Feature Request: Samba 4.16 or above available in Ubuntu 22.04

[Jaimes Joschko]

Hi Samba team,

It appears the lasted Samba version available for Ubuntu 22.04 is Samba 4.15, which doesn't
easily allow auto-enrolment of certificates [1].

I would like to make a feature request to have Samba 4.16 or above available in Ubuntu 22.04.

Thanks for you time and consideration.

References

[1] - https://wiki.samba.org/index.php/Certificate_Auto_Enrollment

[Lucas Kanashiro (lucaskanashiro)]

Hi Jaimes,

Thanks for taking the time to report this bug and trying to make Ubuntu better.

Unfortunately, we do not do upstream version updates in a stable release. What we could consider is if you bring up a specific use case (which you kind of did, but in less details on how users would interact with that feature and its importance) and the upstream patch set needed to support this feature.

In Ubuntu Jammy (22.04), we have samba version 2:4.15.13+dfsg-0ubuntu1.1, so we would need to add changes on top of that, ideally. Could you help us with that analysis? If we consider there is a compelling reason and the patch set is maintainable, we can then make considerations on whether we can add this or not.

[Jaimes Joschko (jjoschko)]

Hi Lucas,

Thanks for clarifying about the correct process around stable releases.

As far as I can tell there is no easy way to enable/configure certificate auto enrollment in Jammy as is. So this feature would allow users to easily configure client machines to auto enroll for certificates from Active Directory Certificate Services. I believe Landscape and ADsys are working on a similar feature for future LTS releases and certificate auto-enrollment is currently possible in Jammy via scripting with ADsys (I'm not sure exactly how though). But this feature would bring easily configurable client certificate auto enrollment to Jammy instead of needing to figure out how to script it. Hope that adds a bit more context.

In terms of analysis of the upstream patch set needed to support this feature and the maintainability, I've never done anything like that before. I guess there's no time like the present to learn though. Let me do some research on what this would involve and if I have the skills/knowledge to help.

Cheers

[Launchpad Janitor (janitor)]

[Expired for samba (Ubuntu) because there has been no activity for 60 days.]