CVS commit: pkgsrc/net/samba4

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/net/samba4
From: "Adam Ciarcinski" <adam%netbsd.org@localhost>
Date: Fri, 17 Apr 2026 08:35:42 +0000

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Apr 17 08:35:42 UTC 2026

Modified Files:
        pkgsrc/net/samba4: Makefile PLIST distinfo
        pkgsrc/net/samba4/patches: patch-lib_util_util__crypt.c

Log Message:
samba4: updated to 4.24.1

Changes since 4.24.0

* BUG 16057: autobuild fails if /proc/version contains trailing space
* BUG 16035: use after free in streams_xattr_connect()
* BUG 16042: rpc workers with long living clients grow server  memory keytab
* BUG 16058: vfs_snapper failing to access or enumerate files in subfolders
* BUG 16040: Samba is not build with FORTIFY_SOURCE
* BUG 16055: Fix tests with MIT Kerberos 1.22.x

4.24.0

NEW FEATURES/CHANGES
* Authentication information audit support
* vfs_streams_xattr can hold larger streams
* Support for remote password management (Entra ID SSPR, Keycloak)
* Kerberos PKINIT KeyTrust logon support
* msDS-KeyCredentialLink validation
* Kerberos PKINIT strong/flexible key mappings
* Kerberos PKINIT SID extension
* KDC includes PAC by default
* KDC can insist clients request canonicalization
* KDC can avoid potentially confusing canonicalization
* KDC provides Kerberos acceptors with canonical client names


To generate a diff of this commit:
cvs rdiff -u -r1.213 -r1.214 pkgsrc/net/samba4/Makefile
cvs rdiff -u -r1.63 -r1.64 pkgsrc/net/samba4/PLIST
cvs rdiff -u -r1.123 -r1.124 pkgsrc/net/samba4/distinfo
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/net/samba4/patches/patch-lib_util_util__crypt.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/samba4/Makefile
diff -u pkgsrc/net/samba4/Makefile:1.213 pkgsrc/net/samba4/Makefile:1.214
--- pkgsrc/net/samba4/Makefile:1.213    Mon Mar  2 10:07:43 2026
+++ pkgsrc/net/samba4/Makefile  Fri Apr 17 08:35:42 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.213 2026/03/02 10:07:43 adam Exp $
+# $NetBSD: Makefile,v 1.214 2026/04/17 08:35:42 adam Exp $
 
 # XXX: Fails to build when mit-krb5 is installed.
-DISTNAME=      samba-4.23.6
+DISTNAME=      samba-4.24.1
 CATEGORIES=    net
 MASTER_SITES=  https://download.samba.org/pub/samba/stable/
 

Index: pkgsrc/net/samba4/PLIST
diff -u pkgsrc/net/samba4/PLIST:1.63 pkgsrc/net/samba4/PLIST:1.64
--- pkgsrc/net/samba4/PLIST:1.63        Sun Dec 28 10:07:56 2025
+++ pkgsrc/net/samba4/PLIST     Fri Apr 17 08:35:42 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.63 2025/12/28 10:07:56 adam Exp $
+@comment $NetBSD: PLIST,v 1.64 2026/04/17 08:35:42 adam Exp $
 bin/cifsdd
 bin/dbwrap_tool
 bin/dumpmscat
@@ -113,6 +113,7 @@ include/util/idtree.h
 include/util/idtree_random.h
 include/util/signal.h
 include/util/substitute.h
+include/util/talloc_keep_secret.h
 include/util/tfork.h
 include/util/time.h
 include/util_ldb.h
@@ -173,6 +174,7 @@ ${PYSITELIB}/ldb.so
 ${PYSITELIB}/samba/__init__.py
 ${PYSITELIB}/samba/_glue.so
 ${PYSITELIB}/samba/_ldb.so
+${PYSITELIB}/samba/asn1.py
 ${PYSITELIB}/samba/auth.so
 ${PYSITELIB}/samba/auth_util.py
 ${PYSITELIB}/samba/colour.py
@@ -269,6 +271,7 @@ ${PYSITELIB}/samba/emulate/traffic.py
 ${PYSITELIB}/samba/emulate/traffic_packets.py
 ${PYSITELIB}/samba/forest_update.py
 ${PYSITELIB}/samba/functional_level.py
+${PYSITELIB}/samba/generate_csr.py
 ${PYSITELIB}/samba/gensec.so
 ${PYSITELIB}/samba/getopt.py
 ${PYSITELIB}/samba/gkdi.py
@@ -315,6 +318,7 @@ ${PYSITELIB}/samba/kcc/graph.py
 ${PYSITELIB}/samba/kcc/graph_utils.py
 ${PYSITELIB}/samba/kcc/kcc_utils.py
 ${PYSITELIB}/samba/kcc/ldif_import_export.py
+${PYSITELIB}/samba/key_credential_link.py
 ${PYSITELIB}/samba/logger.py
 ${PYSITELIB}/samba/lsa_utils.py
 ${PYSITELIB}/samba/mdb_util.py
@@ -330,6 +334,8 @@ ${PYSITELIB}/samba/netbios.so
 ${PYSITELIB}/samba/netcmd/__init__.py
 ${PYSITELIB}/samba/netcmd/common.py
 ${PYSITELIB}/samba/netcmd/computer.py
+${PYSITELIB}/samba/netcmd/computer_generate_csr.py
+${PYSITELIB}/samba/netcmd/computer_keytrust.py
 ${PYSITELIB}/samba/netcmd/contact.py
 ${PYSITELIB}/samba/netcmd/dbcheck.py
 ${PYSITELIB}/samba/netcmd/delegation.py
@@ -402,7 +408,9 @@ ${PYSITELIB}/samba/netcmd/user/delete.py
 ${PYSITELIB}/samba/netcmd/user/disable.py
 ${PYSITELIB}/samba/netcmd/user/edit.py
 ${PYSITELIB}/samba/netcmd/user/enable.py
+${PYSITELIB}/samba/netcmd/user/generate_csr.py
 ${PYSITELIB}/samba/netcmd/user/getgroups.py
+${PYSITELIB}/samba/netcmd/user/keytrust.py
 ${PYSITELIB}/samba/netcmd/user/list.py
 ${PYSITELIB}/samba/netcmd/user/move.py
 ${PYSITELIB}/samba/netcmd/user/password.py
@@ -540,6 +548,7 @@ ${PYSITELIB}/samba/tests/domain_backup.p
 ${PYSITELIB}/samba/tests/domain_backup_offline.py
 ${PYSITELIB}/samba/tests/dsdb.py
 ${PYSITELIB}/samba/tests/dsdb_api.py
+${PYSITELIB}/samba/tests/dsdb_dn.py
 ${PYSITELIB}/samba/tests/dsdb_dns.py
 ${PYSITELIB}/samba/tests/dsdb_lock.py
 ${PYSITELIB}/samba/tests/dsdb_quiet_env_tests.py
@@ -567,6 +576,7 @@ ${PYSITELIB}/samba/tests/kcc/graph_utils
 ${PYSITELIB}/samba/tests/kcc/kcc_utils.py
 ${PYSITELIB}/samba/tests/kcc/ldif_import_export.py
 ${PYSITELIB}/samba/tests/key_credential_link.py
+${PYSITELIB}/samba/tests/key_credential_link_samdb.py
 ${PYSITELIB}/samba/tests/krb5/alias_tests.py
 ${PYSITELIB}/samba/tests/krb5/as_canonicalization_tests.py
 ${PYSITELIB}/samba/tests/krb5/as_req_tests.py
@@ -586,12 +596,14 @@ ${PYSITELIB}/samba/tests/krb5/kdc_base_t
 ${PYSITELIB}/samba/tests/krb5/kdc_tests.py
 ${PYSITELIB}/samba/tests/krb5/kdc_tgs_tests.py
 ${PYSITELIB}/samba/tests/krb5/kdc_tgt_tests.py
+${PYSITELIB}/samba/tests/krb5/key_trust_tests.py
 ${PYSITELIB}/samba/tests/krb5/kpasswd_tests.py
 ${PYSITELIB}/samba/tests/krb5/lockout_tests.py
 ${PYSITELIB}/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py
 ${PYSITELIB}/samba/tests/krb5/netlogon.py
 ${PYSITELIB}/samba/tests/krb5/nt_hash_tests.py
 ${PYSITELIB}/samba/tests/krb5/pac_align_tests.py
+${PYSITELIB}/samba/tests/krb5/pkinit_certificate_mapping_tests.py
 ${PYSITELIB}/samba/tests/krb5/pkinit_tests.py
 ${PYSITELIB}/samba/tests/krb5/protected_users_tests.py
 ${PYSITELIB}/samba/tests/krb5/raw_testcase.py
@@ -710,8 +722,10 @@ ${PYSITELIB}/samba/tests/samba_tool/user
 ${PYSITELIB}/samba/tests/samba_tool/user_auth_policy.py
 ${PYSITELIB}/samba/tests/samba_tool/user_auth_silo.py
 ${PYSITELIB}/samba/tests/samba_tool/user_check_password_script.py
+${PYSITELIB}/samba/tests/samba_tool/user_generate_csr.py
 ${PYSITELIB}/samba/tests/samba_tool/user_get_kerberos_ticket.py
 ${PYSITELIB}/samba/tests/samba_tool/user_getpassword_gmsa.py
+${PYSITELIB}/samba/tests/samba_tool/user_keytrust.py
 ${PYSITELIB}/samba/tests/samba_tool/user_virtualCryptSHA.py
 ${PYSITELIB}/samba/tests/samba_tool/user_virtualCryptSHA_base.py
 ${PYSITELIB}/samba/tests/samba_tool/user_virtualCryptSHA_gpg.py
@@ -993,6 +1007,7 @@ lib/samba/vfs/acl_tdb.${SHLIB_EXT}
 lib/samba/vfs/acl_xattr.${SHLIB_EXT}
 lib/samba/vfs/aio_fork.${SHLIB_EXT}
 lib/samba/vfs/aio_pthread.${SHLIB_EXT}
+lib/samba/vfs/aio_ratelimit.${SHLIB_EXT}
 lib/samba/vfs/audit.${SHLIB_EXT}
 lib/samba/vfs/cap.${SHLIB_EXT}
 lib/samba/vfs/catia.${SHLIB_EXT}
@@ -1113,6 +1128,7 @@ man/man8/vfs_acl_tdb.8
 man/man8/vfs_acl_xattr.8
 man/man8/vfs_aio_fork.8
 man/man8/vfs_aio_pthread.8
+man/man8/vfs_aio_ratelimit.8
 man/man8/vfs_audit.8
 man/man8/vfs_cap.8
 man/man8/vfs_catia.8
@@ -1187,6 +1203,8 @@ share/locale/fr/LC_MESSAGES/pam_winbind.
 share/locale/hu/LC_MESSAGES/pam_winbind.mo
 share/locale/it/LC_MESSAGES/pam_winbind.mo
 share/locale/ja/LC_MESSAGES/pam_winbind.mo
+share/locale/ka/LC_MESSAGES/net.mo
+share/locale/ka/LC_MESSAGES/pam_winbind.mo
 share/locale/ko/LC_MESSAGES/pam_winbind.mo
 share/locale/nb/LC_MESSAGES/pam_winbind.mo
 share/locale/nl/LC_MESSAGES/pam_winbind.mo

Index: pkgsrc/net/samba4/distinfo
diff -u pkgsrc/net/samba4/distinfo:1.123 pkgsrc/net/samba4/distinfo:1.124
--- pkgsrc/net/samba4/distinfo:1.123    Mon Mar  2 10:07:43 2026
+++ pkgsrc/net/samba4/distinfo  Fri Apr 17 08:35:42 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.123 2026/03/02 10:07:43 adam Exp $
+$NetBSD: distinfo,v 1.124 2026/04/17 08:35:42 adam Exp $
 
-BLAKE2s (samba-4.23.6.tar.gz) = 2fe87bc32e1ede1ba719addd8b4b884c343f923ba448921430aaa117d9664f48
-SHA512 (samba-4.23.6.tar.gz) = 61dc2a80f1ea5a7a04bc45ba7896107fd1c619ec3f841f9f6adb9c166a3ce3a5cee7b0d097cfa2c768ba65e35167c0739099cc76a5478c0d6f41521a621336c9
-Size (samba-4.23.6.tar.gz) = 43306831 bytes
+BLAKE2s (samba-4.24.1.tar.gz) = 81f222a99a98a6ca31c87e49c6548efb2b92bca8d06737909cf24bd045fb0e14
+SHA512 (samba-4.24.1.tar.gz) = 419653355fd609443b1cd321986e7e83c6479a52d7a998e1197846cdb591305b1173b77022a65cf643c46a3a8810de05499a9eba903b839a87fac7a270ebc85f
+Size (samba-4.24.1.tar.gz) = 43389244 bytes
 SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926
 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d
 SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = b9015694b80c0e6382d75c806fd6e0eb92e5f998
@@ -21,7 +21,7 @@ SHA1 (patch-lib_util_charset_charset__ma
 SHA1 (patch-lib_util_smb__threads.h) = 817591a2b69f31ac29497a2006fe21f0b4b0aaea
 SHA1 (patch-lib_util_tfork.c) = a9acb5561c5bba76450c48904a22019c8b14cbec
 SHA1 (patch-lib_util_time.h) = 5048614e301cf6922ff7fa6693fa58bfe17ff10e
-SHA1 (patch-lib_util_util__crypt.c) = cb76f52dd3b0bf98b1ebe7be6bfa36c3c644955d
+SHA1 (patch-lib_util_util__crypt.c) = 1cd30f2bad4d469745a7e2ca146c591c8ecfec96
 SHA1 (patch-libcli_dns_wscript__build) = 4103a144aa1bb4662fd7a62270941f1a3d01fe89
 SHA1 (patch-nsswitch_stress-nss-libwbclient.c) = c546f00184b0d22b6c150e210962cdfc6fc12df2
 SHA1 (patch-nsswitch_winbind__nss__netbsd.c) = 1214bfbd7714b64f3ff3eb97b6f24e3d2629370f
@@ -39,7 +39,6 @@ SHA1 (patch-source3_smbd_smb1__process.c
 SHA1 (patch-source3_utils_net__offlinejoin.c) = defb3ad930ba88ec040bda8899efd24e2a95f294
 SHA1 (patch-source4_auth_gensec_wscript__build) = 01f3cdf787833e05f2e0b49ff0af7c8bbad2c161
 SHA1 (patch-source4_dsdb_samdb_ldb__modules_wscript__build__server) = 47f55ec16b667a0a4d38de5ac89a117f2ac8f898
-SHA1 (patch-source4_kdc_db-glue.c) = 23dc5352b0b174b7cc63bb913e7c03eaaecd8f2a
 SHA1 (patch-source4_scripting_wscript__build) = aac6894d49f5c17a28d26cb627be8cef1902bb1e
 SHA1 (patch-third__party_heimdal__build_roken.h) = 59d5523676fe8c0315e969247f26b4ea2f900402
 SHA1 (patch-third__party_heimdal_include_heim__threads.h) = 5ad13530cf9688e46f9ad487bb0fddab668c8276

Index: pkgsrc/net/samba4/patches/patch-lib_util_util__crypt.c
diff -u pkgsrc/net/samba4/patches/patch-lib_util_util__crypt.c:1.2 pkgsrc/net/samba4/patches/patch-lib_util_util__crypt.c:1.3
--- pkgsrc/net/samba4/patches/patch-lib_util_util__crypt.c:1.2  Thu Jun 19 02:08:47 2025
+++ pkgsrc/net/samba4/patches/patch-lib_util_util__crypt.c      Fri Apr 17 08:35:42 2026
@@ -1,22 +1,10 @@
-$NetBSD: patch-lib_util_util__crypt.c,v 1.2 2025/06/19 02:08:47 gutteridge Exp $
-
-Do not include <crypt.h> unconditionally.
+$NetBSD: patch-lib_util_util__crypt.c,v 1.3 2026/04/17 08:35:42 adam Exp $
 
 Account for platforms that don't define ENOTRECOVERABLE, like NetBSD
 before 10.0.
 
 --- lib/util/util_crypt.c.orig 2025-02-17 15:48:20.606155400 +0000
 +++ lib/util/util_crypt.c
-@@ -2,7 +2,9 @@
- #include "data_blob.h"
- #include "discard.h"
- #include <talloc.h>
-+#ifdef HAVE_CRYPT_H
- #include <crypt.h>
-+#endif
- #include "util_crypt.h"
- 
- 
 @@ -62,7 +64,11 @@ static int crypt_as_best_we_can(TALLOC_C
        if (hash == NULL || hash[0] == '*') {
                if (ret == 0) {

Prev by Date: CVS commit: pkgsrc/www
Next by Date: CVS commit: pkgsrc/net/samba4/patches
Previous by Thread: CVS commit: pkgsrc/www
Next by Thread: CVS commit: pkgsrc/net/samba4/patches
Indexes:

Home | Main Index | Thread Index | Old Index