Merge samba from Debian Unstable for r-series

[Bryce Harrington]

Scheduled-For: ubuntu-25.11
Ubuntu: 2:4.22.3+dfsg-4ubuntu2
Debian Unstable: 2:4.23.1+dfsg-1

A new release of samba is available for merging from Debian Unstable.

If it turns out this needs a sync rather than a merge, please change the tagging from ['needs-merge', 'upgrade-software-version'] to ['needs-sync', 'upgrade-software-version'], and (optionally) update the title as desired.

If this merge pulls in a new upstream version, also consider adding an entry to the r-series Release Notes: https://discourse.ubuntu.com/c/project/release/38

### New Debian Changes ###

samba (2:4.23.1+dfsg-1) unstable; urgency=medium

  [ Michael Tokarev ]
  * new upstream stable/bugfix release (Closes: #1116050):
   - https://bugzilla.samba.org/show_bug.cgi?id=15904:
     CTDB does not support PCP 7.0.0
   - https://bugzilla.samba.org/show_bug.cgi?id=15914:
     winbind can crash at startup
   - https://bugzilla.samba.org/show_bug.cgi?id=15919:
     vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
     for fsync_send
   - https://bugzilla.samba.org/show_bug.cgi?id=15920:
     Incomplete bind configuration causes DLZ plugin to crash
   - https://bugzilla.samba.org/show_bug.cgi?id=15921:
     CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set
  * d/control: describe the forgotten mitkrb5 build profile
  * d/control: Standards-Version: 4.7.2 (no changes)
  * d/control: sort python build-deps together
  * d/control: clarify some :native usages and add non-:native
    alternatives for gcc-mingw*
  * d/control: clarify python3-dev:native, libpython3-dev:host
  * usershare.patch: remove
  * d/samba.postinst: add `usershare max shares` parameter on upgrade
  * debian/samba{,-libs}.lintian-overrides: remove unused
    hardening-no-fortify-functions overrides

  [ Grzegorz Szymaszek ]
  * d/smb.conf: delete trailing spaces in comments

 -- Michael Tokarev <email address hidden> Fri, 26 Sep 2025 22:31:59 +0300

samba (2:4.23.0+dfsg-3) unstable; urgency=medium

  * libmscat-deps.patch (Closes: #1103869)
  * disable building undocumented dumpmscat binary, but provide
    pkg.samba.dumpmscat build profile to enable buildig it
  * enable system libngtcp2 (for !pkg.samba.builtin-ngtcp2 build profile)
  * d/control: describe all current build profiles
  * d/smb.conf: disable netbios by default
  * d/samba.postinst: remove hunk for samba << 4.16.0 (pre-bookworm)
    concerning socket directory
  * d/samba.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm)
    concerning handling of samba spool dir
  * d/samba.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm)
    concerning masking of services
  * d/winbind.postinst: remove hunk for samba << 4.17.4-3 (pre-bookworm)
    concerning masking of services
  * d/samba-common.postinst: actually clean-up old debconf entries
  * d/changelog: fix typo in previous entry

 -- Michael Tokarev <email address hidden> Tue, 16 Sep 2025 16:17:37 +0300

samba (2:4.23.0+dfsg-2) unstable; urgency=medium

  * d/rules: override dh_gencontrol for arch build only
    (no need to do that for indep build)
  * d/samba-libs.install: libquic is linux-specific
  * d/samba-libs.install: ngtcp2 is linux-specific, not non-hurd
  * d/control: build-depend on :native variant of mingw gcc/tools
    (helps building for bookworm where these tools aren't M-A:foreign)

 -- Michael Tokarev <email address hidden> Sun, 14 Sep 2025 15:35:35 +0300

samba (2:4.23.0+dfsg-1) unstable; urgency=medium

  * new upstream release
  * d/watch: 4.23
  * d/gbp.conf: switch to 4.23 upstream branch
  * d/rules: tevent=0.17.1 tdb=1.4.14
  * libads-fix-get_kdc_ip_string.patch: remove (included upstream)
  * d/copyright: remove entries for two removed files
  * d/libpam-winbind.install: install message catalogs
  * d/samba-common-bin.install: install message catalog(s) for the net command
  * d/libsmbclient0.symbols,d/libtevent0t64.symbols: add new symbols
  * d/libtdb1.symbols: add new version
  * d/samba-dsdb-modules.install: add new AD module (trust_notify.so)
  * d/samba-libs.install: refresh private libraries list (-1, +4 libs)
  * d/samba-libs.preinst: remove, used in distant past
    for upgrades from ancient versions
  * d/control: stop recommending samba-ad-dc (and python3-samba)
    from samba package (was needed for transition)
  * d/control: stop recommending attr by samba
  * d/control: remove pre-bookworm (samba<<4.17) breaks/replaces
  * d/control: stop samba from being dependent on procps
    (ps was used in initscript long ago)
  * d/control: stop ctdb from being dependent on psmisc and sudo
  * stop ctdb from depending on time package
  * d/libnss-winbind.triggers: remove, ldconfig call is generated by genshlibs
  * d/rules: explicitly specify --pythondir= & --pythonarchdir=
    (so it doesn't install to /usr/lib/python3.13/site-packages/)
  * d/rules,d/lib{nss,pam}-winbind.install: use ${SYSLIBDIR}
    for /lib vs /usr/lib, stop using dh_movetousr

 -- Michael Tokarev <email address hidden> Fri, 12 Sep 2025 12:38:48 +0300

### Old Ubuntu Delta ###

samba (2:4.22.3+dfsg-4ubuntu2) questing; urgency=medium

  * d/t/{control,smbclient-macro-expansion}: add test for macro expansion
    (related to LP #2120811)

 -- Andreas Hasenack <email address hidden> Mon, 01 Sep 2025 08:56:55 -0300

samba (2:4.22.3+dfsg-4ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2117421, LP: #2116098). Remaining changes:
    - debian/control: Ubuntu i386 binary compatibility:
      + enable the liburing vfs module, except on i386 where liburing is
        not available
      + python3-samba depends on python3-cryptography, which Ubuntu doesn't
        build on i386 (LP #2099895):
        - d/control: don't recommend python3-samba on i386
        - d/rules: don't build python3-samba on ubuntu i386
    - d/t/control, d/t/util,d/t/samba-ad-dc-provisioning-internal-dns:
      samba AD DC provisioning and domain join tests with internal DNS
      (LP #1977746, LP #2011745)
    - d/control: adjust breaks/replaces for file move that Debian did in
      4.16.6+dfsg-5, and Ubuntu only did in 4.17.7+dfsg-1ubuntu1, to avoid
      file conflict in a dist-upgrade from earlier Ubuntu releases, like
      Kinetic (LP #2024663)
    - d/control: make samba-vfs-modules-extra a transitional package.
      The glusterfs vfs module (the only vfs module shipped in it
      previously) is now in bin:samba-vfs-glusterfs
    - d/control: have the (now transitional) samba-vfs-modules package
      depend on samba-vfs-ceph, so that upgrades retain the ceph vfs
      module
    - d/control: samba-vfs-modules and samba-vfs-modules-extra, now
      transitional packages, should only depend on the new samba-vfs-ceph and
      samba-vfs-glusterfs packages on the architectures where those two
      packages are built (LP #2076682)
    - d/control: samba-vfs-modules i386 adjustments:
      + samba-vfs-modules-extra was not built before for 32bit architectures,
        adjust Architectures line
      + samba-vfs-modules: this one was build for 32bit architectures before,
        so we need the conditional Depends for ceph
    - d/p/fix-motd-gpo-list-empty.patch: fix crash when listing an empty MOTD
      GPO
    - d/t/samba-ad-dc-provisioning-internal-dns: add MOTD GPO test
    - d/control: don't have bin:samba recommend bin:samba-ad-dc (LP #2101838)
  * Dropped:
    - d/control: Fix t64 package name in 'Enhances' attribute.
      [In 2:4.22.3+dfsg-3]
    - d/p/fix-update-motd-gpo.patch: multiple fixes for MOTD GPO:
      + fix crash when updating an already existing MOTD GPO (LP #2092308)
      + fix another crash when the GPO doesn't exist yet (LP #2098755)
      + replace instead of append MOTD GPO text
      [Fixed upstream in 4.22.1, should have been dropped in previous merge]

 -- Andreas Hasenack <email address hidden> Mon, 21 Jul 2025 18:13:42 -0300