Merge samba 4.22.3 from debian for questing

[Andreas Hasenack]

samba (2:4.22.3+dfsg-4) unstable; urgency=medium

  * fix python3-talloc.symbols generation to not have -debian_revision
    or +dfsg/+samba suffix in the version number - just the epoch if any
    and the upstream version (fix lintian error)

 -- Michael Tokarev <email address hidden> Thu, 17 Jul 2025 13:52:35 +0300

samba (2:4.22.3+dfsg-3) unstable; urgency=medium

  [ Sascha Lucas ]
  * winbind pam-config: fix account section to actually execute pam_winbind
    entries after usually successful cal to pam_unix, in a way how it's done
    in sssd (Closes: #907318)

  [ Douglas Bagnall ]
  * debian/panic-action: make the wording more user-friendly and steer users
    towards configuration and logs (Closes: #1089853)

  [ Michael Tokarev ]
  * d/python3-talloc.symbols.in: add forgotten epoch number for recent versions
    (this doesn't actually affect anything since there were no new symbols with
    these versions, but it's better to stay correct)
  * d/control: fix winbind:Enhances for libkrb5-26-heimdal which
    is libkrb5-26t64-heimdal in trixie and up, keeping in mind possible
    backporting to older debian/ubuntu versions (before-trixie build profile)
  * libads-fix-get_kdc_ip_string.patch (upstream fix for #1109005)
    (Closes: #1109005)

 -- Michael Tokarev <email address hidden> Tue, 15 Jul 2025 12:42:04 +0300

samba (2:4.22.3+dfsg-2) unstable; urgency=medium

  * Revert "d/control,d/rules: ensure we use the most recent talloc/tevent/tdb"
    There's no need for samba-libs to depend on exact versions of support libs
    anymore, since 4.21.3+dfsg-5 (where the mistake has been made) is long gone
  * Revert "d/control: add conflicts/breaks for libtevent0t64 on mjt repo"
    This Breaks was special and temporary, and not useful for debian archive at
    all (it was only needed for mjt's own repository where the wrong package
    name slipped out once). Remove this cruft for trixie
  * python3-talloc.symbols[.in] -- provide long-forgotten symbols file, so that
    versioned dependency on python3-talloc (mostly for python3-samba) will be
    less strict. For smoother upgrades
  * document forgotten change in previous changelog entry

 -- Michael Tokarev <email address hidden> Wed, 09 Jul 2025 17:08:31 +0300

samba (2:4.22.3+dfsg-1) unstable; urgency=medium

  * new upstream stable/bugfix release, mostly targetting the Jul-08 update
    for Active Directory Domain Controllers
    (https://bugzilla.samba.org/show_bug.cgi?id=15876, Closes: #1108904):
   - https://bugzilla.samba.org/show_bug.cgi?id=15854:
     samba-tool cannot add user to group whose name
     is exactly 16 characters long
   - https://bugzilla.samba.org/show_bug.cgi?id=15869:
     Startup messages of rpc daemons fills /var/log/messages
   - https://bugzilla.samba.org/show_bug.cgi?id=15876:
     Windows security hardening locks out schannel'ed netlogon
     dc calls like netr_DsRGetDCName
  * update d/copyright to point to https://www.gnu.org/licenses/
    instead of FSF postal address
  * d/control: stop depending on exact same version of samba-common
    Package samba-common contains a few files/dirs common for several samba
    packages. Its contents hasn't changed for quite some time. There's
    definitely no need to depend on exact version of this package - eg, 4.17
    (from bookworm) will work just fine with samba version 4.22. Drop version
    requirement for samba-common dep entirely. If/when we have real change in
    samba-common which is needed by other packages, we can specify particular
    version there. For smoother upgrades

 -- Michael Tokarev <email address hidden> Mon, 07 Jul 2025 23:16:23 +0300

[Launchpad Janitor (janitor)]

This bug was fixed in the package samba - 2:4.22.3+dfsg-4ubuntu1

---------------
samba (2:4.22.3+dfsg-4ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2117421, LP: #2116098). Remaining changes:
    - debian/control: Ubuntu i386 binary compatibility:
      + enable the liburing vfs module, except on i386 where liburing is
        not available
      + python3-samba depends on python3-cryptography, which Ubuntu doesn't
        build on i386 (LP #2099895):
        - d/control: don't recommend python3-samba on i386
        - d/rules: don't build python3-samba on ubuntu i386
    - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      (LP #1977746, LP #2011745)
    - d/control: adjust breaks/replaces for file move that Debian did in
      4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
      file conflict in a dist-upgrade from earlier Ubuntu releases, like
      Kinetic (LP #2024663)
    - d/control: make samba-vfs-modules-extra a transitional package.
      The glusterfs vfs module (the only vfs module shipped in it
      previously) is now in bin:samba-vfs-glusterfs
    - d/control: have the (now transitional) samba-vfs-modules package
      depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
      module
    - d/control: samba-vfs-modules and samba-vfs-modules-extra, now
      transitional packages, should only depend on the new samba-vfs-ceph and
      samba-vfs-glusterfs packages on the architectures where those two
      packages are built (LP #2076682)
    - d/control: samba-vfs-modules i386 adjustments:
      + samba-vfs-modules-extra was not built before for 32bit architectures,
        adjust Architectures line
      + samba-vfs-modules: this one was build for 32bit architectures before,
        so we need the conditional Depends for ceph
    - d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
      GPO
    - d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
    - d/control: don't have bin:samba recommend bin:samba-ad-dc (LP #2101838)
  * Dropped:
    - d/control: Fix t64 package name in 'Enhances' attribute.
      [In 2:4.22.3+dfsg-3]
    - d/p/fix-update-motd-gpo.patch: multiple fixes for MOTD GPO:
      + fix crash when updating an already existing MOTD GPO (LP #2092308)
      + fix another crash when the GPO doesn't exist yet (LP #2098755)
      + replace instead of append MOTD GPO text
      [Fixed upstream in 4.22.1, should have been dropped in previous merge]

samba (2:4.22.3+dfsg-4) unstable; urgency=medium

  * fix python3-talloc.symbols generation to not have -debian_revision
    or +dfsg/+samba suffix in the version number - just the epoch if any
    and the upstream version (fix lintian error)

samba (2:4.22.3+dfsg-3) unstable; urgency=medium

  [ Sascha Lucas ]
  * winbind pam-config: fix account section to actually execute pam_winbind
    entries after usually successful cal to pam_unix, in a way how it's done
    in sssd (Closes: #907318)

  [ Douglas Bagnall ]
  * debian/panic-action: make the wording more user-friendly and steer users
    towards...