[SCM] Samba Shared Repository - annotated tag samba-4.20.3 created
Stefan Metzmacher
metze at samba.org
Fri Aug 2 12:02:50 UTC 2024
The annotated tag, samba-4.20.3 has been created
at 235085c00d0f9aecc602974e9bec6d6ac46b03d6 (tag)
tagging 803665cb481c6a897e9bdaecaccfc7a353b3683a (commit)
replaces samba-4.20.2
tagged by Stefan Metzmacher
on Fri Aug 2 14:01:59 2024 +0200
- Log -----------------------------------------------------------------
samba: tag release samba-4.20.3
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEgfXigyvSVFoYl7cTqplEL7aAtiAFAmasyrcACgkQqplEL7aA
tiDSnxAArU3wJX+0KymejzTnZS9IULSQ9Oq38u0duzyXTQn8imL5bmpvVSk+0jO4
53Qqrufcirv1uc0w9po4yoqddA7WmcDxzYU2wfbTdW3vsIuTlMm6hg/cuOL8coIi
m6791xNybvq5xPX5JLzu9hLiCmBpdg7oNvznoziCmgyfCGJmrzOGq/H/fl9ub6o4
jyDzEPA/d79NoxzACIqLCsBfiitjf0cqin5kpfT6DcGSZ0cvvITN+j/kfStkM9P+
J83KlBOKuHhsjZG5GJQPXFlL3V3rgoqMvB48qSsWtPBBC2a7NDdTuVS7MR2JdlIA
SU/YXYi9vRL354vdN22Lj7X+1OaiMb9GSmuUwuRaGKjeUfMchLCWSLcRJp/EZ1z8
1VA23bWNdCQCLxa8/TLnuqkXtz/Sx/0O+p752HyYEt567bfk8jXEOQy/NSGbgGbC
lRbu0A7PwIg9H+42ap8hjn+UegtHTpdV6QF7EcT4Z8ZjaM00NidR7AKElqOVYl4D
LfNvv9WY4jxR6PaNgFlkR2vwCp1gWHnm5Z/QmRe4xShKSK/Udw3k8v5yZg88zaAS
Mnt06I7PHZcnP6HEGanbecbWQ3Da4qkuBZjPQElkr1W78Mj1O3riE0G+ZUANEaz2
Gk9CkfXdVhSqnZTdJX1Q1KBrVjzo7CGHVn11eNtYo9HRUnYQdCk=
=zBkL
-----END PGP SIGNATURE-----
Andreas Schneider (2):
gitlab-ci: Also add the git directory for pipeline in the main mirror
s3:printing: Allow to run samba-bgqd as a standalone systemd service
Andrew Bartlett (2):
dsdb: Reduce minimum maxPwdAge from 1 day to nil
python/tests/krb5: Prepare for PKINIT tests with UF_SMARTCARD_REQUIRED
Douglas Bagnall (19):
buildtools: sanitise strange characters in vendor strings
build: --vendor-suffix instead of --vendor-patch-revision --vendor-name
selftest: move some more expected failures to expectedfail.d
docs-xml:manpages: allow for longer version strings
cmdline:burn: '-U' does not imply secrets without '%'
selftest: run the cmdline tests that we already have
cmdline:tests: extend cmdline_burn tests
cmdline:burn: do not retain false memories
cmdline:burn: handle arguments separated from their --options
cmdline:burn: always return true if burnt
cmdline:burn: localise some variables
cmdline:burn: do not burn options starting --user-*, --password-*
cmdline: test_cmdline tests more burning
cmdline:burn: use allowlist to ensure more passwords burn
cmdline:burn: explicitly burn --username
cmdline:burn: add a note about short option combinations
cmdline: samba-tool test for bad option warning
cmdline:burn: list commands to always burn; warn on unknown
libcli:security: allow spaces after BAD:
Jo Sutton (4):
tests/krb5: Fix PK-INIT test framework to allow expired password keys
tests/krb5: Allow creation of disabled accounts for testing
tests/krb5: Add tests for errors produced when logging in with unusable accounts
third_party/heimdal: Import lorikeet-heimdal-202406240121 (commit 4315286377278234be2f3b6d52225a17b6116d54)
Jule Anger (1):
VERSION: Bump version up to Samba 4.20.3...
Pavel Filipenský (1):
.gitlab-ci-main.yml: Add safe.directory '*'
Ralph Boehme (1):
third_party/heimdal: Import lorikeet-heimdal-202407041740 (commit 42ba2a6e5dd1bc14a8b5ada8c9b8ace85956f6a0)
Stefan Metzmacher (29):
s4:libcli/ldap: ldap4_new_connection() requires a valid lp_ctx
ldb_ildap: require ldb_get_opaque(ldb, "loadparm") to be valid
s4:libcli/ldap: fix no memory error code in ldap_bind_sasl()
s4:libcli/ldap: force GSS-SPNEGO in ldap_bind_sasl()
s4:lib/tls: remove tstream_tls_push_trigger_write step
s3:lib/tls: we need to call tstream_tls_retry_handshake/disconnect() until all buffers are flushed
s4:lib/tls: assert that event contexts are not mixed
s4:lib/tls: split out tstream_tls_prepare_gnutls()
s4:lib/tls: we no longer need ifdef GNUTLS_NO_TICKETS
s4:lib/tls: include a TLS server name indication in the client handshake
s4:lib/tls: split out tstream_tls_verify_peer() helper
s4:lib/tls: add tstream_tls_params_client_lpcfg()
s3:rpc_server/mdssvc: make use of tstream_tls_params_client_lpcfg()
s4:librpc/rpc: make use of tstream_tls_params_client_lpcfg()
s4:libcli/ldap: make use of tstream_tls_params_client_lpcfg()
lib/crypto: add legacy_gnutls_server_end_point_cb() if needed
s4:lib/tls: add tstream_tls_channel_bindings()
third_party/heimdal: import lorikeet-heimdal-202404171655 (commit 28a56d818074e049f0361ef74d7017f2a9391847)
wscript_configure_embedded_heimdal: define HAVE_CLIENT_GSS_C_CHANNEL_BOUND_FLAG
auth/gensec: add gensec_set_channel_bindings() function
auth/ntlmssp: implement channel binding support
s4:gensec_gssapi: implement channel binding support
s3:crypto/gse: implement channel binding support
s4:ldap_server: add support for tls channel bindings
s4:libcli/ldap: add tls channel binding support for ldap_bind_sasl()
selftest: split out selftest/expectedfail.d/samba4.ldb.simple.ldap-tls
s4:selftest: also test samba4.ldb.simple.ldap*SASL-BIND with ldap_testing:{channel_bound,tls_channel_bindings,forced_channel_binding}
WHATSNEW: Add release notes for Samba 4.20.3.
VERSION: Disable GIT_SNAPSHOT for the 4.20.3 release.
Xavi Hernandez (1):
Fix starvation of pending writes in CTDB queues
-----------------------------------------------------------------------
--
Samba Shared Repository
More information about the samba-cvs
mailing list