[Announce] Samba 4.0.3 Available for Download

Karolin Seeger kseeger at samba.org
Tue Feb 5 06:41:41 MST 2013

				"Harmony makes small things grow,
				 lack of it makes great things


Release Announcements

This is is the latest stable release of Samba 4.0.

Major enhancements in Samba 4.0.3 include:

o  check_password_quality: Handle non-ASCII characters properly (bug #9105).
o  Fix ACL problem with delegation of privileges and deletion of accounts
   over LDAP interface (bug #8909).
o  Fix 'smbd' panic triggered by unlink after open (bug #9571).
o  smbd: Fix memleak in the async echo handler (bug #9549).

Known issues:

o  For more details concerning the ACL problem with delegation of privileges
   and deletion of accounts over LDAP interface (bugs #8909 and #9267)
   regarding upgrades from older 4.0.x versions, please see


   which will be filled with details once we have worked out an upgrade

Changes since 4.0.2:

o   Michael Adam <obnox at samba.org>
    * BUG 9568: Document the command line options in dbwrap_tool(1).

o   Jeremy Allison <jra at samba.org>
    * BUG 9196: defer_open is triggered multiple times on the same request.
    * BUG 9518: conn->share_access appears not be be reset between users.
    * BUG 9550: sigprocmask does not work on FreeBSD to stop further signals in
      a signal handler.
    * BUG 9572: Fix file corruption during SMB1 read by Mac OSX 10.8.2 clients.
    * BUG 9586: smbd[29175]: disk_free: sys_popen() failed" message logged in
      /var/log/message many times.
    * BUG 9587: Archive flag is always set on directories.
    * BUG 9588: ACLs are not inherited to directories for DFS shares.

o   Andrew Bartlett <abartlet at samba.org>
    * BUG 8909: Fix ACL problem with delegation of privileges and deletion of
      accounts over LDAP interface.
    * BUG 9461: FSMO seize of naming role fails: NT_STATUS_IO_TIMEOUT.
    * BUG 9564: Fix compilation of Solaris ACL module.
    * BUG 9581: gensec: Allow login without a PAC by default.
    * BUG 9596: Linked attribute handling should be by GUID.
    * BUG 9598: Use pid,task_id as cluster_id in process_single just like
    * BUG 9609: ldb: Ensure to decrement the transaction_active whenever we
      delete a transaction.
    * BUG 9609: Add 'ldbdump' tool.
    * BUG 9609: ldb: Remove no-longer-existing ltdb_unpack_data_free from
    * BUG 9609: ldb: Change ltdb_unpack_data to take an ldb_context.
    * BUG 9610: dsdb: Make secrets_tdb_sync cope with -H secrets.ldb.

o   Björn Baumbach <bb at sernet.de>
    * BUG 9512: wafsamba: Use additional xml catalog file.
    * BUG 9517: samba_dnsupdate: Set KRB5_CONFIG for nsupdate command.
    * BUG 9552: smb.conf(5): Update list of available protocols.
    * BUG 9568: Add dbwrap_tool.1 manual page.
    * BUG 9569: ntlm_auth(1): Fix format and make examples visible.

o   Ira Cooper <ira at samba.org>
    * BUG 9575: Duplicate flags defined in the winbindd protocol.

o   Günther Deschner <gd at samba.org>
    * BUG 9474: Downgrade v4 printer driver requests to v3.
    * BUG 9595: s3-winbind: Fix the build of idmap_ldap.

o   David Disseldorp <ddiss at samba.org>
    * BUG 9378: Add extra attributes for AD printer publishing.

o   Stephen Gallagher <sgallagh at redhat.com>
    * BUG 9609: ldb: Move doxygen comments for ldb_connect to the right place.

o   Volker Lendecke <vl at samba.org>
    * BUG 9541: Make use of posix_openpt.
    * BUG 9544: Fix build of vfs_commit and plug in async pwrite support.
    * BUG 9546: Fix aio_suspend detection on FreeBSD.
    * BUG 9548: Correctly detect O_DIRECT.
    * BUG 9549: smbd: Fix memleak in the async echo handler.

o   Stefan Metzmacher <metze at samba.org>
    * BUG 8909: Fix ACL problem with delegation of privileges and deletion of
      accounts over LDAP interface.
    * BUG 9105: check_password_quality: Handle non-ASCII characters properly.
    * BUG 9481: samba_upgradeprovision: fix the nTSecurityDescriptor on more
    * BUG 9499: s3:smb2_negprot: set the 'remote_proto' value.
    * BUG 9508: s4:drsuapi: Make sure we report the meta data from the cycle
    * BUG 9540: terminate the irpc_servers_byname() result with
    * BUG 9598: Fix timeouts of some IRPC calls.
    * BUG 9609: Fix a warning by converting from TDB_DATA to struct ldb_val.

o   Matthieu Patou <mat at matws.net>
    * BUG 8909: Add documentation.
    * BUG 9565: Adding additional Samba 4.0 DC to W2k8 srv AD domain (in win200
      functional level) produces dbcheck errors.

o   Arvid Requate <requate at univention.de>
    * BUG 9555: s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup.

o   Rusty Russell <rusty at rustcorp.com.au>
    * BUG 9609: tdb: Add '-e' option to tdbdump (and document it).
    * BUG 9609: tdb: 'tdbdump' should log errors, and fail in that case.
    * BUG 9609: tdb: Add tdb_rescue() to allow an emergency best-effort dump.

o   Samba-JP oota <ribbon at samba.gr.jp>
    * BUG 9528: Remove superfluous bracket in samba.8.xml.
    * BUG 9530: Fix typo in vfs_tsmsm.8.xml.

o   Andreas Schneider <asn at samba.org>
    * BUG 9574: Fix a possible null pointer dereference in spoolss.

o   Karolin Seeger <kseeger at samba.org>
    * BUG 9591: Correct meta data in ldb manpages.

o   Pavel Shilovsky <piastry at etersoft.ru>
    * BUG 9571: Fix 'smbd' panic triggered by unlink after open.

o   Andrew Tridgell <tridge at samba.org>
    * BUG 9609: ldb: Fix callers for ldb_pack_data() and ldb_unpack_data().
    * BUG 9609: ldb: move ldb_pack.c into common.

o   Jelmer Vernooij <jelmer at samba.org>
    * BUG 9503: waf assumes that pythonX.Y-config is a Python script.

Reporting bugs & Development Discussion

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the Samba 4.0 product in the project's Bugzilla
database (https://bugzilla.samba.org/).

== Our Code, Our Bugs, Our Responsibility.
== The Samba Team

Download Details

The uncompressed tarballs and patch files have been signed
using GnuPG (ID 6568B7EA).  The source code can be downloaded


The release notes are available online at:


Binary packages will be made available on a volunteer basis from


Our Code, Our Bugs, Our Responsibility.

                        The Samba Team

More information about the samba-announce mailing list