path: root/debian/changelog

samba (2:4.20.2+dfsg-3~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging debian version 2:4.20.2+dfsg-3.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Wed, 26 Jun 2024 18:06:20 +0200

samba (2:4.20.2+dfsg-3) unstable; urgency=medium

  * split out samba-vfs-glusterfs from samba-vfs-modules
    (pick up and rework ubuntu changes)
  * split out samba-vfs-ceph from samba-vfs-modules
  * merge samba-vfs-modules (remaining) into main samba package
  * the only remaining extra vfs module, snapper, does not need extra handling
  * d/samba-ad-dc.lintian-overrides: add conflicts-with-version override
    for /usr-move
  * samba-common-bin: use trivial separate shell wrapper for the python script
  * d/rules: use before-trixie build profile to control dh_movetousr run too
  * d/*.service: provide empty value for referenced environment vars
    (Closes: #1073969)
  * d/dirs: remove leftover file
  * d/samba-common-bin.dirs: stop creating /etc/samba/tls/
  * d/samba.dirs: stop creating bin & sbin

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Jun 2024 07:58:16 +0300

samba (2:4.20.2+dfsg-2~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging debian version 2:4.20.2+dfsg-2.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Wed, 26 Jun 2024 18:05:54 +0200

samba (2:4.20.2+dfsg-2) unstable; urgency=medium

  * tilde-in-version.diff - allow tilde in version string

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 20 Jun 2024 09:49:50 +0300

samba (2:4.20.2+dfsg-1~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging upstream version 2:4.20.2+dfsg.
  * Merging debian version 2:4.20.2+dfsg-1.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Thu, 20 Jun 2024 06:07:32 +0200

samba (2:4.20.2+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=13019
     Dynamic DNS updates with the internal DNS are not working
   - https://bugzilla.samba.org/show_bug.cgi?id=13213
     Samba build is not reproducible
   - https://bugzilla.samba.org/show_bug.cgi?id=14981
     netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with SysvolReady=0
   - https://bugzilla.samba.org/show_bug.cgi?id=15412 Anonymous smb3
     signing/encryption should be allowed (similar to Windows Server 2022)
   - https://bugzilla.samba.org/show_bug.cgi?id=15435
     Regression DFS not working with widelinks = true
   - https://bugzilla.samba.org/show_bug.cgi?id=15569
     ldb qsort might r/w out of bounds with an intransitive compare function
   - https://bugzilla.samba.org/show_bug.cgi?id=15573
     Panic in dreplsrv_op_pull_source_apply_changes_trigger
   - https://bugzilla.samba.org/show_bug.cgi?id=15620
     s4:nbt_server: does not provide unexpected handling, so winbindd
     can't use nmb requests instead cldap
   - https://bugzilla.samba.org/show_bug.cgi?id=15625
     Many qsort() comparison functions are non-transitive, which can lead
     to out-of-bounds access in some circumstances
   - https://bugzilla.samba.org/show_bug.cgi?id=15633
     samba-gpupdate - Invalid NtVer in netlogon_samlogon_response
   - https://bugzilla.samba.org/show_bug.cgi?id=15638
     Need to change gitlab-ci.yml tags in all branches to avoid CI bill
   - https://bugzilla.samba.org/show_bug.cgi?id=15642 winbindd,
     net ads join and other things don't work on an ipv6 only host
   - https://bugzilla.samba.org/show_bug.cgi?id=15653 idmap_ad creates
     an incorrect local krb5.conf in case of trusted domain lookups
   - https://bugzilla.samba.org/show_bug.cgi?id=15654
     new --vendor-name and --vendor-patch-revision options for ./configure
   - https://bugzilla.samba.org/show_bug.cgi?id=15659
     Segmentation fault when deleting files in vfs_recycle
     Closes: #1073252
   - https://bugzilla.samba.org/show_bug.cgi?id=15660 The images don't build
     after the git security release and CentOS 8 Stream is EOL
   - https://bugzilla.samba.org/show_bug.cgi?id=15662
     vfs_widelinks with DFS shares breaks case insensitivity
   - https://bugzilla.samba.org/show_bug.cgi?id=15664
     Panic in vfs_offload_token_db_fetch_fsp()
   - https://bugzilla.samba.org/show_bug.cgi?id=15665
     CTDB RADOS mutex helper misses namespace support
   - https://bugzilla.samba.org/show_bug.cgi?id=15666 "client use kerberos"
     and --use-kerberos is ignored for the machine account
  * d/libldb2.symbols,d.python3-ldb.symbols.in: add new version (2.9.1)
  * use ./configure --vendor-name= instead of patching ./VERSION
  * omit samba-ad-dc for i386 ubuntu
  * samba-ad-dc: usr-move compensation maintscripts: add "set -e"

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Jun 2024 23:59:36 +0300

samba (2:4.20.1+dfsg-5~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging debian version 2:4.20.1+dfsg-5.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 11 Jun 2024 18:48:14 +0200

samba (2:4.20.1+dfsg-5) unstable; urgency=medium

  * Build-Depends: dpkg-dev>=trixie for Arch packages only (for t64 rename)
  * d/samba.NEWS: reword the last entry a bit
  * d/samba-ad-dc.init: chmod +x
  * d/control: bump Standards-Version to 4.7.0 (no changes needed)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 10 Jun 2024 20:17:53 +0300

samba (2:4.20.1+dfsg-4~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging debian version 2:4.20.1+dfsg-4.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Thu, 30 May 2024 05:32:07 +0200

samba (2:4.20.1+dfsg-4) unstable; urgency=medium

  [ Helmut Grohne ]
  * Mitigate ineffective replaces due to /usr-move (DEP17 P1)
    (Closes: #1072102)

  [ Michael Tokarev ]
  * d/control: mark libkeyutils-dev as linux-only [linux-any]
  * d/control: drop old versions of versioned dependencies

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 29 May 2024 20:31:41 +0300

samba (2:4.20.1+dfsg-3~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging debian version 2:4.20.1+dfsg-3.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Thu, 30 May 2024 05:31:42 +0200

samba (2:4.20.1+dfsg-3) unstable; urgency=medium

  * d/rules: move samba-common install to d/samba-common.install
  * d/rules: install samba-ad-dc init files for the right package
  * d/samba.postinst: remove nmbd_error_handler for the initscript
    (it is not used in systemd case)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 26 May 2024 18:48:17 +0300

samba (2:4.20.1+dfsg-2~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging debian version 2:4.20.1+dfsg-2.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Thu, 30 May 2024 05:29:56 +0200

samba (2:4.20.1+dfsg-2) unstable; urgency=medium

  * move many files from samba package to samba-ad-dc package.
    From now on, samba-ad-dc isn't just a meta-package, it is actually
    needed for AD-DC functionality.  If you run AD-DC, please ensure
    that samba-ad-dc package is installed (it is not recommended by samba)
    Closes: #1051770
  * move samba-tool and samba-gpupdate from samba-common-bin and samba
    packages to python3-samba.  This is an Active Directory stuff, not
    needed for a stand-alone server or a client, but might be useful
    for auth-only (neither file-server nor file-client) AD installs
    Closes: #1068360
  * remove addshare.py, setoption.py and source_samba.py python scripts
    These aren't used by samba packages and are hardly useful generally, esp.
    having in mind their unusual locations.  The apport hook (source_samba.py)
    is mostly obsolete, it hasn't been updated for a very long time.
  * add make-python-optional.diff, so python3 can be made optional
    for samba-common-bin
  * remove python3-samba and python from Depends of samba and samba-common-bin
    packages, moving it to Recommends.  This lets the user to install a stand-
    alone samba file server without any Active Directory bits and even without
    python interpreter
  * d/samba.install: do not install samba_downgrade_db (to old pre-4.8 version)
  * move smbcontrol binary from samba to samba-common-bin,
    since it can also be used to control winbindd
  * d/control: tdb-tools (tdbbackup) are run from python modules,
    move from samba:Depends to python3-samba:Recommends
  * d/control: samba: no need to depend on libpam-runtime or libpam-modules
  * d/control: samba: no need to recommend samba-ad-provision
  * debian/TODO: update a bit, remove many obsolete entries

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 26 May 2024 17:48:13 +0300

samba (2:4.20.1+dfsg-1~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
    - Reverting t64 migration for backports.
  * Merging upstream version 2:4.20.1+dfsg.
  * Merging debian version 2:4.20.1+dfsg-1.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Wed, 08 May 2024 15:06:44 +0200

samba (2:4.20.1+dfsg-1) unstable; urgency=medium

  * new upstream major release
  * d/control: bump tevent/talloc/tdb versions for Build-Depends
  * d/libldb2.symbols, d/python3-ldb.symbols.in: add new version (2.9.0)
  * d/patches/meaningful-error-if-no-python3-markdown.patch: fixup
  * d/*.install: internal library names changed:
    libfoo-samba4.so.0 => libfoo-private-samba.so.0
  * d/samba-libs.install: update names for libdcerpc & libndr private libs
  * d/samba-libs.install, d/samba-libs.links, d/samba-libs.symbols:
    libndr has soversion 4 now.  This breaks binaries linked with libndr!
  * d/samba-libs.symbols: update with new ndr4 symbols
  * d/libsmbclient.symbols: update with new symbols
  * d/samba-dev.install: add smb3posix.h
  * d/not-installed: add usr/bin/wspsearch experimental windows search binary
  * d/control: libperl-json is not needed for build anymore
  * d/control: bump minimum mit-krb5 version in Build-Depends to 1.21
    (for pkg.samba.mitkrb5 build profile)
  * Closes: #1070335 (wronly filed)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 08 May 2024 13:23:57 +0300

samba (2:4.20.0+dfsg-1~exp2~progress7.99u1) graograman-backports; urgency=medium

  * Uploading to graograman-backports, remaining changes:
    - Updating maintainer field.
    - Updating uploaders field.
    - Updating bugs field.
    - Updating vcs fields.
    - Building without dpkg-vendor.
  * Merging debian version 2:4.20.0+dfsg-1~exp2.
  * Handling t64 migration revert through pkg.samba.before-trixie build-
    profile.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Fri, 19 Apr 2024 19:31:37 +0200

samba (2:4.20.0+dfsg-1~exp1~progress7.99u1) graograman-backports; urgency=medium

  * Initial reupload to graograman-backports.
  * Updating maintainer field.
  * Updating uploaders field.
  * Updating bugs field.
  * Updating vcs fields.
  * Building without dpkg-vendor.
  * Reverting t64 migration for backports.

 -- Daniel Baumann <daniel.baumann@progress-linux.org>  Fri, 19 Apr 2024 19:28:21 +0200

samba (2:4.19.6+dfsg-3) unstable; urgency=medium

  * fix brown-paper-bag bugs in previous upload
    (in meaningful-error-if-no-python3-markdown.patch)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 02 May 2024 20:47:15 +0300

samba (2:4.19.6+dfsg-2) unstable; urgency=medium

  [ Michael Tokarev ]
  * meaningful-error-if-no-python3-markdown.patch:
    update to include 2 other places where markdown gets improted
  * d/winbind.service:
    - order it before nss-user-lookup.target (Closes: #1068649)
    - fix typo
    - nmb.service is nmbd.service in debian
  * move include/samba/core/*.h from samba-libs to libwbclient-dev
    (Closes: #1064544)

  [ Alex Murray ]
  * fix smbd apparmor breakage since change to local systemd services
    (Cloes: #1069661)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 02 May 2024 14:08:31 +0300

samba (2:4.19.6+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15527 fd_handle_destructor()
     panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close()
   - https://bugzilla.samba.org/show_bug.cgi?id=15580
     Packet marshalling push support missing for
     CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED
   - https://bugzilla.samba.org/show_bug.cgi?id=15588
     samba-gpupdate: Correctly implement site support
   - https://bugzilla.samba.org/show_bug.cgi?id=15599
     libgpo: Segfault in python bindings
  * revert d/rules: remove Debian/Ubuntu "branding"

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 08 Apr 2024 11:18:38 +0300

samba (2:4.19.5+dfsg-5) unstable; urgency=medium

  * implement pkg.samba.before-trixie build profile
    (undo t64 changhes and drop build-dep)
  * d/rules: remove Debian/Ubuntu "branding", no need in that
  * d/control: samba-dsdb-modules: drop hardcoded dependency on libgpgme11
    (Closes: #1068526)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 07 Apr 2024 16:04:30 +0300

samba (2:4.19.5+dfsg-4) unstable; urgency=medium

  * stop shipping python3/dist-packages/samba/tests
    (Closes: #1064512, #1063149)
  * add Debian-Specific tag to debian-specific patches
  * d/genshlibs: run dh_makeshlibs on libsmbclient0
    (Closes: #1065349)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 03 Mar 2024 15:37:16 +0300

samba (2:4.19.5+dfsg-3) unstable; urgency=medium

  * d/control: add versioned depends on dpkg-dev to avoid accidental
    build of time64_t packages on older systems
  * +lower-dns-lookup-mismatch-messages.patch (reduce log noise)
  * d/control: add libtirpc-dev and rpcsvc-proto to Build-Depends-Arch
    (Closes: #1065188)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 01 Mar 2024 19:18:35 +0300

samba (2:4.19.5+dfsg-2) unstable; urgency=medium

  * rename libsmbclient => libsmbclient0 for 64-bit time_t transition
    Closes: #1064337
  * d/libsmbclient.lintian-overrides: remove, soname now = package name
  * add Breaks: of sssd packages to samba-libs
  * +passchange-error-message.patch - fix password change error message
  * +edns0.patch: enable EDNS0 support in internal UDP-only DNS client
    https://bugzilla.samba.org/show_bug.cgi?id=15536

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 28 Feb 2024 19:38:48 +0300

samba (2:4.19.5+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release (4.19.5)
  * reformat previous changelog entry to fit in 80cols
  * d/winbind.postrm: stop recursively removing plain files
  * d/winbind.postrm: winbindd_cache.tdb is in /var/lib now,
    not in /var/cache
  * d/control: RulesRequiresRoot:no
  * d/*.symbols: use #PACKAGE# placeholders where appropriate
    (or add comments where it is not)
  * +silence-can-not-convert-group-sid.diff -
    make another log message less annoying
  * -python-fix-invalid-escape-sequences.patch (applied upstream)
  * d/control: replace pkg-config=>pkgconf in Build-Depends, remove
    pkg-config from Depends of libldb-dev and python3-ldb-dev
  * d/samba-libs.symbols, d/control: make libsmbldapN a virtual package
    provided by samba-libs too, like libndrN

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 19 Feb 2024 15:21:14 +0300

samba (2:4.19.4+dfsg-3) unstable; urgency=medium

  * samba,winbind: remove logrotate scripts
    samba does its own log rotation (max log size (=5000 by default) and
    renaming to .old).  The two clashes with each other in an interesting way.
  * d/samba-libs.symbols, d/control: make libndrN a virtual package
    to ensure rdeps pick the right dependency

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 30 Jan 2024 12:12:42 +0300

samba (2:4.19.4+dfsg-2) unstable; urgency=medium

  * d/samba.smbd.service, d/samba.nmbd.service: expand forgotten @BINDIR@

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 08 Jan 2024 20:44:51 +0300

samba (2:4.19.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release. See WHATSNEW.txt for details.
  * d/control: drop pkg.samba.nouring build profile: was needed
    for focal which we do not support anymore
  * remove /etc/cron.daily/samba: there's no reason to keep backing it up,
    most stuff is in ldb/tdb files these days.
  * d/samba.maintscript, d/winbind.maintscript:
    remove old rm_connfiles (pre-buster versions)
  * d/rules, d/*.service: provide .service files directly instead of renaming
    and patching upstream templates, and use dh_installsystemd to install them
    (partially Closes: #1059187)
  * d/rules: run dh_movetousr for libpam-winbind & libnss-winbind, if exists.
    This fixes remaining files in /lib (hopefully). In a search for better
    way to detect where to put system libs (/lib vs /usr/lib) as a configure
    option.  Closes: #1059187

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 08 Jan 2024 19:11:37 +0300

samba (2:4.19.3+dfsg-2) unstable; urgency=medium

  * d/rules: simplify LDFLAGS assignment
  * d/rules: add -mlong-jump-table-offsets to CFLAGS on m68k (fix FTBFS there)
  * d/rules: CFLAGS += -ffile-prefix-map=../../=
  * d/control: fix versioned dependency on samba for samba-ad-dc
  * +python-fix-invalid-escape-sequences.patch from upstream (Closes: #1057668)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 11 Dec 2023 13:19:18 +0300

samba (2:4.19.3+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=13595
     CVE-2018-14628 [SECURITY] Deleted Object tombstones visible in AD LDAP
     to normal users (Closes: #1034803).  Please see WHATSNEW.txt file for
     more information about this issue: actual fix requires extra steps to
     be performed against samba-based AD-DC
   - https://bugzilla.samba.org/show_bug.cgi?id=15093
     Files without "read attributes" NFS4 ACL permission are not listed
     in directories
   - https://bugzilla.samba.org/show_bug.cgi?id=15487
     smbd crashes if asked to return full information on close of
     a stream handle with delete on close disposition set
   - https://bugzilla.samba.org/show_bug.cgi?id=15492
     Kerberos TGS-REQ with User2User does not work for normal accounts
   - https://bugzilla.samba.org/show_bug.cgi?id=15499
     Improve logging for failover scenarios
   - https://bugzilla.samba.org/show_bug.cgi?id=15507
     vfs_gpfs stat calls fail due to file system permissions
   - https://bugzilla.samba.org/show_bug.cgi?id=15513
     Samba doesn't build with Python 3.12
   - https://bugzilla.samba.org/show_bug.cgi?id=15520
     sid_strings test broken by unix epoch > 1700000000
   - https://bugzilla.samba.org/show_bug.cgi?id=15521
     smbd: fix close order of base_fsp and stream_fsp
     in smb_fname_fsp_destructor()
  * d/samba-common.maintscript: fix version number for dhcp hook removal
    (Closes: #1053780)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 27 Nov 2023 22:22:54 +0300

samba (2:4.19.2+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15423
     Use-after-free in aio_del_req_from_fsp during smbd shutdown
     after failed IPC FSCTL_PIPE_TRANSCEIVE
   - https://bugzilla.samba.org/show_bug.cgi?id=15426
     clidfs.c do_connect() missing a "return" after a cli_shutdown() call
   - https://bugzilla.samba.org/show_bug.cgi?id=15463
     macOS mdfind returns only 50 results
   - https://bugzilla.samba.org/show_bug.cgi?id=15481
     GETREALFILENAME_CACHE can modify incoming new filename
     with previous cache entry value
   - https://bugzilla.samba.org/show_bug.cgi?id=15464
     libnss_winbind causes memory corruption since samba-4.18,
     impacts sendmail, zabbix, potentially more
   - https://bugzilla.samba.org/show_bug.cgi?id=15479
     ctdbd: setproctitle not initialized messages flooding logs
   - https://bugzilla.samba.org/show_bug.cgi?id=15491
     CVE-2023-5568 Heap buffer overflow with freshness tokens
     in the Heimdal KDC in Samba 4.19
   - https://bugzilla.samba.org/show_bug.cgi?id=15477
     The heimdal KDC doesn't detect s4u2self correctly when fast is in use
  * d/samba-common.maintscript: remove obsolete conffile
    /etc/dhcp/dhclient-enter-hooks.d/samba (Closes: #1053780)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 16 Oct 2023 18:26:31 +0300

samba (2:4.19.1+dfsg-4) unstable; urgency=medium

  * d/samba-common.postinst: restore installing of smb.conf using ucf

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 22:33:32 +0300

samba (2:4.19.1+dfsg-3) unstable; urgency=medium

  * d/ctdb.install: sync ceph arch list
  * d/control: mention other places where ceph arch list is used

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 20:12:20 +0300

samba (2:4.19.1+dfsg-2) unstable; urgency=medium

  * d/rules: sync with-ceph arch list from d/control

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 19:03:42 +0300

samba (2:4.19.1+dfsg-1) unstable; urgency=medium

  * new stable security bugfix release:
    o CVE-2023-3961: https://www.samba.org/samba/security/CVE-2023-3961.html
      Unsanitized pipe names allow SMB clients to connect as root
      to existing unix domain sockets on the file system.
    o CVE-2023-4091: https://www.samba.org/samba/security/CVE-2023-4091.html
      SMB client can truncate files to 0 bytes by opening files with OVERWRITE
      disposition when using the acl_xattr Samba VFS module with the smb.conf
      setting "acl_xattr:ignore system acls = yes"
    o CVE-2023-4154: https://www.samba.org/samba/security/CVE-2023-4154.html
      An RODC and a user with the GET_CHANGES right can view all attributes,
      including secrets and passwords.  Additionally, the access check fails
      open on error conditions.
    o CVE-2023-42669: https://www.samba.org/samba/security/CVE-2023-42669.html
      Calls to the rpcecho server on the AD DC can request that the server
      block for a user-defined amount of time, denying service.
    o CVE-2023-42670: https://www.samba.org/samba/security/CVE-2023-42670.html
      Samba can be made to start multiple incompatible RPC listeners,
      disrupting service on the AD DC.
  * remove debconf questions and wins dhcp hooks together with po files
    (wins is not relevant today anymore)
  * d/control: bump mit-krb5 build-dep (on mitkrb5 profile) to 1.20
  * d/control: disable ceph (libcephfs-dev, librados-dev) on 32bit
    architectures (Closes: #1053202)
  * d/control: enable rados on riscv64 once it's available there
  * d/control: samba-libs: depend on libldb of the same version since libldb
    symbols might appear during previous stable series but they don't propagate
    to next releases with previous minor version numbers.  This is ABI breakage
    but the symbols are mostly internal to samba itself
  * debian/libldb2.symbols: update
  * drop attempts to keep ldb ABI versioning

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 10 Oct 2023 18:02:05 +0300

samba (2:4.19.0+dfsg-1) unstable; urgency=medium

  * new upstream release. Some highlights:
   o changed command-line interface of smbget utility
   o improved winbindd logging
   o AD database prepared to FL 2016 standards for new domains
   o initial, partial implementation of AD FL 2012, 2012R2 and 2016
   o samba-tool support for silos, claims, sites and subnets
   o updated Heimdal import
   o other improvements and changes, see WHATSNEW.txt file for details.
  * d/patches: remove patches applied upstream, refresh patches
  * d/control: update talloc/tevent/tdb build-deps
  * d/smbclient.install: remove smbgetrc.5
  * d/patches: add ldb 2.7.1 & 2.7.2 ABI files
  * d/libldb2.symbols: add new symbols (ldb_val_as_*) and new version (2.8.0)
  * d/python3-ldb.symbols: remove unused versions, add new version
  * d/control: fix description of samba-common-bin (samba-client)
  * d/samba-common-bin.install: install samba-log-parser (for winbindd for now)
  * d/samba-libs.install: 2 new libs
  * d/samba-libs.install, d/samba-testsuite.install: move libshares-samba4.so.0
    from samba-libs to samba-testsuite
  * d/samba-libs.install, d/samba-vfs-modules.install: move
    libdfs-server-ad-samba4.so.0 from samba-libs to samba-vfs-modules
  * d/samba-libs.install, d/samba-common-bin.install: move
    libnet-keytab-samba4.so.0 from samba-libs to samba-common-bin (used by net)
  * d/samba-libs.install, d/samba-common-bin.install: move
    libRPC-WORKER-samba4.so.0 from samba-libs to samba-common-bin
    (used by usr/libexec/samba/rpcd_*)
  * samba-libs: add libndr 3.0.1 symbols
  * d/source/lintian-overrides: remove unused source-is-missing override
  * d/samba-vfs-modules.lintian-overrides: remove unused
    spelling-error-in-binary override

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 04 Sep 2023 22:57:48 +0300

samba (2:4.18.6+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=9959
     Windows client join fails if a second container CN=System exists somewhere
   - https://bugzilla.samba.org/show_bug.cgi?id=15289
     post-exec password redaction for samba-tool is more reliable for
     fully random passwords as it no longer uses regular expressions
     containing the password value itself
   - https://bugzilla.samba.org/show_bug.cgi?id=15342
     Spotlight sometimes returns no results on latest macOS
   - https://bugzilla.samba.org/show_bug.cgi?id=15346
     2-3min delays at reconnect with smb2_validate_sequence_number:
     bad message_id 2
   - https://bugzilla.samba.org/show_bug.cgi?id=15390
     Python tarfile extraction needs change to avoid a warning
     (CVE-2007-4559 mitigation)
   - https://bugzilla.samba.org/show_bug.cgi?id=15400
     rpcserver no longer accepts double backslash in dfs pathname
   - https://bugzilla.samba.org/show_bug.cgi?id=15414
     "net offlinejoin provision" does not work as non-root user
   - https://bugzilla.samba.org/show_bug.cgi?id=15417
     Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted
     to remove the destination
   - https://bugzilla.samba.org/show_bug.cgi?id=15420
     reply_sesssetup_and_X() can dereference uninitialized tmp pointer
   - https://bugzilla.samba.org/show_bug.cgi?id=15427
     Spotlight results return wrong date in result list
   - https://bugzilla.samba.org/show_bug.cgi?id=15430
     Missing return in reply_exit_done()
   - https://bugzilla.samba.org/show_bug.cgi?id=15433
     cm_prepare_connection() calls close(fd) for the second time
   - https://bugzilla.samba.org/show_bug.cgi?id=15435
     Regression DFS not working with widelinks = true
   - https://bugzilla.samba.org/show_bug.cgi?id=15441
     samba-tool ntacl get segfault if aio_pthread appended
   - https://bugzilla.samba.org/show_bug.cgi?id=15446
     DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed
   - https://bugzilla.samba.org/show_bug.cgi?id=15449
     mdssvc: Do an early talloc_free() in _mdssvc_open()
  * d/control: python3-testtools is only needed for selftest,
    remove from Build-Depends for now
  * d/rules: export PYTHONDONTWRITEBYTECODE=1 to stop python from generating
    .pyc caches (Closes: #1048754)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 16 Aug 2023 20:11:26 +0300

samba (2:4.18.5+dfsg-2) unstable; urgency=medium

  * d/rules, d/control: only build glusterfs support on 64bits
    (Closes: #1041996)
  * d/rules: make ceph conditional similar to gluster
  * d/rules: wrap _PYTHON_SYSCONFIGDATA_NAME setting to cross-compile case
    On e.g. buster, _PYTHON_SYSCONFIGDATA_NAME is different, so this assignment
    does not work right.  In order for it to work on buster, add condition on
    host vs build gnu type. This breaks compilation with foreign python binary.
  * d/control: fix description of samba-common-bin (samba-client)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 04 Aug 2023 17:29:06 +0300

samba (2:4.18.5+dfsg-1) unstable; urgency=medium

  * new upstream stable/security release 4.18.5, including:
   o CVE-2022-2127:  When winbind is used for NTLM authentication,
     a maliciously crafted request can trigger an out-of-bounds read
     in winbind and possibly crash it.
     https://www.samba.org/samba/security/CVE-2022-2127.html
   o CVE-2023-3347:  SMB2 packet signing is not enforced if an admin
     configured "server signing = required" or for SMB2 connections to
     Domain Controllers where SMB2 packet signing is mandatory.
     https://www.samba.org/samba/security/CVE-2023-3347.html
   o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service
     for Spotlight can be triggered by an unauthenticated attacker by
     issuing a malformed RPC request.
     https://www.samba.org/samba/security/CVE-2023-34966.html
   o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service
     for Spotlight can be used by an unauthenticated attacker to trigger
     a process crash in a shared RPC mdssvc worker process.
     https://www.samba.org/samba/security/CVE-2023-34967.html
   o CVE-2023-34968: As part of the Spotlight protocol Samba discloses
     the server-side absolute path of shares and files and directories
     in search results.
     https://www.samba.org/samba/security/CVE-2023-34968.html
   o BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023.
     https://bugzilla.samba.org/show_bug.cgi?id=15418
     (this has been patched in the previous upload; Closes: #1041043)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Jul 2023 17:55:58 +0300

samba (2:4.18.4+dfsg-2) unstable; urgency=medium

  * +fix-unsupported-netr_LogonGetCapabilities-l2.patch
    Fix windows logon/trust issues with 2023-07 windows updates:
    https://bugzilla.samba.org/show_bug.cgi?id=15418
  * d/copyright: also remove ctdb/doc/*.?.html pre-generated manpages
    from the upstream tarball (forgotten previously)
  * d/rules: add comment about -latomic gcc issue and drop --as-needed
    there since it is already in use

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 14 Jul 2023 12:30:31 +0300

samba (2:4.18.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release, including:
   - https://bugzilla.samba.org/show_bug.cgi?id=2312
     smbcacls and smbcquotas do not check // before the server
   - https://bugzilla.samba.org/show_bug.cgi?id=14030
     Named crashes on DLZ zone update (was in debian before)
   - https://bugzilla.samba.org/show_bug.cgi?id=15355
     NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry
     and causes test timeouts
   - https://bugzilla.samba.org/show_bug.cgi?id=15381
     Register Samba processes with GPFS
   - https://bugzilla.samba.org/show_bug.cgi?id=15382
     cli_list loops 100% CPU against pre-lanman2 servers
   - https://bugzilla.samba.org/show_bug.cgi?id=15383
     Remove comments about deprecated 'write cache size'
   - https://bugzilla.samba.org/show_bug.cgi?id=15384
     net ads lookup (with unspecified realm) fails
   - https://bugzilla.samba.org/show_bug.cgi?id=15390
     Python tarfile extraction needs change to avoid a warning
     (CVE-2007-4559 mitigation)
   - https://bugzilla.samba.org/show_bug.cgi?id=15391
     smbclient leaks fds with showacls
   - https://bugzilla.samba.org/show_bug.cgi?id=15398
     The winbind child segfaults when listing users with
     `winbind scan trusted domains = yes`
   - https://bugzilla.samba.org/show_bug.cgi?id=15402
     smbd returns NOT_FOUND when creating files on a r/o filesystem
   - https://bugzilla.samba.org/show_bug.cgi?id=15403
     smbget memory leak if failed to download files recursively
   - https://bugzilla.samba.org/show_bug.cgi?id=15404
     Backport --pidl-developer fixes
  * remove dnsserver-rename-dns_name_equal.patch (applied upstream)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 05 Jul 2023 18:14:20 +0300

samba (2:4.18.3+dfsg-3) unstable; urgency=medium

  * d/rules: query for DEB_HOST_ARCH, not DEB_HOST_ARCH_CPU,
    for -latomic workaround

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 21 Jun 2023 23:11:59 +0300

samba (2:4.18.3+dfsg-2) unstable; urgency=medium

  * d/rules: include -latomic gcc issue workaround for select arches
    apparently due to a gcc issue, some architectures (armel, mipsel, ...)
    fail to link samba due to not finidng __atomic_load_8 etc symbols
    after using atomic_load etc from stdatomic.h (part of gcc).
    Add -latomic explicitly to the list of libraries we link with.
  * d/rules: add libwbclient0 to the list of krb5-versioned packages
   (thanks to Andrew Kornilov)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 20 Jun 2023 11:35:13 +0300

samba (2:4.18.3+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15375
     Symlinks to files can have random DOS mode information
     in a directory listing
   - https://bugzilla.samba.org/show_bug.cgi?id=15378
     vfs_fruit might cause a failing open for delete
   - https://bugzilla.samba.org/show_bug.cgi?id=15361
     winbind recurses into itself via rpcd_lsad
   - https://bugzilla.samba.org/show_bug.cgi?id=15366
     wbinfo -u fails on ad dc with >1000 users
   - https://bugzilla.samba.org/show_bug.cgi?id=15338
     DS ACEs might be inherited to unrelated object classes
   - https://bugzilla.samba.org/show_bug.cgi?id=15362
     a lot of messages: get_static_share_mode_data:
     get_static_share_mode_data_fn failed: NT_STATUS_NOT_FOUND
   - https://bugzilla.samba.org/show_bug.cgi?id=15374
     aes256 smb3 encryption algorithms are not allowed in smb3_sid_parse()
   - https://bugzilla.samba.org/show_bug.cgi?id=15360
     Setting veto files = /.*/ break listing directories
   - https://bugzilla.samba.org/show_bug.cgi?id=15363
     "samba-tool domain provision" does not run interactive mode
     if no arguments are given
   - https://bugzilla.samba.org/show_bug.cgi?id=15325
     dsgetdcname: assumes local system uses IPv4
  * dnsserver-rename-dns_name_equal.patch
    (forgotten) patch from upstream targetting next stable
    Fixes crashes of named with samba DLZ plugin due to
    symbol name conflict (dns_name_equal() function).
    There's no resulting code changes, just a symbol rename.
    https://bugzilla.samba.org/show_bug.cgi?id=14030
    Closes: #1036587, #927747
  * remove generated manpage files upstream ships in
    docs/manpages/ and ctdb/doc/

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 31 May 2023 20:09:05 +0300

samba (2:4.18.2+dfsg-1) experimental; urgency=medium

  * new upstream stable/bugfix release:
   - https://bugzilla.samba.org/show_bug.cgi?id=15302
     Log flood: smbd_calculate_access_mask_fsp: Access denied:
     message level should be lower.
   - https://bugzilla.samba.org/show_bug.cgi?id=15306
     Floating point exception (FPE) via cli_pull_send
     at source3/libsmb/clireadwrite.c.
   - https://bugzilla.samba.org/show_bug.cgi?id=15328
     test_tstream_more_tcp_user_timeout_spin fails intermittently
     on Rackspace GitLab runners.
   - https://bugzilla.samba.org/show_bug.cgi?id=15329
     Reduce flapping of ridalloc test.
   - https://bugzilla.samba.org/show_bug.cgi?id=15351
     large_ldap test is unreliable.
   - https://bugzilla.samba.org/show_bug.cgi?id=15143
     New filename parser doesn't check veto files smb.conf parameter.
   - https://bugzilla.samba.org/show_bug.cgi?id=15354
     mdssvc may crash when initializing.
   - https://bugzilla.samba.org/show_bug.cgi?id=15313
     large directory optimization broken for non-lcomp path elements.
   - https://bugzilla.samba.org/show_bug.cgi?id=15357
     streams_depot fails to create streams.
   - https://bugzilla.samba.org/show_bug.cgi?id=15358
     shadow_copy2 and streams_depot don't play well together.
   - https://bugzilla.samba.org/show_bug.cgi?id=15316
     Flapping tests in samba_tool_drs_show_repl.py.
   - https://bugzilla.samba.org/show_bug.cgi?id=15317
     winbindd idmap child contacts the domain controller without a need.
   - https://bugzilla.samba.org/show_bug.cgi?id=15318
     idmap_autorid may fail to map sids of trusted domains for the first time.
   - https://bugzilla.samba.org/show_bug.cgi?id=15319
     idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings.
   - https://bugzilla.samba.org/show_bug.cgi?id=15323
     net ads search -P doesn't work against servers in other domains.
   - https://bugzilla.samba.org/show_bug.cgi?id=15353
     Temporary smbXsrv_tcon_global.tdb can't be parsed.
   - https://bugzilla.samba.org/show_bug.cgi?id=15316
     Flapping tests in samba_tool_drs_show_repl.py.
   - https://bugzilla.samba.org/show_bug.cgi?id=15343
     Tests use depricated and removed methods like assertRegexpMatches.
  * d/rules, d/libldb2.symbols; add ldb 2.6.2 version
  * heimdal-to-support-KEYRING-ccache.patch: enable KEYRING in heimdal
    (Closes: #1023609)
  * d/control: build-depend on libkeyutils-dev
    (it is pulled by some other dep, but better to be safe)
  * -s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
    (the change has been applied upstream)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Apr 2023 14:02:49 +0300

samba (2:4.18.1+dfsg-1~exp1) experimental; urgency=high

  * upstream stable/security/bugfix release, fixing the following issues:
    o CVE-2023-0225: An incomplete access check on dnsHostName allows
      authenticated but otherwise unprivileged users to delete this
      attribute from any object in the directory.
      https://www.samba.org/samba/security/CVE-2023-0225.html
    o CVE-2023-0922: The Samba AD DC administration tool, when operating
      against a remote LDAP server, will by default send new or reset
      passwords over a signed-only connection.
      https://www.samba.org/samba/security/CVE-2023-0922.html
    o CVE-2023-0614: Fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919
      Confidential attribute disclosure via LDAP filters was insufficient and
      an attacker may be able to obtain confidential BitLocker recovery keys
      from a Samba AD DC.  Installations with such secrets in their Samba AD
      should assume they have been obtained and need replacing.
      https://www.samba.org/samba/security/CVE-2023-0614.html
    Closes: CVE-2023-0225 CVE-2023-0922 CVE-2023-0614
  * update libldb symbols and versions

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 29 Mar 2023 17:59:17 +0300

samba (2:4.18.0+dfsg-1~exp1) experimental; urgency=medium

  * new upstream release (4.18.0):
   * SMB Server performance improvements
   * More succinct samba-tool error messages
   * Colour output with samba-tool --color
   * New samba-tool dsacl subcommand for deleting ACES
   * New wbinfo option --change-secret-at
   * New option to change the NT ACL default location
   * Azure Active Directory / Office365 synchronisation improvements
   * new smb.conf parameters:
     server addresses
     acl_xattr:security_acl_name
   * For more details, please refer to WHATSNEW.txt file.
  * d/control: bump talloc/tdb/tevent build-deps
  * patches:
    - refresh: hurd-compat.patch
    - refresh: spelling.patch, remove many, add 3 new changes
    - new: heimdal-spelling.patch, spelling fixes for third_party/heimdal
    - remove: unwrap-getresgid-typo.patch, not needed
  * d/samba-libs.install: add new internal library libstable-sort-samba4.so.0
  * d/libldb2.symbols, python3-ldb.symbols.in: add new versions (2.7.0, 2.7.1)
  * d/libwbclient0.symbols: add new version and two new symbols:
     wbcChangeTrustCredentialsAt wbcCtxChangeTrustCredentialsAt

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 09 Mar 2023 14:47:05 +0300

samba (2:4.17.6+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release 4.17.6:
   * https://bugzilla.samba.org/show_bug.cgi?id=15314
     streams_xattr is creating unexpected locks on folders.
   * https://bugzilla.samba.org/show_bug.cgi?id=10635
     Use of the Azure AD Connect cloud sync tool is now supported for password
     hash synchronisation, allowing Samba AD Domains to synchronise passwords
     with this popular cloud environment.
   * https://bugzilla.samba.org/show_bug.cgi?id=15299
     Spotlight doesn't work with latest macOS Ventura.
   * https://bugzilla.samba.org/show_bug.cgi?id=15310
     New samba-dcerpc architecture does not scale gracefully.
   * https://bugzilla.samba.org/show_bug.cgi?id=15307
     vfs_ceph incorrectly uses fsp_get_io_fd() instead of fsp_get_pathref_fd()
     in close and fstat.
   * https://bugzilla.samba.org/show_bug.cgi?id=15293
     With clustering enabled samba-bgqd can core dump due to use after free.
   * https://bugzilla.samba.org/show_bug.cgi?id=15311
     fd_load() function implicitly closes the fd where it should not.
  * debian/po/ro.po update from Remus-Gabriel Chelu
  * s3-smbd-open.c-smbd_calculate_access_mask_fsp-lower-.patch
     makes smbd a bit less spammy in logs
  * d/control: clarify some package descriptions (Closes: #1031922)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 09 Mar 2023 12:52:14 +0300

samba (2:4.17.5+dfsg-2) unstable; urgency=medium

  * d/control: samba: depends on exact version of python3-samba
  * d/control: fix typo
  * more tweaks for foreign/cross build
  * d/control: work around autodep8 #904999 again
  * introduce upstream-like aliases for debian .service names,
    add rationale

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 04 Feb 2023 17:15:40 +0300

samba (2:4.17.5+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release. From WHATSNEW.txt:
    * BUG 14808: smbc_getxattr() return value is incorrect.
    * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX
      are not handled correctly.
    * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors.
    * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs()
      fails to find DC when there is only an AAAA record for the DC in DNS
      (Closes: #1023606).
    * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle.
    * BUG 15277: DFS links don't work anymore on Mac clients since 4.17.
    * BUG 15283: vfs_virusfilter segfault on access,
      directory edgecase (accessing NULL value).
    * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
      based SChannel on NETLOGON (additional changes).
    * BUG 15243: %U for include directive doesn't work for share listing
      (netshareenum) (the fix was in debian before).
    * BUG 15266: Shares missing from netshareenum response in samba 4.17.4
      (the fix was in debian before).
    * BUG 15269: ctdb: use-after-free in run_proc.
    * BUG 15280: irpc_destructor may crash during shutdown.
    * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo.
    * BUG 15268: smbclient segfaults with use after free on an optimized build
    * BUG 15282: smbstatus leaking files in msg.sock and msg.lock.
    * BUG 15164: Leak in wbcCtxPingDc2.
    * BUG 15265: Access based share enum does not work in Samba 4.16+.
    * BUG 15267: Crash during share enumeration.
    * BUG 15271: rep_listxattr on FreeBSD does not properly check
      for reads off end of returned buffer.
    * BUG 15281: Avoid relying on C89 features in a few places.
  * remove patches applied upstream:
   - reload-registry-shares-after-reloading-services.patch
   - rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
  * d/control: Standards-Version: 4.6.2 (no changes)
  * d/control: put all doc-generating build-deps into one line
  * little prep for cross-compilation
    - build-depend on python3:any and python3-dev:any
    - build-depend on libpython3-dev for actual module building,
      and use arch-specific python3-config from there
    - set and export _PYTHON_SYSCONFIGDATA_NAME to get foreign-arch values
      provided by libpython3-dev (also helps when python itself is foreign)
    - depend on perl:any not just perl
    - export CC/CPP/LD/PKGCONFIG for ./configure (buildtools.mk)
  * d/gbp.conf: unignore branch
  * d/control: samba, ctdb, winbind: do not depend on lsb-base
    (the script is in sysvinit-utils now)
  * d/control: drop unused build-dep on libncurses5-dev

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 27 Jan 2023 11:15:01 +0300

samba (2:4.17.4+dfsg-3) unstable; urgency=medium

  * +rpc_server_srvsvc-retrieve_share_ACL_via_root_context.patch
    https://bugzilla.samba.org/show_bug.cgi?id=15265
  * +reload-registry-shares-after-reloading-services.patch
    https://bugzilla.samba.org/show_bug.cgi?id=15266
  * d/samba.postinst: fix /var/spool/samba => /var/tmp handling
    (old spooldir can be referred to in other sections too)
  * create common script "is-configured" to check if the service is configured
    in smb.conf, and stop masking services in postinst
  * rewrite SysV init scripts (simplify, make consistent, etc)
  * d/winbind.postinst: create/change /var/lib/samba/winbindd_privileged
    at install time only (it should be in /run/samba/ somewhere these days)
  * d/control: change version of samba which samba-ad-provisioning
    Breaks to where provisioning was split out

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 03 Jan 2023 10:45:36 +0300

samba (2:4.17.4+dfsg-2) unstable; urgency=medium

  * d/control: samba-dc-provision Replaces+Breaks samba (< 4.17.4+dfsg-2).
    Closes: #1026387

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 19 Dec 2022 16:36:00 +0300

samba (2:4.17.4+dfsg-1) unstable; urgency=medium

  * new upstream stable/security release, with the following changes:
   - CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege
     Vulnerability disclosed by Microsoft on Nov 8 2022, see
     https://www.samba.org/samba/security/CVE-2022-37966.html
   - CVE-2022-37967: Windows Kerberos Elevation of Privilege Vulnerability
     disclosed by Microsoft on Nov 8 2022. See
     https://www.samba.org/samba/security/CVE-2022-37967.html
   - CVE-2022-38023: Weak "RC4" (rc4-hmac) protection of the NetLogon Secure
     channel uses, see https://www.samba.org/samba/security/CVE-2022-38023.html
    There are several important behavior changes included in this release,
    which may cause compatibility problems interacting with system still
    expecting the former behavior.  Please read the documents referenced above!
    See also the WHATSNEW.txt document, as there are several new, changed
    and deprecated smb.conf parameters.
  * Other bugfixes in this release (from WHATSNEW.txt):
    https://bugzilla.samba.org/show_bug.cgi?id=14929 CVE-2022-44640
     Upstream Heimdal free of user-controlled pointer in FAST.
    https://bugzilla.samba.org/show_bug.cgi?id=15219
     Heimdal session key selection in AS-REQ examines wrong entry.
    https://bugzilla.samba.org/show_bug.cgi?id=13135 The KDC logic around
     msDs-supportedEncryptionTypes differs from Windows.
    https://bugzilla.samba.org/show_bug.cgi?id=14611 CVE-2021-20251
     Bad password count not incremented atomically.
    https://bugzilla.samba.org/show_bug.cgi?id=15206 libnet: change_password()
     doesn't work with dcerpc_samr_ChangePasswordUser4()
    https://bugzilla.samba.org/show_bug.cgi?id=15230
     Memory leak in snprintf replacement functions.
    https://bugzilla.samba.org/show_bug.cgi?id=15253 RODC doesn't reset
     badPwdCount reliable via an RWDC (CVE-2021-20251 regression).
    https://bugzilla.samba.org/show_bug.cgi?id=15198
     Prevent EBADF errors with vfs_glusterfs.
    https://bugzilla.samba.org/show_bug.cgi?id=15243
     %U for include directive doesn't work for share listing (netshareenum).
    https://bugzilla.samba.org/show_bug.cgi?id=15257
     Stack smashing in net offlinejoin requestodj.
  * removed patches which are now included upstream:
   - nsswitch-pam-data-time_t.patch
   - CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 15 Dec 2022 21:54:31 +0300

samba (2:4.17.3+dfsg-4) unstable; urgency=medium

  * create samba-ad-provision package with contents of /usr/share/samba/setup.
    It is recommended by samba, so can be uninstalled if not needed.
  * create samba-ad-dc package. It is an empty metapackage for now, but with
    dependencies needed to run an Active Directory Domain Controller (AD-DC)
  * samba-ad-provision.lintian-overrides: license files
  * print meaningful error message if samba-ad-provision is not installed
    (meaningful-error-if-no-samba-ad-provision.patch)
  * print meaningful error message if python3-markdown is not installed
    (meaningful-error-if-no-python3-markdown.patch)
  * ctdb: move rundir from /var/run to /run
  * fix typo in fruit patch
  * a few more spelling fixes
  * add #DEBHELPER# tokens to libnss-winbind.{postinst,postrm}
  * remove mentions of /var/spool/samba from samba.lintian-overrides
    (moved to /var/tmp)
  * change embedded-library heimdal lintian override in a way to be understood
    by both old and new lintian, so the package can be uploaded

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 05 Dec 2022 14:39:43 +0300

samba (2:4.17.3+dfsg-3) unstable; urgency=medium

  * d/control: winbind should depend on the same binary:Version
    of libwbclient, or else its components can't talk to the daemon.
    Thank you Stefan Weichinger for the patience while finding this one!
  * libnss-winbind: add postinst/postrm scripts to add/remove nsswitch.conf
    entry for winbind (but not for wins)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 01 Dec 2022 22:38:07 +0300

samba (2:4.17.3+dfsg-2) unstable; urgency=medium

  * fruit-disable-useless-size_t-overflow-check.patch (Closes: #974868)
  * CVE-2022-42898-lib-krb5-fix-_krb5_get_int64-on-32bit.patch
    Fix regression on 32bit systems:
    https://bugzilla.samba.org/show_bug.cgi?id=15203

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 21 Nov 2022 20:41:46 +0300

samba (2:4.17.3+dfsg-1) unstable; urgency=medium

  * new upstream security release 4.17.3, fixing the following issue:
    CVE-2022-42898: Heimdal Kerberos libraries suffers from an integer
    multiplication overflow vulnerability which affects 32bit platforms,
    see https://www.samba.org/samba/security/CVE-2022-42898.html
    This changes third_party/heimdal/, it does not affect mitkrb5 builds.
  * d/rules: stop stripping +dfsg suffix from ldb version
  * d/control: declare dependency on password (for groupadd in postinst)
    for winbind and samba (Closes: #1023759)
  * implement pkg.samba.mitkrb5 build profile to build with system mit-krb5
    (with "mitkrb5" version suffix in some packages for now)
  * d/control: mark libufing-dev build dep with <!pkg.samba.nouring>
    (to simplify out-of-archive builds for older systems)
  * d/rules: parametrise list of packages to omit (eg on ubuntu-i386)
    with ${omit-pkgs}
  * d/rules: use variables in a more consistent way, use single ${config-args}
  * d/control: tdb-tools and lmdb-utils packages are also needed for tests
    (everything is commented out for now anyway)
  * d/rules: update knownfail tests
  * d/rules: stop exporting buildflags, export compiler options when needed
  * d/rules: always define rados:Depends & vfsmods:Depends substvars
  * unwrap-getresgid-typo.patch - fix crash during p11-kit execution
    (https://bugzilla.samba.org/show_bug.cgi?id=15227) (for the testsuite only)
  * nsswitch-pam-data-time_t.patch - fix time_t not fit in a pointer (eg x32)
    (https://bugzilla.samba.org/show_bug.cgi?id=15224)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 15 Nov 2022 19:26:10 +0300

samba (2:4.17.2+dfsg-9) unstable; urgency=medium

  * hurd-compat.patch: some minor compatibility tweaks for hurd
  * d/rules compat work:
    - ceph is linux-only like glusterfs
    - d/rules: add another conditional, with_snapper
    - combine linux features into single block
  * d/rules: support "terse" build option for non-verbose build
  * d/rules: remove third_party/heimdal/lib/gssapi/gssapi.h before build
    (Closes: #1013205). This fixes -I path order and <gssapi/gssapi.h>
    include mess which caused samba to FTBFS on sparc64 for quite some time

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 06 Nov 2022 20:13:19 +0300

samba (2:4.17.2+dfsg-8) unstable; urgency=medium

  * d/rules: do not explicitly enable quotas on non-linux:
    enable everything interesting on linux explicitly and let ./configure
    to figure it out in other systems.  This should fix FTBFS problem on hurd.
  * d/rules: do not disable systemd on non-linux, let ./configure figure it out
  * d/winbind.postinst: switch addgroup => groupadd and eliminate getent.
    winbind package never declared dependency on adduser but always used
    addgroup command in its postinst script. Finally this broke piuparts.
    Switch to groupadd which is even easier to use.
  * d/samba.postinst: switch addgroup => groupadd and eliminate getent
  * d/smb.conf: use useradd in example create user script too

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 03 Nov 2022 15:04:46 +0300

samba (2:4.17.2+dfsg-7) unstable; urgency=medium

  * another way to work around #1013259: provide a compatibility symlink
    libndr.so.2 pointing to libndr.so.3:
    - libndr-debug-level-compat.diff, libndr-revert-so3.diff: remove
    - d/samba-libs.symbols: adjust symbols/versions
    - d/samba-libs.install: libndr.so.2 => libndr.so.3
    - d/samba-libs.links: provide the compat libndr.so.2 symlink
  * d/samba-libs.links: add comments describing libndr.so.N issue
  * d/samba-libs.links: add libndr.so.1 compat symlink too (for bullseye sssd)
  * d/control: unbreak bullseye/jammy sssd-ad-common, sssd-ad, sssd-ipa
    by samba-libs once libndr.so.1 compat link is here

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 20:43:53 +0300

samba (2:4.17.2+dfsg-6) unstable; urgency=medium

  * d/control: fix comment in previous upload

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 10:45:26 +0300

samba (2:4.17.2+dfsg-5) unstable; urgency=medium

  * d/control: bump version of broken-by-samba-libs sssd
    and add more affected sssd packages;
    also reformat the comment there so dpkg-gencontrol does not complain

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 02 Nov 2022 09:34:10 +0300

samba (2:4.17.2+dfsg-4) unstable; urgency=medium

  * d/control: stop suggesting old/orphaned/gone-upstream smbldap-tools
  * libndr work (Closes: #1013259):
   - d/control: samba-libs breaks bullseye sssd-ad due to libndr.so.1=>.2 bump
   - d/samba-libs.install: be more explicit about sonames of public libs
     to catch soname changes
   - libndr-debug-level-compat.diff, libndr-revert-so3.diff: revert
     libndr.so.2->3 soname bump by providing compat wrapper for new symbol
   - d/samba-libs.symbols: provide symbols for libndr.so.2

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 01 Nov 2022 12:53:22 +0300

samba (2:4.17.2+dfsg-3) unstable; urgency=low

  * rebase on top of debian 4.16.6+dfsg-6 release, include some
    history of 4.17.* experimental releases in changelog
  * d/samba-libs.lintian-overrides: update package-name-doesnt-match-sonames
    to match all libs
  * urgency is set to low to delay unstable->testing transition a bit

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 30 Oct 2022 16:23:51 +0300

samba (2:4.17.2+dfsg-2) experimental; urgency=medium

  * d/rules: stop dh_installpam from installing samba.pam
    to the samba package (Closes: #1022775, #1022776)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 20:13:53 +0300

samba (2:4.17.2+dfsg-1) experimental; urgency=medium

  * upstream 4.17.2 security release:
   CVE-2022-3592 A malicious client can use a symlink to escape the exported
   directory. https://www.samba.org/samba/security/CVE-2022-3592.html
   (Samba 4.17 only)
  * Remove poptGetArg-misuse-fixes-1022826.diff (applied to 4.17.2)
  * d/rules: no need to build compile_et,asn1_compile intermediate targets
    anymore; also remove now-unused ${WAFv} macro

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 14:30:44 +0300

samba (2:4.17.1+dfsg-1) experimental; urgency=medium

  * new upstream bugfix release containing a security fix:
    * CVE-2021-20251 Bad password count not incremented atomically.
  * Merge changes from 4.16.x (debian/master) branch.
  * use-bzero-instead-of-memset_s.diff : use explicit_bzero() instead of
    bzero() for the substitute of memset_s(). bzero() is wrong here because
    it, just like memset, can be optimized out by the compiler.

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 19 Oct 2022 21:34:11 +0300

samba (2:4.17.0+dfsg-2) experimental; urgency=medium

  * mention closing of CVE-2022-32743 by the 4.17.0 upload
  * mention closing of CVE-2022-1615 by the 4.17.0 upload
  * move libpac-samba4.so.0 from samba to samba-libs (Closes: #1021450)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 08 Oct 2022 23:00:05 +0300

samba (2:4.17.0+dfsg-1) experimental; urgency=medium

  * new upstream release 4.17.0
    Closes: CVE-2022-1615
    Closes: #1021022, CVE-2022-32743
  * removed: spelling.patch (partially applied upstream)
  * removed: weak-crypto-allowed-clarify.diff (applied upstream)
  * refresh: ctdb-create-piddir.patch
  * refresh: fix-nfs-service-name-to-nfs-kernel-server.patch
  * d/control: update minimum versions for talloc/tevent/tdb
  * d/rules: do not install ctdb.service, it is installed by upstream now
  * d/ctdb.install: do not install ctdb_wrapper (not used anymore)
  * d/libldb2.symbols, d/d/python3-ldb.symbols.in: new versions: 2.6.0 2.6.1
    per upstream, re-version symbols added in 2.5.2 as added in 2.6.1
    (ldb users needs to be recompiled anyway after updating libldb)
  * new: spelling.patch: a few more spelling fixes
  * d/control: bump Standards-Version to 4.6.1 (no changes)
  * Remove dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch
    (included in 4.17.0 already)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 13 Sep 2022 20:47:05 +0300

samba (2:4.16.6+dfsg-6) unstable; urgency=medium

  * d/rules: use the right dir for dh_shlibdeps -l (long-standing issue)
  * rewrite shlibs/symbols-generating file d/genshlibs, make whole process
    much more clean and strighforward, and 10x times faster too
  * debian/libnss-winbind.triggers: activate ldconfig trigger
  * add debian/samba-libs.symbols with libsmbldap library
  * d/samba.examples: do not install smbadduser: csh considered harmful
  * d/rules: remove long-unused commented-out override_dh_perl-arch
  * d/samba.lintian-overrides: *docs-outside-share-doc usr/share/samba/setup/
  * d/genshlibs: add the forgotten mkdir for d/$pkg/DEBIAN
  * remove static/fixed branding d/patches/VERSION.patch
  * d/rules: implement dynamic branding of VERSION file based on dpkg-vendor
  * d/rules: simplify package interdependency checking rules
  * d/rules: add a lot more interpackage dependency checks
  * d/NEWS: merge it into d/samba.NEWS (removes several lintian warnings)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 29 Oct 2022 08:28:53 +0300

samba (2:4.16.6+dfsg-5) unstable; urgency=medium

  * move samba:idmap_script.8.gz and samba-libs:idmap_rfc2307.8.gz manpages to
    winbind package where they belong and where actual idmap modules lives.
    (install all idmap_*.8 manpages to winbind package)
  * d/rules: install pam.d/samba with mode 0644, not 0755
  * many lintian-override updates:
   - source: ctdb/doc/*.html actually has sources
   - source: +very-long-line-length-in-source-file * (for generated files)
   - source: +debian-control-has-unusual-field-spacing Breaks
   - winbind: +spare-manual-page for module manpages
   - *: update some overrides for new lintian
   - libpam-winbind: +spare-manual-page pam_winbind.8
   - libldb2: +package-contains-empty-directory .../ldb/modules/ldb/
   - *: +hardening-no-fortify-functions for some simple shared libs

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 26 Oct 2022 22:27:00 +0300

samba (2:4.16.6+dfsg-4) unstable; urgency=medium

  * poptGetArg-misuse-fixes-1022826.diff: fix poptGetArg() misuse
    for popt-1.9 (Closes: #1022826)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 26 Oct 2022 19:45:38 +0300

samba (2:4.16.6+dfsg-3) unstable; urgency=medium

  * d/rules: stop dh_installpam from installing samba.pam
    to the samba package (Closes: #1022775, #1022776)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 20:13:53 +0300

samba (2:4.16.6+dfsg-2) unstable; urgency=medium

  * d/rules: pam.d/samba should go to /etc, not /
  * d/README.source.md: it is README.source.md not README.source
  * d/control: bump Standards-Version to 4.6.1 (no changes)
  * d/rules: verify that samba-libs does not depend on samba

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 13:55:33 +0300

samba (2:4.16.6+dfsg-1) unstable; urgency=medium

  * new upstream security release 4.16.6, fixing:
    CVE-2022-3437:  There is a limited write heap buffer overflow in the GSSAPI
    unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba).
    https://www.samba.org/samba/security/CVE-2022-3437.html
  * use explicit_bzero() instead of bzero() for the substitute of memset_s()
  * d/rules: make it a bit more consistent with other samba packages
  * d/rules: stop exporting ${PYTHON}
  * a bunch of ubuntu-related changes:
   - d/rules: omit glusterfs on ubuntu-i386
   - apply Ubuntu changes to smb.conf at install time (d/smb.conf.ubuntu.diff)
   - d/tests/: ensure io_uring module is built before testing it
   - d/rules: inline parallel check from dpkg/buildopts.mk
    (buildopts.mk does not exist on ubuntu 20.04 focal)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 25 Oct 2022 12:48:20 +0300

samba (2:4.16.5+dfsg-2) unstable; urgency=medium

  [ Michael Tokarev ]
  * d/tests/util: use printf for formatting password for smbpasswd,
    not non-standard echo \n (mr !60)
  * introduce LDB_2.4.4 version symbol (Closes: #1021371)
    Create an empty ABI file just to make the scripts run during the build
    stage to introduce LDB_2.4.4 version symbol into libldb.so, and remove
    this empty file in the clean target. It is a bit hackish but works fine.
    This is only needed to upgrade from bullseye to bookworm, from
    4.13.13+dfsg-1~deb11u5+ to the next release, 4.16+.
    Remove this for bookworm+.
  * dont-ignore-errors-in-random-number-generation-CVE-2022-1615.patch:
    GnuTLS gnutls_rnd() can fail and give predictable random values.
    Closes: #1021024, CVE-2022-1615

  [ John Paul Adrian Glaubitz ]
  * disable ceph support on ppc64 and x32 (Closes: #1020781, #1012165)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 08 Oct 2022 15:11:15 +0300

samba (2:4.16.5+dfsg-1) unstable; urgency=medium

  * new (minor) upstream release 4.16.5
  * removed fix-samba-tool-domain-join-segfault.patch (included upstream)
  * d/gbp.conf: no need to filter orig.tar: uscan already does that

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 08 Sep 2022 12:44:38 +0300

samba (2:4.16.4+dfsg-2) unstable; urgency=medium

  * d/libldb2.symbols: include newly added symbols

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 01 Aug 2022 15:43:11 +0300

samba (2:4.16.4+dfsg-1) unstable; urgency=high

  * new upstream security release fixing:
    o CVE-2022-2031: Samba AD users can bypass certain restrictions associated
      with changing passwords.
      https://www.samba.org/samba/security/CVE-2022-2031.html
    o CVE-2022-32742: Server memory information leak via SMB1.
      https://www.samba.org/samba/security/CVE-2022-32742.html
    o CVE-2022-32744: Samba AD users can forge password change requests
      for any user.
      https://www.samba.org/samba/security/CVE-2022-32744.html
    o CVE-2022-32745: Samba AD users can crash the server process with an LDAP
      add or modify request.
      https://www.samba.org/samba/security/CVE-2022-32745.html
    o CVE-2022-32746: Samba AD users can induce a use-after-free in the server
      process with an LDAP add or modify request.
      https://www.samba.org/samba/security/CVE-2022-32746.html
   * Closes: #1016449, CVE-2022-2031 CVE-2022-32742, CVE-2022-32744,
     CVE-2022-32745, CVE-2022-32746

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 27 Jul 2022 18:35:53 +0300

samba (2:4.16.3+dfsg-1) unstable; urgency=medium

  [ Michael Tokarev ]
  * new upstream minor/bugfix releae. See WHATSNEW.txt for details.
  * d/watch: add the forgotten repacksuffix=+dfsg

  [ Andreas Hasenack ]
  * update nfs configuration examples for ctdb

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 18 Jul 2022 17:15:07 +0300

samba (2:4.16.2+dfsg-1) unstable; urgency=medium

  * new upstream minor/bugfix release.
  * removed waf-add-support-for-GNU-kFreeBSD.patch (applied upstream)
  * new minor version of libldb
    (no code changes, just the build system update to support python 3.11)
  * move samba-dcerpcd from samba package to samba-common-bin due to winbind
    New in 4.16 samba-dcerpcd binary is used by smbd and winbind, so putting
    it to samba package makes winbind unable to run it without samba.
    For now, in order to fix this issue, move this binary from samba to
    samba-common-bin package. It might be worth creating its own package
    for this binary (or maybe some more binaries), once it is clear where
    upstream is going to.  Making this binary a part of samba-common-bin
    adds some more files to smbclient-only setup.
    (Closes: #1012240)
  * remove mksmbpasswd script and manpage: we have smbpasswd whcih can add
    entries to smbpasswd file if needed, and can handle other passwod storage
    formats too

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 13 Jun 2022 19:08:44 +0300

samba (2:4.16.1+dfsg-8) unstable; urgency=medium

  * fix the Breaks/Replaces versions in the previous upload for moving
    libsamba-utils.so, and use the same Breaks/Replaces for the -dev
    packages too

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 07 Jun 2022 14:11:09 +0300

samba (2:4.16.1+dfsg-7) unstable; urgency=medium

  * drop libunwind-dev build dependency again: it turned out the
    internal stack unwind is better anyway
  * move libsamba-utils.so and its dependencies from libwbclient0
    into samba-libs. In the past, libwbclient were built using this
    library, but it does not depend on libsamba-utils anymore
  * d/control: libnss-winbind and libpam-winbind does not depend
    on samba-common. None of the files in samba-common are used by
    nss and pam modules; winbind does use them but not the modules.
  * d/rules: add --with-sockets-dir=/run/samba (or else it was
    /var/run/samba)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 07 Jun 2022 12:09:50 +0300

samba (2:4.16.1+dfsg-6) unstable; urgency=medium

  * d/control: specify arch list for libunwind-dev build-dep to be the same
    as for libunwind itself (it is not built on all architectures)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 29 May 2022 12:09:22 +0300

samba (2:4.16.1+dfsg-5) unstable; urgency=medium

  * add-missing-libs-deps.diff: add missing dependencies for a few samba
    libraries. Closes: #1010922
  * point [printers] to /var/tmp/, stop shipping /var/spool/samba/.
    For a long time, we shipped an alternative /var/tmp/ directory with mode
    01777 (so that anyone can use it to store files) but without the same setup
    as for regular /var/tmp/ (in particular, without removing old files and
    since it is not a usual place to store temp files, no one actually looked
    at it the same way someone would take care of /var/tmp/.  Change smb.conf
    to use /var/tmp/ instead of /var/spool/samba/. In the postinst script,
    remove /var/spool/samba/, check if it is still used in smb.conf,
    and create a compatibility symlink pointing to tmp/, suggesting changing
    smb.conf.  And remove this compat symlink in postrm.
    This probably can be accomplished by a debconf question, but the
    thing is complicated by the fact that smb.conf might be upgrading
    too at the same time.
  * debian/patches/weak-crypto-allowed-clarify.diff: update
  * testparm-do-not-fail-if-pid-dir-does-not-exist.patch: also cover samba-tool
    testparm too, not only regular stand-alone testparm.
  * fix-samba-tool-domain-join-segfault.patch: fix segfault when joining an
    AD-DC domain using samba-tool join.
  * d/rules: enable --with-profilig-data to build samba with profiling
    collection (if set in smb.conf)
  * d/control: add libunwind-dev to build-deps, to compile in stack backtrace
    logging in case of crash
  * d/control: stop build-conflicting with now-unused libtracker-miner-2.0-dev
  * d/control: stop build-conflicting with libtracker-sparql-2.0-dev: there's
    no point in explicitly disabling libtracker-sparql support (bullseye-only
    for now anyway)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 28 May 2022 22:50:43 +0300

samba (2:4.16.1+dfsg-4) unstable; urgency=medium

  [ Michael Tokarev ]
  * fix spelling in disable-setuid-confchecks.patch
  * d/NEWS: split it into different $package.NEWS files
  * d/upstream/metadata: add Bug-Database
  * d/samba.postinst: create sambashare group and usershare directory
    on new install only
  * libldb2: provide compat symlinks for bullseye ldb modules dir
  * d/rules: provide Build-Depends-Package: for python3-ldb
  * samba-vfs-modules.lintian-overrides: add spare-manual-page vfs_*.8 override
  * winbind.lintian-overrides: add spare-manual-page idmap_*.8 override

  [ Arnaud Rebillout ]
  * Fix patch testparm-do-not-fail-if-pid-dir-does-not-exist (Closes: #1010835)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 11 May 2022 09:50:03 +0300

samba (2:4.16.1+dfsg-3) unstable; urgency=medium

  * fix ldb package version generation in d/make_shlibs
    which was wrong in 2 previous uploads.
    Will I *ever* make it actually work someday?

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 18:32:24 +0300

samba (2:4.16.1+dfsg-2) unstable; urgency=medium

  * rethink ldb version *again*, to be 2.5.0+smb4.16.1-2
    or else 2.5.0+smb-1 from samba-4.16.1-2 sorts before
    2.5.0+smb-7 from samba-4.16.0-7.

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 17:02:16 +0300

samba (2:4.16.1+dfsg-1) unstable; urgency=medium

  * new upstream minor release 4.16.1
  * move-msg.sock-from-var-lib-samba-to-run-samba.patch:
    move /var/lib/samba/private/msg.sock/ to /run/samba/msg.sock/.
    This is a (private) socket directory for IPC, it should not be in /var.
  * Remove /var/lib/samba/private/msg.sock/ in postinst
  * testparm-do-not-fail-if-pid-dir-does-not-exist.patch:
    testparm deliberately fails if /run/samba does not exist,
    while testparam itself does not use it and daemons will
    create it on demand.  Just make it a warning instead of a
    fatal error, and we'll not need to pre-create this dir
    in a random place using hackish ways
  * ctdb-create-piddir.patch: create /run/ctdb/ in ctdb.service
    and ctdb.init before invoking ctdbd (as the latter does not
    create its pid directory on demand).
  * stop (ab)using tmpfiles.d to pre-create /run/samba/ and /run/ctdb/
    and stop creating /run/samba/ in samba-common-bin.postinst just to
    make testparam happy.
  * d/rules: minor tweaks

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 02 May 2022 13:16:12 +0300

samba (2:4.16.0+dfsg-7) unstable; urgency=medium

  * another bunch of small tweaks to d/rules:
   - set SHELL to /bin/sh -e
   - rework the clean target
   - provide fast replacement of architecture.mk
   - better expression for DEB_REVISION
   - rearrange configure options
  * do not disable glusterfs on ubuntu-i386 (glusterfs is now in main)
  * mention closing of #1001053 by the 4.16 upload
  * change the ldb version string again, removing te "+samba*" suffix
    to allow bin-NMUs +b1 (Closes: #1010100)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 24 Apr 2022 16:56:34 +0300

samba (2:4.16.0+dfsg-6) unstable; urgency=medium

  * another attempt to fix/work around #221618. Re-enable
    libsmbclient-ensure-lfs-221618.patch and change it to just define
    an extra type array int[sizeof(off_t)-7]. If off_t is small it will
    become a compile error.  It is an ugly way to do it, but it should
    actually work, unlike various static_assert/_Static_assert which are
    language (C/C++) and standard-dependent.  Closes: #221618.

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 17:27:09 +0300

samba (2:4.16.0+dfsg-5) unstable; urgency=medium

  * disable libsmbclient-ensure-lfs-221618.patch for now.
    It throws errors in one or another configuration no matter what.
    Repoens: #221618
  * d/salsa-ci.yml: re-allow blhc salsa-ci test to fail again
    due to different bug in blhc

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 16:33:57 +0300

samba (2:4.16.0+dfsg-4) unstable; urgency=medium

  * libsmbclient-ensure-lfs-221618.patch: replace _Static_assert with
    static_assert (and include <assert.h> to make C++ happy too
    (Closes: #1009211)
  * disable-setuid-confchecks.patch: when running configure tests,
    samba tries to verify setuid/setgid etc calls are actually
    *working*, not just exists. This is only possible when the
    configure is running as root. But it turns out in some salsa-ci
    configuration (namely in the reprotest), the second build is
    actually running as root, and in that environment, actual
    setegid call is failing somehow. Just disable the config-time
    check for correctly working setgid and assume it "just works"
    if present, exactly like non-root build will do.
  * d/salsa-ci.yml: do not expect failure in blhc test (the original
    prob has been fixed long ago), and stop requiring experimental
  * mention closing of #999876 by 4.16

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 09 Apr 2022 00:42:38 +0300

samba (2:4.16.0+dfsg-3) unstable; urgency=medium

  * d/control: comment out the selftest-mode build deps for now
  * d/control: forgotten python3-samba:Replaces against samba package too,
    not just samba-libs, when moving dckeytab python lib (Closes: #1009175)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 08 Apr 2022 10:18:23 +0300

samba (2:4.16.0+dfsg-2) unstable; urgency=medium

  * use strict versioned dependency between samba-dsdb-modules and libldb2,
    since they're tied to each other and are now built from the same source
  * fix forgotten shlib symbols generation for python3-ldb
  * change libldb versioning scheme
     from   ldb_2:2.5.0+samba4.16.0-1
     to     ldb_2:2.5.0-1+samba4.16.0
    so that symbols versioning works correctly.  Unfortunately the previous
    upload to experimental used the first form which is greather than the
    correct one, so temporarily (just for this 2.5.0 version of ldb) use
    this:   ldb_2:2.5.0+smb-1+samba4.16.0
    (with "+smb" suffix to be removed for 2.5.1+)
  * exclude samba-vfs-modules for i386 ubuntu build since this package
    is useless without samba itself (which is not built on this environment)
  * create selftest rules and add !nocheck build-dependencies
    (but do not enable selftests for now as they're failing)
  * split build system into -arch and -indep parts. We build only one arch-all
    package (samba-common) which contains only static files from debian/,
    there's no need to build whole samba to build this package.
    Move almost all Build-Depends to Build-Depends-Arch (and reindent them).
  * various updates to d/rules

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 07 Apr 2022 09:56:56 +0300

samba (2:4.16.0+dfsg-1) experimental; urgency=medium

  * New upstream major release.
    Closes: #1004690, CVE-2021-20316: Fileserver symlink metadata share escape
    Closes: #1004691, CVE-2021-43566: mkdir race condition allows share escape
    Closes: #1004692, CVE-2021-44141: UNIX extensions in SMB1 disclose whether
     the outside target of a symlink exists
    Closes: #1005642 (windows client data corruption due to cache poisoning)
    Closes: #1001053 (MIT-kerberos config broken after fix for CVE-2020-25717)
    Closes: #988197 (legacy printing support, 47d79d7e7e406f7dd2)
    Closes: #998423 (coredump connecting from macos to shares with var substs)
    Closes: #999876 (winbind allow trusted domains = no regression)
  * Notable changes in 4.16 series compared to 4.13:
    - modular VFS (see The_New_VFS.txt)
    - publishing printers in AD is more complete
    - group policies for winbindd cilents (like linux systems)
    - certificate auto enrollement in AD group policy
    - large list of improvements in samba-tool
    - SMB1 protocol has been deprecated, some subcommands has been removed
    - more consistend options/subcommands in samba commands
  * d/rules: export PYTHONHASHSEED=1. This makes lots of sporadic build-time
    debian-specific failures to go away, by preserving order of waf hashes
  * refresh patches, update build-depend versions (talloc, tdb, tevent)
  * refresh lintian-overrides files, add many new overrides
  * build-depend on python3-markdown
  * build-depend on libjson-perl for new heimdal bits
  * more consistent internal lib naming; refresh file lists everywhere
  * samba: install new rpc_* services, install samba-dcerpc
  * refresh symbols files
  * build libldb from samba sources, not from separate source
    (this moves ldb plugins from /usr/lib/$triple/ldb/plugin/ldb/ to
     /usr/lib/$triple/samba/ldb/ - the same where dsdb modules are).
  * optimizations for d/make_shlibs; also allow one to specify explicit
    version for some packages
  * as per clarifications for waf --{bundled,builtin}-libraries, remove
    now-wrong usage there. This also fixes build failures with current
    samba sources
  * d/rules: various optimizations to reduce startup costs by eliminating
    unnecessary external command calls during d/rules read by make.
    Including caching of LDB version information in d/ldb-version.mk file.
    This does not affect the buildd processing much (and does not affect
    runtime at all), but helps with build procedure debugging.
  * d/rules: numerous small fixes, cleanups and other changes, including:
    - clean up the install target
    - remove some now-irrelevant parts
    - fix no-glusterfs-build on non-linux
  * change build procedure: instead of `waf build', run `waf install'.
    `waf build' builds samba to be run from the build dir, and `waf install'
    rebuilds/relinks everything again for production. Build the production
    variant only, no build-dir one.
  * samba-common-bin.postinst: explicitly mkdir /run/samba before invoking
    samba binaries (Closes: #953530)
  * in the salsa git repository of samba, stop keeping debian patches in
    applied form, keep them in d/patches/ only as most other packages do.
  * move single python (helper) module, libsamba-policy, together with
    2 internal libraries used by it, from samba-libs package to python3-samba.
    This makes samba-libs to be free from python-related files, and makes
    python3-samba to be the only python-providing package.
    Closes: #1006875, #878612, #862338
  * also move dckeytab python module from samba to python3-samba
    (actually stop moving it from python3-samba to samba to incorrectly
    avoid a circular dependency). Also verify that python3-samba does
    not depend on samba package.
  * weak-crypto-allowed-clarify.diff: clarify "weak crypto is allowed"
    testparm message (Closes: #975882)
  * spelling.patch: fix many common spelling mistakes in the source
  * ctdb: simplify/cleanup instllation of READMEs/examples
  * d/control: remove breaks/replaces/depends on ancient versions of some
    packages (ancient dpkg version in Pre-Depends, ancient samba-libs)
  * d/rules: rework wrong shlibdeps handling
  * move helper programs from /usr/lib/$multiarch/ to /usr/libexec/
    where they belongs. This should not affect users.
  * smbclient: re-do the fix for an old bug, #221618. The original "fix"
    did not fix anything (it is too late already to #define _FILE_OFFSET_BITS
    when all types has already been defined).  From now on, raise an error
    if off_t is less than 64bits (it should >=64 when #include'ing
    <libsmbclient.h> with proper LFS defines).  In theory this can break
    some sources which either included libsmbclient.h without a reason or
    which didn't use any of the functions which deals with off_t (smbc_lseek
    etc), - which did not explicitly enable LFS on a 32bit system.
    Please email us if you faced such situation.
  * drop 07_private_lib patch: we do not need to force rpath for
    private libraries into every samba binary, upstream build system
    does a good job here.

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 05 Apr 2022 16:01:25 +0300

samba (2:4.13.14+dfsg-1) unstable; urgency=high

  * New upstream security release in order to address the following defects:
    - CVE-2016-2124: don't fallback to non spnego authentication if we require
      kerberos
    - MS CVE-2020-17049 in Samba: 'Bronze bit' S4U2Proxy Constrained Delegation
      bypass
    - CVE-2020-25717: A user on the domain can become root on domain members
    - CVE-2020-25718: An RODC can issue (forge) administrator tickets to other
      servers
      + Bump build-depends ldb >= 2.2.3
    - CVE-2020-25719: AD DC Username based races when no PAC is given
    - CVE-2020-25721: Kerberos acceptors need easy access to stable AD
      identifiers (eg objectSid)
    - CVE-2020-25722: AD DC UPN vs samAccountName not checked (top-level bug
      for AD DC validation issues)
    - CVE-2021-3738: crash in dsdb stack
    - CVE-2021-23192: dcerpc requests don't check all fragments against the
      first auth_state
      + Update d/samba-libs.install for libdcerpc-pkt-auth.so.0
  * Add patch to fix "allow trusted domains"
  * Bump ldb build-depends to 2.2.3
  * Update d/samba-libs.install

 -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Nov 2021 20:53:03 +0100

samba (2:4.13.13+dfsg-1) unstable; urgency=high

  [ Athos Ribeiro ]
  * Add autopkgtest to verify tmpfiles setup (LP: #1905387)
    - d/t/reinstall-samba-common-bin: make sure /run/samba is created
      by the samba-common-bin installation process (postinst script)
    - d/t/control: run new reinstall-samba-common-bin test case

  [ Paride Legovini ]
  * samba.postinst: do not populate sambashare from the Ubuntu admin group
    (LP: #1942195)

  [ Mathieu Parent ]
  * New upstream version
    - Remove CVE-2021-20254.patch
    - Bump build-depends ldb  >= 2.2.0
  * libwbclient0: Add Breaks+Replaces: libsamba-util0 (<< 2:4.0.0)
    (Closes: #988170)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 01 Nov 2021 08:59:20 +0100

samba (2:4.13.5+dfsg-2) unstable; urgency=high

  * CVE-2021-20254: Negative idmap cache entries can cause incorrect group
    entries in the Samba file server process token (Closes: #987811)
  * Add Breaks+Replaces: samba-dev (<< 2:4.11) (Closes: #987209)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 06 May 2021 21:09:29 +0200

samba (2:4.13.5+dfsg-1) unstable; urgency=medium

  * New upstream version (Closes: #984863)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 13 Mar 2021 08:31:27 +0100

samba (2:4.13.4+dfsg-1) unstable; urgency=medium

  * New upstream version
    - GPG signature has changed
    - Update samba-libs.install
    - Update symbols
  * Never use priority high when asking for DHCP integration (Closes: #981554)
  * Sync CTDB patches with Ubuntu:
    - Add "ctdb-config: enable syslog by default"
    - Update "fix nfs related service names"
  * d/rules: Ubuntu specifics
    - No Ceph on i386
    - Disable some i386 packages
    - No GlusterFS

 -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Feb 2021 22:26:43 +0100

samba (2:4.13.3+dfsg-1) unstable; urgency=medium

  [ Andreas Hasenack ]
  * d/control: enable the liburing vfs module (Closes: #976854)
  * Add new DEP8 tests for the uring vfs module
  * Factor out common DEP8 test code into d/t/util and change the tests to
    source from it
  * Add set -x and set -e to DEP8 tests

  [ Mathieu Parent ]
  * liburing-dev is linux-any
  * New upstream version

 -- Mathieu Parent <sathieu@debian.org>  Wed, 16 Dec 2020 18:23:09 +0100

samba (2:4.13.2+dfsg-3) unstable; urgency=medium

  * Ensure systemd-tmpfiles is called before testparm (Closes: #975422)
  * Only check configuration on configure step

 -- Mathieu Parent <sathieu@debian.org>  Sun, 22 Nov 2020 10:44:51 +0100

samba (2:4.13.2+dfsg-2) unstable; urgency=medium

  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Wed, 18 Nov 2020 20:34:51 +0100

samba (2:4.13.2+dfsg-1) experimental; urgency=medium

  * New upstream major version
    - Update d/gbp.conf, d/watch and d/README.source for 4.13
    - Update patches
    - Bump build-depends ldb >= 2.2.0
    - Install new files
    - Update symbols
  * Includes the following security fixes:
    - CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify
      (Closes: #973400)
    - CVE-2020-14323: Unprivileged user can crash winbind (Closes: #973399)
    - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
      easily crafted records (Closes: #973398)
    - CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon")
      (Closes: #971048)
  * Includes the following fixes:
    - Fixes "samba_dnsupdate gives depreacation warnings" (Closes: #973957)
    - s3: libsmbclient.h: add missing time.h include (Closes: #946840)
  * Remove unused python3-crypto dependency (Closes: #971292)
  * Enable Spotlight with ES backend (Closes: #956096, #956482)
  * Standards-Version: 4.5.0
  * Add missing Build-Depends-Package in libsmbclient.symbols and
    libwbclient0.symbols
  * d/copyright: Fix duplicate-globbing-patterns
  * Remove outdated/malformed lintian overrides
  * d/winbind.logrotate: Only reload winbindd when running (Closes: #946821)
  * Bump to debhelper compat 13
  * Add another library-not-linked-against-libc override

 -- Mathieu Parent <sathieu@debian.org>  Thu, 12 Nov 2020 11:23:01 +0100

samba (2:4.12.5+dfsg-3) unstable; urgency=high

  * Add Breaks: sssd-ad-common (<< 2.3.0), due to libndr so bump
    (Closes: #963971)
  * Add patch traffic_packets: fix SyntaxWarning: "is" with a literal
    (Closes: #964165)
  * Add patch Rename mdfind to mdsearch (Closes: #963985)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 04 Jul 2020 23:57:59 +0200

samba (2:4.12.5+dfsg-2) unstable; urgency=high

  * Add missing symbol (path_expand_tilde)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 02 Jul 2020 15:27:25 +0200

samba (2:4.12.5+dfsg-1) unstable; urgency=high

  * New upstream security release:
    - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
      DC LDAP Server with ASQ, VLV and paged_results
    - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
      excessive CPU
    - CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
      paged_results and VLV.
    - CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.
    - Bump build-depends ldb >= 2.1.4

 -- Mathieu Parent <sathieu@debian.org>  Thu, 02 Jul 2020 14:03:36 +0200

samba (2:4.12.3+dfsg-2) unstable; urgency=medium

  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Sun, 28 Jun 2020 11:45:14 +0200

samba (2:4.12.3+dfsg-1) experimental; urgency=medium

  * New upstream major version (Closes: #963106)
    - Update d/gbp.conf, d/watch and d/README.source for 4.12
    - Drop merged patches
    - Bump build-depends talloc >= 2.3.1, tdb >= 1.4.3, tevent >= 0.10.2 and
      ldb >= 2.1.3
    - Upstream fixes:
      + pygpo: use correct method flags
        (Closes: #963242, #961585, #960171, #956428)
      + CVE-2020-10700: A use-after-free flaw was found in the way samba AD DC
        LDAP servers, handled 'Paged Results' control is combined with the 'ASQ'
        control. A malicious user in a samba AD could use this flaw to cause
        denial of service (Closes: #960189)
      + CVE-2020-10704: A flaw was found when using samba as an Active Directory
        Domain Controller. Due to the way samba handles certain requests as an
        Active Directory Domain Controller LDAP server, an unauthorized user can
        cause a stack overflow leading to a denial of service. The highest
        threat from this vulnerability is to system availability
        (Closes: #960188)
    - intel aes-ni no more needed as GnuTLS is used
    - Install new files
    - Update symbols
    - Update samba-libs.lintian-overrides
  * d/control: Remove unused libattr1-dev Build-Depends (Closes: #953915)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 24 Jun 2020 23:12:11 +0200

samba (2:4.11.5+dfsg-1) unstable; urgency=medium

  * New upstream security release
    - CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD
      Directory not automatic.
    - CVE-2019-14907: Crash after failed character conversion at log level 3 or
      above.
    - CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.
    - Bump build-depends ldb >= 2.0.8

 -- Mathieu Parent <sathieu@debian.org>  Tue, 28 Jan 2020 07:19:46 +0100

samba (2:4.11.3+dfsg-1) unstable; urgency=high

  * New upstream security release
    - Drop merged patches for previous security fixes
    - CVE-2019-14861: An authenticated user can crash the DCE/RPC DNS management
      server by creating records with matching the zone name.
    - CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction was
      not being applied when processing protocol transition requests (S4U2Self),
      in the AD DC KDC.
  * d/control: drop python3-matplotlib
  * d/control: Fix stronger-dependency-implies-weaker
    (samba depends -> recommends python3-dnspython)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 16 Dec 2019 09:47:45 +0100

samba (2:4.11.1+dfsg-3) unstable; urgency=medium

  * Add some python dependencies:
    - python3-matplotlib : samba-tool visualize
    - python3-markdown   : samba-tool domain schemaupgrade
    - python3-dnspython  : samba-tool dns
  * Only build with default python3 (Closes: #943635)

 -- Mathieu Parent <sathieu@debian.org>  Sun, 17 Nov 2019 14:48:02 +0100

samba (2:4.11.1+dfsg-2) unstable; urgency=high

  * New upstream security release
    - CVE-2019-10218: Malicious servers can cause Samba client code to return
      filenames containing path separators to calling code.
    - CVE-2019-14833: When the password contains multi-byte (non-ASCII)
      characters, the check password script does not receive the full password
      string.

 -- Mathieu Parent <sathieu@debian.org>  Fri, 18 Oct 2019 20:26:45 +0200

samba (2:4.11.1+dfsg-1) unstable; urgency=medium

  * New upstream release

 -- Mathieu Parent <sathieu@debian.org>  Fri, 18 Oct 2019 19:00:46 +0200

samba (2:4.11.0+dfsg-11) unstable; urgency=medium

  * Stop building with spotlight support which pulls glib (Closes: #941654)
  * Force quota support (Closes: #941899)
  * Standards-Version: 4.4.1, no change

 -- Mathieu Parent <sathieu@debian.org>  Mon, 14 Oct 2019 12:16:04 +0200

samba (2:4.11.0+dfsg-10) unstable; urgency=medium

  * Add libwbclient-dev to samba-dev depends as samba-util was moved there
    (Closes: #941750)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 05 Oct 2019 15:57:07 +0200

samba (2:4.11.0+dfsg-9) unstable; urgency=medium

  * Remove versioned depends on libtdb-dev (>= 2) and add libldb-dev (>= 2:2)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 03 Oct 2019 19:08:17 +0200

samba (2:4.11.0+dfsg-8) unstable; urgency=medium

  * d/gbp.conf: sign-tags = True
  * Do not check smb.conf with testparm when server role=active directory domain
    controller (Closes: #931734)
  * Force one job during configure step with -j 1 (Closes: #941467).
    Not setting -j leads to default which is number of cpus

 -- Mathieu Parent <sathieu@debian.org>  Thu, 03 Oct 2019 07:52:39 +0200

samba (2:4.11.0+dfsg-7) unstable; urgency=medium

  * Always evaluate WAF_NO_PARALLEL to ensure correct value (Closes: #941467)
  * This version is built with talloc from sid (Closes: #940963)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 02 Oct 2019 20:45:24 +0200

samba (2:4.11.0+dfsg-6) unstable; urgency=medium

  * Do not run waf configure in parallel. Fix FTBFS on arm (Closes: #941467)

 -- Mathieu Parent <sathieu@debian.org>  Tue, 01 Oct 2019 22:35:36 +0200

samba (2:4.11.0+dfsg-5) experimental; urgency=medium

  * d/gitlabracadabra.yml: only_allow_merge_if_pipeline_succeeds: false
  * Remove patches:
    - "build: Remove tests for _readdir() and __readdir()"
    - "build: Remove tests for rdchk()"
    - "build: Remove tests for _pwrite() and __pwrite()"
  * Add patches by Ralph Boehme:
    - "wscript: remove all checks for _FUNC and __FUNC"
    - "wscript: split function check to one per line and sort alphabetically"

 -- Mathieu Parent <sathieu@debian.org>  Mon, 30 Sep 2019 13:37:50 +0200

samba (2:4.11.0+dfsg-4) experimental; urgency=medium

  * Use the same arches for librados-dev than libcephfs-dev (Fix missing
    build-depends on alpha and sh4)
  * Split vfsmods:Recommends substvar into
    {vfsceph,vfsglusterfs,vfssnapper}:Recommends to make the code more readable
    and fix FTBFS on linux platforms without ceph (hppa and sparc64, and also
    alpha and sh4)
  * Add patch for "build: Remove tests for _readdir() and _readdir()", to
    hopefully fix FTBFS on armel

 -- Mathieu Parent <sathieu@debian.org>  Sun, 29 Sep 2019 09:29:03 +0200

samba (2:4.11.0+dfsg-3) experimental; urgency=medium

  * Try to fix FTBFS on armel (armhf is fixed):
    - Add patch for build: Remove tests for rdchk()

 -- Mathieu Parent <sathieu@debian.org>  Sat, 28 Sep 2019 22:17:04 +0200

samba (2:4.11.0+dfsg-2) experimental; urgency=medium

  * d/gitlabracadabra.yml: Add samba-team/libsmb2
  * Try to fix FTBFS on armel and armhf:
    - Add patch for build: Remove tests for _pwrite() and __pwrite()

 -- Mathieu Parent <sathieu@debian.org>  Sat, 28 Sep 2019 11:47:56 +0200

samba (2:4.11.0+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * Upload to experimental
  * New upstream major release
    - Update d/gbp.conf, d/watch and d/README.source for 4.11
    - Import upstream release
    - Update fix-nfs-service-name-to-nfs-kernel-server.patch
    - Bump build-depends talloc >= 2.2.0, tdb >= 1.4.2, tevent >= 0.10.0 and
      ldb >= 2:2.0.7
    - libsamba-passdb.so bumped to 0.28.0
    - libnon-posix-acls is now a subsystem
    - Drop libparse-pidl-perl package (Closes: #939419)
    - Add new files to d/*.install
    - Move libsamba-util.so.* to libwbclient0, to avoid circular dependencies
    - Move libsamba-util deps to libwbclient0
  * Add build-Remove-tests-for-getdents-and-getdirentries.patch, to fix FTBFS on
    armel and armhf
  * salsa-ci: Build on experimental

  [ John Paul Adrian Glaubitz ]
  * Disable cephfs support on architectures where it's not stable
    (Closes: #940697)

  [ Louis van Belle ]
  * d/control, d/samba.install: added libtasn1-bin, libtasn1-6-dev to build
    dumpmscat
  * d/control, d/rules: Enable spotlight (TimeMachine)
  * d/control: Bump libtdb-dev (>= 2) in samba-dev deps
  * Update libwbclient0.symbols
  * d/rules: adjust LDB_DEPENDS

 -- Mathieu Parent <sathieu@debian.org>  Thu, 26 Sep 2019 09:37:51 +0200

samba (2:4.10.8+dfsg-1) unstable; urgency=medium

  * Upload to unstable
  * New upstream release:
    - CVE-2019-10197: Combination of parameters and permissions can allow user
      to escape from the share path definition

 -- Mathieu Parent <sathieu@debian.org>  Tue, 10 Sep 2019 18:46:54 +0200

samba (2:4.10.7+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * New upstream release
    - Update patches
    - Drop nsswitch-Add-try_authtok-option-to-pam_winbind.patch, merged
    - libsamba-passdb.so bumped to 0.27.2
    - Update symbols
    - Update installed files
  * samba-libs: Fix Breaks+Replaces: libndr-standard0 (<< 2:4.0.9)
    (Closes: #910242)
  * Add missing Breaks+Replace found by piuparts (Closes: #929217)
  * Enable vfs_nfs4acl_xattr (Closes: #930540)
  * ctdb:
    - enable ceph and etcd recovery lock
    - Downgrade ctdb_mutex_ceph_rados_helper shlibdeps to recommends
  * Add gitlabracadabra.yml
  * Update salsa-ci.yml

  [ Rafael David Tinoco ]
  * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
    (Closes: #931138)
  * CTDB NFS fixes from Ubuntu (Closes: #929931, LP: #722201):
    - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
      name from nfs to nfs-kernel-server
    - ctdb-config: depend on /etc/ctdb/nodes file
    - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
      allow pid file to exist
    - added /var/lib/ctdb/* directories
    - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
    - Add examples of NFS HA CTDB config files + helper script

  [ Mathieu Parent ]
  * Update d/gbp.conf, d/watch and d/README.source for 4.10
  * Drop ctdb-config-depend-on-etc-default-nodes-file.patch, merged upstream
  * Bump build-depends talloc >= 2.1.16, tdb >= 1.3.18, tevent >= 0.9.39 and
    ldb >= 2:1.5.5
  * Bump libcmocka-dev builddep to 1.1.3
  * d/rules: Remove 1.5.1+really prefix from LDB_DEPENDS
  * d/copyright:
    - s/GPL-3+/GPL-3.0+/ and s/LGPL-3+/LGPL-3.0+/
    - Move License details to end of file
    - Add waf licences
    - Add lib/replace licences
    - Update lib/{ldb,talloc,tdb} licences
  * Move to Python3 (from Ubuntu)
  * Bump debhelper from old 11 to 12.
  * Standards-Version: 4.4.0
  * Replace all reference of /var/run to /run (Closes: #934540)
  * Replace python shbang by python3 in d/*.py

 -- Mathieu Parent <sathieu@debian.org>  Thu, 29 Aug 2019 14:32:52 +0200

samba (2:4.9.5+dfsg-1) experimental; urgency=medium

  * New upstream release
    - Bump ldb Build-Depends to 2:1.5.1+really1.4.6
    - Drop s3-auth-ignore-create_builtin_guests-failing-without.patch, merged
    - Drop and python-gpg.patch, merged
  * Add Recommends: samba-dsdb-modules for samba-common-bin (Closes: #862467)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 20 Mar 2019 21:07:02 +0100

samba (2:4.9.4+dfsg-4) unstable; urgency=medium

  * samba-libs: Add Breaks+Replaces: libndr-standard0 (<< 4) (Closes: #910242)
  * Improve AppArmor integration (Closes: #896080)
    - Install update-apparmor-samba-profile 1.2 from Christian Boltz (openSUSE)
    - Adapt update-apparmor-samba-profile: Rename apparmor profile snippet, and
      test for it's directory
    - smbd.init: Run update-apparmor-samba-profile before start
    - smbd.service: Run update-apparmor-samba-profile before start
    - Remove /etc/apparmor.d/samba/smbd-shares on purge

 -- Mathieu Parent <sathieu@debian.org>  Tue, 26 Feb 2019 22:18:19 +0100

samba (2:4.9.4+dfsg-3) unstable; urgency=medium

  [ Ivo De Decker ]
  * Remove myself from uploaders

  [ Mathieu Parent ]
  * Update debian/gitlab-ci.yml
  * Standards-Version: 4.3.0
  * Add upstream patch for python-gpg support
  * Replace Suggests: python-gpgme by Recommends: python-gpg (Closes: #876984)

 -- Mathieu Parent <sathieu@debian.org>  Fri, 15 Feb 2019 11:14:10 +0100

samba (2:4.9.4+dfsg-2) unstable; urgency=medium

  * Append +really0.02 to libparse-pidl-perl version (Closes: #918564)
  * Add apport hook (From Ubuntu)
  * Change build dependency to libglusterfs-dev (Closes: #919667)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 23 Jan 2019 20:59:08 +0100

samba (2:4.9.4+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Remove patches for previous security fixes, merged
    - Remove unused lintian overrides (library-not-linked-against-libc)
  * ignore create_builtin_guests() failing without a valid idmap configuration
    (Closes: #909465, #899269)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 22 Dec 2018 18:32:00 +0100

samba (2:4.9.2+dfsg-2) unstable; urgency=high

  * New upstream security release
    - CVE-2018-14629 Unprivileged adding of CNAME record causing loop in AD
      Internal DNS server
    - CVE-2018-16841 Double-free in Samba AD DC KDC with PKINIT
    - CVE-2018-16851 NULL pointer de-reference in Samba AD DC LDAP server
    - CVE-2018-16852 NULL pointer de-reference in Samba AD DC DNS servers
    - because of CVE-2018-16853 (Samba AD DC S4U2Self Crash in experimental
      MIT Kerberos configuration (unsupported)), mark the MIT Kerberos build of
      the Samba AD DC as experimental (not used in Debian package)
    - CVE-2018-16857 Bad password count in AD DC not always effective
  * Prepend 1.5.1+really to ldb version

 -- Mathieu Parent <sathieu@debian.org>  Sat, 24 Nov 2018 23:21:27 +0100

samba (2:4.9.2+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Bump build-dependencies to ldb 1.4.2
    - Update debian/samba-libs.install
  * d/gitlab-ci.yml:
    - Update to use include
    - allow_failure for reprotest until #912340 is fixed
  * d/rules: Replace override_dh_perl by override_dh_perl-arch (Closes: #913143)
  * debian/gitlab-ci.yml:
    - Samba sometimes needs ldb from experimental
    - Use ldb from experimental in piuparts

 -- Mathieu Parent <sathieu@debian.org>  Sat, 17 Nov 2018 17:25:10 +0100

samba (2:4.9.1+dfsg-2) unstable; urgency=medium

  [ Mathieu Parent ]
  * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of
    DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32
  * Allow one to change password via passwd in default config
    - third_party: Update pam_wrapper to version 1.0.7
    - third_party: Add pam_set_items.so from pam_wrapper
    - nsswitch: Add try_authtok option to pam_winbind
    - tests: Check pam_winbind pw change with different options
    - Patch for previous 4 commits
    - debian/winbind.pam-config: Use the new try_authtok option allowing
      password change while preserving current behavior with password strength
      modules (Closes: #858923, LP: #570944)
  * README.source: use gbp pull --track-missing
  * Override library-not-linked-against-libc false positives (See #896012)
  * Fix wrong-path-for-interpreter for pidl and findsmb
  * ctdb.postrm: Fix to disable_legacy (found by piuparts) (Closes: #911530)

  [ James Clarke ]
  * Fix systemd-related build failures on non-Linux

  [ Mathieu Parent ]
  * Add Gitlab CI:
    - Subscribe to salsa-ci-team/pipeline (See salsa-ci-team/pipeline!27 and
      samba-team/samba!10)
    - Copy /etc/apt/{sources.list.d,preferences.d} in the dockerbuilder
      container (salsa-ci-team/images!9)
    - Allow daemons to start during autopkgtest (salsa-ci-team/images!10)
    - debian/gitlab-ci.yml: all jobs: Use ldb from experimental
    - debian/gitlab-ci.yml: piuparts job: Add --scriptsdir, --allow-database
      and --warn-on-leftovers-after-purge options
    - debian/gitlab-ci.yml: piuparts job: Copy apt config to allow enabling
      extra repositories
    - debian/gitlab-ci.yml: piuparts job: Use image with the following changes:
      + Add pre_install_copy_configs and post_install_remove_configs to copy,
        resp. remove config files from /etc-target to /etc
      + patch pre_remove_50_find_bad_permissions to workaround findutils bug
        #912180. Also proposed another workaround in piuparts as bug #911334
        which is merged but not yet released
  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Thu, 01 Nov 2018 21:13:37 +0100

samba (2:4.9.1+dfsg-1) experimental; urgency=medium

  * New upstream release

 -- Mathieu Parent <sathieu@debian.org>  Mon, 24 Sep 2018 13:33:21 +0200

samba (2:4.9.0+dfsg-1) experimental; urgency=medium

  * Upload to experimental
  * New upstream release
    - Update d/gbp.conf, d/watch and d/README.source for 4.9
    - Remove Fix-pidl-manpage-sections.patch, Fix-spelling.patch and
      Improve-vfs_linux_xfs_sgid-manpage.patch, merged upstream
    - Bump build-depends talloc >= 2.1.14, tdb >= 1.3.16, tevent >= 0.9.37 and
      ldb >= 2:1.4.2'
    - Update paths
    - Update libsmbclient.symbols
    - ctdb.lintian-override: Remove script-not-executable override
    - Add ctdb.NEWS: "Configuration has been completely overhauled"
    - ctdb: Enable/disable legacy script in postinst/presinst

 -- Mathieu Parent <sathieu@debian.org>  Sat, 22 Sep 2018 23:04:11 +0200

samba (2:4.8.5+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Bump ldb Build-depends to 2:1.4.0+really1.3.6
    - Fixes FTBFS on kFreeBSD (Closes: #883972)
    - d/rules: winbind_krb5_locator is now in the correct path
    - winbind_krb5_locator manpage has moved from section 7 to 8
  * Standards-Version: 4.2.1

 -- Mathieu Parent <sathieu@debian.org>  Thu, 30 Aug 2018 19:32:24 +0200

samba (2:4.8.4+dfsg-2) unstable; urgency=high

  * Fix typo in previous release: s/usefull/useful/
  * Prepend 1.4.0+really to ldb version to allow samba-dsdb-modules install
    (Closes: #906562, #906568)
  * Urgency still set to high

 -- Mathieu Parent <sathieu@debian.org>  Sun, 19 Aug 2018 10:08:22 +0200

samba (2:4.8.4+dfsg-1) unstable; urgency=high

  [ Andreas Hasenack ]
  * d/samba.logrotate: only try to reload the services if they are running
    (Closes: #902149)
  * Remove the deprecated "syslog" and "syslog only" options (Closes: #901138)

  [ Mathieu Parent ]
  * New upstream security release
    - CVE-2018-1139 Weak authentication protocol allowed
    - CVE-2018-1140 Denial of Service Attack on DNS and LDAP server
    - CVE-2018-10858 Insufficient input validation on client directory listing
      in libsmbclient
    - CVE-2018-10918 Denial of Service Attack on AD DC DRSUAPI server
    - CVE-2018-10919 Confidential attribute disclosure from the AD LDAP server
    - Urgency set to high
    - Bump build-depends ldb >= 1.3.5 (actually 2:1.4.0+really1.3.5) for
      CVE-2018-1140
  * smb.conf: Remove "wins support" and "wins server" comments
  * smb.conf: Improve "logging" comments
  * smb.conf: Remove "dns proxy = no", only useful as a WINS server
  * smb.conf: Propose better idmap config
  * smb.conf: Remove "passdb backend = tdbsam" as this is the default
  * smb.conf: Fix "usershare max shares" default (patched to 100 instead of 0)
  * Standards-Version: 4.2.0
  * Set Rules-Requires-Root: binary-targets as chmod is used
  * Remove override_dh_strip target as dbgsym migration is complete

 -- Mathieu Parent <sathieu@debian.org>  Fri, 17 Aug 2018 16:30:18 +0200

samba (2:4.8.2+dfsg-2) unstable; urgency=medium

  * Update panic-action script message, samba-dbg renamed to samba-dbgsym
    (Closes: #900242)
  * Ensure /var/lib/samba/dhcp.conf exists (Closes: #901585)
  * Check smb.conf with testparm, and also with samba-tool when
    server role = active directory domain controller (Closes: #900908)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 18 Jun 2018 23:39:41 +0200

samba (2:4.8.2+dfsg-1) unstable; urgency=medium

  * New upstream release
    - Bump build-depends ldb >= 1.3.3
  * Fix lintian warnings with patches recently merged upstream:
    - Add Fix-pidl-manpage-sections.patch
    - Add Fix-spelling.patch
    - Add Improve-vfs_linux_xfs_sgid-manpage.patch
  * Wrap very long lines in d/rules

 -- Mathieu Parent <sathieu@debian.org>  Thu, 17 May 2018 09:58:09 +0200

samba (2:4.8.1+dfsg-2) unstable; urgency=low

  * Upload to unstable
  * Really ignore nmbd start errors when there is no non-loopback interface
    (Closes: #893762)
  * Ignore nmbd start errors when there is no local IPv4 non-loopback interface
    (Closes: #859526)
  * Fix possible-unindented-list-in-extended-description in samba-vfs-modules

 -- Mathieu Parent <sathieu@debian.org>  Tue, 15 May 2018 21:23:32 +0200

samba (2:4.8.1+dfsg-1) experimental; urgency=medium

  * New upstream release
  * Add lintian override for "smbclient: executable-is-not-world-readable
    usr/lib/x86_64-linux-gnu/samba/smbspool_krb5_wrapper 0700" (See #894720)
  * Improve samba-vfs-modules description (Closes: #776505)
  * Check smb.conf in samba-common-bin.postinst (Closes: #816301)
  * Mark libparse-pidl-perl, samba-dev, samba-dsdb-modules and samba-vfs-modules
    as"Multi-Arch: same"
  * Standards-Version: 4.1.4, no change
  * debian/smb.conf: Fix typo in comment line: sever -> server (Closes: #763648)
  * Read smb.conf until [print$] section instead of [cdrom] to preserve
    locally-defined shares (Closes: #776259)
  * Fix and improve dhcp integration:
    - dhclient3 was renamed to dhclient long time ago...
    - Remove /etc/samba/dhcp.conf on purge (Closes: #784713)
    - Move dhcp.conf out of /etc to allow ro root (Closes: #695362)
    - Update template for "Move dhcp.conf out of /etc to allow ro root"
  * Enable --accel-aes=intelaesni on DEB_HOST_GNU_CPU=x86_64 (Closes: #896196)
    - Use dh-exec to install libaesni-intel.so.0 only on amd64

 -- Mathieu Parent <sathieu@debian.org>  Sun, 29 Apr 2018 12:54:06 +0200

samba (2:4.8.0+dfsg-2) experimental; urgency=medium

  * Remove unused and outdated debian/README.debian (debian/README.Debian is
    used instead)
  * Mask services as appropriate in samba and winbind postinst (Closes: #863285)
    - mask samba-ad-dc unless server role = active directory domain controller
      (as before)
    - mask smbd and nmbd when server role = active directory domain controller
    - mask nmbd when disable netbios = yes (Closes: #866125)
  * Set smbspool_krb5_wrapper permissions to 0700 (Closes: #894720, #372270)
  * Remove Depends: samba-libs of lib{nss,pam}-winbind
  * Mark winbind "Multi-Arch: allowed" and make lib{pam,nss}-winbind depends on
    winbind:any to allow co-installation (Closes: #881100)
  * Ignore nmbd start errors when there is no non-loopback interface
    (Closes: #893762)

 -- Mathieu Parent <sathieu@debian.org>  Sun, 08 Apr 2018 22:09:53 +0200

samba (2:4.8.0+dfsg-1) experimental; urgency=medium

  [ Mathieu Parent ]
  * New major upstream version
    - Update d/gbp.conf and d/watch for 4.8
    - Update upstream source from tag 'upstream/4.8.0+dfsg'
    - Re-apply patches
    - Remove patches merged upstream:
      + no_build_system.patch
      + systemd-syslog.target-is-obsolete.patch
      + Add-documentation-to-systemd-Unit-files.patch
      + fix_kill_path_in_units.patch
      + nmbd-requires-a-working-network.patch
      + CVE-2018-1050-11343-4.7.patch
      + CVE-2018-1057-v4-7.metze01.patches.txt
    - Bump build-depends talloc >= 2.1.11~, tdb >= 1.3.15~, tevent >= 0.9.36~
      and ldb >= 2:1.3.2~
    - Drop Build-Conflicts-Arch: libaio-dev, vfs_aio_linux was dropped
    - Update debian/*.install and use debian/not-installed
    - Update debian/libsmbclient.symbols
    - Upload to experimental
  * debian/README.source
    - Update instructions
    - Convert to Markdown
    - Add a symlink from README.source to README.source.md
  * debian/rules:
    - Use the new --systemd-install-services
    - Use dh_missing --fail-missing
    - Re-order debian/rules overrides in the order they are called
    - Remove broken get-packaged-orig-source target
    - Remove unused DEB_BUILD_OPT_FOO variables
    - Add some comments
    - Move all the custom installs from override_dh_install to
      override_dh_auto_install
    - Remove --sourcedir override to dh_install "since dh_install automatically
      looks for files in debian/tmp in debhelper compatibility level 7 and
      above"
    - PIDFile= is now correctly set in *.service

  [ Louis van Belle ]
  * Update d/control, Relax Build-Depends to allow backport

 -- Mathieu Parent <sathieu@debian.org>  Mon, 19 Mar 2018 13:02:51 +0100

samba (2:4.7.4+dfsg-2) unstable; urgency=high

  [ Mathieu Parent ]
  * This is a security release in order to address the following defects:
    - CVE-2018-1050: Codenomicon crashes in spoolss server code
    - CVE-2018-1057: Unprivileged user can change any user (and admin) password
  * Fix "/etc/dhcp/dhclient-enter-hooks.d/samba returned non-zero exit status 1"
    when samba.service is disabled
    - Pick patch from Ubuntu for Launchpad #1579597
    - Fix systemd check
  * Replace override_dh_systemd_start by override_dh_installsystemd (Fixes
    ctdb starting on install and restarting on upgrade since update to debhelper
    compat 11)
  * Replace --no-restart-on-upgrade by --no-stop-on-upgrade in dh_installinit
    and dh_installsystemd
  * Add missing dh_installsystemd calls to ensure that services are properly
    unmasked and enabled in postinst

  [ Andreas Hasenack ]
  * Add extra DEP8 tests to samba (Closes: #890439):
    - d/t/control, d/t/cifs-share-access: access a file in a share using cifs
    - d/t/control, d/t/smbclient-anonymous-share-list: list available shares
      anonymously
    - d/t/control, d/t/smbclient-authenticated-share-list: list available
      shares using an authenticated connection
    - d/t/control, d/t/smbclient-share-access: create a share and download a
      file from it

 -- Mathieu Parent <sathieu@debian.org>  Fri, 02 Mar 2018 20:55:06 +0100

samba (2:4.7.4+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Updates patches
    - Bump ldb build-deps to 1.2.3
  * Repository moved to salsa: Update Vcs-* fields
  * d/README.source:
    - ensure required branches exists
    - sync all required branches
  * Standards-Version: 4.1.3 (no change)
  * Move to debhelper compat 11
  * Move libpam-winbind: to section admin
  * Move libnss-winbind: to section admin

 -- Mathieu Parent <sathieu@debian.org>  Thu, 11 Jan 2018 20:49:28 +0100

samba (2:4.7.3+dfsg-1) unstable; urgency=high

  * New upstream version
    - Remove patches for CVE-2017-15275 and CVE-2017-14746, merged
    - Bump libtevent-dev to 0.9.34, to fix upstream "BUG 13130: smbd on disk
      file corruption bug under heavy threaded load"
    - Set urgency to high for this fix
  * Stop building vfs_aio_linux (Closes: #881239)
  * Print "ignore the following error about deb-systemd-helper not finding
    samba-ad-dc.service" on upgrade too (Closes: #882482).
    Thanks Julian Gilbey for the patch

 -- Mathieu Parent <sathieu@debian.org>  Thu, 23 Nov 2017 16:39:19 +0100

samba (2:4.7.1+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when
      talloc buffer is grown.
    - CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug.

 -- Mathieu Parent <sathieu@debian.org>  Sun, 12 Nov 2017 10:02:19 +0100

samba (2:4.7.1+dfsg-1) unstable; urgency=medium

  * New upstream version
  * Add lintian-override about heimdal embedded-library
  * Remove trailing spaces in debian/changelog

 -- Mathieu Parent <sathieu@debian.org>  Wed, 08 Nov 2017 07:48:31 +0100

samba (2:4.7.0+dfsg-2) unstable; urgency=medium

  * Upload to sid
  * Bump libcmocka-dev builddep to 1.1.1 (Closes: #878357)
  * Remove Skip-raw.write-tests.patch as we don't run tests
  * Remove 05_share_ldb_module, not understood
   - d/rules: /usr/lib/*/samba/share/ldb.so is not present anymore

 -- Mathieu Parent <sathieu@debian.org>  Thu, 26 Oct 2017 17:30:02 +0200

samba (2:4.7.0+dfsg-1) experimental; urgency=medium

  * New major upstream version
    - Update d/gbp.conf and d/watch for 4.7
    - Update patches
    - Remove no_build_env.patch, no more needed
    - Remove 4 patches merged upstream
    - Bump build-depends ldb >= 2:1.2.2~, tdb >= 1.3.14~, tevent >= 0.9.33~
    - Move replace from builtin to bundled libraries to fix FTBFS
    - Update d/*.install
    - Update symbols
  * Rework all patches for dep5 and "gbp pq"
  * Add libjansson-dev to Build-Depends to allow logging in JSON format
  * Lintian fixes:
    - build-depends: dh-systemd (>= 1.5) => use debhelper (>= 9.20160709)
    - Move libsmbclient-dev from priority extra to optional
    - Standards-Version: 4.1.1
    - Update samba-libs.lintian-overrides (following libsmbldap bump)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 12 Oct 2017 22:09:19 +0200

samba (2:4.6.7+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-12150: Some code path don't enforce smb signing, when they should
    - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects
    - CVE-2017-12163: Server memory information leak over SMB1

 -- Mathieu Parent <sathieu@debian.org>  Tue, 19 Sep 2017 22:00:13 +0200

samba (2:4.6.7+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Removed CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch,
      merged
    - Remove s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch, merged
  * README.source: Default merge-mode of gbp has changed to replace
  * Fix samba.logrotate (Thanks Thomas A. Reim)

 -- Mathieu Parent <sathieu@debian.org>  Tue, 15 Aug 2017 23:06:36 +0200

samba (2:4.6.5+dfsg-8) unstable; urgency=medium

  * Remove dependency on update-inetd, not used anymore
  * vfs_ceph and vfs_glusterfs are linux only (d/rules part)
  * Remove build-dependency on faketime, not used anymore

 -- Mathieu Parent <sathieu@debian.org>  Sun, 23 Jul 2017 19:56:07 +0200

samba (2:4.6.5+dfsg-7) unstable; urgency=medium

  * xfslibs-dev is only available on linux
  * Fix logrotate for /var/log/samba/log.samba to send SIGHUP to all processes
    of the service (systemd only)
  * Add reportbug script for samba-common, samba and winbind (Closes: #682861)

 -- Mathieu Parent <sathieu@debian.org>  Fri, 21 Jul 2017 06:19:57 +0200

samba (2:4.6.5+dfsg-6) unstable; urgency=medium

  * libcephfs-dev is only available on linux
  * Fix libpam-winbind.prerm to be multiarch-safe (Closes: #647430)
  * Add missing logrotate for /var/log/samba/log.samba (Closes: #803924)
  * Use smbcontrol in logrotate when available (Closes: #804705)
  * From upstream: Fix outdated DNS Root servers (Closes: #865406)
  * Drop xsltproc_dont_build_smb.conf.5.patch, as #750593 is marked fixed
    (Closes: #776223)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 19 Jul 2017 22:53:50 +0200

samba (2:4.6.5+dfsg-5) unstable; urgency=medium

  * Remove bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch,
    unused
  * Remove samba-ad-dc.templates
  * Remove upstart files on upgrade (Closes: #867688)
  * glusterfs-common is only available on linux
  * Remove the samba service
  * Ensure /var/log/samba permissions are set (Closes: #711138)

 -- Mathieu Parent <sathieu@debian.org>  Tue, 18 Jul 2017 23:29:44 +0200

samba (2:4.6.5+dfsg-4) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation
      (Closes: #868209)
  * Other fixes:
    - Remove empty samba-common.maintscript (leading to empty preinst and
      prerm)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 13 Jul 2017 14:38:32 +0200

samba (2:4.6.5+dfsg-3) unstable; urgency=medium

  * Remove upstart code
  * Remove empty prerm for samba and samba-common-bin (Closes: #866258,
    #866284)
  * sysv: Use --pidfile in addition to --exec to avoid matching daemons in
    containers (Closes: #810794)
  * Standards-Version: 4.0.0
    - Use https form of the copyright-format URL (Debian Policy 4.0.0)
  * Remove debian/bzr-builddeb.conf
  * Remove empty debian/diversions
  * Remove "ugly workaround to get the manpages on every architecture to be
    identical", xsltproc now honour SOURCE_DATE_EPOCH
  * Remove dh-exec shbang in libnss-winbind.install
  * Remove empty debian/libsmbclient.manpages
  * Remove pre-jessie maintscript snipsets
  * Move to debhelper compat 10 (Major change: dh_installinit command now
    defaults to --restart-after-upgrade)
  * Remove unused samba-ad-dc package metadata (Closes: #866138)
  * Fix "Non-kerberos logins fails on winbind 4.X when krb5_auth is configured
    in PAM" (Closes: #739768)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 29 Jun 2017 09:45:59 +0200

samba (2:4.6.5+dfsg-2) unstable; urgency=medium

  * Upload to unstable
  * Move runtime dependencies of vfs_ceph and vfs_snapper to Recommends
  * Fix typo s/DESTIDR/DESTDIR/ in d/rules
  * Enable vfs_glusterfs (Closes: #864862)
  * Add libdbus-1-dev as Build-Depends to allow vfs_snapper to build (Closes:
    #804781). Patch by Willy Vanlid.

 -- Mathieu Parent <sathieu@debian.org>  Mon, 19 Jun 2017 23:56:56 +0200

samba (2:4.6.5+dfsg-1) experimental; urgency=medium

  * New upstream version (Closes: #859390)
    - d/gbp.conf, d/watch: Change major version to 4.6
    - Bump Build-dependencies of talloc, tdb, tevent and ldb to resp. 2.1.9,
      1.3.12, O.9.31 and 1.1.29
    - Remove CVE-2017-7494.patch: applied upstream
    - Add Build-Depends: libcmocka-dev (>= 1.0)
    - Update d/*.install
    - d/samba-common.docs: Roadmap removed upstream
  * Update README.source, about importing major versions
  * d/control cleanup:
    - Remove Conflicts and Replaces on pre-wheezy samba4 packages
    - Remove Conflicts, Breaks and Replaces on pre-wheezy samba packages
    - Remove Conflicts, Breaks and Replaces on pre-jessie samba packages
    - Remove Conflicts, Breaks and Replaces on (pre-jessie) samba4 packages
    - Remove Conflicts on pre-jessie libldb1 package
    - Remove Breaks on pre-jessie qtsmbstatus-server package
    - Remove Replaces on pre-wheezy smbget package
    - wrap-and-sort
  * Add libcephfs-dev as b-d to build vfs_ceph (Closes: #856998). Patch from
    Ubuntu
  * Enable avahi support (Closes: #859875). Patch from Laurent Bigonville.
  * Translations:
    - Portuguese translation for debconf messages (Closes: #864172). Patch from
    Rui Branco
    - Hungarian translation for debconf messages (Closes: #708277)
  * Properly quote subshell invocation in samba-common.preinst (Closes: #771689)
  * Add Build-Depends: xfslibs-dev, for XFS quotas

 -- Mathieu Parent <sathieu@debian.org>  Mon, 12 Jun 2017 08:09:43 +0200

samba (2:4.5.8+dfsg-2) unstable; urgency=high

  * CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside

 -- Mathieu Parent <sathieu@debian.org>  Thu, 18 May 2017 11:53:47 +0200

samba (2:4.5.8+dfsg-1) unstable; urgency=high

  * New upstream version
    - Drop CVE-2017-2619.patch: merged upstream
    - Fix CVE-2017-2619 regression with "follow symlink = no" (Closes: #858564)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 01 Apr 2017 20:39:17 +0200

samba (2:4.5.6+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2017-2619: symlink race permits opening files outside share directory

 -- Mathieu Parent <sathieu@debian.org>  Wed, 22 Mar 2017 08:03:34 +0100

samba (2:4.5.6+dfsg-1) unstable; urgency=medium

  * New upstream version
  * Fix typo in smbd.service and winbind.service (s/nmb.service/nmbd.service)
    (Closes: #857232)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 09 Mar 2017 15:42:37 +0100

samba (2:4.5.5+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Revert rewrite of the vfs_fruit module (Closes: #856561)
  * Fix 'winbindd privileged socket directory' (Closes: #754339):
    - Fix path from /var/run/samba/winbindd_privileged/ to
      /var/lib/samba/winbindd_privileged/.
    - Move mkdir+chgrp+chmod to postinst (to handle systemd also).
    - Thanks to Jim Barber for the report.
  * logrotate: Use delaycompress on all logs (Closes: #702201)
    - Thanks to Matthew Gabeler-Lee for the proposed fix.

 -- Mathieu Parent <sathieu@debian.org>  Sun, 05 Mar 2017 23:21:09 +0100

samba (2:4.5.4+dfsg-1) unstable; urgency=medium

  [ Mathieu Parent ]
  * New upstream version
    - Drop security-2016-12-19.patch, was 4.5.3
  * missing-build-dependency-for-dh_-command dh_python2 => dh-python

  [ Vincent Blut ]
  * d/control: Suggest chrony as an alternative to ntp (Closes: #851727)

  [ Daniel A ]
  * add gpgme support (Closes: #850908)

 -- Mathieu Parent <sathieu@debian.org>  Wed, 25 Jan 2017 21:25:40 +0100

samba (2:4.5.2+dfsg-2) unstable; urgency=high

  * This is a security release in order to address the following defects:
    - CVE-2016-2123 (Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer
      Overflow Remote Code Execution Vulnerability).
    -  CVE-2016-2125 (Unconditional privilege delegation to Kerberos servers in
      trusted realms).
    -  CVE-2016-2126 (Flaws in Kerberos PAC validation can trigger privilege
       elevation).

 -- Mathieu Parent <sathieu@debian.org>  Sat, 17 Dec 2016 22:54:35 +0100

samba (2:4.5.2+dfsg-1) unstable; urgency=medium

  * New upstream version
    - Remove CTDB-Fix-samba-eventscript.patch: merged
    - d/rules: /usr/share/ctdb-tests is now /usr/share/ctdb/tests
  * Update gbp.conf with debian-branch = master

 -- Mathieu Parent <sathieu@debian.org>  Thu, 08 Dec 2016 20:21:52 +0100

samba (2:4.5.1+dfsg-2) unstable; urgency=medium

  * Upload to unstable

 -- Mathieu Parent <sathieu@debian.org>  Mon, 05 Dec 2016 07:01:35 +0100

samba (2:4.5.1+dfsg-1) experimental; urgency=medium

  * New upstream version
    - Refresh patches
    - Remove bug_12283_segfault_tevent_internals.patch
    - Remove gencache-Bail-out-of-stabilize-if-we-can-not-get-the.patch
    - Adding libdsdb-garbage-collect-tombstones.so.0 to samba-libs.install
  * CTDB: Fix samba eventscript
  * nmbd requires a working network (Closes: #698056, #842056, #840608,
    LP: #1635491)
  * Be more verbose about masking samba-ad-dc.service (Closes: #841147)
  * Remove Fix_parallel_build.patch, not working

 -- Mathieu Parent <sathieu@debian.org>  Tue, 01 Nov 2016 13:54:29 +0100

samba (2:4.5.0+dfsg-1) experimental; urgency=medium

  * Upload to experimental
  * New upstream version
    + Remove patches:
      - bug_601406_fix-perl-path-in-example.patch, similar applied
      - waf_smbpasswd_location, applied
      - Fix-privacy-breach-on-google.com.patch, doc moved out of source
      - ctdb-Fix-detection-of-gnukfreebsd.patch, applied
      - gcc_6.patch, applied
    + Dumped dependencies
      - libldb-dev (>= 2:1.1.27~)
      - libtalloc-dev (>= 2.1.8~)
      - libtdb-dev (>= 1.3.10~)
      - libtevent-dev (>= 0.9.29~)
      - python-talloc-dev (>= 2.1.8~)
    + Install new files and update debian/ctdb.docs
    + Update to libwbclient0.symbols
    + Update samba-libs.lintian-overrides (libtevent-unix-util0 removed)
    + /etc/default/ctdb is now /etc/ctdb/ctdbd.conf
  * Add patch for https://bugzilla.samba.org/show_bug.cgi?id=12045
  * ctdb/wscript: Call CHECK_XSLTPROC_MANPAGES() before checking
    XSLTPROC_MANPAGES. This should fix parallel builds, including
    tests.reproducible-builds.org. Thanks HW42 on IRC
  * Depends: lsb-base (>= 3.0-6), for ctdb and winbind as they source
    /lib/lsb/init-functions

 -- Mathieu Parent <sathieu@debian.org>  Sun, 23 Oct 2016 15:56:59 +0200

samba (2:4.4.6+dfsg-2) unstable; urgency=high

  * Remove uses of tevent internals. This fixes segfault.
    Closes: #840382, #840298.

 -- Mathieu Parent <sathieu@debian.org>  Wed, 12 Oct 2016 05:53:33 +0200

samba (2:4.4.6+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Use epoch in samba-vfs-modules Breaks and Replaces (Closes: #833164)
  * Only fix PIDFile in {nmbd,samba-ad-dc,smbd,winbind}.service (i.e. not
    ctdb.service) Closes: #838000.
  * logrotate: Only reload smbd when needed. Thanks Roland Hieber.
    Closes: #838796.

 -- Mathieu Parent <sathieu@debian.org>  Mon, 10 Oct 2016 22:23:45 +0200

samba (2:4.4.5+dfsg-3) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Add strict dependencies on samba-libs, because of use of private
    libraries without stable ABI across Samba binary packages.
  * Add Breaks clauses for older versions of samba-libs and samba to
    samba-vfs-modules, as some files have moved. Closes: #833164,
    #832880

  [ Mathieu Parent ]
  * Remove /etc/systemd/system/samba-ad-dc.service (from postinst) on purge.
    Closes: #832352
  * Fix PIDFile in systemd service files. Closes: #830909
  * Remove unused lintian overrides
  * Use automatic debug packages (-dbgsym) (Closes: #819776)
  * Remove Christian Perrier from uploaders (Closes: #836715). Thanks for all
    you work, and thanks for bringing me in the team and as a DD.
  * Update Turkish translation. Thanks Atila KOÇ. Closes: #791903
  * Drop dependency on samba-libs in libwbclient0 to avoid
    circular dependency.

 -- Mathieu Parent <sathieu@debian.org>  Fri, 09 Sep 2016 13:00:54 +0200

samba (2:4.4.5+dfsg-2) unstable; urgency=medium

  * Disable running of 'make quicktest' during build, as it takes very
    long to run on x32 and enables building non-production NTVFS server.
    Closes: #830571

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 09 Jul 2016 19:09:19 +0000

samba (2:4.4.5+dfsg-1) unstable; urgency=medium

  * New upstream release.
   + Fixes CVE-2016-2119: Client side SMB2/3 required signing can be
     downgraded. Closes: #830195

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 07 Jul 2016 10:51:40 +0000

samba (2:4.4.4+dfsg-3) unstable; urgency=medium

  * Add patch gcc_6.patch, fixing compatibility with gcc 6.
    Closes: #812264

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 04 Jul 2016 12:20:56 +0000

samba (2:4.4.4+dfsg-2) unstable; urgency=medium

  * Mask samba-ad-dc.service unless needed (Closes: #828137)
  * Fix kill path in systemd units (Closes: #828730)

 -- Mathieu Parent <sathieu@debian.org>  Mon, 27 Jun 2016 21:37:58 +0200

samba (2:4.4.4+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * The "Thanks lintian" release
  * Fixes:
    - Ensure that dpkg-buildflags are passed, and enable all hardening
    - systemd
      + Enable systemd (sd_notify) on Linux, and install systemd files
      + Remove obsolete syslog.target from service files
      + Add documentation field to unit files
    - Drop fix-cluster-build.diff: no more needed
    - Use secure Vcs-* URLs
    - Fix copyright file
    - samba.postinst: command-with-path-in-maintainer-script update-inetd
    - samba-common-bin: package-contains-empty-directory usr/lib/samba/
    - winbind: package-contains-empty-directory usr/lib/samba/nss_info/
    - Add Description to init files
  * No-op fixes:
    - d/control: Drop XS-Testsuite field
    - Drop redundant "Priority: optional" fields
    - Drop redundant "Section: net" fields
    - Describe non-standard-dir-perm var/spool/samba/
    - Describe no_build_system.patch
    - Remove README.build-upstream, as packaging/Debian/ is now empty
    - Verify upstream tarball from uscan
    - Update README.source and remove build-orig.sh

 -- Mathieu Parent <sathieu@debian.org>  Mon, 13 Jun 2016 21:52:52 +0200

samba (2:4.4.3+dfsg-4) unstable; urgency=medium

  * Fix build with DEB_BUILD_OPTIONS=nocheck
  * Still run "make quicktest" but ignore failures

 -- Mathieu Parent <sathieu@debian.org>  Sat, 07 May 2016 13:18:53 +0200

samba (2:4.4.3+dfsg-3) unstable; urgency=medium

  * Skip raw.write tests for now as they fail on 32-bit

 -- Mathieu Parent <sathieu@debian.org>  Fri, 06 May 2016 15:34:07 +0200

samba (2:4.4.3+dfsg-2) unstable; urgency=medium

  * Run quicktest during build
  * Reproducibility:
    - Drop no_build_options.patch as it breaks "make test"
    - Remove unreproducible build environment instead
  * Mention that patch waf_smbpasswd_location was submitted
  * usershare.patch: Fix "usershare max shares" default in XML doc and in s4

 -- Mathieu Parent <sathieu@debian.org>  Tue, 03 May 2016 12:30:56 +0200

samba (2:4.4.3+dfsg-1) unstable; urgency=medium

  * Cleanup ctdb READMEs during 'clean' step.
  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 02 May 2016 14:12:46 +0000

samba (2:4.4.2+dfsg-2) unstable; urgency=medium

  * Merge in 4.3 package changes.

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 27 Apr 2016 01:29:47 +0000

samba (2:4.4.2+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Bump standards version to 3.9.8 (no changes).
  * Drop build dependency on perl-modules; depend on perl instead.
  * Upload to unstable.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 26 Apr 2016 23:29:54 +0000

samba (2:4.4.1+dfsg-1) experimental; urgency=medium

  * New upstream release
   + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
    - CVE-2015-5370 (Multiple errors in DCE-RPC code)
    - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
    - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
    - CVE-2016-2112 (LDAP client and server don't enforce integrity)
    - CVE-2016-2113 (Missing TLS certificate validation)
    - CVE-2016-2114 ("server signing = mandatory" not enforced)
    - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
    - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
  * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze

 -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Mon, 11 Apr 2016 16:09:59 +1200

samba (2:4.4.0+dfsg-1) experimental; urgency=medium
  [ Andrew Bartlett ]
  * New upstream release.

 -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Wed, 06 Apr 2016 17:08:20 +1200

samba (2:4.3.8+dfsg-1) unstable; urgency=low

  [ Jelmer Vernooij ]
  * Add patch no_build_system.patch: drop host-specific define that
    prevents reproducible builds.
  * New upstream release.
   + Drop patch
     security-2016-04-12-prerequisite-v4-3-regression-fixes.metze01.txt,
     now included upstream.
  * Bump version in Replaces: samba-libs for samba-vfs-modules to
    4.3.2+dfsg-1, to fix jessie->stretch upgrades. Closes: #821070

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 16 Apr 2016 01:18:36 +0000

samba (2:4.3.7+dfsg-1) unstable; urgency=high

  * New upstream release.
   + Fixes (Patches by Stefan Metzmacher of SerNet and others on the Samba Team):
    - CVE-2015-5370 (Multiple errors in DCE-RPC code)
    - CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
    - CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
    - CVE-2016-2112 (LDAP client and server don't enforce integrity)
    - CVE-2016-2113 (Missing TLS certificate validation)
    - CVE-2016-2114 ("server signing = mandatory" not enforced)
    - CVE-2016-2115 (SMB IPC traffic is not integrity protected)
    - CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
  * Additional regression fix for 'net ads join' to a Windows 2003 domain by metze

 -- Andrew Bartlett <abartlet+debian@catalyst.net.nz>  Wed, 13 Apr 2016 10:24:17 +1200

samba (2:4.3.6+dfsg-2) unstable; urgency=low
  [ Mathieu Parent ]
  * Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146). Patch by
    Santiago Vila
  * Drop samba from winbind depends and use samba-common* instead
    (Closes: #732604)
  * Add an override to script-not-executable etc/ctdb/events.d/10.external
  * Add ufw integration (from Ubuntu)
  * Don't build ctdb twice:
    - Shorten build time
    - Fix ctdb log path from /var/log/log.ctdb to /var/log/ctdb/log.ctdb
    - Remove unused /usr/lib/*/ctdb/*.so files

  [ Steven Chamberlain ]
  * ctdb: Fix detection of gnukfreebsd (Closes: #802621)

  [ Jelmer Vernooij ]
  * Add no_build_options.patch: make package more reproducible by
    disabling build options output.

  [ Andrew Bartlett ]
  * Allow to build/run the AD DC provision/dbcheck against talloc
    2.1.6 (Closes: #820015)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 31 Mar 2016 22:26:11 +0200

samba (2:4.3.6+dfsg-1) unstable; urgency=medium

  * New upstream release.
   + Fixes:
    - CVE-2015-7560: Incorrect ACL get/set allowed on symlink path.
    - CVE-2016-0771 (Out-of-bounds read in internal DNS server.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 27 Feb 2016 23:28:53 +0000

samba (2:4.3.5+dfsg-3) unstable; urgency=medium

  * Fix dhclient hook if samba is not installed. Thanks, Jan Braun.
    Closes: #801976
  * Rebuild against current version of ldb in the archive. Closes:
    #817036

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 08 Mar 2016 00:24:10 +0000

samba (2:4.3.5+dfsg-2) unstable; urgency=medium

  * Move strict ldb dependency to samba-dsdb-modules package, which
    actually contains the modules. Closes: #816210

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 06 Mar 2016 22:51:53 +0000

samba (2:4.3.5+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Fixed usershare.patch to apply against new version.
  * Loosen dependencies on ldb to ldb >= 1.1.21, per upstream.
  * Drop patch sockets-with-htons.patch: applied upstream.
  * Bump standards version to 3.9.7 (no changes).

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 05 Mar 2016 15:56:42 +0000

samba (2:4.3.3+dfsg-2) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Add dependency on libtevent-dev in samba-dev.

  [ Mathieu Parent ]
  * Fix CTDB behavior since CVE-2015-8543 (Closes: #813406)

 -- Mathieu Parent <sathieu@debian.org>  Thu, 04 Feb 2016 13:25:01 +0100

samba (2:4.3.3+dfsg-1) unstable; urgency=medium

  * New upstream release. Closes: #808133.
   + Drop subunit dependency, no longer used.
   + Drop ntdb dependencies, no longer used.
   + Fixes:
    - CVE-2015-5252: Insufficient symlink verification in smbd
    - CVE-2015-5296: Samba client requesting encryption vulnerable
                     downgrade attack
    - CVE-2015-5299: Missing access control check in shadow copy code
    - CVE-2015-7540: Remote DoS in Samba (AD) LDAP server
    - CVE-2015-8467: Denial of service attack against Windows Active Directory
                     server
    - CVE-2015-3223: Denial of service in Samba Active Directory server
    - CVE-2015-5330: Remote memory read in Samba LDAP server
  * Remove libpam-smbpasswd, which is broken and slated for removal
    upstream. Closes: #799840
  * Remove lib/zlib/contrib/dotzlib/DotZLib.chm from excluded files in
    copyright; no longer shipped upstream.
  * Remove wins2dns.awk example script.
  * Remove the samba-doc package, and move examples files from it to
    relevant other packages. Closes: #769385
  * Move samba-dsdb-modules back from Depends to Recommends, as using
    Samba as a standalone server doesn't require the dsdb modules.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 18 Dec 2015 01:18:42 +0000

samba (2:4.3.0+dfsg-2) experimental; urgency=medium

  * Re-enable cluster support.
   + Build samba-cluster-support as built-in library, since its dependencies
     are broken.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 28 Sep 2015 00:34:51 +0000

samba (2:4.3.0+dfsg-1) experimental; urgency=medium

  * Fix watch file.
  * New upstream release.
  * Drop no_wrapper patch: applied upstream.
  * Drop patch ctdb_sockpath.patch: applied upstream.
  * Drop Fix-CTDB-build-with-PMDA patch: applied upstream.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 19 Sep 2015 01:59:36 +0000

samba (2:4.2.1+dfsg-1) experimental; urgency=medium

  [ Jelmer Vernooij ]
  * New upstream release.
   + Drop patch do-not-install-smbclient4-and-nmbclient4: applied upstream.
   + Drop patch
     bug_598313_upstream_7499-nss_wins-dont-clobber-daemons-logs.patch:
     present upstream.
   + Refresh patch 26_heimdal_compat.26_heimdal_compat.
   + Add build-dependency on libarchive-dev.
  * Drop samba_bug_11077_torturetest.patch: applied upstream.
  * Drop dependency on ctdb - now bundled with Samba.
  * Use bundled Heimdal as the system Heimdal doesn't contain the
    changes required for Samba.
  * Add patch heimdal-rfc3454.txt: patch in truncated rfc3454.txt for
    building bundled heimdal.
  * Drop patches 25_heimdal_api_changes and 26_heimdal_compat.
  * Disable cluster support; it breaks the build.
  * Add patch no_wrapper: avoid dependencies on
    {nss,uid,socket}_wrapper.
  * Move some libraries around.
  * Move ownership of var/lib/samba and var/lib/samba/private to samba-
    common, remove obsolete samba4.dirs. Closes: #793866
  * Remove ctdb-tests and ctdb-pcp-pmda packages as they contain problems
    and unclear what they are useful for, now ctdb now longer provides
    an external API.

  [ Mathieu Parent ]
  * Merge ctdb source package
    - initial merge
    - libctdb-dev has been dropped
    - ctdb-dbg renamed to ctdb-tests, debug files moved to samba-dbg
    - ctdb-tests depends on python
  * Fix CTDB socketpath parsing
  * Fix CTDB build with PMDA
  * ctdb: Fix privacy breach on google.com (from documentation)

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Dec 2014 15:34:36 +0000

samba (2:4.1.20+dfsg-1) unstable; urgency=medium

  * New upstream release (last compatible with current OpenChange).
  * samba_bug_11077_torturetest.patch: refresh.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 20 Sep 2015 17:48:59 +0000

samba (2:4.1.17+dfsg-5) unstable; urgency=medium

  * Rebuild against new ldb. Closes: #799569

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 20 Sep 2015 13:20:53 +0000

samba (2:4.1.17+dfsg-4) unstable; urgency=medium

  * Add pidl_reproducible.patch: Make pidl output reproducible.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 28 Apr 2015 00:10:21 +0000

samba (2:4.1.17+dfsg-3) unstable; urgency=medium

  * Rebuild against new ldb. Closes: #783424

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 27 Apr 2015 00:09:50 +0000

samba (2:4.1.17+dfsg-2) unstable; urgency=medium

  [ Andreas Beckmann ]
  * Add samba.preinst to temporarily deactivate the old qtsmbstatusd
    initscript which has dependencies incompatible with the new samba
    initscript. This will ensure a clean upgrade path for samba if the
    qtsmbstatus-server package was installed previously.  (Closes: #779666)

 -- Ivo De Decker <ivodd@debian.org>  Sat, 07 Mar 2015 13:09:23 +0100

samba (2:4.1.17+dfsg-1) unstable; urgency=high

  * New upstream release. Fixes:
  - CVE-2014-8143: Elevation of privilege to Active Directory Domain
                   Controller. Closes: #776993
  - CVE-2015-0240: Unexpected code execution in smbd. Closes: #779033
  * Refresh patch add-so-version-to-private-libraries.
  * Add new smbtorture test rpc.schannel_anon_setpw to detect the conditions
    leading to CVE-2015-0240.
  * Add breaks on qtsmbstatus-server (<< 2.2.1-3~). Closes: #775041
  * Build-depend on reverted ldb version (with increased epoch).

 -- Ivo De Decker <ivodd@debian.org>  Mon, 23 Feb 2015 20:20:21 +0100

samba (2:4.1.13+dfsg-4) unstable; urgency=medium

  * Revert previous patch, since ldb has an active module version check.
    Instead, just depend on ldb 1.1.18. Closes: #771991

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 10 Dec 2014 18:13:42 +0000

samba (2:4.1.13+dfsg-3) unstable; urgency=medium

  * Update debian/rules to allow support for multiple upstream ldb
    versions, when verified. Closes: #771991

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 04 Dec 2014 21:03:54 +0100

samba (2:4.1.13+dfsg-2) unstable; urgency=medium

  * Mask /etc/init.d/samba init script for systemd. This should make systemd
    ignore the samba init script. Thanks to Michael Biebl for the suggestion.
    Closes: #740942
  * Disable samba init script on upgrade from wheezy to jessie.
    Thanks again to Michael Biebl for the report.
    Closes: #766690

 -- Ivo De Decker <ivodd@debian.org>  Sat, 25 Oct 2014 00:49:12 +0200

samba (2:4.1.13+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Bump standards version to 3.9.6 (no changes).

 -- Ivo De Decker <ivodd@debian.org>  Tue, 21 Oct 2014 20:22:19 +0200

samba (2:4.1.11+dfsg-2) unstable; urgency=medium

  * Updated Italian translation. Thanks Luca Monducci. Closes: #760743
  * Use HTTP in watch file, as ftp.samba.org is not working reliably for
    me.
  * Use Excluded-Files in debian/copyright for DFSG-nonfree files.
  * Update Dutch translation. Thanks Frans Spiesschaert. Closes: #763650

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Sep 2014 20:52:27 +0200

samba (2:4.1.11+dfsg-1) unstable; urgency=high

  * New upstream release. Fixes:
   + CVE-2014-3560: Remote code execution in nmbd. Closes: #756759

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 03 Aug 2014 03:47:07 +0200

samba (2:4.1.9+dfsg-2) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Depend on libgnutls28-dev rather than libgnutls-dev. Closes: #753146
  * Remove outdated-autotools-helper-file overrides for config.guess and
    config.sub; files are no longer present upstream.
  * Add branch to Vcs-Git header.
  * samba.smbd.upstart: Remove leftover code for RUN_MODE=inetd, which
    was already removed elsewhere.
  * Move dsdb-module library from samba-dsdb-modules to samba-libs, to
    prevent circular dependencies between samba-dsdb-modules and samba-
    libs. This is necessary since dsdb-module is now used by the dcerpc-
    server library.

  [ Debconf translations ]
  * New Brazilian Portugese translation from Adriano Rafael Gomes.
    Closes: #752719

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 29 Jun 2014 19:43:52 +0200

samba (2:4.1.9+dfsg-1) unstable; urgency=high

  * New upstream security release. Fixes:
    - CVE-2014-0244: nmbd denial of service
    - CVE-2014-3493: smbd denial of service: server crash/memory corruption

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 23 Jun 2014 18:33:27 +0200

samba (2:4.1.8+dfsg-1) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Remove smbd and nmbd from required-start and required-stop in
    samba.init. Closes: #739887

  [ Ivo De Decker ]
  * Remove workaround for #745233.
  * New upstream release. Fixes:
    - CVE-2014-0239: dns: Don't reply to replies. Closes: #749845
    - CVE-2014-0178: Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response.
  * Use the upstream version of the smb.conf.5 manpage, instead of building
    it. This is an ugly temporary workaround because xsltproc crashes on some
    architectures when building this manpage (due to #750593).
    This fixes the FTBFS, and should make samba installable with the new ldb
    version. Closes: #750541, 750796

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 08 Jun 2014 23:37:53 +0200

samba (2:4.1.7+dfsg-2) unstable; urgency=medium

  * Build-depend on heimdal-dev instead of libkrb5-dev.
  * Add versioned build-dep on libgmp10 for now, which should be pulled in by
    libhogweed2, to be able to build in outdated build environments (like on
    most buildds). This is a workaround for #745233.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 20 Apr 2014 13:44:39 +0200

samba (2:4.1.7+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Remove readline63.patch, integrated upstream.
  * Add build-dep on libkrb5-dev, no longer pulled in by libcups2-dev.
  * Don't try to delete Parse/Yapp/Driver.pm, which is no longer installed.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 19 Apr 2014 13:39:09 +0200

samba (2:4.1.6+dfsg-1) unstable; urgency=high

  * New upstream security release. Fixes:
    - CVE-2013-4496: password lockout not enforced for SAMR password changes
    - CVE-2013-6442: smbcacls can remove a file or directory ACL by mistake
  * Backport fix for readline 6.3 from master

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 15 Mar 2014 12:13:59 +0100

samba (2:4.1.5+dfsg-1) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Fix watch file.

  [ Ivo De Decker ]
  * New upstream release.
  * Remove the part of patch 26_heimdal_compat integrated upstream.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 22 Feb 2014 23:17:59 +0100

samba (2:4.1.4+dfsg-3) unstable; urgency=medium

  * Move samba.dckeytab module to samba package, as it relies on hdb.
    Closes: #736405, #736430

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 24 Jan 2014 23:35:14 +0000

samba (2:4.1.4+dfsg-2) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Depend on newer version of ctdb, as Samba won't build against older
    versions without --enable-old-ctdb.
  * Bump standards version to 3.9.5 (no changes).
  * Move libpac, db_glue and hdb module from samba-libs to samba package
    to reduce size and dependency set of libs package.
  * Fix compatibility with newer versions of the Heimdal HDB API.
    + Update 26_heimdal_compat: Fix initialization of HDB plugin. Thanks Jeff
      Clark. Closes: #732342
    + Add dependency on specific version of the Heimdal HDB API.
      Closes: #732344

  [ Steve Langasek ]
  * dhcp3-client is superseded by dhcp-client; update the references in
    the package.  Closes: #736070.
  * Move the dhcp client hook from /etc/dhcp3 to /etc/dhcp.
    Closes: #649100.
  * debian/bin/xsltproc: don't use $FAKETIME as the variable name in our
    wrapper script, this seems to make faketime unhappy.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 18 Jan 2014 20:26:35 +0000

samba (2:4.1.4+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Update version of talloc build-deps to 2.0.8.
  * python-samba: add depends on python-ntdb.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 18 Jan 2014 14:07:15 +0100

samba (2:4.1.3+dfsg-2) unstable; urgency=medium

  * Add debug symbols for all binaries to samba-dbg. Closes: #732493
  * Add lintian overrides for empty prerm scripts.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Fri, 27 Dec 2013 12:39:54 +0100

samba (2:4.1.3+dfsg-1) experimental; urgency=low

  [ Jelmer Vernooij ]
  * New upstream release.
   + Drop 0002-lib-replace-Allow-OS-vendor-to-assert-that-getpass-i.patch:
     upstream no longer uses getpass.
  * Add source dependency on libntdb1, and stop passing --disable-ntdb,
    which has been removed.
  * Remove handling for SWAT, which is no longer shipped upstream.
  * Split VFS modules out from samba-libs into a separate binary
    package.
  * Move service and process_model modules from the samba-libs to the
    samba package. Prevents dependencies on libkdc2-heimdal and
    libhdb9-heimdal.

  [ Ivo De Decker ]
  * Add build-dep on python-ntdb.
  * Add build-dep on libncurses5-dev.
  * Add depends on python-ntdb to samba.
  * New upstream release.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 09 Dec 2013 23:24:27 +0100

samba (2:4.0.13+dfsg-2) UNRELEASED; urgency=low

  [ Steve Langasek ]
  * Check for alternative's presence before calling update-alternatives
    --remove-all, instead of silently ignoring all errors from
    update-alternatives.

  [ Debconf translations ]
  * Spanish (Javier Fernández-Sanguino).  Closes: #731800

 -- Steve Langasek <vorlon@debian.org>  Mon, 09 Dec 2013 11:13:59 -0800

samba (2:4.0.13+dfsg-1) unstable; urgency=high

  [ Steve Langasek ]
  * Move update-alternatives upgrade removal handling to the postinst, where
    it belongs.  Closes: #730090.
  * Really remove all references to encrypted passwords: the
    samba-common.config script still included references, which could cause
    upgrade failures in some cases.  Closes: #729167.

  [ Ivo De Decker ]
  * New upstream security release. Fixes:
    - CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked
    - CVE-2012-6150: pam_winbind login without require_membership_of
                     restrictions
  * Add empty prerm scripts for samba and samba-common-bin.prerm, to allow
    upgrades from earlier versions with broken prerm script (bug introduced in
    2:4.0.10+dfsg-3)
  * Don't fail in postinst when removing old alternatives fails.

  [ Jelmer Vernooij ]
  * Fix invocations of 'update-alternatives --remove-all'. Closes: #731192

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 09 Dec 2013 18:34:07 +0100

samba (2:4.0.12+dfsg-1) unstable; urgency=low

  [ Ivo De Decker ]
  * New upstream release.

  [ Debconf translations ]
  * Thai (Theppitak Karoonboonyanan).  Closes: #728525
  * Norwegian Bokmål (Bjørn Steensrud).  Closes: #729070
  * German (Holger Wansing).  Closes: #729210

  [ Jelmer Vernooij ]
  * Add 26_heimdal_compat: Fix compatibility with newer versions of
    Heimdal.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 24 Nov 2013 07:48:20 +0100

samba (2:4.0.11+dfsg-1) unstable; urgency=high

  * New upstream security release. Fixes:
    - CVE-2013-4475: ACLs are not checked on opening an alternate data stream
                     on a file or directory
    - CVE-2013-4476: Private key in key.pem world readable
  * Move world-readable private key file on upgrade to allow
    auto-regeneration.
  * Add check in samba-ad-dc init script for wrong permission on private key
    file that would prevent samba to start.
  * Update samba-libs.lintian-overrides for moved libtorture0.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 11 Nov 2013 15:42:40 +0100

samba (2:4.0.10+dfsg-4) unstable; urgency=low

  [ Christian Perrier ]
  * Mark one debconf string as non-translatable

  [ Debconf translations ]
  * French updated (Christian Perrier).
  * Swedish (Martin Bagge / brother).  Closes: #727186
  * Hebrew (Omer Zak).
  * Japanese (Kenshi Muto).  Closes: #727218
  * Indonesian (Al Qalit).  Closes: #727543
  * Russian (Yuri Kozlov).  Closes: #727612
  * Esperanto (Felipe Castro).  Closes: #727619
  * Polish (Michał Kułach).  Closes: #727646
  * Danish (Joe Hansen).  Closes: #727764
  * Czech (Miroslav Kure).  Closes: #728100
  * Basque (Iñaki Larrañaga Murgoitio).  Closes: #728315

  [ Jelmer Vernooij ]
  * Move libtorture0 to samba-testsuite to reduce size of samba-libs and
    prevent dependency on libsubunit0.

  [ Ivo De Decker ]
  * Handle move of tdb files to private dir in samba-libs.preinst.
    Closes: #726472
  * Also do the tdb move in libpam-smbpass.preinst, to avoid breaking the pam
    module if the upgrade fails.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 02 Nov 2013 11:27:25 +0100

samba (2:4.0.10+dfsg-3) unstable; urgency=low

  [ Ivo De Decker ]
  * Remove Sesse from uploaders. Thanks for your work on samba4.
  * Include /etc/pam.d/samba in samba-common. It got lost somewhere in the
    samba4 merge. Closes: #726183
  * Remove unused alternatives links on upgrade in samba-common-bin.prerm.
  * Add support for 'status' in samba-ad-dc init script.
  * Fix umask in make_shlibs to avoid lintian error
    control-file-has-bad-permissions.
  * Enable verbose build log.
  * Run xsltproc under faketime to get the same date for manpages on different
    architectures in Multi-Arch: same packages. Closes: #726314
  * Restore build-dep on libcups2-dev, which got lost in the samba4 merge.
    This should restore the cups printing functionality. Closes: #726726
  * Add wrapper for cups-config to filter out
    -L/usr/lib/${DEB_HOST_MULTIARCH}, to work around build-failure.
  * Also add other build-deps which were present in samba 2:3.6.19-1.
  * if the same tdb file is present in /var/lib/samba and
    /var/lib/samba/private, abort the upgrade to work around #726472 for now.
  * Document swat removal. Closes: #726751

  [ Steve Langasek ]
  * Don't fail on errors from testparm in the samba init script.
    Closes: #726326
  * debian/patches/bug_221618_precise-64bit-prototype.patch: adjust the LFS
    handling to work independently of header include order.  Closes: #727065.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 22 Oct 2013 08:10:31 +0200

samba (2:4.0.10+dfsg-2) unstable; urgency=low

  * First upload the unified samba 4.x package to unstable.
    Thanks to everyone who worked on these packages all these years.
  * Remove Noël from uploaders. Thanks for your work on the samba packages
  * Add myself to uploaders.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 12 Oct 2013 11:05:55 +0200

samba (2:4.0.10+dfsg-1) experimental; urgency=low

  * Team upload.

  [ Ivo De Decker ]
  * Update vcs urls to point to samba instead of samba4.
  * New upstream release.
  * Limit build-dep on libaio-dev to linux architectures.
  * Merge init script changes from 3.6 packages.

  [ Steve Langasek ]
  * Don't put useless symlinks to nss modules in the libnss-winbind package.
  * Add lintian overrides for another set of wrong lintian errors for the
    NSS modules.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 10 Oct 2013 21:56:08 +0200

samba (2:4.0.9+dfsg-1) experimental; urgency=low

  * Team upload.

  [ Steve Langasek ]
  * The samba-ad-dc upstart job should be installed unconditionally, not just
    in Ubuntu.
  * Don't exclude our private libraries from the shlibs generation.
  * Port debian/autodeps.py to python3 and build-depend on python3 so we can
    invoke it correctly from debian/rules.

  [ Jelmer Vernooij ]
  * Bump standards version to 3.9.4 (no changes).
  * Suggest libwireshark-dev for libparse-pidl-perl, as it is necessary
    to build wireshark dissectors generated by pidl.
  * samba-ad-dc: Drop suggests for removed packages swat2 and samba-gtk.
  * samba: Remove inetd servers from suggests; inetd support was dropped
    in 3.6.16-1.
  * Fix database errors during upgrade. Closes: #700768
  * Integrate libraries in samba-libs

  [ Ivo De Decker ]
  * New upstream release.
  * Merge contents of samba-ad-dc into samba.
  * Remove systemd support for now, as it is broken. Closes: #719477
  * Add lintian override for samba-libs: package-name-doesnt-match-sonames.
  * Add missing depends for dev packages.
  * Generate correct shlibs for both public and private libs.

  [ Jeroen Dekkers ]
  * Drop 10_messaging_subsystem patch.
  * Add patch to not install smbclient4 and nmblookup4 and remove
    samba4-clients binary package.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 22 Sep 2013 17:19:44 +0200

samba (2:4.0.8+dfsg-1) experimental; urgency=low

  [ Christian Perrier ]
  * Remove all mention of "Samba 4" and "experimental version of Samba"
    in packages' description.  Samba version 4 is now production-ready.

  [ Andrew Bartlett ]
  * Update build-dependencies on Samba libraries using autodeps.py
  * New upstream security release. Closes: #718781
    Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation

  [ Ivo De Decker ]
  * New upstream release
  * refresh patches for new upstream version
  * remove patches integrated upstream
  * Update build-dependencies for new upstream version
  * Add replaces for python-samba for packages that take over files from it.
    Closes: #719212

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 11 Aug 2013 23:45:16 +0200

samba (2:4.0.6+dfsg-1) experimental; urgency=low

  * Team upload.

  [ Andrew Bartlett ]
  * Converted to full AD DC package on the basis of the 3.6 package
    - Samba now can be an Active Directory Domain controller
    - The samba4-* packages are replaced by this package.
    - This package now uses the s3fs file server by default, not the ntvfs
      file server used in the samba4 packages.
  * Provides a new library based package
    - Upstream's new build system uses libraries extensively, so new
      packages reflect that.
    - This provides the libraries that Openchange and other projects depend on
  * Move binary files out of /var/lib/samba to /var/lib/samba/private,
    where they belong according to upstream Samba:
    - schannel_store.tdb
    - idmap2.tdb
    - passdb.tdb
    - secrets.tdb
  * Remove most of the samba4 references, except for binaries ending in 4
  * Removed debconf support for encrypted passwords
  * Samba 3.x users upgrading can either upgrade to an AD DC or continue
    using Samba without major changes.

  [ Christian Perrier ]
  * Move libnss_winbind.so.2 and libnss_wins.so.2 to /lib as in 3.6.*
  * Use the same set of configure arguments than 3.6.15 (except those
    eventually specific to version 4 and above)
  * Add libctdb-dev to build dependencies as we're building with cluster
    support just like 3.6 packages
  * Re-introduce mksmbpasswd for compatibility with 3.* packages

  [ Ivo De Decker ]
  * Specify all paths using configure options, so that we can finally get rid
    of the fhs patch. Closes: #705449

  [ Steve Langasek ]
  * Make samba-common Conflicts: swat, which is now obsolete and no longer
    built from samba 4.0; the old versions of swat in the archive are
    incompatible with smb.conf from samba 4.0, so force them off the system
    to avoid configuration corruption.

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 20 Jun 2013 21:51:49 +0200

samba4 (4.0.3+dfsg1-0.1) experimental; urgency=low

  [ Andrew Bartlett ]
  * Non-maintainer upload.
  * New upstream relese: 4.0.3
   + Fixes CVE-2013-0172 Samba 4.0.0 as an AD DC may provide authenticated users
     with write access to LDAP directory objects
   + Fixes many other ACL related issues in the AD DC
   + Drop 08_waf_python_config as it is now upstream.
  * Fix the forced use of NTVFS by setting the required options in the smb.conf
    at configure time.
  * Add depenencies to ensure python-samba requires exactly this binary version
    of our core libraries. Closes: #700348

 -- Andrew Bartlett <abartlet@samba.org>  Sat, 16 Feb 2013 17:06:34 +0100

samba4 (4.0.0+dfsg1-1) experimental; urgency=low

  [ Martin Pitt ]
  * debian/tests/control: Fix dependency: python-samba4 does not exist, it's
    python-samba. Closes: #695854

  [ Jelmer Vernooij ]
  * New upstream release: 4.0.0!
   + Add 08_waf_python_config to cope with python-config no longer
     being a script.
  * Add 25_heimdal_api_changes, to update Samba to work with the
    current Heimdal in Sid. Patch from
    Samuel Cabrero Alamán <scabrero@zentyal.com>. Closes: #686227
  * Add 11_force_ntvfs: Force the use of NTVFS, until the version of smbd in
    the archive is new enough. Closes: #694697
  * Drop dependency on libsmbclient; instead, build private copy.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 13 Dec 2012 16:27:20 +0100

samba4 (4.0.0~rc6+dfsg1-1) experimental; urgency=low

  * New upstream release.
   + Drop 08_heimdal_config_h and 11_system_heimdal, now applied upstream.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 04 Dec 2012 14:39:40 +0100

samba4 (4.0.0~rc5+dfsg1-1) experimental; urgency=low

  * New upstream release.
  * Add autopkgtest header. Closes: #692671
  * Use Multi-Arch for winbind4.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 08 Nov 2012 15:13:43 +0100

samba4 (4.0.0~rc4+dfsg1-1) experimental; urgency=low

  * New upstream release.
   + Bump minimum ldb version to 1.1.13.
  * Switch to Git as VCS.
  * Remove DM-Upload-Allowed field.
  * Depend on heimdal-multidev rather than heimdal-dev.
   + Add 11_system_heimdal to support building with system heimdal.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 28 Oct 2012 16:21:43 +0100

samba4 (4.0.0~rc3+dfsg1-1) experimental; urgency=low

  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 16 Oct 2012 14:53:19 +0200

samba4 (4.0.0~rc2+dfsg1-2) experimental; urgency=low

  * Depend on at least ldb 1.1.12. Closes: #689594
  * Suggest ntp daemon for ntpsignd integration.
  * Support specifying 'none' as server role to disable provision.
    Closes: #690138
  * Prompt user for administrator password. Closes: #690139
  * Bump debconf level of server role to 'high'.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 04 Oct 2012 13:22:40 +0200

samba4 (4.0.0~rc2+dfsg1-1) experimental; urgency=low

  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 25 Sep 2012 03:34:08 +0200

samba4 (4.0.0~beta2+dfsg1-3) unstable; urgency=low

  * Fix setup when no domain is set. Closes: #681048

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 05 Aug 2012 16:52:02 +0200

samba4 (4.0.0~beta2+dfsg1-2) unstable; urgency=low

  * Use ntvfs while debian ships an old version of Samba 3. Closes: #679678
  * Don't attempt to add shares to the configuration if it doesn't
    exist. Closes: #681050

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 10 Jul 2012 11:52:44 +0200

samba4 (4.0.0~beta2+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Update Slovak translation. Thanks Ivan Masár. Closes: #677906
  * Add build dependency on libacl1-dev.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 18 Jun 2012 00:49:12 +0200

samba4 (4.0.0~beta1+dfsg1-3) unstable; urgency=high

  * Prevent adding share with invalid name when used in domain controller mode.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 17 Jun 2012 17:00:00 +0200

samba4 (4.0.0~beta1+dfsg1-2) unstable; urgency=low

  * Create leading directories in addshare script. Closes: #677643
  * Use attr/attributes.h on GNU/kFreeBSD. Fixes finding of ATTR_ROOT.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 16 Jun 2012 01:42:10 +0200

samba4 (4.0.0~beta1+dfsg1-1) unstable; urgency=medium

  * New upstream release.
  * Add 08_heimdal_config_h: Fixes compatibility with newer versions of
    Heimdal. Closes: #674918
  * Use standard spelling of domain controller in debconf templates.
    Closes: #670413
  * Switch to debhelper 9.
  * samba4-clients: Drop conflicts with smbclient; upstream has renamed
    the Samba4-specific smbclient and nmblookup binaries.

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 30 May 2012 18:42:06 +0200

samba4 (4.0.0~alpha20+dfsg1-1) unstable; urgency=medium

  * New upstream release.
   + No longer installs libkdc-policy.so. LP: #887537

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 01 May 2012 15:02:19 +0200

samba4 (4.0.0~alpha19+dfsg1-7) unstable; urgency=low

  * Only update smb.conf if it exists. Closes: #670560
  * Automatically add shares required for active directory controllers if they
    don't exist. Closes: #670558

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 26 Apr 2012 19:59:26 +0200

samba4 (4.0.0~alpha19+dfsg1-6) unstable; urgency=low

  * Rebuild against ldb 1.1.6.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 20 Apr 2012 12:47:15 +0200

samba4 (4.0.0~alpha19+dfsg1-5) unstable; urgency=low

  * Use dbcheck when upgrading from recent versions of Samba4, as it's
    both more reliable and quicker than upgradeprovision.
  * Move samba-dsdb-modules from Recommends to Depends, as LDAP server
    support has been dropped. Closes: #669331

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 19 Apr 2012 17:33:33 +0200

samba4 (4.0.0~alpha19+dfsg1-4) unstable; urgency=low

  * Fix pattern matching line in setoption.py. Thanks Hleb Valoshka.
    Closes: #669015
  * setoption.py: Preserve mode on smb.conf file.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 16 Apr 2012 17:33:07 +0200

samba4 (4.0.0~alpha19+dfsg1-3) unstable; urgency=low

  * Convert setoption.pl to Python to avoid dependency on perl-modules.
    Closes: #668800

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 15 Apr 2012 15:50:57 +0200

samba4 (4.0.0~alpha19+dfsg1-2) unstable; urgency=low

  * Correctly import server role and realm from existing smb.conf file.
    LP: #936891 LP: #832465 Closes: #659775
  * Force correct realm during upgradeprovision. LP: #728864

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 13 Apr 2012 16:47:37 +0200

samba4 (4.0.0~alpha19+dfsg1-1) unstable; urgency=low

  * New upstream release.
   + Drop patches applied upstream: 06_upgradedns, 08_smb2_deps.
   + Cope with missing sysvol folders during provision upgrade. LP: #930370
   + Depend on tdb 1.2.10.
   + Depend on ldb 1.1.5.
   + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
     beyond of allocated array.
  * Fix replaces: samba-common field in samba4-common-bin.
  * Update Catalan debconf translation. Thanks, Jordi Mallach.
    Closes: #663737

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 11 Apr 2012 16:58:39 +0200

samba4 (4.0.0~alpha18.dfsg1-4) unstable; urgency=low

  * Add patch 08_smb2_deps: Remove (unnecessary) dependencies on various
    private Samba 3 libraries, for which proper package Depends: lines were
    missing.  Closes: #665295
  * Add dependency on tdb-tools. This will be removed once upstream
    removes the use of tdbbackup in provision. Closes: #664658

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 28 Mar 2012 16:20:21 +0200

samba4 (4.0.0~alpha18.dfsg1-3) unstable; urgency=low

  * Fix compatibility with newer versions of Heimdal. Fixes FTBFS.
    Closes: #664820

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 21 Mar 2012 14:11:29 +0100

samba4 (4.0.0~alpha18.dfsg1-2) unstable; urgency=low

  * Add Replaces: python-samba to libsmbclient-raw0 as some
    private libraries have moved. Thanks Axel Beckert. Closes: #663641

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 13 Mar 2012 16:39:12 +0100

samba4 (4.0.0~alpha18.dfsg1-1) unstable; urgency=low

  [ Jelmer Vernooij ]
  * New upstream release.
   + Depend on newer versions of ldb.
   + Depend on tevent >= 0.9.15.
   + Sanitizes NetBIOS names. LP: #938592
   + Re-adds support for 'security = domain' parsing. LP: #916556
  * Fix typo in recommendations of samba4: samba4-dsdb-modules ->
    samba-dsdb-modules.
  * Recommend attr package for Samba4.
  * Create util.h -> samba_util.h symlink for backwards compatibility.
  * Add dependency on libbsd-dev, used for strlcat and strlcpy.
  * Extracts waf source code. Closes: #654500

  [ Debconf translations ]
  * Russian (Yuri Kozlov).  Closes: #651583
  * Portuguese (Miguel Figueiredo).  Closes: #653557
  * German (Holger Wansing).  Closes: #653714
  * Norwegian Bokmål (Bjørn Steensrud).  Closes: #654284
  * Spanish (Javier Fernández-Sanguino).  Closes: #656403
  * Danish (Joe Hansen).  Closes: #656785
  * Dutch (Jeroen Schot).  Closes: #657469
  * Hebrew (Omer Zak).
  * Polish (Michał Kułach).  Closes: #659570
  * Czech (Miroslav Kure).  Closes: #659573
  * Turkish (İsmail BAYDAN).  Closes: #659575
  * Japanese (Kenshi Muto).  Closes: #659978
  * Esperanto (Felipe Castro)

  [ Jelmer Vernooij ]
  * Rename upgradedns to less generic samba_upgradedns.
  * Bump standards version to 3.9.3 (no changes).
  * Use DEP-5 for copyright file.
  * Indonesian (Mahyuddin Susanto).  Closes: #660031
  * Italian (Luca Monducci).  Closes: #660150
  * Use samba-tool to retrieve configuration options from debconf.
    LP: #936891, Closes: #659775
  * Add really basic autopkgtest test.
  * Fix bundled libraries for samba.samba3 python module. LP: #889869

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 12 Mar 2012 19:01:00 +0100

samba4 (4.0.0~alpha17.dfsg2-1) unstable; urgency=low

  * Remove more non-free IETF files. Closes: #547280
  * Rebuild for newer version of ldb.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 03 Dec 2011 01:41:49 +0100

samba4 (4.0.0~alpha17.dfsg1-3) unstable; urgency=low

  * Install libmemcache.so, libutil_str.so and various other private libraries
    required by the samba3 module in python-samba. LP: #889864, LP: #889869

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 13 Nov 2011 17:03:29 +0100

samba4 (4.0.0~alpha17.dfsg1-2) unstable; urgency=low

  * Include upstart file to eliminate delta with Ubuntu.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 11 Nov 2011 16:13:58 +0100

samba4 (4.0.0~alpha17.dfsg1-1) unstable; urgency=low

  * Strip non-free IETF RFC files. Closes: #547280
  * Rebuild against newer ldb. Closes: #648326
  * Updated Swedish debconf translation. Thanks Martin Bagge.
    Closes: #644942
  * Updated French debconf translation. Thanks Christian Perrier.
    Closes: #644465

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 11 Nov 2011 03:16:37 +0100

samba4 (4.0.0~alpha17-3) unstable; urgency=low

  * Upload to unstable. Closes: #642905
  * Use default python version rather than 2.7.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 27 Sep 2011 00:11:31 +0200

samba4 (4.0.0~alpha17-2) experimental; urgency=low

  * In -dev package dependencies, depend on a specific version of other
    Samba dev packages.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 24 Sep 2011 23:10:30 +0200

samba4 (4.0.0~alpha17-1) experimental; urgency=low

  * New upstream release.
  * Add libsmbclient-{raw0,dev} packages, required for winexe.
  * Add libsamba-credentials0 and libsamba-credentials-dev packages for
    new public library for credentials management.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 18 Sep 2011 15:14:42 +0200

samba4 (4.0.0~alpha17~git20110807.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
  * Depend on newer version of ldb. Closes: #636961
  * Update Indonesian Debconf translation. Thanks Mahyuddin Susanto.
    Closes: #608552
  * Preserve server role set in smb.conf. LP: #815586

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 07 Aug 2011 23:37:37 +0200

samba4 (4.0.0~alpha17~git20110801.dfsg1-1) experimental; urgency=low

  * Improve outdated package descriptions. Closes: #486370
  * New upstream release.
  * Bump standards version to 3.9.2 (no changes).
  * Add new libsamdb-dev package, required by openchange which relies on the
    samdb.pc file.
   + No header files are shipped yet, but an upstream fix is pending.
  * Recommend bind9utils in samba4 package.
  * Remove complex dependency loop between library packages. Closes: #598842
   + Disable currently unfinished ldb share module.
   + Split dcerpc server libraries out into libdcerpc-server{0,-dev} to
     cut dependency loop.
   + New samba-dsdb-modules package with all DSDB related LDB modules.
  * Move libwinbind-client library to libgensec0. Closes: #623327
  * Add support for multi-arch.
  * Switch to new style debhelper.
  * Fix symbolic link for ldb modules. Closes: #632974

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 31 Jul 2011 20:16:03 +0200

samba4 (4.0.0~alpha15.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 22 Apr 2011 02:57:04 +0200

samba4 (4.0.0~alpha15~git20110410.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
   + Drop patch now applied upstream: 02_backupkey_private.diff
  * Switch to dh_python2. Closes: #617059

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 05 Mar 2011 14:44:25 +0100

samba4 (4.0.0~alpha15~git20110224.dfsg1-2) experimental; urgency=low

  * Depend on newer version of Heimdal which exposes more hx509 symbols.
    Fixes FTBFS.
  * Tighten libldb1 dependency for LDB modules.
  * Depend on newer version of pyldb.  Closes: #615631

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 28 Feb 2011 03:52:35 +0100

samba4 (4.0.0~alpha15~git20110224.dfsg1-1) experimental; urgency=low

  * New upstream release.
   + Avoids unnecessary setlocale call to "C". LP: #519025, #519025
  * Fix dependency on newer version of ldb. Closes: #614466
  * Add missing dependency on python-samba, required for testparm. LP: #641082
  * Use libwbclient. LP: #714344, Closes: #611214
  * Make sure /var/run/samba exists. LP: #646037

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 23 Feb 2011 00:35:59 +0100

samba4 (4.0.0~alpha15~git20110124.dfsg1-2) experimental; urgency=low

  * Build-depend on newer version of heimdal-multidev with fixed kdc.h.
  * Build-depend on versioned libkdc2-heimdal which includes kdc_log. Closes: #611112

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 25 Jan 2011 09:22:16 -0800

samba4 (4.0.0~alpha15~git20110124.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
   + Removes unresolved symbols from libraries.
     Closes: #596690, #599075, #602855.  LP: #658116, #592882, #646042
  * Add dependency on comerr-dev.
  * Update Spanish Debconf translation. Thanks Ricardo Fraile. Closes: #596075
  * Update Danish debconf translation. Thanks Joe Dalton. Closes:
    #598779
  * Re-remove non-free IETF RFCs, add test to prevent future regression.
    Closes: #547280
  * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
  * Upgrade provision data between releases. Closes: #600117

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 15 Oct 2010 01:32:48 +0200

samba4 (4.0.0~alpha14~bzr13684.dfsg1-1) unstable; urgency=low

  * New upstream snapshot.
   + Depend on libsubunit-dev.
  * Support talloc 2.0.1.
  * Update dependency for ldb to be >= 0.9.14. Closes: #596745
  * Support parallel builds.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 28 Sep 2010 09:46:54 +0200

samba4 (4.0.0~alpha13+git+bzr12785.dfsg1-1) experimental; urgency=low

  * Install provision scripts to /usr/share/samba/setup.
  * Move nsstest from samba4 to winbind4.
  * Support building against tdb 1.2.1.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 10 Sep 2010 17:45:20 +0200

samba4 (4.0.0~alpha13+git+bzr12687.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
  * Mark as compatible with older versions of tdb (>= 1.2.2).

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 08 Sep 2010 03:30:03 +0200

samba4 (4.0.0~alpha13+git+bzr12670.dfsg1-1) experimental; urgency=low

  * Add missing dependency on pkg-config.
  * Require subunit >= 0.0.6, older versions have a broken tap2subunit.
  * Debconf translations:
    - Swedish (Martin Bagge).  Closes: #586819
  * New upstream snapshot.
    - Fixes symbols for LDB modules. Closes: #594763, #594771, #594773.
  * Require tdb 1.2.3. Closes: #595644

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 05 Sep 2010 17:34:46 +0200

samba4 (4.0.0~alpha13+git+bzr12292.dfsg1-1) experimental; urgency=low

  * New upstream snapshot.
   + Fixes provision to be able to find the data path again.
  * Depend on libreadline-dev rather than libreadline5-dev. Closes: #553846
  * Suggest swat2.
  * Migrate to Bazaar.
  * Bump standards version to 3.9.1 (no changes).

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 22 Aug 2010 02:38:51 +0200

samba4 (4.0.0~alpha13+git20100618.dfsg1-1) experimental; urgency=low

  [ Jelmer Vernooij ]
  * New upstream snapshot. Closes: #578009, #577880
   + Add dependency on python-dnspython.
   + Removes last Python string exception. Closes: #585327
   + Installs all display specifiers. Closes: #548911

  [ Christian Perrier ]
  * Debconf translations:
    - Swedish (Martin Bagge).  Closes: #552734
    - Russian (Yuri Kozlov).  Closes: #563346
    - Spanish (Omar Campagne).  Closes: #579099

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 28 Feb 2010 02:33:37 +0100

samba4 (4.0.0~alpha8+git20100227.dfsg1-1) experimental; urgency=low

  * Fix sections of libndr-standard0 and libndr0.
  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 22 Feb 2010 11:19:07 +0100

samba4 (4.0.0~alpha8+git20100222.dfsg1-1) experimental; urgency=low

  [ Christian Perrier ]
  * Change "Provides:" in init script to avoid conflicting Provides
    with samba. Closes: #547209
  * Swedish debconf translation (Martin Bagge).  Closes: #552734

  [ Jelmer Vernooij ]
  * Depend on specific version of libldb. Closes: #562389
  * Build against system Heimdal and remove the copy of Heimdal from the
    Samba 4 source tree, since it contains non-free IETF RFC/I-D.
    Closes: #547280
  * Bump standards version to 3.8.4.
  * Switch to dpkg-source 3.0 (quilt) format

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 03 Feb 2010 15:17:20 +0100

samba4 (4.0.0~alpha8+git20090912-1) unstable; urgency=low

  * Upload to unstable.
  * Fix nmblookup.1.gz filename for alternatives.
  * New upstream snapshot.
   + Add new binary packages libndr-standard0 and libndr-standard-dev.
  * Bump standards version to 3.8.3.
  * Remove unused patch system.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 12 Sep 2009 13:28:33 +0200

samba4 (4.0.0~alpha8+git20090718-1) experimental; urgency=low

  * New upstream snapshot.
  * The server package now suggests a version of bind9 that supports
    update-policy.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 18 Jul 2009 17:34:30 +0200

samba4 (4.0.0~alpha8~git20090620-1) experimental; urgency=low

  * Support building against Python2.6.
  * Add missing dependency on tdb >= 1.1.3. (Closes: #517171)
  * Add missing dependencies on tdb-dev and libtalloc-dev to
    libldb-samba4-dev. (Closes: #525885)
  * Use newer version of tevent. (Closes: #531480, #533457, #533455)
  * New upstream snapshot.
  * Bump standards version to 3.8.2.
  * Reorganization to let Samba 3 and Samba 4 co-exist on the same system:
   + Depend on samba-common for smb.conf, /etc/samba/gdbcommands,
     /usr/share/samba/{panic-action,*.dat}.
   + Rename samba4-common to samba4-common-bin.
  * samba4-testsuite now recommends subunit, since it can output subunit
    streams.
  * Document license for Active Directory schemas.
  * Fix init script to run samba rather than smbd. (Closes: #522646)
  * Removed libldb-samba4-{dev,0}, now using libldb{-dev,0} since there
    are no longer any differences.

 -- Jelmer Vernooij <jelmer@debian.org>  Thu, 18 Jun 2009 00:19:44 +0200

samba4 (4.0.0~alpha7~20090225-1) experimental; urgency=low

  * Build-depend on pkg-config, as we no longer seem to pull that in
    through any other dependencies. (Closes: #516882)

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 25 Feb 2009 04:04:36 +0100

samba4 (4.0.0~alpha7~20090223-1) experimental; urgency=low

  * Add build dependency on libpopt-dev, so the system libpopt is always used
    rather than the one included by Samba.
  * Use the alternatives system for the smbstatus, nmblookup, net and testparm
    binaries as well as various data files.
  * Make the samba4 and samba4-testsuite packages conflict with
    samba-tools. (Closes: #506236)
  * Build against external libtevent.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 21 Feb 2009 17:46:41 +0100

samba4 (4.0.0~alpha6-1) experimental; urgency=low

  * New upstream release.

 -- Jelmer Vernooij <jelmer@debian.org>  Tue, 20 Jan 2009 02:59:15 +0100

samba4 (4.0.0~alpha5+20090105-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 05 Jan 2009 21:08:53 +0100

samba4 (4.0.0~alpha5+20081126-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Wed, 26 Nov 2008 03:48:41 +0100

samba4 (4.0.0~alpha5+20081101-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 01 Nov 2008 14:40:09 +0100

samba4 (4.0.0~alpha5+20081031-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Fri, 31 Oct 2008 00:10:41 +0100

samba4 (4.0.0~alpha5+20081014-1) experimental; urgency=low

  * Fix typo in description. (Closes: 500811)
  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 09 Oct 2008 18:41:59 +0200

samba4 (4.0.0~alpha5+20080930-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Tue, 30 Sep 2008 16:19:22 +0200

samba4 (4.0.0~alpha5+20080825-1) experimental; urgency=low

  * Add watch file.
  * Use policy-compliant sysconfdir and localstatedir. (Closes: #495944)

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 25 Aug 2008 17:42:44 +0200

samba4 (4.0.0~alpha4~20080727-1) experimental; urgency=low

  [ Steve Langasek ]
  * Add missing dependency on libparse-yapp-perl to libparse-pidl-perl.

  [ Jelmer Vernooij ]
  * Make samba4-common conflict with samba-common. (Closes: #492088)
  * New Slovak translation. (Closes: #487889)
  * New Thai translation from Theppitak Karoonboonyanan. (Closes: #486614)
  * New Vietnamese translation from Clytie Siddall. (Closes: #486618)
  * New Bulgarian translation from Damyan Ivanov. (Closes: #486626)
  * New Japanese translation from Kenshi Muto. (Closes: #486648)
  * New Galician translation from Jacobo Tarrio. (Closes: #486701)
  * New Turkish translation from Mehmet TURKER. (Closes: #487244)
  * New Czech translation from Miroslav Kure. (Closes: #487265)
  * New Arabic translation from Ossama Khayat. (Closes: #487322)
  * New German translation from Holger Wansing. (Closes: #487542)
  * New Italian translation from Luca Monducci. (Closes: #487720)
  * New Portugese translation from the Portuguese Translation Team.
    (Closes: #487753)
  * New Korean translation from Sunjae Park. (Closes: #487894)
  * New Lithuanian translation from Gintautas Miliauskas. (Closes: #487895)
  * New Romanian translation from Eddy Petrișor. (Closes: #488874)

 -- Jelmer Vernooij <jelmer@samba.org>  Sun, 27 Jul 2008 15:38:41 +0200

samba4 (4.0.0~alpha4~20080617-1) experimental; urgency=low

  * Fixed maintainer email address.
  * New upstream snapshot.
  * Remove dependency on unpackaged libevents in ldb pkg-config file.

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 16 Jun 2008 21:29:43 +0200

samba4 (4.0.0~alpha4~20080616-1) experimental; urgency=low

  * Fix dependency of libsamba-hostconfig-dev on libsamba-hostconfig0.
  * Fix dependency of libldb-samba4-dev on libldb-samba4-0.
  * Remove tdb binaries as they're already packaged elsewhere.
    (Closes: #485619, #486270)
  * New upstream snapshot.
  * New French translation from Christian Perrier. (Closes: #486072)

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 14 Jun 2008 20:39:13 +0200

samba4 (4.0.0~alpha4~20080522-1) experimental; urgency=low

  * New upstream snapshot. (Closes: #478328)

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 22 May 2008 02:25:05 +0200

samba4 (4.0.0~alpha4~20080403-1) experimental; urgency=low

  * Rename source package to samba4.

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 28 Jan 2008 17:23:58 +0100

samba (4.0.0~alpha3~20080120-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 19 Jan 2008 22:34:08 +0100

samba (4.0.0~alpha2~svn26294-1) experimental; urgency=low

  * New upstream snapshot.
  * Set Vcs-Svn field.

 -- Jelmer Vernooij <jelmer@samba.org>  Sat, 19 Jan 2008 22:32:28 +0100

samba (4.0.0~~tp5-1) experimental; urgency=low

  * New upstream release.
  * Set homepage field.

 -- Jelmer Vernooij <jelmer@samba.org>  Sun, 25 Nov 2007 16:28:02 +0000

samba (4.0.0~~svn22819-1) experimental; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Wed, 09 May 2007 15:28:50 +0200

samba (4.0.0~~svn19515-1) experimental; urgency=low

  * New upstream versions (svn snapshots of r19515).

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 30 Oct 2006 16:45:36 +0100

samba (3.9.1+4.0.0tp2-1) experimental; urgency=low

  * New upstream version (tech preview 2).

  [ Jelmer Vernooij ]
  * Remove setntacl utility (it doesn't do anything).
  * Include oLschema2ldif.1 in the ldb-tools package.
  * Enable shared library building.
  * Put ldb, tdb, gtksamba, talloc and gensec libraries into seperate binary packages.
  * Pass fewer options for paths to configure
  * Adapt to new paths from upstream

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 23 Mar 2006 01:13:32 +0100

samba (3.9.1+4.0.0tp1-1) experimental; urgency=low

  * New upstream version (tech preview 1).

  [ Steinar H. Gunderson ]
  * Forward-port panic-action script from the Samba 3 packaging.
    * Patch the smb.conf provisioning template (only used by swat in the
      Debian packaging) to use the panic-action script by default.
    * Patch the samba-common postinst to generate smb.conf files with the
      same setting.
  * Include ntlm_auth.1 and smbd.8 man pages in the samba package.
  * Make the samba dependency on samba-common versioned.
  * Install /usr/bin/setntacl manually; the upstream install target doesn't
    seem to do it anymore.
  * Ask for the realm (and give it to the upgrade script) when upgrading from
    Samba 3; it can't be easily autodetected. (Note that upgrade still seems
    to be broken for now.)

  [ Jelmer Vernooij ]
  * Remove gwsam utility.
  * Include gwcrontab.1 and gepdump.1 man pages in the samba-gtk-frontends
    package.
  * Remove ldbtest utility from ldb-tools package.

 -- Steinar H. Gunderson <sesse@debian.org>  Tue, 24 Jan 2006 16:01:59 +0100

samba4 (3.9.0-SVN-build-6710-1) unstable; urgency=low

  * Newer upstream version

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 12 May 2005 14:04:05 +0200

samba4 (3.9.0-SVN-build-655-1) unstable; urgency=low

  * Initial release.

 -- Jelmer Vernooij <jelmer@samba.org>  Thu, 13 May 2004 01:38:41 +0200

samba (3.9.0+SVN12946-1) experimental; urgency=low

  * New upstream version.
    * Fix upgrades from Samba 3 giving too few parameters to provision().
      (Closes: #348079)
  * Add sections to binary packages to match the archive:
    * libparse-pidl-perl: perl
    * samba-dev: devel
    * samba-gtk-frontends: x11
  * Adjust our export procedure we get the Subversion revision number in
    include/version.h (and thus in the build itself), and document how in
    README.building.
  * Remove "reload" option from the init script, since Samba 4 doesn't
    understand SIGHUP yet.

 -- Steinar H. Gunderson <sesse@debian.org>  Sun, 15 Jan 2006 13:43:43 +0100

samba (3.9.0+SVN12856-1) experimental; urgency=low

  * New upstream version.
  * Move testparm from samba into samba-common.
    * Make samba-common Architecture: any.
    * Make samba-common replace/conflict samba (<= 3.9.0+SVN12739-1).
  * Make samba-clients depend on samba-common.
  * Make samba-common depend on debconf.
  * Replace debconf dependencies with ${misc:Depends}, to automatically
    get the debconf-2.0 alternative right.
  * Include the newuser binary in samba-server package.
  * Add missing Build-Depends on: libgnutls-dev, libreadline5-dev,
    libpam0g-dev. All were causing silent build failures (ie. the package
    was simply built without the features).
  * Remove Build-Depends on libldap-dev.
  * Include NEWS file.

 -- Steinar H. Gunderson <sesse@debian.org>  Wed, 11 Jan 2006 22:08:32 +0100

samba (3.9.0+SVN12739-1) experimental; urgency=low

  * Move /usr/lib/samba/setup from samba-common to samba.
    * Make samba replace samba-common (<= 3.9.0+SVN12726-1)
  * Add a missing db_stop in samba.postinst, probably causing problems
    starting the daemon in some cases.
  * Add orphan files from /usr/bin (and relevant manpages) into their
    correct packages:
    * ldb-tools: ldbrename, ldbtest, oLschema2ldif.
    * samba: ntlm_auth.
    * samba-clients: getntacl.
    * samba-gtk-frontends: gwcrontab.
    * winregistry-tools: winreg.
    * samba3dump and tdbtorture remain orphans.
  * Add new executable /usr/bin/testparm to samba package.
    * Add /var/lib/samba directory to samba package; it's needed by
      testparm.
  * Rewrite configuration/bootstrapping to be able to install the client
    only and still get a usable smb.conf. The basic idea is:
    * samba-common looks for an smb.conf. If there is none, it asks for
      realm and domain and generates a skeleton smb.conf.
    * If samba notices an upgrade from Samba 3, it asks whether the user
      wants to upgrade. If not, it leaves everything alone (and broken).
    * Otherwise, samba asks whether the user wants to set up a PDC. If yes,
      it adds "server role = pdc" to smb.conf and provisions the server.
  * Removed unused file samba.conffiles.
  * Run dh_installdebconf on architecture-independent packages as well, now
    that samba-common has a config script.
  * Let samba-clients conflict/replace samba-common (<< 3.9.0), as they share
    /usr/bin/net.

 -- Steinar H. Gunderson <sesse@debian.org>  Fri,  6 Jan 2006 14:25:50 +0100

samba (3.9.0+SVN12726-1) experimental; urgency=low

  * First upload to Debian main.

  * Package renaming to get more in line with Samba 3 packaging:
    * Rename samba-server package to just samba, for consistency with the
      Samba 3 packaging.
      * Rename samba.samba.init to samba.init, now that the init script and the
        server package are called the same.
    * Rename samba-swat to swat, and add a dependency from swat to samba.

  * debian/rules changes:
    * Change SOURCEPATH to reflect that we now have the packaging in debian/,
      not packaging/debian/. This will have to be reverted whenever upstream
      syncs with us.
    * Removed debmake comment, it's hardly relevant any more.
    * Removed comment that there aren't any architecture-independent packages
      (because there are).
    * Remove redundant "package=samba" variable.
    * Do "make pch ; make all" instead of "make proto ; -make pch ; make all";
      some build system bug prevents us from just doing "make pch all", but
      since we're more or less guaranteed a recent gcc version, the pch target
      shouldn't fail, so we won't allow it to.
    * Remove autogen.sh call from configure; it should be done in the
      upstream tarball, not in maintainer scripts.

  * debian/control changes:
    * Copied Uploaders: line from Samba 3 packaging, adding myself.
    * Rename samba-client package to samba-clients.
    * Make samba-clients Replaces/Conflicts smbclient.
    * Build-depend on docbook-xml, not just docbook-xsl -- the documentation
      needs data from both to build.
    * Move the samba binary package to the top, so it's the one receiving
      the README.* files, among others.

  * Maintainer script changes:
    * Attempt to upgrade from Samba 3 if that's what the user tries to do.
      * Copy upgrade script into /usr/lib/samba/setup.
      * Check for upgrade from << 3.9.0 in config, and ask the user for upgrade
        if relevant.
      * Check for upgrade from << 3.9.0 in postinst, and upgrade if the user
        wished to.
    * Only provision in samba.postinst if we're doing a fresh install.
    * Support purging properly in postrm, both for samba and samba-common
      (adapted from the Samba 3 packaging).
    * Don't ask about an administrator password -- just let the provisioning
      scripts make up a random one.
      * Updated README.Debian to show the user how to change the password.
      * Make samba recommend ldb-tools.
    * Install README.building along with all the other documentation.
    * Don't try to ask about the "done" question, which we nuked in a previous
      release.

  * Updated debian/copyright.
    * Added Samba copyright holders.
    * Noted that talloc, ldb and tdb are under the LGPL.
    * Added copyright holders and licensing for the packaging itself.

  * Remove a few unused files in the packaging.
  * Change debhelper compatibility level to 5.
    * Update versioned depends accordingly.
  * Don't give --pidfile to start-stop-daemon when stopping -- current
    versions of Samba 4 won't die when the parent is killed.
  * Updated README.debian somewhat, and renamed to use a capital D.
  * Rewritten README.building, to reflect the magic that has to be done
    with the package in another repository.
  * Update po/POTFILES.in to reflect name change (from samba4-server ->
    samba-server -> samba).

 -- Steinar H. Gunderson <sesse@debian.org>  Thu,  5 Jan 2006 21:27:13 +0100

samba (3.9.0+SVN12395-1) unstable; urgency=low

  * New snapshot, drop 4 suffix

 -- Jelmer Vernooij <jelmer@samba.org>  Tue, 20 Dec 2005 13:38:26 +0100

samba4 (3.9.0+SVN12312-1) unstable; urgency=low

  * New upstream snapshot.

 -- Jelmer Vernooij <jelmer@samba.org>  Mon, 27 Jun 2005 11:25:57 +0200

samba (2:3.6.19-1) unstable; urgency=low

  * Team upload.
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Wed, 25 Sep 2013 20:01:48 +0200

samba (2:3.6.18-1) unstable; urgency=low

  * Team upload.

  [ Steve Langasek ]
  * Split the samba init script into nmbd and smbd init scripts, for better
    alignment with how init systems other than sysvinit work.  This also
    drops the override of the arguments to update-rc.d in debian/rules,
    no longer needed in the post-insserv world.
  * Add upstart jobs from Ubuntu for smbd, nmbd, and winbind.

  [ Ivo De Decker ]
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 20 Aug 2013 22:06:45 +0200

samba (2:3.6.17-1) unstable; urgency=high

  * Team upload.
  * New upstream security release. Closes: #718781
    Fixes CVE-2013-4124: Denial of service - CPU loop and memory allocation

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 05 Aug 2013 13:46:23 +0200

samba (2:3.6.16-2) unstable; urgency=high

  * Team upload.
  * Make build-dep on libtevent-dev explicit.
  * Fix waf-as-source.patch to make sure unpacking works in recent build
    environment. Closes: #716932

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Tue, 16 Jul 2013 22:01:04 +0200

samba (2:3.6.16-1) unstable; urgency=low

  * Team upload.

  [ Steve Langasek ]
  * Drop support for running smbd from inetd; this is not well-supported
    upstream, and can't correctly handle all of the long-running services
    that are needed as part of modern samba.  Closes: #707622.

  [ Ivo De Decker ]
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Wed, 19 Jun 2013 21:05:07 +0200

samba (2:3.6.15-1) unstable; urgency=high

  * Team upload.
  * New upstream bugfix release. Closes: #707042
  * Update VCS URL's for new git repo.
  * The recommends for the separate libnss-winbind and libpam-winbind
    packages needed for the upgrade of winbind from squeeze to wheezy are no
    longer needed. Lowering them to suggests.
    Closes: #706434, #674853

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Thu, 09 May 2013 11:55:03 +0200

samba (2:3.6.14-1) unstable; urgency=low

  * Team upload.
  * New upstream release

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sat, 04 May 2013 22:02:15 +0200

samba (2:3.6.13-2) experimental; urgency=low

  * Team upload.
  * Move binary files out of /etc/samba to /var/lib/samba,
    where they belong according to the FHS:
    - schannel_store.tdb
    - idmap2.tdb
    - MACHINE.sid
    Closes: #454770

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 21 Apr 2013 12:54:03 +0200

samba (2:3.6.13-1) experimental; urgency=low

  * Team upload.
  * New upstream release
  * samba: Suggests winbind. Closes: #689857

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Mon, 18 Mar 2013 21:29:58 +0100

samba (2:3.6.12-1) experimental; urgency=low

  * Team upload.
  * Security update, fixing the following issues:
    - CVE-2013-0213: Clickjacking issue in SWAT
    - CVE-2013-0214: Potential XSRF in SWAT
  * New upstream release
  * Install pkgconfig file in libsmbclient-dev. Closes: #700643

 -- Ivo De Decker <ivo.dedecker@ugent.be>  Sun, 17 Feb 2013 22:25:34 +0100

samba (2:3.6.10-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Sat, 15 Dec 2012 08:03:03 +0100

samba (2:3.6.9-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Thu, 01 Nov 2012 08:17:29 +0100

samba (2:3.6.8-1) experimental; urgency=low

  * New upstream release.

 -- Christian Perrier <bubulle@debian.org>  Tue, 18 Sep 2012 07:13:41 +0200

samba (2:3.6.7-1) experimental; urgency=low

  * New upstream release.

 -- Christian Perrier <bubulle@debian.org>  Sat, 11 Aug 2012 21:37:38 +0200

samba (2:3.6.6-3) unstable; urgency=low

  [ Ansgar Burchardt ]
  * debian/rules: Use xz compression for binary packages.
    Closes: #683899

 -- Christian Perrier <bubulle@debian.org>  Sun, 05 Aug 2012 12:19:12 +0200

samba (2:3.6.6-2) unstable; urgency=low

  * Restore the DHCP hook.

 -- Steve Langasek <vorlon@debian.org>  Wed, 27 Jun 2012 09:31:15 -0700

samba (2:3.6.6-1) unstable; urgency=low

  [ Ivo De Decker ]
  * Only enable swat in inetd.conf on first install. Closes: #658245
  * Minor lintian fixes.
  * Remove DHCP hook. Closes: #652942, #629406, #649100
  * Don't reload smbd when running from inetd. Closes: #678741
  * Don't start smbd when guest account doesn't exist. Closes: #653382
  * Only export public symbols in libsmbclient and libwbclient.

  [ Christian Perrier ]
  * New upstream version

 -- Christian Perrier <bubulle@debian.org>  Wed, 27 Jun 2012 06:03:17 +0200

samba (2:3.6.5-7) unstable; urgency=low

  * Allow installing smbclient package together with newer versions of
    samba4-clients, which no longer ship the smbclient and nmblookup
    binaries.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 11 Jun 2012 13:19:24 +0200

samba (2:3.6.5-6) unstable; urgency=high

  [ Ivo De Decker ]
  * Update symbols file for linux-only symbols in libsmbclient. This should
    fix the FTBFS on kfreebsd and hurd. Closes: #676170
  * Enable ctdb for non-linux archs.
  * Remove old if-up script during upgrade.

 -- Christian Perrier <bubulle@debian.org>  Wed, 06 Jun 2012 19:10:02 +0200

samba (2:3.6.5-5) unstable; urgency=low

  [ Christian Perrier ]
  * Make libpam-winbind depend on libnss-winbind.

  [ Ivo De Decker ]
  * Update symbols file for libsmbclient and libwbclient0
  * Add lintian overrides for examples in samba-doc
  * libpam-winbind: change Depends on libnss-winbind to Recommends
  * libnss-winbind: Suggests libpam-winbind
  * Update package description for winbind, libpam-winbind and libnss-winbind
    to better reflect their content
  * Backport vfs_shadow_copy2 from master, to allow shadow copy to work
    without wide links

  [ Luk Claes ]
  * Ship wbclient.pc file in multiarch safe directory (Closes: #674215).

  [ Sam Morris ]
  * Add libutil_drop_AI_ADDRCONFIG.patch  that allows running nmbd when
    no network interfaces have been assigned an address, therefore
    removing the need for an if-up script. Closes: #640668,#640508

 -- Christian Perrier <bubulle@debian.org>  Sun, 03 Jun 2012 20:00:56 +0200

samba (2:3.6.5-3) unstable; urgency=low

  [ Luk Claes ]
  * Ship wbclient.pc so cifs-utils can be built again (Closes: #672733).
  * Activate parallel building. Might need DEB_BUILD_OPTIONS as usual.

  [ Christian Perrier ]
  * Add Breaks and Replaces on libpam-winbind for newly created
    libnss-winbind. Thanks to Colin Watson for pointing this and shame
    on me for not properly checking the transition. Closes: #673122

 -- Christian Perrier <bubulle@debian.org>  Thu, 17 May 2012 10:34:38 +0200

samba (2:3.6.5-2) unstable; urgency=low

  * The yearly "SambaXP bug cleaning party" release. 11 years
    SambaXP, 20 years Samba and counting...
  * Make samba-common "Multi-Arch: foreign"
  * Adapt patch in upstream #7499 and stop nss_wins clobbering other
    daemon's logfiles. Closes: #598313
  * Add some mention about some use for the user information in Kerberos
    environments in the smbspool manpage. Closes: #387266
  * Drop link to no longer provided "Using Samba" documentation in
    HTML documentation summary file. Closes: #604768
  * Provide WHATSNEW.txt in samba-doc too as it is linked from the
    documentation summary file. Do not compress that file.
  * Fix link to WHATSNEW.txt in HTML documentation summary file. This
    is the second part of the fix for #604768
  * Use lp_state_dir() instead of get_dyn_STATEDIR() in
    fhs-filespaths.patch as the latter does indeed hardcode the
    location for passdb.tdb and secrets.tdb to /var/lib/samba
    (the compile-time option for state directory and NOT the configurable
    value). This is left to "state directory" instead of "private dir"
    at least as of now, because if doesn't change anything to the
    current behaviour, but allows the files' location to be configurable
    through "state directory" (and not "private dir").
    Closes: #249873
  * Disable useless smbtorture4 build. Thanks to Ivo De Decker for the patch.
    Closes: #670561
  * Add upstream commit that adds waf source to the buildtools/
    directory. As upstream will, one day or another, merge this, I
    prefer this over removing the waf binary and repack upstream
    tarball.
    Closes: #654499
  * Build-Conflict with python-ldb and python-ldb-dev to avoid build
    failures when some versions of these packages are locally installed.
    Closes: #657314
  * Rename fix-samba.ldip-syntax.patch to fix-samba.ldif-syntax.patch
  * Split NSS modules into a new libnss-winbind binary package.
    Closes: #646292
  * Add a NEWS.Debian entry about the libnss-winbind split and, while at
    it, add an entry for libpam-winbind too (as it will affect upgrades
    from squeeze).
  * Drop code that was moving files around in samba.postinst and
    winbind.postinst for pre-squeeze versions of the package.
  * Drop code that was modifying a deprecated "passdb backend" setting
    in smb.conf for pre-squeeze versions of the package (in
    samba-common.config).
  * Add Should-Start dependency to winbind init script to guarantee
    that the samba init script is started before winbind if present.
    Closes: #638066
  * Provide a (basic) manpage to smbtorture(1). Closes: #528735
  * Turkish debconf translation update (Atila KOÇ).  Closes: #672447
  * Drop the code that generates an smbpasswd file from the system's
    user list. This adds very long delays on systems with many users,
    including those with external user backends. It also makes much
    less sense nowadays and the use of libpam-smbpass can easily
    fill most of the needs. Closes: #671926
  * Merged from Ubuntu:
    - Set 'usershare allow guests', so that usershare admins are
      allowed to create public shares in addition to authenticated
      ones.
    - add map to guest = Bad user, maps bad username to guest access.
    This allows for anonymous user shares. Closes: #672497

 -- Christian Perrier <bubulle@debian.org>  Sat, 12 May 2012 14:30:58 +0200

samba (2:3.6.5-1) unstable; urgency=low

  * New upstream release. Fixes CVE-2012-2111: Incorrect permission
    checks when granting/removing privileges can compromise file
    server security.
  * Build-Depend on debhelper >= 9~ (which is in unstable for a few
    months now)
  * Use "set -e" in maintainer scripts instead of passing -e in the
    shebang line
  * Update Standards to 3.9.3 (checked, no change)

 -- Christian Perrier <bubulle@debian.org>  Tue, 01 May 2012 08:07:39 +0200

samba (2:3.6.4-1) unstable; urgency=low

  [ Christian Perrier ]
  * Two changes in the previous version should indeed read:
    - samba.postinst: Avoid scary pdbedit warnings on first import.
    - samba-common.postinst: Add more informative error message for the case
      where smb.conf was manually deleted.
    Closes: #664509

  [ Jelmer Vernooij ]
  * New upstream release.
   + Fixes CVE-2012-1182: PIDL based autogenerated code allows overwriting
     beyond of allocated array.

 -- Jelmer Vernooij <jelmer@debian.org>  Wed, 11 Apr 2012 23:25:41 +0200

samba (2:3.6.3-2) unstable; urgency=low

  [ Christian Perrier ]
  * Fix example samba.ldif syntax. Closes: #659963
  * Set minimal version of tdb ot 1.2.6 in Build-Depends
    (thanks, backports!)
  * Lower priority of debconf question to medium after some pondering.
    After all, we have a sane default. Closes: #662801
  * Merge some Ubuntu patches:
    - samba.config: Avoid scary pdbedit warnings on first import.
    - samba.postinst: Add more informative error message for the case
      where smb.conf was manually deleted.

  [ Maarten Bezemer ]
  * Removed references to the testprns command from documentation
  * Added notes that the smbsh command is not available in this package
    Closes: #662243

  [ Debconf translations ]
  * Indonesian (Arief S Fitrianto).  Closes: #660312
  * Slovak (Ivan Masár).  Closes: #661125

  [ Steve Langasek ]
  * Use Debian copyright-format 1.0 in debian/copyright.

 -- Christian Perrier <bubulle@debian.org>  Mon, 12 Mar 2012 20:49:24 +0100

samba (2:3.6.3-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * Fixes CVE-2012-0817:
    The Samba File Serving daemon (smbd) in Samba versions
    3.6.0 to 3.6.2 is affected by a memory leak that can
    cause a server denial of service.

  [ Debconf translations ]
  * Polish (Michał Kułach).  Closes: #657770

 -- Christian Perrier <bubulle@debian.org>  Tue, 31 Jan 2012 22:09:39 +0100

samba (2:3.6.2-1) unstable; urgency=low

  * New upstream release
  * Drop bug_601406_fix-perl-path-in-example.patch (applied upstream)

 -- Christian Perrier <bubulle@debian.org>  Fri, 27 Jan 2012 21:38:52 +0100

samba (2:3.6.1-3) unstable; urgency=low

  [ Sam Hartman ]
  * Increase libkrb5-dev dependency to avoid depending on
    krb5_locate_kdc, Closes: #650541

  [ Steve Langasek ]
  * Fix the libpam-winbind description to more accurately identify the
    protocols being used by nss_wins.  Closes: #650091.

 -- Christian Perrier <bubulle@debian.org>  Thu, 01 Dec 2011 21:56:52 +0100

samba (2:3.6.1-2) unstable; urgency=low

  * Merge changes from 3.5.11~dfsg-4 and unreleased -5 in unstable branch
  * debian/patches/initialize_password_db-null-deref: Avoid null
    dereference in initialize_password_db().  Closes LP: #829221.
  * Mark samba-common Multi-Arch: foreign.

 -- Christian Perrier <bubulle@debian.org>  Sun, 27 Nov 2011 19:06:39 +0100

samba (2:3.6.1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Sat, 22 Oct 2011 10:56:17 +0200

samba (2:3.6.0-1) experimental; urgency=low

  * New upstream release
  * Resync with packaging changes in 3.5 branch between 3.5.8~dfsg1
    and 3.5.11~dfsg-1
  * Drop wbc_async.h from libwbclient-dev as, according to upstream's
    commit c0a7c9f99188ebb3cd27094b9364449bcc2f80d8, " its only user is
    smbtorture3"

 -- Christian Perrier <bubulle@debian.org>  Thu, 11 Aug 2011 09:14:53 +0200

samba (2:3.6.0~rc3-1) experimental; urgency=low

  * New upstream version

 -- Christian Perrier <bubulle@debian.org>  Fri, 29 Jul 2011 23:11:10 +0200

samba (2:3.6.0~rc2-1) experimental; urgency=low

  * New upstream version

 -- Christian Perrier <bubulle@debian.org>  Tue, 07 Jun 2011 23:09:41 +0200

samba (2:3.6.0~rc1-2) experimental; urgency=low

  * Use --with-nmbdsocketdir=/var/run/samba to have nmbd socket file
    in an existing directory. Closes: #628121

 -- Christian Perrier <bubulle@debian.org>  Fri, 27 May 2011 15:35:44 +0200

samba (2:3.6.0~rc1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Thu, 19 May 2011 22:26:08 +0200

samba (2:3.6.0~pre3-1) experimental; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * add "#include "fcntl.h"" to idmap_tdb2.c to get it compiled
  * samba-doc-pdf: add Samba3-HOWTO.pdf from pre1 as it
    was forgotten upstream
  * libwbclient0.symbols: dropped several symbols related to
    asynchronous actions that weren't working anyway (according
    to Kai Blin at SambaXP)

  [ Mathieu Parent ]
  * Build against libctdb-dev (>= 1.10+git20110412) to have required control:
    CTDB_CONTROL_SCHEDULE_FOR_DELETION.

 -- Christian Perrier <bubulle@debian.org>  Mon, 09 May 2011 11:29:52 +0200

samba (2:3.5.11~dfsg-4) unstable; urgency=low

  * Lintian override for libpam-winbind; it's not a shared library so doesn't
    really need the pre-depends on multiarch-support.
  * export DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow, taken from Ubuntu.

 -- Steve Langasek <vorlon@debian.org>  Fri, 21 Oct 2011 16:01:29 -0700

samba (2:3.5.11~dfsg-3) unstable; urgency=low

  * Split winbind into separate packages, winbind and libpam-winbind,
    with the latter marked Multi-Arch: same and the former marked
    Multi-Arch: foreign, so that we can install multiple copies of the
    pam module and nss modules on the same system.

 -- Steve Langasek <vorlon@debian.org>  Fri, 21 Oct 2011 20:00:13 +0000

samba (2:3.5.11~dfsg-2) unstable; urgency=low

  * Don't export DEB_HOST_ARCH_OS in debian/rules, this is only used locally.
  * Use dh_links instead of manually creating directories and symlinks from
    debian/rules.
  * Switch from dh_movefiles to dh_install and adjust for debhelper compat
    level 7, in preparation for moving to dh(1).
  * Where possible, use dh_installman and dh_install's support for target
    directories instead of moving files around in debian/rules.
  * We don't need to mess with perms on usr/include/libsmbclient.h anymore
    in debian/rules, the upstream install target gets it right
  * Use debian/clean instead of removing left-behind files by hand in the
    clean target
  * Convert debian/rules to dh(1).
  * Don't run debconf-updatepo on clean; not worth the divergence in
    debian/rules anymore :)
  * Don't install debian/README.build in the package; this is really only
    relevant in the source.
  * Bump to debhelper compat level 9 and build libraries for multiarch.
  * Drop Makefile.internal from libsmbclient-dev examples so that we can mark
    libsmbclient-dev Multi-Arch: same.
  * Bump build-depends on debhelper to 8.9.4, so we ensure we have
    dpkg-buildflags by default and get full build hardening enabled out of
    the box - critical for a server like samba.
  * Use DH_ALWAYS_EXCLUDE instead of passing override options to
    dh_installexamples.
  * Pass --sourcedirectory=source3 to dh instead of having to pass it to each
    dh_auto_* command.
  * Ironically, this means that we have to manually disable dh_auto_test,
    which now finds the makefile targets but doesn't work unless we build an
    extra wrapper library into our binaries that we don't want.
  * Drop a few configure options from debian/rules that shadow the built-in
    defaults.
  * debian/libsmbclient.lintian-overrides: yes, we know the package name
    doesn't match the soname - and it never should until there's an ABI
    change.

 -- Steve Langasek <vorlon@debian.org>  Fri, 07 Oct 2011 21:36:43 -0700

samba (2:3.5.11~dfsg-1) unstable; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Fri, 05 Aug 2011 20:12:01 +0200

samba (2:3.5.10~dfsg-1) unstable; urgency=low

  * New upstream release
  * Security update, fixing the following issues:
    - CVE-2011-2694: possible XSS attack in SWAT
    - CVE-2011-2522: Cross-Site Request Forgery vulnerability in SWAT

 -- Christian Perrier <bubulle@debian.org>  Thu, 28 Jul 2011 12:19:01 +0200

samba (2:3.5.9~dfsg-1) unstable; urgency=low

  * New upstream release
  * Add "--quiet" to start-stop-daemon call in reload target in init
    script. Closes: #572483
  * Add examples/LDAP in examples for the samba package. With this,
    samba.schema will be provided in some way in the package.
    This very partially addresses #190162
  * patches/bug_221618_precise-64bit-prototype.patch: precise
    64bits prototype in libsmbclient-dev. Closes: #221618
  * patches/no-unnecessary-cups.patch: dropped after upstream
    changes to printing code
  * Update Standards to 3.9.2 (checked, no change)
  * Add build-arch and build-indep targets in debian/rules

 -- Christian Perrier <bubulle@debian.org>  Sat, 18 Jun 2011 07:08:00 +0200

samba (2:3.5.8~dfsg-5) unstable; urgency=low

  * Fix "tdb2.so undefined symbol: dyn_get_STATEDIR" by fixing a typo
    in fhs-filespath.patch. Closes: #629183, LP: #789097

 -- Christian Perrier <bubulle@debian.org>  Sat, 04 Jun 2011 13:48:32 +0200

samba (2:3.5.8~dfsg-4) unstable; urgency=low

  [ Debconf translations ]
  * Spanish (Omar Campagne).  Closes: #627813
  * Swedish (Martin Bagge / brother).  Closes: #627849
  * Brazilian Portuguese (Adriano Rafael Gomes).  Closes: #627866

  [ Christian Perrier ]
  * bug_601406_fix-perl-path-in-example.patch:  fix path to perl
    binary in example file. Closes: #601406

 -- Christian Perrier <bubulle@debian.org>  Fri, 27 May 2011 12:23:05 +0200

samba (2:3.5.8~dfsg-3) unstable; urgency=low

  [ Debconf translations ]
  * Italian (Luca Monducci).  Closes: #626674
  * Dutch (Vincent Zweije).  Closes: #627519
  * Czech (Miroslav Kure).  Closes: #627442

 -- Christian Perrier <bubulle@debian.org>  Tue, 24 May 2011 22:40:04 +0200

samba (2:3.5.8~dfsg-2) unstable; urgency=low

  [ Jelmer Vernooij ]
  * Add libwbclient-dev package.
  * Build against external libtdb.
  * Bump standards version to 3.9.1 (no changes).

  [ Mathieu Parent ]
  * Builddep on libctdb-dev or ctdb < 1.10

  [ Christian Perrier ]
  * Use db_settitle in debconf questions and make these
    titles translatable. Closes: #560318
  * Test the presence of testparm before trying to use it in init script
    Closes: #606320
  * Add cups to Should-{Start,Stop} in LSB headers of
    samba init script to guarantee that CUPS is started
    before samba. Closes: #619132
  * Drop libsmbclient-dev useless dependency on samba-common
    Closes: #597987

  [ Debconf translations ]
  * French (Christian Perrier)
  * Japanese (Kenshi Muto).  Closes: #626474
  * Galician (Miguel Anxo Bouzada).  Closes: #626477
  * Thai (Theppitak Karoonboonyanan).  Closes: #626487
  * Russian (Yuri Kozlov).  Closes: #626523
  * Danish (Joe Hansen).  Closes: #626531
  * Esperanto (Felipe Castro).  Closes: #626558
  * Hebrew (Eran Cohen).  Closes: #626638
  * Bokmål, (Bjørn Steensrud).
  * Italian (Luca Monducci).  Closes: #626674
  * Finnish (Tapio Lehtonen).  Closes: #626890
  * Portuguese (Miguel Figueiredo).  Closes: #627224
  * German (Holger Wansing).  Closes: #627354
  * Czech (Miroslav Kure).  Closes: #627442

 -- Christian Perrier <bubulle@sesostris.kheops.frmug.org>  Sun, 22 May 2011 21:15:21 +0200

samba (2:3.5.8~dfsg-1) unstable; urgency=low

  * New upstream release. This fixes the following bugs:
    - Winbind leaks gids with idmap ldap backend (upstrem #7777)
      Closes: #613624
    - printing from Windows 7 fails with 0x000003e6
      Closes: #617429
  * smb.conf(5) restored from samba 3.5.6 as a workaround to upstream
    #7997

 -- Christian Perrier <bubulle@debian.org>  Tue, 08 Mar 2011 22:38:32 +0100

samba (2:3.5.7~dfsg-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * Security update, fixing the following issue:
    - CVE-2011-0719: denial of service by memory corruption
  * Use architecture wildcard "linux-any" in build dependencies
    Closes: #563372

 -- Christian Perrier <bubulle@debian.org>  Tue, 01 Mar 2011 20:59:34 +0100

samba (2:3.5.6~dfsg-5) unstable; urgency=low

  * Fix FTBFS on Hurd. Closes: #610678
  * Only try parsing dhcpd.conf is it's not empty,
    in dhclient-enter-hooks.d/samba.  Closes: #594088.

 -- Christian Perrier <bubulle@debian.org>  Sat, 05 Feb 2011 13:50:22 +0100

samba (2:3.5.6~dfsg-4) unstable; urgency=low

  * Fix pam_winbind file descriptor leak with a patch
    proposed in https://bugzilla.samba.org/show_bug.cgi?id=7265.
    Upstream claim is that #7265 is fixed in 3.5.6 but our bug submitter
    confirmed it is not while the patch applied here fixes the file
    descriptor leak.
    Closes: #574468

  [ Debconf translations ]
  * Brazilian Portuguese (Adriano Rafael Gomes).  Closes: #607402

 -- Christian Perrier <bubulle@debian.org>  Sat, 15 Jan 2011 18:06:22 +0100

samba (2:3.5.6~dfsg-3) unstable; urgency=low

  [ Julien Cristau ]
  * Bump libwbclient0 shlibs to match the newest version in the symbols file.
  * Mark libwbclient0 as breaking other samba packages with versions older
    than 2:3.4.1, as they were linked against libtalloc1 instead of
    libtalloc2, and the combination causes crashes (closes: #593823).

 -- Christian Perrier <bubulle@debian.org>  Mon, 06 Dec 2010 20:14:04 +0100

samba (2:3.5.6~dfsg-2) unstable; urgency=low

  [ Steve Langasek ]
  * Fix debian/rules update-archs target to not add extra spaces on every
    invocation...

  [ Debconf translations ]
  * Catalan (Jordi Mallach).  Closes: #601101
  * Japanese (Kenshi Muto).  Closes: #601364
  * Bulgarian (Damyan Ivanov).  Closes: #601366
  * Hebrew (Omer Zak).  Closes: #601633
  * Kurdish (Erdal Ronahî).  Closes: #601719
  * Dutch (Remco Rijnders).  Closes: #602220
  * Greek (Konstantinos Margaritis).

  [ Christian Perrier ]
  * Include upstream's patch for "gvfsd-smb (Gnome vfs) fails to copy
    files from a SMB share using SMB signing.". Backported from
    to be released 3.5.7 version
    Closes: #605729

 -- Christian Perrier <bubulle@debian.org>  Sat, 04 Dec 2010 07:44:22 +0100

samba (2:3.5.6~dfsg-1) unstable; urgency=low

  * New upstream release. Fixes the following Debian bug:
    - rpcclient readline segfault. Closes: #597203

 -- Christian Perrier <bubulle@debian.org>  Sun, 10 Oct 2010 09:59:37 +0200

samba (2:3.5.5~dfsg-1) unstable; urgency=high

  [ Christian Perrier ]
  * New upstream release. Security release fixing:
    - CVE-2019-3069: Buffer overrun vulnerability in sid_parse.
      Closes: #596891.
  * Fix comment in swat's postinst. It is not turned off by default
    Closes: #596040
  * Drop transition code from (pre-etch) 3.0.20b-3 version in swat postinst

  [ Steve Langasek ]
  * debian/control: winbind needs libpam-runtime (>= 1.0.1-6) for
    pam-auth-update.  Closes: #594325.

  [ Debconf translations ]
  * Arabic (Ossama Khayat).  Closes: #596164

 -- Christian Perrier <bubulle@debian.org>  Tue, 14 Sep 2010 23:03:35 +0200

samba (2:3.5.4~dfsg-2) unstable; urgency=low

  * Release to unstable

  [ Debconf translations ]
  * Danish (Joe Dalton).  Closes: #592789.
  * Galician (Jorge Barreiro).  Closes: #592809

  [ Steve Langasek ]
  * debian/patches/fhs-filespaths.patch, debian/samba.postinst,
    debian/winbind.postinst: move some files from /etc/samba to
    /var/lib/samba where they belong: MACHINE.SID, schannel_store.tdb,
    and idmap2.tdb.

 -- Christian Perrier <bubulle@debian.org>  Tue, 07 Sep 2010 17:47:32 +0200

samba (2:3.6.0~pre1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Wed, 04 Aug 2010 01:39:11 +0200

samba (2:3.5.4~dfsg-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Tue, 29 Jun 2010 22:00:53 +0200

samba (2:3.5.3~dfsg-1) experimental; urgency=low

  * New upstream release. Fixes the following bugs:
    - smbclient segfaults when used against old samba "security = share"
      Closes: #574886
  * Drop duplicate build dependency on ctdb

 -- Christian Perrier <bubulle@debian.org>  Wed, 19 May 2010 22:07:49 +0200

samba (2:3.5.2~dfsg-2) experimental; urgency=low

  * Resync changes with changes in trunk between 3:3.4.4~dfsg-1 and
    2:3.4.7~dfsg-2

 -- Christian Perrier <bubulle@debian.org>  Tue, 04 May 2010 17:13:47 +0200

samba (2:3.5.2~dfsg-1) experimental; urgency=low

  * New upstream release
  * Bugs fixed upstream:
    - Fix parsing of the gecos field
      Closes: #460494

 -- Christian Perrier <bubulle@debian.org>  Thu, 08 Apr 2010 19:48:07 +0200

samba (2:3.5.1~dfsg-1) experimental; urgency=low

  * New upstream release. Security fix: all smbd processes inherited
    CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
    allowed even when permissions should have denied access.

 -- Christian Perrier <bubulle@debian.org>  Tue, 09 Mar 2010 10:54:01 +0100

samba (2:3.5.0dfsg-1) experimental; urgency=low

  * New upstream release. Not using "3.5.0~dfsg" as version number
    because we used a "higher" version number in previous versions.

 -- Christian Perrier <bubulle@debian.org>  Tue, 02 Mar 2010 22:03:15 +0100

samba (2:3.5.0~rc3~dfsg-1) experimental; urgency=low

  * New upstream release candidate

 -- Christian Perrier <bubulle@debian.org>  Sat, 20 Feb 2010 08:36:57 +0100

samba (2:3.5.0~rc2~dfsg-1) experimental; urgency=low

  * New upstream pre-release
  * Use new --with-codepagedir option. Consequently drop
    codepages-location.patch
  * Drop "Using Samba" from the samba-doc file list as it was
    removed upstream.

 -- Christian Perrier <bubulle@debian.org>  Sun, 31 Jan 2010 11:53:48 +0100

samba (2:3.5.0~rc1~dfsg-1) experimental; urgency=low

  [ Christian Perrier ]
  * New upstream pre-release

 -- Christian Perrier <bubulle@debian.org>  Fri, 15 Jan 2010 23:31:01 +0100

samba (2:3.4.8~dfsg-2) unstable; urgency=low

  [ Steve Langasek ]
  * Drop the per-release smb.conf templates, only needed for upgrade paths
    that are no longer supported.
  * Call /etc/init.d/samba directly from the logrotate script instead of
    using invoke-rc.d, to address the irony that the only package I work on
    that *has* a logrotate script is inconsistent with my position in
    bug #445203.
  * Fix a bashism in the samba postinst that can cause the package
    installation to fail under dash.  LP: #576307.
  * Add symlink from /etc/dhcp/dhclient-enter-hooks.d to
    /etc/dhcp3/dhclient-enter-hooks.d for the hook location of the new
    isc-dhcp-client package.  Closes: #585056.

  [ Christian Perrier ]
  * Don't copy system accounts from /etc/passwd to
    /var/lib/samba/passdb.tdb. Closes: #502801
  * Update Standards to 3.9.0 (checked, no change)
  * Backport patch for upstream bug #7139 to fix "owner of file not
    available with kerberos"
    Closes: #586337

 -- Steve Langasek <vorlon@debian.org>  Wed, 14 Jul 2010 11:59:28 -0700

samba (2:3.4.8~dfsg-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release
  * Bugs fixed upstream:
    - Fix writing with vfs_full_audit. Closes: #574011
  * Drop deprecated 'share modes' parameter from default smb.conf
    Closes: #580561
  * Enable PIE during configure. Closes: #509135
  * Avoid winbind's logrotate script to fail when there is no
    /var/run/samba directory. Closes: #569926
  * Add explanations about "passdb backend" default setting change
    Closes: #553904

  [ Debconf translations ]
  * Spanish (Omar Campagne).  Closes: #579011

 -- Christian Perrier <bubulle@debian.org>  Wed, 12 May 2010 05:45:52 +0200

samba (2:3.4.7~dfsg-2) unstable; urgency=low

  [ Christian Perrier ]
  * Drop smbfs package (now provided by cifs-utils as a dummy transition
    package)

  [ Debconf translations ]
  * Portuguese (Miguel Figueiredo).  Closes: #575958

  [ Steve Langasek ]
  * winbind.prerm: don't forget to remove the PAM profile on package
    removal :/
  * Fix winbind.pam-config to not interfere with password changes for
    non-winbind accounts.  Closes: #573323, LP: #546874.
  * debian/samba.if-up, debian/rules: add an if-up.d script for samba to
    try to start nmbd, if it's not running because /etc/init.d/samba ran
    before the network was up at boot time.  Closes: #576415, LP: #462169.
  * debian/samba.if-up: allow "NetworkManager" as a recognized address
    family... it's obviously /not/ an address family, but it's what gets
    sent when using NM, so we'll cope for now.

 -- Christian Perrier <bubulle@debian.org>  Sat, 17 Apr 2010 07:49:49 +0200

samba (2:3.4.7~dfsg-1) unstable; urgency=low

  [ Steve Langasek ]
  * Add a PAM profile for pam_winbind.  Closes: #566890, LP: #282751.
  * Add the correct versioned build dependency on libtalloc-dev as
    we need 2.0.1 to build samba. Closes: #572603
  * Add avr32 to arches with a build dependency on ctdb. Closes: #572126

  [ Christian Perrier ]
  * New upstream release. Security fix: all smbd processes inherited
    CAP_DAC_OVERRIDE capabilities, allowing all file system access to be
    allowed even when permissions should have denied access.

 -- Christian Perrier <bubulle@debian.org>  Tue, 09 Mar 2010 10:52:24 +0100

samba (2:3.4.6~dfsg-1) unstable; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Fri, 26 Feb 2010 22:39:50 +0100

samba (2:3.4.5~dfsg-2) unstable; urgency=low

  [ Steve langasek ]
  * Revert the "bashisms" fix from version 2:3.3.0~rc2-4; "local foo=bar"
    is explicitly allowed by Policy now, and this change introduced a
    syntax error.  Closes: #566946.

  [ Christian Perrier ]
  * No longer maker (u)mount.cifs setuid root. Add a notice
    about this in the package's NEWS.Debian file
    Closes: #567554
  * Use dh_lintian instead of manual install of lintian overrides
  * Updated Standards to 3.8.4 (checked, no change)

 -- Christian Perrier <bubulle@debian.org>  Sat, 13 Feb 2010 14:36:33 +0100

samba (2:3.4.5~dfsg-1) unstable; urgency=low

  * New upstream release. Bugs fixed by this release:
    - Memory leak in smbd. Closes: #538819, #558453
  * Declare a versioned dependency of winbind and samba on libwbclient0
    Closes: #550481
  * A few lintian fixes:
  * Drop /var/run/samba from samba-common. The directory is created
    by init scripts when needed.
  * No longer prepend a path to the mksmbpasswd call in samba.postinst.
    This prevents the local administrator to use a replacement version
    for some local reason.

 -- Christian Perrier <bubulle@debian.org>  Sat, 23 Jan 2010 12:16:42 +0100

samba (2:3.4.4~dfsg-1) unstable; urgency=low

  * New upstream version.
  * Drop all RFC files from upstream source, therefore using a "~dfsg"
    suffix to upstream version number.
  * Bugs fixed upstream:
    - fixed list of workgroup servers in libsmbclient.
      Closes: #555462, #561148
    - fixed documentation of the credentials file format in
      mount.cifs(8). Closes: #552250

 -- Christian Perrier <bubulle@debian.org>  Thu, 14 Jan 2010 20:16:34 +0100

samba (2:3.4.3-2) unstable; urgency=low

  [ Christian Perrier ]
  * Switch to source format 3.0 (quilt)
  * Better adapt "add machine script" example to adduser
    Thanks to Heiko Schlittermann for the suggestion
    Closes: #555466

  [ Steve Langasek ]
  * The "I hate non-declarative alternatives" upload:
    - debian/samba{,-common}.prerm: don't call update-alternatives --remove
      on upgrade, /do/ call it on other invocations of the prerm script.  If
      these tools ever go away, the removal needs to be handled on upgrade by
      the maintainer scripts of the new package version.
    - debian/samba{,-common-bin}.postinst: call update-alternatives
      unconditionally, don't second-guess the maintainer script arguments.
    - debian/samba.postinst: call update-alternatives after the debconf
      handling, not before; debconf triggers a re-exec of the script so
      anything done before invoking debconf is wasted because it will be
      re-done, and if there's already a debconf frontend running when this
      is called, the not-redirected update-alternatives output will confuse
      it.  Closes: #558116.
    - debian/samba-common.prerm: move to samba-common-bin, this is the package
      that owns these binaries.

 -- Christian Perrier <bubulle@debian.org>  Thu, 17 Dec 2009 16:53:13 +0100

samba (2:3.4.3-1) unstable; urgency=low

  * New upstream release. This fixes the following bugs:
    - Do not attempt to update /etc/mtab if it is
      a symbolic link. Closes: #408394
  * Bump Standards-Version to 3.8.3 (checked)

 -- Christian Perrier <bubulle@debian.org>  Sat, 31 Oct 2009 14:32:07 +0100

samba (2:3.4.2-1) unstable; urgency=high

  * New upstream release. Security update.
  * CVE-2009-2813:
    Connecting to the home share of a user will use the root of the
    filesystem as the home directory if this user is misconfigured to
    have an empty home directory in /etc/passwd.
  * CVE-2009-2948:
    If mount.cifs is installed as a setuid program, a user can pass it
    a credential or password path to which he or she does not have
    access and then use the --verbose option to view the first line of
    that file.
  * CVE-2009-2906:
    Specially crafted SMB requests on authenticated SMB connections
    can send smbd into a 100% CPU loop, causing a DoS on the Samba
    server.

 -- Christian Perrier <bubulle@debian.org>  Sat, 03 Oct 2009 08:30:33 +0200

samba (2:3.4.1-2) unstable; urgency=low

  * ./configure --disable-avahi, to avoid accidentally picking up an avahi
    dependency when libavahi-common-dev is installed.

 -- Steve Langasek <vorlon@debian.org>  Sat, 26 Sep 2009 00:01:12 -0700

samba (2:3.4.1-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. This fixes the following bugs:
    - smbd SIGSEGV when breaking oplocks. Thanks to Petr Vandrovec
      for the clever analysis and collaboration with upstream.
      Closes: #541171
    - Fix password change propagation with ldapsam. Closes: #505215
    - Source package contains non-free IETF RFC/I-D. Closes: #538034
  * Turn the build dependency on libreadline5-dev to libreadline-dev
    to make further binNMUs easier when libreadline soname changes
    Thanks to Matthias Klose for the suggestion

  [ Steve Langasek ]
  * Don't build talloctort when using --enable-external-talloc; and don't
    try to include talloctort in the samba-tools package, since we're
    building with --enable-external-talloc. :)  Closes: #546828.

 -- Steve Langasek <vorlon@debian.org>  Mon, 21 Sep 2009 22:20:22 -0700

samba (2:3.4.0-5) unstable; urgency=low

  * Move /etc/pam.d/samba back to samba-common, because it's shared with
    samba4.  Closes: #545764.

 -- Steve Langasek <vorlon@debian.org>  Tue, 08 Sep 2009 18:43:17 -0700

samba (2:3.4.0-4) unstable; urgency=low

  [ Steve Langasek ]
  * debian/samba.pamd: include common-session-noninteractive instead of
    common-session, to avoid pulling in modules specific to interactive
    logins such as pam_ck_connector.
  * debian/control: samba depends on libpam-runtime (>= 1.0.1-11) for the
    above.
  * rename debian/samba.pamd to debian/samba.pam and call dh_installpam
    from debian/rules install, bringing us a smidge closer to a stock
    debhelper build
  * don't call pyversions from debian/rules, this throws a useless error
    message during build.
  * fix up the list of files that need to be removed by hand in the clean
    target; the majority of these are now correctly handled upstream.
  * debian/rules: fix the update-arch target for the case of unversioned
    build-deps.
  * Pull avr32 into the list of supported Linux archs.  Closes: #543543.
  * Fix LSB header in winbind.init; thanks to Petter Reinholdtsen for the
    patch. Closes: #541367.

  [ Christian Perrier ]
  * Use DEP-3 for patches meta-information

  [ Steve Langasek ]
  * Change swat update-inetd call to use --remove only on purge,
    and --disable on removal.
  * Add missing build-dependency on pkg-config, needed to fix libtalloc
    detection
  * debian/patches/external-talloc-support.patch: fix the Makefile so it
    works when using external talloc instead of giving a missing-depend
    error.
  * debian/patches/autoconf.patch: resurrect this patch, needed for the
    above.
  * debian/rules: build with --without-libtalloc
    --enable-external-libtalloc, also needed to fix the build failure.

 -- Steve Langasek <vorlon@debian.org>  Mon, 07 Sep 2009 22:58:29 -0700

samba (2:3.4.0-3) unstable; urgency=low

  [ Steve Langasek ]
  * debian/control: samba-common-bin has no reason to depend on
    libpam-modules.

  [ Christian Perrier ]
  * Fix "invalid argument" when trying to copy a file from smb share
    Use an upstream patch that will be included in 3.4.1
    Closes: #536757

 -- Christian Perrier <bubulle@debian.org>  Fri, 21 Aug 2009 11:08:43 +0200

samba (2:3.4.0-2) unstable; urgency=low

  [ Debconf translations ]
  * German. Closes: #536433

  [ Steve Langasek ]
  * Enable the ldap idmap module; thanks to Aaron J. Zirbes.  Closes: #536786.

  [ Jelmer Vernooij ]
  * Properly rename smbstatus.1 for alternatives. Closes: #534772

 -- Christian Perrier <bubulle@debian.org>  Sun, 02 Aug 2009 12:20:51 +0200

samba (2:3.4.0-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release: first upload to unstable for 3.4
  * Correct dependencies for samba-common-bin. Closes: #534595

  [ Debconf translations ]
  * Czech. Closes: #534793
  * Russian. Closes: #534796

 -- Christian Perrier <bubulle@debian.org>  Tue, 07 Jul 2009 20:42:19 +0200

samba (2:3.4.0~rc1-1) experimental; urgency=low

  * New upstream version. That fixes the following bugs:
    - Remove pidfile on clean shutdown. Closes: #299433, #454112
  * Drop swat-de.patch that was applied upstream
  * Bump debhelper compatibility level to 6 and declare a versioned
    dependency on debhelper >= 6.0.0

 -- Christian Perrier <bubulle@debian.org>  Sat, 20 Jun 2009 18:43:20 +0200

samba (2:3.4.0~pre2-1) experimental; urgency=low

  [ Jelmer Vernooij ]
  * Split binaries out of samba-common into samba-common-bin.
    Closes: #524661

  [ Christian Perrier ]
  * New upstream version. That fixes the following bugs:
    - Do not limit the number of network interfaces. Closes: #428618
    - Fix Connect4 in samr.idl. Closes: #526229
  * "Using samba" is back.
  * Drop non-linux-ports.patch that was integrated upstream
  * Drop smbpasswd-syslog.patch that was integrated upstream
  * Drop smbclient-link.patch that was integrated upstream

  [ Debconf translations ]
  * Italian. Closes: #529350

 -- Christian Perrier <bubulle@debian.org>  Sat, 06 Jun 2009 11:45:35 +0200

samba (2:3.4.0~pre1-1) experimental; urgency=low

  * New upstream pre-release
  * "Using samba" is dropped from upstream source. Therefore, drop
    debian/samba-doc.doc-base.samba-using

 -- Christian Perrier <bubulle@debian.org>  Wed, 20 May 2009 18:50:35 +0200

samba (2:3.3.6-1) unstable; urgency=high

  * New upstream release. Security release.
  * CVE 2009-1886: Fix Formatstring vulnerability in smbclient
  * CVE 2009-1888: Fix uninitialized read of a data value

 -- Christian Perrier <bubulle@debian.org>  Fri, 26 Jun 2009 18:21:51 +0200

samba (2:3.3.5-1) unstable; urgency=low

  [ Steve Langasek ]
  * debian/patches/undefined-symbols.patch: fix up patch so that it's
    suitable for submission upstream.
  * debian/patches/proper-static-lib-linking.patch: apply the rules to
    vfstest, ldbrename, nss_wins, pam_winbind, pam_smbpass, and
    rpc_open_tcp.

  [ Debconf translations ]
  * Italian. Closes: #529350

  [ Christian Perrier ]
  * New upstream version
  * Lintian fixes:
    -  Declare versioned dependency on debhelper to fit what we have in
       debian/compat
    - samba.postinst: do not call mksmbpasswd with an absolute path
  * Upgrade Standard to 3.8.2 (checked, no change)
  * Upgrade debhelper compatibility level to 6

 -- Christian Perrier <bubulle@debian.org>  Sat, 20 Jun 2009 08:01:16 +0200

samba (2:3.3.4-2) unstable; urgency=low

  [ Christian Perrier ]
  * Do no compile with clustering support on non-Linux platforms
    Closes: #528382

  [ Debconf translations ]
  * Basque. Closes: #528757

 -- Christian Perrier <bubulle@debian.org>  Sat, 16 May 2009 17:31:09 +0200

samba (2:3.3.4-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release:
    - Fixed daily winbind crash when retrieving users from an ADS server
      Closes: #522907.
  * Add idmap_tdb2 module to winbind package
  * No longer shrink "dead" code from smbd, winbindd and vfstest as it prevents
    VFS modules to properly load. Closes: #524048.

  [ Debconf translations ]
  * Bengali added.

  [ Steve Langasek ]
  * Recommend logrotate instead of depending on it.  Closes: #504219.

 -- Christian Perrier <bubulle@debian.org>  Sat, 02 May 2009 10:06:16 +0200

samba (2:3.3.3-1) unstable; urgency=low

  * New upstream release:
    - Fix map readonly. Closes: #521225
    - Add missing whitespace in mount.cifs error message. Closes: #517021
    - Includes our patch to fix detection of GNU ld version. As a
      consequence, we dropped fix_wrong_gnu_ld_version_check.patch
    - Fix segfault in lookup_sid. Closes: #521408

 -- Christian Perrier <bubulle@debian.org>  Sat, 11 Apr 2009 10:12:23 +0200

samba (2:3.3.2-2) unstable; urgency=low

  [ Steve Langasek ]
  * libcap2-dev is only available on Linux, so make this build-dependency
    conditional.  Closes: #519911.

  [ Christian Perrier ]
  * Switch samba-dbg to "Section: debug"
  * Update debian/copyright for year 2009. Thanks to debian-devel
    for the reminder.
  * Dropping Adam Conrad from Uploaders
  * Dropping Eloy Paris from Uploaders with special thanks for his tremendous
    work maintaining the package between 1997 and 2004.

  [ Mathieu Parent ]
  * ensure clustering is enabled with --with-cluster-support=yes
  * build-depends on ctdb >= 1.0.73. Closes: #520202.
  * samba suggests ctdb

  [ Debconf translations ]
  * Esperanto updated.  Closes: #519237.

 -- Christian Perrier <bubulle@debian.org>  Sun, 29 Mar 2009 09:23:35 +0200

samba (2:3.3.2-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. Closes: #519626
    - mounts with -o guest will now automatically try to connect anonymously.
      Closes: #423971.
    - fix for brokenness when using 'force group'.  Closes: #517760.
    - fix for saving files on Samba shares using MS Office 2007.
      LP: #337037.
  * Re-fix slave links for manual pages in samba-common. Closes: #517204.

  [ Steve Langasek ]
  * Add missing debhelper token to libpam-smbpass.prerm.

 -- Christian Perrier <bubulle@debian.org>  Sun, 15 Mar 2009 12:16:48 +0100

samba (2:3.3.1-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. Closes: #516981
    Upstream fixes in that release:
    - Fixed various spelling errors/typos in manpages
      Closes: #516047
    - Fix renaming/deleting of files using Windows clients.
      Closes: #516160
    - Fix syntax error in mount.cifs(8). Closes: #454799
  * Use a slave alternative for smbstatus.1 even though that manpage
    is not provided by samba4

  [ Jelmer Vernooij ]
  * Fix slave links for manual pages in samba-common. Closes: #517204.

  [ Steve Langasek ]
  * Add Vcs-{Browser,Svn} fields to debian/control.
  * When populating the sambashare group, it's not an error if the user
    simply doesn't exist; test for this case and let the install continue
    instead of aborting.  LP: #206036.
  * debian/libpam-smbpass.pam-config, debian/libpam-smbpass.postinst,
    debian/libpam-smbpass.files, debian/rules: provide a config block
    for the new PAM framework, allowing this PAM module to
    auto-configure itself
  * debian/control: make libpam-smbpass depend on
    libpam-runtime (>= 1.0.1-2ubuntu1) for the above
  * debian/patches/fix_wrong_gnu_ld_version_check.patch: new patch to fix
    wrong detection of the GNU ld version, so that the symbol export scripts
    will be properly applied when building.
  * refresh debian/libsmbclient.symbols for 3.3.1.

 -- Steve Langasek <vorlon@debian.org>  Mon, 02 Mar 2009 00:30:35 -0800

samba (2:3.3.0-4) unstable; urgency=low

  [ Steve Langasek ]
  * Build-Depend on libcap2-dev.  Closes: #515851.
  * debian/patches/fhs-filespaths-debatable.patch: Add a missing prototype
    for cache_path, which causes nearly undiagnoseable crashes when building
    with -fPIE, because of a wrong return type!  LP: #330626.

  [ Debconf translations ]
  * Belarusian added.  Closes: #516052.
  * Traditional Chinese updated. Closes: #516594
  * Swedish updated.  Closes: #516681.

  [ Mathieu Parent ]
  * enable clustering by default (CTDB). Closes: #514050

 -- Steve Langasek <vorlon@debian.org>  Tue, 24 Feb 2009 16:58:58 -0800

samba (2:3.3.0-3) unstable; urgency=low

  [ Steve Langasek ]
  * Re-add smb.conf fixes that were dropped in the 3.3.0 merge to unstable.
  * Make samba conflict with samba4, not with itself.

  [ Debconf translations ]
  * Vietnamese updated.  Closes: #515235.
  * Slovak updated.  Closes: #515240.

 -- Steve Langasek <vorlon@debian.org>  Mon, 16 Feb 2009 07:15:47 -0800

samba (2:3.3.0-2) unstable; urgency=low

  * Upload to unstable

 -- Christian Perrier <bubulle@debian.org>  Sat, 14 Feb 2009 13:38:14 +0100

samba (2:3.2.5-4) unstable; urgency=low

  * Fix segfault whan accessign some NAS devices running old versions of Samba
    Closes: #500129
  * Fix process crush when using gethostbyname_r in several threads
    Closes: #509101, #510450

 -- Christian Perrier <bubulle@debian.org>  Thu, 08 Jan 2009 05:59:17 +0100

samba (2:3.2.5-3) unstable; urgency=high

  * Security update
  * Fix Potential access to "/" in setups with registry shares enabled
    This fixes CVE-2009-0022, backported from 3.2.7
  * Fix links in HTML documentation index file.
    Closes: #508388
  * Drop spurious docs-xml/smbdotconf/parameters.global.xml.new
    file in the diff. Thanks to the release managers for spotting it

 -- Christian Perrier <bubulle@debian.org>  Sun, 21 Dec 2008 08:09:31 +0100

samba (2:3.2.5-2) unstable; urgency=low

  * Fix typo in bug number in a comment for the default smb.conf file
    Closes: #507620
  * Document the need to set appropriate permissions on the printer
    drivers directory, in the default smb.conf file. Also change
    the example group from ntadmin to lpadmin
    Closes: #459243
  * Add missing rfc2307.so and sfu*.so links that prevent using the
    'winbind nss info' feature properly
    Thans to Martin Dag Nilsson for reporting and Jelmer Jaarsma for
    the patch. Closes: #506109

 -- Christian Perrier <bubulle@debian.org>  Sat, 13 Dec 2008 13:56:07 +0100

samba (2:3.2.5-1) unstable; urgency=high

  * New upstream version. Security-only release.
    This addresses CVE-2008-4314: potentially leaking
    arbitrary memory contents to malicious clients.
  * Better document cases where using a "master" file for smb.conf
    is a bad idea. Closes: #483187
  * Insert example "add machine script" and "add group script" scripts
    in the default smb.conf. Closes: #349049
  * Move homepage URL to Homepage filed in debian/control

 -- Christian Perrier <bubulle@debian.org>  Thu, 27 Nov 2008 11:36:35 +0100

samba (2:3.3.0-1) experimental; urgency=low

  * New upstream release. Fixes the following bugs:
    - smb file deletion gvfs. Closes: #510564
    - smbclient du command does not recuse properly. Closes: #509258
    - mention possible workgroup field in credential files in mount.cifs(8)
      Closes: #400734
    - bashism in /usr/share/doc/samba-doc/examples/perfcounter/perfcountd.init
      Closes: #489656
    - describe '-g' option in smbclient man page. Closes: #510812
    - fix swat status table layout. Closes: #511275

  [ Jelmer Vernooij ]
  * Use alternatives for the smbstatus, nmblookup, net and
    testparm binaries and various data files in samba-common
    to allow installation of Samba 3 together with Samba 4.
  * Add myself to uploaders.

  [ Christian Perrier ]
  * Add mbc_getOptionCaseSensitive@Base, smbc_setOptionCaseSensitive@Base,
    smbc_set_credentials@Base, smbc_urldecode@Base and smbc_urlencode@Base to
    libsmbclient's symbols file with 3.3.0 as version number
  * Also add 18 symbols to libwbclient0's symbols file with 3.3.0 as
    version number

 -- Christian Perrier <bubulle@debian.org>  Fri, 30 Jan 2009 21:41:49 +0100

samba (2:3.3.0~rc2-4) experimental; urgency=low

  [ Steve Langasek ]
  * Revert one of the template depersonalization changes from the -2 upload,
    because it loses important context

  [ Christian Perrier ]
  * Use double quotation marks in debconf templates
  * Add 'status" option to init scripts. Thansk to Dustin Kirkland for
    providing the patch. Closes: #488275
  * Move WHATSNEW.txt, README, Roadmap to samba-common. Closes: #491997
  * [Lintian] Add ${misc:Depends} to dependencies of binary packages
    that didn't have it already as we're using debhelper in the source
    package
  * [Lintian] Don't ignore errors in swat.postrm
  * [Lintian] Fix "local foo=bar" bashisms in samba-common.dhcp, samba.config
    and samba-common.config
  * smb.conf.5-undefined-configure.patch: fix syntax error in smb.conf(5)
    Closes: #512843

  [ Debconf translations ]
  * Asturian added. Closes: #511730

 -- Christian Perrier <bubulle@debian.org>  Sat, 24 Jan 2009 16:04:57 +0100

samba (2:3.3.0~rc2-3) experimental; urgency=low

  * Fix around the libsmbclient/libsmbclient-dev descriptions, which got
    swapped in the last upload.
  * Drop a boilerplate sentence from the samba-common, smbclient, swat,
    samba-doc, samba-doc-pdf, samba-dbg, and libwbclient0 descriptions
    that's not relevant for these packages.
  * Hyphenate "command-line" in the smbclient short description.
  * Fix up the smbclient description, which got crossed with the smbfs one.
  * Fix the smbfs description, which was not actually fixed in the previous
    upload.  Really closes: #496206.
  * Further minor adjustments to the description of the swat package.
  * Fix various inaccuracies in the winbind package description.
  * Clarify in the description that samba-tools are extra, only useful for
    testing.

 -- Steve Langasek <vorlon@debian.org>  Tue, 30 Dec 2008 18:42:05 -0800

samba (2:3.3.0~rc2-2) experimental; urgency=low

  [ Steve Langasek ]
  * Handle clearing out netbios settings whenever the DHCP server has gone
    away.  Closes: #299618.

  [ Christian Perrier ]
  * Point the correct document about password encryption in debconf templates
    Corrected in translations as well. Closes: #502838
  * Reword debconf templates to avoid mentioning the local host as a "server".
    Closes: #171177
  * Use this opportunity for other minor rewording:
    - replace "SMB" by "SMB/CIFS"
    - more strongly discouraging the use of plain text passwords
    - unpersonnalization
  * Reword the libpam-smbpass package description
    Thanks to Justin B. Rye for the very useful suggestions
    Closes: #496196
  * Improve the package descriptions by rewording the description overhaul
    Also improve the specific information for samba and samba-dbg
    Thanks again to Justin B. Rye for the invaluable help
    Closes: #496200
  * Improve libsmbclient package description. Closes: #496197
  * Improve libwbclient0 package description. Closes: #496199
  * Improve samba-doc package description. Closes: #496202
  * Improve samba-tools package description. Closes: #496203
  * Improve samba-common package description. Closes: #496204
  * Improve smbclient package description. Closes: #496205
  * Improve smbfs package description. Closes: #496206
  * Improve swat package description. Closes: #496207
  * Improve winbind package description. Closes: #496208
  * Improve samba-doc-pdf package description. Closes: #496211
  * Update French debconf translation

 -- Christian Perrier <bubulle@debian.org>  Mon, 29 Dec 2008 11:50:04 +0100

samba (2:3.3.0~rc2-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Wed, 17 Dec 2008 08:22:18 +0100

samba (2:3.3.0~rc1-2) experimental; urgency=low

  * Provide idmap_adex and idmap_hash in winbind.
    Thanks to Jelmer Jaarsma for reporting and providing a patch

 -- Christian Perrier <bubulle@debian.org>  Thu, 04 Dec 2008 19:59:23 +0100

samba (2:3.3.0~rc1-1) experimental; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Fri, 28 Nov 2008 10:51:32 +0100

samba (2:3.3.0~pre2-1) experimental; urgency=low

  * New upstream release.

 -- Christian Perrier <bubulle@debian.org>  Fri, 07 Nov 2008 20:52:36 +0100

samba (2:3.2.4-1) unstable; urgency=low

  [ Steve Langasek ]
  * New upstream release.
    - debian/rules: we don't need to move cifs.upcall around, it's now
      installed to the right place upstream.
    - Fixed in this release:
      - typo in cifs.upcall.8. Closes: #501499

  [ Christian Perrier ]
  * Create /var/lib/samba in samba-common. Thanks to Thierry Carrez for
    the patch. Closes: #499359

 -- Christian Perrier <bubulle@debian.org>  Sat, 18 Oct 2008 08:20:31 +0200

samba (2:3.2.3-3) unstable; urgency=low

  [ Steve Langasek ]
  * Add missing manpage for cifs.upcall; thanks to Per Olofsson for pointing
    this out.  Closes: #497857.
  * Georgian debconf translation added. Closes: #498426
  * Polish debconf translation added. Thanks to Łukasz Paździora.

  [ Jelmer Vernooij ]
  * Add ldb-tools to Suggests: of samba. Closes: #488384

 -- Christian Perrier <bubulle@debian.org>  Fri, 03 Oct 2008 20:37:19 +0200

samba (2:3.2.3-2) unstable; urgency=low

  [ Christian Perrier ]
  * Fix FTBFS on GNU/kFreeBSD. Closes: #496880

 -- Steve Langasek <vorlon@debian.org>  Sat, 30 Aug 2008 00:46:07 -0700

samba (2:3.2.3-1) unstable; urgency=high

  * High-urgency upload for security fix
  * New upstream release
    - Fix "/usr/lib/cups/backend/smb does not try port 139 anymore by default"
      Closes: #491881
    - Fix the default permissions on ldb databases.  Addresses
      CVE-2008-3789; closes: #496073.
    - debian/rules, debian/smbfs.files: build with cifs.upcall,
      newly introduced to replace cifs.spnego
    - debian/rules: no more need to rename libsmbclient.so to
      libsmbclient.so.0, or libwbclient.so to libwbclient.so.0

  [ Noèl Köthe ]
  * fixing lintian warning "build-depends-on-1-revision"

 -- Steve Langasek <vorlon@debian.org>  Wed, 27 Aug 2008 10:19:59 -0700

samba (2:3.2.1-1) unstable; urgency=low

  [ Steve Langasek ]
  * Build-depend on keyutils only on the linux archs.  Closes: #493401.
  * New patch debian/patches/shrink-dead-code.patch: throw all .o files into
    a .a archive as a first pass before linking the final executables, so
    that the executables don't end up with quite so much unused code bloating
    the system.  Not applied to net or ntlm_auth, which have particularly
    hairy linking needs.  Partially addresses: bug #474543; no code was
    harmed in the making of this patch.
  * Build-depend on libcups2-dev | libcupsys2-dev, to facilitate backports.

  [ Christian Perrier ]
  * New upstream release
    - Fix trusted domain handling in Winbindd. Closes: #493752
    - Fix for print jobs that continued to show as active after printing
      had completed.  Closes: #494899.

 -- Steve Langasek <vorlon@debian.org>  Thu, 14 Aug 2008 16:13:24 -0700

samba (2:3.2.0-4) unstable; urgency=low

  * Brown paper bag bug: add a change to debian/patches/fhs-filespaths.patch
    that went missing somehow, causing samba to look for secrets.tdb in
    /etc/samba instead of /var/lib/samba where it's been for years.  No
    migration handling added, because this was only present in unstable for
    about a day.  Thanks to Rick Nelson for pointing this out.

 -- Steve Langasek <vorlon@debian.org>  Mon, 21 Jul 2008 17:39:48 -0700

samba (2:3.2.0-3) unstable; urgency=low

  * Upload to unstable.
  * debian/patches/proper-static-lib-linking.patch: fix SMB_LIBRARY macro
    and Makefile.in to properly avoid linking .a libraries into other .a
    libraries, since this bloats the libraries without providing any useful
    functionality.
  * Version the build-dependency on libtalloc-dev, to ensure we're building
    against a package with the right symbols.
  * Add debian/libsmbclient.symbols and debian/libwbclient0.symbols, to get
    more fine-grained versioned library dependencies
  * Bump the shlibs version for libsmbclient to 2:3.2.0, as new symbols
    have been added.
  * Re-add docs/registry to samba-doc, restored upstream
  * Move schannel_store.tdb out of /etc/samba to /var/lib/samba, where it
    belongs according to the FHS.  Closes: #454770.

 -- Steve Langasek <vorlon@debian.org>  Sun, 20 Jul 2008 15:38:10 -0700

samba (2:3.2.0-2) experimental; urgency=low

  * Fix up the copyright file to correctly document that we're now under
    GPLv3, not GPLv2.

 -- Steve Langasek <vorlon@debian.org>  Tue, 08 Jul 2008 12:21:47 -0700

samba (2:3.2.0-1) experimental; urgency=low

  [ Christian Perrier ]
  * New samba-tools package to provide all "torture" tools:
    smbtorture msgtest masktest locktest locktest2 nsstest vfstest
    pdbtest talloctort replacetort tdbtorture smbconftort
  * Upgrade Standard to 3.8.0 (checked)
  * Merged from unstable:
    * Drop "invalid users = root" from the default smb.conf file
      as it differs from upstream's behaviour and upstream is fairly
      noisy about this choice of ours. Closes: #462046
    * Drop commented "guest account = nobody". This is already upstream's
      default
    * Remove versioned Build-Depends when satisfied in etch (actually all
      versioning in Build-Depends)
    * Remove Conflicts with non-existing packages
    * Drop dpkg-dev and binutils from Build-Depends, since the versioned
      build-dep is no longer needed and these are both Build-Essential
    * Mini-policy for settings in smb.conf:
      - don't explicitly set settings to their default value
      - commented settings with the default value are commented with "#"
      - commented settings with a non-default value are commented with ";"
    * Apply this policy to "socket options". Closes: #476104
    * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
      libsmbclient.so.0 as upstream doesn't assign versions
    * Add idmap_*(8) man pages (idea taken from SerNet packages)
    * Create the entire set of directories needed by clients for
      Point-and-Click printing (including old clients!) in
      /var/lib/samba/printers (idea taken from SerNet packages)
    * Update copyright and README.debian information for current and past
      maintainers. Remove redundant mention of Tridge (the copyright is enough)
    * Add doc-base files for samba-doc-pdf. Closes: #451685
    * add a soft dependency on slapd in init script to allow
      proper operation when dependency-based boot sequence is enabled.
      Thanks to Petter Reinholdtsen for reporting and providing a patch
      Closes: #478800
  * Rename libcupsys2-dev to libcups2-dev in build dependencies
  * Localize SWAT in German. Closes: #487681

  [ Debconf translations ]
  * Merged from unstable:
    * Kurdish. Closes: #480151
    * Romanian updated. Closes: #488709.

  [ Steve Langasek ]
  * New upstream release
  * Merged from unstable:
    * debian/patches/no-unnecessary-cups.patch: don't try to connect to a
      cups server when we know that no printers are configured.
      Closes: #479512.

  [ Jelmer Vernooij ]
  * Merged from unstable:
  * Fix bashism in smbtar. (Closes: #486056)

  [ Peter Eisentraut ]
  * Merged from unstable:
    * Removed myself from Uploaders

 -- Christian Perrier <bubulle@debian.org>  Sun, 06 Jul 2008 09:59:07 +0200

samba (2:3.2.0~rc2-1) experimental; urgency=low

  [ Christian Perrier ]
  * New upstream release

  [ Steve Langasek ]
  * Enable building of cifs.spnego for the smbfs package, adding a
    build-dependency on keyutils-dev, to allow kerberos-based authentication
    of cifs mounts.  Closes: #480663, LP: #236830.

 -- Christian Perrier <bubulle@debian.org>  Thu, 12 Jun 2008 17:17:38 +0200

samba (2:3.2.0~rc1-2) experimental; urgency=low

  * Reupload to experimental. Sigh.

 -- Christian Perrier <bubulle@debian.org>  Sat, 31 May 2008 11:08:14 +0200

samba (1:3.2.0~rc1-1) unstable; urgency=low

  * New upstream version
  * debian/samba-doc.doc-base.samba-using: index file is no named toc.html

 -- Christian Perrier <bubulle@debian.org>  Fri, 30 May 2008 20:22:57 +0200

samba (1:3.2.0~pre3-1) experimental; urgency=low

  * New upstream version
  * debian/patches/fix-manpage-htmlchars.patch: dropped as fixed upstream
  * docs/registry removed from samba-doc as missing from upstream tarball
    (upstream bug #5421)
  * debian/samba-doc.doc-base.samba-using: The index (and only) file
    is now book.html

 -- Christian Perrier <bubulle@debian.org>  Sat, 26 Apr 2008 08:20:21 +0200

samba (1:3.2.0~pre2-2) experimental; urgency=low

  [ Christian Perrier ]
  * Upload to experimental with an epoch as the earlier version
    accidentally went to unstable.

  [ Peter Eisentraut ]
  * Removed myself from Uploaders

 -- Christian Perrier <bubulle@debian.org>  Sun, 06 Apr 2008 20:38:35 +0200

samba (3.2.0~pre2-1) unstable; urgency=low

  * New upstream (pre-)release. It closes the following bugs:
    - typos in net.8. Closes: #460487, #460491
    - mention insmb.conf(5) that logging still occurs when
      "syslog only" is enabled and "syslog=0". Closes: #311300
    - bad link in HTML docs. Closes: #358479
    - enhance a useless and confusing debug message in pdb_ldap
      Closes: #448546
    - mention the correct default debug level in smbclient(1)
      Closes: #292371
    - no longer mention that "ip" parameter can use the host name
      in mount.cifs(8). Closes: #296057
    - wrong spelling of "its own" in source comments fixed
      Closes: #448686
    - fix "ldapsam_getgroup: Did not find group" debug message
      Closes: #448546
    - fix smbclient(1): useless use of cat. Closes: #429349

  [ Steve Langasek ]
  * debian/patches/fix-manpage-htmlchars.patch: patch all the manpages from
    3.2.0pre2, which ended up with html entity encodings embedded in them
    by mistake.  This patch is expected to go away again for 3.2.0pre3.
  * fix up the FHS patches for the new upstream release:
    - debian/patches/fhs-newpaths.patch has been merged upstream, drop it.
    - debian/patches/fhs-filespaths.patch has been mostly applied; only one
      path usage remains inconsistent, and a new .tdb has been added with
      the wrong path so fix this up here too.
    - debian/patches/fhs-filespaths-debatable.patch: updated for some new
      uses of lock_path() which we map to cache_path().
    - debian/patches/fhs-assignpaths.patch: patch source/m4/check_path.m4
      instead of source/configure.in.
  * debian/patches/smbstatus-locking.patch: merged upstream
  * debian/patches/smbpasswd-syslog.patch: updated to account for new
    calls to logging functions
  * Handle the new libraries available in samba 3.2: ship libwbclient as a
    shared library, link against the system libtalloc (adding a
    build-dependency on libtalloc-dev - which is actually sort of kludgy
    because this only works as long as the system libtalloc has the same
    soname as the one within the samba tree, this should be fixed to
    properly build against the system libtalloc), and suppress generation
    of the tdb and netapi libraries which aren't useful to us right now.

 -- Christian Perrier <bubulle@debian.org>  Wed, 05 Mar 2008 22:45:28 +0100

samba (2:3.0.31-1) unstable; urgency=medium

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Sat, 12 Jul 2008 16:57:09 +0200

samba (2:3.0.30-4) unstable; urgency=low

  [ Christian Perrier ]
  * Rename libcupsys2-dev to libcups2-dev in build dependencies
  * Localize SWAT in German. Closes: #487681

  [ Jelmer Vernooij ]
  * Fix bashism in smbtar. (Closes: #486056)

  [ Jamie Strandboge ]
  * debian/patches/upstream_bug5517.patch: adjust cli_negprot() to properly
    calculate buffer sizes. This bug was introduced in the fix for
    CVE-2008-1105. Closes: #488688

  [ Debconf translations ]
  * Romanian updated. Closes: #488709.

 -- Christian Perrier <bubulle@debian.org>  Sun, 06 Jul 2008 11:43:53 +0200

samba (2:3.0.30-3) unstable; urgency=low

  [ Christian Perrier ]
  * add a soft dependency on slapd in init script to allow
    proper operation when dependency-based boot sequence is enabled.
    Thanks to Petter Reinholdtsen for reporting and providing a patch
    Closes: #478800

  [ Steve Langasek ]
  * debian/patches/no-unnecessary-cups.patch: don't try to connect to a cups
    server when we know that no printers are configured.  Closes: #479512.

 -- Christian Perrier <bubulle@debian.org>  Tue, 10 Jun 2008 21:03:51 +0200

samba (2:3.0.30-2) unstable; urgency=high

  * Brown paper bag releae with epoch increased after yet another
    accidental upload of 3.2.0 to unstable. Sigh and apologies to
    autobuilders.

 -- Christian Perrier <bubulle@debian.org>  Sat, 31 May 2008 12:08:50 +0200

samba (1:3.0.30-1) unstable; urgency=high

  * New upstream release: fix a heap overflow when parsing SMB responses in
    client code. (CVE-2008-1105). Closes: #483410

 -- Christian Perrier <bubulle@debian.org>  Wed, 28 May 2008 22:38:44 +0200

samba (1:3.0.29-1) unstable; urgency=low

  * New upstream release

 -- Christian Perrier <bubulle@debian.org>  Thu, 22 May 2008 07:31:55 +0200

samba (1:3.0.28a-3) unstable; urgency=low

  * The "bug hunting at SambaXP" release
  * Drop "invalid users = root" from the default smb.conf file
    as it differs from upstream's behaviour and upstream is fairly
    noisy about this choice of ours. Closes: #462046
  * Drop commented "guest account = nobody". This is already upstream's
    default
  * Remove versioned Build-Depends when satisfied in etch (actually all
    versioning in Build-Depends)
  * Remove Conflicts with non-existing packages
  * Drop dpkg-dev and binutils from Build-Depends, since the versioned
    build-dep is no longer needed and these are both Build-Essential
  * Mini-policy for settings in smb.conf:
    - don't explicitly set settings to their default value
    - commented settings with the default value are commented with "#"
    - commented settings with a non-default value are commented with ";"
  * Apply this policy to "socket options". Closes: #476104
  * No longer gratuitously use /usr/lib/libsmbclient.so.0.1 but a more logical
    libsmbclient.so.0 as upstream doesn't assign versions
  * Add idmap_*(8) man pages (idea taken from SerNet packages)
  * Create the entire set of directories needed by clients for
    Point-and-Click printing (including old clients!) in
    /var/lib/samba/printers (idea taken from SerNet packages)
  * Update copyright and README.debian information for current and past
    maintainers. Remove redundant mention of Tridge (the copyright is enough)
  * Add doc-base files for samba-doc-pdf. Closes: #451685
  * Kurdish debconf translation. Closes: #480151

 -- Christian Perrier <bubulle@debian.org>  Wed, 16 Apr 2008 23:14:46 +0200

samba (1:3.0.28a-2) unstable; urgency=low

  [ Peter Eisentraut ]
  * Removed myself from Uploaders

  [ Steve Langasek ]
  * debian/patches/manpage-encoding.patch: fix up the manpage synopses to
    not use embedded iso8859-1 non-break spaces, there is a roff escape
    sequence that we should use instead.  Closes: #470844.

  [ Christian Perrier ]
  * Reupload with an epoch to supersede an accidental upload of 3.2.0
    in unstable

 -- Christian Perrier <bubulle@debian.org>  Sat, 05 Apr 2008 11:59:23 +0200

samba (3.0.28a-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream release. This fixes the following Debian bugs:
    - Prevent nmbd from shutting down when no network
      interfaces can be located. Closes: #433449
  * Debian patches dropped as applied upstream:
    - make-distclean.patch
    - linux-cifs-user-perms.patch
    - cifs-umount-same-user.patch
    - get_global_sam_sid-non-root.patch
    - chgpasswd.patch
    - cups.patch
  * Fix doc-base section from Apps/Net to Network
  * Fix copyright in debian/copyright
  * Updated Standards-Version to 3.7.3 (no changes needed)
  * [Lintian] No longer use -1 revision for the libacl-dev build
    dependency

  [ Steve Langasek ]
  * Merge smb.conf changes from Ubuntu:
    - correct an inconsistency inthe winbind enum comment
    - correct default and example settings to use the canonical names for all
      options, rather than historical synonyms
    - clarify the comment for 'max log size'.
    Thanks to Chuck Short and Richard Laager.
  * Add an additional sed command to samba-common.postinst to cleverly
    pick up any shares that have been appended to the default smb.conf
    and exclude them from the ucf diff.

 -- Christian Perrier <bubulle@debian.org>  Fri, 14 Mar 2008 21:28:16 +0100

samba (3.0.28-4) unstable; urgency=low

  [ Steve Langasek ]
  * Brown paper bag: fix samba-common.files to list all of the smb.conf
    templates, not just the current one.  Closes: #470138.
  * Drop debian/patches/gcc42-arm-workaround.patch, which should have been
    dropped in the previous upload

 -- Steve Langasek <vorlon@debian.org>  Sun, 09 Mar 2008 04:09:26 -0700

samba (3.0.28-3) unstable; urgency=low

  * Drop the arm optimization workaround, as the compiler is now reported
    to be fixed.
  * Add missing eventlogadm(8) manpage.
  * Refresh the list of Linux architectures from type-handling, to pick up
    libacl-dev on armel.  Closes: #465121.
  * Convert handling of smb.conf to use ucf, so that we can sanely manage
    syntax changes going forward.
  * In the process, fix the dhcp handling to allow proper reconfiguration
    via debconf.

  [ Debconf translations ]
  * Indonesian added. Closes: #469976

 -- Steve Langasek <vorlon@debian.org>  Sat, 08 Mar 2008 17:11:16 -0800

samba (3.0.28-2) unstable; urgency=low

  [ Steve Langasek ]
  * Drop some further code in samba-common.postinst that's specific to
    pre-3.0 upgrades.
  * Make the mount.smbfs wrapper a bash script instead of a POSIX sh script,
    so we can use bash array variables and cope with arguments containing
    embedded spaces (such as share names).  Thanks to Julian Gilbey
    <jdg@debian.org> for the patch.  Closes: #457105.
  * debian/patches/gcc42-arm-workaround.patch: work around an arm compiler
    problem by building rpc_parse/parse_prs.o with -O0 on this architecture.
    Thanks to Martin Michlmayr for helping to pin down the problem file.
    Closes: #445566.
  * mount.smbfs: map the smbfs "guest" option to "guest,sec=none", which is
    a closer approximation of the semantics with cifs.

 -- Christian Perrier <bubulle@debian.org>  Sat, 05 Jan 2008 09:46:06 +0100

samba (3.0.28-1) unstable; urgency=high

  * New upstream release. Security fix
  * Fix a remote code execution vulnerability when running as a domain
    logon server (PDC or BDC).  (CVE-2007-6015)

 -- Christian Perrier <bubulle@debian.org>  Tue, 11 Dec 2007 00:12:11 +0530

samba (3.0.27a-2) unstable; urgency=low

  * debian/patches/disable-weak-auth.patch: disable plaintext authentication
    on the client, and lanman authentication on both client and server, by
    default since these are only needed for Win9x or Samba with encrypted
    passwords disabled and are potential password attack vectors.  This
    change is backported from Samba 3.2.  LP: #163194.
  * Don't build the userspace tools for the deprecated smbfs kernel driver
    anymore; instead, use a shell wrapper around mount.cifs that translates
    option names between the smbfs and cifs drivers.
    Closes: #169624, #256637, #265468, #289179, #305210, #410075;
    LP: #29413
  * debian/panic-action: detect when we're on an Ubuntu system and direct bug
    reporters to Launchpad instead of to the Debian BTS.  Closes: #452940.
  * debian/samba.init: call log_progress_msg separately for each daemon on
    stop rather than passing a second arg to log_daemon_msg, for greater
    compatibility with both Debian and Ubuntu LSB initscript implementations.
    Closes: #453350.
  * Drop smbldap-tools to Suggests:, consistent with the textbook meaning of
    recommends/suggests which is now implemented correctly in apt.
    Closes: #453144.
  * Get rid of the build-dependency on type-handling:
    - add a new target, "update-archs", to be invoked by hand to refresh
      the list of known Linux architectures for the libacl1-dev
      build-dep; this avoids the clean target making changes to
      debian/control
    - rework the sed line so that it works in-place on debian/control,
      so we can get rid of debian/control.in as well and just update
      debian/control directly
    Closes: #340570.

 -- Steve Langasek <vorlon@debian.org>  Tue, 04 Dec 2007 18:35:29 -0800

samba (3.0.27a-1) unstable; urgency=low

  [ Steve Langasek ]
  * New upstream release
    - fix regression with smbfs clients, introduced by the security fix in
      3.0.27.  Closes: #451839.
    - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream.
  * Drop the deprecated "printer admin" example from the default smb.conf.
    Closes: #451273.
  * Add a *new* debian/patches/cups.patch to *enable* cups as the default
    printing system, because since the original introduction of this patch
    in Debian there was a regression upstream that caused cups to never be
    selected as the default print system.
  * Set the default value for the workgroup question to "WORKGROUP" in
    samba-common.templates, not just in the template smb.conf, so that the
    debconf question comes out right every time; and always treat this
    as a high-priority debconf question instead of selecting the
    priority based on whether there's an existing value, since there's
    now *always* an existing value but the value doesn't tell us
    anything meaningful about the user's preference.  Closes: #451271.
  * Drop some code from samba.postinst that only applies to upgrades from
    pre-3.0 (i.e., pre-sarge) packages

  [ Christian Perrier ]
  * Update the "built by" part of README.debian
  * Remove the very outdated parts of README.debian

 -- Steve Langasek <vorlon@debian.org>  Fri, 23 Nov 2007 13:04:52 -0800

samba (3.0.27-1) unstable; urgency=low

  * New upstream version
    - fixes a remote code execution vulnerability when running nmbd as a
      WINS server. (CVE-2007-5398; closes: #451385)
    - fixes a buffer overflow in nmbd when running as a domain controller
      during processing of GETDC logon server requests. (CVE-2007-4572)

  [ Steve Langasek ]
  * fhs.patch: net usershares should also be stored under /var/lib, not under
    /var/run.  No transition handling in maintainer scripts, since this
    feature is not activated by default.
  * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid()
    from smbpasswd -L or pam_smbpass when running as non-root, to avoid a
    foreseeable panic.  Closes: #346547, #450738.
  * usershare.patch: enable "user shares" by default in the server with a
    default limit of 100, to support user shares on both upgrades and new
    installs with no need to munge config files.  Thanks to Mathias Gug
    <mathiaz@ubuntu.com> for the patch.  Closes: #443230.
  * On Ubuntu, support autopopulating the sambashare group using the existing
    members of the admin group; no equivalent handling is done on Debian,
    because there doesn't seem to be an appropriate template group we can use
    that wouldn't be considered a privilege escalation for those users.
  * Update Samba to explicitly use the C locale when doing password changes,
    to account for Linux-PAM's recently adopted i18n support.
    Closes: #451272.
  * Enforce creation of the pid directory (/var/run/samba) in the samba
    init script, for compatibility with systems that use a tmpfs for
    /var/run.  Closes: #451270.
  * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd
    as the default printing system, as CUPS is now the dominant/default
    printing system for Linux.

  [ Debconf translations ]
  * Hebrew added. Closes: #444054

  [ Christian Perrier ]
  * Split fhs.patch into 3 separate patches to make upstream integration
    easier:
    - fhs-newpaths.patch: introduce new paths
    - fhs-filespaths.patch: assign files to new paths
    - fhs-assignpaths.patch: assign paths to FHS-compatible locations
  * Compile with DNS update support. Thanks to Matthias Gug for
    reporting and contributions from Launchpad's #156686
    Closes: #449422

 -- Steve Langasek <vorlon@debian.org>  Thu, 15 Nov 2007 11:46:17 -0800

samba (3.2.0~pre1-1) experimental; urgency=low

  * New upstream (pre-)release

  [ Steve Langasek ]
  * fhs.patch: net usershares should also be stored under /var/lib, not under
    /var/run.  No transition handling in maintainer scripts, since this
    feature is not activated by default.
  * Update smbstatus-locking.patch to use db_open() instead of
    tdb_open(), per upstream recommendation.
  * Use talloc_strdup() and talloc_asprintf() instead of static strings in
    data_path(), state_path(), and cache_path(), as suggested by Volker
    Lendecke.

  [ Debconf translations ]
  * Hebrew added. Closes: #444054

  [ Christian Perrier ]
  * Split fhs.patch into 4 separate patches to make upstream integration
    easier:
    - fhs-newpaths.patch: introduce new paths
    - fhs-filespaths.patch: assign files to new paths
    - fhs-filespaths-debatable.patch: assign files to new paths (part that
      seems more difficult to be integrated upstream)
    - fhs-assignpaths.patch: assign paths to FHS-compatible locations

 -- Christian Perrier <bubulle@debian.org>  Sun, 21 Oct 2007 09:14:42 +0200

samba (3.0.26a-1) unstable; urgency=low

  * New upstream release.
  * Remove the samba-common/unsupported-passdb debconf template and
    the associated code in samba-common.postinst, that deals with pre-etch
    versions transition
  * Remove the samba/tdbsam template and the remaining line referencing
    it (for no need) in samba.postinst. That code was removed in 3.0.23c-2
    and was dealing with pre-3.0 transitions.

 -- Christian Perrier <bubulle@debian.org>  Sun, 16 Sep 2007 10:16:29 +0200

samba (3.0.26-1) unstable; urgency=high

  * New upstream release: security update for CVE-2007-4138:
    incorrect primary group assignment for domain users using the rfc2307 or
    sfu winbind nss info plugin.

 -- Christian Perrier <bubulle@debian.org>  Tue, 11 Sep 2007 19:16:32 +0200

samba (3.0.25c-1) unstable; urgency=low

  [ Noèl Köthe ]
  * new upstream released from 2007-08-20
    - added smbfs deprecation information to help and manpage
      Closes: #360384
    - fixed winbind leaking file descriptors
      Closes: #410663
    - fixed smbpasswd fails with errorcode SUCCESS as normal user
      Closes: #155345

  [ Christian Perrier ]
  * Drop the (upstream unmaintained) python bindings (python-samba package)
  * swat: turn the dependency on samba-doc to a Recommends:
    Thanks to Peter Eisentraut for dealing with that issue and bringing it
    back. Closes: #391742

 -- Christian Perrier <bubulle@debian.org>  Sun, 26 Aug 2007 14:57:16 +0200

samba (3.0.25b-2) unstable; urgency=low

  [ Steve Langasek ]
  * Don't start nmbd if 'disable netbios' is set in the config.
    Closes: #429429.
  * missing_userspace_bugzilla999.patch: always use opt_gid and opt_uid,
    set to those of the invoking user, when called as non-root.
    Closes: #431661.
  * Fix up fhs.patch for some new FHS regressions:
    - make sure all references to winbindd_idmap.tdb look in /var/lib/samba
    - make sure all references to winbindd_cache.tdb look in /var/cache/samba
    - share_info.tdb belongs in /var/lib/samba; this is a regression
      introduced in 3.0.23-1, so fix up this path on samba upgrade
    - move the ADS "gpo" cache directory to /var/cache/samba
    - move idmap_cache.tdb to /var/cache/samba, and fix up the path on
      winbind upgrade
  * linux-cifs-user-perms.patch: also support setting a default uid and gid
    value when mount.cifs is called as non-root
  * cifs-umount-trailing-slashes.patch: canonicalize mount point names when
    umount.cifs is called, to avoid unnecessarily leaving entries behind in
    /etc/mtab if invoked with a trailing slash in the mount point name
  * cifs-umount-same-user.patch: the CIFS_IOC_CHECKMOUNT ioctl check
    in umount.cifs assumed that errors would return a value > 0, when in fact
    the return value on failure is -1.  Correct this assumption, which was
    allowing any user to unmount shares mounted by other users.
  * smbpasswd-syslog.patch: Fix pam_smbpass to no longer call openlog()
    and closelog(), since this will interfere with syslogging behavior
    of the calling application.  Closes: #434372.
  * swat should depend only on inet-superserver, not update-inetd, per
    Marco d'Itri.

  [ Christian Perrier ]
  * debian/panic-action: bail out if there's no "mail" command
    Patch from the Ubuntu samba packagers.
  * debian/smb.conf: use the comment from Ubuntu package for the "valid users"
    setting of [homes] as a basis for ours. Ubuntu's wording is better.

  [ Peter Eisentraut ]
  * Don't ignore errors from make distclean, as per lintian check

  [ Debconf translations ]
  * Gujarati updated. Closes: #436215

 -- Steve Langasek <vorlon@debian.org>  Fri, 17 Aug 2007 18:38:58 -0700

samba (3.0.25b-1) unstable; urgency=low

  * New upstream version
  * Bugs fixed upstream:
    - correct default mentioned for "store dos attribute" in smb.conf(5)
      Closes: #367379
    - fix typo in pdbedit.c. Closes: #421758
    - fixed crashes in idmap_rid. Closes: #428411
    - misleading documentation in smb.conf(5). Closes: #218477
    - don't crash when no eventlog names are defined in smb.conf
      Closes: #424683
    - typography errors in manpages. Closes: #427865, #418811
    - fix compilation and linking of pam_smbpass.so. Closes: #430755
  * Drop patches that have been applied upstream:
    - nmbd-signalling.patch

 -- Christian Perrier <bubulle@debian.org>  Wed, 27 Jun 2007 15:12:13 +0200

samba (3.0.25a-2) unstable; urgency=low

  [ Debconf translations ]
  * Danish updated. Closes: #426773

  [ Christian Perrier ]
  * Clean out some remaining cruft that is not deleted
    by "make clean". Taken from Ubuntu patches.
  * Add missing userspace patches to properly pass uid and gid with 2.6
    kernels. See #408033 and upstream's #999 for rationale
  * Drop smbmount-unix-caps.patch as workaraound for #310982 as the issue
    is fixed in 2.4 and 2.6 kernels (2.6 kernels need
    missing_userspace_bugzilla999.patch, though)
    Closes: #408033
  * Add the samba-common and winbind packages to samba-dbg to get
    debugging symbols for winbindd, net, etc.
  * Replace all occurrences of ${Source:Version} by ${$binary:Version} in
    dependencies. All these were Arch:any depending on Arch:any (the only
    Arch:any depending on Arch:all already used ${source:Version}

  [ Steve Langasek ]
  * Update samba.config to not override user preference on passdb.tdb
    creation after initial configuration.  Closes: #350926.
  * Drop the last vestiges of the unified samba.patch; this reverts the
    change for bug #112195 which it's been determined has no actual security
    benefits, and drops the fix for bug #106976 which is superseded
    upstream.

  [ Debconf translations ]
  * Vietnamese updated.  Closes: #426979.

 -- Christian Perrier <bubulle@debian.org>  Wed, 13 Jun 2007 15:47:06 +0200

samba (3.0.25a-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream version
  * Bugs fixed upstream:
    - password expiration loog on samba domain controllers. Closes: #425083
    - no more login on samba servers that are members of samba domains
      Closes: #425680, #426002
    - users no longer have access according to their secondary groups
      on shares with "force group". Closes: #424629
  * Debian packaging fixes:
    - Enforce building with "--with-ads" and therefore fail
      when the build can't be done with kerberos support.
      Closes: #424637
    - debian/control: wrap long lines in packages' descriptions
    - uncomment out use of type-handling in the clean target, because
      type-handling has been fixed to support the new /usr/share/dpkg/ostable
    - avoid installing extra COPYING files in /usr/share/doc/* (one was
      installed along with the pcap2nbench example)
  * Merge Ubuntu changes:
    - use of PIDDIR instead of hardcoding it in samba.init and winbind.init
  * Patches to upstream source:
    - patches/fhs.patch: recreate winbindd_cache.tdb in the cache directory
      instead of the lock directory. Thanks to C. K. Jester-Young for the
      patch. Closes: #425640

  [ Steve Langasek ]
  * swat and samba depend on update-inetd instead of on netbase; swat also
    depends on "openbsd-inetd | inet-superserver", for samba this is only a
    Suggests.

 -- Christian Perrier <bubulle@debian.org>  Sun, 27 May 2007 09:30:02 +0200

samba (3.0.25-1) unstable; urgency=high

  * New upstream version including security fixes
  * Bugs fixed upstream:
    - nmbd no longer segfaults on bad interface line
      Closes: #265577, #386922, #359155, #366800
    - documentation issues about displaycharset. Closes: #350790
    - documentation makes it clear that case options such as
      "default case" can only be set on a per-share basis.
      Closes: #231229
    - all occurrences of "encypt" fixed in smb.conf(5)
      Closes: #408507
    - two typos on "account" fixed in source/passdb/pdb_ldap.c and
      source/utils/pdbedit.c. Closes: #402392
    - no longer panic when using the (deprecated) "only user" option
      in user level security. Closes: #388282
    - CVE-2007-2444 (User privilege elevation because of a local SID/Name
      translation bug)
    - CVE-2007-2446 (Multiple heap overflows allow remote code execution)
    - CVE-2007-2447 (Unescaped user input parameters are passed as
                     arguments to /bin/sh allowing for remote command
                     execution)

  [ Debconf translations ]
  * Marathi added. Closes: #416802
  * Esperanto added. Closes: #417795.
  * Basque updated. Closes: #418196.
  * Wolof updated. Closes: #421636

  [ Christian Perrier ]
  * /etc/dhcp3/dhclient-enter-hooks.d/samba tests for /etc/init.d/samba
    before running invoke-rc.d. Closes: #414841

  [ Steve Langasek ]
  * Comment out use of type-handling in the clean target, because
    type-handling is currently broken in unstable and clean shouldn't be
    editing debian/control anyway.

 -- Christian Perrier <bubulle@debian.org>  Mon, 14 May 2007 10:30:15 +0200

samba (3.0.24-6) unstable; urgency=high

  * Arrrgh, cut'n'paste error in the regexp in the last upload, so the bug
    is still present :/  Fix a missing ] in the regexp for passdb backend
    checking, really-closes: #415725.

 -- Steve Langasek <vorlon@debian.org>  Sat, 24 Mar 2007 03:32:46 -0700

samba (3.0.24-5) unstable; urgency=high

  * The "see what you get for trusting the quality of my packages,
    release team?  Release team, please unblock this package" release.
  * High-urgency brown-paper-upload for etch-targetted fix for
    regression introduced in the last version

  [ Steve Langasek ]
  * Fixed the regexp used for matching broken passdb backend settings,
    since we were getting false positives on *all* values. :/  The
    correct match should be: one or more non-space, non-comma
    characters, followed by a space or a comma, followed by zero or more
    spaces, followed by one or more non-space characters.  Closes: #415725.

  [ Debconf translations ]
  * Nepali
  * Korean; closes: #414883.
  * Russian
  * Arabic
  * Portuguese
  * Greek. Closes: #415122
  * Norwegian Nynorsk added.
  * Marathi added. Closes: #416802

 -- Steve Langasek <vorlon@debian.org>  Wed, 21 Mar 2007 13:49:46 -0700

samba (3.0.24-4) unstable; urgency=medium

  [ Steve Langasek ]
  * Documentation fix for a problem affecting upgrades from sarge: if
    passdb backend is still a comma- or space-separated list after any
    attempts at automatic fix-ups, throw a debconf error notifying the
    user that they'll need to fix this manually.  Closes: #408981.

  [ Debconf translations ]
  * French
  * Spanish
  * Galician; closes: #414605.
  * Swedish; closes: #414610.
  * Brazilian Portuguese; closes: #414603.
  * German; closes: #414630.
  * Norwegian Bokmål; closes: #414619.
  * Bulgarian; closes: #414624.
  * Romanian; closes: #414629.
  * Tagalog; closes: #414637.
  * Khmer; closes: #381833.
  * Thai; closes: #414664.
  * Slovak; closes: #414665.
  * Slovenian
  * Simplified Chinese; closes: #414671.
  * Japanese; closes: #414673.
  * Hungarian; closes: #414677.
  * Dzongkha; closes: #414680.
  * Estonian; closes: #414679.
  * Catalan
  * Malayalam; closes: #414728
  * Traditional Chinese; closes: #414730
  * Turkish
  * Italian; closes: #414708
  * Finnish; closes: #414736
  * Dutch; closes: #414741
  * Albanian; closes: #414778.
  * Czech; closes: #414793.

 -- Steve Langasek <vorlon@debian.org>  Tue, 13 Mar 2007 16:29:21 -0700

samba (3.0.24-3) unstable; urgency=low

  [ Christian Perrier ]
  * Merge some Ubuntu changes:
    - do not expose the Samba version anymore
    - default workgroup set to WORKGROUP (default workgroup of
      Windows workstations)
  * Fix FTBFS on GNU/kFreeBSD. Thanks to Petr Salinger for the patch
    Closes: #394830
  * Add commented "winbind enum*" settings in smb.conf
    This will point users to these important settings which changed
    their default behaviour between sarge and etch. Closes: #368251

  [ Steve Langasek ]
  * samba-common.dhcp: support creating /etc/samba/dhcp.conf the first
    time the script is called if the dhcp client was already running at
    the time of install, and manually reload samba to get the updated
    config files read.  Thanks to Bas Zoetekouw for the patch.
    Closes: #407408.
  * While we're at it, use atomic replace for /etc/samba/dhcp.conf just
    in case someone else reloads samba while the script is running.  Low
    impact, low-risk change.

 -- Steve Langasek <vorlon@debian.org>  Sun, 11 Mar 2007 23:34:10 -0700

samba (3.0.24-2) unstable; urgency=low

  * Re-upload with a proper .orig.tar.gz.

 -- Steve Langasek <vorlon@debian.org>  Mon,  5 Feb 2007 19:55:34 -0800

samba (3.0.24-1) unstable; urgency=high

  * New upstream release, security update
  * Fixes for the following security advisories:
    - Directly affecting Debian:
      - CVE-2007-0452 (Potential Denial of Service bug in smbd)
    - Not affecting Debian:
      - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind
        NSS library on Solaris)
      - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin)
  * Correct paths for the documentation pointers in the default smb.conf
    file. Thanks to Ted Percival for his care reporting this. Closes: #408898

 -- Christian Perrier <bubulle@debian.org>  Mon,  5 Feb 2007 05:27:07 +0100

samba (3.0.23d-4) unstable; urgency=low

  * Debconf translation updates:
    - Slovenian added.

 -- Christian Perrier <bubulle@debian.org>  Wed,  3 Jan 2007 08:43:50 +0100

samba (3.0.23d-3) unstable; urgency=low

  * Debconf translation updates:
    - Malayalam added. Closes: #403107
    - Tamil added. Closes: #403353

 -- Christian Perrier <bubulle@debian.org>  Mon,  1 Jan 2007 10:17:18 +0100

samba (3.0.23d-2) unstable; urgency=low

  * Build-Conflicts: libfam-dev to avoid problems accessing shares
    when using GAMIN. Closes: #400617
  * Lintian fixes:
    - Run debconf-updatepo in the clean target to ensure up-to-date PO
      and POT files
    - debian/patches/no_unbreakable_spaces_in_man.patch:
      Replace all non-breakable spaces by regular spaces in man pages.
      They are encoded in ISO-8859-1 which is not recommended in man pages.
      This should be submitted upstream.
    - reformat too long lines in package description

 -- Christian Perrier <bubulle@debian.org>  Sun,  3 Dec 2006 09:39:29 +0100

samba (3.0.23d-1) unstable; urgency=low

  * new upstream release (2006-11-15)

  [ Noèl Köthe ]
  * updated documentation.patch for 3.0.23d
  * updated non-linux-ports.patch for 3.0.23d
  * updated adapt_machine_creation_script.patch for 3.0.23d
  * updated autoconf.patch for 3.0.23d

  [ Debconf translations ]
  * Added Bosnian. Closes: #396634
  * Added Bulgarian. Closes: #397773

 -- Noèl Köthe <noel@debian.org>  Thu, 16 Nov 2006 13:55:26 +0100

samba (3.0.23c-4) unstable; urgency=low

  [ Debconf translations ]
  * Added Greek.
  * Added Gujarati. Closes: #394430
  * Added Korean. Closes: #394509
  * Added Nepali.
  * Updated Czech (typo fixed).
  * Added Wolof. Closes: #396079

 -- Christian Perrier <bubulle@debian.org>  Sun,  5 Nov 2006 09:42:40 +0100

samba (3.0.23c-3) unstable; urgency=low

  [ Debconf translations ]
  * Updated Catalan; thanks to Guillem Jover for his help
  * Updated Russian.
  * Updated Spanish. Add a missing word and correct the copyright header
  * Updated Vietnamese. Closes: #394164
  * Added Albanian. Closes: #393777
  * Added Chinese (Traditional).
  * Added Thai.

 -- Christian Perrier <bubulle@debian.org>  Sat, 21 Oct 2006 10:44:11 +0200

samba (3.0.23c-2) unstable; urgency=low

  [ Debconf translations ]
  * Updated Swedish. Closes: #386510.
  * Updated Japanese. Closes: #386534.
  * Updated Italian. Closes: #386691.
  * Updated Romanian. Closes: #388254.
  * Updated German. Closes: #389072.
  * Updated Brazilian Portuguese. Closes: #389097.
  * Updated Basque. Closes: #389722.
  * Updated Turkish. Closes: #390887
  * Updated Danish. Closes: #390878
  * Updated German. Closes: #390813
  * Updated Simplified Chinese. Closes: #390959
  * Updated Arabic.
  * Updated Spanish. Closes: #391735
  * Updated Dutch. Closes: #392082
  * Added Slovak. Closes: #386847.
  * Added Finnish. Closes: #390150.
  * Added Estonian. Closes: #391102.
  * Added Norwegian Bokmål. Closes: #391692
  * Added Hungarian. Closes: #391746

  [ Steve Langasek ]
  * Change the Maintainer field at last to the mailing list... gives
    our spam rules some testing, in response to popular demand :)
  * Check for update-inetd on purge before trying to invoke it;
    closes: #388606.

  [ Peter Eisentraut ]
  * Make swat binNMU-safe by using ${source:Version} for dependency on
    samba-doc
  * Make samba-common owner of /var/{cache,log,run}/samba, let samba and
    winbind only delete files they know they're exclusive owners of.
    Closes: #370718.
  * Use python-central to manage installation of python-samba.
    Closes: #386499.  (patch by Patrick Winnertz)
  * Use upstream makefile to install Python module.
  * Build-Depend on python-dev instead of python-all-dev.
  * Removed old upgrade support.
  * Remove possibly leftover comma from "passdb backend" setting in
    smb.conf on upgrade. Closes: ##383307.
  * Added libpam-smbpass logcheck file by martin f krafft.
    Closes: #391487, #391916.

  [ Christian Perrier ]
  * Add LSB info to the init script

 -- Christian Perrier <bubulle@debian.org>  Thu, 12 Oct 2006 18:31:46 +0200

samba (3.0.23c-1) unstable; urgency=low

  [ Christian Perrier ]
  * New upstream version
  * Split out samba/run_mode with "__Choices".

  [ Noèl Köthe ]
  * corrected samba override disparity:
    samba-dbg_3.0.23b-2_i386.deb: package says priority is optional, override says extra.

  [ Debconf translations ]
  * Updated Galician. Closes: #383001.
  * Updated Danish. Closes: #383025.
  * Added Tagalog. Closes: #383039, #383252.
  * Updated Khmer.
  * Updated Arabic.
  * Updated Dzongkha. Closes: #383125.
  * Updated Vietnamese. Closes: #383126.
  * Updated Czech. Closes: #384760.

  [ Peter Eisentraut ]
  * Preseed configure result for method to detect interfaces in
    debian/config.cache; the test might otherwise fail if there are no
    interfaces configured at build time. Closes: #382429.
  * Refined panic-action script text. Closes: #382500.

 -- Noèl Köthe <noel@debian.org>  Mon, 04 Sep 2006 12:10:28 +0200

samba (3.0.23b-2) unstable; urgency=low

  [ Debconf translations ]
  * Updated Romanian. Closes: #382358
  * Updated Dzongkha. Closes: #382448, #382948
  * Updated Basque. Closes: #382456
  * Added Simplified Chinese. Closes: #382489

  [ Peter Eisentraut ]
  * Remove no longer functioning "guest" value from "passdb backend"
    setting in smb.conf on upgrade. Closes: #382296

  [ Steve Langasek ]
  * Drop code and debconf questions specific to upgrades from samba <= 2.2.
  * Reword some debconf translations as discussed on the list.
  * Rerun debconf-updatepo.
  * Switch debian/ca.po to UTF-8.
  * Restore some reverted strings for Galician, Czech, Brazilian Portuguese,
    Spanish, French, Italian, Catalan, Portuguese, Russian, and Japanese.
  * Update translations for Brazilian Portuguese, Spanish, French, Italian,
    Catalan, and Portuguese.

 -- Peter Eisentraut <petere@debian.org>  Mon, 14 Aug 2006 19:04:31 +0200

samba (3.0.23b-1) unstable; urgency=low

  * New upstream release

  [ Debconf translations ]
  * Updated Galician. Closes: #381988

 -- Noèl Köthe <noel@debian.org>  Tue, 08 Aug 2006 22:28:00 +0200

samba (3.0.23a-1) unstable; urgency=medium

  * New upstream release

  * Fixes the following Debian bugs:
    - winbind: panic()s when started outside of a domain context.
      Closes: #337070
    - Make smbclient -L use RPC to list shares, fall back to RAP.
      Closes: #168732
    - Potential hang in nmbd. Upstream bug #3779. Closes: #367472
    - Typos in "ldap group suffix" in smb.conf(5) (upstream #3780).
      Closes: #367507
    - Erroneous permissions checks after 3.0.10 -> 3.0.14a
      (upstream #2591). Closes: #307626
    - Anonymous memory exhaustion DoS (CVE-2006-3403). Closes: #378070
    - ImportError exception raised when trying to import samba.smb
      (upstream #3567). Closes: #350050
    - Changed references from pam_pwdb to pam_unix (upstream #3225).
      Closes: #206672
    - SWAT segfault (upstream #3702). Closes: #363523

  [ Adam Conrad ]
  * Fix typo in smb.conf that causes all samba apps to whine.
    Closes: #369782
  * Add myself to Uploaders, on the off chance that I might upload.

  [ Debconf translations ]
  * Add Galician translation of debconf templates. Closes: #361204, #369403
  * Add Basque translation of debconf templates. Closes: #375104
  * Add Romanian translation of debconf templates. Closes: #379246
  * Add Khmer translation of debconf templates. Closes: #381833
  * Add Dzongkha translation of debconf templates.
  * Updated Russian. Closes: #369375
  * Updated Czech. Closes: #369408
  * Updated Japanese. Closes: #369457
  * Updated Italian. Closes: #369587
  * Updated Swedish. Closes: #369730
  * Updated Dutch. Closes: #376515
  * Updated Vietnamese. Closes: #381557
  * Updated French.
  * Updated Brazilian.
  * Updated Portuguese. Closes: #372632
  * Updated Arabic.

  [ Christian Perrier ]
  * Add dependency on procps for samba, as ps is used in init scripts.
    Thanks to Bastian Blank for reporting. Closes: #365618
  * Rewrite debconf templates to be compliant with 6.5.2 of the Developer's
    Reference
  * Add support for /etc/default/winbind. Closes: #262313, #374411
    Thanks to Guido Guenther for the old patch and to Jérôme Warnier
    for reminding us about it.
  * Compile with --with-cifsmount which is now needed to properly compile
    mount.cifs and umount.cifs. See samba bug #3799

  [ Peter Eisentraut ]
  * Use debian/compat instead of DH_COMPAT
  * Updated Standards-Version to 3.7.2 (no changes needed)
  * Replaced libsmbclient shlibs file by dh_makeshlibs call, so the
    required ldconfig calls appear in the maintainer scripts
  * Adjusted debian/rules to get 3.0.23rc1 to build
  * Updated to debhelper level 5
  * Rearranged dh_strip calls so that build succeeds with
    DEB_BUILD_OPTIONS=nostrip. Closes: #288995
  * Create /var/spool/samba and use it as default printer spool.
    Closes: #275241
  * Made winbind init script more careful about returning proper exit code
  * Added winbindd_priv group as owner of winbindd_privileged directory.
    Closes: #307257
  * Python transition preparations: renamed package to python-samba,
    removed hardcoded references to Python version 2.3. Closes: #380939
  * Removed unwanted swat debconf warning
  * Put localized swat messages into /usr/share/samba, where swat looks for
    them. Closes: #376991

 -- Peter Eisentraut <petere@debian.org>  Mon,  7 Aug 2006 23:00:49 +0200

samba (3.0.22-1) unstable; urgency=medium

  [ Steve Langasek ]
  * New upstream release
    - CAN-2006-1059: fixes an information leak in logfiles of systems using
      winbind with log level >= 5.
  * Fix a typo in the default smb.conf (closes: #354495).

  [ Noèl Köthe ]
  * replacing SMB with SMB/CIFS in the descriptions like
    named on the samba.org webpage. Closes: #356335

 -- Steve Langasek <vorlon@debian.org>  Sun, 12 Mar 2006 22:40:28 +0100

samba (3.0.21c-1) unstable; urgency=low

  * New upstream release
  * add a few logon-related parameters as good and safe
    examples for *DC-type settings. Closes: #349051
  * add an example "add user script". Closes: #349050
  * drop outdated information from the smbfs package description
    Closes: #352828

 -- Christian Perrier <bubulle@debian.org>  Sat, 25 Feb 2006 11:58:45 +0100

samba (3.0.21b-1) unstable; urgency=low

  * The "Tridge" release: celebrates the 2005 Free Software Award winner

  * New upstream release

  * Upstream bugs fixed by the new upstream release:
    - Support changing expired passwords in
      pam_winbindd. Closes: #258302
    - vfs_full_audit fixes for multiple connections. Closes: #348419
    - crashes of smbd in security=server mode
      Closes: #346045, #346069, #350598, #351448

  [ Peter Eisentraut ]
  * Put correct paths for Debian installations into the man pages, and
    remove outdated swat setup instructions therein. Closes: #321005
  * Fix lintian overrides and install them into the right packages.
  * Remove swat inetd registration in remove, not purge. Closes: #313214
  * Add findsmb script. Closes: #231806
  * Fix sonames of libnss_win{bind,s}.so. Closes: #333290
  * Remove autoconf build dependency.
  * Remove remnants of old patch system.
  * Install smbumount setgid root. Closes: #253437
  * Add watch file.
  * Activate kernel oplocks. Closes: #218511
  * Disable PIE compilation. Closes: #346416

  [ Christian Perrier ]
  * activate building of idmap_rid. Closes: #284681.
    Thanks to Ubuntu patches
  * activate building of idmap_ad. Closes: #341814
  * modify the long description of the libsmbclient-dev package to
    avoid repeating the long description. Thanks, linda.

  [ Steve Langasek ]
  * Also enable setresuid()/setresgid() on alpha and sparc now that support
    for Linux 2.2 is dropped.

 -- Christian Perrier <bubulle@debian.org>  Mon,  6 Feb 2006 07:02:20 +0100

samba (3.0.21a-4) unstable; urgency=low

  [ Peter Eisentraut ]
  * Add umount.cifs. Closes: #340967
  * Really make mount.cifs and umount.cifs suid root. Closes: #340966

  [ Christian Perrier ]
  * Add "bind interfaces only" and "interfaces" options (commented)
    to the default smb.conf file. Closes: #349043

  [ Steve Langasek ]
  * Add missing changes to source/include/config.h.in into the
    autoconf.patch, so that samba looks for files in /var/lib/samba like it's
    supposed to instead of in /var/run/samba!  Closes: #349372, #349464.

 -- Steve Langasek <vorlon@debian.org>  Mon, 23 Jan 2006 00:59:20 -0800

samba (3.0.21a-3) unstable; urgency=low

  * Add Build-Depends on quilt (>= 0.40 as we use quilt.make)

 -- Christian Perrier <bubulle@debian.org>  Sat, 21 Jan 2006 23:02:32 +0100

samba (3.0.21a-2) unstable; urgency=low

  [ Christian Perrier ]
  * Switch to quilt for patches management. Refresh all patches so
    that they apply cleanly. Closes: #345557
  * debian/patches/adapt_machine_creation_script.patch:
    - adapt example machine creation script to Debian. Closes: #346234
  * winbind.dirs:
    - added /var/run/samba. Closes: #347585

  [ Peter Eisentraut ]
  * swat.links:
    - file added. Closes: #346001

  [ Noèl Köthe ]
  * fixed typo in panic-script. Closes: #348410

  [ Steve Langasek ]
  * debian/patches/autoconf.patch:
    - move changes to autogenerated files into their own patch now that we've
      lost the script that was calling autogen.sh for us; this also helps
      make debian/rules clean just a little bit cleaner.
  * debian/patches/fhs.patch:
    - fix new references to registry.tdb (closes: #348874).
    - also move account_policy.tdb, perfcount, and eventlog into /var/lib/samba
      where they belong

 -- Christian Perrier <bubulle@debian.org>  Fri, 20 Jan 2006 14:20:35 +0100

samba (3.0.21a-1) unstable; urgency=low

  [ Christian Perrier ]
  * *Really* make samba-doc suggest samba-doc-pdf. This change finally
    did not make it in the previous release.

  [ Noèl Köthe ]
  * new upstream release 3.0.21a
    - removed smbsh.1 from debian/rules
    - added new smbclient programm smbget (with conflict/replace
      to existing Debian smbget package)
    - added libsmbclient.7 to libsmbclient package
    - added umount.cifs.8 to smbfs package
    - added pam_winbind.7 to winbind package
    - added new /usr/bin/eventlogadm to samba package which is
      documented here http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt
    - fixed "cd command fails in smbclient". Closes: #307535
    - fixed "file descriptor leak". Closes: #339564
    - fixed "smbclient(1) doesn't list same options as
      smbclient usage statement". Closes: #154184
    - fixed "typo in smbmount.8". Closes: #260673
    - fixed "smbmount manual page doesn't have a link to
      smbumount". Closes: #297535
    - fixed "smb.conf man page references non-existent
      BROWSING.txt file". Closes: #316458
    - fixed "smb.conf - improve topic: hosts deny (S)". Closes: #273480
    - fixed "fails to manage groups containing spaces". Closes: #299592
    - corrected nonpic-libsmbclient.patch to apply
    - corrected fhs.patch to apply
  * added myself to Uploaders
  * Rewording of the panic action script. Closes: #335051
  * added missing swat translation to swat package

 -- Noèl Köthe <noel@debian.org>  Sun, 01 Jan 2006 12:45:33 +0100

samba (3.0.20b-4) unstable; urgency=low

  [ Christian Perrier ]
  * Remove the smbldap-tools-* directory from the examples of samba-doc
    as these tools exist as an independent package. Closes: #341934
  * Swedish debconf translation update. Closes: #342022
  * Preserve the local admin settings for run_mode in /etc/default/samba
    when upgrading. Closes: #234038, #267988, #269735
  * Winbind also must depend on lsb-base. Closes: #343379
  * Enable swat in inetd when installing it and remove it when
    uninstalling. Closes: #87905, #230936, #268429

  [ Peter Eisentraut ]
  * Added separate samba-doc-pdf package, suggested by samba-doc.
    Closes: #281971
  * Removed duplicate documentation in swat package, symlinked to
    samba-doc; swat now depends on samba-doc. Closes: #233447

 -- Christian Perrier <bubulle@debian.org>  Tue, 20 Dec 2005 17:08:20 +0100

samba (3.0.20b-3) unstable; urgency=low

  [ Steve Langasek ]
  * Drop the FHS transition code from the samba postinst, since it's
    not needed for upgrades from sarge (and most of it not for upgrades
    from woody).

  [ Noèl Köthe ]
  * libpam-smbpass dependency on samba-common
    Closes: #297923
  * Updated swedish debconf translation. Closes: #335784
  * Added Recommends: smbldap-tools. Closes: #227675

  [ Peter Eisentraut ]
  * Added doc-base support. Closes: #55580
  * Fixed dh_installexamples call so the debian/*.examples files are
    actually used.
  * Patched libpam-smbpass README to refer to examples directory.
    Closes: #215771

  [ Christian Perrier ]
  * Add a working passwd chat line to the default smb.conf file
    Closes: #269746
  * Add the profiles binary and man page to the shipped files. Closes: #225494
  * Add a dependency on samba-common for winbind and force versions to match
    Closes: #273007, #264855
  * Add /var/log/samba to winbind directories. Closes: #340833
  * Lintian cleaning:
    - Add a few lintian overrides to avoid lintian complaining
      for things done on purpose or just because it makes wrong assumptions
    - Corrected FSF address in debian/copyright
    - Make swat depend on netbase as it uses update-inetd in its postinst
      script
    - Correct shebang lines in config scripts
    - Remove an extra copy of the GPL in smbldap-tool examples in samba-doc
    - Minor correction in libsmbclient-dev description to avoid strictly
      repeating the short description in the long description
    - Call confmodule in swat.postinst as this is the only way to guarantee
      that the config script is run in all cases

 -- Christian Perrier <bubulle@debian.org>  Sat,  3 Dec 2005 07:30:40 +0100

samba (3.0.20b-2) unstable; urgency=low

  * Don't build with -gstabs any more; -g no longer gives a problematic
    size hit, and -gstabs is no longer supported on ia64.

 -- Steve Langasek <vorlon@debian.org>  Wed, 19 Oct 2005 19:02:44 -0700

samba (3.0.20b-1) unstable; urgency=low

  * Christian Perrier:
    - Debconf translations:
      - Added Vietnamese. Closes: #317876
      - Updated German. Closes: #322907
  * Steve Langasek:
    - Use ${misc:Depends} in debian/control instead of depending on
      debconf directly, allowing use of cdebconf as an alternative.
      Closes: #332088.
  * Noèl Köthe
    - corrected libsmbclient priority to optional. Closes: #310045
    - corrected the path of ServerType.html in smb.conf. Closes: #296500
    - updated Standards-Version to 3.6.2 (no changes needed)
    - added homepage to description
    - switched init scripts (samba and winbind) to lsb-functions
      (took patches from ubuntu)
    - added Swedish. Closes: #331437
    - removed outdated "guest" value in "passdb backend" in default smb.conf
      Closes: #289519
    - moved smbpasswd(5) to samba-common where the binary and smbpasswd(8)
      is; Replaces: all previous versions of samba.  Closes: #253603
    - new upstream release 3.0.20b (from 2005-10-13). Closes: #324515
      - support for Windows Vista. Closes: #323489
      - Mac OS Tiger Problem fixed. Closes: #309836
      - BUG 2688: re-implement support for the -P (--port) option.
        Closes: #307746
      - "man smb.conf" warnings fixed. Closes: #266320
      - testprns removed by upstream so removed in samba.files
      - corrected docs/*.pdf names (samba-doc.docs)
      - corrected diagnosis.html path (samba.docs)
      - removing patches which are included upstream:
        dos7-xcopy-always-copies-files.patch
           (* BUG 2622: Remove DPTR_MASK as it makes no sense.)
        hide-special-file-fix.patch
           (* Hide dot files and directory logic fixes.)
        rap-printing-bigendian.patch
           (* BUG 1998: Correct byte ordering bug when storing
              16-bit RAP print job ids.)
        smbclient-vfat-loop.patch
        smbclient-vfat-loop2.patch
           (* BUG 2698: Fix infinite listing loop in smbclient
              caused by an invalid character set conversion.)
      - fixed the following patches which didn't applied cleanly
        fhs.patch
        non-linux-ports.patch

 -- Steve Langasek <vorlon@debian.org>  Tue, 18 Oct 2005 19:02:21 -0700

samba (3.0.14a-6) unstable; urgency=low

  * Use DEB_HOST_ARCH_OS instead of DEB_HOST_GNU_SYSTEM to detect
    Linux in debian/rules, for compatibility with dpkg-dev >= 1.13.9;
    add a versioned build-depend accordingly.  Closes: #315955
  * Switch to libreadline5.

 -- Steve Langasek <vorlon@debian.org>  Fri,  1 Jul 2005 00:13:12 -0700

samba (3.0.14a-5) unstable; urgency=low

  * Fix libsmbclient.a to be built as non-PIC instead of PIC.
    Closes: #279243.

 -- Steve Langasek <vorlon@debian.org>  Wed,  8 Jun 2005 05:46:52 -0700

samba (3.0.14a-4) unstable; urgency=high

  * Last-minute upload for sarge, because I don't listen to anything
    that RM guy says
  * Patch smbmount to strip CAP_UNIX out of the capabilities passed to
    the kernel when uid, gid, dmask, or fmask options have been
    specified; this keeps the mount permissions from changing out from
    under the user when upgrading to a server (or to a kernel) that
    supports unix extensions.  Closes: #310982.
  * Second patch to smbclient search continuation logic, from upstream:
    preserve the original UCS2 filename to guard against lossy
    conversions, and break out if we find ourselves looping.
    Closes: #311157.
  * Upstream fix to make print job cancellations work on big-endian
    systems when talking to RAP-style clients (i.e., smbclient).
    Closes: #311213.
  * Add build-dependency on libpopt-dev, so that we consistently use the
    system popt lib instead of the bundled one.

 -- Steve Langasek <vorlon@debian.org>  Thu,  2 Jun 2005 07:02:46 -0700

samba (3.0.14a-3) unstable; urgency=high

  * Urgency set to high for a bug that makes smbclient/libsmbclient
    /almost/ mostly unusable
  * Fix smbclient's search continuation logic so that it works correctly
    against 2K servers offering VFAT-hosted shares; many thanks to
    Jeremy Allison for the timely upstream fix.  Closes: #309798.
  * Update pt_BR debconf translation.  Thanks to Andre Luis Lopes
    <andrelop@debian.org>. (closes: #308510)
  * Add Russian debconf translation, thanks to Yuriy Talakan
    <yt@amur.elektra.ru>. (closes: #310063)

 -- Steve Langasek <vorlon@debian.org>  Thu, 26 May 2005 23:37:57 -0700

samba (3.0.14a-2) unstable; urgency=low

  * Point the sense of the file_is_special() check right way around;
    thanks to Matthijs Mohlmann for catching this.  Closes: #305747.
  * debian/patches/dos7-xcopy-always-copies-files.patch:
    Fix the MS-DOS 7 XCOPY copying files over and over bug
    Closes: #309003
  * Steve Langasek <vorlon@debian.org>:
    - Add Christian Perrier to Uploaders:.  Thanks, Christian :)

 -- Steve Langasek <vorlon@debian.org>  Sun,  8 May 2005 04:43:21 -0700

samba (3.0.14a-1) unstable; urgency=low

  * New upstream version
    - A more complete upstream fix for missing files in file listings,
      should really give us working (closes: #302771); drop
      xp-missing-files.patch, which has been superseded.
  * Use the right path when removing mount.cifs binary in the clean
    target.  Closes: #303318.

 -- Steve Langasek <vorlon@debian.org>  Mon, 18 Apr 2005 03:22:29 -0700

samba (3.0.11-1) unstable; urgency=high

  * New upstream version
    - Fixes duplicated entry in swat(8) manpage (closes: #292957).
    - Fix queue handling so that processes serving print clients don't
      spin off into infinity and clobber the system (closes: #274969).
    - Make sure we use C-locale toupper/tolower functions for case
      conversion, since Turkish pairing rules are incompatible
      (closes: #286174).
  * Fix logrotate script to exit true instead of false when nmbd.pid is
    missing (closes: #287263).
  * Added Portuguese debconf translation. Thanks to Miguel Figueiredo
    <elmig@debianpt.org>. (closes: #286375)
  * Added Italian debconf translation. Thanks to Luca Monducci
    <luca.mo@tiscali.it>. (closes: #284125)
  * Add support for building on the Debian BSD and Hurd ports; thanks to
    Robert Millan for the patch. (closes: #266693)
  * debian/patches/xp-missing-files.patch: import patch from upstream to
    fix missing entries in directory listings when talking to WinXP
    servers (closes: #297771).

 -- Steve Langasek <vorlon@debian.org>  Wed, 23 Mar 2005 00:13:16 -0800

samba (3.0.10-1) unstable; urgency=high

  * New upstream release.
    - CAN-2004-1154: integer overflow can lead to remote code execution
      by authenticated users; closes: #286023.
  * High-urgency upload for sarge-targetted RC bugfix.
  * Sync the fhs.patch to samba 3.0.10.
  * Install mount.cifs suid root, to make user mounts possible
    (closes: #283819).
  * debian/patches/cups.patch: Change the default printing system, so we
    can compile in CUPS support without making it the default -- CUPS is
    not a reasonable default on Debian, at least for sarge.

 -- Steve Langasek <vorlon@debian.org>  Fri, 17 Dec 2004 11:56:01 -0800

samba (3.0.9-1) unstable; urgency=low

  * New upstream release
    - Fixes Win9x printing; closes: #283530, #282571, #283818.
    - Fixes a problem with setting dosmodes on filesystems without ACL
      support; closes: #283661.
    - Drop ldapsam_compat.patch, redundant now that a fix is integrated
      upstream

 -- Steve Langasek <vorlon@debian.org>  Thu,  2 Dec 2004 01:11:39 -0800

samba (3.0.8-2) unstable; urgency=low

  * Fix the module paths for python2.3-samba so that "import foo from samba"
    works, and include the __init__.py glue; closes: #222867).
  * Enable quota support; closes: #246839.
  * Fix missing symbols in libsmbclient (and libnss_wins), and add
    -Wl,-z,defs to the libsmbclient link options to prevent future
    instances of undefined symbols (closes: #281181).
  * Fix for the legacy ldapsam_compat backend; thanks to Fabien
    Chevalier for the patch (closes: #274155).

 -- Steve Langasek <vorlon@debian.org>  Mon, 15 Nov 2004 06:54:13 -0800

samba (3.0.8-1) unstable; urgency=high

  * New upstream package. Urgency set to "high" because of a potential
    Denial of Service vulnerability in previous 3.0.x releases
    (CAN-2004-0930). (Eloy)
  * Introduce new -dbg package, so we can make better sense out of the
    cleverly-supplied backtrace emails. (Vorlon)
  * Applied patch from Luke Mewburn <luke@mewburn.net> to fix missing
    lock_path() to state_path() change in the FHS patches. (Eloy)

 -- Eloy A. Paris <peloy@debian.org>  Mon,  8 Nov 2004 13:39:34 -0500

samba (3.0.7-2) unstable; urgency=high

  * High-urgency upload for sarge-targetted RC fixes.
  * Use autogen.sh in unpatch-source as well as in patch-source, to get
    rid of the autom4te.cache cruft.
  * debian/patches/make-distclean.patch: add some missing files to the
    distclean target in source/Makefile.in (mostly-fixes: #276203).
  * Change compile-time default of 'use sendfile' to 'no', since the
    current Samba implementation is broken (closes: #261917, #275741,
    #270175).
  * Add mount.cifs into the smbfs package; thanks to Igor Belyi for
    showing us just how simple this patch should be. ;)  Since cifs is
    the preferred kernel driver in 2.6, bugs related to smbfs and 2.6
    are considered closed unless someone can show that they exist with
    the cifs driver as well (closes: #249890, #269443, #227791, #236869,
    #260707, #261808, #270175).
  * Fix FHS migration code so that it only affects upgrades from old
    package versions, and doesn't cause us to mess with non-standard
    directories that may have been re-added by the admin
   (closes: #251858).

 -- Steve Langasek <vorlon@debian.org>  Tue, 26 Oct 2004 01:35:23 -0700

samba (3.0.7-1) unstable; urgency=high

  * New upstream release. This release fixes two possible denial of
    service conditions; one in nmbd and one in smbd. The CVE numbers
    for these vulnerabilities are:

    CAN-2004-0807 for the smbd DoS
    CAN-2004-0808 for the nmbd DoS

    Urgency is set to "high" because of these vulnerabilities; so this
    new release propagates to testing ASAP.

    Thanks to the Samba Team and the Debian Security Team for the
    heads up.
  * Remove post-3.0.6 patches that are now in 3.0.7.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 13 Sep 2004 00:53:38 -0400

samba (3.0.6-4) unstable; urgency=low

  * Update LDAP schema (closes: #269797).
  * Applied a couple of upstream fixes that will be present in Samba 3.0.7.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  7 Sep 2004 15:28:42 -0400

samba (3.0.6-3) unstable; urgency=low

  * Put libsmbclient where it belongs, in /usr/lib. (closes: #267704)

 -- Eloy A. Paris <peloy@debian.org>  Wed, 25 Aug 2004 01:58:37 -0400

samba (3.0.6-2) unstable; urgency=low

  * Added Danish debconf translation. Thanks to Claus Hindsgaul
    <claus_h@image.dk>. (closes: #232884)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Aug 2004 17:24:19 -0400

samba (3.0.6-1) unstable; urgency=low

  * New upstream version.
  * Incorporate Turkish debconf translation; thanks to Recai Oktas
    <roktas@omu.edu.tr>. (closes: #252031)
  * Update pt_BR debconf translation. Thanks to Andre Luis Lopes
    <andrelop@debian.org>. (closes: #208113)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Aug 2004 12:34:44 -0400

samba (3.0.5-2) unstable; urgency=high

  * Patches from Fabien Chevalier <fabien.chevalier@supelec.fr>
    to fix:
    + libnss_wins crashes other programs (closes: #252591)
    + Can't list share files/dirs, but can acces deeper files/dirs
      (closes: #264572)
    + Samba 3.0.5 Printserver doesn't work with WinXP SP2 (closes: #265871)
  * Urgency "high" to make it into testing as soon as possible since
    at least #265871 is pretty bad now that WinXP SP2 has been released.
    Thanks for the help Fabien! Both Vorlon and I have been very busy
    lately.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 18 Aug 2004 13:25:41 -0400

samba (3.0.5-1) unstable; urgency=high

  * New upstream version. Urgency "high" because of potential buffer
    overflows. The security fixes are the only difference between
    3.0.4 and 3.0.5.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 22 Jul 2004 08:07:36 -0400

samba (3.0.4-5) unstable; urgency=low

  * Doh! Build-depends on libcupsys2-dev (>=1.1.20final+cvs20040330-4),
    not an unversioned libcupsys2-dev. (closes: #250523)

 -- Eloy A. Paris <peloy@debian.org>  Tue, 25 May 2004 07:43:54 -0400

samba (3.0.4-4) unstable; urgency=low

  * Rebuilt with libcupsys2-gnutls10 for unstable.
    Closes: #250424, #250483, #250491, #250515, #250523, #250592, #250736
    Closes: #250742, #250733

 -- Eloy A. Paris <peloy@debian.org>  Mon, 24 May 2004 22:32:52 -0400

samba (3.0.4-3) unstable; urgency=low

  * Color me stupid; I uploaded an experimental version to unstable.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 22 May 2004 00:40:58 -0400

samba (3.0.4-1) unstable; urgency=low

  Eloy:

  * New upstream version.
    Closes: #247640 (New upstream version available)
    Closes: #238905 (Printing crash fix)
    Closes: #247090 (panic in viewing printerqueue)

  Vorlon:

  * Incorporate Catalan debconf translations; thanks to
    Aleix Badia i Bosch <abadia@ica.es> and the Debian L10n Catalan Team.
    (closes: #236640)
  * Incorporate Czech debconf translations; thanks to
    Miroslav Kure <kurem@upcase.inf.upol.cz> (closes: #236274).
  * Update libsmbclient shlibs, due to an incompatibility with older
    versions that prevents gnome-vfs from working correctly
    (closes: #245869).

 -- Eloy A. Paris <peloy@debian.org>  Fri, 21 May 2004 11:42:19 -0400

samba (3.0.2a-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 24 Feb 2004 10:30:47 -0500

samba (3.0.2-2) unstable; urgency=high

  * Apply patch from Urban Widmark <urban@teststation.com> to prevent
    users from mounting remote filesystems containing suid files
    (closes: 232327).  This represents an exploitable security hole on
    systems running Linux 2.6 kernels.

 -- Steve Langasek <vorlon@debian.org>  Thu, 12 Feb 2004 21:38:40 -0600

samba (3.0.2-1) unstable; urgency=high

  * New upstream release.
    - LaMont Jones: correct false failure LFS test that resulted
      in _GNU_SOURCE not being defined (thus resulting in strndup()
      not being defined) (closes: #226694)
    - Segfault fixes. (closes: #230012) (maybe more, but we need bug
      reporters to confirm.)

    Urgency "high" due to a password initialization bug that could grant
    an attacker unauthorized access to a user account created by the
    mksmbpasswd.sh shell script. See WHATSNEWS.txt for details and
    workarounds for those not wishing to upgrade (which is a bad idea
    anyway since this new release fixes lots of other bugs.)

 -- Eloy A. Paris <peloy@debian.org>  Sun,  8 Feb 2004 10:06:29 -0500

samba (3.0.1-2) unstable; urgency=low

  * Include ntlm_auth's man page.
  * Don't create directories outside of the source directory during
    package build time. (closes: #227221, #227238, #225862)
  * Don't include the "Using Samba" book in the swat package, just a
    symlink that points to the book included in the samba-doc package.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 13 Jan 2004 13:48:13 -0500

samba (3.0.1-1) unstable; urgency=low

  * New upstream version (closes: #225565)
  * Add support in the dhcp hook for netbios scope, and handle better
    the case of multiple DHCP-using interfaces (closes: #224109).
  * Use "tail -n 1 ..." instead of "tail -1 ..." so POSIX-compliant
    tail works. Thanks to Paul Eggert <eggert@twinsun.com>.
  * Include /usr/bin/ntlm_auth in the winbind package.
  * Run configure with "--with-piddir=/var/run/samba" since the
    default got changed to /var/run in this new upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 30 Dec 2003 16:21:31 -0500

samba (3.0.0final-1) unstable; urgency=low

  * It's here, it's here, it's here, Samba 3.0.0 is here!
  * Incorporate Japanese debconf translations; thanks to Kenshi Muto
    <kmuto@debian.org>. (closes: #209291)

 -- Eloy A. Paris <peloy@debian.org>  Thu, 25 Sep 2003 13:39:28 -0400

samba (3.0.0beta2+3.0.0rc4-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 13 Sep 2003 08:47:56 -0400

samba (3.0.0beta2+3.0.0rc3-1) unstable; urgency=low

  * New upstream release. Last Release Candidate according to the
    Samba Team. Samba 3.0.0 is around the corner, in a week or so.
    - Fixes use of non-PIC code in nss shared libraries (closes: #208773)
    - 'unix password sync' option now runs the unix password program as
      root again (closes: #209739).
  * One-line patch to make packages buildable with distcc (closes: #210227)

 -- Eloy A. Paris <peloy@debian.org>  Tue,  9 Sep 2003 07:57:16 -0400

samba (3.0.0beta2+3.0.0rc2-1) unstable; urgency=low

  * New upstream release.
  * Link against libgnutls7 instead of libgnutls5. (closes: #208151)

 -- Eloy A. Paris <peloy@debian.org>  Tue,  2 Sep 2003 21:37:13 -0400

samba (3.0.0beta2+3.0.0rc1-1) unstable; urgency=low

  * New upstream version (skipped samba 3.0.0beta3 due to time
    constraints.) This ugly version number will go away when the final
    Samba 3.0.0 is released.
  * Drag new unpackaged tools into the packages: smbcquotas (smbclient),
    vfs modules (samba), smbtree(1) manpage (smbclient), tdbbackup(8)
    manpage (samba). (closes: #151158)
  * Switch to DH_COMPAT level 4:
    - no explicit conffile listings needed
    - the postinst for libsmbclient is now completely autogenerated
    - use the default init script handling (with support for
      invoke-rc.d) in debhelper, instead of the currently buggy upgrade
      path (closes: #185439)
    - add support for ${misc:Depends} in control for those packages with
      init scripts
  * Add versioned dependency on libpam-runtime and change
    /etc/pam.d/samba to use the new common PAM config blocks.
  * New python2.3-samba package (old python2.2-samba is no more.)
    (closes: #206171)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 25 Aug 2003 17:05:14 -0400

samba (3.0.0beta2-1) unstable; urgency=low

  * New upstream release
    - The smb.conf(5) manpage documents config options again
      (closes: #197963).
    - Handling of winbind/idmap has been restructured; domain members
      should be able to map domain accounts to local accounts again
      (closes: #196815).
    - Use the locale charset for 'display charset' by default
      (closes: #194406).
    - Fix for segfault in smbclient when using the -b option
      (closes: #196833).
    - Handle an empty 'passdb backend' list gracefully (closes: #193946).
  * Don't set 'display charset' anymore on upgrade, since this is now
    grabbed from the locale by default -- a much better option.
  * Removed time.c.patch which is now in the upstream sources.
  * Update FHS patch for two new tdb files (netsamlogon_cache.tdb,
    privilege.tdb).
  * Remove python-linker.patch, since the Kerberos package has been
    fixed to no longer use rpath
  * Remove configure.patch: the hppa glibc bug this was added for is
    long since fixed, and upstream isn't interested in supporting this
    kludge.
  * Update references to missing documentation in sample smb.conf file
    (closes: #187632).
  * Fix handling of krb5 link line, building on a patch from Stefan
    Metzmacher <metze@metzemix.de>.
  * Add patch so smbclient's tar support works with popt
    (closes: #194921).

 -- Steve Langasek <vorlon@debian.org>  Wed,  2 Jul 2003 20:59:09 -0500

samba (3.0.0beta1-2) unstable; urgency=low

  * Update build-deps to libacl1-dev (>= 2.2.11-1), libacl1 (>= 2.2.11-1)
    to make sure we get the right shlib dependencies (closes: #193149).
  * Update the dhcp config hooks so they're suitable for sourcing (i.e.,
    don't call "exit") (closes: #196477).
  * Bring package into line with current policy by adding support for
    the DEB_BUILD_OPTIONS flag, and enabling debugging symbols (-gstabs)
    by default
  * Make sure libpam-smbpass is a self-contained DSO.
  * Fix a typo in samba-common.dhcp that caused us to spuriously rewrite
    the server list.
  * Fix python install script to ignore -Wl linker flags, as seen in the
    output from the latest krb5-config.
  * Add LDAP and Unicode information about upgrading from 2.2 to
    README.debian.
  * Remove dangerous and confusing browse options from the default
    smb.conf (closes: #198804).
  * Reorder smb.conf options for clearer grouping, and clarify the
    comments.
  * Add a default [print$] share to the sample smb.conf, and create the
    necessary tree under /var/lib/samba/printers. (closes: #168173)
  * s/winbind/idmap/ in smb.conf, since the option names have changed.
  * Fix the patch for postexec handling, so that we chdir("/") at the
    right time.

 -- Steve Langasek <vorlon@debian.org>  Thu, 12 Jun 2003 15:02:00 -0500

samba (3.0.0beta1-1) unstable; urgency=low

  * New upstream version.
    - fix for empty browselist bug (closes: #194553)
    - fix for tab completion segfault in smbclient (closes: #194776)
    - Samba now works as a domain member again without segfaulting
      (closes: #194134, #194394, #194775)
    - WinXP machines can join a Samba-controlled domain again
      (closes: #195362)
  * Build-depend on python-dev >= 2.2 instead of on just python-dev
    (without version).
  * Added Vorlon'n patch to source/lib/time.c to fix #194075.
    (closes: #194075)

 -- Eloy A. Paris <peloy@debian.org>  Sun,  8 Jun 2003 22:26:43 -0400

samba (2.999+3.0.alpha24-3) unstable; urgency=low

  * Make sure Samba DSOs are compiled with -fPIC. (closes: #194324)
  * Rebuild against pristine Kerberos libs, to squelch warnings about
    versioned symbols. (closes: #194431, #194396)

 -- Steve Langasek <vorlon@debian.org>  Thu, 22 May 2003 15:32:00 -0500

samba (2.999+3.0.alpha24-2) unstable; urgency=low

  * Fixed description of the smbfs package. (closes: #194183)
  * Negate the sense of the unixsam check when upgrading. (closes: #194234)

 -- Steve Langasek <vorlon@debian.org>  Wed, 21 May 2003 12:21:53 -0400

samba (2.999+3.0.alpha24-1) unstable; urgency=low

  * New upstream version. (closes: #189354)

 -- Eloy A. Paris <peloy@debian.org>  Tue, 20 May 2003 13:55:57 -0400

samba (2.999+3.0.alpha23-5) unstable; urgency=low

  * Move the python package from section "net" to section "python".
  * Make sure we use PIC code for python on all platforms.
  * French translation of an additional debconf template, courtesy of
    Christian Perrier <bubulle@debian.org>. (closes: #188832)
  * Updated Brazilian Portuguese translation from André Luís Lopes
    <andrelop@ig.com.br>.
  * s/unixsam/guest/ everywhere, since the unixsam backend is now
    deprecated. (closes: #190095)
  * Create our temp config file as /etc/samba/smb.conf.dpkg-tmp; not
    only does using /tmp violate SELinux policies, it introduces the
    possibility of data loss during the final copy if /tmp is a separate
    filesystem. (closes: #189823)
  * Pull in fix for SWAT, so that logins work again
    (closes: #188255, #192077).
  * Move passdb.tdb into /var/lib/samba, since it's not user-editable.
  * Make sure with don't ship any .cvsignore files.
  * Don't ship examples for python2.2-samba and samba-doc in an
    "examples" directory inside another "examples" directory.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  6 May 2003 12:05:46 -0400

samba (2.999+3.0.alpha23-4) unstable; urgency=low

  * Instead of s/LPT1:/LPT:/, we need to do s/LPT:/LPT1:/ -- now all
    non-RPC printing clients are working again.
  * Change shlibs to 0 instead of 0.1.  The library already in the
    archive is using this soname, and there are no packages depending
    on libsmbclient, so skip changing the package name for now.
    (closes: #188661)

 -- Steve Langasek <vorlon@debian.org>  Fri, 11 Apr 2003 14:42:00 -0500

samba (2.999+3.0.alpha23-3) unstable; urgency=low

  * Put the Samba Python modules in /usr/lib/python2.2/site-packages/,
    not in /usr/lib/python2.2/lib-dynload/.

 -- Eloy A. Paris <peloy@debian.org>  Wed,  9 Apr 2003 19:49:25 -0400

samba (2.999+3.0.alpha23-2) unstable; urgency=low

  * New package python2.2-samba that includes the Python modules
    included in the Samba sources. Feedback on these modules and the new
    package is welcome, as we (Debian Samba maintainers) don't use them.
    (closes: #170731, #173322)
  * Move libsmbclient-dev from section "devel" to "libdevel".
  * Fix panic action script to give a sensible error message instead of
    an empty backtrace when we don't have permission to attach to the
    process. (closes: #188164)
  * Fix libpam-smbpass so that it really does something. (closes: #178245)
  * Apply patch to fix printing-related segfaults. (closes: #188076)

 -- Eloy A. Paris <peloy@debian.org>  Sun,  6 Apr 2003 21:40:33 -0400

samba (2.999+3.0.alpha23-1) unstable; urgency=high

  * new upstream release, includes security fix for DSA-262
  * tweak the debconf templates to avoid references to specific
    front-ends (closes: #183718)

 -- Steve Langasek <vorlon@debian.org>  Sun,  9 Mar 2003 14:58:00 -0600

samba (2.999+3.0.alpha21-5) unstable; urgency=low

  * touch up the package descriptions a little bit (caps, punctuation)
  * remove addtosmbpass, which snuck back in when we weren't looking
  * reverse the position of the wins server tag, after looking more
    closely at the code (closes: #183061)
  * fix a glitch in the Spanish .po that rendered it invalid, plus a typo
  * updated Brazilian Portuguese templates (closes: #183295)
  * fix a typo in upstream manpage (s/shave/share/) (closes: #180546)
  * run sed before we run sed, to deal with crazybad special chars
    in the workgroup name (!) (closes: #176717)

 -- Steve Langasek <vorlon@debian.org>  Sat,  1 Mar 2003 15:14:00 -0600

samba (2.999+3.0.alpha21-4) unstable; urgency=low

  * add scripts to samba-common to grab the netbios-name-servers options
    if we're running a DHCP client (closes: #38413)
  * major rearrangement of build scripts: install target now operates on
    debian/tmp, not debian/samba, so we can see when new files are
    added and decide where to put them; several files that should have
    been in samba-common but were in samba (for the above reason) --
    smbcacls, -- have been moved, with a replaces: added.
  * Fix rc script so that whitespace is consistent between inetd and
    daemon modes (closes: #174677).
  * smbclient -M must always connect to port 139, because port 445
    doesn't support messaging and we can't do the port 135 stuff yet
    (closes: #175292, #167859).
  * Import the diff from upstream CVS, which has fixed a few bugs
    (closes: #178219, #177583, #181467, #181487, #181603, #175864).
    Remove a few patches of ours which are now superseded.
  * Add po-debconf support to the tree, for better i18n.
  * Install the libsmbclient.so symlink in the libsmbclient-dev package,
    per policy (closes: #181466).

 -- Steve Langasek <vorlon@debian.org>  Fri, 27 Dec 2002 00:37:00 -0600

samba (2.999+3.0.alpha21-3) unstable; urgency=low

  * Drop --with-ldapsam from the configure options, since this no longer
    means what we thought it did.  Revert patch for changing the 'passdb
    backend' defaults.
  * Add patch from CVS HEAD to fix pdbedit segfault; postinst script
    should work better now. (Closes: #173936)

 -- Steve Langasek <vorlon@debian.org>  Sun, 22 Dec 2002 13:29:00 -0600

samba (2.999+3.0.alpha21-2) unstable; urgency=low

  * add CONFIGDIR to the set of directories exported in the install
    target, so we don't try to write to /etc/ on the autobuilders.
  * Reset the default 'passdb backend' value to something sensible, so
    that we don't unnecessarily break upgrading systems (closes: #173731).

 -- Steve Langasek <vorlon@debian.org>  Fri, 20 Dec 2002 09:13:00 -0600

samba (2.999+3.0.alpha21-1) unstable; urgency=low

  * new upstream release, many patches now incorporated upstream

 -- Steve Langasek <vorlon@debian.org>  Mon, 16 Dec 2002 23:39:00 -0600

samba (2.999+3.0.alpha20-4) unstable; urgency=low

  * Remove obsolete comments about non-existant LDAP support in the
    Debian Samba packages. (Closes: #165035)
  * Apply patch for segfault in pam_smbpass when using the unixsam
    backend.
  * Drop support for nmbd in inetd, since it's not supported by
    upstream and is reported to cause problems (closes: #23243, #137726,
    165037).
  * Clarify example printing configs in smb.conf (closes: #168174).
  * Make sure nmbd still responds to SIGTERM if it has no interfaces to
    listen on (closes: #168079).
  * Fix to get samba working again on 64-bit archs, after a
    pointer<->int size mismatch bug.  Already fixed in upstream CVS.
  * Merge fix from CVS for broken libsmbclient.h references to internal
    structures (closes: #162956).
  * Add a default 'panic action' for Samba that will give us genuinely
    useful debugging information after a crash.
  * Fixed correct patch to example configurations in the libpam-smbpass
    packages (closes: #169350).
  * acl-dev is not in sid anymore; Build-Depend on libacl1-dev instead
    (closes: #169682).
  * Only ask the user for permission to edit if there's a chance of us
    damaging something.

 -- Steve Langasek <vorlon@debian.org>  Mon, 18 Nov 2002 19:53:00 -0500

samba (2.999+3.0.alpha20-3) unstable; urgency=low

  * Make sure smbstatus behavior is sane when Samba *has* been started,
    as well as when it has not (closes: #164179).  Thank to Robbert Kouprie
    <robbert@radium.jvb.tudelft.nl> for this patch.
  * Not using 'killall' in any of the maintainer scripts (the last one
    remaining was winbind.logrotate.) We now just use 'kill' to send
    a SIGHUP to a specific PID (which is stored in a file in
    /var/run/samba.)
  * Do not depend on procps because we're not using killall anymore.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 15 Oct 2002 22:15:57 -0400

samba (2.999+3.0.alpha20-2) unstable; urgency=low

  * fix an off-by-one error in smbd/lanman.c, which should shut off the
    flood of log messages (closes: #157432)
  * add a --config-cache option to the configure invocation, since
    autoconf 2.5 doesn't load config.cache by default (closes: #163504)

 -- Steve Langasek <vorlon@debian.org>  Sat,  5 Oct 2002 01:40:00 -0500

samba (2.999+3.0.alpha20-1) unstable; urgency=low

  * new upstream release
    - non-primary groups appear to work again (closes: #161271)
  * the official beginning of the upstream 3.0 branch
  * exit without error from smbstatus when no connections have
    been seen yet (closes: #161489)

 -- Steve Langasek <vorlon@debian.org>  Wed,  2 Oct 2002 19:02:00 -0500

samba (2.999+3.0cvs20020906-1) unstable; urgency=low

  * CVS update
    - domain authentication works again (closes: #158698)
  * Factor out common code in samba-common.config
  * Handle character set settings in smb.conf on upgrade
    (closes: #153913, #158770)
  * Don't use killall in logrotate script; there are better ways
    (closes: #160076)
  * Ignore value of 'hostname lookups' for hosts allow/hosts deny
    (closes: #154376)

 -- Steve Langasek <vorlon@debian.org>  Sat,  7 Sep 2002 11:46:00 -0500

samba (2.999+3.0cvs20020829-1) unstable; urgency=low

  * CVS update.
  * Move the smb.conf manpage to the samba-common package (closes: #159572)

 -- Steve Langasek <vorlon@debian.org>  Thu, 29 Aug 2002 17:53:25 -0500

samba (2.999+3.0cvs20020827-1) unstable; urgency=low

  * CVS update. (Closes: #158508)
  * Part 1 of 3 of the library separation patch that Vorlon wrote has
    gone upstream - removed the patch from our patches/ directory.
  * Debconf note to warn users that their smb.conf will be re-written
    and changed if they use Swat to maintain it. (Closes: #158479)
  * Fixed typo in samba.prerm.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Aug 2002 15:23:23 -0400

samba (2.999+3.0cvs20020825-2) unstable; urgency=low

  * scale back the tdbsam migration support, because of undesirable
    side-effects; now always defaults to 'no'.
  * strip out hyperactive library dependencies that are only needed by
    smbd (closes: #155156).
  * nuke any broken registry.tdb files left by previous CVS snapshots.
  * support rolling back the smbpasswd->tdbsam conversion on downgrade,
    since many people are likely to need to downgrade for a while.
  * remove postrm handling of legacy directories, and add handling of
    current ones.

 -- Steve Langasek <vorlon@debian.org>  Sun, 28 Jul 2002 09:44:24 -0500

samba (2.999+3.0cvs20020825-1) unstable; urgency=low

  * CVS update. These packages are based on Samba 3.0alpha19 + any
    code commited after 3.0alpha19 was released.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 25 Aug 2002 14:56:46 -0400

samba (2.999+3.0cvs20020723-1) unstable; urgency=medium

  * remove spurious line from samba.config
  * migrate from smbpasswd to tdbsam
  * re-add the pdbedit util and manpage
  * compile in ldapsam support (closes: #146935)
  * add PRIVATEDIR to the list of vars we override for the install
    target, so Samba doesn't try to create /etc/samba (closes: #153746).
  * fix makefile handling of LOGBASEDIR, so that logs always end up in
    the right place (closes: 153727).
  * Fixed bug in the FHS migration path that causes nmbd to read its
    state from one location, but write it out to another. (closes: #154210)
  * Make sure nmbd is always looking for wins.tdb in the same place.

 -- Steve Langasek <vorlon@debian.org>  Fri, 19 Jul 2002 21:38:54 -0500

samba (2.99.cvs.20020713-1) unstable; urgency=low

  * first attempt for 3.0pre.
  * only post a debconf note about moving logfiles if we're upgrading
    from a version that had the logfiles in the old location
    (closes: #152924).

 -- Steve Langasek <vorlon@debian.org>  Sat, 13 Jul 2002 12:54:25 -0500

samba (2.2.5-2) unstable; urgency=low

  * No longer ship make_printerdef, which is deprecated. (closes: #63059)
  * Clean up some empty directories from the samba package.
  * Add call to dh_installinit for winbind rc.x symlinks (closes: #151860).
  * Clean up per-package documentation lists, to reduce clutter
    (closes: #147638).
  * Make sure we don't ship pdbedit's man page since we are still using
    smbpasswd passwords. (closes: #152208)
  * move libnss_wins.so to libnss_wins.so.2, where glibc expects to find
    it (closes: #148586).
  * reorder postinst, so that installing samba-common from scratch loads
    the debconf answers properly (closes: #151985).
  * add lintian overrides for winbind, to eliminate some noise.
  * rename pam_smbpass changelog to comply with policy.

 -- Steve Langasek <vorlon@debian.org>  Sun, 23 Jun 2002 22:45:04 -0500

samba (2.2.5-1) unstable; urgency=low

  * New upstream release.

 -- Eloy A. Paris <peloy@debian.org>  Sun,  9 Jun 2002 15:49:21 -0400

samba (2.2.4+2.2.5pre1-1) experimental; urgency=low

  * Getting ready for Samba 2.2.5.
  * Remove patches/parse_spoolss.patch, now included upstream.
  * Fixed thinko WRT POSIX ACL support, which we "half-enabled" in
    2.2.4-1. We don't use POSIX ACL support ourselves, so we'd
    appreciate reports from those using this feature so we can
    be sure this works.
  * Fix the filename-matching algorithm used for smbtar's 'exclude'
    functionality. (closes: #131571)
  * Look for secrets.tdb in /var/lib/samba, and handle in the postinst.
    This is not really a config file, because users don't edit it.
    (closes: #147429)
  * Doxygen fix for libsmbclient.h, thanks to Tommi Komulainen
    <Tommi.Komulainen@iki.fi> for the patch. (closes: #144847)

 -- Eloy A. Paris <peloy@debian.org>  Tue, 28 May 2002 11:33:51 -0400

samba (2.2.4-1) unstable; urgency=low

  * New upstream release (closes: #144713)
  * Building with POSIX ACL support (closes: #137819)
  * Include samples, exclude INSTALL from libpam-smbpass (closes: #145055)
  * Compile with --with-automount, for NIS homedir support (closes: #123396)
  * Add a proper 'flags' field to the mount entry we write to /etc/mtab;
    fixes a display bug with mount (closes: #140397)
  * Added logic to /etc/init.d/samba so a help message is printed out
    when Samba is running from inetd _and_ we are not booting, i.e. the
    user called the init script manually. Thanks to Francesco
    Potorti <pot@gnu.org> for the suggestion on how to implement this.
    (Closes: #139807, #140204)
  * samba.postinst: added logic so we don't call /etc/init.d/samba if
    we are running from inetd (this prevents the stupid help message
    to be printed during package upgrades if we are running from inetd.)
  * samba.prerm: idem.
  * /etc/init.d/samba: delete stale PID files after nmbd and smbd are
    stopped. This prevents start-stop-daemon from printing an ugly
    error message when called from '/etc/init.d/samba stop'. I prefer
    this than running start-stop-daemon with --oknodo because
    start-stop-daemon might print other important error messages that with
    --oknodo it would otherwise not print. (Closes: #102187, #109301)
  * Patch from jerry@samba.org to fix parsing of spoolss structures.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 23 May 2002 23:16:52 -0400

samba (2.2.3a-7) unstable; urgency=medium

  * More README.debian updates.
  * Neutralize the smb.conf 'lock dir' directive, which doesn't mean
    what the FHS says it should, and causes us no end of grief.
    (Closes: #122299)
  * LPRng-handling patch so that jobs printed to recent versions of
    LPRng show up properly as 'done' instead of 'paused' in the Windows
    print queue.  Thanks to Jaroslav Serdula <serdula_jaroslav@vse.sk>
    for this patch. (Closes: #139458)
  * Applied patch from Urban Widmark <urban@teststation.com>
    (smbfs upstream maintainer) to add a '-n' option to smbmount
    that does the same as mount's '-n'. (Closes: #139590)
  * Minor tweak to unpatch-source so we unpatch sources in the
    reverse order we patched them.
  * Don't depend on grep in samba.prerm to determine if Samba was
    running before the upgrade starts.
  * Tweak the wording of debconf templates.
  * Incorporate debconf translations for French, Spanish and Portuguese;
    thanks to Carlos Valdivia Yagüe <valyag@hotpop.com> (es),
    Andre Luis Lopes <andrelop@ig.com.br> (pt_BR), and Philippe
    Batailler and Denis Barbier <barbier@debian.org> (fr).
    (closes: #142657, #142659, #141551, #141699, #141682)
  * Fixed symlinks in the swat package so the point to /usr/share/doc/
    instead of /usr/doc/. Added note to the description of the
    swat packages that says that samba-doc must be installed for
    the on-line documentation to work. Thanks to Torne Wuff
    <torne@wolfpuppy.org.uk>. (Closes: #95437)
  * 'dh_installinit -n' gives us no initscript handling -- we need to
    handle all starting and stopping of daemons ourselves, which wasn't
    happening in the {pre,post}rm scripts.
  * Vary the priority of the debconf question "Do you want to generate
    /etc/samba/smbpassd?" depending on whether the file already exists.
    File exists -> priority 'medium', file does not exist -> priority
    'low'. Changed priorities of all other questions from 'high' to 'medium'.

 -- Steve Langasek <vorlon@debian.org>  Sat, 20 Apr 2002 17:48:27 -0400

samba (2.2.3a-6) unstable; urgency=low

  * Call db_stop as soon as we're done with debconf in the postinst, to
    avoid hanging bugs (closes: #137813)
  * Ony call 'update-inetd --add' on first installation, just as we only
    call 'update-inetd --remove' on package purge.
  * Bring our shipped smb.conf closer in line with the upstream
    defaults: don't twiddle the send/recv buffer sizes, since the Linux
    kernel already provides a much better default setting
     (closes: #80966, #80934, #137415, #133477)
  * Added libnss_wins.so to the winbind package (closes: #137201)
  * Updates to README.debian.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 12 Mar 2002 10:57:40 -0500

samba (2.2.3a-5) unstable; urgency=low

  * Having multiple workgroup lines in your smb.conf, though wacky, is
    perfectly valid.  Account for this in samba-common.config.
    (closes: #137157)

 -- Steve Langasek <vorlon@debian.org>  Sun, 10 Mar 2002 21:52:51 -0600

samba (2.2.3a-4) unstable; urgency=low

  * Fixed typo in samba.postinst. Cosmetic fixes there as well.
  * Fix to improper usage of /usr/bin/tr in samba-common config script
    (closes: #137744)

 -- Steve Langasek <vorlon@debian.org>  Sat,  9 Mar 2002 14:14:02 -0500

samba (2.2.3a-3) unstable; urgency=medium

  * Make sure /etc/init.d/samba is executable before calling it
    in the postinst. Quickly checked all other maintainer scripts
    to make sure we are not calling an init script if it is not
    executable. (closes: #137321)
  * Fix up maintainer scripts to detect if samba was not running before
    an upgrade. (closes: #33520, #130534)
  * Make sure /etc/samba/ is included in the samba-common package.
    Closes: #137157

 -- Steve Langasek <vorlon@debian.org>  Fri,  8 Mar 2002 11:13:21 -0500

samba (2.2.3a-2) unstable; urgency=low

  * merge in debconf support:
    - Moved all smb.conf-related questions to samba-common (smb.conf
      is part of the samba-common package, not the samba package.)
    - smb.conf is not a samba-common conffile anymore since it is
      being managed by debconf. It is ABSOLUTELY necessary to make
      sure /etc/samba/smb.conf _NEVER_ gets overwritten by changes
      made via debconf. In other words, any changes made by the user
      should be honored by the debconf interface.
    - samba.postinst now moves old log files from /var/log/ to
      /var/log/samba/. There's a Debconf note that informs the user
      the log files are stored now in a new location.
    - debian/control:
      + Make samba depend on debconf.
    - New file debian/samba.templates.
    - New file debian/samba.config.
    - Re-worked debian/samba.postinst.
      + Got rid of all /etc/samba/debian_config sillyness.
    - remove /usr/sbin/sambaconfig; "dpkg-reconfigure samba" replaces
      it.
    - Removed debian/samba.prerm.
    - Cleaned up /etc/init.d/samba.
      + Added infrastructure for debconf.
      + Got rid of all /etc/samba/debian_config sillyness.
      + Got rid of /etc/samba/smbpasswd conversion stuff for
        compatibility with versions of Samba < 2.0.0final-2.
    (closes: #127959, #34408, #113594)
  * make samba.postinst ignore the absence of /var/log/{s,n}mb*;
    makes for a clean upgrade path.
  * Building with MSDFS support (closes: #116793)

 -- Steve Langasek <vorlon@debian.org>  Tue,  5 Mar 2002 14:14:33 -0600

samba (2.2.3a-1) unstable; urgency=low

  * New upstream version (closes: #135001)
  * Potato builds were failing because debian/rules was not creating
    debian/winbind/etc/logrotate.d/. A user having problems creating
    Potato packages brought this to my attention. dh_installlogrotate
    takes care of creating the directory for us, that's why we didn't
    notice.
  * Removed code that converts /etc/samba/smbpasswd from an ancient
    format to the new format of Samba 2.0.0 and later.
    Closes: #134375 - samba: postinst failed due to missing
            /usr/bin/convert_smbpasswd.
  * Re-organized FHS migration code in samba.postinst. Make sure we
    don't fail when we move files that don't exist.
    Closes: #133813 - samba: Install failed.
  * Adding docs. to the libpam-smbpass package.
  * Remove man pages for findsmb because we are not providing this
    script.
    Closes: #134181 - findsmb referenced, but not included.
  * Removed replace.patch because it is now present upstream.
  * Added patch from Jerry Carter to fix a problem when saving
    document preferences for printing from NT clients.
  * The real winbindd daemon is a forked process so we can't use
    --make-pidfile when calling start-stop-daemon. Fixed
    /etc/init.d/winbind to work around the issue. Thanks to
    Lin Li <linl@xandros.com> for the patience and for reporting
    the problems. Hopefully I got it right this time.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 20 Feb 2002 18:39:03 -0500

samba (2.2.3-6) unstable; urgency=low

  * Make sure there are actual files in /var/state/samba before trying
    to move them (Closes: #133534, #133510).
  * Fix up the 2.2.3 makefile so that pam_smbpass builds correctly
    again.

 -- Steve Langasek <vorlon@debian.org>  Tue, 12 Feb 2002 09:19:29 -0600

samba (2.2.3-5) unstable; urgency=low

  * Whoops, missed a spot on the samba.postinst -- will fail badly if
    /var/state/samba/ no longer exists.  Better get this fix into the
    next upload. ;) (Closes: #133088)
  * Regenerate configure only if it is older than configure.in.
  * Fix smbd handling of network neighborhood lists, which was missed
    in the FHS conversion (Closes: #133091)

 -- Eloy A. Paris <peloy@debian.org>  Sat,  9 Feb 2002 16:37:57 -0500

samba (2.2.3-4) unstable; urgency=low

  * FHS cleanup; files in /var are now properly sorted according to
    their nature. (Closes: #102101)
  * Remove patches to source/configure, since we now call autoconf to
    regenerate this file cleanly.
  * lintian fixes:
      - Create winbind.conffiles and add /etc/logrotate.d/winbind and
        /etc/init.d/winbind to it.
      - Use a relative symlink for /usr/lib/cups/backend/smb.
      - Removal of a .cvsignore file in the samba-doc package.
  * winbind.init fixes:
      - Corrected name of the pid file (Steve)
      - Make start-stop-daemon create a pid file for winbindd since it
        does not create one on his own.
  * #DEBHELPER# is not needed in samba.postinst because we are adding
    manually everything that debhelper adds automatically. In fact,
    since we are calling update-rc.d without standard paramaters I
    think we can't use #DEBHELPER#.
  * Fix fatal syntax error in samba.prerm.

 -- Steve Langasek <vorlon@debian.org>  Thu,  7 Feb 2002 13:12:08 -0500

samba (2.2.3-3) unstable; urgency=low

  * work on lintian-cleanness in the package (wrong permissions,
    maintainer scripts in need of debhelpering)
  * /lib/security/pam_smbpass.so is now being included in the
    libpam-smbpass package only, and not in both the libpam-smbpass and
    samba packages (which was the case prior to 2.2.3-3.)
  * Instead of making our patch scripts executable in the rules file
    we run them through /bin/sh.
  * New 'winbind' package that has all the winbind stuff that was in the
    samba package in 2.2.3-2 and before.
  * Added replace.patch: patch from Jeremy Allison to fix problems when
    replacing or overwriting files in a Samba share. Patch was sent to
    the samba mailing list.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  5 Feb 2002 21:12:48 -0500

samba (2.2.3-2) unstable; urgency=low

  * add support to debian/scripts/{patch-source,unpatch-source} for
    automatic updating and cleaning of <version.h>. This was a request
    from the Samba Team: they wanted us to clearly mark our packages
    so it is always known a user is running Samba with (possibly)
    Debian-specific patches.
  * Change init.d killscript link to K19samba, so we stop before autofs
    (closes: 117327)
  * Make our patch scripts executable in the rules file -- dpkg won't do
    this for us (closes: #132415).

 -- Steve Langasek <vorlon@debian.org>  Mon,  4 Feb 2002 09:51:00 -0600

samba (2.2.3-1) unstable; urgency=low

  * New upstream release (closes: #131228).
  * Restructured build system that provides DBS-like separation of
    patches
  * Fix typo in smbfs description (closes: #116209).
  * Use killall -q in logrotate.d script, to avoid spurious cron
    emails (closes: #130100).

 -- Steve Langasek <vorlon@debian.org>  Sat,  2 Feb 2002 19:56:18 -0500

samba (2.2.2-12) unstable; urgency=high

  * (Steve) Patch for source/client/client.c.
    Closes: #86438 smbclient: Transfering several GB causes the average
            speed to be messed up.
  * Uploading with urgency=high to expedite the move from unstable
    to testing because of the security problem fixed in -11.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 25 Jan 2002 22:31:12 -0500

samba (2.2.2-11) unstable; urgency=low

  * Building with --with-libsmbclient. We have created two new
    packages: libsmbclient and libsmbclient-dev. Hopefully this
    will help some people that want to add the capability of
    speaking SMB to their applications.
    Closes: #117132 - libsmbclient support library?
  * (Steve) Make swat do the right thing when reading (parsing)
    the saved preferences in smb.conf.
    Closes: #55617 swat mutilates the linpopup message command.
  * Updated README.Debian. Updated descriptions in debian/control.
  * Remembered to bump up version number in source/include/version.h
    (need to automate this or else I'll keep forgetting.)
  * (Steve) one liner for source/web/diagnose.c.
    Closes: #106976 - smbd/nmbd not running message with swat/linuxconf.
  * Added '|| true' to the post-rotate script so logrotate doesn't
    fail if either nmbd or smbd is not running.
    Closes: #127897 - /etc/logrotate.d/samba fails if there is no smbd process.
  * Fixed incorrect file locations in swat's man page and added a
    Debian-specific note to /usr/share/doc/swat/README.
    Closes: #71586 swat: needs documentation fixes for debian.
  * smbmount in the smbfs package does not have the setuid bit set.
    Apparently, smbmount uses libsmb without checking the environment.
    Thanks to Christian Jaeger <christian.jaeger@sl.ethz.ch> for
    finding the local root exploit.
  * Applied old patch from Jerry) Carter" <jerry@samba.org> to correct
    the following two problems in Samba 2.2.2:
    - %U and %G could not be used in services names
      in smb.conf.
    - %G would fail to be expanded in an "include = ..."
      line.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 19 Jan 2002 21:35:26 -0500

samba (2.2.2-10) unstable; urgency=low

  * (Steve) Add missing manual pages.
    Closes: Bug#128928: missing manpages in smbfs.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 13 Jan 2002 14:39:55 -0500

samba (2.2.2-9) unstable; urgency=low

  * (Steve) Fix broken URL's in HTML docs.
    Closes: Bug#17741: bad links in html docs (at last!!!)

 -- Eloy A. Paris <peloy@debian.org>  Fri, 11 Jan 2002 13:37:07 -0500

samba (2.2.2-8) unstable; urgency=low

  * Added "Replaces: samba (<= 2.2.2-5)" to the smbclient section in
    debian/control so rpcclient.1, which was in samba-2.2.2-5, does not
    cause problems now that it is part of smbclient (>= 2.2.2-6).  Closes:
    Closes: Bug#128684: error upgrading smbclient in sid.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 11 Jan 2002 11:42:40 -0500

samba (2.2.2-7) unstable; urgency=low

  * (Steve) Patch to make behavior honor what the docs. say about "hosts allow"
    taking precedence over "hosts deny".
    Closes: Bug#49249: swat: error with host deny ?!

 -- Eloy A. Paris <peloy@debian.org>  Thu, 10 Jan 2002 12:36:58 -0500

samba (2.2.2-6) unstable; urgency=low

  * (Steve) Adds manpage for rpcclient to the proper file,
    removes smbtorture from the distro because this tool isn't intended for
    widespread consumption.
    Closes: #63057 - no manual page for smbtorture.
  * (Steve) Removed -gnu from the configure arguments (--build, --host) in
    debian/rules so config.sub is able to properly create the host and target
    tuples.

 -- Eloy A. Paris <peloy@debian.org>  Wed,  9 Jan 2002 14:39:51 -0500

samba (2.2.2-5) unstable; urgency=low

  * Fixes from vorlon:
  * Use /usr/bin/pager instead of more.
    Closes: #125603: smbclient violates pager policy.
  * Make /etc/logrotate.d/samba a conffile, send smbd and nmbd
    a SIGHUP to have the log files reopened, fixes to
    /etc/logrotate.d/samba.
    Closes: #127897: log file rotation.
    Closes: #118277: /etc/logrotate.d/samba not listed in conffiles.
  * s/covert/convert/.
    Closes: #121653 probable typo in install message.

 -- Eloy A. Paris <peloy@debian.org>  Sun,  6 Jan 2002 03:14:58 -0500

samba (2.2.2-4) unstable; urgency=low

  * Applied patch from Steve to work around problem in glibc that affects the
    HPPA architecure. The patch detects the error condition at configure time
    and compiles without LFS support if necessary.
    Closes: Bug#126763: samba completely broken on hppa.
  * Including unicode_map.1251.
    Closes: Bug#126719: samba-common: unicode_map.1251 missing.
  * Updated smbd daemon version to match Debian package version.
    Closes: Bug#127199: Package version and smbd daemon version don't match.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 31 Dec 2001 14:32:47 -0500

samba (2.2.2-3) unstable; urgency=low

  * Added some spaces in package description in debian/control.
    Closes: #120730 - missing spaces in package description for nice
            alignment.
  * Spelling fixes.
    Closes: #125328, #125329, #125330, #125367, #125365, #125403.
  * Steve Langasek <vorlon@debian.org> is the co-maintainer of the Debian
    Samba packages!!! Added him to the uploaders field in debian/control.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 18 Dec 2001 00:54:25 -0500

samba (2.2.2-2) unstable; urgency=low

  * Backed out changes to source/filename.c per Andrew Tridgell's request.
    This changes were introduced in 2.2.1a-7 as an attempt to fix #47493.
    Tridge found out that they break smbd.
  * Changed version number in source/includes/version.h so it is clear that
    this is a version of Samba packaged for Debian. This is another request from
    Tridge and will help the Samba Team to get bogus bug reports.
  * Added Samba-HOWTO-Collection.pdf and other README files to the
    /usr/share/doc/<package>/ directories.
  * Installing libnss_winbind.so and pam_winbind.so.
    Closes: #116790: nss and pam modules for winbind missing.
  * Removed user-emacs-settings from changelog.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 29 Oct 2001 19:16:26 -0500

samba (2.2.2-1) unstable; urgency=low

  * New upstream version.
  * Temporary fix for #113763 (Steve Langasek)
  * Quick hack to avoid smbmount reveal password length. Please note
    that even with this hack there is a small window when password is
    completely visible with 'ps aux'. There are other methods that should
    be used to automate mounting of SMB shares.
    Closes: #112195: smbmount-2.2.x reveals password length.
  * Applied patch from Steve Langasek <vorlon@debian.org> to prevent
    forcing use of setresuid() in Sparc.
    Closes: #112779: samba build forces use of setresuid, which causes
                     smbd to fail on Sparc.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 15 Oct 2001 10:26:10 -0400

samba (2.2.1a-9) unstable; urgency=low

  * Replaced $(LD) with $(CC) all the way through source/Makefile.
    Closes: #111036: ld shouldn't be used to link shlibs.
  * s/\/bin\/mail/\/usr\/bin\/mail/ in smb.conf's man page (HTML and
    sgml as well.)
    Closes: #110963: smb.conf: mail should be /usr/bin/mail.
  * Documented better smbclient's -W behavior. Patch from Steve
    Langasek.
    Closes: #53672: smbclient: -W flag is interpreted as domain, not
            workgroup.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  4 Sep 2001 23:10:41 -0400

samba (2.2.1a-8) unstable; urgency=low

  * Set some reasonable default perms for the samba logdir (again,
    thanks to vorlon :-)
    Closes: #72529: insecure permissions on log files.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 26 Aug 2001 15:40:47 -0400

samba (2.2.1a-7) unstable; urgency=low

  * Another attempt at fixing #47493. Patch from Steve Langasek
    <vorlon@netexpress.net>. Let's keep our fingers crossed Steve!

 -- Eloy A. Paris <peloy@debian.org>  Sun, 26 Aug 2001 13:37:06 -0400

samba (2.2.1a-6) unstable; urgency=low

  * Backed out fix to #47493 introduced in 2.2.1a-4 as it is causing
    smbd to die with signal 11 under some unidentified situations.
    Closes: #109774: Latest debian version breaks printer driver download.
    Closes: #109946: not all files appear in samba-exported directories.
  * Another patch from Steve Langasek. This one adds quotes around
    printer names for print systems it's reasonable for Debian to
    support. Together with the patch in #29957 (see changelog for
    2.2.1a-4), this should take care of the problems with multi-word
    printer names in Samba.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 24 Aug 2001 21:12:27 -0400

samba (2.2.1a-5) unstable; urgency=low

  * Important changes that affect how Samba is built on Debian
    machines are implemented in this release. All of this changes
    were suggested by the energetic Steve Langasek <vorlon@debian.org>,
    and his arguments were so sound and reasonable that I decided
    to implement them. Here's Steve's original changelog:

       * Fix up the build system to avoid needing to run configure
         as root to answer questions we already know the answers to.
       * In the process, make surprising progress towards being able to
         cross-compile the samba packages.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 24 Aug 2001 01:08:06 -0400

samba (2.2.1a-4) unstable; urgency=low

  * Fixed typo in smbmount's mount page.
    Closes: #109317: smbfs: mistype in smbmount manpage.
  * Included symlink to smbspool to better support CUPS printing.
    Closes: #109509: include symlink for cups samba support.
  * Applied patch from Steve Langasek <vorlon@netexpress.net> to
    fix bug #29957.
    Closes: #29957: samba strips trailing " from strings in smb.conf.
  * First attempt at fixing #47493. Another patch from Steve "I want
    a bug-free Samba" Langasek.
    Closes: #47493: Samba doesn't handle ':' in dir names right.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 21 Aug 2001 23:26:38 -0400

samba (2.2.1a-3) unstable; urgency=low

  * Steve Langasek <vorlon@netexpress.net> has been hard at work in
    the last few days looking at the long list of open bugs filed
    against the Samba packages. I don't know how to thank him. It's been
    a pleasure working with Steve, and all the fixes, patches, etc. in
    this release come from him. The bug list is greatly reduced thanks
    to Steve's efforts.
  * Steve's additions/modifications/patches/etc. are:
    - New package that (libpam-smbpass) provides pam_smbpass. Before, this
      was provided in another package but now the sources are part of
      the Samba sources so we can start providing it from here.
      Closes: #107043 - pam_smbpass now present in Samba source,
        should be built from there
    - Patch to source/smbd/service.c that allows admins to call
      /bin/umount from the root postexec of a Samba share.
      Closes: #40561 - samba pre/postexec commands do not work.
    - Clear TMPDIR before starting smbd in /etc/init.d/samba.
      Closes: #51295 - Problems with Samba and TMPDIR.
    - Correction to documentation of "guest only".
      Closes #38282 - "guest only" share still requires a password.
  * Applied patch from Santiago Vila <sanvila@unex.es> to convert
    /usr/sbin/mksmbpasswd from a shell script into a real awk script.
    Sorry it took so long, Santiago; I hadn't realized you even
    provided a patch :-)
    Closes: #77891 - mksmbpasswd could be a real awk script.
  * Updated description of the smbfs and smbclient packages. Also have
    each package recommend the other.
    Closes: #108650: Should suggest or recommend smbfs.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 13 Aug 2001 22:21:55 -0400

samba (2.2.1a-2) unstable; urgency=low

  * Build-depends: depend on debhelper (>=2.0.103).
    Closes: #105795: Build-Depends are wrong.
  * Run samba's preinst and postinst scripts without -e so failed commands
    do not abort installation.
    Closes: #106384: postinstall crashes abnormally. (And really closes
      #104471.)

 -- Eloy A. Paris <peloy@debian.org>  Thu, 26 Jul 2001 00:30:37 -0400

samba (2.2.1a-1) unstable; urgency=low

  * New upstream version.
  * Make sure samba's postinst script exits with a zero status.
    Closes: #104471: Samba postinst problem.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 12 Jul 2001 21:55:21 -0400

samba (2.2.1-1) unstable; urgency=low

  * New upstream version.
    Closes: #103339: config.guess and config.sub update required.
    Closes: #98518: Samba 2.2 can't act as PDC for NT4/W2K due to
                    incompatibility with PAM.
    Closes: #97447: nmbd crashes due to bugs in DAVE 2.5.2.
    Closes: #95777: Samba 2.2 is unable to join or authenticate against
                    Samba 2.2 PDC domain.
    Closes: #68842: samba should use PAM for password changing (I
                    haven't personally tried this one, but it's been
                    advertised this works.)
    Closes: #102506: PAM account checking fails.
    Closes: #102518: Complains about unknown paramter "obey pam
                     restrictions"
    Closes: #94774: Build failure on PARISC machines.
  * Moved away from /etc/cron.weekly/samba for log file rotation.
    Now using logrotate.
    Closes: #95548: typo in /etc/cron.weekly/samba.
    Closes: #74951: nmbd does not rename its log file.
  * Removed Debian-specific addtosmbpass.8 man page since this script
    is not longer provided upstream. Users should use the smbpasswd
    program instead.
  * Updated sample /etc/samba/smb.conf to reflect the recent changes
    affecting handling of PAM authentication. Also updated
    /etc/pam.d/samba.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 11 Jul 2001 00:44:14 -0400

samba (2.2.0.final.a-1) unstable; urgency=high

  * New upstream version (contains security fix from DSA-065-1.)
    Closes: #97241: samba 2.2.0 fails to process hostnames in
      "hosts allow" config line.
  * Removed Debian-specific addtosmbpass.8 man page since this script
    is not longer provided upstream. Users should use the smbpasswd
    program instead.
    Closes: #98365: addtosmbpass is missing from 2.2.0.final-2.
  * Updated sample /etc/samba/smb.conf to reflect the recent changes
    affecting handling of PAM authentication. Also updated
    /etc/pam.d/samba.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 24 Jun 2001 11:11:59 -0400

samba (2.2.0.final-2) unstable; urgency=low

  * Added libcupsys2-dev to Build-Depends.
  * Samba depends now (again) on netbase so update-inetd is always
    available for the Samba maintainer scripts.
    Closes: #86063: Fails to uninstall if inetd is not installed.
  * Updated source/config.{sub,guess} so ARM built doesn't fail.
    Closes: #94480: config.sub out of date; can't build on arm.
    Closes: #85801: config.sub/guess out of date.
  * Not using brace expansion, i.e. {foo,bar} in any of the maintainers
    scripts nor in debian/rules.
    Closes: #88007: samba postrm has is not POSIX sh compliant.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 21 Apr 2001 17:27:18 -0400

samba (2.2.0.final-1) unstable; urgency=low

  * New upstream release. Lots of new things. See WHATSNEW.txt.
  * Goofy version number because of my stupidity when assigning version
    numbers to the CVS packages I have been uploading to experimental.
    Will be fixed when 2.2.1 is released. I've no doubts a 2.2.1 release
    will follow soon.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 17 Apr 2001 22:58:14 -0400

samba (2.2.0.cvs20010416-1) experimental; urgency=low

  * CVS update.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 16 Apr 2001 21:25:15 -0400

samba (2.2.0.cvs20010410-1) experimental; urgency=low

  * CVS update.
  * Added libreadline4-dev to Build-Depends.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 10 Apr 2001 16:53:45 -0400

samba (2.2.0.cvs20010407-1) experimental; urgency=low

  * CVS update. Includes what is in 2.2.0alpha3.

 -- Eloy A. Paris <peloy@debian.org>  Sat,  7 Apr 2001 16:00:33 -0400

samba (2.2.0.cvs20010316-1) experimental; urgency=low

  * Started working on Samba 2.2.0. Using the SAMBA_2_2_0 branch
    from Samba CVS.
  * Not compiling rpctorture as it has compile errors. Change in
    debian/rules.
  * Removed Linux kernel 2.0.x and smbfs compatibility baggage. Now
    the smbfs does not support 2.0.x kernels; a kernel > 2.2.x is
    needed to use smbfs. Updated debian/control, debian/rules and
    README.Debian to reflect this change.
  * Added to swat a versioned dependency on samba (so a user is forced to
    install a new version of swat each time a new version of samba is
    installed.)

 -- Eloy A. Paris <peloy@debian.org>  Sun, 18 Mar 2001 14:21:14 -0500

samba (2.0.7-5) unstable; urgency=medium

  * Transition from suidmanager to dpkg-statoverride.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 18 Jan 2001 23:51:56 -0500

samba (2.0.7-4) unstable; urgency=medium

  * Applied Urban Widmark <urban@teststation.com> fixes to smbmount. Urban
    is the maintainer of the smbfs in the kernel and of the userland
    utilities.
  * Links to HTML documents are correct now.
    Closes: #69439: swat: Broken help file symlinks
    Closes: #72615: samba-doc directory changed: removed htmldocs from path
    Closes: #75847: swat: Wrong symlink
    Closes: #66857: Wrong links to html documents.
    Closes: #77912: misplaced documentation symlinks for swat
  * Building Samba with CUPS support. For this I reverted the change to
    source/configure.in that I did in 2.0.7-3 and re-ran autoconf.
    Closes: #59038: samba: not compiled with cups support.
  * Fix against previous known/unknown user time difference patch to swat
    (make username / password lookups take the same time.) Remove CGI
    logging code in Swat.
    Closes: #76341 - Security holes in swat
  * Updated Build-depends.
  * Updated debian/copyright to refer to the correct location of the GPL.
  * debian/rules: changed DESTDIR to `pwd`/debian/samba (was
    `pwd`/debian/tmp.)
  * debian/rules: added '--sourcedir=debian/samba' to dh_movefiles (for some
    strange reason dh_installdirs is not creating debian/tmp/ so I needed
    to tweak everything to install stuff in debian/samba rather than in
    debian/tmp.)
  * debian/control: changed section of samba-docs to 'doc' (was 'docs')
  * Using relative symlinks in /usr/share/samba/swat/ (changed debian/rules
    and source/scripts/installswat.sh.)
  * Fixed (by tweaking debian/rules)
    /usr/bin/{smbmnt,smbumount-2.*,smbmount-2.*} to be suid.
  * Added "Provides: samba-client" to smbclient's section in control.
    Closes: #71143: smbclient: Smbclient should provide samba-client.
  * Fix for desired_access being zero in map_share_mode() (patch to
    source/smbd/nttrans.c.) Thanks to Gary Wilson
    <wilsong@sergievsky.cpmc.columbia.edu> for bringing this patch to my
    attention.
  * Hacked source/lib/util_sec.c so smbd works fine in both 2.0.x and
    2.2.x kernels even when the build is done in a system running
    a 2.2.x kernel.
    Closes: #78858: samba-common: samba2.0.7 needs kernel 2.2.x but
                    doesnt depend on it.
    Closes: #72758: README.Debian should comment on 2.0.x kernels.
    Closes: #56935: Samba 2.0.6 and Kernel 2.0.x.
    Closes: #58126: Samba 2.0.6 and Kernel 2.0.x -- more info.
    Closes: #60580: samba: failed to set gid.
    Closes: #64280: Samba panics, can't set gid.
    Closes: #66816: Must deal with brokenness under 2.0.x.
    Closes: #67682: potatoe samba 2.0.7-3 out of order, 2.0.5a-1 OK.
    Closes: #69735: PANIC: failed to set gid
    Closes: #66122: "smbclient -L localhost -U%" returns with "tree
                    connect failed: code 0".
    Closes: #57637: Samba says tree connect error.
    Closes: #58015: potato samba wins support is broken.
  * Fixed comments in sample smb.conf to point to the correct location.
    Closes: #69578: comments in smb.conf points to wrong path.
  * Move codepages from /etc/samba/codepages/ to
    /usr/share/samba/codepages/.
    Closes: #63813: samba; codepages should go in /usr/lib.
  * Moved /var/samba/ to /var/state/samba/.
    Closes: #49011: samba package not FHS compliant.
  * Hacked source/configure.in (and re-ran autoconf) so yp_get_default_domain()
    is found.
    Closes: #44558: netgroup support missing in samba 2.0.5a-1.
  * /etc/init.d/samba was calling start-stop-daemon with both --pidfile and
    --exec. Got rid of --exec so --pidfile works.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Jan 2001 00:15:57 -0500

samba (2.0.7-3) frozen unstable; urgency=high

  * Release manager: this closes a RC bug.
  * Commented out the section in source/configure.in that auto-detects
    CUPS support and then ran autoconf to generate a new configure
    script. This was done to prevent machines that have libcupsys-dev
    installed from detecting CUPS support and adding an unwanted
    dependency on libcupsys. This way the whole printing system
    won't break on upgrades. CUPS support should be added after
    Potato is released.
    Closes: #65185: samba-common: Upgrading removes printing system.
    Closes: #64496: smbfs: smbfs on powerpc has a dependency on cupsys.
  * Updated README.debian.
    Closes: #64594: Old README.Debian in /usr/share/doc/samba.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 20 Jun 2000 19:16:04 -0400

samba (2.0.7-2) frozen unstable; urgency=high

  * Release manager: this closes RC bug #63839 that prevents Samba
    to be built from source.
  * Fixed a stupid typo in debian/rules that was preventing Samba
    to be built from source.
    Closes: #63839: samba_2.0.7-1(frozen): build error (SAMBABOOK dir)
  * I forgot to mention that O'Reilly's book "Using Samba" was donated
    to the Open Source community. The book was included in Samba 2.0.7
    in HTML format and is part of the Debian Samba package since
    Samba 2.0.7-1.
  * In Samba 2.0.7-1, the "Using Samba" book and a number of HTML help
    files were supposed to be provided in both the swat and the samba-doc
    packages. This duplication was a waste of space. Starting with
    Samba 2.0.7-2, swat recommends samba-doc and the book and the HTML
    files are included only in samba-doc, and are accessed via symlinks
    from within swat.
    Closes: #58810: superfluous files in swat?
  * Added a 'echo "."' to /etc/init.d/samba in the reload) section.
    Closes: #63394: "echo ." missing in reload section of init.d script
  * Fixed typo in docs/htmldocs/using_samba/ch06_05.html.
    Closes: #64344: typo "encrypted passwords"
  * Cleaned up samba's postrm script so important common files aren't
    deleted when samba is purged. Created a samba-common.postrm script.
    Closes: #62675: purging samba removes /etc/samba/smb.conf.
    Closes: #63386: samba --purge removes /etc/samba dir even though
            smbclient/smbfs/samba-common packages are still installed

 -- Eloy A. Paris <peloy@debian.org>  Wed,  3 May 2000 02:42:07 -0400

samba (2.0.7-1) frozen unstable; urgency=low

  * New upstream version. Dear Release Manager: please allow this
    package to go to frozen as it contains fixes to a _lot_ of problems.
    You can take a look at all the problems fixed by this release in
    the official upstream announcement at
    http://us1.samba.org/samba/whatsnew/samba-2.0.7.html.
  * Added --with-utmp to add utmp support to smbd (this is new in Samba
    2.0.7)
  * Closes: #62148 - samba not rotating filled logs.
  * Closes: #56711: Samba doesn't manage well long share name (please note
      that it's possible to connect to shares with names longer than
      14 characters but the share will be listed with a name truncated to
      13 characters.)
  * Closes: #51752 - NT DOMAIN - NET USE * /HOME not mapping (error 67).
    Closes: #50907 - logon path not working.
    This is not a bug, it's just Samba doing the same thing an NT server
    does. See WHATSNEW.txt and smb.conf's man page for details.
  * Closes: #48497 - error executing smbsh in debian-potato. (smbwrapper
    is not supported anymore.)
  * Closes: #58994 swat: typo in swat description.
  * Closes: #45931 - Samba dies with SIGILL on startup. (Hardware
    problems, person that reported the bug never came back.)
    Closes: #54398 - smbadduser fails, looks for ypcat.
  * Fixed swat's man page to include Debian specific installation
    instructions. There's not necessary to edit /etc/services or
    /etc/inetd.conf.
    (Closes: #58616 - incomplete install config && incorrect installation
      instructions.)
  * s/SBINDIR/\"/usr/sbin\"/g in source/web/startstop.c to prevent swat
    to look for smbd and nmbd in the wrong place when requested to start or
    stop smbd or nmbd.
    (Closes: #55028 - swat can't start samba servers.)
  * Closes: #37274: smbclient does not honour pot. (Tested and seems to be
    working now.)
  * Not confirmed, but should fix #56699, #62185, #56247, #52218, #43492,
    #50479, #39818, #54383, #59411.
    (please re-open any of this if the problem still exists - I was unable
    to confirm any of this because I could never reproduce them.)
    Closes: #56699 - Samba's nmbd causes random kernel oops several
      times in a row.
    Closes: #62185 - nmbd's forking until no more file descriptors are
      available.
    Closes: #56247 - session setup failed: ERRSRV - ERRbadpw.
    Closes: #52218 - Either wins proxy does not work, or I don't understand
      it.
    Closes: #43492 - intermittent problem changing password.
    Closes: #50479 - Can't access windows 2000 shares with samba.
    Closes: #39818 - samba-common: Upgrading Samba from the Slink version.
    Closes: #54383 - samba-common: Missing /etc/smb.conf.
    Closes: #59411 - smbclient: cannot browse Win2k shares.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 27 Apr 2000 16:07:45 -0400

samba (2.0.6-5) frozen unstable; urgency=low

  * Oppsss! samba-common doesn't depend on libcupsys1 so the binaries
    in this package are broken unless libcupsys1 is installed.
    samba-common has a "grave" bug because of this. Instead of adding
    libcupsys1 to the Depends: list of each package in debian/control
    I investigated why dh_shlibs was not picking the dependency
    automatically. It turns out that it's probably a bug in libcupsys1
    because the format of its shlibs file is not correct. I fixed that
    file (/var/lib/dpkg/info/libcupsys1.shlibs) and now dependencies are
    picked correctly. I'll talk to the libcupsys1 maintainer.

    I think the addition of CUPS support to Samba is a big change that
    should not go into Frozen. So, I decided to back up the addition
    of CUPS support I did in 2.0.6-4 to minimize problems. I'll add
    CUPS support again when I start working on Samba for Woody.
    (Closes: #59337 - samba-common has a missing dependency)

 -- Eloy A. Paris <peloy@debian.org>  Wed,  1 Mar 2000 08:40:02 -0500

samba (2.0.6-4) frozen unstable; urgency=low

  * It seems that sometimes nmbd or smbd are not killed when upgrading.
    I think it is because in samba's prerm script I was calling
    start-stop-daemon with the --pidfile switch and in old versions of
    Samba the nmbd and smbd daemons did not store their PIDs in a file in
    /var/samba/. I changed debian/samba.prerm so the existence of the
    PID files is checked before calling "start-stop-daemon --pidfile ..."
    If the PID files do not exist then start-stop-daemon is called
    without the --pidfile parameter.
    (Closes: #58058 - upgrade from slink went badly)
  * Fixed typo in description of swat package in debian/control.
  * Installed libcupsys1-dev so the configure script picks up CUPS
    and Samba is compiled with CUPS support. Also added libcupsys1 to
    the Depends: list of package samba in debian/control.
    (Closes: #59038 - samba not compiled with cups support)
  * Added a small paragraph to debian/README.debian warning about possible
    problems with the WINS code in Samba 2.0.6.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 28 Feb 2000 14:00:42 -0500

samba (2.0.6-3) frozen unstable; urgency=low

  * Applied patch posted by Jeremy Allison to the samba mailing list
    that should take care of the internal errors reported in bug #52698
    (release-critical). Wichert: please test as I never could reproduce
    it here.
    (Closes: #52698 - samba gets interbal errors)
  * Moved samba-docs to the 'docs' section.
    (Closes: #51077 - samba-doc: wrong section)
  * Added reload capability to /etc/init.d/samba (only for smbd because
    nmbd does not support reloading after receiving a signal).
    (Closes: #50954 - patch to add reload support to /etc/init.d/samba)
  * Corrected "passwd chat" parameter in sample /etc/samba/smb.conf so
    Unix password syncronization works with the passwd program currently
    in Potato. Thanks to Augustin Luton <aluton@hybrigenics.fr> for
    the correct chat script.
  * Stole source/lib/util_sec.c from the CVS tree of what will become
    Samba 2.0.7 or whatever so we can use the same binaries under
    both 2.0.x and 2.2.x kernels.
    (Closes: #51331 - PANIC: failed to set gid)
  * smbadduser is now provided as an example and it's customized for Debian.
    I am not providing this script in /usr/sbin/ because then I would need
    a dependency on csh, something that I don't want to do.
    (Closes: #51697, #54052)
  * Fixed the short description of the smbfs package in debian/control.
    (Closes: 53534 - one-line description out of date).

 -- Eloy A. Paris <peloy@debian.org>  Tue, 23 Nov 1999 16:32:12 -0500

samba (2.0.6-2) unstable; urgency=low

  * samba-common now depends on libpam-modules (not on libpam-pwdb, which
    I have been told is obsolete). I modified /etc/pam.d/samba accordingly
    to reflect the change.
    (Closes: Bug#50722: pam pwdb dependence?).
  * The old /etc/pam.d/samba file which had references to pam_pwdb caused
    smbd to die with a signal 11. The new /etc/pam.d/samba file fixes
    this problem.
    (Closes: #50876, #50838, #50698)
  * Compiled with syslog support (use at your own risk: syslog support
    is still experimental in Samba). I added the parameters "syslog = 0"
    and "syslog only = no" to the sample smb.conf to avoid pestering
    users that do not want Samba to log through syslog.
    (Closes: Bug#50703 - syslog only option doesn't work)
  * Removed the stupid code in the smbmount wrapper script that tries
    to load the smbfs module if smbfs is not listed in /proc/filesystems.
    (Closes: Bug#50759 - Non-root can't run smbmount if SMBFS is compiled
    as a module in the kernel)
  * Added /bin/mount.smb as a symlink pointing to /usr/bin/smbmount so
    'mount -t smb ...' works just as 'mount -t smbfs ...'.
    (Closes: Bug#50763 - 'mount -t smb' doesn't work)

 -- Eloy A. Paris <peloy@debian.org>  Sat, 20 Nov 1999 18:53:35 -0500

samba (2.0.6-1) unstable; urgency=low

  * Samba 2.0.6 has been released. This is the first try of the Debian
    Samba packages. I know for sure that smbd won't work properly on
    2.0.x kernels because the patch that Wichert sent me does not apply
    to the new source/lib/util_sec.c in Samba 2.0.6. That file was
    completely re-written by Tridge.
  * Updated README.Debian.
  * A new client utility called smbspool appeared in Samba 2.0.6. I added
    this utility to the smbclient package, although I haven't tried it yet.
  * Added the symlink /sbin/mount.smbfs that points to /usr/bin/smbmount.
    This is to be able to type "mouont -t smbfs ...". This symlink goes
    in the smbfs package, of course.
  * This new release should close the following bugs (some of these
    are fixed for sure in this new upstream release, some others I could
    not reproduce but I believe they are fixed if they were real bugs.
    As always, please feel free to re-open the bugs if the problem is not
    solved).
      Closes: Bug#33240: icmp mask needs a bug workaround.
      Closes: Bug#37692: samba: Has problems detecting interfaces.
      Closes: Bug#38988: samba: Truly bizzare behavour from nmbd.
      Closes: Bug#46432: samba-2.0.5a-2: nmbd does not appear to broadcast
                          properly.
      Closes: Bug#44131: smbfs: no longer possible to set file and
                          directory-modes.
      Closes: Bug#46992: smbmount-2.2.x manpage wrong.
      Closes: Bug#42335: smbfs: missing options from the new 2.2.x commandline.
      Closes: Bug#46605: smbmnt segfaults.
      Closes: Bug#48186: smbmount.
      Closes: Bug#38040: smbfs: Please add /sbin/mount.smb [included].
      Closes: Bug#47332: smbmount: could -f and -P be added back?
  * Samba has been compiled with PAM support (closes: Bug#39512 - samba PAM
    module). To succesfully add PAM support, I created /etc/pam.d/samba and
    added this file as a conffile for the samba-common package. I also made
    samba-common depend on libpam-pwdb.
  * Added simple man pages for the wrapper scripts smbmount and smbmount.
    (Closes: Bug#44705 - Missing smbmount man page)
  * Installed libreadlineg2-dev in my system so smbclient now has a
    "history" command and libreadline support :-)
  * This time I did add a check to the smbmount wrapper script to see if
    the kernel has support for smbfs, as suggested by Jeroen Schaap
    <J.Schaap@physiology.medfac.leidenuniv.nl>. I mentioned in the changelog
    for samba-2.0.5a-3 that I did this but I forgot at the end.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Nov 1999 12:08:15 -0500

samba (2.0.5a-5) unstable; urgency=low

  * I am sorry to report that the smbwrapper package is gone for the
    moment. The reason for this is twofold: first of all, smbwrapper
    is completely broken in Samba-2.0.5a (it compiles but it doesn't
    run) and in the upcoming Samba-2.0.6 it doesn't even compile. Second,
    when I asked Andrew Tridgell (father of Samba) about the state of
    smbwrapper he told me that Ulrich Drepper (head of the glibc project)
    broke on purpose the glibc stuff in which smbwrapper is based.
    Consequently, Tridge recommended me to compile Samba without
    support for smbwrapper. When, I have no idea. Sorry folks. Here is
    the original message I received from Andrew:

    > 1) 2.0.5a's smbwrapper doesn't work under glibc2.1, and pre-2.0.6's
    > smbwrapper doesn't even compile under glibc2.1.

    yep, Ulrich deliberately broke it. It won't get fixed till glibc
    allows the sorts of games it plays to work again. I suggest you turn
    it off in your build scripts until that gets sorted out.

  * Swat's file are now in /usr/share/samba/ instead of
    /usr/lib/samba/ (bug #49011).
  * Man pages now in /usr/share/man/ instead of /usr/man/ (bug #49011).

 -- Eloy A. Paris <peloy@debian.org>  Tue,  2 Nov 1999 12:59:13 -0500

samba (2.0.5a-4) unstable; urgency=low

  * Applied patch from our fearless leader (Wichert) to fix the darn bug
    that prevents Samba to work on 2.0.x kernels if it was compiled
    in a system running a 2.2.x kernel. This closes #40645 (build uses
    setresuid which doesn't work under 2.0.34 (does apparently under
    2.2.x) ).
  * Fixed the entry that swat's postinst script adds to /etc/inetd.conf
    so it is '#<off># swat\t\tstream\ttcp\tnowait.400 ...' instead of
    '#<off>#swat\t\tstream\ttcp\tnowait.400 ...'. The old way caused
    'update-inetd --enable swat' to leave the entry for swat disabled.
    Thanks to Dave Burchell <burchell@inetnebr.com> for finding out
    this problem. This closes #48762 (swat uses non-standard syntax to
    comment out inetd.conf entry).
  * /usr/sbin/swat does not think anymore that the smbd daemon lives
    in /usr/local/samba/bin/. To fix this I am running now source/configure
    with "--prefix=/usr --exec-prefix=/usr". This closes #47716 (samba
    'swat' fails: incorrect hardwired path in the binary).

 -- Eloy A. Paris <peloy@debian.org>  Sun, 31 Oct 1999 03:42:38 -0500

samba (2.0.5a-3) unstable; urgency=low

  * I am pretty darn busy with my MBA, I apologize for the long time it's
    taking to squash bugs in the Samba packages.
  * Built with debhelper v2 for FHS compliancy. Changed a couple of
    things in debian/rules to accomodate for the new place for the docs.
    I also had to change debian/{samba.postinst,samba.prerm,swat.postinst}
    to make sure that the symlink from /usr/doc/xxx exists and points to
    /usr/share/doc/xxx (the reason for this is that I am not letting
    debhelper to create these scripts for me automatically).
  * Built with latest libc6.
  * smbfs: finally, the nasty bug that causes smbmount to die after
    a while is gone thanks to Ben Tilly <Ben_Tilly@trepp.com>.
    The problem was just a typo in source/client/smbmount.c.
    This closes grave bug #42764 (smbmount dies) and #43341
    (smbfs-2.2.x won't function after a while).
  * Fixed the smbmount wrapper script to eliminate a bashism (closes
    #45202 - "wrapper scripts use $* instead of "$@") and to recognize
    2.3.x and 2.4.x kernels (closes #47688 - "smbfs: does not recognize
    kernel 2.3.x").
  * Added a check to the smbmount wrapper script to see if the
    kernel has support for smbfs, as suggested by Jeroen Schaap
    <J.Schaap@physiology.medfac.leidenuniv.nl>.
  * swat's man page is now part of the swat package, not of the samba
    package. This closes #44808 (Samba has a man page for swat, but
    the binary is not included).
  * The interface program smbrun is not longer needed by smbd because
    of the availability of execl() under Linux. Because of this, the
    smbrun is not even being compiled. Since there is no need for smbrun
    now, the smbrun man page was taken out of the samba package. This
    closes #45266 (/usr/bin/smbrun missing).
  * smbpasswd is now part of the samba-common package, and not part of
    the samba package. This is to let administrators that do not want
    to install a full Samba server administer passwords in remote
    machines. This closes bug #42624 (smbpasswd should be included in
    smbclient). This bug report also suggests that swat becomes part of
    the samba package, that smbfs becomes part of the smbclient package,
    and that the binary smbpasswd becomes part of the smbclient package.
    I moved smbpasswd to the samba-common package but I am reluctant to
    do the other things the bug report suggests.
  * In order to keep dpkg happy when moving smbpasswd from the samba
    package to samba-common, I had to add a "Replaces: samba (<= 2.0.5a-2)"
    in the control section of the samba-common package and a
    "Replaces: samba-common (<= 2.0.5a-2)" in the control section of the
    samba package (in debian.control).
  * Samba is now being compiled with the "--with-netatalk" option. This
    closes #47480 (Could samba be compiled with the --with-netatalk option).
  * All packages that depend on samba-common have a versioned dependency
    now. This was accomplished by adding "(= ${Source-Version})" to the
    relevant sections of debian/control. Thanks t Antti-Juhani Kaijanaho
    <gaia@iki.fi> for the hint. This closes #42985 (samba should probably
    have a versioned depends on samba-common).
  * Made sure the file docs/textdocs/DIAGNOSIS.txt gets installed in all
    the Samba packages. This closes bug #42049 (no DIAGNOSTICS.txt file).
  * Added the smbadduser helper script to the samba package. This closes
    #44480 (Samba doesn't come with the smbadduser program).
  * Applied patch from szasz@triton.sch.bme.hu that prevents smbmount
    to leave an entry in /etc/mtab for a share that could not be mounted
    because of invalid user of password. The patch also allows smbumount
    to unmount the share in the event that something goes wrong with the
    smbmount process. This closes bug #48613 (Mount/umount problems +
    patch) as well as #44130 (failed mount is still mounted).
  * smbmount-2.2.x is now setuid root. This is needed for the patch
    applied above to be effective. If smbmount-2.2.x is not setuid root
    then an entry will be left in /etc/mtab even when the mount
    fails. I had to add "usr/bin/smbmount-2.2.x" to debian/smbfs.suid
    for this to work.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 27 Oct 1999 10:36:13 -0400

samba (2.0.5a-2) unstable; urgency=low

  * This version is basically the same as 2.0.5a-1 but it was compiled
    on a Potato system with glibc2.1. See below the change log for 2.0.5a-1
    for more information.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jul 1999 02:25:29 -0400

samba (2.0.5a-1) stable; urgency=high

  * I'm back from the Honey Moon. We are pretty busy because we are moving
    to Pittsburgh (from Caracas, Venezuela) in aprox. 24 hours and we still
    have plenty of things to pack and to do. Samba 2.0.5 was released
    while I was in the Honey Moon and it is just now (almost 3 AM) when
    I have time to package it.
  * Because of the security problems fixed in 2.0.5, this upload goes
    to both stable and unstable (the Security Team asked for this).
  * This release (2.0.5a-1) was compiled on a Slink system. 2.0.5a-2 will
    be compiled on a Potato system.
  * Added a "Replaces: samba (<= 1.9.18p10-7)" to the samba-common
    section in debian/control (as suggested by Steve Haslam
    <araqnid@debian.org>) to fix the problems that appear when upgrading
    from the Samba package in Slink. Please test this as I am completely
    unable to do so. This should fix bug #39818 (Upgrading Samba from the
    Slink version).
  * Removed the hacks to the autoconf stuff that I added to 2.0.4b-2 in
    order to have defined several socket options when compiling with
    Linux 2.2.x kernel headers - the fix is now upstream.
  * Finally!!! smbmount was re-written (thanks Tridge :-) to use a command
    line syntax similar to the one used by the old smbmount (for 2.0.x
    kernels). This means that the wrapper script is no longer necessary
    so I removed it. In its place there is a simple wrapper script that
    calls smbmount-2.0.x or smbmount-2.2.x depending on the kernel that is
    running.
  * Because of the wedding, the Honey Moon, and our move to Pittsburgh,
    I can't work on fixing other bugs in this release.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jul 1999 02:18:51 -0400

samba (2.0.4b-3) unstable; urgency=low

  * Stupid mistake: I forgot to add /usr/bin/smbumount to debian/smbfs.files
    and because of this /usr/bin/smbumount was part of the samba package
    instead of part of the smbfs package.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  1 Jul 1999 01:51:24 -0400

samba (2.0.4b-2) unstable; urgency=low

  * Dark (and archive maintainers): please remove from Potato the smbfsx
    binary package and also the old source package for smbfs. smbfs and
    smbfsx have been merged starting with this version.
  * Merged the old smbfs package with Samba. Now there is only one package
    for the smbfs utilities and is called "smbfs". The package smbfsx
    does not exist any more and this new smbfs package must be used
    for both 2.0.x and > 2.1.x kernels.
  * A wrapper script was added to handle the syntax change in smbmount
    in the new smbfs utilities (required for kernels > 2.1.70). The
    home page for this script is http://www.wittsend.com/mhw/smbmount.html.
    Please _note_ that this will change (for good) in Samba 2.0.5 :-)
  * Added debian/smbumount.sh. It's another wrapper that calls smbumount-2.2.x
    or smbumount-2.0.x depending on the kernel currently running.
  * Not using -t for savelog in cron.weekly script.
  * Recompiled without libreadlineg-dev (Samba does not seem to be using
    it so unnecessary dependencies are produced).
  * glibc2.1 build.
  * Removed smbpasswd.8 man page from the debian/ directory because it is
    now being provided upstream.
  * Got rid of the ugly hack I put in source/lib/util_sock.c to have
    IPTOS_LOWDELAY and IPTOS_THROUGHPUT defined. Now I patched the
    autoconf stuff to #include <netinet/ip.h>. I've sent the patch to
    Jeremy Allison so we have this upstream.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 28 Jun 1999 17:47:19 -0400

samba (2.0.4b-1) unstable; urgency=low

  * New upstream release. This release fixes the following Debian bugs:
    #33838 (Amanda/ Samba 2.0.2 and backing up large filesystems) and
    #33867 (Amanda 2.4.1 and Samba 2.0.2 and large filesystems). Jeremy
    Allison released Samba 2.0.4 and found out that there were a couple
    of minor bugs so he released 2.0.4a. Then he found out about more
    serious bugs and released 2.0.4b. I have built this package several
    times between yesterday and today because of this. Now I am releasing
    the Debian packages for Samba with what I believe will be the latest
    release the Samba Team will make at least in the next 4 days (Jeremy
    is taking a short vacation).
  * Still compiling against glibc2.0 (sorry about that :-)
  * Hacked source/smbwrapper/smbsh.c to fix the problem
    of smbsh not finding the shared library smbwrapper.so. It looks
    now in /usr/lib/samba/ for this file. This fixes #32971, #32989,
    #33278, #34911 and #36317.
  * Made smbfsx depend on samba-common because smbfsx uses /etc/samba/smb.conf
    and /etc/samba/codepages/. This fixes #33128 (smbmount complains about
    missing /etc/smb.conf).
  * Package swat does not depend on httpd anymore (there's no need to).
    This fixes #35795 (swat requires httpd).
  * Renamed smbmount-2.1.x and smbumount-2.1.x to smbmount-2.2.x and
    smbumount-2.2.x. Same applies to the man pages.
  * Changed minor type in smbmount's man page (changed "\"" by "\'"). This
    fixes #34070 (wrong quotes in manpage).
  * Used Fabrizio Polacco's <fpolacco@icenet.fi> procedure to create the
    Debian package for Samba. This closes #35781 (samba has no pristine
    source).
  * Changes to /etc/cron.weely/samba: rotate /var/log/{nmb,smb}.old only
    if the size of either is different than 0. Also, added comments at the
    beginning of this script to explain how rotation of log files works in
    Samba. Thanks to ujr@physik.phy.tu-dresden.de (Ulf Jaenicke-Roessler)
    for the suggestions. This closes #37490 (cron.weekly script rotates not
    used [sn]mb.old files). As I side effect, this should also close
    #31462 (still trouble with /etc/cron.weekly/samba).
  * Check for old /etc/pam.d/samba file which is not provided by this version
    of the Debian Samba package but was provided in older versions. If this
    file exists we delete it. We check for this in the postinst. This closes
    #37356 (samba put stuff in pam.d that pam complains about) and #34312
    (libpam0g: questions during upgrade).
  * Make sure the mode of /etc/samba/smbpasswd is set to 600. This is done
    in the postinst script. This closes #35730 (Security problem with
    /etc/samba/smbpasswd when upgrading from samba 1.9.18p8-2 to 2.0.3-1).
  * I have just checked and it looks like #28748 (smbfsx doesn't "return ")
    has been fixed. This might have been fixed since a long time ago.
  * Long long standing bug #18488 (smbclient: internal tar is broken) is
    closed in this release of Samba. The bug might have been closed for a
    long long time, but I did not check for this before.
  * Temporary fix to the annoying "Unknown socket option IPTOS_LOWDELAY"
    message. This fixes #33698 (socket option IPTOS_LOWDELAY no longer works),
    #34148 (warnings from smbd) and #35333 (samba warnings).

 -- Eloy A. Paris <peloy@debian.org>  Thu, 20 May 1999 00:35:57 -0400

samba (2.0.3-1) unstable; urgency=low

  * New upstream version.
  * Removed the convert_smbpasswd.pl program I created and put in
    /usr/doc/samba/ because there's a convert_smbpasswd script in the
    upstream sources that does the same thing. I modified the postinst
    script to use this script instead of the one I created.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 28 Feb 1999 01:35:37 -0400

samba (2.0.2-2) unstable; urgency=low

  * Updated the README.Debian file.
  * Updated the description of the samba package in the control file.
  * The binaries smbmnt and smbumount-2.1.x in the smbfsx package are now
    installed setuid root as they should be. This was done by doing a
    a "chmod u+s" for each binary in debian/rules and by creating the
    file debian/smbfsx.suid.
  * Minor patch to source/client/smbumount.c to allow normal users
    to umount what they have mounted (problem was a kernel vs. libc6
    size mismatch). I sent the patch upstream.
  * Created debian/smbwrapper.dirs so the directory /usr/lib/samba/ is
    created.
  * Modified debian/rules to move smbwrapper.so from debian/tmp/usr/bin/ to
    debian/smbwrapper/usr/lib/samba/.
  * Hacked source/smbwrapper/smbsh.c to fix the problem
    of smbsh not finding the shared library smbwrapper.so.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Feb 1999 18:11:34 -0400

samba (2.0.2-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 11 Feb 1999 01:35:51 -0400

samba (2.0.1-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Sat,  6 Feb 1999 06:51:18 -0400

samba (2.0.0final-4) unstable; urgency=low

  * The samba postinst made an unwarranted assumption that the file
    /etc/samba/smbpasswd exists. If the file did not exist (which is
    perfectly valid) the postinst will fail. This fixes #32953.

 -- Eloy A. Paris <peloy@debian.org>  Fri,  5 Feb 1999 23:32:46 -0400

samba (2.0.0final-3) unstable; urgency=low

  * Added to debian/control a "Depends: ${shlibs:Depends}" line for the
    samba-common package so dependencies for this package are set
    correctly (thanks to Dark for pointing this out).

 -- Eloy A. Paris <peloy@debian.org>  Thu,  4 Feb 1999 09:45:21 -0400

samba (2.0.0final-2) unstable; urgency=low

  * Finally!!! The first upload to unstable. Sorry for the delay folks
    but I have been quite busy lately :-) Another reason for the delay
    is that I wanted to ease the migration from Samba 1.9.18p10 and
    before to Samba 2.0.0. I changed the location of the config. files
    from /etc/ to /etc/samba/ and this made things a little bit harder.
  * This package needs 2.2 kernel headers to compile (well, this is
    true for the smbfsx package, all others compile fine with 2.0 kernel
    headers).
  * Created a preinst script for the samba package to take care of the
    location migration of smb.conf (from /etc/ to /etc/samba/). The
    preinst script also takes care of moving /etc/smbpasswd to its new
    location (/etc/samba/).
  * Created postinst and postrm scripts to add/remove an entry for swat
    in /etc/inetd.conf.
  * I had forgotten to install the sambaconfig script so I changed
    debian/rules to install this script.
  * Added a postrm script for the samba package (I had forgotten to add
    this script to the new Samba packages after the migration from 1.9.18
    to 2.0.0).
  * Created a small Perl script that is called from the samba postinst
    to convert the smbpasswd from the old format used in version prior
    to 2.0.0 to the new one used in 2.0.0 and beyond.
  * The upgrade process should be automatically now. Please let me know
    of any problems you encounter.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 23 Jan 1999 09:34:10 -0400

samba (2.0.0final-1) experimental; urgency=low

  * Finally!!! Samba 2.0.0 is here! I am not uploading to unstable
    because I still have to work out the migration from the old
    samba packages to the new ones. I also need to work more on the
    new swat package.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 14 Jan 1999 22:40:02 -0400

samba (2.0.0beta5-1) experimental; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  5 Jan 1999 00:37:57 -0400

samba (2.0.0beta4-1) experimental; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 23 Dec 1998 18:37:45 -0400

samba (2.0.0beta3-1) experimental; urgency=low

  * New upstream version.
  * I have just realized that the documentation patches (for man pages)
    that I used for the 1.9.18 release are not longer necessary because
    there was a major re-write of all the Samba documentation that added
    the missing bits of information. So, I have just removed these minor
    patches.

 -- Eloy A. Paris <peloy@debian.org>  Tue,  8 Dec 1998 12:00:30 -0400

samba (2.0.0beta2-1) experimental; urgency=low

  * New upstream version.
  * This new version fixes the potential security problem that
    was posted to debian-private (using the "message command" parameter
    to execute arbitrary commands from messages sent from LinPopUp).
  * Changed /etc/init.d/samba to use one of the variables stored in
    /etc/samba/debian_config to know how Samba is being run (from inetd or
    as daemons) instead of grepping /etc/inetd.conf which may not exist
    if the user is running xinetd (this fixes bug #29687 - assumes using
    vanilla inetd)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Nov 1998 23:32:03 -0400

samba (2.0.0beta1-1) experimental; urgency=low

  * First beta release of the samba-2.0.0 code. Before the beta I was
    working with sources downloaded directly from the CVS server. This
    package goes into experimental and I plan to release the new
    samba to unstable as soon as it gets out of beta.
  * Created several packages out of the Samba sources. They are:
    samba (nmbd and smbd daemons + related programs), smbclient (FTP
    like command line utility to retrieve files from SMB servers),
    swat (Samba Web Administration Tool), samba-common (common files
    used by samba, smbclient and swat), smbfsx (smbfs utilities for
    kernels >= 2.1.70), smbwrapper and samba-doc (Samba documentation).
  * Refreshed debian/samba-doc.docs so recently added docs. are
    installed in the samba-doc package. New additions include man
    pages in the /usr/doc/samba-doc/htmldocs/ directory.
  * Deleted Debian specific nmblookup(1) man page as it is now upstream.
  * Added smbtorture to smbclient package.
  * Moved rpcclient from the samba package to the smbclient package.
  * The Samba daemons (nmbd and smbd) now create a PID file so I changed
    all calls to start-stop-daemon to use the PID file.
  * Fixed debian/rules to install mksmbpasswd (fixes #27655).
  * Modified /etc/init.d/samba so nmbd is started without the -a (append
    to the log file instead of overwrite) switch. The new behavior of
    nmbd is to NOT overwrite log files, so the -a switch can be deleted
    safely.
  * Moved from debstd to debhelper.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  1 Oct 1998 08:37:41 -0400

samba (1.9.18p10-5) frozen unstable; urgency=high

  * Oppsss!!! While fixing bug #26884 I introduced a bug even worse than
    the one I was trying to fix: in /etc/init.d/samba I got rid of the test
    that tells us whether the Samba daemons are running from inetd or as
    standalone daemons. I corrected the problem by editing again
    /etc/init.d/samba to uncomment the test.
  * Wishlist bug #28298 (typos in samba) was fixed.
  * Wishlist bug #28309 (typos in smb.conf) was fixed.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 28 Oct 1998 09:11:47 -0400

samba (1.9.18p10-4) unstable; urgency=low

  * Minor patch to debian/rules to delete *substvars instead of only
    substvars when doing a "debian/rules clean" (thanks to Daniel Jacobowitz
    <dmj@andrew.cmu.edu> for this).
  * Small patch to source/shmem_sysv.c that eases compilation under
    glibc-2.1 (thanks to Daniel <dmj@andrew.cmu.edu> for this).

 -- Eloy A. Paris <peloy@debian.org>  Thu, 17 Sep 1998 15:33:49 -0400

samba (1.9.18p10-3) unstable; urgency=low

  * Patched smbclient again to fix minor formatting problem introduced
    by Magosanyi Arpad's smbclient patch.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  3 Sep 1998 11:03:23 -0400

samba (1.9.18p10-2) unstable; urgency=low

  * Sync'ed include files for the smbfs utilities with the ones in
    kernel 2.1.119.
  * Added to the /usr/doc/samba/examples/ directory a new script called
    wins2dns (courtesy of Jason Gunthorpe <jgg@deltatee.com>) that
    generates BIND sonze files for hosts in the WINS database.
  * Patched smbclient to include enhancements by Magosanyi Arpad
    <mag@bunuel.tii.matav.hu> that make scripting easier.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 28 Aug 1998 13:34:54 -0400

samba (1.9.18p10-1) stable unstable; urgency=low

  * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
    description of what has changed). I built a 1.9.18p9-1 but I
    never released it because an obscure bug was found just a couple
    of days before the official release, so the Samba Team stopped
    the rollover of 1.9.18p9.
  * Updated documentation (new files were added to the docs/ directory
    that were not installed in /usr/doc/samba/).
  * Fixed long standing bug #7695 (smb.conf's man page doesn't document
    'printing=lprng') - I made a couple of changes to the man page to
    include references to lprng.
  * Fixes bug #24930 (samba needs to suggest psmisc?). I don't think it
    is necessary to make samba suggest psmisc just because the postinst
    script mentions to call killall. So, I removed all references to
    "killall" in the scripts.
  * Fixes bug #25999 (Samba does not by default work with unix password
    sync): I added the "passwd program" and "passwd chat" parameters to
    the sample smb.conf to reflect the Debian environment.

 -- Eloy A. Paris <peloy@debian.org>  Fri, 21 Aug 1998 08:59:18 -0400

samba (1.9.18p9-1) unstable; urgency=low

  * New upstream version (see /usr/doc/samba/WHATSNEW.txt for a
    description of what has changed).
  * Removed Jeremy Allison's patch applied to 1.9.18p8-2 because it is
    now part of the new upstream version.
  * Corrected small typo in addtosmbpass' man page (fixes #25629).

 -- Eloy A. Paris <peloy@debian.org>  Tue, 11 Aug 1998 08:53:08 -0400

samba (1.9.18p8-2) frozen unstable; urgency=medium

  * Applied patch received from Jeremy Allison (Samba Team) that fixes
    "grave" bug #23903 (samba maps username before authenicating with
    NT password server).
  * Added a "sleep 2" between "start-stop-daemon --stop" and
    "start-stop-daemon --start" in /etc/init.d/samba so when this script
    is called with the "restart" parameter the Samba daemons are restarted
    properly. This fixes bug #24211 (init.d script doesn't restart).
  * Sent start-stop-daemon output in /etc/init.d/samba to /dev/null to
    avoid annoying warning messages.
  * Added perfomance tune parameters to sample /etc/smb.conf (SO_SNDBUF=4096
    and SO_RCVBUF=4096 to "socket options" in /etc/smb.conf). I can't
    find who sent this suggestion to me. If you are listening, drop me a
    note and I'll put your name here :-)

 -- Eloy A. Paris <peloy@debian.org>  Mon, 29 Jun 1998 08:45:01 -0400

samba (1.9.18p8-1) frozen unstable; urgency=low

  * New upstream release that fixes _lots_ of "ugly" bugs. The list of
    fixed bugs is too long to include here (see /usr/doc/samba/WHATSNEW.txt).
  * Fixed postinst to quote arguments to if [ arg .. ] constructs
    (fixes #22881).
  * Applied Jeremy Allison's patch (posted to the samba-ntdom mailing
    list) that solves a problem with username maps (the Samba Team did
    not catch this problem before final 1.9.18p8).
  * Made /etc/init.d/samba to print out a warning when Samba is running
    from inetd and the user runs /etc/init.d/samba to start|stop|restart
    Samba (there's no point on doing this because inetd will start the
    daemons again when there is traffic on UDP port 137-139).

 -- Eloy A. Paris <peloy@debian.org>  Sat, 13 Jun 1998 00:18:25 -0400

samba (1.9.18p7-4) frozen unstable; urgency=medium

  * Fixes the serious problem of having the WINS name server
    database getting deleted at boot time. That happened because the
    WINS database was being stored under /var/lock/samba/ and all files
    under /var/lock/ are deleted at boot time. The place where the WINS
    database is stored was moved to /var/samba/.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 18 May 1998 20:24:29 -0400

samba (1.9.18p7-3) stable; urgency=high

  * Libc5 version for Bo (stable) that fixes the recently reported
    security hole.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 18 May 1998 20:19:33 -0400

samba (1.9.18p7-2) frozen unstable; urgency=low

  * Added patches from the non-mantainer upload that make us able
    to compile Samba on Alpha systems. This fixes bug #22379.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 13 May 1998 20:38:51 -0400

samba (1.9.18p7-1) frozen unstable; urgency=low

  * New upstream release (just bug fixes, no new functionality).

 -- Eloy A. Paris <peloy@debian.org>  Wed, 13 May 1998 11:47:32 -0400

samba (1.9.18p6-2) frozen unstable; urgency=low

  * Uploaded to frozen (I forgot to upload last version to frozen
    so it got installed only in unstable).

 -- Eloy A. Paris <peloy@debian.org>  Tue, 12 May 1998 18:10:17 -0400

samba (1.9.18p6-1.1) unstable; urgency=low

  * non-maintainer upload for Alpha
  * patch needed for source/quota.c (_syscall4() confusion)

 -- Paul Slootman <paul@debian.org>  Tue, 12 May 1998 20:39:13 +0200

samba (1.9.18p6-1) unstable; urgency=low

  * New upstream release that fixes a possible buffer overflow.
    This security hole was reported on BugTraq by Drago. The
    previous Debian version (1.9.18p5-1) was not released because
    1.9.18p5 and 1.9.18p6 were released very closely.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 11 May 1998 20:28:33 -0400

samba (1.9.18p5-1) unstable; urgency=low

  * New upstream release (no new funcionality, just bug fixes - see
    /usr/doc/samba/WHATSNEW.txt.gz).
  * Backed off Debian patches that were added upstream.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 11 May 1998 08:43:53 -0400

samba (1.9.18p4-2) frozen unstable; urgency=low

  * Patched smbclient(1) man page to not reference the unsopported
    -A parameter (fixes #6863).
  * Changes to start nmbd with the -a option (in /etc/init.d/samba
    and in the entry added to /etc/inetd.conf).
  * Fixed typo in sample smb.conf (fixes #21484).
  * Fixed yet another typo in sample smb.conf (fixes #21447).

 -- Eloy A. Paris <peloy@debian.org>  Fri, 17 Apr 1998 22:19:23 -0400

samba (1.9.18p4-1) frozen unstable; urgency=low

  * New upstream version that fixes several bugs.
  * New scheme for keeping track of Debian specific configuration.
    This new scheme fixes bug #18624 (Samba always asks the user about
    configuration options). New scheme stores Debian specific
    configuration information in /etc/samba/debian_config.
  * Changes to /usr/sbin/sambaconfig, prerm and postinst to support the
    new configuration scheme.
  * Moved required kernel 2.1.x include files inside the source tree
    so I don't have to do very nasty things like creating crazy
    symlinks in /usr/include to make this package compile. This
    allows non-root users to build the package and fixes bug
    #20104.
  * Fixed address of the FSF in /usr/doc/samba/copyright (problem
    reported by lintian).
  * The /etc/init.d/samba script now supports the force-reload
    argument, as required by the policy (problem reported by lintian).
  * Added a "rm /etc/cron.weekly/samba" at the end of the postinst.
  * Now the samba package can be installed even if no nmbd or smbd processes
    are running. This fixes the following bugs: #8917, #9334, #10268,
    #10411, #11146 and #13387.
  * Provides the original README in /usr/doc/samba. This fixes bug #9693.
  * Added a --no-reload option to sambaconfig to not reload Samba
    after configuration.
  * Created man pages for sambaconfig(8), addtosmbpass(8),
    mksmbpasswd(8) and nmblookup(1).
  * Corrected small typo in sample /etc/smb.conf.
  * Added two new parameters to /etc/smb.conf: "preserver case" and
    "short preserve case".
  * "rm -Rf /var/lock/samba" in postrm when package is being purged.
  * Patched upstream source (nmbd.c) to not overwrite log files when
    nmbd is called with the -a parameter (fixes #17704: nmbd ignores
    -a option).
  * /etc/init.d/samba now starts the nmbd daemon with the -a parameter
    to not overwrite log files.

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Mar 1998 21:22:03 -0400

samba (1.9.18p3-1) unstable; urgency=low

  * New upstream version.
  * Oppsss!!! I really screwed it up (actually, debstd did).
    1.9.18p2-2 still contained man pages (smbmount and smbumount) part
    of other packages. This version does have this corrected. If not,
    I no longer deserve to be a Debian developer! So, this version
    fixes bug #18438 and some of the bugs I claimed to fix in
    1.9.18p2-2. Oh, by the way, I fixed the problem by running debstd
    with -m in debian/rules (man pages are installed by "make install"
    so it's a bad idea to re-install man pages with debstd).

 -- Eloy A. Paris <peloy@debian.org>  Mon, 23 Feb 1998 17:32:42 -0400

samba (1.9.18p2-2) unstable; urgency=low

  * Fixes bugs #18017, #17999, #17961, #17932: old 1.9.18p2-1 provided
    a man page for smbmount, which conflicts with package smbfs. This
    was solved by creating a multi-binary package that produces
    package samba and new package smbfsx.
  * Fixes bug #18000 (typo in postinst).
  * Fixes bug #17958 (postinst asks obsolete question). Actually,
    the question is still asked, but only if Samba is run as daemons.
  * Created a multi-binary package from the Samba sources: package
    samba and new package smbfsx which provides SMB mount utilities
    for kernels > 2.1.70.

 -- Eloy A. Paris <peloy@debian.org>  Mon,  9 Feb 1998 19:47:05 -0400

samba (1.9.18p2-1) unstable; urgency=low

  * New upstream version.
  * Removed /etc/cron.weekly/samba because Samba does not handle well
    rotation of log files (if the log file is rotated Samba will
    continue to log to the rotated file, instead of the just created
    one). In any case, Samba will rotate log files after an specific
    file size.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 27 Jan 1998 22:34:27 -0400

samba (1.9.18p1-2) unstable; urgency=low

  * Created a multi-binary package out of the Samba sources to provide
    packages samba and smbfsx (userland utilities to work with
    smbfs with kernels > 2.1.x.

 -- Eloy A. Paris <peloy@debian.org>  Sat, 17 Jan 1998 09:23:48 -0400

samba (1.9.18p1-1) unstable; urgency=low

  * New upstream version.
  * Created /etc/cron.daily/samba to save a copy of /etc/smbpasswd in
    /var/backups/smbpasswd.bak.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 14 Jan 1998 13:40:56 -0400

samba (1.9.18alpha14-1) unstable; urgency=low

  * New upstream version.
  * Added a note to the postinst script telling the user that he/she
    needs to run smbpasswd manually after creating a new /etc/smbpasswd
    from /etc/passwd.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 23 Dec 1997 23:44:37 -0400

samba (1.9.18alpha13-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 16 Dec 1997 13:02:32 -0400

samba (1.9.18alpha12-1) unstable; urgency=low

  * New upstream version.
  * Conflicts with the sambades package because the new Samba 1.9.18
    series do not depend on the DES libraries to support encrypted
    passwords.
  * Added parameter "encrypt passwords = yes" to /etc/smb.conf.
  * Compiled with support for quotas in disk_free().
  * Home directories are now exported read only by default.
  * Re-worked debian/rules.
  * Re-worked sample smb.conf.

 -- Eloy A. Paris <peloy@debian.org>  Thu,  4 Dec 1997 22:50:34 -0400

samba (1.9.17p4-1) unstable; urgency=low

  * New upstream version.
  * Made /etc/smb.conf readable by everybody because some Samba utilities
    will fail otherwise when run by non-root users.
  * Dropped PAM support while the PAM libraries are ported to libc6.

 -- Eloy A. Paris <peloy@debian.org>  Tue, 21 Oct 1997 18:08:49 -0400

samba (1.9.17p3-1) unstable; urgency=low

  * New upstream version.
  * Made /etc/smb.conf readable only by root as suggested by smbd's man page.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 15 Oct 1997 09:21:25 -0400

samba (1.9.17p2-2) unstable; urgency=low

  * Running Samba as daemons instead of from inetd.
  * Removing netbios entries in /etc/inetd.conf.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 9 Oct 1997 23:37:25 -0400

samba (1.9.17p2-1) unstable; urgency=low

  * New upstream version that fixes a serious security hole.
  * Removed Debian patches added in 1.9.17-1 and 1.9.17p1-1 because
    these patches are now part of the upstream release.

 -- Eloy A. Paris <peloy@debian.org>  Sun, 28 Sep 1997 22:54:33 -0400

samba (1.9.17p1-1) unstable; urgency=low

  * New upstream version.
  * Defined symbol _LINUX_C_LIB_VERSION_MAJOR as 6 in includes.h to shut up
    compiler warnings.
  * Included rpcsvc/ypclnt.h in includes.h to shut up compiler warnings.
  * Included crypt.h to have function prototype for crypt().
  * Included netinet/tcp.h to have some socket options included.
  * Included netinet/ip.h to have some socket options included.
  * Linking with libcrypt (LIBM='... -lcrypt'). Without including this
    library smbd generates a seg. fault when authenticating users (?).

 -- Eloy A. Paris <peloy@debian.org>  Wed, 10 Sep 1997 22:09:18 -0400

samba (1.9.17-1) unstable; urgency=low

  * New upstream version (called the "Browse Fix Release")
  * Added the option --oknodo to the start-stop-daemon invocation in prerm
    script. This was because the prerm was failing because start-stop-daemon
    was returning an error code if no nmbd or smbd daemons were found
    to kill.
  * The function yp_get_default_domain(), referenced in three source
    files was part of libc5 but with libc6 (glibc2) it has been moved
    to libnss_nis. Since the linker was unable to find the function
    I had to add LIBSM='-lnss_nis' to debian/rules.
  * Added -DNO_ASMSIGNALH and -DGLIBC2 to FLAGSM in debian/rules
    because compiling was failing because of conflicts with glibc2.
  * Patched source/includes.h to include termios.h if GLIBC2 is defined.

 -- Eloy A. Paris <peloy@debian.org>  Wed, 27 Aug 1997 08:39:32 -0400

samba (1.9.17alpha5-1) unstable; urgency=low

  * New upstream version.

 -- Eloy A. Paris <peloy@debian.org>  Thu, 14 Aug 1997 18:05:02 -0400

samba (1.9.16p11-3) unstable; urgency=low

  * Fixed accidental omission of /etc/pam.d/samba.

 -- Klee Dienes <klee@debian.org>  Sat, 15 Mar 1997 22:31:26 -0500

samba (1.9.16p11-2) unstable; urgency=low

  * Recompiled against newer PAM libraries.
  * Added /etc/pam.d/samba.

 -- Klee Dienes <klee@debian.org>  Sat, 8 Mar 1997 01:16:28 -0500

samba (1.9.16p11-1) unstable; urgency=low

  * New upstream release.
  * Added PAM support.

 -- Klee Dienes <klee@debian.org>  Tue, 25 Feb 1997 18:00:12 -0500

samba (1.9.16p9-2) unstable; urgency=low

  * minor packaging changes

 -- Klee Dienes <klee@sauron.sedona.com>  Sun, 3 Nov 1996 11:45:37 -0700

samba (1.9.16p9-1) unstable; urgency=low

  * upgraded to new upstream version

 -- Klee Dienes <klee@sauron.sedona.com>  Sat, 26 Oct 1996 21:38:20 -0700

1.9.16alpha10-1:
 960714
 * Removed Package_Revision from control file.
 * Removed -m486 compiler option.
 * Added Architecture, Section and Priority fields to control file.
 * Upgraded to latest upstream version.
 * Uses update-inetd now.
 * Added shadow passwords support.
 * Fixed Bug#1946: nmbd won't browse

1.9.15p4-1:
 951128
 * Upgraded to latest upstream version.
   * Fixed many bugs.
   * Adds Master Browsing support.
 * Converted to ELF.
 * Fixed bug #1825 - nmbd is now killed when removing samba.

1.9.14-1:
 950926 Andrew Howell <andrew@it.com.au>
 * Upgraded to latest version.
 * Fixed Bug #1139 - samba won't print

1.9.14alpha5-1:
 * Fixes killing of inetd problem in debian.postint and debian.postrm

1.9.14alpha5-0:
 950704 Andrew Howell <andrew@it.com.au>
 * Taken over samba package from Bruce Perens.
 * Upgraded to newest version of samba.

1.9.02-1:
 9-January-1994 Bruce Perens <Bruce@Pixar.com>
 * Added Debian GNU/Linux package maintenance system files, and
   configured for Debian systems.