA_NAME to get foreign-arch values
      provided by libpython3-dev (also helps when python itself is foreign)
    - depend on perl:any not just perl
    - export CC/CPP/LD/PKGCONFIG for ./configure (buildtools.mk)
  * d/gbp.conf: unignore branch
  * d/control: samba, ctdb, winbind: do not depend on lsb-base
    (the script is in sysvinit-utils now)
  * d/control: drop unused build-dep on libncurses5-dev

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 27 Jan 2023 11:15:01 +0300

samba (2:4.17.4+dfsg-3) unstable; urgency=medium

  * +rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
    https://bugzilla.samba.org/show_bug.cgi?id=15265
  * +reload-registry-shares-after-reloading-services.patch
    https://bugzilla.samba.org/show_bug.cgi?id=15266
  * d/samba.postinst: fix /var/spool/samba => /var/tmp handling
    (old spooldir can be referred to in other sections too)
  * create common script "is-configured" to check if the service is configured
    in smb.conf, and stop masking services in postinst
  * rewrite SysV init scripts (simplify, make consistent, etc)
  * d/winbind.postinst: create/change /var/lib/samba/winbindd_privileged
    at install time only (it should be in /run/samba/ somewhere these days)
  * d/control: change version of samba which samba-ad-provisioning
    Breaks to where provisioning was split out

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 03 Jan 2023 10:45:36 +0300

samba (2:4.17.4+dfsg-2) unstable; urgency=medium

  * d/control: samba-dc-provision Replaces+Breaks samba (< 4.17.4+dfsg-2).
    Closes: #1026387

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 19 Dec 2022 16:36:00 +0300

samba (2:4.17.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/security release, with the following changes:
   - CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege
     Vulnerability disclosed by Microsoft on Nov 8 2022, see
     https://www.samba.org/samba/security/CVE-2022-37966.html
   - CVE-2022-37967: Windows Kerberos Elevation of Privilege Vulnerability
     disclosed by Microsoft on Nov 8 2022. See
     https://www.samba.org/samba/security/CVE-2022-37967.html
   - CVE-2022-38023: Weak "RC4" (rc4-hmac) protection of the NetLogon Secure
     channel uses, see https://www.samba.org/samba/security/CVE-2022-38023.html
    There are several important behavior changes included in this release,
    which may cause compatibility problems interacting with system still
    expecting the former behavior.  Please read the documents referenced above!
    See also the WHATSNEW.txt document, as there are several new, changed
    and deprecated smb.conf parameters.
  * Other bugfixes in this release (from WHATSNEW.txt):
    https://bugzilla.samba.org/show_bug.cgi?id=14929 CVE-2022-44640
     Upstream Heimdal free of user-controlled pointer in FAST.
    https://bugzilla.samba.org/show_bug.cgi?id=15219
     Heimdal session key selection in AS-REQ examines wrong entry.
    https://bugzilla.samba.org/show_bug.cgi?id=13135 The KDC logic around
     msDs-supportedEncryptionTypes differs from Windows.
    https://bugzilla.samba.org/show_bug.cgi?id=14611 CVE-2021-20251
     Bad password count not incremented atomically.
    https://bugzilla.samba.org/show_bug.cgi?id=15206 libnet: change_password()
     doesn't work with dcerpc_samr_ChangePasswordUser4()
    https://bugzilla.samba.org/show_bug.cgi?id=15230
     Memory leak in snprintf replacement functions.
    https://bugzilla.samba.org/show_bug.cgi?id=15253 RODC doesn't reset
     badPwdCount reliable via an RWDC (CVE-2021-20251 regression).
    https://bugzilla.samba.org/show_bug.cgi?id=15198
     Prevent EBADF errors with vfs_glusterfs.
    https://bugzilla.samba.org/show_bug.cgi?id=15243
     %U for include directive doesn't work for share listing (netshareenum).
    https://bugzilla.samba.org/show_bug.cgi?id=15257
     Stack smashing in net offlinejoin requestodj.
  * removed patches which are now included upstream:
   - nsswitch-pam-data-time_t.patch
   - CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 15 Dec 2022 21:54:31 +0300

samba (2:4.17.3+dfsg-4) unstable; urgency=medium

  * create samba-ad-provision package with contents of /usr/share/samba/setup.
    It is recommended by samba, so can be uninstalled if not needed.
  * create samba-ad-dc package. It is an empty metapackage for now, but with
    dependencies needed to run an Active Directory Domain Controller (AD-DC)
  * samba-ad-provision.lintian-overrides: license files
  * print meaningful error message if samba-ad-provision is not installed
    (meaningful-error-if-no-samba-ad-provision.patch)
  * print meaningful error message if python3-markdown is not installed
    (meaningful-error-if-no-python3-markdown.patch)
  * ctdb: move rundir from /var/run to /run
  * fix typo in fruit patch
  * a few more spelling fixes
  * add #DEBHELPER# tokens to libnss-winbind.{postinst,postrm}
  * remove mentions of /var/spool/samba from samba.lintian-overrides
    (moved to /var/tmp)
  * change embedded-library heimdal lintian override in a way to be understood
    by both old and new lintian, so the package can be uploaded

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 05 Dec 2022 14:39:43 +0300

samba (2:4.17.3+dfsg-3) unstable; urgency=medium

  * d/control: winbind should depend on the same binary:Version
    of libwbclient, or else its components can't talk to the daemon.
    Thank you Stefan Weichinger for the patience while finding this one!
  * libnss-winbind: add postinst/postrm scripts to add/remove nsswitch.conf
    entry for winbind (but not for wins)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 01 Dec 2022 22:38:07 +0300

samba (2:4.17.3+dfsg-2) unstable; urgency=medium

  * fruit-disable-useless-size_t-overflow-check.patch (Closes: #974868)
  * CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
    Fix regression on 32bit systems:
    https://bugzilla.samba.org/show_bug.cgi?id=15203

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 21 Nov 2022 20:41:46 +0300

samba (2:4.17.3+dfsg-1) unstable; urgency=medium

  * new upstream security release 4.17.3, fixing the following issue:
    CVE-2022-42898: Heimdal Kerberos libraries suffers from an integer
    multiplication overflow vulnerability which affects 32bit platforms,
    see https://www.samba.org/samba/security/CVE-2022-42898.html
    This changes third_party/heimdal/, it does not affect mitkrb5 builds.
  * d/rules: stop stripping +dfsg suffix from ldb version
  * d/control: declare dependency on password (for groupadd in postinst)
    for winbind and samba (Closes: #1023759)
  * implement pkg.samba.mitkrb5 build profile to build with system mit-krb5
    (with "mitkrb5" version suffix in some packages for now)
  * d/control: mark libufing-dev build dep with <!pkg.samba.nouring>
    (to simplify out-of-archive builds for older systems)
  * d/rules: parametrise list of packages to omit (eg on ubuntu-i386)
    with ${omit-pkgs}
  * d/rules: use variables in a more consistent way, use single ${config-args}
  * d/control: tdb-tools and lmdb-utils packages are also needed for tests
    (everything is commented out for now anyway)
  * d/rules: update knownfail tests
  * d/rules: stop exporting buildflags, export compiler options when needed
  * d/rules: always define rados:Depends & vfsmods:Depends substvars
  * unwrap-getresgid-typo.patch - fix crash during p11-kit execution
    (https://bugzilla.samba.org/show_bug.cgi?id=15227) (for the testsuite only)
  * nsswitch-pam-data-time_t.patch - fix time_t not fit in a pointer (eg x32)
    (https://bugzilla.samba.org/show_bug.cgi?id=15224)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 15 Nov 2022 19:26:10 +0300

samba (2:4.17.2+dfsg-9) unstable; urgency=medium

  * hurd-compat.patch: some minor compatibility tweaks for hurd
  * d/rules compat work:
    - ceph is linux-only like glusterfs
    - d/rules: add another conditional, with_snapper
    - combine linux features into single block
  * d/rules: support "terse" build option for non-verbose build
  * d/rules: remove third_party/heimdal/lib/gssapi/gssapi.h before build
    (Closes: #1013205). This fixes -I path order and <gssapi/gssapi.h>
    include mess which caused samba to FTBFS on sparc64 for quite some time

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 06 Nov 2022 20:13:19 +0300

samba (2:4.17.2+dfsg-8) unstable; urgency=medium

  * d/rules: do not explicitly enable quotas on non-linux:
    enable everything interesting on linux explicitly and let ./configure
    to figure it out in other systems.  This should fix FTBFS problem on hurd.
  * d/rules: do not disable systemd on non-linux, let ./configure figure it out
  * d/winbind.postinst: switch addgroup => groupadd and eliminate getent.
    winbind package never declared dependency on adduser but always used
    addgroup command in its postinst script. Finally this broke piuparts.
    Switch to groupadd which is even easier to use.
  * d/samba.postinst: switch addgroup => groupadd and eliminate getent
  * d/smb.conf: use useradd in example create user script too

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 03 Nov 2022 15:04:46 +0300

samba (2:4.17.2+dfsg-7) unstable; urgency=medium

  * another way to work around #1013259: provide a compatibility symlink
    libndr.so.2 pointing to libndr.so.3:
    - libndr-debug-level-compat.diff, libndr-revert-so3.diff: remove
    - d/samba-libs.symbols: adjust symbols/versions
    - d/samba-libs.install: libndr.so.2 => libndr.so.3
    - d/samba-libs.links: provide the compat libndr.so.2 symlink
  * d/samba-libs.links: add comments describing libndr.so.N issue
  * d/samba-libs.links: add libndr.so.1 compat symlink too (for bullseye sssd)
  * d/control: unbreak bullseye/jammy sssd-ad-common, sssd-ad, sssd-ipa
    by samba-libs once libndr.so.1 compat link is here

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 20:43:53 +0300

samba (2:4.17.2+dfsg-6) unstable; urgency=medium

  * d/control: fix comment in previous upload

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 10:45:26 +0300

samba (2:4.17.2+dfsg-5) unstable; urgency=medium

  * d/control: bump version of broken-by-samba-libs sssd
    and add more affected sssd packages;
    also reformat the comment there so dpkg-gencontrol does not complain

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 09:34:10 +0300

samba (2:4.17.2+dfsg-4) unstable; urgency=medium

  * d/control: stop suggesting old/orphaned/gone-upstream smbldap-tools
  * libndr work (Closes: #1013259):
   - d/control: samba-libs breaks bullseye sssd-ad due to libndr.so.1=>.2 bump
   - d/samba-libs.install: be more explicit about sonames of public libs
     to catch soname changes
   - libndr-debug-level-compat.diff, libndr-revert-so3.diff: revert
     libndr.so.2->3 soname bump by providing compat wrapper for new symbol
   - d/samba-libs.symbols: provide symbols for libndr.so.2

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 01 Nov 2022 12:53:22 +0300

samba (2:4.17.2+dfsg-3) unstable; urgency=low

  * rebase on top of debian 4.16.6+dfsg-6 release, include some
    history of 4.17.* experimental releases in changelog
  * d/samba-libs.lintian-overrides: update package-name-doesnt-match-sonames
    to match all libs
  * urgency is set to low to delay unstable->testing transition a bit

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 30 Oct 2022 16:23:51 +0300

samba (2:4.17.2+dfsg-2) experimental; urgency=medium

  * d/rules: stop dh_installpam from installing samba.pam
    to the samba package (Closes: #1022775, #1022776)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 20:13:53 +0300

samba (2:4.17.2+dfsg-1) experimental; urgency=medium

  * upstream 4.17.2 security release:
   CVE-2022-3592 A malicious client can use a symlink to escape the exported
   directory. https://www.samba.org/samba/security/CVE-2022-3592.html
   (Samba 4.17 only)
  * Remove poptGetArg-misuse-fixes-1022826.diff (applied to 4.17.2)
  * d/rules: no need to build compile_et,asn1_compile intermediate targets
    anymore; also remove now-unused ${WAFv} macro

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 14:30:44 +0300

samba (2:4.17.1+dfsg-1) experimental; urgency=medium

  * new upstream bugfix release containing a security fix:
    * CVE-2021-20251 Bad password count not incremented atomically.
  * Merge changes from 4.16.x (debian/master) branch.
  * use-bzero-instead-of-memset_s.diff : use explicit_bzero() instead of
    bzero() for the substitute of memset_s(). bzero() is wrong here because
    it, just like memset, can be optimized out by the compiler.

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Oct 2022 21:34:11 +0300

samba (2:4.17.0+dfsg-2) experimental; urgency=medium

  * mention closing of CVE-2022-32743 by the 4.17.0 upload
  * mention closing of CVE-2022-1615 by the 4.17.0 upload
  * move libpac-samba4.so.0 from samba to samba-libs (Closes: #1021450)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 08 Oct 2022 23:00:05 +0300

samba (2:4.17.0+dfsg-1) experimental; urgency=medium

  * new upstream release 4.17.0
    Closes: CVE-2022-1615
    Closes: #1021022, CVE-2022-32743
  * removed: spelling.patch (partially applied upstream)
  * removed: weak-crypto-allowed-clarify.diff (applied upstream)
  * refresh: ctdb-create-piddir.patch
  * refresh: fix-nfs-service-name-to-nfs-kernel-server.patch
  * d/control: update minimum versions for talloc/tevent/tdb
  * d/rules: do not install ctdb.service, it is installed by upstream now
  * d/ctdb.install: do not install ctdb_wrapper (not used anymore)
  * d/libldb2.symbols, d/d/python3-ldb.symbols.in: new versions: 2.6.0 2.6.1
    per upstream, re-version symbols added in 2.5.2 as added in 2.6.1
    (ldb users needs to be recompiled anyway after updating libldb)
  * new: spelling.patch: a few more spelling fixes
  * d/control: bump Standards-Version to 4.6.1 (no changes)
  * Remove dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch
    (included in 4.17.0 already)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 13 Sep 2022 20:47:05 +0300

samba (2:4.16.6+dfsg-6) unstable; urgency=medium

  * d/rules: use the right dir for dh_shlibdeps -l (long-standing issue)
  * rewrite shlibs/symbols-generating file d/genshlibs, make whole process
    much more clean and strighforward, and 10x times faster too
  * debian/libnss-winbind.triggers: activate ldconfig trigger
  * add debian/samba-libs.symbols with libsmbldap library
  * d/samba.examples: do not install smbadduser: csh considered harmful
  * d/rules: remove long-unused commented-out override_dh_perl-arch
  * d/samba.lintian-overrides: *docs-outside-share-doc usr/share/samba/setup/
  * d/genshlibs: add the forgotten mkdir for d/$pkg/DEBIAN
  * remove static/fixed branding d/patches/VERSION.patch
  * d/rules: implement dynamic branding of VERSION file based on dpkg-vendor
  * d/rules: simplify package interdependency checking rules
  * d/rules: add a lot more interpackage dependency checks
  * d/NEWS: merge it into d/samba.NEWS (removes several lintian warnings)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 29 Oct 2022 08:28:53 +0300

samba (2:4.16.6+dfsg-5) unstable; urgency=medium

  * move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz manpages to
    winbind package where they belong and where actual idmap modules lives.
    (install all idmap_*.8 manpages to winbind package)
  * d/rules: install pam.d/samba with mode 0644, not 0755
  * many lintian-override updates:
   - source: ctdb/doc/*.html actually has sources
   - source: +very-long-line-length-in-source-file * (for generated files)
   - source: +debian-control-has-unusual-field-spacing Breaks
   - winbind: +spare-manual-page for module manpages
   - *: update some overrides for new lintian
   - libpam-winbind: +spare-manual-page pam_winbind.8
   - libldb2: +package-contains-empty-directory .../ldb/modules/ldb/
   - *: +hardening-no-fortify-functions for some simple shared libs

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 26 Oct 2022 22:27:00 +0300

samba (2:4.16.6+dfsg-4) unstable; urgency=medium

  * poptGetArg-misuse-fixes-1022826.diff: fix poptGetArg() misuse
    for popt-1.9 (Closes: #1022826)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 26 Oct 2022 19:45:38 +0300

samba (2:4.16.6+dfsg-3) unstable; urgency=medium

  * d/rules: stop dh_installpam from installing samba.pam
    to the samba package (Closes: #1022775, #1022776)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 20:13:53 +0300

samba (2:4.16.6+dfsg-2) unstable; urgency=medium

  * d/rules: pam.d/samba should go to /etc, not /
  * d/README.source.md: it is README.source.md not README.source
  * d/control: bump Standards-Version to 4.6.1 (no changes)
  * d/rules: verify that samba-libs does not depend on samba

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 13:55:33 +0300

samba (2:4.16.6+dfsg-1) unstable; urgency=medium

  * new upstream security release 4.16.6, fixing:
    CVE-2022-3437:  There is a limited write heap buffer overflow in the GSSAPI
    unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba).
    https://www.samba.org/samba/security/CVE-2022-3437.html
  * use explicit_bzero() instead of bzero() for the substitute of memset_s()
  * d/rules: make it a bit more consistent with other samba packages
  * d/rules: stop exporting ${PYTHON}
  * a bunch of ubuntu-related changes:
   - d/rules: omit glusterfs on ubuntu-i386
   - apply Ubuntu changes to smb.conf at install time (d/smb.conf.ubuntu.diff)
   - d/tests/: ensure io_uring module is built before testing it
   - d/rules: inline parallel check from dpkg/buildopts.mk
    (buildopts.mk does not exist on ubuntu 20.04 focal)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 12:48:20 +0300

samba (2:4.16.5+dfsg-2) unstable; urgency=medium

  [ Michael Tokarev ]
  * d/tests/util: use printf for formatting password for smbpasswd,
    not non-standard echo \n (mr !60)
  * introduce LDB_2.4.4 version symbol (Closes: #1021371)
    Create an empty ABI file just to make the scripts run during the build
    stage to introduce LDB_2.4.4 version symbol into libldb.so, and remove
    this empty file in the clean target. It is a bit hackish but works fine.
    This is only needed to upgrade from bullseye to bookworm, from
    4.13.13+dfsg-1~deb11u5+ to the next release, 4.16+.
    Remove this for bookworm+.
  * dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch:
    GnuTLS gnutls_rnd() can fail and give predictable random values.
    Closes: #1021024, CVE-2022-1615

  [ John Paul Adrian Glaubitz ]
  * disable ceph support on ppc64 and x32 (Closes: #1020781, #1012165)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 08 Oct 2022 15:11:15 +0300

samba (2:4.16.5+dfsg-1) unstable; urgency=medium

  * new (minor) upstream release 4.16.5
  * removed fix-samba-tool-domain-join-segfault.patch (included upstream)
  * d/gbp.conf: no need to filter orig.tar: uscan already does that

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 08 Sep 2022 12:44:38 +0300

samba (2:4.16.4+dfsg-2) unstable; urgency=medium

  * d/libldb2.symbols: include newly added symbols

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 01 Aug 2022 15:43:11 +0300

samba (2:4.16.4+dfsg-1) unstable; urgency=high

  * new upstream security release fixing:
    o CVE-2022-2031: Samba AD users can bypass certain restrictions associated
      with changing passwords.
      https://www.samba.org/samba/security/CVE-2022-2031.html
    o CVE-2022-32742: Server memory information leak via SMB1.
      https://www.samba.org/samba/security/CVE-2022-32742.html
    o CVE-2022-32744: Samba AD users can forge password change requests
      for any user.
      https://www.samba.org/samba/security/CVE-2022-32744.html
    o CVE-2022-32745: Samba AD users can crash the server process with an LDAP
      add or modify request.
      https://www.samba.org/samba/security/CVE-2022-32745.html
    o CVE-2022-32746: Samba AD users can induce a use-after-free in the server
      process with an LDAP add or modify request.
      https://www.samba.org/samba/security/CVE-2022-32746.html
   * Closes: #1016449, CVE-2022-2031 CVE-2022-32742, CVE-2022-32744,
     CVE-2022-32745, CVE-2022-32746

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 27 Jul 2022 18:35:53 +0300

samba (2:4.16.3+dfsg-1) unstable; urgency=medium

  [ Michael Tokarev ]
  * new upstream minor/bugfix releae. See WHATSNEW.txt for details.
  * d/watch: add the forgotten repacksuffix=+dfsg

  [ Andreas Hasenack ]
  * update nfs configuration examples for ctdb

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 18 Jul 2022 17:15:07 +0300

samba (2:4.16.2+dfsg-1) unstable; urgency=medium

  * new upstream minor/bugfix release.
  * removed waf-add-support-for-GNU-kFreeBSD.patch (applied upstream)
  * new minor version of libldb
    (no code changes, just the build system update to support python 3.11)
  * move samba-dcerpcd from samba package to samba-common-bin due to winbind
    New in 4.16 samba-dcerpcd binary is used by smbd and winbind, so putting
    it to samba package makes winbind unable to run it without samba.
    For now, in order to fix this issue, move this binary from samba to
    samba-common-bin package. It might be worth creating its own package
    for this binary (or maybe some more binaries), once it is clear where
    upstream is going to.  Making this binary a part of samba-common-bin
    adds some more files to smbclient-only setup.
    (Closes: #1012240)
  * remove mksmbpasswd script and manpage: we have smbpasswd whcih can add
    entries to smbpasswd file if needed, and can handle other passwod storage
    formats too

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 13 Jun 2022 19:08:44 +0300

samba (2:4.16.1+dfsg-8) unstable; urgency=medium

  * fix the Breaks/Replaces versions in the previous upload for moving
    libsamba-utils.so, and use the same Breaks/Replaces for the -dev
    packages too

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 07 Jun 2022 14:11:09 +0300

samba (2:4.16.1+dfsg-7) unstable; urgency=medium

  * drop libunwind-dev build dependency again: it turned out the
    internal stack unwind is better anyway
  * move libsamba-utils.so and its dependencies from libwbclient0
    into samba-libs. In the past, libwbclient were built using this
    library, but it does not depend on libsamba-utils anymore
  * d/control: libnss-winbind and libpam-winbind does not depend
    on samba-common. None of the files in samba-common are used by
    nss and pam modules; winbind does use them but not the modules.
  * d/rules: add --with-sockets-dir=/run/samba (or else it was
    /var/run/samba)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 07 Jun 2022 12:09:50 +0300

samba (2:4.16.1+dfsg-6) unstable; urgency=medium

  * d/control: specify arch list for libunwind-dev build-dep to be the same
    as for libunwind itself (it is not built on all architectures)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 29 May 2022 12:09:22 +0300

samba (2:4.16.1+dfsg-5) unstable; urgency=medium

  * add-missing-libs-deps.diff: add missing dependencies for a few samba
    libraries. Closes: #1010922
  * point [printers] to /var/tmp/, stop shipping /var/spool/samba/.
    For a long time, we shipped an alternative /var/tmp/ directory with mode
    01777 (so that anyone can use it to store files) but without the same setup
    as for regular /var/tmp/ (in particular, without removing old files and
    since it is not a usual place to store temp files, no one actually looked
    at it the same way someone would take care of /var/tmp/.  Change smb.conf
    to use /var/tmp/ instead of /var/spool/samba/. In the postinst script,
    remove /var/spool/samba/, check if it is still used in smb.conf,
    and create a compatibility symlink pointing to tmp/, suggesting changing
    smb.conf.  And remove this compat symlink in postrm.
    This probably can be accomplished by a debconf question, but the
    thing is complicated by the fact that smb.conf might be upgrading
    too at the same time.
  * debian/patches/weak-crypto-allowed-clarify.diff: update
  * testparm-do-not-fail-if-pid-dir-does-not-exist.patch: also cover samba-tool
    testparm too, not only regular stand-alone testparm.
  * fix-samba-tool-domain-join-segfault.patch: fix segfault when joining an
    AD-DC domain using samba-tool join.
  * d/rules: enable --with-profilig-data to build samba with profiling
    collection (if set in smb.conf)
  * d/control: add libunwind-dev to build-deps, to compile in stack backtrace
    logging in case of crash
  * d/control: stop build-conflicting with now-unused libtracker-miner-2.0-dev
  * d/control: stop build-conflicting with libtracker-sparql-2.0-dev: there's
    no point in explicitly disabling libtracker-sparql support (bullseye-only
    for now anyway)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 28 May 2022 22:50:43 +0300

samba (2:4.16.1+dfsg-4) unstable; urgency=medium

  [ Michael Tokarev ]
  * fix spelling in disable-setuid-confchecks.patch
  * d/NEWS: split it into different $package.NEWS files
  * d/upstream/metadata: add Bug-Database
  * d/samba.postinst: create sambashare group and usershare directory
    on new install only
  * libldb2: provide compat symlinks for bullseye ldb modules dir
  * d/rules: provide Build-Depends-Package: for python3-ldb
  * samba-vfs-modules.lintian-overrides: add spare-manual-page vfs_*.8 override
  * winbind.lintian-overrides: add spare-manual-page idmap_*.8 override

  [ Arnaud Rebillout ]
  * Fix patch testparm-do-not-fail-if-pid-dir-does-not-exist (Closes: #1010835)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 11 May 2022 09:50:03 +0300

samba (2:4.16.1+dfsg-3) unstable; urgency=medium

  * fix ldb package version generation in d/make_shlibs
    which was wrong in 2 previous uploads.
    Will I *ever* make it actually work someday?

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 18:32:24 +0300

samba (2:4.16.1+dfsg-2) unstable; urgency=medium

  * rethink ldb version *again*, to be 2.5.0+smb4.16.1-2
    or else 2.5.0+smb-1 from samba-4.16.1-2 sorts before
    2.5.0+smb-7 from samba-4.16.0-7.

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 17:02:16 +0300

samba (2:4.16.1+dfsg-1) unstable; urgency=medium

  * new upstream minor release 4.16.1
  * move-msg.sock-from-var-lib-samba-to-run-samba.patch:
    move /var/lib/samba/private/msg.sock/ to /run/samba/msg.sock/.
    This is a (private) socket directory for IPC, it should not be in /var.
  * Remove /var/lib/samba/private/msg.sock/ in postinst
  * testparm-do-not-fail-if-pid-dir-does-not-exist.patch:
    testparm deliberately fails if /run/samba does not exist,
    while testparam itself does not use it and daemons will
    create it on demand.  Just make it a warning instead of a
    fatal error, and we'll not need to pre-create this dir
    in a random place using hackish ways
  * ctdb-create-piddir.patch: create /run/ctdb/ in ctdb.service
    and ctdb.init before invoking ctdbd (as the latter does not
    create its pid directory on demand).
  * stop (ab)using tmpfiles.d to pre-create /run/samba/ and /run/ctdb/
    and stop creating /run/samba/ in samba-common-bin.postinst just to
    make testparam happy.
  * d/rules: minor tweaks

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 13:16:12 +0300

samba (2:4.16.0+dfsg-7) unstable; urgency=medium

  * another bunch of small tweaks to d/rules:
   - set SHELL to /bin/sh -e
   - rework the clean target
   - provide fast replacement of architecture.mk
   - better expression for DEB_REVISION
   - rearrange configure options
  * do not disable glusterfs on ubuntu-i386 (glusterfs is now in main)
  * mention closing of #1001053 by the 4.16 upload
  * change the ldb version string again, removing te "+samba*" suffix
    to allow bin-NMUs +b1 (Closes: #1010100)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 24 Apr 2022 16:56:34 +0300

samba (2:4.16.0+dfsg-6) unstable; urgency=medium

  * another attempt to fix/work around #221618. Re-enable
    libsmbclient-ensure-lfs-221618.patch and change it to just define
    an extra type array int[sizeof(off_t)-7]. If off_t is small it will
    become a compile error.  It is an ugly way to do it, but it should
    actually work, unlike various static_assert/_Static_assert which are
    language (C/C++) and standard-dependent.  Closes: #221618.

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 17:27:09 +0300

samba (2:4.16.0+dfsg-5) unstable; urgency=medium

  * disable libsmbclient-ensure-lfs-221618.patch for now.
    It throws errors in one or another configuration no matter what.
    Repoens: #221618
  * d/salsa-ci.yml: re-allow blhc salsa-ci test to fail again
    due to different bug in blhc

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 16:33:57 +0300

samba (2:4.16.0+dfsg-4) unstable; urgency=medium

  * libsmbclient-ensure-lfs-221618.patch: replace _Static_assert with
    static_assert (and include <assert.h> to make C++ happy too
    (Closes: #1009211)
  * disable-setuid-confchecks.patch: when running configure tests,
    samba tries to verify setuid/setgid etc calls are actually
    *working*, not just exists. This is only possible when the
    configure is running as root. But it turns out in some salsa-ci
    configuration (namely in the reprotest), the second build is
    actually running as root, and in that environment, actual
    setegid call is failing somehow. Just disable the config-time
    check for correctly working setgid and assume it "just works"
    if present, exactly like non-root build will do.
  * d/salsa-ci.yml: do not expect failure in blhc test (the original
    prob has been fixed long ago), and stop requiring experimental
  * mention closing of #999876 by 4.16

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 00:42:38 +0300

samba (2:4.16.0+dfsg-3) unstable; urgency=medium

  * d/control: comment out the selftest-mode build deps for now
  * d/control: forgotten python3-samba:Replaces against samba package too,
    not just samba-libs, when moving dckeytab python lib (Closes: #1009175)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 08 Apr 2022 10:18:23 +0300

samba (2:4.16.0+dfsg-2) unstable; urgency=medium

  * use strict versioned dependency between samba-dsdb-modules and libldb2,
    since they're tied to each other and are now built from the same source
  * fix forgotten shlib symbols generation for python3-ldb
  * change libldb versioning scheme
     from   ldb_2:2.5.0+samba4.16.0-1
     to     ldb_2:2.5.0-1+samba4.16.0
    so that symbols versioning works correctly.  Unfortunately the previous
    upload to experimental used the first form which is greather than the
    correct one, so temporarily (just for this 2.5.0 version of ldb) use
    this:   ldb_2:2.5.0+smb-1+samba4.16.0
    (with "+smb" suffix to be removed for 2.5.1+)
  * exclude samba-vfs-modules for i386 ubuntu build since this package
    is useless without samba itself (which is not built on this environment)
  * create selftest rules and add !nocheck build-dependencies
    (but do not enable selftests for now as they're failing)
  * split build system into -arch and -indep parts. We build only one arch-all
    package (samba-common) which contains only static files from debian/,
    there's no need to build whole samba to build this package.
    Move almost all Build-Depends to Build-Depends-Arch (and reindent them).
  * various updates to d/rules

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 07 Apr 2022 09:56:56 +0300

samba (2:4.16.0+dfsg-1) experimental; urgency=medium

  * New upstream major release.
    Closes: #1004690, CVE-2021-20316: Fileserver symlink metadata share escape
    Closes: #1004691, CVE-2021-43566: mkdir race condition allows share escape
    Closes: #1004692, CVE-2021-44141: UNIX extensions in SMB1 disclose whether
     the outside target of a symlink exists
    Closes: #1005642 (windows client data corruption due to cache poisoning)
    Closes: #1001053 (MIT-kerberos config broken after fix for CVE-2020-25717)
    Closes: #988197 (legacy printing support, 47d79d7e7e406f7dd2)
    Closes: #998423 (coredump connecting from macos to shares with var substs)
    Closes: #999876 (winbind allow trusted domains = no regression)
  * Notable changes in 4.16 series compared to 4.13:
    - modular VFS (see The_New_VFS.txt)
    - publishing printers in AD is more complete
    - group policies for winbindd cilents (like linux systems)
    - certificate auto enrollement in AD group policy
    - large list of improvements in samba-tool
    - SMB1 protocol has been deprecated, some subcommands has been removed
    - more consistend options/subcommands in samba commands
  * d/rules: export PYTHONHASHSEED=1. This makes lots of sporadic build-time
    debian-specific failures to go away, by preserving order of waf hashes
  * refresh patches, update build-depend versions (talloc, tdb, tevent)
  * refresh lintian-overrides files, add many new overrides
  * build-depend on python3-markdown
  * build-depend on libjson-perl for new heimdal bits
  * more consistent internal lib naming; refresh file lists everywhere
  * samba: install new rpc_* services, install samba-dcerpc
  * refresh symbols files
  * build libldb from samba sources, not from separate source
    (this moves ldb plugins from /usr/lib/$triple/ldb/plugin/ldb/ to
     /usr/lib/$triple/samba/ldb/ - the same where dsdb modules are).
  * optimizations for d/make_shlibs; also allow one to specify explicit
    version for some packages
  * as per clarifications for waf --{bundled,builtin}-libraries, remove
    now-wrong usage there. This also fixes build failures with current
    samba sources
  * d/rules: various optimizations to reduce startup costs by eliminating
    unnecessary external command calls during d/rules read by make.
    Including caching of LDB version information in d/ldb-version.mk file.
    This does not affect the buildd processing much (and does not affect
    runtime at all), but helps with build procedure debugging.
  * d/rules: numerous small fixes, cleanups and other changes, including:
    - clean up the install target
    - remove some now-irrelevant parts
    - fix no-glusterfs-build on non-linux
  * change build procedure: instead of `waf build', run `waf install'.
    `waf build' builds samba to be run from the build dir, and `waf install'
    rebuilds/relinks everything again for production. Build the production
    variant only, no build-dir one.
  * samba-common-bin.postinst: explicitly mkdir /run/samba before invoking
    samba binaries (Closes: #953530)
  * in the salsa git repository of samba, stop keeping debian patches in
    applied form, keep them in d/patches/ only as most other packages do.
  * move single python (helper) module, libsamba-policy, together with
    2 internal libraries used by it, from samba-libs package to python3-samba.
    This makes samba-libs to be free from python-related files, and makes
    python3-samba to be the only python-providing package.
    Closes: #1006875, #878612, #862338
  * also move dckeytab python module from samba to python3-samba
    (actually stop moving it from python3-samba to samba to incorrectly
    avoid a circular dependency). Also verify that python3-samba does
    not depend on samba package.
  * weak-crypto-allowed-clarify.diff: clarify "weak crypto is allowed"
    testparm message (Closes: #975882)
  * spelling.patch: fix many common spelling mistakes in the source
  * ctdb: simplify/cleanup instllation of READMEs/examples
  * d/control: remove breaks/replaces/depends on ancient versions of some
    packages (ancient dpkg version in Pre-Depends, ancient samba-libs)
  * d/rules: rework wrong shlibdeps handling
  * move helper programs from /usr/lib/$multiarch/ to /usr/libexec/
    where they belongs. This should not affect users.
  * smbclient: re-do the fix for an old bug, #221618. The original "fix"
    did not fix anything (it is too late already to #define _FILE_OFFSET_BITS
    when all types has already been defined).  From now on, raise an error
    if off_t is less than 64bits (it should >=64 when #include'ing
    <libsmbclient.h> with proper LFS defines).  In theory this can break
    some sources which either included libsmbclient.h without a reason or
    which didn't use any of the functions which deals with off_t (smbc_lseek
    etc), - which did not explicitly enable LFS on a 32bit system.
    Please email us if you faced such situation.
  * drop 07_private_lib patch: we do not need to force rpath for
    private libraries into every samba binary, upstream build system
    does a good job here.

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 05 Apr 2022 16:01:25 +0300

samba (2:4.13.14+dfsg-1) unstable; urgency=high

  * New upstream security release in order to address the following defects:
    - CVE-2016-2124: don't fallback to non spnego authentication if we require
      kerberos
    - MS CVE-2020-17049 in Samba: 'Bronze bit' S4U2Proxy Constrained Delegation
      bypass
    - CVE-2020-25717: A user on the domain can become root on domain members
    - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other
      servers
      + Bump build-depends ldb >= 2.2.3
    - CVE-2020-25719: AD DC Username based races when no PAC is given
    - CVE-2020-25721: Kerberos acceptors need easy access to stable AD
      identifiers (eg objectSid)
    - CVE-2020-25722: AD DC UPN vs samAccountName not checked (top-level bug
      for AD DC validation issues)
    - CVE-2021-3738: crash in dsdb stack
    - CVE-2021-23192: dcerpc requests don't check all fragments against the
      first auth_state
      + Update d/samba-libs.install for libdcerpc-pkt-auth.so.0
  * Add patch to fix "allow trusted domains"
  * Bump ldb build-depends to 2.2.3
  * Update d/samba-libs.install

 -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Nov 2021 20:53:03 +0100

samba (2:4.13.13+dfsg-1) unstable; urgency=high

  [ Athos Ribeiro ]
  * Add autopkgtest to verify tmpfiles setup (LP: #1905387)
    - d/t/reinstall-samba-common-bin: make sure /run/samba is created
      by the samba-common-bin installation process (postinst script)
    - d/t/control: run new reinstall-samba-common-bin test case

  [ Paride Legovini ]
  * samba.postinst: do not populate sambashare from the Ubuntu admin group
    (LP: #1942195)

  [ Mathieu Parent ]
  * New upstream version
    - Remove CVE-2021-20254.patch
    - Bump build-depends ldb  >= 2.2.0
  * libwbclient0: Add Breaks+Replaces: libsamba-util0 (<< 2:4.0.0)
    (Closes: #988170)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 01 Nov 2021 08:59:20 +0100

samba (2:4.13.5+dfsg-2) unstable; urgency=high

  * CVE-2021-20254: Negative idmap cache entries can cause incorrect group
    entries in the Samba file server process token (Closes: #987811)
  * Add Breaks+Replaces: samba-dev (<< 2:4.11) (Closes: #987209)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 06 May 2021 21:09:29 +0200

samba (2:4.13.5+dfsg-1) unstable; urgency=medium

  * New upstream version (Closes: #984863)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 13 Mar 2021 08:31:27 +0100

samba (2:4.13.4+dfsg-1) unstable; urgency=medium

  * New upstream version
    - GPG signature has changed
    - Update samba-libs.install
    - Update symbols
  * Never use priority high when asking for DHCP integration (Closes: #981554)
  * Sync CTDB patches with Ubuntu:
    - Add "ctdb-config: enable syslog by default"
    - Update "fix nfs related service names"
  * d/rules: Ubuntu specifics
    - No Ceph on i386
    - Disable some i386 packages
    - No GlusterFS

 -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Feb 2021 22:26:43 +0100

samba (2:4.13.3+dfsg-1) unstable; urgency=medium

  [ Andreas Hasenack ]
  * d/control: enable the liburing vfs module (Closes: #976854)
  * Add new DEP8 tests for the uring vfs module
  * Factor out common DEP8 test code into d/t/util and change the tests to
    source from it
  * Add set -x and set -e to DEP8 tests

  [ Mathieu Parent ]
  * liburing-dev is linux-any
  * New upstream version

 -- Mathieu Parent <sathieu@debian.org>  Wed, 16 Dec 2020 18:23:09 +0100

samba (2:4.13.2+dfsg-3) unstable; urgency=medium

  * Ensure systemd-tmpfiles is called before testparm (Closes: #975422)
  * Only check configuration on configure step

 -- Mathieu Parent <sathieu@debian.org>  Sun, 22 Nov 2020 10:44:51 +0100

samba (2:4.13.2+dfsg-2) unstable; urgency=medium

  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Wed, 18 Nov 2020 20:34:51 +0100

samba (2:4.13.2+dfsg-1) experimental; urgency=medium

  * New upstream major version
    - Update d/gbp.conf, d/watch and d/README.source for 4.13
    - Update patches
    - Bump build-depends ldb >= 2.2.0
    - Install new files
    - Update symbols
  * Includes the following security fixes:
    - CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify
      (Closes: #973400)
    - CVE-2020-14323: Unprivileged user can crash winbind (Closes: #973399)
    - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
      easily crafted records (Closes: #973398)
    - CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon")
      (Closes: #971048)
  * Includes the following fixes:
    - Fixes "samba_dnsupdate gives depreacation warnings" (Closes: #973957)
    - s3: libsmbclient.h: add missing time.h include (Closes: #946840)
  * Remove unused python3-crypto dependency (Closes: #971292)
  * Enable Spotlight with ES backend (Closes: #956096, #956482)
  * Standards-Version: 4.5.0
  * Add missing Build-Depends-Package in libsmbclient.symbols and
    libwbclient0.symbols
  * d/copyright: Fix duplicate-globbing-patterns
  * Remove outdated/malformed lintian overrides
  * d/winbind.logrotate: Only reload winbindd when running (Closes: #946821)
  * Bump to debhelper compat 13
  * Add another library-not-linked-against-libc override

 -- Mathieu Parent <sathieu@debian.org>  Thu, 12 Nov 2020 11:23:01 +0100

samba (2:4.12.5+dfsg-3) unstable; urgency=high

  * Add Breaks: sssd-ad-common (<< 2.3.0), due to libndr so bump
    (Closes: #963971)
  * Add patch traffic_packets: fix SyntaxWarning: "is" with a literal
    (Closes: #964165)
  * Add patch Rename mdfind to mdsearch (Closes: #963985)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 04 Jul 2020 23:57:59 +0200

samba (2:4.12.5+dfsg-2) unstable; urgency=high

  * Add missing symbol (path_expand_tilde)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 02 Jul 2020 15:27:25 +0200

samba (2:4.12.5+dfsg-1) unstable; urgency=high

  * New upstream security release:
    - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
      DC LDAP Server with ASQ, VLV and paged_results
    - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
      excessive CPU
    - CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
      paged_results and VLV.
    - CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.
    - Bump build-depends ldb >= 2.1.4

 -- Mathieu Parent <sathieu@debian.org>  Thu, 02 Jul 2020 14:03:36 +0200

samba (2:4.12.3+dfsg-2) unstable; urgency=medium

  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Sun, 28 Jun 2020 11:45:14 +0200

samba (2:4.12.3+dfsg-1) experimental; urgency=medium

  * New upstream major version (Closes: #963106)
    - Update d/gbp.conf, d/watch and d/README.source for 4.12
    - Drop merged patches
    - Bump build-depends talloc >= 2.3.1, tdb >= 1.4.3, tevent >= 0.10.2 and
      ldb >= 2.1.3
    - Upstream fixes:
      + pygpo: use correct method flags
        (Closes: #963242, #961585, #960171, #956428)
      + CVE-2020-10700: A use-after-free flaw was found in the way samba AD DC
        LDAP servers, handled 'Paged Results' control is combined with the 'ASQ'
        control. A malicious user in a samba AD could use this flaw to cause
        denial of service (Closes: #960189)
      + CVE-2020-10704: A flaw was found when using samba as an Active Directory
        Domain Controller. Due to the way samba handles certain requests as an
        Active Directory Domain Controller LDAP server, an unauthorized user can
        cause a stack overflow leading to a denial of service. The highest
        threat from this vulnerability is to system availability
        (Closes: #960188)
    - intel aes-ni no more needed as GnuTLS is used
    - Install new files
    - Update symbols
    - Update samba-libs.lintian-overrides
  * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 24 Jun 2020 23:12:11 +0200

samba (2:4.11.5+dfsg-1) unstable; urgency=medium

  * New upstream security release
    - CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD
      Directory not automatic.
    - CVE-2019-14907: Crash after failed character conversion at log level 3 or
      above.
    - CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.
    - Bump build-depends ldb >= 2.0.8

 -- Mathieu Parent <sathieu@debian.org>  Tue, 28 Jan 2020 07:19:46 +0100

samba (2:4.11.3+dfsg-1) unstable; urgency=high

  * New upstream security release
    - Drop merged patches for previous security fixes
    - CVE-2019-14861: An authenticated user can crash the DCE/RPC DNS management
      server by creating records with matching the zone name.
    - CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction was
      not being applied when processing protocol transition requests (S4U2Self),
      in the AD DC KDC.
  * d/control: drop python3-matplotlib
  * d/control: Fix stronger-dependency-implies-weaker
    (samba depends -> recommends python3-dnspython)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 16 Dec 2019 09:47:45 +0100

samba (2:4.11.1+dfsg-3) unstable; urgency=medium

  * Add some python dependencies:
    - python3-matplotlib : samba-tool visualize
    - python3-markdown   : samba-tool domain schemaupgrade
    - python3-dnspython  : samba-tool dns
  * Only build with default python3 (Closes: #943635)

 -- Mathieu Parent <sathieu@debian.org>  Sun, 17 Nov 2019 14:48:02 +0100

samba (2:4.11.1+dfsg-2) unstable; urgency=high

  * New upstream security release
    - CVE-2019-10218: Malicious servers can cause Samba client code to return
      filenames containing path separators to calling code.
    - CVE-2019-14833: When the password contains multi-byte (non-ASCII)
      characters, the check password script does not receive the full password
      string.

 -- Mathieu Parent <sathieu@debian.org>  Fri, 18 Oct 2019 20:26:45 +0200

samba (2:4.11.1+dfsg-1) unstable; urgency=medium

  * New upstream release

 -- Mathieu Parent <sathieu@debian.org>  Fri, 18 Oct 2019 19:00:46 +0200

samba (2:4.11.0+dfsg-11) unstable; urgency=medium

  * Stop building with spotlight support which pulls glib (Closes: #941654)
  * Force quota support (Closes: #941899)
  * Standards-Version: 4.4.1, no change

 -- Mathieu Parent <sathieu@debian.org>  Mon, 14 Oct 2019 12:16:04 +0200

samba (2:4.11.0+dfsg-10) unstable; urgency=medium

  * Add libwbclient-dev to samba-dev depends as samba-util was moved there
    (Closes: #941750)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 05 Oct 2019 15:57:07 +0200

samba (2:4.11.0+dfsg-9) unstable; urgency=medium

  * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 03 Oct 2019 19:08:17 +0200

samba (2:4.11.0+dfsg-8) unstable; urgency=medium

  * d/gbp.conf: sign-tags = True
  * Do not check smb.conf with testparm when server role=active directory domain
    controller (Closes: #931734)
  * Force one job during configure step with -j 1 (Closes: #941467).
    Not setting -j leads to default which is number of cpus

 -- Mathieu Parent <sathieu@debian.org>  Thu, 03 Oct 2019 07:52:39 +0200

samba (2:4.11.0+dfsg-7) unstable; urgency=medium

  * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467)
  * This version is built with talloc from sid (Closes: #940963)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 02 Oct 2019 20:45:24 +0200

samba (2:4.11.0+dfsg-6) unstable; urgency=medium

  * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467)

 -- Mathieu Parent <sathieu@debian.org>  Tue, 01 Oct 2019 22:35:36 +0200

samba (2:4.11.0+dfsg-5) experimental; urgency=medium

  * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false
  * Remove patches:
    - "build: Remove tests for _readdir() and __readdir()"
    - "build: Remove tests for rdchk()"
    - "build: Remove tests for _pwrite() and __pwrite()"
  * Add patches by Ralph Boehme:
    - "wscript: remove all checks for _FUNC and __FUNC"
    - "wscript: split function check to one per line and sort alphabetically"

 -- Mathieu Parent <sathieu@debian.org>  Mon, 30 Sep 2019 13:37:50 +0200

samba (2:4.11.0+dfsg-4) experimental; urgency=medium

  * Use the same arches for librados-dev than libcephfs-dev (Fix missing
    build-depends on alpha and sh4)
  * Split vfsmods:Recommends substvar into
    {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable
    and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also
    alpha and sh4)
  * Add patch for "build: Remove tests for _readdir() and _readdir()", to
    hopefully fix FTBFS on armel

 -- Mathieu Parent <sathieu@debian.org>  Sun, 29 Sep 2019 09:29:03 +0200

samba (2:4.11.0+dfsg-3) experimental; urgency=medium

  * Try to fix FTBFS on armel (armhf is fixed):
    - Add patch for build: Remove tests for rdchk()

 -- Mathieu Parent <sathieu@debian.org>  Sat, 28 Sep 2019 22:17:04 +0200

samba (2:4.11.0+dfsg-2) experimental; urgency=medium

  * d/gitlabracadabra.yml: Add samba-team/libsmb2
  * Try to fix FTBFS on armel and armhf:
    - Add patch for build: Remove tests for _pwrite() and __pwrite()

 -- Mathieu Parent <sathieu@debian.org>  Sat, 28 Sep 2019 11:47:56 +0200

samba (2:4.11.0+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * Upload to experimental
  * New upstream major release
    - Update d/gbp.conf, d/watch and d/README.source for 4.11
    - Import upstream release
    - Update fix-nfs-service-name-to-nfs-kernel-server.patch
    - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and
      ldb >= 2:2.0.7
    - libsamba-passdb.so bumped to 0.28.0
    - libnon-posix-acls is now a subsystem
    - Drop libparse-pidl-perl package (Closes: #939419)
    - Add new files to d/*.install
    - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies
    - Move libsamba-util deps to libwbclient0
  * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on
    armel and armhf
  * salsa-ci: Build on experimental

  [ John Paul Adrian Glaubitz ]
  * Disable cephfs support on architectures where it's not stable
    (Closes: #940697)

  [ Louis van Belle ]
  * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build
    dumpmscat
  * d/control, d/rules: Enable spotlight (TimeMachine)
  * d/control: Bump libtdb-dev (>= 2) in samba-dev deps
  * Update libwbclient0.symbols
  * d/rules: adjust LDB_DEPENDS

 -- Mathieu Parent <sathieu@debian.org>  Thu, 26 Sep 2019 09:37:51 +0200

samba (2:4.10.8+dfsg-1) unstable; urgency=medium

  * Upload to unstable
  * New upstream release:
    - CVE-2019-10197: Combination of parameters and permissions can allow user
      to escape from the share path definition

 -- Mathieu Parent <sathieu@debian.org>  Tue, 10 Sep 2019 18:46:54 +0200

samba (2:4.10.7+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * New upstream release
    - Update patches
    - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged
    - libsamba-passdb.so bumped to 0.27.2
    - Update symbols
    - Update installed files
  * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9)
    (Closes: #910242)
  * Add missing Breaks+Replace found by piuparts (Closes: #929217)
  * Enable vfs_nfs4acl_xattr (Closes: #930540)
  * ctdb:
    - enable ceph and etcd recovery lock
    - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends
  * Add gitlabracadabra.yml
  * Update salsa-ci.yml

  [ Rafael David Tinoco ]
  * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
    (Closes: #931138)
  * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201):
    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
      name from nfs to nfs-kernel-server
    - ctdb-config: depend on /etc/ctdb/nodes file
    - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
      allow pid file to exist
    - added /var/lib/ctdb/* directories
    - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
    - Add examples of NFS HA CTDB config files + helper script

  [ Mathieu Parent ]
  * Update d/gbp.conf, d/watch and d/README.source for 4.10
  * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream
  * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and
    ldb >= 2:1.5.5
  * Bump libcmocka-dev builddep to 1.1.3
  * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS
  * d/copyright:
    - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/
    - Move License details to end of file
    - Add waf licences
    - Add lib/replace licences
    - Update lib/{ldb,talloc,tdb} licences
  * Move to Python3 (from Ubuntu)
  * Bump debhelper from old 11 to 12.
  * Standards-Version: 4.4.0
  * Replace all reference of /var/run to /run (Closes: #934540)
  * Replace python shbang by python3 in d/*.py

 -- Mathieu Parent <sathieu@debian.org>  Thu, 29 Aug 2019 14:32:52 +0200

samba (2:4.9.5+dfsg-1) experimental; urgency=medium

  * New upstream release
    - Bump ldb Build-Depends to 2:1.5.1+really1.4.6
    - Drop s3-auth-ignore-create_builtin_guests-failing-without.patch, merged
    - Drop and python-gpg.patch, merged
  * Add Recommends: samba-dsdb-modules for samba-common-bin (Closes: #862467)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 20 Mar 2019 21:07:02 +0100

samba (2:4.9.4+dfsg-4) unstable; urgency=medium

  * samba-libs: Add Breaks+Replaces: libndr-standard0 (<< 4) (Closes: #910242)
  * Improve AppArmor integration (Closes: #896080)
    - Install update-apparmor-samba-profile 1.2 from Christian Boltz (openSUSE)
    - Adapt update-apparmor-samba-profile: Rename apparmor profile snippet, and
      test for it's directory
    - smbd.init: Run update-apparmor-samba-profile before start
    - smbd.service: Run update-apparmor-samba-profile before start
    - Remove /etc/apparmor.d/samba/smbd-shares on purge

 -- Mathieu Parent <sathieu@debian.org>  Tue, 26 Feb 2019 22:18:19 +0100

samba (2:4.9.4+dfsg-3) unstable; urgency=medium

  [ Ivo De Decker ]
  * Remove myself from uploaders

  [ Mathieu Parent ]
  * Update debian/gitlab-ci.yml
  * Standards-Version: 4.3.0
  * Add upstream patch for python-gpg support
  * Replace Suggests: python-gpgme by Recommends: python-gpg (Closes: #876984)

 -- Mathieu Parent <sathieu@debian.org>  Fri, 15 Feb 2019 11:14:10 +0100

samba (2:4.9.4+dfsg-2) unstable; urgency=medium

  * Append +really0.02 to libparse-pidl-perl version (Closes: #918564)
  * Add apport hook (From Ubuntu)
  * Change build dependency to libglusterfs-dev (Closes: #919667)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 23 Jan 2019 20:59:08 +0100

samba (2:4.9.4+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Remove patches for previous security fixes, merged
    - Remove unused lintian overrides (library-not-linked-against-libc)
  * ignore create_builtin_guests() failing without a valid idmap configuration
    (Closes: #909465, #899269)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 22 Dec 2018 18:32:00 +0100

samba (2:4.9.2+dfsg-2) unstable; urgency=high

  * New upstream security release
    - CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD
      Internal DNS server
    - CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT
    - CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server
    - CVE-2018-16852 NULL pointer de-reference in Samba AD DC DNS servers
    - because of CVE-2018-16853 (Samba AD DC S4U2Self Crash in experimental
      MIT Kerberos configuration (unsupported)), mark the MIT Kerberos build of
      the Samba AD DC as experimental (not used in Debian package)
    - CVE-2018-16857 Bad password count in AD DC not always effective
  * Prepend 1.5.1+really to ldb version

 -- Mathieu Parent <sathieu@debian.org>  Sat, 24 Nov 2018 23:21:27 +0100

samba (2:4.9.2+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Bump build-dependencies to ldb 1.4.2
    - Update debian/samba-libs.install
  * d/gitlab-ci.yml:
    - Update to use include
    - allow_failure for reprotest until #912340 is fixed
  * d/rules: Replace override_dh_perl by override_dh_perl-arch (Closes: #913143)
  * debian/gitlab-ci.yml:
    - Samba sometimes needs ldb from experimental
    - Use ldb from experimental in piuparts

 -- Mathieu Parent <sathieu@debian.org>  Sat, 17 Nov 2018 17:25:10 +0100

samba (2:4.9.1+dfsg-2) unstable; urgency=medium

  [ Mathieu Parent ]
  * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of
    DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32
  * Allow one to change password via passwd in default config
    - third_party: Update pam_wrapper to version 1.0.7
    - third_party: Add pam_set_items.so from pam_wrapper
    - nsswitch: Add try_authtok option to pam_winbind
    - tests: Check pam_winbind pw change with different options
    - Patch for previous 4 commits
    - debian/winbind.pam-config: Use the new try_authtok option allowing
      password change while preserving current behavior with password strength
      modules (Closes: #858923, LP: #570944)
  * README.source: use gbp pull --track-missing
  * Override library-not-linked-against-libc false positives (See #896012)
  * Fix wrong-path-for-interpreter for pidl and findsmb
  * ctdb.postrm: Fix to disable_legacy (found by piuparts) (Closes: #911530)

  [ James Clarke ]
  * Fix systemd-related build failures on non-Linux

  [ Mathieu Parent ]
  * Add Gitlab CI:
    - Subscribe to salsa-ci-team/pipeline (See salsa-ci-team/pipeline!27 and
      samba-team/samba!10)
    - Copy /etc/apt/{sources.list.d,preferences.d} in the dockerbuilder
      container (salsa-ci-team/images!9)
    - Allow daemons to start during autopkgtest (salsa-ci-team/images!10)
    - debian/gitlab-ci.yml: all jobs: Use ldb from experimental
    - debian/gitlab-ci.yml: piuparts job: Add --scriptsdir, --allow-database
      and --warn-on-leftovers-after-purge options
    - debian/gitlab-ci.yml: piuparts job: Copy apt config to allow enabling
      extra repositories
    - debian/gitlab-ci.yml: piuparts job: Use image with the following changes:
      + Add pre_install_copy_configs and post_install_remove_configs to copy,
        resp. remove config files from /etc-target to /etc
      + patch pre_remove_50_find_bad_permissions to workaround findutils bug
        #912180. Also proposed another workaround in piuparts as bug #911334
        which is merged but not yet released
  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Thu, 01 Nov 2018 21:13:37 +0100

samba (2:4.9.1+dfsg-1) experimental; urgency=medium

  * New upstream release

 -- Mathieu Parent <sathieu@debian.org>  Mon, 24 Sep 2018 13:33:21 +0200

samba (2:4.9.0+dfsg-1) experimental; urgency=medium

  * Upload to experimental
  * New upstream release
    - Update d/gbp.conf, d/watch and d/README.source for 4.9
    - Remove Fix-pidl-manpage-sections.patch, Fix-spelling.patch and
      Improve-vfs_linux_xfs_sgid-manpage.patch, merged upstream
    - Bump build-depends talloc >= 2.1.14, tdb >= 1.3.16, tevent >= 0.9.37 and
      ldb >= 2:1.4.2'
    - Update paths
    - Update libsmbclient.symbols
    - ctdb.lintian-override: Remove script-not-executable override
    - Add ctdb.NEWS: "Configuration has been completely overhauled"
    - ctdb: Enable/disable legacy script in postinst/presinst

 -- Mathieu Parent <sathieu@debian.org>  Sat, 22 Sep 2018 23:04:11 +0200

samba (2:4.8.5+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Bump ldb Build-depends to 2:1.4.0+really1.3.6
    - Fixes FTBFS on kFreeBSD (Closes: #883972)
    - d/rules: winbind_krb5_locator is now in the correct path
    - winbind_krb5_locator manpage has moved from section 7 to 8
  * Standards-Version: 4.2.1

 -- Mathieu Parent <sathieu@debian.org>  Thu, 30 Aug 2018 19:32:24 +0200

samba (2:4.8.4+dfsg-2) unstable; urgency=high

  * Fix typo in previous release: s/usefull/useful/
  * Prepend 1.4.0+really to ldb version to allow samba-dsdb-modules install
    (Closes: #906562, #906568)
  * Urgency still set to high

 -- Mathieu Parent <sathieu@debian.org>  Sun, 19 Aug 2018 10:08:22 +0200

samba (2:4.8.4+dfsg-1) unstable; urgency=high

  [ Andreas Hasenack ]
  * d/samba.logrotate: only try to reload the services if they are running
    (Closes: #902149)
  * Remove the deprecated "syslog" and "syslog only" options (Closes: #901138)

  [ Mathieu Parent ]
  * New upstream security release
    - CVE-2018-1139 Weak authentication protocol allowed
    - CVE-2018-1140 Denial of Service Attack on DNS and LDAP server
    - CVE-2018-10858 Insufficient input validation on client directory listing
      in libsmbclient
    - CVE-2018-10918 Denial of Service Attack on AD DC DRSUAPI server
    - CVE-2018-10919 Confidential attribute disclosure from the AD LDAP server
    - Urgency set to high
    - Bump build-depends ldb >= 1.3.5 (actually 2:1.4.0+really1.3.5) for
      CVE-2018-1140
  * smb.conf: Remove "wins support" and "wins server" comments
  * smb.conf: Improve "logging" comments
  * smb.conf: Remove "dns proxy = no", only useful as a WINS server
  * smb.conf: Propose better idmap config
  * smb.conf: Remove "passdb backend = tdbsam" as this is the default
  * smb.conf: Fix "usershare max shares" default (patched to 100 instead of 0)
  * Standards-Version: 4.2.0
  * Set Rules-Requires-Root: binary-targets as chmod is used
  * Remove override_dh_strip target as dbgsym migration is complete

 -- Mathieu Parent <sathieu@debian.org>  Fri, 17 Aug 2018 16:30:18 +0200

samba (2:4.8.2+dfsg-2) unstable; urgency=medium

  * Update panic-action script message, samba-dbg renamed to samba-dbgsym
    (Closes: #900242)
  * Ensure /var/lib/samba/dhcp.conf exists (Closes: #901585)
  * Check smb.conf with testparm, and also with samba-tool when
    server role = active directory domain controller (Closes: #900908)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 18 Jun 2018 23:39:41 +0200

samba (2:4.8.2+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Bump build-depends ldb >= 1.3.3
  * Fix lintian warnings with patches recently merged upstream:
    - Add Fix-pidl-manpage-sections.patch
    - Add Fix-spelling.patch
    - Add Improve-vfs_linux_xfs_sgid-manpage.patch
  * Wrap very long lines in d/rules

 -- Mathieu Parent <sathieu@debian.org>  Thu, 17 May 2018 09:58:09 +0200

samba (2:4.8.1+dfsg-2) unstable; urgency=low

  * Upload to unstable
  * Really ignore nmbd start errors when there is no non-loopback interface
    (Closes: #893762)
  * Ignore nmbd start errors when there is no local IPv4 non-loopback interface
    (Closes: #859526)
  * Fix possible-unindented-list-in-extended-description in samba-vfs-modules

 -- Mathieu Parent <sathieu@debian.org>  Tue, 15 May 2018 21:23:32 +0200

samba (2:4.8.1+dfsg-1) experimental; urgency=medium

  * New upstream release
  * Add lintian override for "smbclient: executable-is-not-world-readable
    usr/lib/x86_64-linux-gnu/samba/smbspool_krb5_wrapper 0700" (See #894720)
  * Improve samba-vfs-modules description (Closes: #776505)
  * Check smb.conf in samba-common-bin.postinst (Closes: #816301)
  * Mark libparse-pidl-perl, samba-dev, samba-dsdb-modules and samba-vfs-modules
    as"Multi-Arch: same"
  * Standards-Version: 4.1.4, no change
  * debian/smb.conf: Fix typo in comment line: sever -> server (Closes: #763648)
  * Read smb.conf until [print$] section instead of [cdrom] to preserve
    locally-defined shares (Closes: #776259)
  * Fix and improve dhcp integration:
    - dhclient3 was renamed to dhclient long time ago...
    - Remove /etc/samba/dhcp.conf on purge (Closes: #784713)
    - Move dhcp.conf out of /etc to allow ro root (Closes: #695362)
    - Update template for "Move dhcp.conf out of /etc to allow ro root"
  * Enable --accel-aes=intelaesni on DEB_HOST_GNU_CPU=x86_64 (Closes: #896196)
    - Use dh-exec to install libaesni-intel.so.0 only on amd64

 -- Mathieu Parent <sathieu@debian.org>  Sun, 29 Apr 2018 12:54:06 +0200

samba (2:4.8.0+dfsg-2) experimental; urgency=medium

  * Remove unused and outdated debian/README.debian (debian/README.Debian is
    used instead)
  * Mask services as appropriate in samba and winbind postinst (Closes: #863285)
    - mask samba-ad-dc unless server role = active directory domain controller
      (as before)
    - mask smbd and nmbd when server role = active directory domain controller
    - mask nmbd when disable netbios = yes (Closes: #866125)
  * Set smbspool_krb5_wrapper permissions to 0700 (Closes: #894720, #372270)
  * Remove Depends: samba-libs of lib{nss,pam}-winbind
  * Mark winbind "Multi-Arch: allowed" and make lib{pam,nss}-winbind depends on
    winbind:any to allow co-installation (Closes: #881100)
  * Ignore nmbd start errors when there is no non-loopback interface
    (Closes: #893762)

 -- Mathieu Parent <sathieu@debian.org>  Sun, 08 Apr 2018 22:09:53 +0200

samba (2:4.8.0+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * New major upstream version
    - Update d/gbp.conf and d/watch for 4.8
    - Update upstream source from tag 'upstream/4.8.0+dfsg'
    - Re-apply patches
    - Remove patches merged upstream:
      + no_build_system.patch
      + systemd-syslog.target-is-obsolete.patch
      + Add-documentation-to-systemd-Unit-files.patch
      + fix_kill_path_in_units.patch
      + nmbd-requires-a-working-network.patch
      + CVE-2018-1050-11343-4.7.patch
      + CVE-2018-1057-v4-7.metze01.patches.txt
    - Bump build-depends talloc >= 2.1.11~, tdb >= 1.3.15~, tevent >= 0.9.36~
      and ldb >= 2:1.3.2~
    - Drop Build-Conflicts-Arch: libaio-dev, vfs_aio_linux was dropped
    - Update debian/*.install and use debian/not-installed
    - Update debian/libsmbclient.symbols
    - Upload to experimental
  * debian/README.source
    - Update instructions
    - Convert to Markdown
    - Add a symlink from README.source to README.source.md
  * debian/rules:
    - Use the new --systemd-install-services
    - Use dh_missing --fail-missing
    - Re-order debian/rules overrides in the order they are called
    - Remove broken get-packaged-orig-source target
    - Remove unused DEB_BUILD_OPT_FOO variables
    - Add some comments
    - Move all the custom installs from override_dh_install to
      override_dh_auto_install
    - Remove --sourcedir override to dh_install "since dh_install automatically
      looks for files in debian/tmp in debhelper compatibility level 7 and
      above"
    - PIDFile= is now correctly set in *.service

  [ Louis van Belle ]
  * Update d/control, Relax Build-Depends to allow backport

 -- Mathieu Parent <sathieu@debian.org>  Mon, 19 Mar 2018 13:02:51 +0100

samba (2:4.7.4+dfsg-2) unstable; urgency=high

  [ Mathieu Parent ]
  * This is a security release in order to address the following defects:
    - CVE-2018-1050: Codenomicon crashes in spoolss server code
    - CVE-2018-1057: Unprivileged user can change any user (and admin) password
  * Fix "/etc/dhcp/dhclient-enter-hooks.d/samba returned non-zero exit status 1"
    when samba.service is disabled
    - Pick patch from Ubuntu for Launchpad #1579597
    - Fix systemd check
  * Replace override_dh_systemd_start by override_dh_installsystemd (Fixes
    ctdb starting on install and restarting on upgrade since update to debhelper
    compat 11)
  * Replace --no-restart-on-upgrade by --no-stop-on-upgrade in dh_installinit
    and dh_installsystemd
  * Add missing dh_installsystemd calls to ensure that services are properly
    unmasked and enabled in postinst

  [ Andreas Hasenack ]
  * Add extra DEP8 tests to samba (Closes: #890439):
    - d/t/control, d/t/cifs-share-access: access a file in a share using cifs
    - d/t/control, d/t/smbclient-anonymous-share-list: list available shares
      anonymously
    - d/t/control, d/t/smbclient-authenticated-share-list: list available
      shares using an authenticated connection
    - d/t/control, d/t/smbclient-share-access: create a share and download a
      file from it

 -- Mathieu Parent <sathieu@debian.org>  Fri, 02 Mar 2018 20:55:06 +0100

samba (2:4.7.4+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Updates patches
    - Bump ldb build-deps to 1.2.3
  * Repository moved to salsa: Update Vcs-* fields
  * d/README.source:
    - ensure required branches exists
    - sync all required branches
  * Standards-Version: 4.1.3 (no change)
  * Move to debhelper compat 11
  * Move libpam-winbind: to section admin
  * Move libnss-winbind: to section admin

 -- Mathieu Parent <sathieu@debian.org>  Thu, 11 Jan 2018 20:49:28 +0100

samba (2:4.7.3+dfsg-1) unstable; urgency=high

  * New upstream version
    - Remove patches for CVE-2017-15275 and CVE-2017-14746, merged
    - Bump libtevent-dev to 0.9.34, to fix upstream "BUG 13130: smbd on disk
      file corruption bug under heavy threaded load"
    - Set urgency to high for this fix
  * Stop building vfs_aio_linux (Closes: #881239)
  * Print "ignore the following error about deb-systemd-helper not finding
    samba-ad-dc.service" on upgrade too (Closes: #882482).
    Thanks Julian Gilbey for the patch

 -- Mathieu Parent <sathieu@debian.org>  Thu, 23 Nov 2017 16:39:19 +0100

samba (2:4.7.1+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when
      talloc buffer is grown.
    - CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug.

 -- Mathieu Parent <sathieu@debian.org>  Sun, 12 Nov 2017 10:02:19 +0100

samba (2:4.7.1+dfsg-1) unstable; urgency=medium

  * New upstream version
  * Add lintian-override about heimdal embedded-library
  * Remove trailing spaces in debian/changelog

 -- Mathieu Parent <sathieu@debian.org>  Wed, 08 Nov 2017 07:48:31 +0100

samba (2:4.7.0+dfsg-2) unstable; urgency=medium

  * Upload to sid
  * Bump libcmocka-dev builddep to 1.1.1 (Closes: #878357)
  * Remove Skip-raw.write-tests.patch as we don't run tests
  * Remove 05_share_ldb_module, not understood
   - d/rules: /usr/lib/*/samba/share/ldb.so is not present anymore

 -- Mathieu Parent <sathieu@debian.org>  Thu, 26 Oct 2017 17:30:02 +0200

samba (2:4.7.0+dfsg-1) experimental; urgency=medium

  * New major upstream version
    - Update d/gbp.conf and d/watch for 4.7
    - Update patches
    - Remove no_build_env.patch, no more needed
    - Remove 4 patches merged upstream
    - Bump build-depends ldb >= 2:1.2.2~, tdb >= 1.3.14~, tevent >= 0.9.33~
    - Move replace from builtin to bundled libraries to fix FTBFS
    - Update d/*.install
    - Update symbols
  * Rework all patches for dep5 and "gbp pq"
  * Add libjansson-dev to Build-Depends to allow logging in JSON format
  * Lintian fixes:
    - build-depends: dh-systemd (>= 1.5) => use debhelper (>= 9.20160709)
    - Move libsmbclient-dev from priority extra to optional
    - Standards-Version: 4.1.1
    - Update samba-libs.lintian-overrides (following libsmbldap bump)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 12 Oct 2017 22:09:19 +0200

samba (2:4.6.7+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-12150: Some code path don't enforce smb signing, when they should
    - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects
    - CVE-2017-12163: Server memory information leak over SMB1

 -- Mathieu Parent <sathieu@debian.org>  Tue, 19 Sep 2017 22:00:13 +0200

samba (2:4.6.7+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Removed CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch,
      merged
    - Remove s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch, merged
  * README.source: Default merge-mode of gbp has changed to replace
  * Fix samba.logrotate (Thanks Thomas A. Reim)

 -- Mathieu Parent <sathieu@debian.org>  Tue, 15 Aug 2017 23:06:36 +0200

samba (2:4.6.5+dfsg-8) unstable; urgency=medium

  * Remove dependency on update-inetd, not used anymore
  * vfs_ceph and vfs_glusterfs are linux only (d/rules part)
  * Remove build-dependency on faketime, not used anymore

 -- Mathieu Parent <sathieu@debian.org>  Sun, 23 Jul 2017 19:56:07 +0200

samba (2:4.6.5+dfsg-7) unstable; urgency=medium

  * xfslibs-dev is only available on linux
  * Fix logrotate for /var/log/samba/log.samba to send SIGHUP to all processes
    of the service (systemd only)
  * Add reportbug script for samba-common, samba and winbind (Closes: #682861)

 -- Mathieu Parent <sathieu@debian.org>  Fri, 21 Jul 2017 06:19:57 +0200

samba (2:4.6.5+dfsg-6) unstable; urgency=medium

  * libcephfs-dev is only available on linux
  * Fix libpam-winbind.prerm to be multiarch-safe (Closes: #647430)
  * Add missing logrotate for /var/log/samba/log.samba (Closes: #803924)
  * Use smbcontrol in logrotate when available (Closes: #804705)
  * From upstream: Fix outdated DNS Root servers (Closes: #865406)
  * Drop xsltproc_dont_build_smb.conf.5.patch, as #750593 is marked fixed
    (Closes: #776223)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 19 Jul 2017 22:53:50 +0200

samba (2:4.6.5+dfsg-5) unstable; urgency=medium

  * Remove bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch,
    unused
  * Remove samba-ad-dc.templates
  * Remove upstart files on upgrade (Closes: #867688)
  * glusterfs-common is only available on linux
  * Remove the samba service
  * Ensure /var/log/samba permissions are set (Closes: #711138)

 -- Mathieu Parent <sathieu@debian.org>  Tue, 18 Jul 2017 23:29:44 +0200

samba (2:4.6.5+dfsg-4) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation
      (Closes: #868209)
  * Other fixes:
    - Remove empty samba-common.maintscript (leading to empty preinst and
      prerm)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 13 Jul 2017 14:38:32 +0200

samba (2:4.6.5+dfsg-3) unstable; urgency=medium

  * Remove upstart code
  * Remove empty prerm for samba and samba-common-bin (Closes: #866258,
    #866284)
  * sysv: Use --pidfile in addition to --exec to avoid matching daemons in
    containers (Closes: #810794)
  * Standards-Version: 4.0.0
    - Use https form of the copyright-format URL (Debian Policy 4.0.0)
  * Remove debian/bzr-builddeb.conf
  * Remove empty debian/diversions
  * Remove "ugly workaround to get the manpages on every architecture to be
    identical", xsltproc now honour SOURCE_DATE_EPOCH
  * Remove dh-exec shbang in libnss-winbind.install
  * Remove empty debian/libsmbclient.manpages
  * Remove pre-jessie maintscript snipsets
  * Move to debhelper compat 10 (Major change: dh_installinit command now
    defaults to --restart-after-upgrade)
  * Remove unused samba-ad-dc package metadata (Closes: #866138)
  * Fix "Non-kerberos logins fails on winbind 4.X when krb5_auth is configured
    in PAM" (Closes: #739768)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 29 Jun 2017 09:45:59 +0200

samba (2:4.6.5+dfsg-2) unstable; urgency=medium

  * Upload to unstable
  * Move runtime dependencies of vfs_ceph and vfs_snapper to Recommends
  * Fix typo s/DESTIDR/DESTDIR/ in d/rules
  * Enable vfs_glusterfs (Closes: #864862)
  * Add libdbus-1-dev as Build-Depends to allow vfs_snapper to build (Closes:
    #804781). Patch by Willy Vanlid.

 -- Mathieu Parent <sathieu@debian.org>  Mon, 19 Jun 2017 23:56:56 +0200

samba (2:4.6.5+dfsg-1) experimental; urgency=medium

  * New upstream version (Closes: #859390)
    - d/gbp.conf, d/watch: Change major version to 4.6
    - Bump Build-dependencies of talloc, tdb, tevent and ldb to resp. 2.1.9,
      1.3.12, O.9.31 and 1.1.29
    - Remove CVE-2017-7494.patch: applied upstream
    - Add Build-Depends: libcmocka-dev (>= 1.0)
    - Update d/*.install
    - d/samba-common.docs: Roadmap removed upstream
  * Update README.source, about importing major versions
  * d/control cleanup:
    - Remove Conflicts and Replaces on pre-wheezy samba4 packages
    - Remove Conflicts, Breaks and Replaces on pre-wheezy samba packages
    - Remove Conflicts, Breaks and Replaces on pre-jessie samba packages
    - Remove Conflicts, Breaks and Replaces on (pre-jessie) samba4 packages
    - Remove Conflicts on pre-jessie libldb1 package
    - Remove Breaks on pre-jessie qtsmbstatus-server package
    - Remove Replaces on pre-wheezy smbget package
    - wrap-and-sort
  * Add libcephfs-dev as b-d to build vfs_ceph (Closes: #856998). Patch from
    Ubuntu
  * Enable avahi support (Closes: #859875). Patch from Laurent Bigonville.
  * Translations:
    - Portuguese translation for debconf messages (Closes: #864172). Patch from
    Rui Branco
    - Hungarian translation for debconf messages (Closes: #708277)
  * Properly quote subshell invocation in samba-common.preinst (Closes: #771689)
  * Add Build-Depends: xfslibs-dev, for XFS quotas

 -- Mathieu Parent <sathieu@debian.org>  Mon, 12 Jun 2017 08:09:43 +0200

samba (2:4.5.8+dfsg-2) unstable; urgency=high

  * CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside

 -- Mathieu Parent <sathieu@debian.org>  Thu, 18 May 2017 11:53:47 +0200

samba (2:4.5.8+dfsg-1) unstable; urgency=high

  * New upstream version
    - Drop CVE-2017-2619.patch: merged upstream
    - Fix CVE-2017-2619 regression with "follow symlink = no" (Closes: #858564)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 01 Apr 2017 20:39:17 +0200

samba (2:4.5.6+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-2619: symlink race permits opening files outside share directory

 -- Mathieu Parent <sathieu@debian.org>  Wed, 22 Mar 2017 08:03:34 +0100

samba (2:4.5.6+dfsg-1) unstable; urgency=medium

  * New upstream version
  * Fix typo in smbd.service and winbind.service (s/nmb.service/nmbd.service)
    (Closes: #857232)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 09 Mar 2017 15:42:37 +0100

samba (2:4.5.5+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Revert rewrite of the vfs_fruit module (Closes: #856561)
  * Fix 'winbindd privileged socket directory' (Closes: #754339):
    - Fix path from /var/run/samba/winbindd_privileged/ to
      /var/lib/samba/winbindd_privileged/.
    - Move mkdir+chgrp+chmod to postinst (to handle systemd also).
    - Thanks to Jim Barber for the report.
  * logrotate: Use delaycompress on all logs (Closes: #702201)
    - Thanks to Matthew Gabeler-Lee for the proposed fix.

 -- Mathieu Parent <sathieu@debian.org>  Sun, 05 Mar 2017 23:21:09 +0100

samba (2:4.5.4+dfsg-1) unstable; urgency=medium

  [ Mathieu Parent ]
  * New upstream version
    - Drop security-2016-12-19.patch, was 4.5.3
  * missing-build-dependency-for-dh_-command dh_python2 => dh-python

  [ Vincent Blut ]
  * d/control: Suggest chrony as an alternative to ntp (Closes: #851727)

  [ Daniel A ]
  * add gpgme support (Closes: #850908)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 25 Jan 2017 21:25:40 +0100

samba (2:4.5.2+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2016-2123 (Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer
      Overflow Remote Code Execution Vulnerability).
    -  CVE-2016-2125 (Unconditional privilege delegation to Kerberos servers in
      trusted realms).
    -  CVE-2016-2126 (Flaws in Kerberos PAC validation can trigger privilege
       elevation).

 -- Mathieu Parent <sathieu@debian.org>  Sat, 17 Dec 2016 22:54:35 +0100

samba (2:4.5.2+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Remove CTDB-Fix-samba-eventscript.patch: merged
    - d/rules: /usr/share/ctdb-tests is now /usr/share/ctdb/tests
  * Update gbp.conf with debian-branch = master

 -- Mathieu Parent <sathieu@debian.org>  Thu, 08 Dec 2016 20:21:52 +0100

samba (2:4.5.1+dfsg-2) unstable; urgency=medium

  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Mon, 05 Dec 2016 07:01:35 +0100

samba (2:4.5.1+dfsg-1) experimental; urgency=medium

  * New upstream version
    - Refresh patches
    - Remove bug_12283_segfault_tevent_internals.patch
    - Remove gencache-Bail-out-of-stabilize-if-we-can-not-get-the.patch
    - Adding libdsdb-garbage-collect-tombstones.so.0 to samba-libs.install
  * CTDB: Fix samba eventscript
  * nmbd requires a working network (Closes: #698056, #842056, #840608,
    LP: #1635491)
  * Be more verbose about masking samba-ad-dc.service (Closes: #841147)
  * Remove Fix_parallel_build.patch, not working

 -- Mathieu Parent <sathieu@debian.org>  Tue, 01 Nov 2016 13:54:29 +0100

samba (2:4.5.0+dfsg-1) experimental; urgency=medium

  * Upload to experimental
  * New upstream version
    + Remove patches:
      - bug_601406_fix-perl-path-in-example.patch, similar applied
      - waf_smbpasswd_location, applied
      - Fix-privacy-breach-on-google.com.patch, doc moved out of source
      - ctdb-Fix-detection-of-gnukfreebsd.patch, applied
      - gcc_6.patch, applied
    + Dumped dependencies
      - libldb-dev (>= 2:1.1.27~)
      - libtalloc-dev (>= 2.1.8~)
      - libtdb-dev (>= 1.3.10~)
      - libtevent-dev (>= 0.9.29~)
      - python-talloc-dev (>= 2.1.8~)
    + Install new files and update debian/ctdb.docs
    + Update to libwbclient0.symbols
    + Update samba-libs.lintian-overrides (libtevent-unix-util0 removed)
    + /etc/default/ctdb is now /etc/ctdb/ctdbd.conf
  * Add patch for https://bugzilla.samba.org/show_bug.cgi?id=12045
  * ctdb/wscript: Call CHECK_XSLTPROC_MANPAGES() before checking
    XSLTPROC_MANPAGES. This should fix parallel builds, including
    tests.reproducible-builds.org. Thanks HW42 on IRC
  * Depends: lsb-base (>= 3.0-6), for ctdb and winbind as they source
    /lib/lsb/init-functions

 -- Mathieu Parent <sathieu@debian.org>  Sun, 23 Oct 2016 15:56:59 +0200

samba (2:4.4.6+dfsg-2) unstable; urgency=high

  * Remove uses of tevent internals. This fixes segfault.
    Closes: #840382, #840298.

 -- Mathieu Parent <sathieu@debian.org>  Wed, 12 Oct 2016 05:53:33 +0200

samba (2:4.4.6+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Use epoch in samba-vfs-modules Breaks and Replaces (Closes: #833164)
  * Only fix PIDFile in {nmbd,samba-ad-dc,smbd,winbind}.service (i.e. not
    ctdb.service) Closes: #838000.
  * logrotate: Only reload smbd when needed. Thanks Roland Hieber.
    Closes: #838796.

 -- Mathieu Parent <sathieu@debian.org>  Mon, 10 Oct 2016 22:23:45 +0200

samba (2:4.4.5+dfsg-3) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Add strict dependencies on samba-libs, because of use of private
    libraries without stable ABI across Samba binary packages.
  * Add Breaks clauses for older versions of samba-libs and samba to
    samba-vfs-modules, as some files have moved. Closes: #833164,
    #832880

  [ Mathieu Parent ]
  * Remove /etc/systemd/system/samba-ad-dc.service (from postinst) on purge.
    Closes: #832352
  * Fix PIDFile in systemd service files. Closes: #830909
  * Remove unused lintian overrides
  * Use automatic debug packages (-dbgsym) (Closes: #819776)
  * Remove Christian Perrier from uploaders (Closes: #836715). Thanks for all
    you work, and thanks for bringing me in the team and as a DD.
  * Update Turkish translation. Thanks Atila KOÇ. Closes: #791903
  * Drop dependency on samba-libs in libwbclient0 to avoid
    circular dependency.

 -- Mathieu Parent <sathieu@debian.org>  Fri, 09 Sep 2016 13:00:54 +0200

samba (2:4.4.5+dfsg-2) unstable; urgency=medium

  * Disable running of 'make quicktest' during build, as it takes very
    long to run on x32 and enables building non-production NTVFS server.
    Closes: #830571

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 09 Jul 2016 19:09:19 +0000

samba (2:4.4.5+dfsg-1) unstable; urgency=medium

  * New upstream release.
   + Fixes CVE-2016-2119: Client side SMB2/3 required signing can be
     downgraded. Closes: #830195

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 07 Jul 2016 10:51:40 +0000

samba (2:4.4.4+dfsg-3) unstable; urgency=medium

  * Add patch gcc_6.patch, fixing compatibility with gcc 6.
    Closes: #812264

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 04 Jul 2016 12:20:56 +0000

samba (2:4.4.4+dfsg-2) unstable; urgency=medium

  * Mask samba-ad-dc.service unless needed (Closes: #828137)
  * Fix kill path in systemd units (Closes: #828730)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 27 Jun 2016 21:37:58 +0200

samba (2:4.4.4+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * The "Thanks lintian" release
  * Fixes:
    - Ensure that dpkg-buildflags are passed, and enable all hardening
    - systemd
      + Enable systemd (sd_notify) on Linux, and install systemd files
      + Remove obsolete syslog.target from service files
      + Add documentation field to unit files
    - Drop fix-cluster-build.diff: no more needed
    - Use secure Vcs-* URLs
    - Fix copyright file
    - samba.postinst: command-with-path-in-maintainer-script update-inetd
    - samba-common-bin: package-contains-empty-directory usr/lib/samba/
    - winbind: package-contains-empty-directory usr/lib/samba/nss_info/
    - Add Description to init files
  * No-op fixes:
    - d/control: Drop XS-Testsuite field
    - Drop redundant "Priority: optional" fields
    - Drop redundant "Section: net" fields
    - Describe non-standard-dir-perm var/spool/samba/
    - Describe no_build_system.patch
    - Remove README.build-upstream, as packaging/Debian/ is now empty
    - Verify upstream tarball from uscan
    - Update README.source and remove build-orig.sh

 -- Mathieu Parent <sathieu@debian.org>  Mon, 13 Jun 2016 21:52:52 +0200

samba (2:4.4.3+dfsg-4) unstable; urgency=medium

  * Fix build with DEB_BUILD_OPTIONS=nocheck
  * Still run "make quicktest" but ignore failures

 -- Mathieu Parent <sathieu@debian.org>  Sat, 07 May 2016 13:18:53 +0200

samba (2:4.4.3+dfsg-3) unstable; urgency=medium

  * Skip raw.write tests for now as they fail on 32-bit

 -- Mathieu Parent <sathieu@debian.org>  Fri, 06 May 2016 15:34:07 +0200

samba (2:4.4.3+dfsg-2) unstable; urgency=medium

  * Run quicktest during build
  * Reproducibility:
    - Drop no_build_options.patch as it breaks "make test"
    - Remove unreproducible build environment instead
  * Mention that patch waf_smbpasswd_location was submitted
  * usershare.patch: Fix "usershare max shares" default in XML doc and in s4

 -- Mathieu Parent <sathieu@debian.org>  Tue, 03 May 2016 12:30:56 +0200

samba (2:4.4.3+dfsg-1) unstable; urgency=medium

  * Cleanup ctdb READMEs during 'clean' step.
  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 02 May 2016 14:12:46 +0000

samba (2:4.4.2+dfsg-2) unstable; urgency=medium

  * Merge in 4.3 package changes.

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 27 Apr 2016 01:29:47 +0000

samba (2:4.4.2+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Bump standards version to 3.9.8 (no changes).
  * Drop build dependency on perl-modules; depend on perl instead.
  * Upload to unstable.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 26 Apr 2016 23:29:54 +0000

samba (2:4.4.1+dfsg-1) experimental; urgency=medium

  * New upstream release
   + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
    - CVE-2015-5370 (Multiple errors in DCE-RPC code)
    - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
    - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
    - CVE-2016-2112 (LDAP client and server don't enforce integrity)
    - CVE-2016-2113 (Missing TLS certificate validation)
    - CVE-2016-2114 ("server signing = mandatory" not enforced)
    - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
    - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
  * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze

 -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Mon, 11 Apr 2016 16:09:59 +1200

samba (2:4.4.0+dfsg-1) experimental; urgency=medium
  [ Andrew Bartlett ]
  * New upstream release.

 -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Wed, 06 Apr 2016 17:08:20 +1200

samba (2:4.3.8+dfsg-1) unstable; urgency=low

  [ Jelmer Vernooij ]
  * Add patch no_build_system.patch: drop host-specific define that
    prevents reproducible builds.
  * New upstream release.
   + Drop patch
     security-2016-04-12-prerequisite-v4-3-regression-fixes.metze01.txt,
     now included upstream.
  * Bump version in Replaces: samba-libs for samba-vfs-modules to
    4.3.2+dfsg-1, to fix jessie->stretch upgrades. Closes: #821070

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 16 Apr 2016 01:18:36 +0000

samba (2:4.3.7+dfsg-1) unstable; urgency=high

  * New upstream release.
   + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
    - CVE-2015-5370 (Multiple errors in DCE-RPC code)
    - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
    - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
    - CVE-2016-2112 (LDAP client and server don't enforce integrity)
    - CVE-2016-2113 (Missing TLS certificate validation)
    - CVE-2016-2114 ("server signing = mandatory" not enforced)
    - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
    - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
  * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze

 -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Wed, 13 Apr 2016 10:24:17 +1200

samba (2:4.3.6+dfsg-2) unstable; urgency=low
  [ Mathieu Parent ]
  * Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146). Patch by
    Santiago Vila
  * Drop samba from winbind depends and use samba-common* instead
    (Closes: #732604)
  * Add an override to script-not-executable etc/ctdb/events.d/10.external
  * Add ufw integration (from Ubuntu)
  * Don't build ctdb twice:
    - Shorten build time
    - Fix ctdb log path from /var/log/log.ctdb to /var/log/ctdb/log.ctdb
    - Remove unused /usr/lib/*/ctdb/*.so files

  [ Steven Chamberlain ]
  * ctdb: Fix detection of gnukfreebsd (Closes: #802621)

  [ Jelmer Vernooij ]
  * Add no_build_options.patch: make package more reproducible by
    disabling build options output.

  [ Andrew Bartlett ]
  * Allow to build/run the AD DC provision/dbcheck against talloc
    2.1.6 (Closes: #820015)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 31 Mar 2016 22:26:11 +0200

samba (2:4.3.6+dfsg-1) unstable; urgency=medium

  * New upstream release.
   + Fixes:
    - CVE-2015-7560: Incorrect ACL get/set allowed on symlink path.
    - CVE-2016-0771 (Out-of-bounds read in internal DNS server.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 27 Feb 2016 23:28:53 +0000

samba (2:4.3.5+dfsg-3) unstable; urgency=medium

  * Fix dhclient hook if samba is not installed. Thanks, Jan Braun.
    Closes: #801976
  * Rebuild against current version of ldb in the archive. Closes:
    #817036

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 08 Mar 2016 00:24:10 +0000

samba (2:4.3.5+dfsg-2) unstable; urgency=medium

  * Move strict ldb dependency to samba-dsdb-modules package, which
    actually contains the modules. Closes: #816210

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 06 Mar 2016 22:51:53 +0000

samba (2:4.3.5+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Fixed usershare.patch to apply against new version.
  * Loosen dependencies on ldb to ldb >= 1.1.21, per upstream.
  * Drop patch sockets-with-htons.patch: applied upstream.
  * Bump standards version to 3.9.7 (no changes).

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 05 Mar 2016 15:56:42 +0000

samba (2:4.3.3+dfsg-2) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Add dependency on libtevent-dev in samba-dev.

  [ Mathieu Parent ]
  * Fix CTDB behavior since CVE-2015-8543 (Closes: #813406)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 04 Feb 2016 13:25:01 +0100

samba (2:4.3.3+dfsg-1) unstable; urgency=medium

  * New upstream release. Closes: #808133.
   + Drop subunit dependency, no longer used.
   + Drop ntdb dependencies, no longer used.
   + Fixes:
    - CVE-2015-5252: Insufficient symlink verification in smbd
    - CVE-2015-5296: Samba client requesting encryption vulnerable
                     downgrade attack
    - CVE-2015-5299: Missing access control check in shadow copy code
    - CVE-2015-7540: Remote DoS in Samba (AD) LDAP server
    - CVE-2015-8467: Denial of service attack against Windows Active Directory
                     server
    - CVE-2015-3223: Denial of service in Samba Active Directory server
    - CVE-2015-5330: Remote memory read in Samba LDAP server
  * Remove libpam-smbpasswd, which is broken and slated for removal
    upstream. Closes: #799840
  * Remove lib/zlib/contrib/dotzlib/DotZLib.chm from excluded files in
    copyright; no longer shipped upstream.
  * Remove wins2dns.awk example script.
  * Remove the samba-doc package, and move examples files from it to
    relevant other packages. Closes: #769385
  * Move samba-dsdb-modules back from Depends to Recommends, as using
    Samba as a standalone server doesn't require the dsdb modules.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 18 Dec 2015 01:18:42 +0000

samba (2:4.3.0+dfsg-2) experimental; urgency=medium

  * Re-enable cluster support.
   + Build samba-cluster-support as built-in library, since its dependencies
     are broken.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 28 Sep 2015 00:34:51 +0000

samba (2:4.3.0+dfsg-1) experimental; urgency=medium

  * Fix watch file.
  * New upstream release.
  * Drop no_wrapper patch: applied upstream.
  * Drop patch ctdb_sockpath.patch: applied upstream.
  * Drop Fix-CTDB-build-with-PMDA patch: applied upstream.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 19 Sep 2015 01:59:36 +0000

samba (2:4.2.1+dfsg-1) experimental; urgency=medium

  [ Jelmer Vernooij ]
  * New upstream release.
   + Drop patch do-not-install-smbclient4-and-nmbclient4: applied upstream.
   + Drop patch
     bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch:
     present upstream.
   + Refresh patch 26_heimdal_compat.26_heimdal_compat.
   + Add build-dependency on libarchive-dev.
  * Drop samba_bug_11077_torturetest.patch: applied upstream.
  * Drop dependency on ctdb - now bundled with Samba.
  * Use bundled Heimdal as the system Heimdal doesn't contain the
    changes required for Samba.
  * Add patch heimdal-rfc3454.txt: patch in truncated rfc3454.txt for
    building bundled heimdal.
  * Drop patches 25_heimdal_api_changes and 26_heimdal_compat.
  * Disable cluster support; it breaks the build.
  * Add patch no_wrapper: avoid dependencies on
    {nss,uid,socket}_wrapper.
  * Move some libraries around.
  * Move ownership of var/lib/samba and var/lib/samba/private to samba-
    common, remove obsolete samba4.dirs. Closes: #793866
  * Remove ctdb-tests and ctdb-pcp-pmda packages as they contain problems
    and unclear what they are useful for, now ctdb now longer provides
    an external API.

  [ Mathieu Parent ]
  * Merge ctdb source package
    - initial merge
    - libctdb-dev has been dropped
    - ctdb-dbg renamed to ctdb-tests, debug files moved to samba-dbg
    - ctdb-tests depends on python
  * Fix CTDB socketpath parsing
  * Fix CTDB build with PMDA
  * ctdb: Fix privacy breach on google.com (from documentation)

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Dec 2014 15:34:36 +0000

samba (2:4.1.20+dfsg-1) unstable; urgency=medium

  * New upstream release (last compatible with current OpenChange).
  * samba_bug_11077_torturetest.patch: refresh.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 20 Sep 2015 17:48:59 +0000

samba (2:4.1.17+dfsg-5) unstable; urgency=medium

  * Rebuild against new ldb. Closes: #799569

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 20 Sep 2015 13:20:53 +0000

samba (2:4.1.17+dfsg-4) unstable; urgency=medium

  * Add pidl_reproducible.patch: Make pidl output reproducible.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 28 Apr 2015 00:10:21 +0000

samba (2:4.1.17+dfsg-3) unstable; urgency=medium

  * Rebuild against new ldb. Closes: #783424

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 27 Apr 2015 00:09:50 +0000

samba (2:4.1.17+dfsg-2) unstable; urgency=medium

  [ Andreas Beckmann ]
  * Add samba.preinst to temporarily deactivate the old qtsmbstatusd
    initscript which has dependencies incompatible with the new samba
    initscript. This will ensure a clean upgrade path for samba if the
    qtsmbstatus-server package was installed previously.  (Closes: #779666)

 -- Ivo De Decker <ivodd@debian.org>  Sat, 07 Mar 2015 13:09:23 +0100

samba (2:4.1.17+dfsg-1) unstable; urgency=high

  * New upstream release. Fixes:
  - CVE-2014-8143: Elevation of privilege to Active Directory Domain
                   Controller. Closes: #776993
  - CVE-2015-0240: Unexpected code execution in smbd. Closes: #779033
  * Refresh patch add-so-version-to-private-libraries.
  * Add new smbtorture test rpc.schannel_anon_setpw to detect the conditions
    leading to CVE-2015-0240.
  * Add breaks on qtsmbstatus-server (<< 2.2.1-3~). Closes: #775041
  * Build-depend on reverted ldb version (with increased epoch).

 -- Ivo De Decker <ivodd@debian.org>  Mon, 23 Feb 2015 20:20:21 +0100

samba (2:4.1.13+dfsg-4) unstable; urgency=medium

  * Revert previous patch, since ldb has an active module version check.
    Instead, just depend on ldb 1.1.18. Closes: #771991

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 10 Dec 2014 18:13:42 +0000

samba (2:4.1.13+dfsg-3) unstable; urgency=medium

  * Update debian/rules to allow support for multiple upstream ldb
    versions, when verified. Closes: #771991

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 04 Dec 2014 21:03:54 +0100

samba (2:4.1.13+dfsg-2) unstable; urgency=medium

  * Mask /etc/init.d/samba init script for systemd. This should make systemd
    ignore the samba init script. Thanks to Michael Biebl for the suggestion.
    Closes: #740942
  * Disable samba init script on upgrade from wheezy to jessie.
    Thanks again to Michael Biebl for the report.
    Closes: #766690

 -- Ivo De Decker <ivodd@debian.org>  Sat, 25 Oct 2014 00:49:12 +0200

samba (2:4.1.13+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Bump standards version to 3.9.6 (no changes).

 -- Ivo De Decker <ivodd@debian.org>  Tue, 21 Oct 2014 20:22:19 +0200

samba (2:4.1.11+dfsg-2) unstable; urgency=medium

  * Updated Italian translation. Thanks Luca Monducci. Closes: #760743
  * Use HTTP in watch file, as ftp.samba.org is not working reliably for
    me.
  * Use Excluded-Files in debian/copyright for DFSG-nonfree files.
  * Update Dutch translation. Thanks Frans Spiesschaert. Closes: #763650

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Sep 2014 20:52:27 +0200

samba (2:4.1.11+dfsg-1) unstable; urgency=high

  * New upstream release. Fixes:
   + CVE-2014-3560: Remote code execution in nmbd. Closes: #756759

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 03 Aug 2014 03:47:07 +0200

samba (2:4.1.9+dfsg-2) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Depend on libgnutls28-dev rather than libgnutls-dev. Closes: #753146
  * Remove outdated-autotools-helper-file overrides for config.guess and
    config.sub; files are no longer present upstream.
  * Add branch to Vcs-Git header.
  * samba.smbd.upstart: Remove leftover code for RUN_MODE=inetd, which
    was already removed elsewhere.
  * Move dsdb-module library from samba-dsdb-modules to samba-libs, to
    prevent circular dependencies between samba-dsdb-modules and samba-
    libs. This is necessary since dsdb-module is now used by the dcerpc-
    server library.

  [ Debconf translations ]
  * New Brazilian Portugese translation from Adriano Rafael Gomes.
    Closes: #752719

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 29 Jun 2014 19:43:52 +0200

samba (2:4.1.9+dfsg-1) unstable; urgency=high

  * New upstream security release. Fixes:
    - CVE-2014-0244: nmbd denial of service
    - CVE-2014-3493: smbd denial of service: server crash/memory corruption

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 23 Jun 2014 18:33:27 +0200

samba (2:4.1.8+dfsg-1) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Remove smbd and nmbd from required-start and required-stop in
    samba.init. Closes: #739887

  [ Ivo De Decker ]
  * Remove workaround for #745233.
  * New upstream release. Fixes:
    - CVE-2014-0239: dns: Don't reply to replies. Closes: #749845
    - CVE-2014-0178: Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response.
  * Use the upstream version of the smb.conf.5 manpage, instead of building
    it. This is an ugly temporary workaround because xsltproc crashes on some
    architectures when building this manpage (due to #750593).
    This fixes the FTBFS, and should make samba installable with the new ldb
    version. Closes: #750541, 750796

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 08 Jun 2014 23:37:53 +0200

samba (2:4.1.7+dfsg-2) unstable; urgency=medium

  * Build-depend on heimdal-dev instead of libkrb5-dev.
  * Add versioned build-dep on libgmp10 for now, which should be pulled in by
    libhogweed2, to be able to build in outdated build environments (like on
    most buildds). This is a workaround for #745233.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 20 Apr 2014 13:44:39 +0200

samba (2:4.1.7+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Remove readline63.patch, integrated upstream.
  * Add build-dep on libkrb5-dev, no longer pulled in by libcups2-dev.
  * Don't try to delete Parse/Yapp/Driver.pm, which is no longer installed.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 19 Apr 2014 13:39:09 +0200

samba (2:4.1.6+dfsg-1) unstable; urgency=high

  * New upstream security release. Fixes:
    - CVE-2013-4496: password lockout not enforced for SAMR password changes
    - CVE-2013-6442: smbcacls can remove a file or directory ACL by mistake
  * Backport fix for readline 6.3 from master

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 15 Mar 2014 12:13:59 +0100

samba (2:4.1.5+dfsg-1) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Fix watch file.

  [ Ivo De Decker ]
  * New upstream release.
  * Remove the part of patch 26_heimdal_compat integrated upstream.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 22 Feb 2014 23:17:59 +0100

samba (2:4.1.4+dfsg-3) unstable; urgency=medium

  * Move samba.dckeytab module to samba package, as it relies on hdb.
    Closes: #736405, #736430

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 24 Jan 2014 23:35:14 +0000

samba (2:4.1.4+dfsg-2) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Depend on newer version of ctdb, as Samba won't build against older
    versions without --enable-old-ctdb.
  * Bump standards version to 3.9.5 (no changes).
  * Move libpac, db_glue and hdb module from samba-libs to samba package
    to reduce size and dependency set of libs package.
  * Fix compatibility with newer versions of the Heimdal HDB API.
    + Update 26_heimdal_compat: Fix initialization of HDB plugin. Thanks Jeff
      Clark. Closes: #732342
    + Add dependency on specific version of the Heimdal HDB API.
      Closes: #732344

  [ Steve Langasek ]
  * dhcp3-client is superseded by dhcp-client; update the references in
    the package.  Closes: #736070.
  * Move the dhcp client hook from /etc/dhcp3 to /etc/dhcp.
    Closes: #649100.
  * debian/bin/xsltproc: don't use $FAKETIME as the variable name in our
    wrapper script, this seems to make faketime unhappy.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 18 Jan 2014 20:26:35 +0000

samba (2:4.1.4+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Update version of talloc build-deps to 2.0.8.
  * python-samba: add depends on python-ntdb.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 18 Jan 2014 14:07:15 +0100

samba (2:4.1.3+dfsg-2) unstable; urgency=medium

  * Add debug symbols for all binaries to samba-dbg. Closes: #732493
  * Add lintian overrides for empty prerm scripts.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Fri, 27 Dec 2013 12:39:54 +0100

samba (2:4.1.3+dfsg-1) experimental; urgency=low

  [ Jelmer Vernooij ]
  * New upstream release.
   + Drop 0002-lib-replace-Allow-OS-vendor-to-assert-that-getpass-i.patch:
     upstream no longer uses getpass.
  * Add source dependency on libntdb1, and stop passing --disable-ntdb,
    which has been removed.
  * Remove handling for SWAT, which is no longer shipped upstream.
  * Split VFS modules out from samba-libs into a separate binary
    package.
  * Move service and process_model modules from the samba-libs to the
    samba package. Prevents dependencies on libkdc2-heimdal and
    libhdb9-heimdal.

  [ Ivo De Decker ]
  * Add build-dep on python-ntdb.
  * Add build-dep on libncurses5-dev.
  * Add depends on python-ntdb to samba.
  * New upstream release.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 09 Dec 2013 23:24:27 +0100

samba (2:4.0.13+dfsg-2) UNRELEASED; urgency=low

  [ Steve Langasek ]
  * Check for alternative's presence before calling update-alternatives
    --remove-all, instead of silently ignoring all errors from
    update-alternatives.

  [ Debconf translations ]
  * Spanish (Javier Fernández-Sanguino).  Closes: #731800

 -- Steve Langasek <vorlon@debian.org>  Mon, 09 Dec 2013 11:13:59 -0800

samba (2:4.0.13+dfsg-1) unstable; urgency=high

  [ Steve Langasek ]
  * Move update-alternatives upgrade removal handling to the postinst, where
    it belongs.  Closes: #730090.
  * Really remove all references to encrypted passwords: the
    samba-common.config script still included references, which could cause
    upgrade failures in some cases.  Closes: #729167.

  [ Ivo De Decker ]
  * New upstream security release. Fixes:
    - CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked
    - CVE-2012-6150: pam_winbind login without require_membership_of
                     restrictions
  * Add empty prerm scripts for samba and samba-common-bin.prerm, to allow
    upgrades from earlier versions with broken prerm script (bug introduced in
    2:4.0.10+dfsg-3)
  * Don't fail in postinst when removing old alternatives fails.

  [ Jelmer Vernooij ]
  * Fix invocations of 'update-alternatives --remove-all'. Closes: #731192

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 09 Dec 2013 18:34:07 +0100

samba (2:4.0.12+dfsg-1) unstable; urgency=low

  [ Ivo De Decker ]
  * New upstream release.

  [ Debconf translations ]
  * Thai (Theppitak Karoonboonyanan).  Closes: #728525
  * Norwegian Bokmål (Bjørn Steensrud).  Closes: #729070
  * German (Holger Wansing).  Closes: #729210

  [ Jelmer Vernooij ]
  * Add 26_heimdal_compat: Fix compatibility with newer versions of
    Heimdal.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 24 Nov 2013 07:48:20 +0100

samba (2:4.0.11+dfsg-1) unstable; urgency=high

  * New upstream security release. Fixes:
    - CVE-2013-4475: ACLs are not checked on opening an alternate data stream
                     on a file or directory
    - CVE-2013-4476: Private key in key.pem world readable
  * Move world-readable private key file on upgrade to allow
    auto-regeneration.
  * Add check in samba-ad-dc init script for wrong permission on private key
    file that would prevent samba to start.
  * Update samba-libs.lintian-overrides for moved libtorture0.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 11 Nov 2013 15:42:40 +0100

samba (2:4.0.10+dfsg-4) unstable; urgency=low

  [ Christian Perrier ]
  * Mark one debconf string as non-translatable

  [ Debconf translations ]
  * French updated (Christian Perrier).
  * Swedish (Martin Bagge / brother).  Closes: #727186
  * Hebrew (Omer Zak).
  * Japanese (Kenshi Muto).  Closes: #727218
  * Indonesian (Al Qalit).  Closes: #727543
  * Russian (Yuri Kozlov).  Closes: #727612
  * Esperanto (Felipe Castro).  Closes: #727619
  * Polish (Michał Kułach).  Closes: #727646
  * Danish (Joe Hansen).  Closes: #727764
  * Czech (Miroslav Kure).  Closes: #728100
  * Basque (Iñaki Larrañaga Murgoitio).  Closes: #728315

  [ Jelmer Vernooij ]
  * Move libtorture0 to samba-testsuite to reduce size of samba-libs and
    prevent dependency on libsubunit0.

  [ Ivo De Decker ]
  * Handle move of tdb files to private dir in samba-libs.preinst.
    Closes: #726472
  * Also do the tdb move in libpam-smbpass.preinst, to avoid breaking the pam
    module if the upgrade fails.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 02 Nov 2013 11:27:25 +0100

samba (2:4.0.10+dfsg-3) unstable; urgency=low

  [ Ivo De Decker ]
  * Remove Sesse from uploaders. Thanks for your work on samba4.
  * Include /etc/pam.d/samba in samba-common. It got lost somewhere in the
    samba4 merge. Closes: #726183
  * Remove unused alternatives links on upgrade in samba-common-bin.prerm.
  * Add support for 'status' in samba-ad-dc init script.
  * Fix umask in make_shlibs to avoid lintian error
    control-file-has-bad-permissions.
  * Enable verbose build log.
  * Run xsltproc under faketime to get the same date for manpages on different
    architectures in Multi-Arch: same packages. Closes: #726314
  * Restore build-dep on libcups2-dev, which got lost in the samba4 merge.
    This should restore the cups printing functionality. Closes: #726726
  * Add wrapper for cups-config to filter out
    -L/usr/lib/${DEB_HOST_MULTIARCH}, to work around build-failure.
  * Also add other build-deps which were present in samba 2:3.6.19-1.
  * if the same tdb file is present in /var/lib/samba and
    /var/lib/samba/private, abort the upgrade to work around #726472 for now.
  * Document swat removal. Closes: #726751

  [ Steve Langasek ]
  * Don't fail on errors from testparm in the samba init script.
    Closes: #726326
  * debian/patches/bug_221618_precise-64bit-prototype.patch: adjust the LFS
    handling to work independently of header include order.  Closes: #727065.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 22 Oct 2013 08:10:31 +0200

samba (2:4.0.10+dfsg-2) unstable; urgency=low

  * First upload the unified samba 4.x package to unstable.
    Thanks to everyone who worked on these packages all these years.
  * Remove Noël from uploaders. Thanks for your work on the samba packages
  * Add myself to uploaders.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 12 Oct 2013 11:05:55 +0200

samba (2:4.0.10+dfsg-1) experimental; urgency=low

  * Team upload.

  [ Ivo De Decker ]
  * Update vcs urls to point to samba instead of samba4.
  * New upstream release.
  * Limit build-dep on libaio-dev to linux architectures.
  * Merge init script changes from 3.6 packages.

  [ Steve Langasek ]
  * Don't put useless symlinks to nss modules in the libnss-winbind package.
  * Add lintian overrides for another set of wrong lintian errors for the
    NSS modules.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 10 Oct 2013 21:56:08 +0200

samba (2:4.0.9+dfsg-1) experimental; urgency=low

  * Team upload.

  [ Steve Langasek ]
  * The samba-ad-dc upstart job should be installed unconditionally, not just
    in Ubuntu.
  * Don't exclude our private libraries from the shlibs generation.
  * Port debian/autodeps.py to python3 and build-depend on python3 so we can
    invoke it correctly from debian/rules.

  [ Jelmer Vernooij ]
  * Bump standards version to 3.9.4 (no changes).
  * Suggest libwireshark-dev for libparse-pidl-perl, as it is necessary
    to build wireshark dissectors generated by pidl.
  * samba-ad-dc: Drop suggests for removed packages swat2 and samba-gtk.
  * samba: Remove inetd servers from suggests; inetd support was dropped
    in 3.6.16-1.
  * Fix database errors during upgrade. Closes: #700768
  * Integrate libraries in samba-libs

  [ Ivo De Decker ]
  * New upstream release.
  * Merge contents of samba-ad-dc into samba.
  * Remove systemd support for now, as it is broken. Closes: #719477
  * Add lintian override for samba-libs: package-name-doesnt-match-sonames.
  * Add missing depends for dev packages.
  * Generate correct shlibs for both public and private libs.

  [ Jeroen Dekkers ]
  * Drop 10_messaging_subsystem patch.
  * Add patch to not install smbclient4 and nmblookup4 and remove
    samba4-clients binary package.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 22 Sep 2013 17:19:44 +0200

samba (2:4.0.8+dfsg-1) experimental; urgency=low

  [ Christian Perrier ]
  * Remove all mention of "Samba 4" and "experimental version of Samba"
    in packages' description.  Samba version 4 is now production-ready.

  [ Andrew Bartlett ]
  * Update build-dependencies on Samba libraries using autodeps.py
  * New upstream security release. Closes: #718781
    Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation

  [ Ivo De Decker ]
  * New upstream release
  * refresh patches for new upstream version
  * remove patches integrated upstream
  * Update build-dependencies for new upstream version
  * Add replaces for python-samba for packages that take over files from it.
    Closes: #719212

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 11 Aug 2013 23:45:16 +0200

samba (2:4.0.6+dfsg-1) experimental; urgency=low

  * Team upload.

  [ Andrew Bartlett ]
  * Converted to full AD DC package on the basis of the 3.6 package
    - Samba now can be an Active Directory Domain controller
    - The samba4-* packages are replaced by this package.
    - This package now uses the s3fs file server by default, not the ntvfs
      file server used in the samba4 packages.
  * Provides a new library based package
    - Upstream's new build system uses libraries extensively, so new
      packages reflect that.
    - This provides the libraries that Openchange and other projects depend on
  * Move binary files out of /var/lib/samba to /var/lib/samba/private,
    where they belong according to upstream Samba:
    - schannel_store.tdb
    - idmap2.tdb
    - passdb.tdb
    - secrets.tdb
  * Remove most of the samba4 references, except for binaries ending in 4
  * Removed debconf support for encrypted passwords
  * Samba 3.x users upgrading can either upgrade to an AD DC or continue
    using Samba without major changes.

  [ Christian Perrier ]
  * Move libnss_winbind.so.2 and libnss_wins.so.2 to /lib as in 3.6.*
  * Use the same set of configure arguments than 3.6.15 (except those
    eventually specific to version 4 and above)
  * Add libctdb-dev to build dependencies as we're building with cluster
    support just like 3.6 packages
  * Re-introduce mksmbpasswd for compatibility with 3.* packages

  [ Ivo De Decker ]
  * Specify all paths using configure options, so that we can finally get rid
    of the fhs patch. Closes: #705449

  [ Steve Langasek ]
  * Make samba-common Conflicts: swat, which is now obsolete and no longer
    built from samba 4.0; the old versions of swat in the archive are
    incompatible with smb.conf from samba 4.0, so force them off the system
    to avoid configuration corruption.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 20 Jun 2013 21:51:49 +0200

samba4 (4.0.3+dfsg1-0.1) experimental; urgency=low

  [ Andrew Bartlett ]
  * Non-maintainer upload.
  * New upstream relese: 4.0.3
   + Fixes CVE-2013-0172 Samba 4.0.0 as an AD DC may provide authenticated users
     with write access to LDAP directory objects
   + Fixes many other ACL related issues in the AD DC
   + Drop 08_waf_python_config as it is now upstream.
  * Fix the forced use of NTVFS by setting the required options in the smb.conf
    at configure time.
  * Add depenencies to ensure python-samba requires exactly this binary version
    of our core libraries. Closes: #700348

 -- Andrew Bartlett <abartlet@samba.org>  Sat, 16 Feb 2013 17:06:34 +0100

samba4 (4.0.0+dfsg1-1) experimental; urgency=low

  [ Martin Pitt ]
  * debian/tests/control: Fix dependency: python-samba4 does not exist, it's
    python-samba. Closes: #695854

  [ Jelmer Vernooij ]
  * New upstream release: 4.0.0!
   + Add 08_waf_python_config to cope with python-config no longer
     being a script.
  * Add 25_heimdal_api_changes, to update Samba to work with the
    current Heimdal in Sid. Patch from
    Samuel Cabrero Alamán <scabrero@zentyal.com>. Closes: #686227
  * Add 11_force_ntvfs: Force the use of NTVFS, until the version of smbd in
    the archive is new enough. Closes: #694697
  * Drop dependency on libsmbclient; instead, build private copy.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 13 Dec 2012 16:27:20 +0100

samba4 (4.0.0~rc6+dfsg1-1) experimental; urgency=low

  * New upstream release.
   + Drop 08_heimdal_config_h and 11_system_heimdal, now applied upstream.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 04 Dec 2012 14:39:40 +0100

samba4 (4.0.0~rc5+dfsg1-1) experimental; urgency=low

  * New upstream release.
  * Add autopkgtest header. Closes: #692671
  * Use Multi-Arch for winbind4.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 08 Nov 2012 15:13:43 +0100

samba4 (4.0.0~rc4+dfsg1-1) experimental; urgency=low

  * New upstream release.
   + Bump minimum ldb version to 1.1.13.
  * Switch to Git as VCS.
  * Remove DM-Upload-Allowed field.
  * Depend on heimdal-multidev rather than heimdal-dev.
   + Add 11_system_heimdal to support building with system heimdal.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 28 Oct 2012 16:21:43 +0100

samba4 (4.0.0~rc3+dfsg1-1) experimental; urgency=low

  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 16 Oct 2012 14:53:19 +0200

samba4 (4.0.0~rc2+dfsg1-2) experimental; urgency=low

  * Depend on at least ldb 1.1.12. Closes: #689594
  * Suggest ntp daemon for ntpsignd integration.
  * Support specifying 'none' as server role to disable provision.
    Closes: #690138
  * Prompt user for administrator password. Closes: #690139
  * Bump debconf level of server role to 'high'.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 04 Oct 2012 13:22:40 +0200

samba4 (4.0.0~rc2+dfsg1-1) experimental; urgency=low

  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 25 Sep 2012 03:34:08 +0200

samba4 (4.0.0~beta2+dfsg1-3) unstable; urgency=low

  * Fix setup when no domain is set. Closes: #681048

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 05 Aug 2012 16:52:02 +0200

samba4 (4.0.0~beta2+dfsg1-2) unstable; urgency=low

  * Use ntvfs while debian ships an old version of Samba 3. Closes: #679678
  * Don't attempt to add shares to the configuration if it doesn't
    exist. Closes: #681050

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 10 Jul 2012 11:52:44 +0200

samba4 (4.0.0~beta2+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Update Slovak translation. Thanks Ivan Masár. Closes: #677906
  * Add build dependency on libacl1-dev.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 18 Jun 2012 00:49:12 +0200

samba4 (4.0.0~beta1+dfsg1-3) unstable; urgency=high

  * Prevent adding share with invalid name when used in domain controller mode.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 17 Jun 2012 17:00:00 +0200

samba4 (4.0.0~beta1+dfsg1-2) unstable; urgency=low

  * Create leading directories in addshare script. Closes: #677643
  * Use attr/attributes.h on GNU/kFreeBSD. Fixes finding of ATTR_ROOT.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 16 Jun 2012 01:42:10 +0200

samba4 (4.0.0~beta1+dfsg1-1) unstable; urgency=medium

  * New upstream release.
  * Add 08_heimdal_config_h: Fixes compatibility with newer versions of
    Heimdal. Closes: #674918
  * Use standard spelling of domain controller in debconf templates.
    Closes: #670413
  * Switch to debhelper 9.
  * samba4-clients: Drop conflicts with smbclient; upstream has renamed
    the Samba4-specific smbclient and nmblookup binaries.

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 30 May 2012 18:42:06 +0200

samba4 (4.0.0~alpha20+dfsg1-1) unstable; urgency=medium

  * New upstream release.
   + No longer installs libkdc-policy.so. LP: #887537

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 01 May 2012 15:02:19 +0200

samba4 (4.0.0~alpha19+dfsg1-7) unstable; urgency=low

  * Only update smb.conf if it exists. Closes: #670560
  * Automatically add shares required for active directory controllers if they
    don't exist. Closes: #670558

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 26 Apr 2012 19:59:26 +0200

samba4 (4.0.0~alpha19+dfsg1-6) unstable; urgency=low

  * Rebuild against ldb 1.1.6.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 20 Apr 2012 12:47:15 +0200

samba4 (4.0.0~alpha19+dfsg1-5) unstable; urgency=low

  * Use dbcheck when upgrading from recent versions of Samba4, as it's
    both more reliable and quicker than upgradeprovision.
  * Move samba-dsdb-modules from Recommends to Depends, as LDAP server
    support has been dropped. Closes: #669331

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 19 Apr 2012 17:33:33 +0200

samba4 (4.0.0~alpha19+dfsg1-4) unstable; urgency=low

  * Fix pattern matching line in setoption.py. Thanks Hleb Valoshka.
    Closes: #669015
  * setoption.py: Preserve mode on smb.conf file.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 16 Apr 2012 17:33:07 +0200

samba4 (4.0.0~alpha19+dfsg1-3) unstable; urgency=low

  * Convert setoption.pl to Python to avoid dependency on perl-modules.
    Closes: #668800

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 15 Apr 2012 15:50:57 +0200

samba4 (4.0.0~alpha19+dfsg1-2) unstable; urgency=low

  * Correctly import server role and realm from existing smb.conf file.
    LP: #936891 LP: #832465 Closes: #659775
  * Force correct realm during upgradeprovision. LP: #728864

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 13 Apr 2012 16:47:37 +0200

samba4 (4.0.0~alpha19+dfsg1-1) unstable; urgency=low

  * New upstream release.
   + Drop patches applied upstream: 06_upgradedns, 08_smb2_deps.
   + Cope with missing sysvol folders during provision upgrade. LP: #930370
   + Depend on tdb 1.2.10.
   + Depend on ldb 1.1.5.
   + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
     beyond of allocated array.
  * Fix replaces: samba-common field in samba4-common-bin.
  * Update Catalan debconf translation. Thanks, Jordi Mallach.
    Closes: #663737

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 11 Apr 2012 16:58:39 +0200

samba4 (4.0.0~alpha18.dfsg1-4) unstable; urgency=low

  * Add patch 08_smb2_deps: Remove (unnecessary) dependencies on various
    private Samba 3 libraries, for which proper package Depends: lines were
    missing.  Closes: #665295
  * Add dependency on tdb-tools. This will be removed once upstream
    removes the use of tdbbackup in provision. Closes: #664658

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 28 Mar 2012 16:20:21 +0200

samba4 (4.0.0~alpha18.dfsg1-3) unstable; urgency=low

  * Fix compatibility with newer versions of Heimdal. Fixes FTBFS.
    Closes: #664820

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 21 Mar 2012 14:11:29 +0100

samba4 (4.0.0~alpha18.dfsg1-2) unstable; urgency=low

  * Add Replaces: python-samba to libsmbclient-raw0 as some
    private libraries have moved. Thanks Axel Beckert. Closes: #663641

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 13 Mar 2012 16:39:12 +0100

samba4 (4.0.0~alpha18.dfsg1-1) unstable; urgency=low

  [ Jelmer Vernooij ]
  * New upstream release.
   + Depend on newer versions of ldb.
   + Depend on tevent >= 0.9.15.
   + Sanitizes NetBIOS names. LP: #938592
   + Re-adds support for 'security = domain' parsing. LP: #916556
  * Fix typo in recommendations of samba4: samba4-dsdb-modules ->
    samba-dsdb-modules.
  * Recommend attr package for Samba4.
  * Create util.h -> samba_util.h symlink for backwards compatibility.
  * Add dependency on libbsd-dev, used for strlcat and strlcpy.
  * Extracts waf source code. Closes: #654500

  [ Debconf translations ]
  * Russian (Yuri Kozlov).  Closes: #651583
  * Portuguese (Miguel Figueiredo).  Closes: #653557
  * German (Holger Wansing).  Closes: #653714
  * Norwegian Bokmål (Bjørn Steensrud).  Closes: #654284
  * Spanish (Javier Fernández-Sanguino).  Closes: #656403
  * Danish (Joe Hansen).  Closes: #656785
  * Dutch (Jeroen Schot).  Closes: #657469
  * Hebrew (Omer Zak).
  * Polish (Michał Kułach).  Closes: #659570
  * Czech (Miroslav Kure).  Closes: #659573
  * Turkish (İsmail BAYDAN).  Closes: #659575
  * Japanese (Kenshi Muto).  Closes: #659978
  * Esperanto (Felipe Castro)

  [ Jelmer Vernooij ]
  * Rename upgradedns to less generic samba_upgradedns.
  * Bump standards version to 3.9.3 (no changes).
  * Use DEP-5 for copyright file.
  * Indonesian (Mahyuddin Susanto).  Closes: #660031
  * Italian (Luca Monducci).  Closes: #660150
  * Use samba-tool to retrieve configuration options from debconf.
    LP: #936891, Closes: #659775
  * Add really basic autopkgtest test.
  * Fix bundled libraries for samba.samba3 python module. LP: #889869

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 12 Mar 2012 19:01:00 +0100

samba4 (4.0.0~alpha17.dfsg2-1) unstable; urgency=low

  * Remove more non-free IETF files. Closes: #547280
  * Rebuild for newer version of ldb.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 03 Dec 2011 01:41:49 +0100

samba4 (4.0.0~alpha17.dfsg1-3) unstable; urgency=low

  * Install libmemcache.so, libutil_str.so and various other private libraries
    required by the samba3 module in python-samba. LP: #889864, LP: #889869

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 13 Nov 2011 17:03:29 +0100

samba4 (4.0.0~alpha17.dfsg1-2) unstable; urgency=low

  * Include upstart file to eliminate delta with Ubuntu.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 11 Nov 2011 16:13:58 +0100

samba4 (4.0.0~alpha17.dfsg1-1) unstable; urgency=low

  * Strip non-free IETF RFC files. Closes: #547280
  * Rebuild against newer ldb. Closes: #648326
  * Updated Swedish debconf translation. Thanks Martin Bagge.
    Closes: #644942
  * Updated French debconf translation. Thanks Christian Perrier.
    Closes: #644465

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 11 Nov 2011 03:16:37 +0100

samba4 (4.0.0~alpha17-3) unstable; urgency=low

  * Upload to unstable. Closes: #642905
  * Use default python version rather than 2.7.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 27 Sep 2011 00:11:31 +0200

samba4 (4.0.0~alpha17-2) experimental; urgency=low

  * In -dev package dependencies, depend on a specific version of other
    Samba dev packages.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 24 Sep 2011 23:10:30 +0200

samba4 (4.0.0~alpha17-1) experimental; urgency=low

  * New upstream release.
  * Add libsmbclient-{raw0,dev} packages, required for winexe.
  * Add libsamba-credentials0 and libsamba-credentials-dev packages for
    new public library for credentials management.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 18 Sep 2011 15:14:42 +0200

samba4 (4.0.0~alpha17~git20110807.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
  * Depend on newer version of ldb. Closes: #636961
  * Update Indonesian Debconf translation. Thanks Mahyuddin Susanto.
    Closes: #608552
  * Preserve server role set in smb.conf. LP: #815586

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Aug 2011 23:37:37 +0200

samba4 (4.0.0~alpha17~git20110801.dfsg1-1) experimental; urgency=low

  * Improve outdated package descriptions. Closes: #486370
  * New upstream release.
  * Bump standards version to 3.9.2 (no changes).
  * Add new libsamdb-dev package, required by openchange which relies on the
    samdb.pc file.
   + No header files are shipped yet, but an upstream fix is pending.
  * Recommend bind9utils in samba4 package.
  * Remove complex dependency loop between library packages. Closes: #598842
   + Disable currently unfinished ldb share module.
   + Split dcerpc server libraries out into libdcerpc-server{0,-dev} to
     cut dependency loop.
   + New samba-dsdb-modules package with all DSDB related LDB modules.
  * Move libwinbind-client library to libgensec0. Closes: #623327
  * Add support for multi-arch.
  * Switch to new style debhelper.
  * Fix symbolic link for ldb modules. Closes: #632974

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 31 Jul 2011 20:16:03 +0200

samba4 (4.0.0~alpha15.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 22 Apr 2011 02:57:04 +0200

samba4 (4.0.0~alpha15~git20110410.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
   + Drop patch now applied upstream: 02_backupkey_private.diff
  * Switch to dh_python2. Closes: #617059

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 05 Mar 2011 14:44:25 +0100

samba4 (4.0.0~alpha15~git20110224.dfsg1-2) experimental; urgency=low

  * Depend on newer version of Heimdal which exposes more hx509 symbols.
    Fixes FTBFS.
  * Tighten libldb1 dependency for LDB modules.
  * Depend on newer version of pyldb.  Closes: #615631

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 28 Feb 2011 03:52:35 +0100

samba4 (4.0.0~alpha15~git20110224.dfsg1-1) experimental; urgency=low

  * New upstream release.
   + Avoids unnecessary setlocale call to "C". LP: #519025, #519025
  * Fix dependency on newer version of ldb. Closes: #614466
  * Add missing dependency on python-samba, required for testparm. LP: #641082
  * Use libwbclient. LP: #714344, Closes: #611214
  * Make sure /var/run/samba exists. LP: #646037

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 23 Feb 2011 00:35:59 +0100

samba4 (4.0.0~alpha15~git20110124.dfsg1-2) experimental; urgency=low

  * Build-depend on newer version of heimdal-multidev with fixed kdc.h.
  * Build-depend on versioned libkdc2-heimdal which includes kdc_log. Closes: #611112

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 25 Jan 2011 09:22:16 -0800

samba4 (4.0.0~alpha15~git20110124.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
   + Removes unresolved symbols from libraries.
     Closes: #596690, #599075, #602855.  LP: #658116, #592882, #646042
  * Add dependency on comerr-dev.
  * Update Spanish Debconf translation. Thanks Ricardo Fraile. Closes: #596075
  * Update Danish debconf translation. Thanks Joe Dalton. Closes:
    #598779
  * Re-remove non-free IETF RFCs, add test to prevent future regression.
    Closes: #547280
  * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
  * Upgrade provision data between releases. Closes: #600117

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 15 Oct 2010 01:32:48 +0200

samba4 (4.0.0~alpha14~bzr13684.dfsg1-1) unstable; urgency=low

  * New upstream snapshot.
   + Depend on libsubunit-dev.
  * Support talloc 2.0.1.
  * Update dependency for ldb to be >= 0.9.14. Closes: #596745
  * Support parallel builds.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 28 Sep 2010 09:46:54 +0200

samba4 (4.0.0~alpha13+git+bzr12785.dfsg1-1) experimental; urgency=low

  * Install provision scripts to /usr/share/samba/setup.
  * Move nsstest from samba4 to winbind4.
  * Support building against tdb 1.2.1.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 10 Sep 2010 17:45:20 +0200

samba4 (4.0.0~alpha13+git+bzr12687.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
  * Mark as compatible with older versions of tdb (>= 1.2.2).

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 08 Sep 2010 03:30:03 +0200

samba4 (4.0.0~alpha13+git+bzr12670.dfsg1-1) experimental; urgency=low

  * Add missing dependency on pkg-config.
  * Require subunit >= 0.0.6, older versions have a broken tap2subunit.
  * Debconf translations:
    - Swedish (Martin Bagge).  Closes: #586819
  * New upstream snapshot.
    - Fixes symbols for LDB modules. Closes: #594763, #594771, #594773.
  * Require tdb 1.2.3. Closes: #595644

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 05 Sep 2010 17:34:46 +0200

samba4 (4.0.0~alpha13+git+bzr12292.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
   + Fixes provision to be able to find the data path again.
  * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
  * Suggest swat2.
  * Migrate to Bazaar.
  * Bump standards version to 3.9.1 (no changes).

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 22 Aug 2010 02:38:51 +0200

samba4 (4.0.0~alpha13+git20100618.dfsg1-1) experimental; urgency=low

  [ Jelmer Vernooij ]
  * New upstream snapshot. Closes: #578009, #577880
   + Add dependency on python-dnspython.
   + Removes last Python string exception. Closes: #585327
   + Installs all display specifiers. Closes: #548911

  [ Christian Perrier ]
  * Debconf translations:
    - Swedish (Martin Bagge).  Closes: #552734
    - Russian (Yuri Kozlov).  Closes: #563346
    - Spanish (Omar Campagne).  Closes: #579099

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 28 Feb 2010 02:33:37 +0100

samba4 (4.0.0~alpha8+git20100227.dfsg1-1) experimental; urgency=low

  * Fix sections of libndr-standard0 and libndr0.
  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 22 Feb 2010 11:19:07 +0100

samba4 (4.0.0~alpha8+git20100222.dfsg1-1) experimental; urgency=low

  [ Christian Perrier ]
  * Change "Provides:" in init script to avoid conflicting Provides
    with samba. Closes: #547209
  * Swedish debconf translation (Martin Bagge).  Closes: #552734

  [ Jelmer Vernooij ]
  * Depend on specific version of libldb. Closes: #562389
  * Build against system Heimdal and remove the copy of Heimdal from the
    Samba 4 source tree, since it contains non-free IETF RFC/I-D.
    Closes: #547280
  * Bump standards version to 3.8.4.
  * Switch to dpkg-source 3.0 (quilt) format

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 03 Feb 2010 15:17:20 +0100

samba4 (4.0.0~alpha8+git20090912-1) unstable; urgency=low

  * Upload to unstable.
  * Fix nmblookup.1.gz filename for alternatives.
  * New upstream snapshot.
   + Add new binary packages libndr-standard0 and libndr-standard-dev.
  * Bump standards version to 3.8.3.
  * Remove unused patch system.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 12 Sep 2009 13:28:33 +0200

samba4 (4.0.0~alpha8+git20090718-1) experimental; urgency=low

  * New upstream snapshot.
  * The server package now suggests a version of bind9 that supports
    update-policy.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 18 Jul 2009 17:34:30 +0200

samba4 (4.0.0~alpha8~git20090620-1) experimental; urgency=low

  * Support building against Python2.6.
  * Add missing dependency on tdb >= 1.1.3. (Closes: #517171)
  * Add missing dependencies on tdb-dev and libtalloc-dev to
    libldb-samba4-dev. (Closes: #525885)
  * Use newer version of tevent. (Closes: #531480, #533457, #533455)
  * New upstream snapshot.
  * Bump standards version to 3.8.2.
  * Reorganization to let Samba 3 and Samba 4 co-exist on the same system:
   + Depend on samba-common for smb.conf, /etc/samba/gdbcommands,
     /usr/share/samba/{panic-action,*.dat}.
   + Rename samba4-common to samba4-common-bin.
  * samba4-testsuite now recommends subunit, since it can output subunit
    streams.
  * Document license for Active Directory schemas.
  * Fix init script to run samba rather than smbd. (Closes: #522646)
  * Removed libldb-samba4-{dev,0}, now using libldb{-dev,0} since there
    are no longer any differences.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 18 Jun 2009 00:19:44 +0200

samba4 (4.0.0~alpha7~20090225-1) experimental; urgency=low

  * Build-depend on pkg-config, as we no longer seem to pull that in
    through any other dependencies. (Closes: #516882)

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 25 Feb 2009 04:04:36 +0100

samba4 (4.0.0~alpha7~20090223-1) experimental; urgency=low

  * Add build dependency on libpopt-dev, so the system libpopt is always used
    rather than the one included by Samba.
  * Use the alternatives system for the smbstatus, nmblookup, net and testparm
    binaries as well as various data files.
  * Make the samba4 and samba4-testsuite packages conflict with
    samba-tools. (Closes: #506236)
  * Build against external libtevent.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 21 Feb 2009 17:46:41 +0100

samba4 (4.0.0~alpha6-1) experimental; urgency=low

  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 20 Jan 2009 02:59:15 +0100

samba4 (4.0.0~alpha5+20090105-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 05 Jan 2009 21:08:53 +0100

samba4 (4.0.0~alpha5+20081126-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Wed, 26 Nov 2008 03:48:41 +0100

samba4 (4.0.0~alpha5+20081101-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 01 Nov 2008 14:40:09 +0100

samba4 (4.0.0~alpha5+20081031-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Fri, 31 Oct 2008 00:10:41 +0100

samba4 (4.0.0~alpha5+20081014-1) experimental; urgency=low

  * Fix typo in description. (Closes: 500811)
  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 09 Oct 2008 18:41:59 +0200

samba4 (4.0.0~alpha5+20080930-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Tue, 30 Sep 2008 16:19:22 +0200

samba4 (4.0.0~alpha5+20080825-1) experimental; urgency=low

  * Add watch file.
  * Use policy-compliant sysconfdir and localstatedir. (Closes: #495944)

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 25 Aug 2008 17:42:44 +0200

samba4 (4.0.0~alpha4~20080727-1) experimental; urgency=low

  [ Steve Langasek ]
  * Add missing dependency on libparse-yapp-perl to libparse-pidl-perl.

  [ Jelmer Vernooij ]
  * Make samba4-common conflict with samba-common. (Closes: #492088)
  * New Slovak translation. (Closes: #487889)
  * New Thai translation from Theppitak Karoonboonyanan. (Closes: #486614)
  * New Vietnamese translation from Clytie Siddall. (Closes: #486618)
  * New Bulgarian translation from Damyan Ivanov. (Closes: #486626)
  * New Japanese translation from Kenshi Muto. (Closes: #486648)
  * New Galician translation from Jacobo Tarrio. (Closes: #486701)
  * New Turkish translation from Mehmet TURKER. (Closes: #487244)
  * New Czech translation from Miroslav Kure. (Closes: #487265)
  * New Arabic translation from Ossama Khayat. (Closes: #487322)
  * New German translation from Holger Wansing. (Closes: #487542)
  * New Italian translation from Luca Monducci. (Closes: #487720)
  * New Portugese translation from the Portuguese Translation Team.
    (Closes: #487753)
  * New Korean translation from Sunjae Park. (Closes: #487894)
  * New Lithuanian translation from Gintautas Miliauskas. (Closes: #487895)
  * New Romanian translation from Eddy Petrișor. (Closes: #488874)

 -- Jelmer Vernooij <jelmer@samba.org>  Sun, 27 Jul 2008 15:38:41 +0200

samba4 (4.0.0~alpha4~20080617-1) experimental; urgency=low

  * Fixed maintainer email address.
  * New upstream snapshot.
  * Remove dependency on unpackaged libevents in ldb pkg-config file.

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 16 Jun 2008 21:29:43 +0200

samba4 (4.0.0~alpha4~20080616-1) experimental; urgency=low

  * Fix dependency of libsamba-hostconfig-dev on libsamba-hostconfig0.
  * Fix dependency of libldb-samba4-dev on libldb-samba4-0.
  * Remove tdb binaries as they're already packaged elsewhere.
    (Closes: #485619, #486270)
  * New upstream snapshot.
  * New French translation from Christian Perrier. (Closes: #486072)

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 14 Jun 2008 20:39:13 +0200

samba4 (4.0.0~alpha4~20080522-1) experimental; urgency=low

  * New upstream snapshot. (Closes: #478328)

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 22 May 2008 02:25:05 +0200

samba4 (4.0.0~alpha4~20080403-1) experimental; urgency=low

  * Rename source package to samba4.

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 28 Jan 2008 17:23:58 +0100

samba (4.0.0~alpha3~20080120-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 19 Jan 2008 22:34:08 +0100

samba (4.0.0~alpha2~svn26294-1) experimental; urgency=low

  * New upstream snapshot.
  * Set Vcs-Svn field.

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 19 Jan 2008 22:32:28 +0100

samba (4.0.0~~tp5-1) experimental; urgency=low

  * New upstream release.
  * Set homepage field.

 -- Jelmer Vernooij <jelmer@samba.org>  Sun, 25 Nov 2007 16:28:02 +0000

samba (4.0.0~~svn22819-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Wed, 09 May 2007 15:28:50 +0200

samba (4.0.0~~svn19515-1) experimental; urgency=low

  * New upstream versions (svn snapshots of r19515).

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 30 Oct 2006 16:45:36 +0100

samba (3.9.1+4.0.0tp2-1) experimental; urgency=low

  * New upstream version (tech preview 2).

  [ Jelmer Vernooij ]
  * Remove setntacl utility (it doesn't do anything).
  * Include oLschema2ldif.1 in the ldb-tools package.
  * Enable shared library building.
  * Put ldb, tdb, gtksamba, talloc and gensec libraries into seperate binary packages.
  * Pass fewer options for paths to configure
  * Adapt to new paths from upstream

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 23 Mar 2006 01:13:32 +0100

samba (3.9.1+4.0.0tp1-1) experimental; urgency=low

  * New upstream version (tech preview 1).

  [ Steinar H. Gunderson ]
  * Forward-port panic-action script from the Samba 3 packaging.
    * Patch the smb.conf provisioning template (only used by swat in the
      Debian packaging) to use the panic-action script by default.
    * Patch the samba-common postinst to generate smb.conf files with the
      same setting.
  * Include ntlm_auth.1 and smbd.8 man pages in the samba package.
  * Make the samba dependency on samba-common versioned.
  * Install /usr/bin/setntacl manually; the upstream install target doesn't
    seem to do it anymore.
  * Ask for the realm (and give it to the upgrade script) when upgrading from
    Samba 3; it can't be easily autodetected. (Note that upgrade still seems
    to be broken for now.)

  [ Jelmer Vernooij ]
  * Remove gwsam utility.
  * Include gwcrontab.1 and gepdump.1 man pages in the samba-gtk-frontends
    package.
  * Remove ldbtest utility from ldb-tools package.

 -- Steinar H. Gunderson <sesse@debian.org>  Tue, 24 Jan 2006 16:01:59 +0100

samba4 (3.9.0-SVN-build-6710-1) unstable; urgency=low

  * Newer upstream version

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 12 May 2005 14:04:05 +0200

samba4 (3.9.0-SVN-build-655-1) unstable; urgency=low

  * Initial release.

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 13 May 2004 01:38:41 +0200

samba (3.9.0+SVN12946-1) experimental; urgency=low

  * New upstream version.
    * Fix upgrades from Samba 3 giving too few parameters to provision().
      (Closes: #348079)
  * Add sections to binary packages to match the archive:
    * libparse-pidl-perl: perl
    * samba-dev: devel
    * samba-gtk-frontends: x11
  * Adjust our export procedure we get the Subversion revision number in
    include/version.h (and thus in the build itself), and document how in
    README.building.
  * Remove "reload" option from the init script, since Samba 4 doesn't
    understand SIGHUP yet.

 -- Steinar H. Gunderson <sesse@debian.org>  Sun, 15 Jan 2006 13:43:43 +0100

samba (3.9.0+SVN12856-1) experimental; urgency=low

  * New upstream version.
  * Move testparm from samba into samba-common.
    * Make samba-common Architecture: any.
    * Make samba-common replace/conflict samba (<= 3.9.0+SVN12739-1).
  * Make samba-clients depend on samba-common.
  * Make samba-common depend on debconf.
  * Replace debconf dependencies with ${misc:Depends}, to automatically
    get the debconf-2.0 alternative right.
  * Include the newuser binary in samba-server package.
  * Add missing Build-Depends on: libgnutls-dev, libreadline5-dev,
    libpam0g-dev. All were causing silent build failures (ie. the package
    was simply built without the features).
  * Remove Build-Depends on libldap-dev.
  * Include NEWS file.

 -- Steinar H. Gunderson <sesse@debian.org>  Wed, 11 Jan 2006 22:08:32 +0100

samba (3.9.0+SVN12739-1) experimental; urgency=low

  * Move /usr/lib/samba/setup from samba-common to samba.
    * Make samba replace samba-common (<= 3.9.0+SVN12726-1)
  * Add a missing db_stop in samba.postinst, probably causing problems
    starting the daemon in some cases.
  * Add orphan files from /usr/bin (and relevant manpages) into their
    correct packages:
    * ldb-tools: ldbrename, ldbtest, oLschema2ldif.
    * samba: ntlm_auth.
    * samba-clients: getntacl.
    * samba-gtk-frontends: gwcrontab.
    * winregistry-tools: winreg.
    * samba3dump and tdbtorture remain orphans.
  * Add new executable /usr/bin/testparm to samba package.
    * Add /var/lib/samba directory to samba package; it's needed by
      testparm.
  * Rewrite configuration/bootstrapping to be able to install the client
    only and still get a usable smb.conf. The basic idea is:
    * samba-common looks for an smb.conf. If there is none, it asks for
      realm and domain and generates a skeleton smb.conf.
    * If samba notices an upgrade from Samba 3, it asks whether the user
      wants to upgrade. If not, it leaves everything alone (and broken).
    * Otherwise, samba asks whether the user wants to set up a PDC. If yes,
      it adds "server role = pdc" to smb.conf and provisions the server.
  * Removed unused file samba.conffiles.
  * Run dh_installdebconf on architecture-independent packages as well, now
    that samba-common has a config script.
  * Let samba-clients conflict/replace samba-common (<< 3.9.0), as they share
    /usr/bin/net.

 -- Steinar H. Gunderson <sesse@debian.org>  Fri,  6 Jan 2006 14:25:50 +0100

samba (3.9.0+SVN12726-1) experimental; urgency=low

  * First upload to Debian main.

  * Package renaming to get more in line with Samba 3 packaging:
    * Rename samba-server package to just samba, for consistency with the
      Samba 3 packaging.
      * Rename samba.samba.init to samba.init, now that the init script and the
        server package are called the same.
    * Rename samba-swat to swat, and add a dependency from swat to samba.

  * debian/rules changes:
    * Change SOURCEPATH to reflect that we now have the packaging in debian/,
      not packaging/debian/. This will have to be reverted whenever upstream
      syncs with us.
    * Removed debmake comment, it's hardly relevant any more.
    * Removed comment that there aren't any architecture-independent packages
      (because there are).
    * Remove redundant "package=samba" variable.
    * Do "make pch ; make all" instead of "make proto ; -make pch ; make all";
      some build system bug prevents us from just doing "make pch all", but
      since we're more or less guaranteed a recent gcc version, the pch target
      shouldn't fail, so we won't allow it to.
    * Remove autogen.sh call from configure; it should be done in the
      upstream tarball, not in maintainer scripts.

  * debian/control changes:
    * Copied Uploaders: line from Samba 3 packaging, adding myself.
    * Rename samba-client package to samba-clients.
    * Make samba-clients Replaces/Conflicts smbclient.
    * Build-depend on docbook-xml, not just docbook-xsl -- the documentation
      needs data from both to build.
    * Move the samba binary package to the top, so it's the one receiving
      the README.* files, among others.

  * Maintainer script changes:
    * Attempt to upgrade from Samba 3 if that's what the user tries to do.
      * Copy upgrade script into /usr/lib/samba/setup.
      * Check for upgrade from << 3.9.0 in config, and ask the user for upgrade
        if relevant.
      * Check for upgrade from << 3.9.0 in postinst, and upgrade if the user
        wished to.
    * Only provision in samba.postinst if we're doing a fresh install.
    * Support purging properly in postrm, both for samba and samba-common
      (adapted from the Samba 3 packaging).
    * Don't ask about an administrator password -- just let the provisioning
      scripts make up a random one.
      * Updated README.Debian to show the user how to change the password.
      * Make samba recommend ldb-tools.
    * Install README.building along with all the other documentation.
    * Don't try to ask about the "done" question, which we nuked in a previous
      release.

  * Updated debian/copyright.
    * Added Samba copyright holders.
    * Noted that talloc, ldb and tdb are under the LGPL.
    * Added copyright holders and licensing for the packaging itself.

  * Remove a few unused files in the packaging.
  * Change debhelper compatibility level to 5.
    * Update versioned depends accordingly.
  * Don't give --pidfile to start-stop-daemon when stopping -- current
    versions of Samba 4 won't die when the parent is killed.
  * Updated README.debian somewhat, and renamed to use a capital D.
  * Rewritten README.building, to reflect the magic that has to be done
    with the package in another repository.
  * Update po/POTFILES.in to reflect name change (from samba4-server ->
    samba-server -> samba).

 -- Steinar H. Gunderson <sesse@debian.org>  Thu,  5 Jan 2006 21:27:13 +0100

samba (3.9.0+SVN12395-1) unstable; urgency=low

  * New snapshot, drop 4 suffix

 -- Jelmer Vernooij <jelmer@samba.org>  Tue, 20 Dec 2005 13:38:26 +0100

samba4 (3.9.0+SVN12312-1) unstable; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 27 Jun 2005 11:25:57 +0200

samba (2:3.6.19-1) unstable; urgency=low

  * Team upload.
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Wed, 25 Sep 2013 20:01:48 +0200

samba (2:3.6.18-1) unstable; urgency=low

  * Team upload.

  [ Steve Langasek ]
  * Split the samba init script into nmbd and smbd init scripts, for better
    alignment with how init systems other than sysvinit work.  This also
    drops the override of the arguments to update-rc.d in debian/rules,
    no longer needed in the post-insserv world.
  * Add upstart jobs from Ubuntu for smbd, nmbd, and winbind.

  [ Ivo De Decker ]
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 20 Aug 2013 22:06:45 +0200

samba (2:3.6.17-1) unstable; urgency=high

  * Team upload.
  * New upstream security release. Closes: #718781
    Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 05 Aug 2013 13:46:23 +0200

samba (2:3.6.16-2) unstable; urgency=high

  * Team upload.
  * Make build-dep on libtevent-dev explicit.
  * Fix waf-as-source.patch to make sure unpacking works in recent build
    environment. Closes: #716932

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 16 Jul 2013 22:01:04 +0200

samba (2:3.6.16-1) unstable; urgency=low

  * Team upload.

  [ Steve Langasek ]
  * Drop support for running smbd from inetd; this is not well-supported
    upstream, and can't correctly handle all of the long-running services
    that are needed as part of modern samba.  Closes: #707622.

  [ Ivo De Decker ]
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Wed, 19 Jun 2013 21:05:07 +0200

samba (2:3.6.15-1) unstable; urgency=high

  * Team upload.
  * New upstream bugfix release. Closes: #707042
  * Update VCS URL's for new git repo.
  * The recommends for the separate libnss-winbind and libpam-winbind
    packages needed for the upgrade of winbind from squeeze to wheezy are no
    longer needed. Lowering them to suggests.
    Closes: #706434, #674853

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 09 May 2013 11:55:03 +0200

samba (2:3.6.14-1) unstable; urgency=low

  * Team upload.
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 04 May 2013 22:02:15 +0200

samba (2:3.6.13-2) experimental; urgency=low

  * Team upload.
  * Move binary files out of /etc/samba to /var/lib/samba,
    where they belong according to the FHS:
    - schannel_store.tdb
    - idmap2.tdb
    - MACHINE.sid
    Closes: #454770

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 21 Apr 2013 12:54:03 +0200

samba (2:3.6.13-1) experimental; urgency=low

  * Team upload.
  * New upstream release
  * samba: Suggests winbind. Closes: #689857

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 18 Mar 2013 21:29:58 +0100

samba (2:3.6.12-1) experimental; urgency=low

  * Team upload.
  * Security update, fixing the following issues:
    - CVE-2013-0213: Clickjacking issue in SWAT
    - CVE-2013-0214: Potential XSRF in SWAT
  * New upstream release
  * Install pkgconfig file in libsmbclient-dev. Closes: #700643

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 17 Feb 2013 22:25:34 +0100

samba (2:3.6.10-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Sat, 15 Dec 2012 08:03:03 +0100

samba (2:3.6.9-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Thu, 01 Nov 2012 08:17:29 +0100

samba (2:3.6.8-1) experimental; urgency=low

  * New upstream release.

 -- Christian Perrier <bubulle@debian.org>  Tue, 18 Sep 2012 07:13:41 +0200

samba (2:3.6.7-1) experimental; urgency=low

  * New upstream release.

 -- Christian Perrier <bubulle@debian.org>  Sat, 11 Aug 2012 21:37:38 +0200

samba (2:3.6.6-3) unstable; urgency=low

  [ Ansgar Burchardt ]
  * debian/rules: Use xz compression for binary packages.
    Closes: #683899

 -- Christian Perrier <bubulle@debian.org>  Sun, 05 Aug 2012 12:19:12 +0200

samba (2:3.6.6-2) unstable; urgency=low

  * Restore the DHCP hook.

 -- Steve Langasek <vorlon@debian.org>  Wed, 27 Jun 2012 09:31:15 -0700

samba (2:3.6.6-1) unstable; urgency=low

  [ Ivo De Decker ]
  * Only enable swat in inetd.conf on first install. Closes: #658245
  * Minor lintian fixes.
  * Remove DHCP hook. Closes: #652942, #629406, #649100
  * Don't reload smbd when running from inetd. Closes: #678741
  * Don't start smbd when guest account doesn't exist. Closes: #653382
  * Only export public symbols in libsmbclient and libwbclient.

  [ Christian Perrier ]
  * New upstream version

 -- Christian Perrier <bubulle@debian.org>  Wed, 27 Jun 2012 06:03:17 +0200

samba (2:3.6.5-7) unstable; urgency=low

  * Allow installing smbclient package together with newer versions of
    samba4-clients, which no longer ship the smbclient and nmblookup
    binaries.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 11 Jun 2012 13:19:24 +0200

samba (2:3.6.5-6) unstable; urgency=high

  [ Ivo De Decker ]
  * Update symbols file for linux-only symbols in libsmbclient. This should
    fix the FTBFS on kfreebsd and hurd. Closes: #676170
  * Enable ctdb for non-linux archs.
  * Remove old if-up script during upgrade.

 -- Christian Perrier <bubulle@debian.org>  Wed, 06 Jun 2012 19:10:02 +0200

samba (2:3.6.5-5) unstable; urgency=low

  [ Christian Perrier ]
  * Make libpam-winbind depend on libnss-winbind.

  [ Ivo De Decker ]
  * Update symbols file for libsmbclient and libwbclient0
  * Add lintian overrides for examples in samba-doc
  * libpam-winbind: change Depends on libnss-winbind to Recommends
  * libnss-winbind: Suggests libpam-winbind
  * Update package description for winbind, libpam-winbind and libnss-winbind
    to better reflect their content
  * Backport vfs_shadow_copy2 from master, to allow shadow copy to work
    without wide links

  [ Luk Claes ]
  * Ship wbclient.pc file in multiarch safe directory (Closes: #674215).

  [ Sam Morris ]
  * Add libutil_drop_AI_ADDRCONFIG.patch  that allows running nmbd when
    no network interfaces have been assigned an address, therefore
    removing the need for an if-up script. Closes: #640668,#640508

 -- Christian Perrier <bubulle@debian.org>  Sun, 03 Jun 2012 20:00:56 +0200

samba (2:3.6.5-3) unstable; urgency=low

  [ Luk Claes ]
  * Ship wbclient.pc so cifs-utils can be built again (Closes: #672733).
  * Activate parallel building. Might need DEB_BUILD_OPTIONS as usual.

  [ Christian Perrier ]
  * Add Breaks and Replaces on libpam-winbind for newly created
    libnss-winbind. Thanks to Colin Watson for pointing this and shame
    on me for not properly checking the transition. Closes: #673122

 -- Christian Perrier <bubulle@debian.org>  Thu, 17 May 2012 10:34:38 +0200

samba (2:3.6.5-2) unstable; urgency=low

  * The yearly "SambaXP bug cleaning party" release. 11 years
    SambaXP, 20 years Samba and counting...
  * Make samba-common "Multi-Arch: foreign"
  * Adapt patch in upstream #7499 and stop nss_wins clobbering other
    daemon's logfiles. Closes: #598313
  * Add some mention about some use for the user information in Kerberos
    environments in the smbspool manpage. Closes: #387266
  * Drop link to no longer provided "Using Samba" documentation in
    HTML documentation summary file. Closes: #604768
  * Provide WHATSNEW.txt in samba-doc too as it is linked from the
    documentation summary file. Do not compress that file.
  * Fix link to WHATSNEW.txt in HTML documentation summary file. This
    is the second part of the fix for #604768
  * Use lp_state_dir() instead of get_dyn_STATEDIR() in
    fhs-filespaths.patch as the latter does indeed hardcode the
    location for passdb.tdb and secrets.tdb to /var/lib/samba
    (the compile-time option for state directory and NOT the configurable
    value). This is left to "state directory" instead of "private dir"
    at least as of now, because if doesn't change anything to the
    current behaviour, but allows the files' location to be configurable
    through "state directory" (and not "private dir").
    Closes: #249873
  * Disable useless smbtorture4 build. Thanks to Ivo De Decker for the patch.
    Closes: #670561
  * Add upstream commit that adds waf source to the buildtools/
    directory. As upstream will, one day or another, merge this, I
    prefer this over removing the waf binary and repack upstream
    tarball.
    Closes: #654499
  * Build-Conflict with python-ldb and python-ldb-dev to avoid build
    failures when some versions of these packages are locally installed.
    Closes: #657314
  * Rename fix-samba.ldip-syntax.patch to fix-samba.ldif-syntax.patch
  * Split NSS modules into a new libnss-winbind binary package.
    Closes: #646292
  * Add a NEWS.Debian entry about the libnss-winbind split and, while at
    it, add an entry for libpam-winbind too (as it will affect upgrades
    from squeeze).
  * Drop code that was moving files around in samba.postinst and
    winbind.postinst for pre-squeeze versions of the package.
  * Drop code that was modifying a deprecated "passdb backend" setting
    in smb.conf for pre-squeeze versions of the package (in
    samba-common.config).
  * Add Should-Start dependency to winbind init script to guarantee
    that the samba init script is started before winbind if present.
    Closes: #638066
  * Provide a (basic) manpage to smbtorture(1). Closes: #528735
  * Turkish debconf translation update (Atila KOÇ).  Closes: #672447
  * Drop the code that generates an smbpasswd file from the system's
    user list. This adds very long delays on systems with many users,
    including those with external user backends. It also makes much
    less sense nowadays and the use of libpam-smbpass can easily
    fill most of the needs. Closes: #671926
  * Merged from Ubuntu:
    - Set 'usershare allow guests', so that usershare admins are
      allowed to create public shares in addition to authenticated
      ones.
    - add map to guest = Bad user, maps bad username to guest access.
    This allows for anonymous user shares. Closes: #672497

 -- Christian Perrier <bubulle@debian.org>  Sat, 12 May 2012 14:30:58 +0200

samba (2:3.6.5-1) unstable; urgency=low

  * New upstream release. Fixes CVE-2012-2111: Incorrect permission
    checks when granting/removing privileges can compromise file
    server security.
  * Build-Depend on debhelper >= 9~ (which is in unstable for a few
    months now)
  * Use "set -e" in maintainer scripts instead of passing -e in the
    shebang line
  * Update Standards to 3.9.3 (checked, no change)

 -- Christian Perrier <bubulle@debian.org>  Tue, 01 May 2012 08:07:39 +0200

samba (2:3.6.4-1) unstable; urgency=low

  [ Christian Perrier ]
  * Two changes in the previous version should indeed read:
    - samba.postinst: Avoid scary pdbedit warnings on first import.
    - samba-common.postinst: Add more informative error message for the case
      where smb.conf was manually deleted.
    Closes: #664509

  [ Jelmer Vernooij ]
  * New upstream release.
   + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
     beyond of allocated array.

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 11 Apr 2012 23:25:41 +0200

samba (2:3.6.3-2) unstable; urgency=low

  [ Christian Perrier ]
  * Fix example samba.ldif syntax. Closes: #659963
  * Set minimal version of tdb ot 1.2.6 in Build-Depends
    (thanks, backports!)
  * Lower priority of debconf question to medium after some pondering.
    After all, we have a sane default. Closes: #662801
  * Merge some Ubuntu patches:
    - samba.config: Avoid scary pdbedit warnings on first import.
    - samba.postinst: Add more informative error message for the case
      where smb.conf was manually deleted.

  [ Maarten Bezemer ]
  * Removed references to the testprns command from documentation
  * Added notes that the smbsh command is not available in this package
    Closes: #662243

  [ Debconf translations ]
  * Indonesian (Arief S Fitrianto).  Closes: #660312
  * Slovak (Ivan Masár).  Closes: #661125

  [ Steve Langasek ]
  * Use Debian copyright-format 1.0 in debian/copyright.

 -- Christian Perrier <bubulle@debian.org>  Mon, 12 Mar 2012 20:49:24 +0100

samba (2:3.6.3-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * Fixes CVE-2012-0817:
    The Samba File Serving daemon (smbd) in Samba versions
    3.6.0 to 3.6.2 is affected by a memory leak that can
    cause a server denial of service.

  [ Debconf translations ]
  * Polish (Michał Kułach).  Closes: #657770

 -- Christian Perrier <bubulle@debian.org>  Tue, 31 Jan 2012 22:09:39 +0100

samba (2:3.6.2-1) unstable; urgency=low

  * New upstream release
  * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream)

 -- Christian Perrier <bubulle@debian.org>  Fri, 27 Jan 2012 21:38:52 +0100

samba (2:3.6.1-3) unstable; urgency=low

  [ Sam Hartman ]
  * Increase libkrb5-dev dependency to avoid depending on
    krb5_locate_kdc, Closes: #650541

  [ Steve Langasek ]
  * Fix the libpam-winbind description to more accurately identify the
    protocols being used by nss_wins.  Closes: #650091.

 -- Christian Perrier <bubulle@debian.org>  Thu, 01 Dec 2011 21:56:52 +0100

samba (2:3.6.1-2) unstable; urgency=low

  * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch
  * debian/patches/initialize_password_db-null-deref: Avoid null
    dereference in initialize_password_db().  Closes LP: #829221.
  * Mark samba-common Multi-Arch: foreign.

 -- Christian Perrier <bubulle@debian.org>  Sun, 27 Nov 2011 19:06:39 +0100

samba (2:3.6.1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Sat, 22 Oct 2011 10:56:17 +0200

samba (2:3.6.0-1) experimental; urgency=low

  * New upstream release
  * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1
    and 3.5.11~dfsg-1
  * Drop wbc_async.h from libwbclient-dev as, according to upstream's
    commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is
    smbtorture3"

 -- Christian Perrier <bubulle@debian.org>  Thu, 11 Aug 2011 09:14:53 +0200

samba (2:3.6.0~rc3-1) experimental; urgency=low

  * New upstream version

 -- Christian Perrier <bubulle@debian.org>  Fri, 29 Jul 2011 23:11:10 +0200

samba (2:3.6.0~rc2-1) experimental; urgency=low

  * New upstream version

 -- Christian Perrier <bubulle@debian.org>  Tue, 07 Jun 2011 23:09:41 +0200

samba (2:3.6.0~rc1-2) experimental; urgency=low

  * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file
    in an existing directory. Closes: #628121

 -- Christian Perrier <bubulle@debian.org>  Fri, 27 May 2011 15:35:44 +0200

samba (2:3.6.0~rc1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Thu, 19 May 2011 22:26:08 +0200

samba (2:3.6.0~pre3-1) experimental; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled
  * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it
    was forgotten upstream
  * libwbclient0.symbols: dropped several symbols related to
    asynchronous actions that weren't working anyway (according
    to Kai Blin at SambaXP)

  [ Mathieu Parent ]
  * Build against libctdb-dev (>= 1.10+git20110412) to have required control:
    CTDB_CONTROL_SCHEDULE_FOR_DELETION.

 -- Christian Perrier <bubulle@debian.org>  Mon, 09 May 2011 11:29:52 +0200

samba (2:3.5.11~dfsg-4) unstable; urgency=low

  * Lintian override for libpam-winbind; it's not a shared library so doesn't
    really need the pre-depends on multiarch-support.
  * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu.

 -- Steve Langasek <vorlon@debian.org>  Fri, 21 Oct 2011 16:01:29 -0700

samba (2:3.5.11~dfsg-3) unstable; urgency=low

  * Split winbind into separate packages, winbind and libpam-winbind,
    with the latter marked Multi-Arch: same and the former marked
    Multi-Arch: foreign, so that we can install multiple copies of the
    pam module and nss modules on the same system.

 -- Steve Langasek <vorlon@debian.org>  Fri, 21 Oct 2011 20:00:13 +0000

samba (2:3.5.11~dfsg-2) unstable; urgency=low

  * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally.
  * Use dh_links instead of manually creating directories and symlinks from
    debian/rules.
  * Switch from dh_movefiles to dh_install and adjust for debhelper compat
    level 7, in preparation for moving to dh(1).
  * Where possible, use dh_installman and dh_install's support for target
    directories instead of moving files around in debian/rules.
  * We don't need to mess with perms on usr/include/libsmbclient.h anymore
    in debian/rules, the upstream install target gets it right
  * Use debian/clean instead of removing left-behind files by hand in the
    clean target
  * Convert debian/rules to dh(1).
  * Don't run debconf-updatepo on clean; not worth the divergence in
    debian/rules anymore :)
  * Don't install debian/README.build in the package; this is really only
    relevant in the source.
  * Bump to debhelper compat level 9 and build libraries for multiarch.
  * Drop Makefile.internal from libsmbclient-dev examples so that we can mark
    libsmbclient-dev Multi-Arch: same.
  * Bump build-depends on debhelper to 8.9.4, so we ensure we have
    dpkg-buildflags by default and get full build hardening enabled out of
    the box - critical for a server like samba.
  * Use DH_ALWAYS_EXCLUDE instead of passing override options to
    dh_installexamples.
  * Pass --sourcedirectory=source3 to dh instead of having to pass it to each
    dh_auto_* command.
  * Ironically, this means that we have to manually disable dh_auto_test,
    which now finds the makefile targets but doesn't work unless we build an
    extra wrapper library into our binaries that we don't want.
  * Drop a few configure options from debian/rules that shadow the built-in
    defaults.
  * debian/libsmbclient.lintian-overrides: yes, we know the package name
    doesn't match the soname - and it never should until there's an ABI
    change.

 -- Steve Langasek <vorlon@debian.org>  Fri, 07 Oct 2011 21:36:43 -0700

samba (2:3.5.11~dfsg-1) unstable; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Fri, 05 Aug 2011 20:12:01 +0200

samba (2:3.5.10~dfsg-1) unstable; urgency=low

  * New upstream release
  * Security update, fixing the following issues:
    - CVE-2011-2694: possible XSS attack in SWAT
    - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT

 -- Christian Perrier <bubulle@debian.org>  Thu, 28 Jul 2011 12:19:01 +0200

samba (2:3.5.9~dfsg-1) unstable; urgency=low

  * New upstream release
  * Add "--quiet" to start-stop-daemon call in reload target in init
    script. Closes: #572483
  * Add examples/LDAP in examples for the samba package. With this,
    samba.schema will be provided in some way in the package.
    This very partially addresses #190162
  * patches/bug_221618_precise-64bit-prototype.patch: precise
    64bits prototype in libsmbclient-dev. Closes: #221618
  * patches/no-unnecessary-cups.patch: dropped after upstream
    changes to printing code
  * Update Standards to 3.9.2 (checked, no change)
  * Add build-arch and build-indep targets in debian/rules

 -- Christian Perrier <bubulle@debian.org>  Sat, 18 Jun 2011 07:08:00 +0200

samba (2:3.5.8~dfsg-5) unstable; urgency=low

  * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo
    in fhs-filespath.patch. Closes: #629183, LP: #789097

 -- Christian Perrier <bubulle@debian.org>  Sat, 04 Jun 2011 13:48:32 +0200

samba (2:3.5.8~dfsg-4) unstable; urgency=low

  [ Debconf translations ]
  * Spanish (Omar Campagne).  Closes: #627813
  * Swedish (Martin Bagge / brother).  Closes: #627849
  * Brazilian Portuguese (Adriano Rafael Gomes).  Closes: #627866

  [ Christian Perrier ]
  * bug_601406_fix-perl-path-in-example.patch:  fix path to perl
    binary in example file. Closes: #601406

 -- Christian Perrier <bubulle@debian.org>  Fri, 27 May 2011 12:23:05 +0200

samba (2:3.5.8~dfsg-3) unstable; urgency=low

  [ Debconf translations ]
  * Italian (Luca Monducci).  Closes: #626674
  * Dutch (Vincent Zweije).  Closes: #627519
  * Czech (Miroslav Kure).  Closes: #627442

 -- Christian Perrier <bubulle@debian.org>  Tue, 24 May 2011 22:40:04 +0200

samba (2:3.5.8~dfsg-2) unstable; urgency=low

  [ Jelmer Vernooij ]
  * Add libwbclient-dev package.
  * Build against external libtdb.
  * Bump standards version to 3.9.1 (no changes).

  [ Mathieu Parent ]
  * Builddep on libctdb-dev or ctdb < 1.10

  [ Christian Perrier ]
  * Use db_settitle in debconf questions and make these
    titles translatable. Closes: #560318
  * Test the presence of testparm before trying to use it in init script
    Closes: #606320
  * Add cups to Should-{Start,Stop} in LSB headers of
    samba init script to guarantee that CUPS is started
    before samba. Closes: #619132
  * Drop libsmbclient-dev useless dependency on samba-common
    Closes: #597987

  [ Debconf translations ]
  * French (Christian Perrier)
  * Japanese (Kenshi Muto).  Closes: #626474
  * Galician (Miguel Anxo Bouzada).  Closes: #626477
  * Thai (Theppitak Karoonboonyanan).  Closes: #626487
  * Russian (Yuri Kozlov).  Closes: #626523
  * Danish (Joe Hansen).  Closes: #626531
  * Esperanto (Felipe Castro).  Closes: #626558
  * Hebrew (Eran Cohen).  Closes: #626638
  * Bokmål, (Bjørn Steensrud).
  * Italian (Luca Monducci).  Closes: #626674
  * Finnish (Tapio Lehtonen).  Closes: #626890
  * Portuguese (Miguel Figueiredo).  Closes: #627224
  * German (Holger Wansing).  Closes: #627354
  * Czech (Miroslav Kure).  Closes: #627442

 -- Christian Perrier <bubulle@sesostris.kheops.frmug.org>  Sun, 22 May 2011 21:15:21 +0200

samba (2:3.5.8~dfsg-1) unstable; urgency=low

  * New upstream release. This fixes the following bugs:
    - Winbind leaks gids with idmap ldap backend (upstrem #7777)
      Closes: #613624
    - printing from Windows 7 fails with 0x000003e6
      Closes: #617429
  * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream
    #7997

 -- Christian Perrier <bubulle@debian.org>  Tue, 08 Mar 2011 22:38:32 +0100

samba (2:3.5.7~dfsg-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * Security update, fixing the following issue:
    - CVE-2011-0719: denial of service by memory corruption
  * Use architecture wildcard "linux-any" in build dependencies
    Closes: #563372

 -- Christian Perrier <bubulle@debian.org>  Tue, 01 Mar 2011 20:59:34 +0100

samba (2:3.5.6~dfsg-5) unstable; urgency=low

  * Fix FTBFS on Hurd. Closes: #610678
  * Only try parsing dhcpd.conf is it's not empty,
    in dhclient-enter-hooks.d/samba.  Closes: #594088.

 -- Christian Perrier <bubulle@debian.org>  Sat, 05 Feb 2011 13:50:22 +0100

samba (2:3.5.6~dfsg-4) unstable; urgency=low

  * Fix pam_winbind file descriptor leak with a patch
    proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265.
    Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter
    confirmed it is not while the patch applied here fixes the file
    descriptor leak.
    Closes: #574468

  [ Debconf translations ]
  * Brazilian Portuguese (Adriano Rafael Gomes).  Closes: #607402

 -- Christian Perrier <bubulle@debian.org>  Sat, 15 Jan 2011 18:06:22 +0100

samba (2:3.5.6~dfsg-3) unstable; urgency=low

  [ Julien Cristau ]
  * Bump libwbclient0 shlibs to match the newest version in the symbols file.
  * Mark libwbclient0 as breaking other samba packages with versions older
    than 2:3.4.1, as they were linked against libtalloc1 instead of
    libtalloc2, and the combination causes crashes (closes: #593823).

 -- Christian Perrier <bubulle@debian.org>  Mon, 06 Dec 2010 20:14:04 +0100

samba (2:3.5.6~dfsg-2) unstable; urgency=low

  [ Steve Langasek ]
  * Fix debian/rules update-archs target to not add extra spaces on every
    invocation...

  [ Debconf translations ]
  * Catalan (Jordi Mallach).  Closes: #601101
  * Japanese (Kenshi Muto).  Closes: #601364
  * Bulgarian (Damyan Ivanov).  Closes: #601366
  * Hebrew (Omer Zak).  Closes: #601633
  * Kurdish (Erdal Ronahî).  Closes: #601719
  * Dutch (Remco Rijnders).  Closes: #602220
  * Greek (Konstantinos Margaritis).

  [ Christian Perrier ]
  * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy
    files from a SMB share using SMB signing.". Backported from
    to be released 3.5.7 version
    Closes: #605729

 -- Christian Perrier <bubulle@debian.org>  Sat, 04 Dec 2010 07:44:22 +0100

samba (2:3.5.6~dfsg-1) unstable; urgency=low

  * New upstream release. Fixes the following Debian bug:
    - rpcclient readline segfault. Closes: #597203

 -- Christian Perrier <bubulle@debian.org>  Sun, 10 Oct 2010 09:59:37 +0200

samba (2:3.5.5~dfsg-1) unstable; urgency=high

  [ Christian Perrier ]
  * New upstream release. Security release fixing:
    - CVE-2019-3069: Buffer overrun vulnerability in sid_parse.
      Closes: #596891.
  * Fix comment in swat's postinst. It is not turned off by default
    Closes: #596040
  * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst

  [ Steve Langasek ]
  * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for
    pam-auth-update.  Closes: #594325.

  [ Debconf translations ]
  * Arabic (Ossama Khayat).  Closes: #596164

 -- Christian Perrier <bubulle@debian.org>  Tue, 14 Sep 2010 23:03:35 +0200

samba (2:3.5.4~dfsg-2) unstable; urgency=low

  * Release to unstable

  [ Debconf translations ]
  * Danish (Joe Dalton).  Closes: #592789.
  * Galician (Jorge Barreiro).  Closes: #592809

  [ Steve Langasek ]
  * debian/patches/fhs-filespaths.patch, debian/samba.postinst,
    debian/winbind.postinst: move some files from /etc/samba to
    /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb,
    and idmap2.tdb.

 -- Christian Perrier <bubulle@debian.org>  Tue, 07 Sep 2010 17:47:32 +0200

samba (2:3.6.0~pre1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Wed, 04 Aug 2010 01:39:11 +0200

samba (2:3.5.4~dfsg-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Tue, 29 Jun 2010 22:00:53 +0200

samba (2:3.5.3~dfsg-1) experimental; urgency=low

  * New upstream release. Fixes the following bugs:
    - smbclient segfaults when used against old samba "security = share"
      Closes: #574886
  * Drop duplicate build dependency on ctdb

 -- Christian Perrier <bubulle@debian.org>  Wed, 19 May 2010 22:07:49 +0200

samba (2:3.5.2~dfsg-2) experimental; urgency=low

  * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and
    2:3.4.7~dfsg-2

 -- Christian Perrier <bubulle@debian.org>  Tue, 04 May 2010 17:13:47 +0200

samba (2:3.5.2~dfsg-1) experimental; urgency=low

  * New upstream release
  * Bugs fixed upstream:
    - Fix parsing of the gecos field
      Closes: #460494

 -- Christian Perrier <bubulle@debian.org>  Thu, 08 Apr 2010 19:48:07 +0200

samba (2:3.5.1~dfsg-1) experimental; urgency=low

  * New upstream release. Security fix: all smbd processes inherited
    CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
    allowed even when permissions should have denied access.

 -- Christian Perrier <bubulle@debian.org>  Tue, 09 Mar 2010 10:54:01 +0100

samba (2:3.5.0dfsg-1) experimental; urgency=low

  * New upstream release. Not using "3.5.0~dfsg" as version number
    because we used a "higher" version number in previous versions.

 -- Christian Perrier <bubulle@debian.org>  Tue, 02 Mar 2010 22:03:15 +0100

samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low

  * New upstream release candidate

 -- Christian Perrier <bubulle@debian.org>  Sat, 20 Feb 2010 08:36:57 +0100

samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low

  * New upstream pre-release
  * Use new --with-codepagedir option. Consequently drop
    codepages-location.patch
  * Drop "Using Samba" from the samba-doc file list as it was
    removed upstream.

 -- Christian Perrier <bubulle@debian.org>  Sun, 31 Jan 2010 11:53:48 +0100

samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low

  [ Christian Perrier ]
  * New upstream pre-release

 -- Christian Perrier <bubulle@debian.org>  Fri, 15 Jan 2010 23:31:01 +0100

samba (2:3.4.8~dfsg-2) unstable; urgency=low

  [ Steve Langasek ]
  * Drop the per-release smb.conf templates, only needed for upgrade paths
    that are no longer supported.
  * Call /etc/init.d/samba directly from the logrotate script instead of
    using invoke-rc.d, to address the irony that the only package I work on
    that *has* a logrotate script is inconsistent with my position in
    bug #445203.
  * Fix a bashism in the samba postinst that can cause the package
    installation to fail under dash.  LP: #576307.
  * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to
    /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new
    isc-dhcp-client package.  Closes: #585056.

  [ Christian Perrier ]
  * Don't copy system accounts from /etc/passwd to
    /var/lib/samba/passdb.tdb. Closes: #502801
  * Update Standards to 3.9.0 (checked, no change)
  * Backport patch for upstream bug #7139 to fix "owner of file not
    available with kerberos"
    Closes: #586337

 -- Steve Langasek <vorlon@debian.org>  Wed, 14 Jul 2010 11:59:28 -0700

samba (2:3.4.8~dfsg-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * Bugs fixed upstream:
    - Fix writing with vfs_full_audit. Closes: #574011
  * Drop deprecated 'share modes' parameter from default smb.conf
    Closes: #580561
  * Enable PIE during configure. Closes: #509135
  * Avoid winbind's logrotate script to fail when there is no
    /var/run/samba directory. Closes: #569926
  * Add explanations about "passdb backend" default setting change
    Closes: #553904

  [ Debconf translations ]
  * Spanish (Omar Campagne).  Closes: #579011

 -- Christian Perrier <bubulle@debian.org>  Wed, 12 May 2010 05:45:52 +0200

samba (2:3.4.7~dfsg-2) unstable; urgency=low

  [ Christian Perrier ]
  * Drop smbfs package (now provided by cifs-utils as a dummy transition
    package)

  [ Debconf translations ]
  * Portuguese (Miguel Figueiredo).  Closes: #575958

  [ Steve Langasek ]
  * winbind.prerm: don't forget to remove the PAM profile on package
    removal :/
  * Fix winbind.pam-config to not interfere with password changes for
    non-winbind accounts.  Closes: #573323, LP: #546874.
  * debian/samba.if-up, debian/rules: add an if-up.d script for samba to
    try to start nmbd, if it's not running because /etc/init.d/samba ran
    before the network was up at boot time.  Closes: #576415, LP: #462169.
  * debian/samba.if-up: allow "NetworkManager" as a recognized address
    family... it's obviously /not/ an address family, but it's what gets
    sent when using NM, so we'll cope for now.

 -- Christian Perrier <bubulle@debian.org>  Sat, 17 Apr 2010 07:49:49 +0200

samba (2:3.4.7~dfsg-1) unstable; urgency=low

  [ Steve Langasek ]
  * Add a PAM profile for pam_winbind.  Closes: #566890, LP: #282751.
  * Add the correct versioned build dependency on libtalloc-dev as
    we need 2.0.1 to build samba. Closes: #572603
  * Add avr32 to arches with a build dependency on ctdb. Closes: #572126

  [ Christian Perrier ]
  * New upstream release. Security fix: all smbd processes inherited
    CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
    allowed even when permissions should have denied access.

 -- Christian Perrier <bubulle@debian.org>  Tue, 09 Mar 2010 10:52:24 +0100

samba (2:3.4.6~dfsg-1) unstable; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Fri, 26 Feb 2010 22:39:50 +0100

samba (2:3.4.5~dfsg-2) unstable; urgency=low

  [ Steve langasek ]
  * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar"
    is explicitly allowed by Policy now, and this change introduced a
    syntax error.  Closes: #566946.

  [ Christian Perrier ]
  * No longer maker (u)mount.cifs setuid root. Add a notice
    about this in the package's NEWS.Debian file
    Closes: #567554
  * Use dh_lintian instead of manual install of lintian overrides
  * Updated Standards to 3.8.4 (checked, no change)

 -- Christian Perrier <bubulle@debian.org>  Sat, 13 Feb 2010 14:36:33 +0100

samba (2:3.4.5~dfsg-1) unstable; urgency=low

  * New upstream release. Bugs fixed by this release:
    - Memory leak in smbd. Closes: #538819, #558453
  * Declare a versioned dependency of winbind and samba on libwbclient0
    Closes: #550481
  * A few lintian fixes:
  * Drop /var/run/samba from samba-common. The directory is created
    by init scripts when needed.
  * No longer prepend a path to the mksmbpasswd call in samba.postinst.
    This prevents the local administrator to use a replacement version
    for some local reason.

 -- Christian Perrier <bubulle@debian.org>  Sat, 23 Jan 2010 12:16:42 +0100

samba (2:3.4.4~dfsg-1) unstable; urgency=low

  * New upstream version.
  * Drop all RFC files from upstream source, therefore using a "~dfsg"
    suffix to upstream version number.
  * Bugs fixed upstream:
    - fixed list of workgroup servers in libsmbclient.
      Closes: #555462, #561148
    - fixed documentation of the credentials file format in
      mount.cifs(8). Closes: #552250

 -- Christian Perrier <bubulle@debian.org>  Thu, 14 Jan 2010 20:16:34 +0100

samba (2:3.4.3-2) unstable; urgency=low

  [ Christian Perrier ]
  * Switch to source format 3.0 (quilt)
  * Better adapt "add machine script" example to adduser
    Thanks to Heiko Schlittermann for the suggestion
    Closes: #555466

  [ Steve Langasek ]
  * The "I hate non-declarative alternatives" upload:
    - debian/samba{,-common}.prerm: don't call update-alternatives --remove
      on upgrade, /do/ call it on other invocations of the prerm script.  If
      these tools ever go away, the removal needs to be handled on upgrade by
      the maintainer scripts of the new package version.
    - debian/samba{,-common-bin}.postinst: call update-alternatives
      unconditionally, don't second-guess the maintainer script arguments.
    - debian/samba.postinst: call update-alternatives after the debconf
      handling, not before; debconf triggers a re-exec of the script so
      anything done before invoking debconf is wasted because it will be
      re-done, and if there's already a debconf frontend running when this
      is called, the not-redirected update-alternatives output will confuse
      it.  Closes: #558116.
    - debian/samba-common.prerm: move to samba-common-bin, this is the package
      that owns these binaries.

 -- Christian Perrier <bubulle@debian.org>  Thu, 17 Dec 2009 16:53:13 +0100

samba (2:3.4.3-1) unstable; urgency=low

  * New upstream release. This fixes the following bugs:
    - Do not attempt to update /etc/mtab if it is
      a symbolic link. Closes: #408394
  * Bump Standards-Version to 3.8.3 (checked)

 -- Christian Perrier <bubulle@debian.org>  Sat, 31 Oct 2009 14:32:07 +0100

samba (2:3.4.2-1) unstable; urgency=high

  * New upstream release. Security update.
  * CVE-2009-2813:
    Connecting to the home share of a user will use the root of the
    filesystem as the home directory if this user is misconfigured to
    have an empty home directory in /etc/passwd.
  * CVE-2009-2948:
    If mount.cifs is installed as a setuid program, a user can pass it
    a credential or password path to which he or she does not have
    access and then use the --verbose option to view the first line of
    that file.
  * CVE-2009-2906:
    Specially crafted SMB requests on authenticated SMB connections
    can send smbd into a 100% CPU loop, causing a DoS on the Samba
    server.

 -- Christian Perrier <bubulle@debian.org>  Sat, 03 Oct 2009 08:30:33 +0200

samba (2:3.4.1-2) unstable; urgency=low

  * ./configure --disable-avahi, to avoid accidentally picking up an avahi
    dependency when libavahi-common-dev is installed.

 -- Steve Langasek <vorlon@debian.org>  Sat, 26 Sep 2009 00:01:12 -0700

samba (2:3.4.1-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. This fixes the following bugs:
    - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec
      for the clever analysis and collaboration with upstream.
      Closes: #541171
    - Fix password change propagation with ldapsam. Closes: #505215
    - Source package contains non-free IETF RFC/I-D. Closes: #538034
  * Turn the build dependency on libreadline5-dev to libreadline-dev
    to make further binNMUs easier when libreadline soname changes
    Thanks to Matthias Klose for the suggestion

  [ Steve Langasek ]
  * Don't build talloctort when using --enable-external-talloc; and don't
    try to include talloctort in the samba-tools package, since we're
    building with --enable-external-talloc. :)  Closes: #546828.

 -- Steve Langasek <vorlon@debian.org>  Mon, 21 Sep 2009 22:20:22 -0700

samba (2:3.4.0-5) unstable; urgency=low

  * Move /etc/pam.d/samba back to samba-common, because it's shared with
    samba4.  Closes: #545764.

 -- Steve Langasek <vorlon@debian.org>  Tue, 08 Sep 2009 18:43:17 -0700

samba (2:3.4.0-4) unstable; urgency=low

  [ Steve Langasek ]
  * debian/samba.pamd: include common-session-noninteractive instead of
    common-session, to avoid pulling in modules specific to interactive
    logins such as pam_ck_connector.
  * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the
    above.
  * rename debian/samba.pamd to debian/samba.pam and call dh_installpam
    from debian/rules install, bringing us a smidge closer to a stock
    debhelper build
  * don't call pyversions from debian/rules, this throws a useless error
    message during build.
  * fix up the list of files that need to be removed by hand in the clean
    target; the majority of these are now correctly handled upstream.
  * debian/rules: fix the update-arch target for the case of unversioned
    build-deps.
  * Pull avr32 into the list of supported Linux archs.  Closes: #543543.
  * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the
    patch. Closes: #541367.

  [ Christian Perrier ]
  * Use DEP-3 for patches meta-information

  [ Steve Langasek ]
  * Change swat update-inetd call to use --remove only on purge,
    and --disable on removal.
  * Add missing build-dependency on pkg-config, needed to fix libtalloc
    detection
  * debian/patches/external-talloc-support.patch: fix the Makefile so it
    works when using external talloc instead of giving a missing-depend
    error.
  * debian/patches/autoconf.patch: resurrect this patch, needed for the
    above.
  * debian/rules: build with --without-libtalloc
    --enable-external-libtalloc, also needed to fix the build failure.

 -- Steve Langasek <vorlon@debian.org>  Mon, 07 Sep 2009 22:58:29 -0700

samba (2:3.4.0-3) unstable; urgency=low

  [ Steve Langasek ]
  * debian/control: samba-common-bin has no reason to depend on
    libpam-modules.

  [ Christian Perrier ]
  * Fix "invalid argument" when trying to copy a file from smb share
    Use an upstream patch that will be included in 3.4.1
    Closes: #536757

 -- Christian Perrier <bubulle@debian.org>  Fri, 21 Aug 2009 11:08:43 +0200

samba (2:3.4.0-2) unstable; urgency=low

  [ Debconf translations ]
  * German. Closes: #536433

  [ Steve Langasek ]
  * Enable the ldap idmap module; thanks to Aaron J. Zirbes.  Closes: #536786.

  [ Jelmer Vernooij ]
  * Properly rename smbstatus.1 for alternatives. Closes: #534772

 -- Christian Perrier <bubulle@debian.org>  Sun, 02 Aug 2009 12:20:51 +0200

samba (2:3.4.0-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release: first upload to unstable for 3.4
  * Correct dependencies for samba-common-bin. Closes: #534595

  [ Debconf translations ]
  * Czech. Closes: #534793
  * Russian. Closes: #534796

 -- Christian Perrier <bubulle@debian.org>  Tue, 07 Jul 2009 20:42:19 +0200

samba (2:3.4.0~rc1-1) experimental; urgency=low

  * New upstream version. That fixes the following bugs:
    - Remove pidfile on clean shutdown. Closes: #299433, #454112
  * Drop swat-de.patch that was applied upstream
  * Bump debhelper compatibility level to 6 and declare a versioned
    dependency on debhelper >= 6.0.0

 -- Christian Perrier <bubulle@debian.org>  Sat, 20 Jun 2009 18:43:20 +0200

samba (2:3.4.0~pre2-1) experimental; urgency=low

  [ Jelmer Vernooij ]
  * Split binaries out of samba-common into samba-common-bin.
    Closes: #524661

  [ Christian Perrier ]
  * New upstream version. That fixes the following bugs:
    - Do not limit the number of network interfaces. Closes: #428618
    - Fix Connect4 in samr.idl. Closes: #526229
  * "Using samba" is back.
  * Drop non-linux-ports.patch that was integrated upstream
  * Drop smbpasswd-syslog.patch that was integrated upstream
  * Drop smbclient-link.patch that was integrated upstream

  [ Debconf translations ]
  * Italian. Closes: #529350

 -- Christian Perrier <bubulle@debian.org>  Sat, 06 Jun 2009 11:45:35 +0200

samba (2:3.4.0~pre1-1) experimental; urgency=low

  * New upstream pre-release
  * "Using samba" is dropped from upstream source. Therefore, drop
    debian/samba-doc.doc-base.samba-using

 -- Christian Perrier <bubulle@debian.org>  Wed, 20 May 2009 18:50:35 +0200

samba (2:3.3.6-1) unstable; urgency=high

  * New upstream release. Security release.
  * CVE 2009-1886: Fix Formatstring vulnerability in smbclient
  * CVE 2009-1888: Fix uninitialized read of a data value

 -- Christian Perrier <bubulle@debian.org>  Fri, 26 Jun 2009 18:21:51 +0200

samba (2:3.3.5-1) unstable; urgency=low

  [ Steve Langasek ]
  * debian/patches/undefined-symbols.patch: fix up patch so that it's
    suitable for submission upstream.
  * debian/patches/proper-static-lib-linking.patch: apply the rules to
    vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and
    rpc_open_tcp.

  [ Debconf translations ]
  * Italian. Closes: #529350

  [ Christian Perrier ]
  * New upstream version
  * Lintian fixes:
    -  Declare versioned dependency on debhelper to fit what we have in
       debian/compat
    - samba.postinst: do not call mksmbpasswd with an absolute path
  * Upgrade Standard to 3.8.2 (checked, no change)
  * Upgrade debhelper compatibility level to 6

 -- Christian Perrier <bubulle@debian.org>  Sat, 20 Jun 2009 08:01:16 +0200

samba (2:3.3.4-2) unstable; urgency=low

  [ Christian Perrier ]
  * Do no compile with clustering support on non-Linux platforms
    Closes: #528382

  [ Debconf translations ]
  * Basque. Closes: #528757

 -- Christian Perrier <bubulle@debian.org>  Sat, 16 May 2009 17:31:09 +0200

samba (2:3.3.4-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release:
    - Fixed daily winbind crash when retrieving users from an ADS server
      Closes: #522907.
  * Add idmap_tdb2 module to winbind package
  * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents
    VFS modules to properly load. Closes: #524048.

  [ Debconf translations ]
  * Bengali added.

  [ Steve Langasek ]
  * Recommend logrotate instead of depending on it.  Closes: #504219.

 -- Christian Perrier <bubulle@debian.org>  Sat, 02 May 2009 10:06:16 +0200

samba (2:3.3.3-1) unstable; urgency=low

  * New upstream release:
    - Fix map readonly. Closes: #521225
    - Add missing whitespace in mount.cifs error message. Closes: #517021
    - Includes our patch to fix detection of GNU ld version. As a
      consequence, we dropped fix_wrong_gnu_ld_version_check.patch
    - Fix segfault in lookup_sid. Closes: #521408

 -- Christian Perrier <bubulle@debian.org>  Sat, 11 Apr 2009 10:12:23 +0200

samba (2:3.3.2-2) unstable; urgency=low

  [ Steve Langasek ]
  * libcap2-dev is only available on Linux, so make this build-dependency
    conditional.  Closes: #519911.

  [ Christian Perrier ]
  * Switch samba-dbg to "Section: debug"
  * Update debian/copyright for year 2009. Thanks to debian-devel
    for the reminder.
  * Dropping Adam Conrad from Uploaders
  * Dropping Eloy Paris from Uploaders with special thanks for his tremendous
    work maintaining the package between 1997 and 2004.

  [ Mathieu Parent ]
  * ensure clustering is enabled with --with-cluster-support=yes
  * build-depends on ctdb >= 1.0.73. Closes: #520202.
  * samba suggests ctdb

  [ Debconf translations ]
  * Esperanto updated.  Closes: #519237.

 -- Christian Perrier <bubulle@debian.org>  Sun, 29 Mar 2009 09:23:35 +0200

samba (2:3.3.2-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. Closes: #519626
    - mounts with -o guest will now automatically try to connect anonymously.
      Closes: #423971.
    - fix for brokenness when using 'force group'.  Closes: #517760.
    - fix for saving files on Samba shares using MS Office 2007.
      LP: #337037.
  * Re-fix slave links for manual pages in samba-common. Closes: #517204.

  [ Steve Langasek ]
  * Add missing debhelper token to libpam-smbpass.prerm.

 -- Christian Perrier <bubulle@debian.org>  Sun, 15 Mar 2009 12:16:48 +0100

samba (2:3.3.1-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. Closes: #516981
    Upstream fixes in that release:
    - Fixed various spelling errors/typos in manpages
      Closes: #516047
    - Fix renaming/deleting of files using Windows clients.
      Closes: #516160
    - Fix syntax error in mount.cifs(8). Closes: #454799
  * Use a slave alternative for smbstatus.1 even though that manpage
    is not provided by samba4

  [ Jelmer Vernooij ]
  * Fix slave links for manual pages in samba-common. Closes: #517204.

  [ Steve Langasek ]
  * Add Vcs-{Browser,Svn} fields to debian/control.
  * When populating the sambashare group, it's not an error if the user
    simply doesn't exist; test for this case and let the install continue
    instead of aborting.  LP: #206036.
  * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst,
    debian/libpam-smbpass.files, debian/rules: provide a config block
    for the new PAM framework, allowing this PAM module to
    auto-configure itself
  * debian/control: make libpam-smbpass depend on
    libpam-runtime (>= 1.0.1-2ubuntu1) for the above
  * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix
    wrong detection of the GNU ld version, so that the symbol export scripts
    will be properly applied when building.
  * refresh debian/libsmbclient.symbols for 3.3.1.

 -- Steve Langasek <vorlon@debian.org>  Mon, 02 Mar 2009 00:30:35 -0800

samba (2:3.3.0-4) unstable; urgency=low

  [ Steve Langasek ]
  * Build-Depend on libcap2-dev.  Closes: #515851.
  * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype
    for cache_path, which causes nearly undiagnoseable crashes when building
    with -fPIE, because of a wrong return type!  LP: #330626.

  [ Debconf translations ]
  * Belarusian added.  Closes: #516052.
  * Traditional Chinese updated. Closes: #516594
  * Swedish updated.  Closes: #516681.

  [ Mathieu Parent ]
  * enable clustering by default (CTDB). Closes: #514050

 -- Steve Langasek <vorlon@debian.org>  Tue, 24 Feb 2009 16:58:58 -0800

samba (2:3.3.0-3) unstable; urgency=low

  [ Steve Langasek ]
  * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable.
  * Make samba conflict with samba4, not with itself.

  [ Debconf translations ]
  * Vietnamese updated.  Closes: #515235.
  * Slovak updated.  Closes: #515240.

 -- Steve Langasek <vorlon@debian.org>  Mon, 16 Feb 2009 07:15:47 -0800

samba (2:3.3.0-2) unstable; urgency=low

  * Upload to unstable

 -- Christian Perrier <bubulle@debian.org>  Sat, 14 Feb 2009 13:38:14 +0100

samba (2:3.2.5-4) unstable; urgency=low

  * Fix segfault whan accessign some NAS devices running old versions of Samba
    Closes: #500129
  * Fix process crush when using gethostbyname_r in several threads
    Closes: #509101, #510450

 -- Christian Perrier <bubulle@debian.org>  Thu, 08 Jan 2009 05:59:17 +0100

samba (2:3.2.5-3) unstable; urgency=high

  * Security update
  * Fix Potential access to "/" in setups with registry shares enabled
    This fixes CVE-2009-0022, backported from 3.2.7
  * Fix links in HTML documentation index file.
    Closes: #508388
  * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new
    file in the diff. Thanks to the release managers for spotting it

 -- Christian Perrier <bubulle@debian.org>  Sun, 21 Dec 2008 08:09:31 +0100

samba (2:3.2.5-2) unstable; urgency=low

  * Fix typo in bug number in a comment for the default smb.conf file
    Closes: #507620
  * Document the need to set appropriate permissions on the printer
    drivers directory, in the default smb.conf file. Also change
    the example group from ntadmin to lpadmin
    Closes: #459243
  * Add missing rfc2307.so and sfu*.so links that prevent using the
    'winbind nss info' feature properly
    Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for
    the patch. Closes: #506109

 -- Christian Perrier <bubulle@debian.org>  Sat, 13 Dec 2008 13:56:07 +0100

samba (2:3.2.5-1) unstable; urgency=high

  * New upstream version. Security-only release.
    This addresses CVE-2008-4314: potentially leaking
    arbitrary memory contents to malicious clients.
  * Better document cases where using a "master" file for smb.conf
    is a bad idea. Closes: #483187
  * Insert example "add machine script" and "add group script" scripts
    in the default smb.conf. Closes: #349049
  * Move homepage URL to Homepage filed in debian/control

 -- Christian Perrier <bubulle@debian.org>  Thu, 27 Nov 2008 11:36:35 +0100

samba (2:3.3.0-1) experimental; urgency=low

  * New upstream release. Fixes the following bugs:
    - smb file deletion gvfs. Closes: #510564
    - smbclient du command does not recuse properly. Closes: #509258
    - mention possible workgroup field in credential files in mount.cifs(8)
      Closes: #400734
    - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init
      Closes: #489656
    - describe '-g' option in smbclient man page. Closes: #510812
    - fix swat status table layout. Closes: #511275

  [ Jelmer Vernooij ]
  * Use alternatives for the smbstatus, nmblookup, net and
    testparm binaries and various data files in samba-common
    to allow installation of Samba 3 together with Samba 4.
  * Add myself to uploaders.

  [ Christian Perrier ]
  * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base,
    smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to
    libsmbclient's symbols file with 3.3.0 as version number
  * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as
    version number

 -- Christian Perrier <bubulle@debian.org>  Fri, 30 Jan 2009 21:41:49 +0100

samba (2:3.3.0~rc2-4) experimental; urgency=low

  [ Steve Langasek ]
  * Revert one of the template depersonalization changes from the -2 upload,
    because it loses important context

  [ Christian Perrier ]
  * Use double quotation marks in debconf templates
  * Add 'status" option to init scripts. Thansk to Dustin Kirkland for
    providing the patch. Closes: #488275
  * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997
  * [Lintian] Add ${misc:Depends} to dependencies of binary packages
    that didn't have it already as we're using debhelper in the source
    package
  * [Lintian] Don't ignore errors in swat.postrm
  * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config
    and samba-common.config
  * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5)
    Closes: #512843

  [ Debconf translations ]
  * Asturian added. Closes: #511730

 -- Christian Perrier <bubulle@debian.org>  Sat, 24 Jan 2009 16:04:57 +0100

samba (2:3.3.0~rc2-3) experimental; urgency=low

  * Fix around the libsmbclient/libsmbclient-dev descriptions, which got
    swapped in the last upload.
  * Drop a boilerplate sentence from the samba-common, smbclient, swat,
    samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions
    that's not relevant for these packages.
  * Hyphenate "command-line" in the smbclient short description.
  * Fix up the smbclient description, which got crossed with the smbfs one.
  * Fix the smbfs description, which was not actually fixed in the previous
    upload.  Really closes: #496206.
  * Further minor adjustments to the description of the swat package.
  * Fix various inaccuracies in the winbind package description.
  * Clarify in the description that samba-tools are extra, only useful for
    testing.

 -- Steve Langasek <vorlon@debian.org>  Tue, 30 Dec 2008 18:42:05 -0800

samba (2:3.3.0~rc2-2) experimental; urgency=low

  [ Steve Langasek ]
  * Handle clearing out netbios settings whenever the DHCP server has gone
    away.  Closes: #299618.

  [ Christian Perrier ]
  * Point the correct document about password encryption in debconf templates
    Corrected in translations as well. Closes: #502838
  * Reword debconf templates to avoid mentioning the local host as a "server".
    Closes: #171177
  * Use this opportunity for other minor rewording:
    - replace "SMB" by "SMB/CIFS"
    - more strongly discouraging the use of plain text passwords
    - unpersonnalization
  * Reword the libpam-smbpass package description
    Thanks to Justin B. Rye for the very useful suggestions
    Closes: #496196
  * Improve the package descriptions by rewording the description overhaul
    Also improve the specific information for samba and samba-dbg
    Thanks again to Justin B. Rye for the invaluable help
    Closes: #496200
  * Improve libsmbclient package description. Closes: #496197
  * Improve libwbclient0 package description. Closes: #496199
  * Improve samba-doc package description. Closes: #496202
  * Improve samba-tools package description. Closes: #496203
  * Improve samba-common package description. Closes: #496204
  * Improve smbclient package description. Closes: #496205
  * Improve smbfs package description. Closes: #496206
  * Improve swat package description. Closes: #496207
  * Improve winbind package description. Closes: #496208
  * Improve samba-doc-pdf package description. Closes: #496211
  * Update French debconf translation

 -- Christian Perrier <bubulle@debian.org>  Mon, 29 Dec 2008 11:50:04 +0100

samba (2:3.3.0~rc2-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Wed, 17 Dec 2008 08:22:18 +0100

samba (2:3.3.0~rc1-2) experimental; urgency=low

  * Provide idmap_adex and idmap_hash in winbind.
    Thanks to Jelmer Jaarsma for reporting and providing a patch

 -- Christian Perrier <bubulle@debian.org>  Thu, 04 Dec 2008 19:59:23 +0100

samba (2:3.3.0~rc1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Fri, 28 Nov 2008 10:51:32 +0100

samba (2:3.3.0~pre2-1) experimental; urgency=low

  * New upstream release.

 -- Christian Perrier <bubulle@debian.org>  Fri, 07 Nov 2008 20:52:36 +0100

samba (2:3.2.4-1) unstable; urgency=low

  [ Steve Langasek ]
  * New upstream release.
    - debian/rules: we don't need to move cifs.upcall around, it's now
      installed to the right place upstream.
    - Fixed in this release:
      - typo in cifs.upcall.8. Closes: #501499

  [ Christian Perrier ]
  * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for
    the patch. Closes: #499359

 -- Christian Perrier <bubulle@debian.org>  Sat, 18 Oct 2008 08:20:31 +0200

samba (2:3.2.3-3) unstable; urgency=low

  [ Steve Langasek ]
  * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing
    this out.  Closes: #497857.
  * Georgian debconf translation added. Closes: #498426
  * Polish debconf translation added. Thanks to Łukasz Paździora.

  [ Jelmer Vernooij ]
  * Add ldb-tools to Suggests: of samba. Closes: #488384

 -- Christian Perrier <bubulle@debian.org>  Fri, 03 Oct 2008 20:37:19 +0200

samba (2:3.2.3-2) unstable; urgency=low

  [ Christian Perrier ]
  * Fix FTBFS on GNU/kFreeBSD. Closes: #496880

 -- Steve Langasek <vorlon@debian.org>  Sat, 30 Aug 2008 00:46:07 -0700

samba (2:3.2.3-1) unstable; urgency=high

  * High-urgency upload for security fix
  * New upstream release
    - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default"
      Closes: #491881
    - Fix the default permissions on ldb databases.  Addresses
      CVE-2008-3789; closes: #496073.
    - debian/rules, debian/smbfs.files: build with cifs.upcall,
      newly introduced to replace cifs.spnego
    - debian/rules: no more need to rename libsmbclient.so to
      libsmbclient.so.0, or libwbclient.so to libwbclient.so.0

  [ Noèl Köthe ]
  * fixing lintian warning "build-depends-on-1-revision"

 -- Steve Langasek <vorlon@debian.org>  Wed, 27 Aug 2008 10:19:59 -0700

samba (2:3.2.1-1) unstable; urgency=low

  [ Steve Langasek ]
  * Build-depend on keyutils only on the linux archs.  Closes: #493401.
  * New patch debian/patches/shrink-dead-code.patch: throw all .o files into
    a .a archive as a first pass before linking the final executables, so
    that the executables don't end up with quite so much unused code bloating
    the system.  Not applied to net or ntlm_auth, which have particularly
    hairy linking needs.  Partially addresses: bug #474543; no code was
    harmed in the making of this patch.
  * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports.

  [ Christian Perrier ]
  * New upstream release
    - Fix trusted domain handling in Winbindd. Closes: #493752
    - Fix for print jobs that continued to show as active after printing
      had completed.  Closes: #494899.

 -- Steve Langasek <vorlon@debian.org>  Thu, 14 Aug 2008 16:13:24 -0700

samba (2:3.2.0-4) unstable; urgency=low

  * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch
    that went missing somehow, causing samba to look for secrets.tdb in
    /etc/samba instead of /var/lib/samba where it's been for years.  No
    migration handling added, because this was only present in unstable for
    about a day.  Thanks to Rick Nelson for pointing this out.

 -- Steve Langasek <vorlon@debian.org>  Mon, 21 Jul 2008 17:39:48 -0700

samba (2:3.2.0-3) unstable; urgency=low

  * Upload to unstable.
  * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro
    and Makefile.in to properly avoid linking .a libraries into other .a
    libraries, since this bloats the libraries without providing any useful
    functionality.
  * Version the build-dependency on libtalloc-dev, to ensure we're building
    against a package with the right symbols.
  * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get
    more fine-grained versioned library dependencies
  * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols
    have been added.
  * Re-add docs/registry to samba-doc, restored upstream
  * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it
    belongs according to the FHS.  Closes: #454770.

 -- Steve Langasek <vorlon@debian.org>  Sun, 20 Jul 2008 15:38:10 -0700

samba (2:3.2.0-2) experimental; urgency=low

  * Fix up the copyright file to correctly document that we're now under
    GPLv3, not GPLv2.

 -- Steve Langasek <vorlon@debian.org>  Tue, 08 Jul 2008 12:21:47 -0700

samba (2:3.2.0-1) experimental; urgency=low

  [ Christian Perrier ]
  * New samba-tools package to provide all "torture" tools:
    smbtorture msgtest masktest locktest locktest2 nsstest vfstest
    pdbtest talloctort replacetort tdbtorture smbconftort
  * Upgrade Standard to 3.8.0 (checked)
  * Merged from unstable:
    * Drop "invalid users = root" from the default smb.conf file
      as it differs from upstream's behaviour and upstream is fairly
      noisy about this choice of ours. Closes: #462046
    * Drop commented "guest account = nobody". This is already upstream's
      default
    * Remove versioned Build-Depends when satisfied in etch (actually all
      versioning in Build-Depends)
    * Remove Conflicts with non-existing packages
    * Drop dpkg-dev and binutils from Build-Depends, since the versioned
      build-dep is no longer needed and these are both Build-Essential
    * Mini-policy for settings in smb.conf:
      - don't explicitly set settings to their default value
      - commented settings with the default value are commented with "#"
      - commented settings with a non-default value are commented with ";"
    * Apply this policy to "socket options". Closes: #476104
    * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
      libsmbclient.so.0 as upstream doesn't assign versions
    * Add idmap_*(8) man pages (idea taken from SerNet packages)
    * Create the entire set of directories needed by clients for
      Point-and-Click printing (including old clients!) in
      /var/lib/samba/printers (idea taken from SerNet packages)
    * Update copyright and README.debian information for current and past
      maintainers. Remove redundant mention of Tridge (the copyright is enough)
    * Add doc-base files for samba-doc-pdf. Closes: #451685
    * add a soft dependency on slapd in init script to allow
      proper operation when dependency-based boot sequence is enabled.
      Thanks to Petter Reinholdtsen for reporting and providing a patch
      Closes: #478800
  * Rename libcupsys2-dev to libcups2-dev in build dependencies
  * Localize SWAT in German. Closes: #487681

  [ Debconf translations ]
  * Merged from unstable:
    * Kurdish. Closes: #480151
    * Romanian updated. Closes: #488709.

  [ Steve Langasek ]
  * New upstream release
  * Merged from unstable:
    * debian/patches/no-unnecessary-cups.patch: don't try to connect to a
      cups server when we know that no printers are configured.
      Closes: #479512.

  [ Jelmer Vernooij ]
  * Merged from unstable:
  * Fix bashism in smbtar. (Closes: #486056)

  [ Peter Eisentraut ]
  * Merged from unstable:
    * Removed myself from Uploaders

 -- Christian Perrier <bubulle@debian.org>  Sun, 06 Jul 2008 09:59:07 +0200

samba (2:3.2.0~rc2-1) experimental; urgency=low

  [ Christian Perrier ]
  * New upstream release

  [ Steve Langasek ]
  * Enable building of cifs.spnego for the smbfs package, adding a
    build-dependency on keyutils-dev, to allow kerberos-based authentication
    of cifs mounts.  Closes: #480663, LP: #236830.

 -- Christian Perrier <bubulle@debian.org>  Thu, 12 Jun 2008 17:17:38 +0200

samba (2:3.2.0~rc1-2) experimental; urgency=low

  * Reupload to experimental. Sigh.

 -- Christian Perrier <bubulle@debian.org>  Sat, 31 May 2008 11:08:14 +0200

samba (1:3.2.0~rc1-1) unstable; urgency=low

  * New upstream version
  * debian/samba-doc.doc-base.samba-using: index file is no named toc.html

 -- Christian Perrier <bubulle@debian.org>  Fri, 30 May 2008 20:22:57 +0200

samba (1:3.2.0~pre3-1) experimental; urgency=low

  * New upstream version
  * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream
  * docs/registry removed from samba-doc as missing from upstream tarball
    (upstream bug #5421)
  * debian/samba-doc.doc-base.samba-using: The index (and only) file
    is now book.html

 -- Christian Perrier <bubulle@debian.org>  Sat, 26 Apr 2008 08:20:21 +0200

samba (1:3.2.0~pre2-2) experimental; urgency=low

  [ Christian Perrier ]
  * Upload to experimental with an epoch as the earlier version
    accidentally went to unstable.

  [ Peter Eisentraut ]
  * Removed myself from Uploaders

 -- Christian Perrier <bubulle@debian.org>  Sun, 06 Apr 2008 20:38:35 +0200

samba (3.2.0~pre2-1) unstable; urgency=low

  * New upstream (pre-)release. It closes the following bugs:
    - typos in net.8. Closes: #460487, #460491
    - mention insmb.conf(5) that logging still occurs when
      "syslog only" is enabled and "syslog=0". Closes: #311300
    - bad link in HTML docs. Closes: #358479
    - enhance a useless and confusing debug message in pdb_ldap
      Closes: #448546
    - mention the correct default debug level in smbclient(1)
      Closes: #292371
    - no longer mention that "ip" parameter can use the host name
      in mount.cifs(8). Closes: #296057
    - wrong spelling of "its own" in source comments fixed
      Closes: #448686
    - fix "ldapsam_getgroup: Did not find group" debug message
      Closes: #448546
    - fix smbclient(1): useless use of cat. Closes: #429349

  [ Steve Langasek ]
  * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from
    3.2.0pre2, which ended up with html entity encodings embedded in them
    by mistake.  This patch is expected to go away again for 3.2.0pre3.
  * fix up the FHS patches for the new upstream release:
    - debian/patches/fhs-newpaths.patch has been merged upstream, drop it.
    - debian/patches/fhs-filespaths.patch has been mostly applied; only one
      path usage remains inconsistent, and a new .tdb has been added with
      the wrong path so fix this up here too.
    - debian/patches/fhs-filespaths-debatable.patch: updated for some new
      uses of lock_path() which we map to cache_path().
    - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4
      instead of source/configure.in.
  * debian/patches/smbstatus-locking.patch: merged upstream
  * debian/patches/smbpasswd-syslog.patch: updated to account for new
    calls to logging functions
  * Handle the new libraries available in samba 3.2: ship libwbclient as a
    shared library, link against the system libtalloc (adding a
    build-dependency on libtalloc-dev - which is actually sort of kludgy
    because this only works as long as the system libtalloc has the same
    soname as the one within the samba tree, this should be fixed to
    properly build against the system libtalloc), and suppress generation
    of the tdb and netapi libraries which aren't useful to us right now.

 -- Christian Perrier <bubulle@debian.org>  Wed, 05 Mar 2008 22:45:28 +0100

samba (2:3.0.31-1) unstable; urgency=medium

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Sat, 12 Jul 2008 16:57:09 +0200

samba (2:3.0.30-4) unstable; urgency=low

  [ Christian Perrier ]
  * Rename libcupsys2-dev to libcups2-dev in build dependencies
  * Localize SWAT in German. Closes: #487681

  [ Jelmer Vernooij ]
  * Fix bashism in smbtar. (Closes: #486056)

  [ Jamie Strandboge ]
  * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly
    calculate buffer sizes. This bug was introduced in the fix for
    CVE-2008-1105. Closes: #488688

  [ Debconf translations ]
  * Romanian updated. Closes: #488709.

 -- Christian Perrier <bubulle@debian.org>  Sun, 06 Jul 2008 11:43:53 +0200

samba (2:3.0.30-3) unstable; urgency=low

  [ Christian Perrier ]
  * add a soft dependency on slapd in init script to allow
    proper operation when dependency-based boot sequence is enabled.
    Thanks to Petter Reinholdtsen for reporting and providing a patch
    Closes: #478800

  [ Steve Langasek ]
  * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups
    server when we know that no printers are configured.  Closes: #479512.

 -- Christian Perrier <bubulle@debian.org>  Tue, 10 Jun 2008 21:03:51 +0200

samba (2:3.0.30-2) unstable; urgency=high

  * Brown paper bag releae with epoch increased after yet another
    accidental upload of 3.2.0 to unstable. Sigh and apologies to
    autobuilders.

 -- Christian Perrier <bubulle@debian.org>  Sat, 31 May 2008 12:08:50 +0200

samba (1:3.0.30-1) unstable; urgency=high

  * New upstream release: fix a heap overflow when parsing SMB responses in
    client code. (CVE-2008-1105). Closes: #483410

 -- Christian Perrier <bubulle@debian.org>  Wed, 28 May 2008 22:38:44 +0200

samba (1:3.0.29-1) unstable; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Thu, 22 May 2008 07:31:55 +0200

samba (1:3.0.28a-3) unstable; urgency=low

  * The "bug hunting at SambaXP" release
  * Drop "invalid users = root" from the default smb.conf file
    as it differs from upstream's behaviour and upstream is fairly
    noisy about this choice of ours. Closes: #462046
  * Drop commented "guest account = nobody". This is already upstream's
    default
  * Remove versioned Build-Depends when satisfied in etch (actually all
    versioning in Build-Depends)
  * Remove Conflicts with non-existing packages
  * Drop dpkg-dev and binutils from Build-Depends, since the versioned
    build-dep is no longer needed and these are both Build-Essential
  * Mini-policy for settings in smb.conf:
    - don't explicitly set settings to their default value
    - commented settings with the default value are commented with "#"
    - commented settings with a non-default value are commented with ";"
  * Apply this policy to "socket options". Closes: #476104
  * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
    libsmbclient.so.0 as upstream doesn't assign versions
  * Add idmap_*(8) man pages (idea taken from SerNet packages)
  * Create the entire set of directories needed by clients for
    Point-and-Click printing (including old clients!) in
    /var/lib/samba/printers (idea taken from SerNet packages)
  * Update copyright and README.debian information for current and past
    maintainers. Remove redundant mention of Tridge (the copyright is enough)
  * Add doc-base files for samba-doc-pdf. Closes: #451685
  * Kurdish debconf translation. Closes: #480151

 -- Christian Perrier <bubulle@debian.org>  Wed, 16 Apr 2008 23:14:46 +0200

samba (1:3.0.28a-2) unstable; urgency=low

  [ Peter Eisentraut ]
  * Removed myself from Uploaders

  [ Steve Langasek ]
  * debian/patches/manpage-encoding.patch: fix up the manpage synopses to
    not use embedded iso8859-1 non-break spaces, there is a roff escape
    sequence that we should use instead.  Closes: #470844.

  [ Christian Perrier ]
  * Reupload with an epoch to supersede an accidental upload of 3.2.0
    in unstable

 -- Christian Perrier <bubulle@debian.org>  Sat, 05 Apr 2008 11:59:23 +0200

samba (3.0.28a-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. This fixes the following Debian bugs:
    - Prevent nmbd from shutting down when no network
      interfaces can be located. Closes: #433449
  * Debian patches dropped as applied upstream:
    - make-distclean.patch
    - linux-cifs-user-perms.patch
    - cifs-umount-same-user.patch
    - get_global_sam_sid-non-root.patch
    - chgpasswd.patch
    - cups.patch
  * Fix doc-base section from Apps/Net to Network
  * Fix copyright in debian/copyright
  * Updated Standards-Version to 3.7.3 (no changes needed)
  * [Lintian] No longer use -1 revision for the libacl-dev build
    dependency

  [ Steve Langasek ]
  * Merge smb.conf changes from Ubuntu:
    - correct an inconsistency inthe winbind enum comment
    - correct default and example settings to use the canonical names for all
      options, rather than historical synonyms
    - clarify the comment for 'max log size'.
    Thanks to Chuck Short and Richard Laager.
  * Add an additional sed command to samba-common.postinst to cleverly
    pick up any shares that have been appended to the default smb.conf
    and exclude them from the ucf diff.

 -- Christian Perrier <bubulle@debian.org>  Fri, 14 Mar 2008 21:28:16 +0100

samba (3.0.28-4) unstable; urgency=low

  [ Steve Langasek ]
  * Brown paper bag: fix samba-common.files to list all of the smb.conf
    templates, not just the current one.  Closes: #470138.
  * Drop debian/patches/gcc42-arm-workaround.patch, which should have been
    dropped in the previous upload

 -- Steve Langasek <vorlon@debian.org>  Sun, 09 Mar 2008 04:09:26 -0700

samba (3.0.28-3) unstable; urgency=low

  * Drop the arm optimization workaround, as the compiler is now reported
    to be fixed.
  * Add missing eventlogadm(8) manpage.
  * Refresh the list of Linux architectures from type-handling, to pick up
    libacl-dev on armel.  Closes: #465121.
  * Convert handling of smb.conf to use ucf, so that we can sanely manage
    syntax changes going forward.
  * In the process, fix the dhcp handling to allow proper reconfiguration
    via debconf.

  [ Debconf translations ]
  * Indonesian added. Closes: #469976

 -- Steve Langasek <vorlon@debian.org>  Sat, 08 Mar 2008 17:11:16 -0800

samba (3.0.28-2) unstable; urgency=low

  [ Steve Langasek ]
  * Drop some further code in samba-common.postinst that's specific to
    pre-3.0 upgrades.
  * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script,
    so we can use bash array variables and cope with arguments containing
    embedded spaces (such as share names).  Thanks to Julian Gilbey
    <jdg@debian.org> for the patch.  Closes: #457105.
  * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler
    problem by building rpc_parse/parse_prs.o with -O0 on this architecture.
    Thanks to Martin Michlmayr for helping to pin down the problem file.
    Closes: #445566.
  * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is
    a closer approximation of the semantics with cifs.

 -- Christian Perrier <bubulle@debian.org>  Sat, 05 Jan 2008 09:46:06 +0100

samba (3.0.28-1) unstable; urgency=high

  * New upstream release. Security fix
  * Fix a remote code execution vulnerability when running as a domain
    logon server (PDC or BDC).  (CVE-2007-6015)

 -- Christian Perrier <bubulle@debian.org>  Tue, 11 Dec 2007 00:12:11 +0530

samba (3.0.27a-2) unstable; urgency=low

  * debian/patches/disable-weak-auth.patch: disable plaintext authentication
    on the client, and lanman authentication on both client and server, by
    default since these are only needed for Win9x or Samba with encrypted
    passwords disabled and are potential password attack vectors.  This
    change is backported from Samba 3.2.  LP: #163194.
  * Don't build the userspace tools for the deprecated smbfs kernel driver
    anymore; instead, use a shell wrapper around mount.cifs that translates
    option names between the smbfs and cifs drivers.
    Closes: #169624, #256637, #265468, #289179, #305210, #410075;
    LP: #29413
  * debian/panic-action: detect when we're on an Ubuntu system and direct bug
    reporters to Launchpad instead of to the Debian BTS.  Closes: #452940.
  * debian/samba.init: call log_progress_msg separately for each daemon on
    stop rather than passing a second arg to log_daemon_msg, for greater
    compatibility with both Debian and Ubuntu LSB initscript implementations.
    Closes: #453350.
  * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of
    recommends/suggests which is now implemented correctly in apt.
    Closes: #453144.
  * Get rid of the build-dependency on type-handling:
    - add a new target, "update-archs", to be invoked by hand to refresh
      the list of known Linux architectures for the libacl1-dev
      build-dep; this avoids the clean target making changes to
      debian/control
    - rework the sed line so that it works in-place on debian/control,
      so we can get rid of debian/control.in as well and just update
      debian/control directly
    Closes: #340570.

 -- Steve Langasek <vorlon@debian.org>  Tue, 04 Dec 2007 18:35:29 -0800

samba (3.0.27a-1) unstable; urgency=low

  [ Steve Langasek ]
  * New upstream release
    - fix regression with smbfs clients, introduced by the security fix in
      3.0.27.  Closes: #451839.
    - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream.
  * Drop the deprecated "printer admin" example from the default smb.conf.
    Closes: #451273.
  * Add a *new* debian/patches/cups.patch to *enable* cups as the default
    printing system, because since the original introduction of this patch
    in Debian there was a regression upstream that caused cups to never be
    selected as the default print system.
  * Set the default value for the workgroup question to "WORKGROUP" in
    samba-common.templates, not just in the template smb.conf, so that the
    debconf question comes out right every time; and always treat this
    as a high-priority debconf question instead of selecting the
    priority based on whether there's an existing value, since there's
    now *always* an existing value but the value doesn't tell us
    anything meaningful about the user's preference.  Closes: #451271.
  * Drop some code from samba.postinst that only applies to upgrades from
    pre-3.0 (i.e., pre-sarge) packages

  [ Christian Perrier ]
  * Update the "built by" part of README.debian
  * Remove the very outdated parts of README.debian

 -- Steve Langasek <vorlon@debian.org>  Fri, 23 Nov 2007 13:04:52 -0800

samba (3.0.27-1) unstable; urgency=low

  * New upstream version
    - fixes a remote code execution vulnerability when running nmbd as a
      WINS server. (CVE-2007-5398; closes: #451385)
    - fixes a buffer overflow in nmbd when running as a domain controller
      during processing of GETDC logon server requests. (CVE-2007-4572)

  [ Steve Langasek ]
  * fhs.patch: net usershares should also be stored under /var/lib, not under
    /var/run.  No transition handling in maintainer scripts, since this
    feature is not activated by default.
  * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid()
    from smbpasswd -L or pam_smbpass when running as non-root, to avoid a
    foreseeable panic.  Closes: #346547, #450738.
  * usershare.patch: enable "user shares" by default in the server with a
    default limit of 100, to support user shares on both upgrades and new
    installs with no need to munge config files.  Thanks to Mathias Gug
    <mathiaz@ubuntu.com> for the patch.  Closes: #443230.
  * On Ubuntu, support autopopulating the sambashare group using the existing
    members of the admin group; no equivalent handling is done on Debian,
    because there doesn't seem to be an appropriate template group we can use
    that wouldn't be considered a privilege escalation for those users.
  * Update Samba to explicitly use the C locale when doing password changes,
    to account for Linux-PAM's recently adopted i18n support.
    Closes: #451272.
  * Enforce creation of the pid directory (/var/run/samba) in the samba
    init script, for compatibility with systems that use a tmpfs for
    /var/run.  Closes: #451270.
  * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd
    as the default printing system, as CUPS is now the dominant/default
    printing system for Linux.

  [ Debconf translations ]
  * Hebrew added. Closes: #444054

  [ Christian Perrier ]
  * Split fhs.patch into 3 separate patches to make upstream integration
    easier:
    - fhs-newpaths.patch: introduce new paths
    - fhs-filespaths.patch: assign files to new paths
    - fhs-assignpaths.patch: assign paths to FHS-compatible locations
  * Compile with DNS update support. Thanks to Matthias Gug for
    reporting and contributions from Launchpad's #156686
    Closes: #449422

 -- Steve Langasek <vorlon@debian.org>  Thu, 15 Nov 2007 11:46:17 -0800

samba (3.2.0~pre1-1) experimental; urgency=low

  * New upstream (pre-)release

  [ Steve Langasek ]
  * fhs.patch: net usershares should also be stored under /var/lib, not under
    /var/run.  No transition handling in maintainer scripts, since this
    feature is not activated by default.
  * Update smbstatus-locking.patch to use db_open() instead of
    tdb_open(), per upstream recommendation.
  * Use talloc_strdup() and talloc_asprintf() instead of static strings in
    data_path(), state_path(), and cache_path(), as suggested by Volker
    Lendecke.

  [ Debconf translations ]
  * Hebrew added. Closes: #444054

  [ Christian Perrier ]
  * Split fhs.patch into 4 separate patches to make upstream integration
    easier:
    - fhs-newpaths.patch: introduce new paths
    - fhs-filespaths.patch: assign files to new paths
    - fhs-filespaths-debatable.patch: assign files to new paths (part that
      seems more difficult to be integrated upstream)
    - fhs-assignpaths.patch: assign paths to FHS-compatible locations

 -- Christian Perrier <bubulle@debian.org>  Sun, 21 Oct 2007 09:14:42 +0200

samba (3.0.26a-1) unstable; urgency=low

  * New upstream release.
  * Remove the samba-common/unsupported-passdb debconf template and
    the associated code in samba-common.postinst, that deals with pre-etch
    versions transition
  * Remove the samba/tdbsam template and the remaining line referencing
    it (for no need) in samba.postinst. That code was removed in 3.0.23c-2
    and was dealing with pre-3.0 transitions.

 -- Christian Perrier <bubulle@debian.org>  Sun, 16 Sep 2007 10:16:29 +0200

samba (3.0.26-1) unstable; urgency=high

  * New upstream release: security update for CVE-2007-4138:
    incorrect primary group assignment for domain users using the rfc2307 or
    sfu winbind nss info plugin.

 -- Christian Perrier <bubulle@debian.org>  Tue, 11 Sep 2007 19:16:32 +0200

samba (3.0.25c-1) unstable; urgency=low

  [ Noèl Köthe ]
  * new upstream released from 2007-08-20
    - added smbfs deprecation information to help and manpage
      Closes: #360384
    - fixed winbind leaking file descriptors
      Closes: #410663
    - fixed smbpasswd fails with errorcode SUCCESS as normal user
      Closes: #155345

  [ Christian Perrier ]
  * Drop the (upstream unmaintained) python bindings (python-samba package)
  * swat: turn the dependency on samba-doc to a Recommends:
    Thanks to Peter Eisentraut for dealing with that issue and bringing it
    back. Closes: #391742

 -- Christian Perrier <bubulle@debian.org>  Sun, 26 Aug 2007 14:57:16 +0200

samba (3.0.25b-2) unstable; urgency=low

  [ Steve Langasek ]
  * Don't start nmbd if 'disable netbios' is set in the config.
    Closes: #429429.
  * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid,
    set to those of the invoking user, when called as non-root.
    Closes: #431661.
  * Fix up fhs.patch for some new FHS regressions:
    - make sure all references to winbindd_idmap.tdb look in /var/lib/samba
    - make sure all references to winbindd_cache.tdb look in /var/cache/samba
    - share_info.tdb belongs in /var/lib/samba; this is a regression
      introduced in 3.0.23-1, so fix up this path on samba upgrade
    - move the ADS "gpo" cache directory to /var/cache/samba
    - move idmap_cache.tdb to /var/cache/samba, and fix up the path on
      winbind upgrade
  * linux-cifs-user-perms.patch: also support setting a default uid and gid
    value when mount.cifs is called as non-root
  * cifs-umount-trailing-slashes.patch: canonicalize mount point names when
    umount.cifs is called, to avoid unnecessarily leaving entries behind in
    /etc/mtab if invoked with a trailing slash in the mount point name
  * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check
    in umount.cifs assumed that errors would return a value > 0, when in fact
    the return value on failure is -1.  Correct this assumption, which was
    allowing any user to unmount shares mounted by other users.
  * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog()
    and closelog(), since this will interfere with syslogging behavior
    of the calling application.  Closes: #434372.
  * swat should depend only on inet-superserver, not update-inetd, per
    Marco d'Itri.

  [ Christian Perrier ]
  * debian/panic-action: bail out if there's no "mail" command
    Patch from the Ubuntu samba packagers.
  * debian/smb.conf: use the comment from Ubuntu package for the "valid users"
    setting of [homes] as a basis for ours. Ubuntu's wording is better.

  [ Peter Eisentraut ]
  * Don't ignore errors from make distclean, as per lintian check

  [ Debconf translations ]
  * Gujarati updated. Closes: #436215

 -- Steve Langasek <vorlon@debian.org>  Fri, 17 Aug 2007 18:38:58 -0700

samba (3.0.25b-1) unstable; urgency=low

  * New upstream version
  * Bugs fixed upstream:
    - correct default mentioned for "store dos attribute" in smb.conf(5)
      Closes: #367379
    - fix typo in pdbedit.c. Closes: #421758
    - fixed crashes in idmap_rid. Closes: #428411
    - misleading documentation in smb.conf(5). Closes: #218477
    - don't crash when no eventlog names are defined in smb.conf
      Closes: #424683
    - typography errors in manpages. Closes: #427865, #418811
    - fix compilation and linking of pam_smbpass.so. Closes: #430755
  * Drop patches that have been applied upstream:
    - nmbd-signalling.patch

 -- Christian Perrier <bubulle@debian.org>  Wed, 27 Jun 2007 15:12:13 +0200

samba (3.0.25a-2) unstable; urgency=low

  [ Debconf translations ]
  * Danish updated. Closes: #426773

  [ Christian Perrier ]
  * Clean out some remaining cruft that is not deleted
    by "make clean". Taken from Ubuntu patches.
  * Add missing userspace patches to properly pass uid and gid with 2.6
    kernels. See #408033 and upstream's #999 for rationale
  * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue
    is fixed in 2.4 and 2.6 kernels (2.6 kernels need
    missing_userspace_bugzilla999.patch, though)
    Closes: #408033
  * Add the samba-common and winbind packages to samba-dbg to get
    debugging symbols for winbindd, net, etc.
  * Replace all occurrences of ${Source:Version} by ${$binary:Version} in
    dependencies. All these were Arch:any depending on Arch:any (the only
    Arch:any depending on Arch:all already used ${source:Version}

  [ Steve Langasek ]
  * Update samba.config to not override user preference on passdb.tdb
    creation after initial configuration.  Closes: #350926.
  * Drop the last vestiges of the unified samba.patch; this reverts the
    change for bug #112195 which it's been determined has no actual security
    benefits, and drops the fix for bug #106976 which is superseded
    upstream.

  [ Debconf translations ]
  * Vietnamese updated.  Closes: #426979.

 -- Christian Perrier <bubulle@debian.org>  Wed, 13 Jun 2007 15:47:06 +0200

samba (3.0.25a-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream version
  * Bugs fixed upstream:
    - password expiration loog on samba domain controllers. Closes: #425083
    - no more login on samba servers that are members of samba domains
      Closes: #425680, #426002
    - users no longer have access according to their secondary groups
      on shares with "force group". Closes: #424629
  * Debian packaging fixes:
    - Enforce building with "--with-ads" and therefore fail
      when the build can't be done with kerberos support.
      Closes: #424637
    - debian/control: wrap long lines in packages' descriptions
    - uncomment out use of type-handling in the clean target, because
      type-handling has been fixed to support the new /usr/share/dpkg/ostable
    - avoid installing extra COPYING files in /usr/share/doc/* (one was
      installed along with the pcap2nbench example)
  * Merge Ubuntu changes:
    - use of PIDDIR instead of hardcoding it in samba.init and winbind.init
  * Patches to upstream source:
    - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory
      instead of the lock directory. Thanks to C. K. Jester-Young for the
      patch. Closes: #425640

  [ Steve Langasek ]
  * swat and samba depend on update-inetd instead of on netbase; swat also
    depends on "openbsd-inetd | inet-superserver", for samba this is only a
    Suggests.

 -- Christian Perrier <bubulle@debian.org>  Sun, 27 May 2007 09:30:02 +0200

samba (3.0.25-1) unstable; urgency=high

  * New upstream version including security fixes
  * Bugs fixed upstream:
    - nmbd no longer segfaults on bad interface line
      Closes: #265577, #386922, #359155, #366800
    - documentation issues about displaycharset. Closes: #350790
    - documentation makes it clear that case options such as
      "default case" can only be set on a per-share basis.
      Closes: #231229
    - all occurrences of "encypt" fixed in smb.conf(5)
      Closes: #408507
    - two typos on "account" fixed in source/passdb/pdb_ldap.c and
      source/utils/pdbedit.c. Closes: #402392
    - no longer panic when using the (deprecated) "only user" option
      in user level security. Closes: #388282
    - CVE-2007-2444 (User privilege elevation because of a local SID/Name
      translation bug)
    - CVE-2007-2446 (Multiple heap overflows allow remote code execution)
    - CVE-2007-2447 (Unescaped user input parameters are passed as
                     arguments to /bin/sh allowing for remote command
                     execution)

  [ Debconf translations ]
  * Marathi added. Closes: #416802
  * Esperanto added. Closes: #417795.
  * Basque updated. Closes: #418196.
  * Wolof updated. Closes: #421636

  [ Christian Perrier ]
  * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba
    before running invoke-rc.d. Closes: #414841

  [ Steve Langasek ]
  * Comment out use of type-handling in the clean target, because
    type-handling is currently broken in unstable and clean shouldn't be
    editing debian/control anyway.

 -- Christian Perrier <bubulle@debian.org>  Mon, 14 May 2007 10:30:15 +0200

samba (3.0.24-6) unstable; urgency=high

  * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug
    is still present :/  Fix a missing ] in the regexp for passdb backend
    checking, really-closes: #415725.

 -- Steve Langasek <vorlon@debian.org>  Sat, 24 Mar 2007 03:32:46 -0700

samba (3.0.24-5) unstable; urgency=high

  * The "see what you get for trusting the quality of my packages,
    release team?  Release team, please unblock this package" release.
  * High-urgency brown-paper-upload for etch-targetted fix for
    regression introduced in the last version

  [ Steve Langasek ]
  * Fixed the regexp used for matching broken passdb backend settings,
    since we were getting false positives on *all* values. :/  The
    correct match should be: one or more non-space, non-comma
    characters, followed by a space or a comma, followed by zero or more
    spaces, followed by one or more non-space characters.  Closes: #415725.

  [ Debconf translations ]
  * Nepali
  * Korean; closes: #414883.
  * Russian
  * Arabic
  * Portuguese
  * Greek. Closes: #415122
  * Norwegian Nynorsk added.
  * Marathi added. Closes: #416802

 -- Steve Langasek <vorlon@debian.org>  Wed, 21 Mar 2007 13:49:46 -0700

samba (3.0.24-4) unstable; urgency=medium

  [ Steve Langasek ]
  * Documentation fix for a problem affecting upgrades from sarge: if
    passdb backend is still a comma- or space-separated list after any
    attempts at automatic fix-ups, throw a debconf error notifying the
    user that they'll need to fix this manually.  Closes: #408981.

  [ Debconf translations ]
  * French
  * Spanish
  * Galician; closes: #414605.
  * Swedish; closes: #414610.
  * Brazilian Portuguese; closes: #414603.
  * German; closes: #414630.
  * Norwegian Bokmål; closes: #414619.
  * Bulgarian; closes: #414624.
  * Romanian; closes: #414629.
  * Tagalog; closes: #414637.
  * Khmer; closes: #381833.
  * Thai; closes: #414664.
  * Slovak; closes: #414665.
  * Slovenian
  * Simplified Chinese; closes: #414671.
  * Japanese; closes: #414673.
  * Hungarian; closes: #414677.
  * Dzongkha; closes: #414680.
  * Estonian; closes: #414679.
  * Catalan
  * Malayalam; closes: #414728
  * Traditional Chinese; closes: #414730
  * Turkish
  * Italian; closes: #414708
  * Finnish; closes: #414736
  * Dutch; closes: #414741
  * Albanian; closes: #414778.
  * Czech; closes: #414793.

 -- Steve Langasek <vorlon@debian.org>  Tue, 13 Mar 2007 16:29:21 -0700

samba (3.0.24-3) unstable; urgency=low

  [ Christian Perrier ]
  * Merge some Ubuntu changes:
    - do not expose the Samba version anymore
    - default workgroup set to WORKGROUP (default workgroup of
      Windows workstations)
  * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch
    Closes: #394830
  * Add commented "winbind enum*" settings in smb.conf
    This will point users to these important settings which changed
    their default behaviour between sarge and etch. Closes: #368251

  [ Steve Langasek ]
  * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first
    time the script is called if the dhcp client was already running at
    the time of install, and manually reload samba to get the updated
    config files read.  Thanks to Bas Zoetekouw for the patch.
    Closes: #407408.
  * While we're at it, use atomic replace for /etc/samba/dhcp.conf just
    in case someone else reloads samba while the script is running.  Low
    impact, low-risk change.

 -- Steve Langasek <vorlon@debian.org>  Sun, 11 Mar 2007 23:34:10 -0700

samba (3.0.24-2) unstable; urgency=low

  * Re-upload with a proper .orig.tar.gz.

 -- Steve Langasek <vorlon@debian.org>  Mon,  5 Feb 2007 19:55:34 -0800

samba (3.0.24-1) unstable; urgency=high

  * New upstream release, security update
  * Fixes for the following security advisories:
    - Directly affecting Debian:
      - CVE-2007-0452 (Potential Denial of Service bug in smbd)
    - Not affecting Debian:
      - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind
        NSS library on Solaris)
      - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin)
  * Correct paths for the documentation pointers in the default smb.conf
    file. Thanks to Ted Percival for his care reporting this. Closes: #408898

 -- Christian Perrier <bubulle@debian.org>  Mon,  5 Feb 2007 05:27:07 +0100

samba (3.0.23d-4) unstable; urgency=low

  * Debconf translation updates:
    - Slovenian added.

 -- Christian Perrier <bubulle@debian.org>  Wed,  3 Jan 2007 08:43:50 +0100

samba (3.0.23d-3) unstable; urgency=low

  * Debconf translation updates:
    - Malayalam added. Closes: #403107
    - Tamil added. Closes: #403353

 -- Christian Perrier <bubulle@debian.org>  Mon,  1 Jan 2007 10:17:18 +0100

samba (3.0.23d-2) unstable; urgency=low

  * Build-Conflicts: libfam-dev to avoid problems accessing shares
    when using GAMIN. Closes: #400617
  * Lintian fixes:
    - Run debconf-updatepo in the clean target to ensure up-to-date PO
      and POT files
    - debian/patches/no_unbreakable_spaces_in_man.patch:
      Replace all non-breakable spaces by regular spaces in man pages.
      They are encoded in ISO-8859-1 which is not recommended in man pages.
      This should be submitted upstream.
    - reformat too long lines in package description

 -- Christian Perrier <bubulle@debian.org>  Sun,  3 Dec 2006 09:39:29 +0100

samba (3.0.23d-1) unstable; urgency=low

  * new upstream release (2006-11-15)

  [ Noèl Köthe ]
  * updated documentation.patch for 3.0.23d
  * updated non-linux-ports.patch for 3.0.23d
  * updated adapt_machine_creation_script.patch for 3.0.23d
  * updated autoconf.patch for 3.0.23d

  [ Debconf translations ]
  * Added Bosnian. Closes: #396634
  * Added Bulgarian. Closes: #397773

 -- Noèl Köthe <noel@debian.org>  Thu, 16 Nov 2006 13:55:26 +0100

samba (3.0.23c-4) unstable; urgency=low

  [ Debconf translations ]
  * Added Greek.
  * Added Gujarati. Closes: #394430
  * Added Korean. Closes: #394509
  * Added Nepali.
  * Updated Czech (typo fixed).
  * Added Wolof. Closes: #396079

 -- Christian Perrier <bubulle@debian.org>  Sun,  5 Nov 2006 09:42:40 +0100

samba (3.0.23c-3) unstable; urgency=low

  [ Debconf translations ]
  * Updated Catalan; thanks to Guillem Jover for his help
  * Updated Russian.
  * Updated Spanish. Add a missing word and correct the copyright header
  * Updated Vietnamese. Closes: #394164
  * Added Albanian. Closes: #393777
  * Added Chinese (Traditional).
  * Added Thai.

 -- Christian Perrier <bubulle@debian.org>  Sat, 21 Oct 2006 10:44:11 +0200

samba (3.0.23c-2) unstable; urgency=low

  [ Debconf translations ]
  * Updated Swedish. Closes: #386510.
  * Updated Japanese. Closes: #386534.
  * Updated Italian. Closes: #386691.
  * Updated Romanian. Closes: #388254.
  * Updated German. Closes: #389072.
  * Updated Brazilian Portuguese. Closes: #389097.
  * Updated Basque. Closes: #389722.
  * Updated Turkish. Closes: #390887
  * Updated Danish. Closes: #390878
  * Updated German. Closes: #390813
  * Updated Simplified Chinese. Closes: #390959
  * Updated Arabic.
  * Updated Spanish. Closes: #391735
  * Updated Dutch. Closes: #392082
  * Added Slovak. Closes: #386847.
  * Added Finnish. Closes: #390150.
  * Added Estonian. Closes: #391102.
  * Added Norwegian Bokmål. Closes: #391692
  * Added Hungarian. Closes: #391746

  [ Steve Langasek ]
  * Change the Maintainer field at last to the mailing list... gives
    our spam rules some testing, in response to popular demand :)
  * Check for update-inetd on purge before trying to invoke it;
    closes: #388606.

  [ Peter Eisentraut ]
  * Make swat binNMU-safe by using ${source:Version} for dependency on
    samba-doc
  * Make samba-common owner of /var/{cache,log,run}/samba, let samba and
    winbind only delete files they know they're exclusive owners of.
    Closes: #370718.
  * Use python-central to manage installation of python-samba.
    Closes: #386499.  (patch by Patrick Winnertz)
  * Use upstream makefile to install Python module.
  * Build-Depend on python-dev instead of python-all-dev.
  * Removed old upgrade support.
  * Remove possibly leftover comma from "passdb backend" setting in
    smb.conf on upgrade. Closes: ##383307.
  * Added libpam-smbpass logcheck file by martin f krafft.
    Closes: #391487, #391916.

  [ Christian Perrier ]
  * Add LSB info to the init script

 -- Christian Perrier <bubulle@debian.org>  Thu, 12 Oct 2006 18:31:46 +0200

samba (3.0.23c-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream version
  * Split out samba/run_mode with "__Choices".

  [ Noèl Köthe ]
  * corrected samba override disparity:
    samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra.

  [ Debconf translations ]
  * Updated Galician. Closes: #383001.
  * Updated Danish. Closes: #383025.
  * Added Tagalog. Closes: #383039, #383252.
  * Updated Khmer.
  * Updated Arabic.
  * Updated Dzongkha. Closes: #383125.
  * Updated Vietnamese. Closes: #383126.
  * Updated Czech. Closes: #384760.

  [ Peter Eisentraut ]
  * Preseed configure result for method to detect interfaces in
    debian/config.cache; the test might otherwise fail if there are no
    interfaces configured at build time. Closes: #382429.
  * Refined panic-action script text. Closes: #382500.

 -- Noèl Köthe <noel@debian.org>  Mon, 04 Sep 2006 12:10:28 +0200

samba (3.0.23b-2) unstable; urgency=low

  [ Debconf translations ]
  * Updated Romanian. Closes: #382358
  * Updated Dzongkha. Closes: #382448, #382948
  * Updated Basque. Closes: #382456
  * Added Simplified Chinese. Closes: #382489

  [ Peter Eisentraut ]
  * Remove no longer functioning "guest" value from "passdb backend"
    setting in smb.conf on upgrade. Closes: #382296

  [ Steve Langasek ]
  * Drop code and debconf questions specific to upgrades from samba <= 2.2.
  * Reword some debconf translations as discussed on the list.
  * Rerun debconf-updatepo.
  * Switch debian/ca.po to UTF-8.
  * Restore some reverted strings for Galician, Czech, Brazilian Portuguese,
    Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese.
  * Update translations for Brazilian Portuguese, Spanish, French, Italian,
    Catalan, and Portuguese.

 -- Peter Eisentraut <petere@debian.org>  Mon, 14 Aug 2006 19:04:31 +0200

samba (3.0.23b-1) unstable; urgency=low

  * New upstream release

  [ Debconf translations ]
  * Updated Galician. Closes: #381988

 -- Noèl Köthe <noel@debian.org>  Tue, 08 Aug 2006 22:28:00 +0200

samba (3.0.23a-1) unstable; urgency=medium

  * New upstream release

  * Fixes the following Debian bugs:
    - winbind: panic()s when started outside of a domain context.
      Closes: #337070
    - Make smbclient -L use RPC to list shares, fall back to RAP.
      Closes: #168732
    - Potential hang in nmbd. Upstream bug #3779. Closes: #367472
    - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780).
      Closes: #367507
    - Erroneous permissions checks after 3.0.10 -> 3.0.14a
      (upstream #2591). Closes: #307626
    - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070
    - ImportError exception raised when trying to import samba.smb
      (upstream #3567). Closes: #350050
    - Changed references from pam_pwdb to pam_unix (upstream #3225).
      Closes: #206672
    - SWAT segfault (upstream #3702). Closes: #363523

  [ Adam Conrad ]
  * Fix typo in smb.conf that causes all samba apps to whine.
    Closes: #369782
  * Add myself to Uploaders, on the off chance that I might upload.

  [ Debconf translations ]
  * Add Galician translation of debconf templates. Closes: #361204, #369403
  * Add Basque translation of debconf templates. Closes: #375104
  * Add Romanian translation of debconf templates. Closes: #379246
  * Add Khmer translation of debconf templates. Closes: #381833
  * Add Dzongkha translation of debconf templates.
  * Updated Russian. Closes: #369375
  * Updated Czech. Closes: #369408
  * Updated Japanese. Closes: #369457
  * Updated Italian. Closes: #369587
  * Updated Swedish. Closes: #369730
  * Updated Dutch. Closes: #376515
  * Updated Vietnamese. Closes: #381557
  * Updated French.
  * Updated Brazilian.
  * Updated Portuguese. Closes: #372632
  * Updated Arabic.

  [ Christian Perrier ]
  * Add dependency on procps for samba, as ps is used in init scripts.
    Thanks to Bastian Blank for reporting. Closes: #365618
  * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's
    Reference
  * Add support for /etc/default/winbind. Closes: #262313, #374411
    Thanks to Guido Guenther for the old patch and to Jérôme Warnier
    for reminding us about it.
  * Compile with --with-cifsmount which is now needed to properly compile
    mount.cifs and umount.cifs. See samba bug #3799

  [ Peter Eisentraut ]
  * Use debian/compat instead of DH_COMPAT
  * Updated Standards-Version to 3.7.2 (no changes needed)
  * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the
    required ldconfig calls appear in the maintainer scripts
  * Adjusted debian/rules to get 3.0.23rc1 to build
  * Updated to debhelper level 5
  * Rearranged dh_strip calls so that build succeeds with
    DEB_BUILD_OPTIONS=nostrip. Closes: #288995
  * Create /var/spool/samba and use it as default printer spool.
    Closes: #275241
  * Made winbind init script more careful about returning proper exit code
  * Added winbindd_priv group as owner of winbindd_privileged directory.
    Closes: #307257
  * Python transition preparations: renamed package to python-samba,
    removed hardcoded references to Python version 2.3. Closes: #380939
  * Removed unwanted swat debconf warning
  * Put localized swat messages into /usr/share/samba, where swat looks for
    them. Closes: #376991

 -- Peter Eisentraut <petere@debian.org>  Mon,  7 Aug 2006 23:00:49 +0200

samba (3.0.22-1) unstable; urgency=medium

  [ Steve Langasek ]
  * New upstream release
    - CAN-2006-1059: fixes an information leak in logfiles of systems using
      winbind with log level >= 5.
  * Fix a typo in the default smb.conf (closes: #354495).

  [ Noèl Köthe ]
  * replacing SMB with SMB/CIFS in the descriptions like
    named on the samba.org webpage. Closes: #356335

 -- Steve Langasek <vorlon@debian.org>  Sun, 12 Mar 2006 22:40:28 +0100

samba (3.0.21c-1) unstable; urgency=low

  * New upstream release
  * add a few logon-related parameters as good and safe
    examples for *DC-type settings. Closes: #349051
  * add an example "add user script". Closes: #349050
  * drop outdated information from the smbfs package description
    Closes: #352828

 -- Christian Perrier <bubulle@debian.org>  Sat, 25 Feb 2006 11:58:45 +0100

samba (3.0.21b-1) unstable; urgency=low

  * The "Tridge" release: celebrates the 2005 Free Software Award winner

  * New upstream release

  * Upstream bugs fixed by the new upstream release:
    - Support changing expired passwords in
      pam_winbindd. Closes: #258302
    - vfs_full_audit fixes for multiple connections. Closes: #348419
    - crashes of smbd in security=server mode
      Closes: #346045, #346069, #350598, #351448

  [ Peter Eisentraut ]
  * Put correct paths for Debian installations into the man pages, and
    remove outdated swat setup instructions therein. Closes: #321005
  * Fix lintian overrides and install them into the right packages.
  * Remove swat inetd registration in remove, not purge. Closes: #313214
  * Add findsmb script. Closes: #231806
  * Fix sonames of libnss_win{bind,s}.so. Closes: #333290
  * Remove autoconf build dependency.
  * Remove remnants of old patch system.
  * Install smbumount setgid root. Closes: #253437
  * Add watch file.
  * Activate kernel oplocks. Closes: #218511
  * Disable PIE compilation. Closes: #346416

  [ Christian Perrier ]
  * activate building of idmap_rid. Closes: #284681.
    Thanks to Ubuntu patches
  * activate building of idmap_ad. Closes: #341814
  * modify the long description of the libsmbclient-dev package to
    avoid repeating the long description. Thanks, linda.

  [ Steve Langasek ]
  * Also enable setresuid()/setresgid() on alpha and sparc now that support
    for Linux 2.2 is dropped.

 -- Christian Perrier <bubulle@debian.org>  Mon,  6 Feb 2006 07:02:20 +0100

samba (3.0.21a-4) unstable; urgency=low

  [ Peter Eisentraut ]
  * Add umount.cifs. Closes: #340967
  * Really make mount.cifs and umount.cifs suid root. Closes: #340966

  [ Christian Perrier ]
  * Add "bind interfaces only" and "interfaces" options (commented)
    to the default smb.conf file. Closes: #349043

  [ Steve Langasek ]
  * Add missing changes to source/include/config.h.in into the
    autoconf.patch, so that samba looks for files in /var/lib/samba like it's
    supposed to instead of in /var/run/samba!  Closes: #349372, #349464.

 -- Steve Langasek <vorlon@debian.org>  Mon, 23 Jan 2006 00:59:20 -0800

samba (3.0.21a-3) unstable; urgency=low

  * Add Build-Depends on quilt (>= 0.40 as we use quilt.make)

 -- Christian Perrier <bubulle@debian.org>  Sat, 21 Jan 2006 23:02:32 +0100

samba (3.0.21a-2) unstable; urgency=low

  [ Christian Perrier ]
  * Switch to quilt for patches management. Refresh all patches so
    that they apply cleanly. Closes: #345557
  * debian/patches/adapt_machine_creation_script.patch:
    - adapt example machine creation script to Debian. Closes: #346234
  * winbind.dirs:
    - added /var/run/samba. Closes: #347585

  [ Peter Eisentraut ]
  * swat.links:
    - file added. Closes: #346001

  [ Noèl Köthe ]
  * fixed typo in panic-script. Closes: #348410

  [ Steve Langasek ]
  * debian/patches/autoconf.patch:
    - move changes to autogenerated files into their own patch now that we've
      lost the script that was calling autogen.sh for us; this also helps
      make debian/rules clean just a little bit cleaner.
  * debian/patches/fhs.patch:
    - fix new references to registry.tdb (closes: #348874).
    - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba
      where they belong

 -- Christian Perrier <bubulle@debian.org>  Fri, 20 Jan 2006 14:20:35 +0100

samba (3.0.21a-1) unstable; urgency=low

  [ Christian Perrier ]
  * *Really* make samba-doc suggest samba-doc-pdf. This change finally
    did not make it in the previous release.

  [ Noèl Köthe ]
  * new upstream release 3.0.21a
    - removed smbsh.1 from debian/rules
    - added new smbclient programm smbget (with conflict/replace
      to existing Debian smbget package)
    - added libsmbclient.7 to libsmbclient package
    - added umount.cifs.8 to smbfs package
    - added pam_winbind.7 to winbind package
    - added new /usr/bin/eventlogadm to samba package which is
      documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt
    - fixed "cd command fails in smbclient". Closes: #307535
    - fixed "file descriptor leak". Closes: #339564
    - fixed "smbclient(1) doesn't list same options as
      smbclient usage statement". Closes: #154184
    - fixed "typo in smbmount.8". Closes: #260673
    - fixed "smbmount manual page doesn't have a link to
      smbumount". Closes: #297535
    - fixed "smb.conf man page references non-existent
      BROWSING.txt file". Closes: #316458
    - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480
    - fixed "fails to manage groups containing spaces". Closes: #299592
    - corrected nonpic-libsmbclient.patch to apply
    - corrected fhs.patch to apply
  * added myself to Uploaders
  * Rewording of the panic action script. Closes: #335051
  * added missing swat translation to swat package

 -- Noèl Köthe <noel@debian.org>  Sun, 01 Jan 2006 12:45:33 +0100

samba (3.0.20b-4) unstable; urgency=low

  [ Christian Perrier ]
  * Remove the smbldap-tools-* directory from the examples of samba-doc
    as these tools exist as an independent package. Closes: #341934
  * Swedish debconf translation update. Closes: #342022
  * Preserve the local admin settings for run_mode in /etc/default/samba
    when upgrading. Closes: #234038, #267988, #269735
  * Winbind also must depend on lsb-base. Closes: #343379
  * Enable swat in inetd when installing it and remove it when
    uninstalling. Closes: #87905, #230936, #268429

  [ Peter Eisentraut ]
  * Added separate samba-doc-pdf package, suggested by samba-doc.
    Closes: #281971
  * Removed duplicate documentation in swat package, symlinked to
    samba-doc; swat now depends on samba-doc. Closes: #233447

 -- Christian Perrier <bubulle@debian.org>  Tue, 20 Dec 2005 17:08:20 +0100

samba (3.0.20b-3) unstable; urgency=low

  [ Steve Langasek ]
  * Drop the FHS transition code from the samba postinst, since it's
    not needed for upgrades from sarge (and most of it not for upgrades
    from woody).

  [ Noèl Köthe ]
  * libpam-smbpass dependency on samba-common
    Closes: #297923
  * Updated swedish debconf translation. Closes: #335784
  * Added Recommends: smbldap-tools. Closes: #227675

  [ Peter Eisentraut ]
  * Added doc-base support. Closes: #55580
  * Fixed dh_installexamples call so the debian/*.examples files are
    actually used.
  * Patched libpam-smbpass README to refer to examples directory.
    Closes: #215771

  [ Christian Perrier ]
  * Add a working passwd chat line to the default smb.conf file
    Closes: #269746
  * Add the profiles binary and man page to the shipped files. Closes: #225494
  * Add a dependency on samba-common for winbind and force versions to match
    Closes: #273007, #264855
  * Add /var/log/samba to winbind directories. Closes: #340833
  * Lintian cleaning:
    - Add a few lintian overrides to avoid lintian complaining
      for things done on purpose or just because it makes wrong assumptions
    - Corrected FSF address in debian/copyright
    - Make swat depend on netbase as it uses update-inetd in its postinst
      script
    - Correct shebang lines in config scripts
    - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc
    - Minor correction in libsmbclient-dev description to avoid strictly
      repeating the short description in the long description
    - Call confmodule in swat.postinst as this is the only way to guarantee
      that the config script is run in all cases

 -- Christian Perrier <bubulle@debian.org>  Sat,  3 Dec 2005 07:30:40 +0100

samba (3.0.20b-2) unstable; urgency=low

  * Don't build with -gstabs any more; -g no longer gives a problematic
    size hit, and -gstabs is no longer supported on ia64.

 -- Steve Langasek <vorlon@debian.org>  Wed, 19 Oct 2005 19:02:44 -0700

samba (3.0.20b-1) unstable; urgency=low

  * Christian Perrier:
    - Debconf translations:
      - Added Vietnamese. Closes: #317876
      - Updated German. Closes: #322907
  * Steve Langasek:
    - Use ${misc:Depends} in debian/control instead of depending on
      debconf directly, allowing use of cdebconf as an alternative.
      Closes: #332088.
  * Noèl Köthe
    - corrected libsmbclient priority to optional. Closes: #310045
    - corrected the path of ServerType.html in smb.conf. Closes: #296500
    - updated Standards-Version to 3.6.2 (no changes needed)
    - added homepage to description
    - switched init scripts (samba and winbind) to lsb-functions
      (took patches from ubuntu)
    - added Swedish. Closes: #331437
    - removed outdated "guest" value in "passdb backend" in default smb.conf
      Closes: #289519
    - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8)
      is; Replaces: all previous versions of samba.  Closes: #253603
    - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515
      - support for Windows Vista. Closes: #323489
      - Mac OS Tiger Problem fixed. Closes: #309836
      - BUG 2688: re-implement support for the -P (--port) option.
        Closes: #307746
      - "man smb.conf" warnings fixed. Closes: #266320
      - testprns removed by upstream so removed in samba.files
      - corrected docs/*.pdf names (samba-doc.docs)
      - corrected diagnosis.html path (samba.docs)
      - removing patches which are included upstream:
        dos7-xcopy-always-copies-files.patch
           (* BUG 2622: Remove DPTR_MASK as it makes no sense.)
        hide-special-file-fix.patch
           (* Hide dot files and directory logic fixes.)
        rap-printing-bigendian.patch
           (* BUG 1998: Correct byte ordering bug when storing
              16-bit RAP print job ids.)
        smbclient-vfat-loop.patch
        smbclient-vfat-loop2.patch
           (* BUG 2698: Fix infinite listing loop in smbclient
              caused by an invalid character set conversion.)
      - fixed the following patches which didn't applied cleanly
        fhs.patch
        non-linux-ports.patch

 -- Steve Langasek <vorlon@debian.org>  Tue, 18 Oct 2005 19:02:21 -0700

samba (3.0.14a-6) unstable; urgency=low

  * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect
    Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9;
    add a versioned build-depend accordingly.  Closes: #315955
  * Switch to libreadline5.

 -- Steve Langasek <vorlon@debian.org>  Fri,  1 Jul 2005 00:13:12 -0700

samba (3.0.14a-5) unstable; urgency=low

  * Fix libsmbclient.a to be built as non-PIC instead of PIC.
    Closes: #279243.

 -- Steve Langasek <vorlon@debian.org>  Wed,  8 Jun 2005 05:46:52 -0700

samba (3.0.14a-4) unstable; urgency=high

  * Last-minute upload for sarge, because I don't listen to anything
    that RM guy says
  * Patch smbmount to strip CAP_UNIX out of the capabilities passed to
    the kernel when uid, gid, dmask, or fmask options have been
    specified; this keeps the mount permissions from changing out from
    under the user when upgrading to a server (or to a kernel) that
    supports unix extensions.  Closes: #310982.
  * Second patch to smbclient search continuation logic, from upstream:
    preserve the original UCS2 filename to guard against lossy
    conversions, and break out if we find ourselves looping.
    Closes: #311157.
  * Upstream fix to make print job cancellations work on big-endian
    systems when talking to RAP-style clients (i.e., smbclient).
    Closes: #311213.
  * Add build-dependency on libpopt-dev, so that we consistently use the
    system popt lib instead of the bundled one.

 -- Steve Langasek <vorlon@debian.org>  Thu,  2 Jun 2005 07:02:46 -0700

samba (3.0.14a-3) unstable; urgency=high

  * Urgency set to high for a bug that makes smbclient/libsmbclient
    /almost/ mostly unusable
  * Fix smbclient's search continuation logic so that it works correctly
    against 2K servers offering VFAT-hosted shares; many thanks to
    Jeremy Allison for the timely upstream fix.  Closes: #309798.
  * Update pt_BR debconf translation.  Thanks to Andre Luis Lopes
    <andrelop@debian.org>. (closes: #308510)
  * Add Russian debconf translation, thanks to Yuriy Talakan
    <yt@amur.elektra.ru>. (closes: #310063)

 -- Steve Langasek <vorlon@debian.org>  Thu, 26 May 2005 23:37:57 -0700

samba (3.0.14a-2) unstable; urgency=low

  * Point the sense of the file_is_special() check right way around;
    thanks to Matthijs Mohlmann for catching this.  Closes: #305747.
  * debian/patches/dos7-xcopy-always-copies-files.patch:
    Fix the MS-DOS 7 XCOPY copying files over and over bug
    Closes: #309003
  * Steve Langasek <vorlon@debian.org>:
    - Add Christian Perrier to Uploaders:.  Thanks, Christian :)

 -- Steve Langasek <vorlon@debian.org>  Sun,  8 May 2005 04:43:21 -0700

samba (3.0.14a-1) unstable; urgency=low

  * New upstream version
    - A more complete upstream fix for missing files in file listings,
      should really give us working (closes: #302771); drop
      xp-missing-files.patch, which has been superseded.
  * Use the right path when removing mount.cifs binary in the clean
    target.  Closes: #303318.

 -- Steve Langasek <vorlon@debian.org>  Mon, 18 Apr 2005 03:22:29 -0700

samba (3.0.11-1) unstable; urgency=high

  * New upstream version
    - Fixes duplicated entry in swat(8) manpage (closes: #292957).
    - Fix queue handling so that processes serving print clients don't
      spin off into infinity and clobber the system (closes: #274969).
    - Make sure we use C-locale toupper/tolower functions for case
      conversion, since Turkish pairing rules are incompatible
      (closes: #286174).
  * Fix logrotate script to exit true instead of false when nmbd.pid is
    missing (closes: #287263).
  * Added Portuguese debconf translation. Thanks to Miguel Figueiredo
    <elmig@debianpt.org>. (closes: #286375)
  * Added Italian debconf translation. Thanks to Luca Monducci
    <luca.mo@tiscali.it>. (closes: #284125)
  * Add support for building on the Debian BSD and Hurd ports; thanks to
    Robert Millan for the patch. (closes: #266693)
  * debian/patches/xp-missing-files.patch: import patch from upstream to
    fix missing entries in directory listings when talking to WinXP
    servers (closes: #297771).

 -- Steve Langasek <vorlon@debian.org>  Wed, 23 Mar 2005 00:13:16 -0800

samba (3.0.10-1) unstable; urgency=high

  * New upstream release.
    - CAN-2004-1154: integer overflow can lead to remote code execution
      by authenticated users; closes: #286023.
  * High-urgency upload for sarge-targetted RC bugfix.
  * Sync the fhs.patch to samba 3.0.10.
  * Install mount.cifs suid root, to make user mounts possible
    (closes: #283819).
  * debian/patches/cups.patch: Change the default printing system, so we
    can compile in CUPS support without making it the default -- CUPS is
    not a reasonable default on Debian, at least for sarge.

 -- Steve Langasek <vorlon@debian.org>  Fri, 17 Dec 2004 11:56:01 -0800

samba (3.0.9-1) unstable; urgency=low

  * New upstream release
    - Fixes Win9x printing; closes: #283530, #282571, #283818.
    - Fixes a problem with setting dosmodes on filesystems without ACL
      support; closes: #283661.
    - Drop ldapsam_compat.patch, redundant now that a fix is integrated
      upstream

 -- Steve Langasek <vorlon@debian.org>  Thu,  2 Dec 2004 01:11:39 -0800

samba (3.0.8-2) unstable; urgency=low

  * Fix the module paths for python2.3-samba so that "import foo from samba"
    works, and include the __init__.py glue; closes: #222867).
  * Enable quota support; closes: #246839.
  * Fix missing symbols in libsmbclient (and libnss_wins), and add
    -Wl,-z,defs to the libsmbclient link options to prevent future
    instances of undefined symbols (closes: #281181).
  * Fix for the legacy ldapsam_compat backend; thanks to Fabien
    Chevalier for the patch (closes: #274155).

 -- Steve Langasek <vorlon@debian.org>  Mon, 15 Nov 2004 06:54:13 -0800

samba (3.0.8-1) unstable; urgency=high

  * New upstream package. Urgency set to "high" because of a potential
    Denial of Service vulnerability in previous 3.0.x releases
    (CAN-2004-0930). (Eloy)
  * Introduce new -dbg package, so we can make better sense out of the
    cleverly-supplied backtrace emails. (Vorlon)
  * Applied patch from Luke Mewburn <luke@mewburn.net> to fix missing
    lock_path() to state_path() change in the FHS patches. (Eloy)

 -- Eloy A. Paris <peloy@debian.org>  Mon,  8 Nov 2004 13:39:34 -0500

samba (3.0.7-2) unstable; urgency=high

  * High-urgency upload for sarge-targetted RC fixes.
  * Use autogen.sh in unpatch-source as well as in patch-source, to get
    rid of the autom4te.cache cruft.
  * debian/patches/make-distclean.patch: add some missing files to the
    distclean target in source/Makefile.in (mostly-fixes: #276203).
  * Change compile-time default of 'use sendfile' to 'no', since the
    current Samba implementation is broken (closes: #261917, #275741,
    #270175).
  * Add mount.cifs into the smbfs package; thanks to Igor Belyi for
    showing us just how simple this patch should be. ;)  Since cifs is
    the preferred kernel driver in 2.6, bugs related to smbfs and 2.6
    are considered closed unless someone can show that they exist with
    the cifs driver as well (closes: #249890, #269443, #227791, #236869,
    #260707, #261808, #270175).
  * Fix FHS migration code so that it only affects upgrades from old
    package versions, and doesn't cause us to mess with non-standard
    directories that may have been re-added by the admin
   (closes: #251858).

 -- Steve Langasek <vorlon@debian.org>  Tue, 26 Oct 2004 01:35:23 -0700

samba (3.0.7-1) unstable; urgency=high

  * New upstream release. This release fixes two possible denial of
    service conditions; one in nmbd and one in smbd. The CVE numbers
    for these vulnerabilities are:

    CAN-2004-0807 for the smbd DoS
    CAN-2004-0808 for the nmbd DoS

    Urgency is set to "high" because of these vulnerabilities; so this
    new release propagates to testing ASAP.

    Thanks to the Samba Team and the Debian Security Team for the
    heads up.
  * Remove post-3.0.6 patches that are now in 3.0.7.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 13 Sep 2004 00:53:38 -0400

samba (3.0.6-4) unstable; urgency=low

  * Update LDAP schema (closes: #269797).
  * Applied a couple of upstream fixes that will be present in Samba 3.0.7.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  7 Sep 2004 15:28:42 -0400

samba (3.0.6-3) unstable; urgency=low

  * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704)

 -- Eloy A. Paris <peloy@debian.org>  Wed, 25 Aug 2004 01:58:37 -0400

samba (3.0.6-2) unstable; urgency=low

  * Added Danish debconf translation. Thanks to Claus Hindsgaul
    <claus_h@image.dk>. (closes: #232884)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Aug 2004 17:24:19 -0400

samba (3.0.6-1) unstable; urgency=low

  * New upstream version.
  * Incorporate Turkish debconf translation; thanks to Recai Oktas
    <roktas@omu.edu.tr>. (closes: #252031)
  * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
    <andrelop@debian.org>. (closes: #208113)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Aug 2004 12:34:44 -0400

samba (3.0.5-2) unstable; urgency=high

  * Patches from Fabien Chevalier <fabien.chevalier@supelec.fr>
    to fix:
    + libnss_wins crashes other programs (closes: #252591)
    + Can't list share files/dirs, but can acces deeper files/dirs
      (closes: #264572)
    + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871)
  * Urgency "high" to make it into testing as soon as possible since
    at least #265871 is pretty bad now that WinXP SP2 has been released.
    Thanks for the help Fabien! Both Vorlon and I have been very busy
    lately.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 18 Aug 2004 13:25:41 -0400

samba (3.0.5-1) unstable; urgency=high

  * New upstream version. Urgency "high" because of potential buffer
    overflows. The security fixes are the only difference between
    3.0.4 and 3.0.5.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 22 Jul 2004 08:07:36 -0400

samba (3.0.4-5) unstable; urgency=low

  * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4),
    not an unversioned libcupsys2-dev. (closes: #250523)

 -- Eloy A. Paris <peloy@debian.org>  Tue, 25 May 2004 07:43:54 -0400

samba (3.0.4-4) unstable; urgency=low

  * Rebuilt with libcupsys2-gnutls10 for unstable.
    Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736
    Closes: #250742, #250733

 -- Eloy A. Paris <peloy@debian.org>  Mon, 24 May 2004 22:32:52 -0400

samba (3.0.4-3) unstable; urgency=low

  * Color me stupid; I uploaded an experimental version to unstable.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 22 May 2004 00:40:58 -0400

samba (3.0.4-1) unstable; urgency=low

  Eloy:

  * New upstream version.
    Closes: #247640 (New upstream version available)
    Closes: #238905 (Printing crash fix)
    Closes: #247090 (panic in viewing printerqueue)

  Vorlon:

  * Incorporate Catalan debconf translations; thanks to
    Aleix Badia i Bosch <abadia@ica.es> and the Debian L10n Catalan Team.
    (closes: #236640)
  * Incorporate Czech debconf translations; thanks to
    Miroslav Kure <kurem@upcase.inf.upol.cz> (closes: #236274).
  * Update libsmbclient shlibs, due to an incompatibility with older
    versions that prevents gnome-vfs from working correctly
    (closes: #245869).

 -- Eloy A. Paris <peloy@debian.org>  Fri, 21 May 2004 11:42:19 -0400

samba (3.0.2a-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 24 Feb 2004 10:30:47 -0500

samba (3.0.2-2) unstable; urgency=high

  * Apply patch from Urban Widmark <urban@teststation.com> to prevent
    users from mounting remote filesystems containing suid files
    (closes: 232327).  This represents an exploitable security hole on
    systems running Linux 2.6 kernels.

 -- Steve Langasek <vorlon@debian.org>  Thu, 12 Feb 2004 21:38:40 -0600

samba (3.0.2-1) unstable; urgency=high

  * New upstream release.
    - LaMont Jones: correct false failure LFS test that resulted
      in _GNU_SOURCE not being defined (thus resulting in strndup()
      not being defined) (closes: #226694)
    - Segfault fixes. (closes: #230012) (maybe more, but we need bug
      reporters to confirm.)

    Urgency "high" due to a password initialization bug that could grant
    an attacker unauthorized access to a user account created by the
    mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and
    workarounds for those not wishing to upgrade (which is a bad idea
    anyway since this new release fixes lots of other bugs.)

 -- Eloy A. Paris <peloy@debian.org>  Sun,  8 Feb 2004 10:06:29 -0500

samba (3.0.1-2) unstable; urgency=low

  * Include ntlm_auth's man page.
  * Don't create directories outside of the source directory during
    package build time. (closes: #227221, #227238, #225862)
  * Don't include the "Using Samba" book in the swat package, just a
    symlink that points to the book included in the samba-doc package.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 13 Jan 2004 13:48:13 -0500

samba (3.0.1-1) unstable; urgency=low

  * New upstream version (closes: #225565)
  * Add support in the dhcp hook for netbios scope, and handle better
    the case of multiple DHCP-using interfaces (closes: #224109).
  * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant
    tail works. Thanks to Paul Eggert <eggert@twinsun.com>.
  * Include /usr/bin/ntlm_auth in the winbind package.
  * Run configure with "--with-piddir=/var/run/samba" since the
    default got changed to /var/run in this new upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 30 Dec 2003 16:21:31 -0500

samba (3.0.0final-1) unstable; urgency=low

  * It's here, it's here, it's here, Samba 3.0.0 is here!
  * Incorporate Japanese debconf translations; thanks to Kenshi Muto
    <kmuto@debian.org>. (closes: #209291)

 -- Eloy A. Paris <peloy@debian.org>  Thu, 25 Sep 2003 13:39:28 -0400

samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 13 Sep 2003 08:47:56 -0400

samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low

  * New upstream release. Last Release Candidate according to the
    Samba Team. Samba 3.0.0 is around the corner, in a week or so.
    - Fixes use of non-PIC code in nss shared libraries (closes: #208773)
    - 'unix password sync' option now runs the unix password program as
      root again (closes: #209739).
  * One-line patch to make packages buildable with distcc (closes: #210227)

 -- Eloy A. Paris <peloy@debian.org>  Tue,  9 Sep 2003 07:57:16 -0400

samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low

  * New upstream release.
  * Link against libgnutls7 instead of libgnutls5. (closes: #208151)

 -- Eloy A. Paris <peloy@debian.org>  Tue,  2 Sep 2003 21:37:13 -0400

samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low

  * New upstream version (skipped samba 3.0.0beta3 due to time
    constraints.) This ugly version number will go away when the final
    Samba 3.0.0 is released.
  * Drag new unpackaged tools into the packages: smbcquotas (smbclient),
    vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8)
    manpage (samba). (closes: #151158)
  * Switch to DH_COMPAT level 4:
    - no explicit conffile listings needed
    - the postinst for libsmbclient is now completely autogenerated
    - use the default init script handling (with support for
      invoke-rc.d) in debhelper, instead of the currently buggy upgrade
      path (closes: #185439)
    - add support for ${misc:Depends} in control for those packages with
      init scripts
  * Add versioned dependency on libpam-runtime and change
    /etc/pam.d/samba to use the new common PAM config blocks.
  * New python2.3-samba package (old python2.2-samba is no more.)
    (closes: #206171)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 25 Aug 2003 17:05:14 -0400

samba (3.0.0beta2-1) unstable; urgency=low

  * New upstream release
    - The smb.conf(5) manpage documents config options again
      (closes: #197963).
    - Handling of winbind/idmap has been restructured; domain members
      should be able to map domain accounts to local accounts again
      (closes: #196815).
    - Use the locale charset for 'display charset' by default
      (closes: #194406).
    - Fix for segfault in smbclient when using the -b option
      (closes: #196833).
    - Handle an empty 'passdb backend' list gracefully (closes: #193946).
  * Don't set 'display charset' anymore on upgrade, since this is now
    grabbed from the locale by default -- a much better option.
  * Removed time.c.patch which is now in the upstream sources.
  * Update FHS patch for two new tdb files (netsamlogon_cache.tdb,
    privilege.tdb).
  * Remove python-linker.patch, since the Kerberos package has been
    fixed to no longer use rpath
  * Remove configure.patch: the hppa glibc bug this was added for is
    long since fixed, and upstream isn't interested in supporting this
    kludge.
  * Update references to missing documentation in sample smb.conf file
    (closes: #187632).
  * Fix handling of krb5 link line, building on a patch from Stefan
    Metzmacher <metze@metzemix.de>.
  * Add patch so smbclient's tar support works with popt
    (closes: #194921).

 -- Steve Langasek <vorlon@debian.org>  Wed,  2 Jul 2003 20:59:09 -0500

samba (3.0.0beta1-2) unstable; urgency=low

  * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1)
    to make sure we get the right shlib dependencies (closes: #193149).
  * Update the dhcp config hooks so they're suitable for sourcing (i.e.,
    don't call "exit") (closes: #196477).
  * Bring package into line with current policy by adding support for
    the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs)
    by default
  * Make sure libpam-smbpass is a self-contained DSO.
  * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite
    the server list.
  * Fix python install script to ignore -Wl linker flags, as seen in the
    output from the latest krb5-config.
  * Add LDAP and Unicode information about upgrading from 2.2 to
    README.debian.
  * Remove dangerous and confusing browse options from the default
    smb.conf (closes: #198804).
  * Reorder smb.conf options for clearer grouping, and clarify the
    comments.
  * Add a default [print$] share to the sample smb.conf, and create the
    necessary tree under /var/lib/samba/printers. (closes: #168173)
  * s/winbind/idmap/ in smb.conf, since the option names have changed.
  * Fix the patch for postexec handling, so that we chdir("/") at the
    right time.

 -- Steve Langasek <vorlon@debian.org>  Thu, 12 Jun 2003 15:02:00 -0500

samba (3.0.0beta1-1) unstable; urgency=low

  * New upstream version.
    - fix for empty browselist bug (closes: #194553)
    - fix for tab completion segfault in smbclient (closes: #194776)
    - Samba now works as a domain member again without segfaulting
      (closes: #194134, #194394, #194775)
    - WinXP machines can join a Samba-controlled domain again
      (closes: #195362)
  * Build-depend on python-dev >= 2.2 instead of on just python-dev
    (without version).
  * Added Vorlon'n patch to source/lib/time.c to fix #194075.
    (closes: #194075)

 -- Eloy A. Paris <peloy@debian.org>  Sun,  8 Jun 2003 22:26:43 -0400

samba (2.999+3.0.alpha24-3) unstable; urgency=low

  * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324)
  * Rebuild against pristine Kerberos libs, to squelch warnings about
    versioned symbols. (closes: #194431, #194396)

 -- Steve Langasek <vorlon@debian.org>  Thu, 22 May 2003 15:32:00 -0500

samba (2.999+3.0.alpha24-2) unstable; urgency=low

  * Fixed description of the smbfs package. (closes: #194183)
  * Negate the sense of the unixsam check when upgrading. (closes: #194234)

 -- Steve Langasek <vorlon@debian.org>  Wed, 21 May 2003 12:21:53 -0400

samba (2.999+3.0.alpha24-1) unstable; urgency=low

  * New upstream version. (closes: #189354)

 -- Eloy A. Paris <peloy@debian.org>  Tue, 20 May 2003 13:55:57 -0400

samba (2.999+3.0.alpha23-5) unstable; urgency=low

  * Move the python package from section "net" to section "python".
  * Make sure we use PIC code for python on all platforms.
  * French translation of an additional debconf template, courtesy of
    Christian Perrier <bubulle@debian.org>. (closes: #188832)
  * Updated Brazilian Portuguese translation from André Luís Lopes
    <andrelop@ig.com.br>.
  * s/unixsam/guest/ everywhere, since the unixsam backend is now
    deprecated. (closes: #190095)
  * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not
    only does using /tmp violate SELinux policies, it introduces the
    possibility of data loss during the final copy if /tmp is a separate
    filesystem. (closes: #189823)
  * Pull in fix for SWAT, so that logins work again
    (closes: #188255, #192077).
  * Move passdb.tdb into /var/lib/samba, since it's not user-editable.
  * Make sure with don't ship any .cvsignore files.
  * Don't ship examples for python2.2-samba and samba-doc in an
    "examples" directory inside another "examples" directory.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  6 May 2003 12:05:46 -0400

samba (2.999+3.0.alpha23-4) unstable; urgency=low

  * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all
    non-RPC printing clients are working again.
  * Change shlibs to 0 instead of 0.1.  The library already in the
    archive is using this soname, and there are no packages depending
    on libsmbclient, so skip changing the package name for now.
    (closes: #188661)

 -- Steve Langasek <vorlon@debian.org>  Fri, 11 Apr 2003 14:42:00 -0500

samba (2.999+3.0.alpha23-3) unstable; urgency=low

  * Put the Samba Python modules in /usr/lib/python2.2/site-packages/,
    not in /usr/lib/python2.2/lib-dynload/.

 -- Eloy A. Paris <peloy@debian.org>  Wed,  9 Apr 2003 19:49:25 -0400

samba (2.999+3.0.alpha23-2) unstable; urgency=low

  * New package python2.2-samba that includes the Python modules
    included in the Samba sources. Feedback on these modules and the new
    package is welcome, as we (Debian Samba maintainers) don't use them.
    (closes: #170731, #173322)
  * Move libsmbclient-dev from section "devel" to "libdevel".
  * Fix panic action script to give a sensible error message instead of
    an empty backtrace when we don't have permission to attach to the
    process. (closes: #188164)
  * Fix libpam-smbpass so that it really does something. (closes: #178245)
  * Apply patch to fix printing-related segfaults. (closes: #188076)

 -- Eloy A. Paris <peloy@debian.org>  Sun,  6 Apr 2003 21:40:33 -0400

samba (2.999+3.0.alpha23-1) unstable; urgency=high

  * new upstream release, includes security fix for DSA-262
  * tweak the debconf templates to avoid references to specific
    front-ends (closes: #183718)

 -- Steve Langasek <vorlon@debian.org>  Sun,  9 Mar 2003 14:58:00 -0600

samba (2.999+3.0.alpha21-5) unstable; urgency=low

  * touch up the package descriptions a little bit (caps, punctuation)
  * remove addtosmbpass, which snuck back in when we weren't looking
  * reverse the position of the wins server tag, after looking more
    closely at the code (closes: #183061)
  * fix a glitch in the Spanish .po that rendered it invalid, plus a typo
  * updated Brazilian Portuguese templates (closes: #183295)
  * fix a typo in upstream manpage (s/shave/share/) (closes: #180546)
  * run sed before we run sed, to deal with crazybad special chars
    in the workgroup name (!) (closes: #176717)

 -- Steve Langasek <vorlon@debian.org>  Sat,  1 Mar 2003 15:14:00 -0600

samba (2.999+3.0.alpha21-4) unstable; urgency=low

  * add scripts to samba-common to grab the netbios-name-servers options
    if we're running a DHCP client (closes: #38413)
  * major rearrangement of build scripts: install target now operates on
    debian/tmp, not debian/samba, so we can see when new files are
    added and decide where to put them; several files that should have
    been in samba-common but were in samba (for the above reason) --
    smbcacls, -- have been moved, with a replaces: added.
  * Fix rc script so that whitespace is consistent between inetd and
    daemon modes (closes: #174677).
  * smbclient -M must always connect to port 139, because port 445
    doesn't support messaging and we can't do the port 135 stuff yet
    (closes: #175292, #167859).
  * Import the diff from upstream CVS, which has fixed a few bugs
    (closes: #178219, #177583, #181467, #181487, #181603, #175864).
    Remove a few patches of ours which are now superseded.
  * Add po-debconf support to the tree, for better i18n.
  * Install the libsmbclient.so symlink in the libsmbclient-dev package,
    per policy (closes: #181466).

 -- Steve Langasek <vorlon@debian.org>  Fri, 27 Dec 2002 00:37:00 -0600

samba (2.999+3.0.alpha21-3) unstable; urgency=low

  * Drop --with-ldapsam from the configure options, since this no longer
    means what we thought it did.  Revert patch for changing the 'passdb
    backend' defaults.
  * Add patch from CVS HEAD to fix pdbedit segfault; postinst script
    should work better now. (Closes: #173936)

 -- Steve Langasek <vorlon@debian.org>  Sun, 22 Dec 2002 13:29:00 -0600

samba (2.999+3.0.alpha21-2) unstable; urgency=low

  * add CONFIGDIR to the set of directories exported in the install
    target, so we don't try to write to /etc/ on the autobuilders.
  * Reset the default 'passdb backend' value to something sensible, so
    that we don't unnecessarily break upgrading systems (closes: #173731).

 -- Steve Langasek <vorlon@debian.org>  Fri, 20 Dec 2002 09:13:00 -0600

samba (2.999+3.0.alpha21-1) unstable; urgency=low

  * new upstream release, many patches now incorporated upstream

 -- Steve Langasek <vorlon@debian.org>  Mon, 16 Dec 2002 23:39:00 -0600

samba (2.999+3.0.alpha20-4) unstable; urgency=low

  * Remove obsolete comments about non-existant LDAP support in the
    Debian Samba packages. (Closes: #165035)
  * Apply patch for segfault in pam_smbpass when using the unixsam
    backend.
  * Drop support for nmbd in inetd, since it's not supported by
    upstream and is reported to cause problems (closes: #23243, #137726,
    165037).
  * Clarify example printing configs in smb.conf (closes: #168174).
  * Make sure nmbd still responds to SIGTERM if it has no interfaces to
    listen on (closes: #168079).
  * Fix to get samba working again on 64-bit archs, after a
    pointer<->int size mismatch bug.  Already fixed in upstream CVS.
  * Merge fix from CVS for broken libsmbclient.h references to internal
    structures (closes: #162956).
  * Add a default 'panic action' for Samba that will give us genuinely
    useful debugging information after a crash.
  * Fixed correct patch to example configurations in the libpam-smbpass
    packages (closes: #169350).
  * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead
    (closes: #169682).
  * Only ask the user for permission to edit if there's a chance of us
    damaging something.

 -- Steve Langasek <vorlon@debian.org>  Mon, 18 Nov 2002 19:53:00 -0500

samba (2.999+3.0.alpha20-3) unstable; urgency=low

  * Make sure smbstatus behavior is sane when Samba *has* been started,
    as well as when it has not (closes: #164179).  Thank to Robbert Kouprie
    <robbert@radium.jvb.tudelft.nl> for this patch.
  * Not using 'killall' in any of the maintainer scripts (the last one
    remaining was winbind.logrotate.) We now just use 'kill' to send
    a SIGHUP to a specific PID (which is stored in a file in
    /var/run/samba.)
  * Do not depend on procps because we're not using killall anymore.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 15 Oct 2002 22:15:57 -0400

samba (2.999+3.0.alpha20-2) unstable; urgency=low

  * fix an off-by-one error in smbd/lanman.c, which should shut off the
    flood of log messages (closes: #157432)
  * add a --config-cache option to the configure invocation, since
    autoconf 2.5 doesn't load config.cache by default (closes: #163504)

 -- Steve Langasek <vorlon@debian.org>  Sat,  5 Oct 2002 01:40:00 -0500

samba (2.999+3.0.alpha20-1) unstable; urgency=low

  * new upstream release
    - non-primary groups appear to work again (closes: #161271)
  * the official beginning of the upstream 3.0 branch
  * exit without error from smbstatus when no connections have
    been seen yet (closes: #161489)

 -- Steve Langasek <vorlon@debian.org>  Wed,  2 Oct 2002 19:02:00 -0500

samba (2.999+3.0cvs20020906-1) unstable; urgency=low

  * CVS update
    - domain authentication works again (closes: #158698)
  * Factor out common code in samba-common.config
  * Handle character set settings in smb.conf on upgrade
    (closes: #153913, #158770)
  * Don't use killall in logrotate script; there are better ways
    (closes: #160076)
  * Ignore value of 'hostname lookups' for hosts allow/hosts deny
    (closes: #154376)

 -- Steve Langasek <vorlon@debian.org>  Sat,  7 Sep 2002 11:46:00 -0500

samba (2.999+3.0cvs20020829-1) unstable; urgency=low

  * CVS update.
  * Move the smb.conf manpage to the samba-common package (closes: #159572)

 -- Steve Langasek <vorlon@debian.org>  Thu, 29 Aug 2002 17:53:25 -0500

samba (2.999+3.0cvs20020827-1) unstable; urgency=low

  * CVS update. (Closes: #158508)
  * Part 1 of 3 of the library separation patch that Vorlon wrote has
    gone upstream - removed the patch from our patches/ directory.
  * Debconf note to warn users that their smb.conf will be re-written
    and changed if they use Swat to maintain it. (Closes: #158479)
  * Fixed typo in samba.prerm.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Aug 2002 15:23:23 -0400

samba (2.999+3.0cvs20020825-2) unstable; urgency=low

  * scale back the tdbsam migration support, because of undesirable
    side-effects; now always defaults to 'no'.
  * strip out hyperactive library dependencies that are only needed by
    smbd (closes: #155156).
  * nuke any broken registry.tdb files left by previous CVS snapshots.
  * support rolling back the smbpasswd->tdbsam conversion on downgrade,
    since many people are likely to need to downgrade for a while.
  * remove postrm handling of legacy directories, and add handling of
    current ones.

 -- Steve Langasek <vorlon@debian.org>  Sun, 28 Jul 2002 09:44:24 -0500

samba (2.999+3.0cvs20020825-1) unstable; urgency=low

  * CVS update. These packages are based on Samba 3.0alpha19 + any
    code commited after 3.0alpha19 was released.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 25 Aug 2002 14:56:46 -0400

samba (2.999+3.0cvs20020723-1) unstable; urgency=medium

  * remove spurious line from samba.config
  * migrate from smbpasswd to tdbsam
  * re-add the pdbedit util and manpage
  * compile in ldapsam support (closes: #146935)
  * add PRIVATEDIR to the list of vars we override for the install
    target, so Samba doesn't try to create /etc/samba (closes: #153746).
  * fix makefile handling of LOGBASEDIR, so that logs always end up in
    the right place (closes: 153727).
  * Fixed bug in the FHS migration path that causes nmbd to read its
    state from one location, but write it out to another. (closes: #154210)
  * Make sure nmbd is always looking for wins.tdb in the same place.

 -- Steve Langasek <vorlon@debian.org>  Fri, 19 Jul 2002 21:38:54 -0500

samba (2.99.cvs.20020713-1) unstable; urgency=low

  * first attempt for 3.0pre.
  * only post a debconf note about moving logfiles if we're upgrading
    from a version that had the logfiles in the old location
    (closes: #152924).

 -- Steve Langasek <vorlon@debian.org>  Sat, 13 Jul 2002 12:54:25 -0500

samba (2.2.5-2) unstable; urgency=low

  * No longer ship make_printerdef, which is deprecated. (closes: #63059)
  * Clean up some empty directories from the samba package.
  * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860).
  * Clean up per-package documentation lists, to reduce clutter
    (closes: #147638).
  * Make sure we don't ship pdbedit's man page since we are still using
    smbpasswd passwords. (closes: #152208)
  * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find
    it (closes: #148586).
  * reorder postinst, so that installing samba-common from scratch loads
    the debconf answers properly (closes: #151985).
  * add lintian overrides for winbind, to eliminate some noise.
  * rename pam_smbpass changelog to comply with policy.

 -- Steve Langasek <vorlon@debian.org>  Sun, 23 Jun 2002 22:45:04 -0500

samba (2.2.5-1) unstable; urgency=low

  * New upstream release.

 -- Eloy A. Paris <peloy@debian.org>  Sun,  9 Jun 2002 15:49:21 -0400

samba (2.2.4+2.2.5pre1-1) experimental; urgency=low

  * Getting ready for Samba 2.2.5.
  * Remove patches/parse_spoolss.patch, now included upstream.
  * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in
    2.2.4-1. We don't use POSIX ACL support ourselves, so we'd
    appreciate reports from those using this feature so we can
    be sure this works.
  * Fix the filename-matching algorithm used for smbtar's 'exclude'
    functionality. (closes: #131571)
  * Look for secrets.tdb in /var/lib/samba, and handle in the postinst.
    This is not really a config file, because users don't edit it.
    (closes: #147429)
  * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen
    <Tommi.Komulainen@iki.fi> for the patch. (closes: #144847)

 -- Eloy A. Paris <peloy@debian.org>  Tue, 28 May 2002 11:33:51 -0400

samba (2.2.4-1) unstable; urgency=low

  * New upstream release (closes: #144713)
  * Building with POSIX ACL support (closes: #137819)
  * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055)
  * Compile with --with-automount, for NIS homedir support (closes: #123396)
  * Add a proper 'flags' field to the mount entry we write to /etc/mtab;
    fixes a display bug with mount (closes: #140397)
  * Added logic to /etc/init.d/samba so a help message is printed out
    when Samba is running from inetd _and_ we are not booting, i.e. the
    user called the init script manually. Thanks to Francesco
    Potorti <pot@gnu.org> for the suggestion on how to implement this.
    (Closes: #139807, #140204)
  * samba.postinst: added logic so we don't call /etc/init.d/samba if
    we are running from inetd (this prevents the stupid help message
    to be printed during package upgrades if we are running from inetd.)
  * samba.prerm: idem.
  * /etc/init.d/samba: delete stale PID files after nmbd and smbd are
    stopped. This prevents start-stop-daemon from printing an ugly
    error message when called from '/etc/init.d/samba stop'. I prefer
    this than running start-stop-daemon with --oknodo because
    start-stop-daemon might print other important error messages that with
    --oknodo it would otherwise not print. (Closes: #102187, #109301)
  * Patch from jerry@samba.org to fix parsing of spoolss structures.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 23 May 2002 23:16:52 -0400

samba (2.2.3a-7) unstable; urgency=medium

  * More README.debian updates.
  * Neutralize the smb.conf 'lock dir' directive, which doesn't mean
    what the FHS says it should, and causes us no end of grief.
    (Closes: #122299)
  * LPRng-handling patch so that jobs printed to recent versions of
    LPRng show up properly as 'done' instead of 'paused' in the Windows
    print queue.  Thanks to Jaroslav Serdula <serdula_jaroslav@vse.sk>
    for this patch. (Closes: #139458)
  * Applied patch from Urban Widmark <urban@teststation.com>
    (smbfs upstream maintainer) to add a '-n' option to smbmount
    that does the same as mount's '-n'. (Closes: #139590)
  * Minor tweak to unpatch-source so we unpatch sources in the
    reverse order we patched them.
  * Don't depend on grep in samba.prerm to determine if Samba was
    running before the upgrade starts.
  * Tweak the wording of debconf templates.
  * Incorporate debconf translations for French, Spanish and Portuguese;
    thanks to Carlos Valdivia Yagüe <valyag@hotpop.com> (es),
    Andre Luis Lopes <andrelop@ig.com.br> (pt_BR), and Philippe
    Batailler and Denis Barbier <barbier@debian.org> (fr).
    (closes: #142657, #142659, #141551, #141699, #141682)
  * Fixed symlinks in the swat package so the point to /usr/share/doc/
    instead of /usr/doc/. Added note to the description of the
    swat packages that says that samba-doc must be installed for
    the on-line documentation to work. Thanks to Torne Wuff
    <torne@wolfpuppy.org.uk>. (Closes: #95437)
  * 'dh_installinit -n' gives us no initscript handling -- we need to
    handle all starting and stopping of daemons ourselves, which wasn't
    happening in the {pre,post}rm scripts.
  * Vary the priority of the debconf question "Do you want to generate
    /etc/samba/smbpassd?" depending on whether the file already exists.
    File exists -> priority 'medium', file does not exist -> priority
    'low'. Changed priorities of all other questions from 'high' to 'medium'.

 -- Steve Langasek <vorlon@debian.org>  Sat, 20 Apr 2002 17:48:27 -0400

samba (2.2.3a-6) unstable; urgency=low

  * Call db_stop as soon as we're done with debconf in the postinst, to
    avoid hanging bugs (closes: #137813)
  * Ony call 'update-inetd --add' on first installation, just as we only
    call 'update-inetd --remove' on package purge.
  * Bring our shipped smb.conf closer in line with the upstream
    defaults: don't twiddle the send/recv buffer sizes, since the Linux
    kernel already provides a much better default setting
     (closes: #80966, #80934, #137415, #133477)
  * Added libnss_wins.so to the winbind package (closes: #137201)
  * Updates to README.debian.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 12 Mar 2002 10:57:40 -0500

samba (2.2.3a-5) unstable; urgency=low

  * Having multiple workgroup lines in your smb.conf, though wacky, is
    perfectly valid.  Account for this in samba-common.config.
    (closes: #137157)

 -- Steve Langasek <vorlon@debian.org>  Sun, 10 Mar 2002 21:52:51 -0600

samba (2.2.3a-4) unstable; urgency=low

  * Fixed typo in samba.postinst. Cosmetic fixes there as well.
  * Fix to improper usage of /usr/bin/tr in samba-common config script
    (closes: #137744)

 -- Steve Langasek <vorlon@debian.org>  Sat,  9 Mar 2002 14:14:02 -0500

samba (2.2.3a-3) unstable; urgency=medium

  * Make sure /etc/init.d/samba is executable before calling it
    in the postinst. Quickly checked all other maintainer scripts
    to make sure we are not calling an init script if it is not
    executable. (closes: #137321)
  * Fix up maintainer scripts to detect if samba was not running before
    an upgrade. (closes: #33520, #130534)
  * Make sure /etc/samba/ is included in the samba-common package.
    Closes: #137157

 -- Steve Langasek <vorlon@debian.org>  Fri,  8 Mar 2002 11:13:21 -0500

samba (2.2.3a-2) unstable; urgency=low

  * merge in debconf support:
    - Moved all smb.conf-related questions to samba-common (smb.conf
      is part of the samba-common package, not the samba package.)
    - smb.conf is not a samba-common conffile anymore since it is
      being managed by debconf. It is ABSOLUTELY necessary to make
      sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes
      made via debconf. In other words, any changes made by the user
      should be honored by the debconf interface.
    - samba.postinst now moves old log files from /var/log/ to
      /var/log/samba/. There's a Debconf note that informs the user
      the log files are stored now in a new location.
    - debian/control:
      + Make samba depend on debconf.
    - New file debian/samba.templates.
    - New file debian/samba.config.
    - Re-worked debian/samba.postinst.
      + Got rid of all /etc/samba/debian_config sillyness.
    - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces
      it.
    - Removed debian/samba.prerm.
    - Cleaned up /etc/init.d/samba.
      + Added infrastructure for debconf.
      + Got rid of all /etc/samba/debian_config sillyness.
      + Got rid of /etc/samba/smbpasswd conversion stuff for
        compatibility with versions of Samba < 2.0.0final-2.
    (closes: #127959, #34408, #113594)
  * make samba.postinst ignore the absence of /var/log/{s,n}mb*;
    makes for a clean upgrade path.
  * Building with MSDFS support (closes: #116793)

 -- Steve Langasek <vorlon@debian.org>  Tue,  5 Mar 2002 14:14:33 -0600

samba (2.2.3a-1) unstable; urgency=low

  * New upstream version (closes: #135001)
  * Potato builds were failing because debian/rules was not creating
    debian/winbind/etc/logrotate.d/. A user having problems creating
    Potato packages brought this to my attention. dh_installlogrotate
    takes care of creating the directory for us, that's why we didn't
    notice.
  * Removed code that converts /etc/samba/smbpasswd from an ancient
    format to the new format of Samba 2.0.0 and later.
    Closes: #134375 - samba: postinst failed due to missing
            /usr/bin/convert_smbpasswd.
  * Re-organized FHS migration code in samba.postinst. Make sure we
    don't fail when we move files that don't exist.
    Closes: #133813 - samba: Install failed.
  * Adding docs. to the libpam-smbpass package.
  * Remove man pages for findsmb because we are not providing this
    script.
    Closes: #134181 - findsmb referenced, but not included.
  * Removed replace.patch because it is now present upstream.
  * Added patch from Jerry Carter to fix a problem when saving
    document preferences for printing from NT clients.
  * The real winbindd daemon is a forked process so we can't use
    --make-pidfile when calling start-stop-daemon. Fixed
    /etc/init.d/winbind to work around the issue. Thanks to
    Lin Li <linl@xandros.com> for the patience and for reporting
    the problems. Hopefully I got it right this time.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 20 Feb 2002 18:39:03 -0500

samba (2.2.3-6) unstable; urgency=low

  * Make sure there are actual files in /var/state/samba before trying
    to move them (Closes: #133534, #133510).
  * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly
    again.

 -- Steve Langasek <vorlon@debian.org>  Tue, 12 Feb 2002 09:19:29 -0600

samba (2.2.3-5) unstable; urgency=low

  * Whoops, missed a spot on the samba.postinst -- will fail badly if
    /var/state/samba/ no longer exists.  Better get this fix into the
    next upload. ;) (Closes: #133088)
  * Regenerate configure only if it is older than configure.in.
  * Fix smbd handling of network neighborhood lists, which was missed
    in the FHS conversion (Closes: #133091)

 -- Eloy A. Paris <peloy@debian.org>  Sat,  9 Feb 2002 16:37:57 -0500

samba (2.2.3-4) unstable; urgency=low

  * FHS cleanup; files in /var are now properly sorted according to
    their nature. (Closes: #102101)
  * Remove patches to source/configure, since we now call autoconf to
    regenerate this file cleanly.
  * lintian fixes:
      - Create winbind.conffiles and add /etc/logrotate.d/winbind and
        /etc/init.d/winbind to it.
      - Use a relative symlink for /usr/lib/cups/backend/smb.
      - Removal of a .cvsignore file in the samba-doc package.
  * winbind.init fixes:
      - Corrected name of the pid file (Steve)
      - Make start-stop-daemon create a pid file for winbindd since it
        does not create one on his own.
  * #DEBHELPER# is not needed in samba.postinst because we are adding
    manually everything that debhelper adds automatically. In fact,
    since we are calling update-rc.d without standard paramaters I
    think we can't use #DEBHELPER#.
  * Fix fatal syntax error in samba.prerm.

 -- Steve Langasek <vorlon@debian.org>  Thu,  7 Feb 2002 13:12:08 -0500

samba (2.2.3-3) unstable; urgency=low

  * work on lintian-cleanness in the package (wrong permissions,
    maintainer scripts in need of debhelpering)
  * /lib/security/pam_smbpass.so is now being included in the
    libpam-smbpass package only, and not in both the libpam-smbpass and
    samba packages (which was the case prior to 2.2.3-3.)
  * Instead of making our patch scripts executable in the rules file
    we run them through /bin/sh.
  * New 'winbind' package that has all the winbind stuff that was in the
    samba package in 2.2.3-2 and before.
  * Added replace.patch: patch from Jeremy Allison to fix problems when
    replacing or overwriting files in a Samba share. Patch was sent to
    the samba mailing list.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  5 Feb 2002 21:12:48 -0500

samba (2.2.3-2) unstable; urgency=low

  * add support to debian/scripts/{patch-source,unpatch-source} for
    automatic updating and cleaning of <version.h>. This was a request
    from the Samba Team: they wanted us to clearly mark our packages
    so it is always known a user is running Samba with (possibly)
    Debian-specific patches.
  * Change init.d killscript link to K19samba, so we stop before autofs
    (closes: 117327)
  * Make our patch scripts executable in the rules file -- dpkg won't do
    this for us (closes: #132415).

 -- Steve Langasek <vorlon@debian.org>  Mon,  4 Feb 2002 09:51:00 -0600

samba (2.2.3-1) unstable; urgency=low

  * New upstream release (closes: #131228).
  * Restructured build system that provides DBS-like separation of
    patches
  * Fix typo in smbfs description (closes: #116209).
  * Use killall -q in logrotate.d script, to avoid spurious cron
    emails (closes: #130100).

 -- Steve Langasek <vorlon@debian.org>  Sat,  2 Feb 2002 19:56:18 -0500

samba (2.2.2-12) unstable; urgency=high

  * (Steve) Patch for source/client/client.c.
    Closes: #86438 smbclient: Transfering several GB causes the average
            speed to be messed up.
  * Uploading with urgency=high to expedite the move from unstable
    to testing because of the security problem fixed in -11.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 25 Jan 2002 22:31:12 -0500

samba (2.2.2-11) unstable; urgency=low

  * Building with --with-libsmbclient. We have created two new
    packages: libsmbclient and libsmbclient-dev. Hopefully this
    will help some people that want to add the capability of
    speaking SMB to their applications.
    Closes: #117132 - libsmbclient support library?
  * (Steve) Make swat do the right thing when reading (parsing)
    the saved preferences in smb.conf.
    Closes: #55617 swat mutilates the linpopup message command.
  * Updated README.Debian. Updated descriptions in debian/control.
  * Remembered to bump up version number in source/include/version.h
    (need to automate this or else I'll keep forgetting.)
  * (Steve) one liner for source/web/diagnose.c.
    Closes: #106976 - smbd/nmbd not running message with swat/linuxconf.
  * Added '|| true' to the post-rotate script so logrotate doesn't
    fail if either nmbd or smbd is not running.
    Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process.
  * Fixed incorrect file locations in swat's man page and added a
    Debian-specific note to /usr/share/doc/swat/README.
    Closes: #71586 swat: needs documentation fixes for debian.
  * smbmount in the smbfs package does not have the setuid bit set.
    Apparently, smbmount uses libsmb without checking the environment.
    Thanks to Christian Jaeger <christian.jaeger@sl.ethz.ch> for
    finding the local root exploit.
  * Applied old patch from Jerry) Carter" <jerry@samba.org> to correct
    the following two problems in Samba 2.2.2:
    - %U and %G could not be used in services names
      in smb.conf.
    - %G would fail to be expanded in an "include = ..."
      line.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 19 Jan 2002 21:35:26 -0500

samba (2.2.2-10) unstable; urgency=low

  * (Steve) Add missing manual pages.
    Closes: Bug#128928: missing manpages in smbfs.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 13 Jan 2002 14:39:55 -0500

samba (2.2.2-9) unstable; urgency=low

  * (Steve) Fix broken URL's in HTML docs.
    Closes: Bug#17741: bad links in html docs (at last!!!)

 -- Eloy A. Paris <peloy@debian.org>  Fri, 11 Jan 2002 13:37:07 -0500

samba (2.2.2-8) unstable; urgency=low

  * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in
    debian/control so rpcclient.1, which was in samba-2.2.2-5, does not
    cause problems now that it is part of smbclient (>= 2.2.2-6).  Closes:
    Closes: Bug#128684: error upgrading smbclient in sid.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 11 Jan 2002 11:42:40 -0500

samba (2.2.2-7) unstable; urgency=low

  * (Steve) Patch to make behavior honor what the docs. say about "hosts allow"
    taking precedence over "hosts deny".
    Closes: Bug#49249: swat: error with host deny ?!

 -- Eloy A. Paris <peloy@debian.org>  Thu, 10 Jan 2002 12:36:58 -0500

samba (2.2.2-6) unstable; urgency=low

  * (Steve) Adds manpage for rpcclient to the proper file,
    removes smbtorture from the distro because this tool isn't intended for
    widespread consumption.
    Closes: #63057 - no manual page for smbtorture.
  * (Steve) Removed -gnu from the configure arguments (--build, --host) in
    debian/rules so config.sub is able to properly create the host and target
    tuples.

 -- Eloy A. Paris <peloy@debian.org>  Wed,  9 Jan 2002 14:39:51 -0500

samba (2.2.2-5) unstable; urgency=low

  * Fixes from vorlon:
  * Use /usr/bin/pager instead of more.
    Closes: #125603: smbclient violates pager policy.
  * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd
    a SIGHUP to have the log files reopened, fixes to
    /etc/logrotate.d/samba.
    Closes: #127897: log file rotation.
    Closes: #118277: /etc/logrotate.d/samba not listed in conffiles.
  * s/covert/convert/.
    Closes: #121653 probable typo in install message.

 -- Eloy A. Paris <peloy@debian.org>  Sun,  6 Jan 2002 03:14:58 -0500

samba (2.2.2-4) unstable; urgency=low

  * Applied patch from Steve to work around problem in glibc that affects the
    HPPA architecure. The patch detects the error condition at configure time
    and compiles without LFS support if necessary.
    Closes: Bug#126763: samba completely broken on hppa.
  * Including unicode_map.1251.
    Closes: Bug#126719: samba-common: unicode_map.1251 missing.
  * Updated smbd daemon version to match Debian package version.
    Closes: Bug#127199: Package version and smbd daemon version don't match.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 31 Dec 2001 14:32:47 -0500

samba (2.2.2-3) unstable; urgency=low

  * Added some spaces in package description in debian/control.
    Closes: #120730 - missing spaces in package description for nice
            alignment.
  * Spelling fixes.
    Closes: #125328, #125329, #125330, #125367, #125365, #125403.
  * Steve Langasek <vorlon@debian.org> is the co-maintainer of the Debian
    Samba packages!!! Added him to the uploaders field in debian/control.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 18 Dec 2001 00:54:25 -0500

samba (2.2.2-2) unstable; urgency=low

  * Backed out changes to source/filename.c per Andrew Tridgell's request.
    This changes were introduced in 2.2.1a-7 as an attempt to fix #47493.
    Tridge found out that they break smbd.
  * Changed version number in source/includes/version.h so it is clear that
    this is a version of Samba packaged for Debian. This is another request from
    Tridge and will help the Samba Team to get bogus bug reports.
  * Added Samba-HOWTO-Collection.pdf and other README files to the
    /usr/share/doc/<package>/ directories.
  * Installing libnss_winbind.so and pam_winbind.so.
    Closes: #116790: nss and pam modules for winbind missing.
  * Removed user-emacs-settings from changelog.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 29 Oct 2001 19:16:26 -0500

samba (2.2.2-1) unstable; urgency=low

  * New upstream version.
  * Temporary fix for #113763 (Steve Langasek)
  * Quick hack to avoid smbmount reveal password length. Please note
    that even with this hack there is a small window when password is
    completely visible with 'ps aux'. There are other methods that should
    be used to automate mounting of SMB shares.
    Closes: #112195: smbmount-2.2.x reveals password length.
  * Applied patch from Steve Langasek <vorlon@debian.org> to prevent
    forcing use of setresuid() in Sparc.
    Closes: #112779: samba build forces use of setresuid, which causes
                     smbd to fail on Sparc.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 15 Oct 2001 10:26:10 -0400

samba (2.2.1a-9) unstable; urgency=low

  * Replaced $(LD) with $(CC) all the way through source/Makefile.
    Closes: #111036: ld shouldn't be used to link shlibs.
  * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and
    sgml as well.)
    Closes: #110963: smb.conf: mail should be /usr/bin/mail.
  * Documented better smbclient's -W behavior. Patch from Steve
    Langasek.
    Closes: #53672: smbclient: -W flag is interpreted as domain, not
            workgroup.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  4 Sep 2001 23:10:41 -0400

samba (2.2.1a-8) unstable; urgency=low

  * Set some reasonable default perms for the samba logdir (again,
    thanks to vorlon :-)
    Closes: #72529: insecure permissions on log files.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 26 Aug 2001 15:40:47 -0400

samba (2.2.1a-7) unstable; urgency=low

  * Another attempt at fixing #47493. Patch from Steve Langasek
    <vorlon@netexpress.net>. Let's keep our fingers crossed Steve!

 -- Eloy A. Paris <peloy@debian.org>  Sun, 26 Aug 2001 13:37:06 -0400

samba (2.2.1a-6) unstable; urgency=low

  * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing
    smbd to die with signal 11 under some unidentified situations.
    Closes: #109774: Latest debian version breaks printer driver download.
    Closes: #109946: not all files appear in samba-exported directories.
  * Another patch from Steve Langasek. This one adds quotes around
    printer names for print systems it's reasonable for Debian to
    support. Together with the patch in #29957 (see changelog for
    2.2.1a-4), this should take care of the problems with multi-word
    printer names in Samba.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 24 Aug 2001 21:12:27 -0400

samba (2.2.1a-5) unstable; urgency=low

  * Important changes that affect how Samba is built on Debian
    machines are implemented in this release. All of this changes
    were suggested by the energetic Steve Langasek <vorlon@debian.org>,
    and his arguments were so sound and reasonable that I decided
    to implement them. Here's Steve's original changelog:

       * Fix up the build system to avoid needing to run configure
         as root to answer questions we already know the answers to.
       * In the process, make surprising progress towards being able to
         cross-compile the samba packages.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 24 Aug 2001 01:08:06 -0400

samba (2.2.1a-4) unstable; urgency=low

  * Fixed typo in smbmount's mount page.
    Closes: #109317: smbfs: mistype in smbmount manpage.
  * Included symlink to smbspool to better support CUPS printing.
    Closes: #109509: include symlink for cups samba support.
  * Applied patch from Steve Langasek <vorlon@netexpress.net> to
    fix bug #29957.
    Closes: #29957: samba strips trailing " from strings in smb.conf.
  * First attempt at fixing #47493. Another patch from Steve "I want
    a bug-free Samba" Langasek.
    Closes: #47493: Samba doesn't handle ':' in dir names right.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 21 Aug 2001 23:26:38 -0400

samba (2.2.1a-3) unstable; urgency=low

  * Steve Langasek <vorlon@netexpress.net> has been hard at work in
    the last few days looking at the long list of open bugs filed
    against the Samba packages. I don't know how to thank him. It's been
    a pleasure working with Steve, and all the fixes, patches, etc. in
    this release come from him. The bug list is greatly reduced thanks
    to Steve's efforts.
  * Steve's additions/modifications/patches/etc. are:
    - New package that (libpam-smbpass) provides pam_smbpass. Before, this
      was provided in another package but now the sources are part of
      the Samba sources so we can start providing it from here.
      Closes: #107043 - pam_smbpass now present in Samba source,
        should be built from there
    - Patch to source/smbd/service.c that allows admins to call
      /bin/umount from the root postexec of a Samba share.
      Closes: #40561 - samba pre/postexec commands do not work.
    - Clear TMPDIR before starting smbd in /etc/init.d/samba.
      Closes: #51295 - Problems with Samba and TMPDIR.
    - Correction to documentation of "guest only".
      Closes #38282 - "guest only" share still requires a password.
  * Applied patch from Santiago Vila <sanvila@unex.es> to convert
    /usr/sbin/mksmbpasswd from a shell script into a real awk script.
    Sorry it took so long, Santiago; I hadn't realized you even
    provided a patch :-)
    Closes: #77891 - mksmbpasswd could be a real awk script.
  * Updated description of the smbfs and smbclient packages. Also have
    each package recommend the other.
    Closes: #108650: Should suggest or recommend smbfs.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 13 Aug 2001 22:21:55 -0400

samba (2.2.1a-2) unstable; urgency=low

  * Build-depends: depend on debhelper (>=2.0.103).
    Closes: #105795: Build-Depends are wrong.
  * Run samba's preinst and postinst scripts without -e so failed commands
    do not abort installation.
    Closes: #106384: postinstall crashes abnormally. (And really closes
      #104471.)

 -- Eloy A. Paris <peloy@debian.org>  Thu, 26 Jul 2001 00:30:37 -0400

samba (2.2.1a-1) unstable; urgency=low

  * New upstream version.
  * Make sure samba's postinst script exits with a zero status.
    Closes: #104471: Samba postinst problem.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 12 Jul 2001 21:55:21 -0400

samba (2.2.1-1) unstable; urgency=low

  * New upstream version.
    Closes: #103339: config.guess and config.sub update required.
    Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to
                    incompatibility with PAM.
    Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2.
    Closes: #95777: Samba 2.2 is unable to join or authenticate against
                    Samba 2.2 PDC domain.
    Closes: #68842: samba should use PAM for password changing (I
                    haven't personally tried this one, but it's been
                    advertised this works.)
    Closes: #102506: PAM account checking fails.
    Closes: #102518: Complains about unknown paramter "obey pam
                     restrictions"
    Closes: #94774: Build failure on PARISC machines.
  * Moved away from /etc/cron.weekly/samba for log file rotation.
    Now using logrotate.
    Closes: #95548: typo in /etc/cron.weekly/samba.
    Closes: #74951: nmbd does not rename its log file.
  * Removed Debian-specific addtosmbpass.8 man page since this script
    is not longer provided upstream. Users should use the smbpasswd
    program instead.
  * Updated sample /etc/samba/smb.conf to reflect the recent changes
    affecting handling of PAM authentication. Also updated
    /etc/pam.d/samba.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 11 Jul 2001 00:44:14 -0400

samba (2.2.0.final.a-1) unstable; urgency=high

  * New upstream version (contains security fix from DSA-065-1.)
    Closes: #97241: samba 2.2.0 fails to process hostnames in
      "hosts allow" config line.
  * Removed Debian-specific addtosmbpass.8 man page since this script
    is not longer provided upstream. Users should use the smbpasswd
    program instead.
    Closes: #98365: addtosmbpass is missing from 2.2.0.final-2.
  * Updated sample /etc/samba/smb.conf to reflect the recent changes
    affecting handling of PAM authentication. Also updated
    /etc/pam.d/samba.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 24 Jun 2001 11:11:59 -0400

samba (2.2.0.final-2) unstable; urgency=low

  * Added libcupsys2-dev to Build-Depends.
  * Samba depends now (again) on netbase so update-inetd is always
    available for the Samba maintainer scripts.
    Closes: #86063: Fails to uninstall if inetd is not installed.
  * Updated source/config.{sub,guess} so ARM built doesn't fail.
    Closes: #94480: config.sub out of date; can't build on arm.
    Closes: #85801: config.sub/guess out of date.
  * Not using brace expansion, i.e. {foo,bar} in any of the maintainers
    scripts nor in debian/rules.
    Closes: #88007: samba postrm has is not POSIX sh compliant.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 21 Apr 2001 17:27:18 -0400

samba (2.2.0.final-1) unstable; urgency=low

  * New upstream release. Lots of new things. See WHATSNEW.txt.
  * Goofy version number because of my stupidity when assigning version
    numbers to the CVS packages I have been uploading to experimental.
    Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release
    will follow soon.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 17 Apr 2001 22:58:14 -0400

samba (2.2.0.cvs20010416-1) experimental; urgency=low

  * CVS update.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 16 Apr 2001 21:25:15 -0400

samba (2.2.0.cvs20010410-1) experimental; urgency=low

  * CVS update.
  * Added libreadline4-dev to Build-Depends.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 10 Apr 2001 16:53:45 -0400

samba (2.2.0.cvs20010407-1) experimental; urgency=low

  * CVS update. Includes what is in 2.2.0alpha3.

 -- Eloy A. Paris <peloy@debian.org>  Sat,  7 Apr 2001 16:00:33 -0400

samba (2.2.0.cvs20010316-1) experimental; urgency=low

  * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch
    from Samba CVS.
  * Not compiling rpctorture as it has compile errors. Change in
    debian/rules.
  * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now
    the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is
    needed to use smbfs. Updated debian/control, debian/rules and
    README.Debian to reflect this change.
  * Added to swat a versioned dependency on samba (so a user is forced to
    install a new version of swat each time a new version of samba is
    installed.)

 -- Eloy A. Paris <peloy@debian.org>  Sun, 18 Mar 2001 14:21:14 -0500

samba (2.0.7-5) unstable; urgency=medium

  * Transition from suidmanager to dpkg-statoverride.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 18 Jan 2001 23:51:56 -0500

samba (2.0.7-4) unstable; urgency=medium

  * Applied Urban Widmark <urban@teststation.com> fixes to smbmount. Urban
    is the maintainer of the smbfs in the kernel and of the userland
    utilities.
  * Links to HTML documents are correct now.
    Closes: #69439: swat: Broken help file symlinks
    Closes: #72615: samba-doc directory changed: removed htmldocs from path
    Closes: #75847: swat: Wrong symlink
    Closes: #66857: Wrong links to html documents.
    Closes: #77912: misplaced documentation symlinks for swat
  * Building Samba with CUPS support. For this I reverted the change to
    source/configure.in that I did in 2.0.7-3 and re-ran autoconf.
    Closes: #59038: samba: not compiled with cups support.
  * Fix against previous known/unknown user time difference patch to swat
    (make username / password lookups take the same time.) Remove CGI
    logging code in Swat.
    Closes: #76341 - Security holes in swat
  * Updated Build-depends.
  * Updated debian/copyright to refer to the correct location of the GPL.
  * debian/rules: changed DESTDIR to `pwd`/debian/samba (was
    `pwd`/debian/tmp.)
  * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some
    strange reason dh_installdirs is not creating debian/tmp/ so I needed
    to tweak everything to install stuff in debian/samba rather than in
    debian/tmp.)
  * debian/control: changed section of samba-docs to 'doc' (was 'docs')
  * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules
    and source/scripts/installswat.sh.)
  * Fixed (by tweaking debian/rules)
    /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid.
  * Added "Provides: samba-client" to smbclient's section in control.
    Closes: #71143: smbclient: Smbclient should provide samba-client.
  * Fix for desired_access being zero in map_share_mode() (patch to
    source/smbd/nttrans.c.) Thanks to Gary Wilson
    <wilsong@sergievsky.cpmc.columbia.edu> for bringing this patch to my
    attention.
  * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and
    2.2.x kernels even when the build is done in a system running
    a 2.2.x kernel.
    Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but
                    doesnt depend on it.
    Closes: #72758: README.Debian should comment on 2.0.x kernels.
    Closes: #56935: Samba 2.0.6 and Kernel 2.0.x.
    Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info.
    Closes: #60580: samba: failed to set gid.
    Closes: #64280: Samba panics, can't set gid.
    Closes: #66816: Must deal with brokenness under 2.0.x.
    Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK.
    Closes: #69735: PANIC: failed to set gid
    Closes: #66122: "smbclient -L localhost -U%" returns with "tree
                    connect failed: code 0".
    Closes: #57637: Samba says tree connect error.
    Closes: #58015: potato samba wins support is broken.
  * Fixed comments in sample smb.conf to point to the correct location.
    Closes: #69578: comments in smb.conf points to wrong path.
  * Move codepages from /etc/samba/codepages/ to
    /usr/share/samba/codepages/.
    Closes: #63813: samba; codepages should go in /usr/lib.
  * Moved /var/samba/ to /var/state/samba/.
    Closes: #49011: samba package not FHS compliant.
  * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain()
    is found.
    Closes: #44558: netgroup support missing in samba 2.0.5a-1.
  * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and
    --exec. Got rid of --exec so --pidfile works.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Jan 2001 00:15:57 -0500

samba (2.0.7-3) frozen unstable; urgency=high

  * Release manager: this closes a RC bug.
  * Commented out the section in source/configure.in that auto-detects
    CUPS support and then ran autoconf to generate a new configure
    script. This was done to prevent machines that have libcupsys-dev
    installed from detecting CUPS support and adding an unwanted
    dependency on libcupsys. This way the whole printing system
    won't break on upgrades. CUPS support should be added after
    Potato is released.
    Closes: #65185: samba-common: Upgrading removes printing system.
    Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys.
  * Updated README.debian.
    Closes: #64594: Old README.Debian in /usr/share/doc/samba.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 20 Jun 2000 19:16:04 -0400

samba (2.0.7-2) frozen unstable; urgency=high

  * Release manager: this closes RC bug #63839 that prevents Samba
    to be built from source.
  * Fixed a stupid typo in debian/rules that was preventing Samba
    to be built from source.
    Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir)
  * I forgot to mention that O'Reilly's book "Using Samba" was donated
    to the Open Source community. The book was included in Samba 2.0.7
    in HTML format and is part of the Debian Samba package since
    Samba 2.0.7-1.
  * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help
    files were supposed to be provided in both the swat and the samba-doc
    packages. This duplication was a waste of space. Starting with
    Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML
    files are included only in samba-doc, and are accessed via symlinks
    from within swat.
    Closes: #58810: superfluous files in swat?
  * Added a 'echo "."' to /etc/init.d/samba in the reload) section.
    Closes: #63394: "echo ." missing in reload section of init.d script
  * Fixed typo in docs/htmldocs/using_samba/ch06_05.html.
    Closes: #64344: typo "encrypted passwords"
  * Cleaned up samba's postrm script so important common files aren't
    deleted when samba is purged. Created a samba-common.postrm script.
    Closes: #62675: purging samba removes /etc/samba/smb.conf.
    Closes: #63386: samba --purge removes /etc/samba dir even though
            smbclient/smbfs/samba-common packages are still installed

 -- Eloy A. Paris <peloy@debian.org>  Wed,  3 May 2000 02:42:07 -0400

samba (2.0.7-1) frozen unstable; urgency=low

  * New upstream version. Dear Release Manager: please allow this
    package to go to frozen as it contains fixes to a _lot_ of problems.
    You can take a look at all the problems fixed by this release in
    the official upstream announcement at
    http://us1.samba.org/samba/whatsnew/samba-2.0.7.html.
  * Added --with-utmp to add utmp support to smbd (this is new in Samba
    2.0.7)
  * Closes: #62148 - samba not rotating filled logs.
  * Closes: #56711: Samba doesn't manage well long share name (please note
      that it's possible to connect to shares with names longer than
      14 characters but the share will be listed with a name truncated to
      13 characters.)
  * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67).
    Closes: #50907 - logon path not working.
    This is not a bug, it's just Samba doing the same thing an NT server
    does. See WHATSNEW.txt and smb.conf's man page for details.
  * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper
    is not supported anymore.)
  * Closes: #58994 swat: typo in swat description.
  * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware
    problems, person that reported the bug never came back.)
    Closes: #54398 - smbadduser fails, looks for ypcat.
  * Fixed swat's man page to include Debian specific installation
    instructions. There's not necessary to edit /etc/services or
    /etc/inetd.conf.
    (Closes: #58616 - incomplete install config && incorrect installation
      instructions.)
  * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat
    to look for smbd and nmbd in the wrong place when requested to start or
    stop smbd or nmbd.
    (Closes: #55028 - swat can't start samba servers.)
  * Closes: #37274: smbclient does not honour pot. (Tested and seems to be
    working now.)
  * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492,
    #50479, #39818, #54383, #59411.
    (please re-open any of this if the problem still exists - I was unable
    to confirm any of this because I could never reproduce them.)
    Closes: #56699 - Samba's nmbd causes random kernel oops several
      times in a row.
    Closes: #62185 - nmbd's forking until no more file descriptors are
      available.
    Closes: #56247 - session setup failed: ERRSRV - ERRbadpw.
    Closes: #52218 - Either wins proxy does not work, or I don't understand
      it.
    Closes: #43492 - intermittent problem changing password.
    Closes: #50479 - Can't access windows 2000 shares with samba.
    Closes: #39818 - samba-common: Upgrading Samba from the Slink version.
    Closes: #54383 - samba-common: Missing /etc/smb.conf.
    Closes: #59411 - smbclient: cannot browse Win2k shares.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 27 Apr 2000 16:07:45 -0400

samba (2.0.6-5) frozen unstable; urgency=low

  * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries
    in this package are broken unless libcupsys1 is installed.
    samba-common has a "grave" bug because of this. Instead of adding
    libcupsys1 to the Depends: list of each package in debian/control
    I investigated why dh_shlibs was not picking the dependency
    automatically. It turns out that it's probably a bug in libcupsys1
    because the format of its shlibs file is not correct. I fixed that
    file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are
    picked correctly. I'll talk to the libcupsys1 maintainer.

    I think the addition of CUPS support to Samba is a big change that
    should not go into Frozen. So, I decided to back up the addition
    of CUPS support I did in 2.0.6-4 to minimize problems. I'll add
    CUPS support again when I start working on Samba for Woody.
    (Closes: #59337 - samba-common has a missing dependency)

 -- Eloy A. Paris <peloy@debian.org>  Wed,  1 Mar 2000 08:40:02 -0500

samba (2.0.6-4) frozen unstable; urgency=low

  * It seems that sometimes nmbd or smbd are not killed when upgrading.
    I think it is because in samba's prerm script I was calling
    start-stop-daemon with the --pidfile switch and in old versions of
    Samba the nmbd and smbd daemons did not store their PIDs in a file in
    /var/samba/. I changed debian/samba.prerm so the existence of the
    PID files is checked before calling "start-stop-daemon --pidfile ..."
    If the PID files do not exist then start-stop-daemon is called
    without the --pidfile parameter.
    (Closes: #58058 - upgrade from slink went badly)
  * Fixed typo in description of swat package in debian/control.
  * Installed libcupsys1-dev so the configure script picks up CUPS
    and Samba is compiled with CUPS support. Also added libcupsys1 to
    the Depends: list of package samba in debian/control.
    (Closes: #59038 - samba not compiled with cups support)
  * Added a small paragraph to debian/README.debian warning about possible
    problems with the WINS code in Samba 2.0.6.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 28 Feb 2000 14:00:42 -0500

samba (2.0.6-3) frozen unstable; urgency=low

  * Applied patch posted by Jeremy Allison to the samba mailing list
    that should take care of the internal errors reported in bug #52698
    (release-critical). Wichert: please test as I never could reproduce
    it here.
    (Closes: #52698 - samba gets interbal errors)
  * Moved samba-docs to the 'docs' section.
    (Closes: #51077 - samba-doc: wrong section)
  * Added reload capability to /etc/init.d/samba (only for smbd because
    nmbd does not support reloading after receiving a signal).
    (Closes: #50954 - patch to add reload support to /etc/init.d/samba)
  * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so
    Unix password syncronization works with the passwd program currently
    in Potato. Thanks to Augustin Luton <aluton@hybrigenics.fr> for
    the correct chat script.
  * Stole source/lib/util_sec.c from the CVS tree of what will become
    Samba 2.0.7 or whatever so we can use the same binaries under
    both 2.0.x and 2.2.x kernels.
    (Closes: #51331 - PANIC: failed to set gid)
  * smbadduser is now provided as an example and it's customized for Debian.
    I am not providing this script in /usr/sbin/ because then I would need
    a dependency on csh, something that I don't want to do.
    (Closes: #51697, #54052)
  * Fixed the short description of the smbfs package in debian/control.
    (Closes: 53534 - one-line description out of date).

 -- Eloy A. Paris <peloy@debian.org>  Tue, 23 Nov 1999 16:32:12 -0500

samba (2.0.6-2) unstable; urgency=low

  * samba-common now depends on libpam-modules (not on libpam-pwdb, which
    I have been told is obsolete). I modified /etc/pam.d/samba accordingly
    to reflect the change.
    (Closes: Bug#50722: pam pwdb dependence?).
  * The old /etc/pam.d/samba file which had references to pam_pwdb caused
    smbd to die with a signal 11. The new /etc/pam.d/samba file fixes
    this problem.
    (Closes: #50876, #50838, #50698)
  * Compiled with syslog support (use at your own risk: syslog support
    is still experimental in Samba). I added the parameters "syslog = 0"
    and "syslog only = no" to the sample smb.conf to avoid pestering
    users that do not want Samba to log through syslog.
    (Closes: Bug#50703 - syslog only option doesn't work)
  * Removed the stupid code in the smbmount wrapper script that tries
    to load the smbfs module if smbfs is not listed in /proc/filesystems.
    (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled
    as a module in the kernel)
  * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so
    'mount -t smb ...' works just as 'mount -t smbfs ...'.
    (Closes: Bug#50763 - 'mount -t smb' doesn't work)

 -- Eloy A. Paris <peloy@debian.org>  Sat, 20 Nov 1999 18:53:35 -0500

samba (2.0.6-1) unstable; urgency=low

  * Samba 2.0.6 has been released. This is the first try of the Debian
    Samba packages. I know for sure that smbd won't work properly on
    2.0.x kernels because the patch that Wichert sent me does not apply
    to the new source/lib/util_sec.c in Samba 2.0.6. That file was
    completely re-written by Tridge.
  * Updated README.Debian.
  * A new client utility called smbspool appeared in Samba 2.0.6. I added
    this utility to the smbclient package, although I haven't tried it yet.
  * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount.
    This is to be able to type "mouont -t smbfs ...". This symlink goes
    in the smbfs package, of course.
  * This new release should close the following bugs (some of these
    are fixed for sure in this new upstream release, some others I could
    not reproduce but I believe they are fixed if they were real bugs.
    As always, please feel free to re-open the bugs if the problem is not
    solved).
      Closes: Bug#33240: icmp mask needs a bug workaround.
      Closes: Bug#37692: samba: Has problems detecting interfaces.
      Closes: Bug#38988: samba: Truly bizzare behavour from nmbd.
      Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast
                          properly.
      Closes: Bug#44131: smbfs: no longer possible to set file and
                          directory-modes.
      Closes: Bug#46992: smbmount-2.2.x manpage wrong.
      Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline.
      Closes: Bug#46605: smbmnt segfaults.
      Closes: Bug#48186: smbmount.
      Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included].
      Closes: Bug#47332: smbmount: could -f and -P be added back?
  * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM
    module). To succesfully add PAM support, I created /etc/pam.d/samba and
    added this file as a conffile for the samba-common package. I also made
    samba-common depend on libpam-pwdb.
  * Added simple man pages for the wrapper scripts smbmount and smbmount.
    (Closes: Bug#44705 - Missing smbmount man page)
  * Installed libreadlineg2-dev in my system so smbclient now has a
    "history" command and libreadline support :-)
  * This time I did add a check to the smbmount wrapper script to see if
    the kernel has support for smbfs, as suggested by Jeroen Schaap
    <J.Schaap@physiology.medfac.leidenuniv.nl>. I mentioned in the changelog
    for samba-2.0.5a-3 that I did this but I forgot at the end.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Nov 1999 12:08:15 -0500

samba (2.0.5a-5) unstable; urgency=low

  * I am sorry to report that the smbwrapper package is gone for the
    moment. The reason for this is twofold: first of all, smbwrapper
    is completely broken in Samba-2.0.5a (it compiles but it doesn't
    run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second,
    when I asked Andrew Tridgell (father of Samba) about the state of
    smbwrapper he told me that Ulrich Drepper (head of the glibc project)
    broke on purpose the glibc stuff in which smbwrapper is based.
    Consequently, Tridge recommended me to compile Samba without
    support for smbwrapper. When, I have no idea. Sorry folks. Here is
    the original message I received from Andrew:

    > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's
    > smbwrapper doesn't even compile under glibc2.1.

    yep, Ulrich deliberately broke it. It won't get fixed till glibc
    allows the sorts of games it plays to work again. I suggest you turn
    it off in your build scripts until that gets sorted out.

  * Swat's file are now in /usr/share/samba/ instead of
    /usr/lib/samba/ (bug #49011).
  * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011).

 -- Eloy A. Paris <peloy@debian.org>  Tue,  2 Nov 1999 12:59:13 -0500

samba (2.0.5a-4) unstable; urgency=low

  * Applied patch from our fearless leader (Wichert) to fix the darn bug
    that prevents Samba to work on 2.0.x kernels if it was compiled
    in a system running a 2.2.x kernel. This closes #40645 (build uses
    setresuid which doesn't work under 2.0.34 (does apparently under
    2.2.x) ).
  * Fixed the entry that swat's postinst script adds to /etc/inetd.conf
    so it is '#<off># swat\t\tstream\ttcp\tnowait.400 ...' instead of
    '#<off>#swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused
    'update-inetd --enable swat' to leave the entry for swat disabled.
    Thanks to Dave Burchell <burchell@inetnebr.com> for finding out
    this problem. This closes #48762 (swat uses non-standard syntax to
    comment out inetd.conf entry).
  * /usr/sbin/swat does not think anymore that the smbd daemon lives
    in /usr/local/samba/bin/. To fix this I am running now source/configure
    with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba
    'swat' fails: incorrect hardwired path in the binary).

 -- Eloy A. Paris <peloy@debian.org>  Sun, 31 Oct 1999 03:42:38 -0500

samba (2.0.5a-3) unstable; urgency=low

  * I am pretty darn busy with my MBA, I apologize for the long time it's
    taking to squash bugs in the Samba packages.
  * Built with debhelper v2 for FHS compliancy. Changed a couple of
    things in debian/rules to accomodate for the new place for the docs.
    I also had to change debian/{samba.postinst,samba.prerm,swat.postinst}
    to make sure that the symlink from /usr/doc/xxx exists and points to
    /usr/share/doc/xxx (the reason for this is that I am not letting
    debhelper to create these scripts for me automatically).
  * Built with latest libc6.
  * smbfs: finally, the nasty bug that causes smbmount to die after
    a while is gone thanks to Ben Tilly <Ben_Tilly@trepp.com>.
    The problem was just a typo in source/client/smbmount.c.
    This closes grave bug #42764 (smbmount dies) and #43341
    (smbfs-2.2.x won't function after a while).
  * Fixed the smbmount wrapper script to eliminate a bashism (closes
    #45202 - "wrapper scripts use $* instead of "$@") and to recognize
    2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize
    kernel 2.3.x").
  * Added a check to the smbmount wrapper script to see if the
    kernel has support for smbfs, as suggested by Jeroen Schaap
    <J.Schaap@physiology.medfac.leidenuniv.nl>.
  * swat's man page is now part of the swat package, not of the samba
    package. This closes #44808 (Samba has a man page for swat, but
    the binary is not included).
  * The interface program smbrun is not longer needed by smbd because
    of the availability of execl() under Linux. Because of this, the
    smbrun is not even being compiled. Since there is no need for smbrun
    now, the smbrun man page was taken out of the samba package. This
    closes #45266 (/usr/bin/smbrun missing).
  * smbpasswd is now part of the samba-common package, and not part of
    the samba package. This is to let administrators that do not want
    to install a full Samba server administer passwords in remote
    machines. This closes bug #42624 (smbpasswd should be included in
    smbclient). This bug report also suggests that swat becomes part of
    the samba package, that smbfs becomes part of the smbclient package,
    and that the binary smbpasswd becomes part of the smbclient package.
    I moved smbpasswd to the samba-common package but I am reluctant to
    do the other things the bug report suggests.
  * In order to keep dpkg happy when moving smbpasswd from the samba
    package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)"
    in the control section of the samba-common package and a
    "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the
    samba package (in debian.control).
  * Samba is now being compiled with the "--with-netatalk" option. This
    closes #47480 (Could samba be compiled with the --with-netatalk option).
  * All packages that depend on samba-common have a versioned dependency
    now. This was accomplished by adding "(= ${Source-Version})" to the
    relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho
    <gaia@iki.fi> for the hint. This closes #42985 (samba should probably
    have a versioned depends on samba-common).
  * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all
    the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file).
  * Added the smbadduser helper script to the samba package. This closes
    #44480 (Samba doesn't come with the smbadduser program).
  * Applied patch from szasz@triton.sch.bme.hu that prevents smbmount
    to leave an entry in /etc/mtab for a share that could not be mounted
    because of invalid user of password. The patch also allows smbumount
    to unmount the share in the event that something goes wrong with the
    smbmount process. This closes bug #48613 (Mount/umount problems +
    patch) as well as #44130 (failed mount is still mounted).
  * smbmount-2.2.x is now setuid root. This is needed for the patch
    applied above to be effective. If smbmount-2.2.x is not setuid root
    then an entry will be left in /etc/mtab even when the mount
    fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid
    for this to work.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 27 Oct 1999 10:36:13 -0400

samba (2.0.5a-2) unstable; urgency=low

  * This version is basically the same as 2.0.5a-1 but it was compiled
    on a Potato system with glibc2.1. See below the change log for 2.0.5a-1
    for more information.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jul 1999 02:25:29 -0400

samba (2.0.5a-1) stable; urgency=high

  * I'm back from the Honey Moon. We are pretty busy because we are moving
    to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still
    have plenty of things to pack and to do. Samba 2.0.5 was released
    while I was in the Honey Moon and it is just now (almost 3 AM) when
    I have time to package it.
  * Because of the security problems fixed in 2.0.5, this upload goes
    to both stable and unstable (the Security Team asked for this).
  * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will
    be compiled on a Potato system.
  * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common
    section in debian/control (as suggested by Steve Haslam
    <araqnid@debian.org>) to fix the problems that appear when upgrading
    from the Samba package in Slink. Please test this as I am completely
    unable to do so. This should fix bug #39818 (Upgrading Samba from the
    Slink version).
  * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in
    order to have defined several socket options when compiling with
    Linux 2.2.x kernel headers - the fix is now upstream.
  * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command
    line syntax similar to the one used by the old smbmount (for 2.0.x
    kernels). This means that the wrapper script is no longer necessary
    so I removed it. In its place there is a simple wrapper script that
    calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is
    running.
  * Because of the wedding, the Honey Moon, and our move to Pittsburgh,
    I can't work on fixing other bugs in this release.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jul 1999 02:18:51 -0400

samba (2.0.4b-3) unstable; urgency=low

  * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files
    and because of this /usr/bin/smbumount was part of the samba package
    instead of part of the smbfs package.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  1 Jul 1999 01:51:24 -0400

samba (2.0.4b-2) unstable; urgency=low

  * Dark (and archive maintainers): please remove from Potato the smbfsx
    binary package and also the old source package for smbfs. smbfs and
    smbfsx have been merged starting with this version.
  * Merged the old smbfs package with Samba. Now there is only one package
    for the smbfs utilities and is called "smbfs". The package smbfsx
    does not exist any more and this new smbfs package must be used
    for both 2.0.x and > 2.1.x kernels.
  * A wrapper script was added to handle the syntax change in smbmount
    in the new smbfs utilities (required for kernels > 2.1.70). The
    home page for this script is http://www.wittsend.com/mhw/smbmount.html.
    Please _note_ that this will change (for good) in Samba 2.0.5 :-)
  * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x
    or smbumount-2.0.x depending on the kernel currently running.
  * Not using -t for savelog in cron.weekly script.
  * Recompiled without libreadlineg-dev (Samba does not seem to be using
    it so unnecessary dependencies are produced).
  * glibc2.1 build.
  * Removed smbpasswd.8 man page from the debian/ directory because it is
    now being provided upstream.
  * Got rid of the ugly hack I put in source/lib/util_sock.c to have
    IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the
    autoconf stuff to #include <netinet/ip.h>. I've sent the patch to
    Jeremy Allison so we have this upstream.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 28 Jun 1999 17:47:19 -0400

samba (2.0.4b-1) unstable; urgency=low

  * New upstream release. This release fixes the following Debian bugs:
    #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and
    #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy
    Allison released Samba 2.0.4 and found out that there were a couple
    of minor bugs so he released 2.0.4a. Then he found out about more
    serious bugs and released 2.0.4b. I have built this package several
    times between yesterday and today because of this. Now I am releasing
    the Debian packages for Samba with what I believe will be the latest
    release the Samba Team will make at least in the next 4 days (Jeremy
    is taking a short vacation).
  * Still compiling against glibc2.0 (sorry about that :-)
  * Hacked source/smbwrapper/smbsh.c to fix the problem
    of smbsh not finding the shared library smbwrapper.so. It looks
    now in /usr/lib/samba/ for this file. This fixes #32971, #32989,
    #33278, #34911 and #36317.
  * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf
    and /etc/samba/codepages/. This fixes #33128 (smbmount complains about
    missing /etc/smb.conf).
  * Package swat does not depend on httpd anymore (there's no need to).
    This fixes #35795 (swat requires httpd).
  * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and
    smbumount-2.2.x. Same applies to the man pages.
  * Changed minor type in smbmount's man page (changed "\"" by "\'"). This
    fixes #34070 (wrong quotes in manpage).
  * Used Fabrizio Polacco's <fpolacco@icenet.fi> procedure to create the
    Debian package for Samba. This closes #35781 (samba has no pristine
    source).
  * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only
    if the size of either is different than 0. Also, added comments at the
    beginning of this script to explain how rotation of log files works in
    Samba. Thanks to ujr@physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler)
    for the suggestions. This closes #37490 (cron.weekly script rotates not
    used [sn]mb.old files). As I side effect, this should also close
    #31462 (still trouble with /etc/cron.weekly/samba).
  * Check for old /etc/pam.d/samba file which is not provided by this version
    of the Debian Samba package but was provided in older versions. If this
    file exists we delete it. We check for this in the postinst. This closes
    #37356 (samba put stuff in pam.d that pam complains about) and #34312
    (libpam0g: questions during upgrade).
  * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done
    in the postinst script. This closes #35730 (Security problem with
    /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1).
  * I have just checked and it looks like #28748 (smbfsx doesn't "return ")
    has been fixed. This might have been fixed since a long time ago.
  * Long long standing bug #18488 (smbclient: internal tar is broken) is
    closed in this release of Samba. The bug might have been closed for a
    long long time, but I did not check for this before.
  * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY"
    message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works),
    #34148 (warnings from smbd) and #35333 (samba warnings).

 -- Eloy A. Paris <peloy@debian.org>  Thu, 20 May 1999 00:35:57 -0400

samba (2.0.3-1) unstable; urgency=low

  * New upstream version.
  * Removed the convert_smbpasswd.pl program I created and put in
    /usr/doc/samba/ because there's a convert_smbpasswd script in the
    upstream sources that does the same thing. I modified the postinst
    script to use this script instead of the one I created.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 28 Feb 1999 01:35:37 -0400

samba (2.0.2-2) unstable; urgency=low

  * Updated the README.Debian file.
  * Updated the description of the samba package in the control file.
  * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now
    installed setuid root as they should be. This was done by doing a
    a "chmod u+s" for each binary in debian/rules and by creating the
    file debian/smbfsx.suid.
  * Minor patch to source/client/smbumount.c to allow normal users
    to umount what they have mounted (problem was a kernel vs. libc6
    size mismatch). I sent the patch upstream.
  * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is
    created.
  * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to
    debian/smbwrapper/usr/lib/samba/.
  * Hacked source/smbwrapper/smbsh.c to fix the problem
    of smbsh not finding the shared library smbwrapper.so.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Feb 1999 18:11:34 -0400

samba (2.0.2-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Feb 1999 01:35:51 -0400

samba (2.0.1-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Sat,  6 Feb 1999 06:51:18 -0400

samba (2.0.0final-4) unstable; urgency=low

  * The samba postinst made an unwarranted assumption that the file
    /etc/samba/smbpasswd exists. If the file did not exist (which is
    perfectly valid) the postinst will fail. This fixes #32953.

 -- Eloy A. Paris <peloy@debian.org>  Fri,  5 Feb 1999 23:32:46 -0400

samba (2.0.0final-3) unstable; urgency=low

  * Added to debian/control a "Depends: ${shlibs:Depends}" line for the
    samba-common package so dependencies for this package are set
    correctly (thanks to Dark for pointing this out).

 -- Eloy A. Paris <peloy@debian.org>  Thu,  4 Feb 1999 09:45:21 -0400

samba (2.0.0final-2) unstable; urgency=low

  * Finally!!! The first upload to unstable. Sorry for the delay folks
    but I have been quite busy lately :-) Another reason for the delay
    is that I wanted to ease the migration from Samba 1.9.18p10 and
    before to Samba 2.0.0. I changed the location of the config. files
    from /etc/ to /etc/samba/ and this made things a little bit harder.
  * This package needs 2.2 kernel headers to compile (well, this is
    true for the smbfsx package, all others compile fine with 2.0 kernel
    headers).
  * Created a preinst script for the samba package to take care of the
    location migration of smb.conf (from /etc/ to /etc/samba/). The
    preinst script also takes care of moving /etc/smbpasswd to its new
    location (/etc/samba/).
  * Created postinst and postrm scripts to add/remove an entry for swat
    in /etc/inetd.conf.
  * I had forgotten to install the sambaconfig script so I changed
    debian/rules to install this script.
  * Added a postrm script for the samba package (I had forgotten to add
    this script to the new Samba packages after the migration from 1.9.18
    to 2.0.0).
  * Created a small Perl script that is called from the samba postinst
    to convert the smbpasswd from the old format used in version prior
    to 2.0.0 to the new one used in 2.0.0 and beyond.
  * The upgrade process should be automatically now. Please let me know
    of any problems you encounter.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 23 Jan 1999 09:34:10 -0400

samba (2.0.0final-1) experimental; urgency=low

  * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable
    because I still have to work out the migration from the old
    samba packages to the new ones. I also need to work more on the
    new swat package.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 14 Jan 1999 22:40:02 -0400

samba (2.0.0beta5-1) experimental; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  5 Jan 1999 00:37:57 -0400

samba (2.0.0beta4-1) experimental; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 23 Dec 1998 18:37:45 -0400

samba (2.0.0beta3-1) experimental; urgency=low

  * New upstream version.
  * I have just realized that the documentation patches (for man pages)
    that I used for the 1.9.18 release are not longer necessary because
    there was a major re-write of all the Samba documentation that added
    the missing bits of information. So, I have just removed these minor
    patches.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  8 Dec 1998 12:00:30 -0400

samba (2.0.0beta2-1) experimental; urgency=low

  * New upstream version.
  * This new version fixes the potential security problem that
    was posted to debian-private (using the "message command" parameter
    to execute arbitrary commands from messages sent from LinPopUp).
  * Changed /etc/init.d/samba to use one of the variables stored in
    /etc/samba/debian_config to know how Samba is being run (from inetd or
    as daemons) instead of grepping /etc/inetd.conf which may not exist
    if the user is running xinetd (this fixes bug #29687 - assumes using
    vanilla inetd)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Nov 1998 23:32:03 -0400

samba (2.0.0beta1-1) experimental; urgency=low

  * First beta release of the samba-2.0.0 code. Before the beta I was
    working with sources downloaded directly from the CVS server. This
    package goes into experimental and I plan to release the new
    samba to unstable as soon as it gets out of beta.
  * Created several packages out of the Samba sources. They are:
    samba (nmbd and smbd daemons + related programs), smbclient (FTP
    like command line utility to retrieve files from SMB servers),
    swat (Samba Web Administration Tool), samba-common (common files
    used by samba, smbclient and swat), smbfsx (smbfs utilities for
    kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation).
  * Refreshed debian/samba-doc.docs so recently added docs. are
    installed in the samba-doc package. New additions include man
    pages in the /usr/doc/samba-doc/htmldocs/ directory.
  * Deleted Debian specific nmblookup(1) man page as it is now upstream.
  * Added smbtorture to smbclient package.
  * Moved rpcclient from the samba package to the smbclient package.
  * The Samba daemons (nmbd and smbd) now create a PID file so I changed
    all calls to start-stop-daemon to use the PID file.
  * Fixed debian/rules to install mksmbpasswd (fixes #27655).
  * Modified /etc/init.d/samba so nmbd is started without the -a (append
    to the log file instead of overwrite) switch. The new behavior of
    nmbd is to NOT overwrite log files, so the -a switch can be deleted
    safely.
  * Moved from debstd to debhelper.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  1 Oct 1998 08:37:41 -0400

samba (1.9.18p10-5) frozen unstable; urgency=high

  * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than
    the one I was trying to fix: in /etc/init.d/samba I got rid of the test
    that tells us whether the Samba daemons are running from inetd or as
    standalone daemons. I corrected the problem by editing again
    /etc/init.d/samba to uncomment the test.
  * Wishlist bug #28298 (typos in samba) was fixed.
  * Wishlist bug #28309 (typos in smb.conf) was fixed.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 28 Oct 1998 09:11:47 -0400

samba (1.9.18p10-4) unstable; urgency=low

  * Minor patch to debian/rules to delete *substvars instead of only
    substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz
    <dmj@andrew.cmu.edu> for this).
  * Small patch to source/shmem_sysv.c that eases compilation under
    glibc-2.1 (thanks to Daniel <dmj@andrew.cmu.edu> for this).

 -- Eloy A. Paris <peloy@debian.org>  Thu, 17 Sep 1998 15:33:49 -0400

samba (1.9.18p10-3) unstable; urgency=low

  * Patched smbclient again to fix minor formatting problem introduced
    by Magosanyi Arpad's smbclient patch.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  3 Sep 1998 11:03:23 -0400

samba (1.9.18p10-2) unstable; urgency=low

  * Sync'ed include files for the smbfs utilities with the ones in
    kernel 2.1.119.
  * Added to the /usr/doc/samba/examples/ directory a new script called
    wins2dns (courtesy of Jason Gunthorpe <jgg@deltatee.com>) that
    generates BIND sonze files for hosts in the WINS database.
  * Patched smbclient to include enhancements by Magosanyi Arpad
    <mag@bunuel.tii.matav.hu> that make scripting easier.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 28 Aug 1998 13:34:54 -0400

samba (1.9.18p10-1) stable unstable; urgency=low

  * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
    description of what has changed). I built a 1.9.18p9-1 but I
    never released it because an obscure bug was found just a couple
    of days before the official release, so the Samba Team stopped
    the rollover of 1.9.18p9.
  * Updated documentation (new files were added to the docs/ directory
    that were not installed in /usr/doc/samba/).
  * Fixed long standing bug #7695 (smb.conf's man page doesn't document
    'printing=lprng') - I made a couple of changes to the man page to
    include references to lprng.
  * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it
    is necessary to make samba suggest psmisc just because the postinst
    script mentions to call killall. So, I removed all references to
    "killall" in the scripts.
  * Fixes bug #25999 (Samba does not by default work with unix password
    sync): I added the "passwd program" and "passwd chat" parameters to
    the sample smb.conf to reflect the Debian environment.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 21 Aug 1998 08:59:18 -0400

samba (1.9.18p9-1) unstable; urgency=low

  * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
    description of what has changed).
  * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is
    now part of the new upstream version.
  * Corrected small typo in addtosmbpass' man page (fixes #25629).

 -- Eloy A. Paris <peloy@debian.org>  Tue, 11 Aug 1998 08:53:08 -0400

samba (1.9.18p8-2) frozen unstable; urgency=medium

  * Applied patch received from Jeremy Allison (Samba Team) that fixes
    "grave" bug #23903 (samba maps username before authenicating with
    NT password server).
  * Added a "sleep 2" between "start-stop-daemon --stop" and
    "start-stop-daemon --start" in /etc/init.d/samba so when this script
    is called with the "restart" parameter the Samba daemons are restarted
    properly. This fixes bug #24211 (init.d script doesn't restart).
  * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to
    avoid annoying warning messages.
  * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096
    and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't
    find who sent this suggestion to me. If you are listening, drop me a
    note and I'll put your name here :-)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 29 Jun 1998 08:45:01 -0400

samba (1.9.18p8-1) frozen unstable; urgency=low

  * New upstream release that fixes _lots_ of "ugly" bugs. The list of
    fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt).
  * Fixed postinst to quote arguments to if [ arg .. ] constructs
    (fixes #22881).
  * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing
    list) that solves a problem with username maps (the Samba Team did
    not catch this problem before final 1.9.18p8).
  * Made /etc/init.d/samba to print out a warning when Samba is running
    from inetd and the user runs /etc/init.d/samba to start|stop|restart
    Samba (there's no point on doing this because inetd will start the
    daemons again when there is traffic on UDP port 137-139).

 -- Eloy A. Paris <peloy@debian.org>  Sat, 13 Jun 1998 00:18:25 -0400

samba (1.9.18p7-4) frozen unstable; urgency=medium

  * Fixes the serious problem of having the WINS name server
    database getting deleted at boot time. That happened because the
    WINS database was being stored under /var/lock/samba/ and all files
    under /var/lock/ are deleted at boot time. The place where the WINS
    database is stored was moved to /var/samba/.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 18 May 1998 20:24:29 -0400

samba (1.9.18p7-3) stable; urgency=high

  * Libc5 version for Bo (stable) that fixes the recently reported
    security hole.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 18 May 1998 20:19:33 -0400

samba (1.9.18p7-2) frozen unstable; urgency=low

  * Added patches from the non-mantainer upload that make us able
    to compile Samba on Alpha systems. This fixes bug #22379.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 13 May 1998 20:38:51 -0400

samba (1.9.18p7-1) frozen unstable; urgency=low

  * New upstream release (just bug fixes, no new functionality).

 -- Eloy A. Paris <peloy@debian.org>  Wed, 13 May 1998 11:47:32 -0400

samba (1.9.18p6-2) frozen unstable; urgency=low

  * Uploaded to frozen (I forgot to upload last version to frozen
    so it got installed only in unstable).

 -- Eloy A. Paris <peloy@debian.org>  Tue, 12 May 1998 18:10:17 -0400

samba (1.9.18p6-1.1) unstable; urgency=low

  * non-maintainer upload for Alpha
  * patch needed for source/quota.c (_syscall4() confusion)

 -- Paul Slootman <paul@debian.org>  Tue, 12 May 1998 20:39:13 +0200

samba (1.9.18p6-1) unstable; urgency=low

  * New upstream release that fixes a possible buffer overflow.
    This security hole was reported on BugTraq by Drago. The
    previous Debian version (1.9.18p5-1) was not released because
    1.9.18p5 and 1.9.18p6 were released very closely.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 11 May 1998 20:28:33 -0400

samba (1.9.18p5-1) unstable; urgency=low

  * New upstream release (no new funcionality, just bug fixes - see
    /usr/doc/samba/WHATSNEW.txt.gz).
  * Backed off Debian patches that were added upstream.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 11 May 1998 08:43:53 -0400

samba (1.9.18p4-2) frozen unstable; urgency=low

  * Patched smbclient(1) man page to not reference the unsopported
    -A parameter (fixes #6863).
  * Changes to start nmbd with the -a option (in /etc/init.d/samba
    and in the entry added to /etc/inetd.conf).
  * Fixed typo in sample smb.conf (fixes #21484).
  * Fixed yet another typo in sample smb.conf (fixes #21447).

 -- Eloy A. Paris <peloy@debian.org>  Fri, 17 Apr 1998 22:19:23 -0400

samba (1.9.18p4-1) frozen unstable; urgency=low

  * New upstream version that fixes several bugs.
  * New scheme for keeping track of Debian specific configuration.
    This new scheme fixes bug #18624 (Samba always asks the user about
    configuration options). New scheme stores Debian specific
    configuration information in /etc/samba/debian_config.
  * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the
    new configuration scheme.
  * Moved required kernel 2.1.x include files inside the source tree
    so I don't have to do very nasty things like creating crazy
    symlinks in /usr/include to make this package compile. This
    allows non-root users to build the package and fixes bug
    #20104.
  * Fixed address of the FSF in /usr/doc/samba/copyright (problem
    reported by lintian).
  * The /etc/init.d/samba script now supports the force-reload
    argument, as required by the policy (problem reported by lintian).
  * Added a "rm /etc/cron.weekly/samba" at the end of the postinst.
  * Now the samba package can be installed even if no nmbd or smbd processes
    are running. This fixes the following bugs: #8917, #9334, #10268,
    #10411, #11146 and #13387.
  * Provides the original README in /usr/doc/samba. This fixes bug #9693.
  * Added a --no-reload option to sambaconfig to not reload Samba
    after configuration.
  * Created man pages for sambaconfig(8), addtosmbpass(8),
    mksmbpasswd(8) and nmblookup(1).
  * Corrected small typo in sample /etc/smb.conf.
  * Added two new parameters to /etc/smb.conf: "preserver case" and
    "short preserve case".
  * "rm -Rf /var/lock/samba" in postrm when package is being purged.
  * Patched upstream source (nmbd.c) to not overwrite log files when
    nmbd is called with the -a parameter (fixes #17704: nmbd ignores
    -a option).
  * /etc/init.d/samba now starts the nmbd daemon with the -a parameter
    to not overwrite log files.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Mar 1998 21:22:03 -0400

samba (1.9.18p3-1) unstable; urgency=low

  * New upstream version.
  * Oppsss!!! I really screwed it up (actually, debstd did).
    1.9.18p2-2 still contained man pages (smbmount and smbumount) part
    of other packages. This version does have this corrected. If not,
    I no longer deserve to be a Debian developer! So, this version
    fixes bug #18438 and some of the bugs I claimed to fix in
    1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd
    with -m in debian/rules (man pages are installed by "make install"
    so it's a bad idea to re-install man pages with debstd).

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Feb 1998 17:32:42 -0400

samba (1.9.18p2-2) unstable; urgency=low

  * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided
    a man page for smbmount, which conflicts with package smbfs. This
    was solved by creating a multi-binary package that produces
    package samba and new package smbfsx.
  * Fixes bug #18000 (typo in postinst).
  * Fixes bug #17958 (postinst asks obsolete question). Actually,
    the question is still asked, but only if Samba is run as daemons.
  * Created a multi-binary package from the Samba sources: package
    samba and new package smbfsx which provides SMB mount utilities
    for kernels > 2.1.70.

 -- Eloy A. Paris <peloy@debian.org>  Mon,  9 Feb 1998 19:47:05 -0400

samba (1.9.18p2-1) unstable; urgency=low

  * New upstream version.
  * Removed /etc/cron.weekly/samba because Samba does not handle well
    rotation of log files (if the log file is rotated Samba will
    continue to log to the rotated file, instead of the just created
    one). In any case, Samba will rotate log files after an specific
    file size.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jan 1998 22:34:27 -0400

samba (1.9.18p1-2) unstable; urgency=low

  * Created a multi-binary package out of the Samba sources to provide
    packages samba and smbfsx (userland utilities to work with
    smbfs with kernels > 2.1.x.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 17 Jan 1998 09:23:48 -0400

samba (1.9.18p1-1) unstable; urgency=low

  * New upstream version.
  * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in
    /var/backups/smbpasswd.bak.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 14 Jan 1998 13:40:56 -0400

samba (1.9.18alpha14-1) unstable; urgency=low

  * New upstream version.
  * Added a note to the postinst script telling the user that he/she
    needs to run smbpasswd manually after creating a new /etc/smbpasswd
    from /etc/passwd.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 23 Dec 1997 23:44:37 -0400

samba (1.9.18alpha13-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 16 Dec 1997 13:02:32 -0400

samba (1.9.18alpha12-1) unstable; urgency=low

  * New upstream version.
  * Conflicts with the sambades package because the new Samba 1.9.18
    series do not depend on the DES libraries to support encrypted
    passwords.
  * Added parameter "encrypt passwords = yes" to /etc/smb.conf.
  * Compiled with support for quotas in disk_free().
  * Home directories are now exported read only by default.
  * Re-worked debian/rules.
  * Re-worked sample smb.conf.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  4 Dec 1997 22:50:34 -0400

samba (1.9.17p4-1) unstable; urgency=low

  * New upstream version.
  * Made /etc/smb.conf readable by everybody because some Samba utilities
    will fail otherwise when run by non-root users.
  * Dropped PAM support while the PAM libraries are ported to libc6.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 21 Oct 1997 18:08:49 -0400

samba (1.9.17p3-1) unstable; urgency=low

  * New upstream version.
  * Made /etc/smb.conf readable only by root as suggested by smbd's man page.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 15 Oct 1997 09:21:25 -0400

samba (1.9.17p2-2) unstable; urgency=low

  * Running Samba as daemons instead of from inetd.
  * Removing netbios entries in /etc/inetd.conf.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 9 Oct 1997 23:37:25 -0400

samba (1.9.17p2-1) unstable; urgency=low

  * New upstream version that fixes a serious security hole.
  * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because
    these patches are now part of the upstream release.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 28 Sep 1997 22:54:33 -0400

samba (1.9.17p1-1) unstable; urgency=low

  * New upstream version.
  * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up
    compiler warnings.
  * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings.
  * Included crypt.h to have function prototype for crypt().
  * Included netinet/tcp.h to have some socket options included.
  * Included netinet/ip.h to have some socket options included.
  * Linking with libcrypt (LIBM='... -lcrypt'). Without including this
    library smbd generates a seg. fault when authenticating users (?).

 -- Eloy A. Paris <peloy@debian.org>  Wed, 10 Sep 1997 22:09:18 -0400

samba (1.9.17-1) unstable; urgency=low

  * New upstream version (called the "Browse Fix Release")
  * Added the option --oknodo to the start-stop-daemon invocation in prerm
    script. This was because the prerm was failing because start-stop-daemon
    was returning an error code if no nmbd or smbd daemons were found
    to kill.
  * The function yp_get_default_domain(), referenced in three source
    files was part of libc5 but with libc6 (glibc2) it has been moved
    to libnss_nis. Since the linker was unable to find the function
    I had to add LIBSM='-lnss_nis' to debian/rules.
  * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules
    because compiling was failing because of conflicts with glibc2.
  * Patched source/includes.h to include termios.h if GLIBC2 is defined.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 27 Aug 1997 08:39:32 -0400

samba (1.9.17alpha5-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 14 Aug 1997 18:05:02 -0400

samba (1.9.16p11-3) unstable; urgency=low

  * Fixed accidental omission of /etc/pam.d/samba.

 -- Klee Dienes <klee@debian.org>  Sat, 15 Mar 1997 22:31:26 -0500

samba (1.9.16p11-2) unstable; urgency=low

  * Recompiled against newer PAM libraries.
  * Added /etc/pam.d/samba.

 -- Klee Dienes <klee@debian.org>  Sat, 8 Mar 1997 01:16:28 -0500

samba (1.9.16p11-1) unstable; urgency=low

  * New upstream release.
  * Added PAM support.

 -- Klee Dienes <klee@debian.org>  Tue, 25 Feb 1997 18:00:12 -0500

samba (1.9.16p9-2) unstable; urgency=low

  * minor packaging changes

 -- Klee Dienes <klee@sauron.sedona.com>  Sun, 3 Nov 1996 11:45:37 -0700

samba (1.9.16p9-1) unstable; urgency=low

  * upgraded to new upstream version

 -- Klee Dienes <klee@sauron.sedona.com>  Sat, 26 Oct 1996 21:38:20 -0700

1.9.16alpha10-1:
 960714
 * Removed Package_Revision from control file.
 * Removed -m486 compiler option.
 * Added Architecture, Section and Priority fields to control file.
 * Upgraded to latest upstream version.
 * Uses update-inetd now.
 * Added shadow passwords support.
 * Fixed Bug#1946: nmbd won't browse

1.9.15p4-1:
 951128
 * Upgraded to latest upstream version.
   * Fixed many bugs.
   * Adds Master Browsing support.
 * Converted to ELF.
 * Fixed bug #1825 - nmbd is now killed when removing samba.

1.9.14-1:
 950926 Andrew Howell <andrew@it.com.au>
 * Upgraded to latest version.
 * Fixed Bug #1139 - samba won't print

1.9.14alpha5-1:
 * Fixes killing of inetd problem in debian.postint and debian.postrm

1.9.14alpha5-0:
 950704 Andrew Howell <andrew@it.com.au>
 * Taken over samba package from Bruce Perens.
 * Upgraded to newest version of samba.

1.9.02-1:
 9-January-1994 Bruce Perens <Bruce@Pixar.com>
 * Added Debian GNU/Linux package maintenance system files, and
   configured for Debian systems.