[SCM] Samba Shared Repository - annotated tag samba-4.20.3 created

[Stefan Metzmacher]

The annotated tag, samba-4.20.3 has been created
        at  235085c00d0f9aecc602974e9bec6d6ac46b03d6 (tag)
   tagging  803665cb481c6a897e9bdaecaccfc7a353b3683a (commit)
  replaces  samba-4.20.2
 tagged by  Stefan Metzmacher
        on  Fri Aug 2 14:01:59 2024 +0200

- Log -----------------------------------------------------------------
samba: tag release samba-4.20.3
-----BEGIN PGP SIGNATURE-----
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=zBkL
-----END PGP SIGNATURE-----

Andreas Schneider (2):
      gitlab-ci: Also add the git directory for pipeline in the main mirror
      s3:printing: Allow to run samba-bgqd as a standalone systemd service

Andrew Bartlett (2):
      dsdb: Reduce minimum maxPwdAge from 1 day to nil
      python/tests/krb5: Prepare for PKINIT tests with UF_SMARTCARD_REQUIRED

Douglas Bagnall (19):
      buildtools: sanitise strange characters in vendor strings
      build: --vendor-suffix instead of --vendor-patch-revision --vendor-name
      selftest: move some more expected failures to expectedfail.d
      docs-xml:manpages: allow for longer version strings
      cmdline:burn: '-U' does not imply secrets without '%'
      selftest: run the cmdline tests that we already have
      cmdline:tests: extend cmdline_burn tests
      cmdline:burn: do not retain false memories
      cmdline:burn: handle arguments separated from their --options
      cmdline:burn: always return true if burnt
      cmdline:burn: localise some variables
      cmdline:burn: do not burn options starting --user-*, --password-*
      cmdline: test_cmdline tests more burning
      cmdline:burn: use allowlist to ensure more passwords burn
      cmdline:burn: explicitly burn --username
      cmdline:burn: add a note about short option combinations
      cmdline: samba-tool test for bad option warning
      cmdline:burn: list commands to always burn; warn on unknown
      libcli:security: allow spaces after BAD:

Jo Sutton (4):
      tests/krb5: Fix PK-INIT test framework to allow expired password keys
      tests/krb5: Allow creation of disabled accounts for testing
      tests/krb5: Add tests for errors produced when logging in with unusable accounts
      third_party/heimdal: Import lorikeet-heimdal-202406240121 (commit 4315286377278234be2f3b6d52225a17b6116d54)

Jule Anger (1):
      VERSION: Bump version up to Samba 4.20.3...

Pavel Filipenský (1):
      .gitlab-ci-main.yml: Add safe.directory '*'

Ralph Boehme (1):
      third_party/heimdal: Import lorikeet-heimdal-202407041740 (commit 42ba2a6e5dd1bc14a8b5ada8c9b8ace85956f6a0)

Stefan Metzmacher (29):
      s4:libcli/ldap: ldap4_new_connection() requires a valid lp_ctx
      ldb_ildap: require ldb_get_opaque(ldb, "loadparm") to be valid
      s4:libcli/ldap: fix no memory error code in ldap_bind_sasl()
      s4:libcli/ldap: force GSS-SPNEGO in ldap_bind_sasl()
      s4:lib/tls: remove tstream_tls_push_trigger_write step
      s3:lib/tls: we need to call tstream_tls_retry_handshake/disconnect() until all buffers are flushed
      s4:lib/tls: assert that event contexts are not mixed
      s4:lib/tls: split out tstream_tls_prepare_gnutls()
      s4:lib/tls: we no longer need ifdef GNUTLS_NO_TICKETS
      s4:lib/tls: include a TLS server name indication in the client handshake
      s4:lib/tls: split out tstream_tls_verify_peer() helper
      s4:lib/tls: add tstream_tls_params_client_lpcfg()
      s3:rpc_server/mdssvc: make use of tstream_tls_params_client_lpcfg()
      s4:librpc/rpc: make use of tstream_tls_params_client_lpcfg()
      s4:libcli/ldap: make use of tstream_tls_params_client_lpcfg()
      lib/crypto: add legacy_gnutls_server_end_point_cb() if needed
      s4:lib/tls: add tstream_tls_channel_bindings()
      third_party/heimdal: import lorikeet-heimdal-202404171655 (commit 28a56d818074e049f0361ef74d7017f2a9391847)
      wscript_configure_embedded_heimdal: define HAVE_CLIENT_GSS_C_CHANNEL_BOUND_FLAG
      auth/gensec: add gensec_set_channel_bindings() function
      auth/ntlmssp: implement channel binding support
      s4:gensec_gssapi: implement channel binding support
      s3:crypto/gse: implement channel binding support
      s4:ldap_server: add support for tls channel bindings
      s4:libcli/ldap: add tls channel binding support for ldap_bind_sasl()
      selftest: split out selftest/expectedfail.d/samba4.ldb.simple.ldap-tls
      s4:selftest: also test samba4.ldb.simple.ldap*SASL-BIND with ldap_testing:{channel_bound,tls_channel_bindings,forced_channel_binding}
      WHATSNEW: Add release notes for Samba 4.20.3.
      VERSION: Disable GIT_SNAPSHOT for the 4.20.3 release.

Xavi Hernandez (1):
      Fix starvation of pending writes in CTDB queues

-----------------------------------------------------------------------


-- 
Samba Shared Repository