Samba 4.4.10 Available for Download

Samba 4.4.10 (gzipped)
Signature

Patch (gzipped) against Samba 4.4.9
Signature

                   ==============================
                   Release Notes for Samba 4.4.10
                            March 1, 2017
                   ==============================


This is the latest stable release of Samba 4.4. Please note that this will
likely be the last maintenance release of the Samba 4.4 release branch.

Major enhancements in Samba 4.4.10 include:

o  Domain join broken under certain circumstances after winbindd changed the
   trust password (bug #12262).

A new parameter "include system krb5 conf" has been added (bug #12441). Please
see the man page for details.


Changes since 4.4.9:
--------------------

o  Jeremy Allison <jra@samba.org>
   * BUG 12479: s3: libsmb: Add cli_smb2_ftruncate(), plumb into
     cli_ftruncate().
   * BUG 12499: s3: vfs: dirsort doesn't handle opendir of "." correctly.
   * BUG 12572: s3: smbd: Don't loop infinitely on bad-symlink resolution.
   * BUG 12531: Make vfs_shadow_copy2 cope with server changing directories.
   * BUG 12546: s3: VFS: vfs_streams_xattr.c: Make streams_xattr_open() store
     the same path as streams_xattr_recheck().

o  Ralph Boehme <slow@samba.org>
   * BUG 12536: s3/smbd: Check for invalid access_mask
     smbd_calculate_access_mask().
   * BUG 12541: vfs_fruit: checks wrong AAPL config state and so always uses
     readdirattr.
   * BUG 12545: s3/rpc_server/mdssvc: Add attribute "kMDItemContentType".
   * BUG 12591: vfs_streams_xattr: Use fsp, not base_fsp.

o  David Disseldorp <ddiss@samba.org>
   * BUG 12144: smbd/ioctl: Match WS2016 ReFS set compression behaviour.

o  Amitay Isaacs <amitay@gmail.com>
   * BUG 12580: ctdb-common: Fix use-after-free error in comm_fd_handler().

o  Björn Jacke <bj@sernet.de>
   * BUG 2210: pam: Map more NT password errors to PAM errors.
   * BUG 12535: vfs_default: Unlock the right file in copy chunk.

o  Volker Lendecke <vl@samba.org>
   * BUG 12509: messaging: Fix dead but not cleaned-up-yet destination sockets.
   * BUG 12551: smbd: Fix "map acl inherit" = yes.

o  Stefan Metzmacher <metze@samba.org>
   * BUG 11830: Domain member cannot resolve trusted domains' users.
   * BUG 12262: Domain join broken under certain circumstances after winbindd
     changed the trust password.
   * BUG 12480: 'kinit' succeeded, but ads_sasl_spnego_gensec_bind(KRB5) failed: An
     internal error occurred (with MIT krb5).
   * BUG 12540: s3:smbd: allow "server min protocol = SMB3_00" to go via "SMB
     2.???" negprot.
   * BUG 12581: 'smbclient' fails on bad endianess when listing shares from
     Solaris kernel SMB server on SPARC.
   * BUG 12585: librpc/rpc: fix regression in
     NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE error mapping.
   * BUG 12586: netlogon_creds_cli_LogonSamLogon doesn't work without
     netr_LogonSamLogonEx.
   * BUG 12587: Fix winbindd child segfaults on connect to an NT4 domain.
   * BUG 12588: cm_prepare_connection may return NT_STATUS_OK without a valid
     connection.
   * BUG 12598: winbindd (as member) requires kerberos against trusted ad domain,
     while it shouldn't.

o  Andreas Schneider <asn@samba.org>
   * BUG 12441: s3:libads: Include system /etc/krb5.conf if we use MIT Kerberos.
   * BUG 12571: s3-vfs: Only walk the directory once in open_and_sort_dir().

o  Martin Schwenke <martin@meltin.net>
   * BUG 12589: CTDB statd-callout does not cause grace period when
     CTDB_NFS_CALLOUT="".

o  Uri Simchoni <uri@samba.org>
   * BUG 12529: waf: Backport finding of pkg-config.