Samba 4.4.10 Available for Download

Samba 4.4.10 (gzipped)

Patch (gzipped) against Samba 4.4.9

                   Release Notes for Samba 4.4.10
                            March 1, 2017

This is the latest stable release of Samba 4.4. Please note that this will
likely be the last maintenance release of the Samba 4.4 release branch.

Major enhancements in Samba 4.4.10 include:

o  Domain join broken under certain circumstances after winbindd changed the
   trust password (bug #12262).

A new parameter "include system krb5 conf" has been added (bug #12441). Please
see the man page for details.

Changes since 4.4.9:

o  Jeremy Allison <>
   * BUG 12479: s3: libsmb: Add cli_smb2_ftruncate(), plumb into
   * BUG 12499: s3: vfs: dirsort doesn't handle opendir of "." correctly.
   * BUG 12572: s3: smbd: Don't loop infinitely on bad-symlink resolution.
   * BUG 12531: Make vfs_shadow_copy2 cope with server changing directories.
   * BUG 12546: s3: VFS: vfs_streams_xattr.c: Make streams_xattr_open() store
     the same path as streams_xattr_recheck().

o  Ralph Boehme <>
   * BUG 12536: s3/smbd: Check for invalid access_mask
   * BUG 12541: vfs_fruit: checks wrong AAPL config state and so always uses
   * BUG 12545: s3/rpc_server/mdssvc: Add attribute "kMDItemContentType".
   * BUG 12591: vfs_streams_xattr: Use fsp, not base_fsp.

o  David Disseldorp <>
   * BUG 12144: smbd/ioctl: Match WS2016 ReFS set compression behaviour.

o  Amitay Isaacs <>
   * BUG 12580: ctdb-common: Fix use-after-free error in comm_fd_handler().

o  Björn Jacke <>
   * BUG 2210: pam: Map more NT password errors to PAM errors.
   * BUG 12535: vfs_default: Unlock the right file in copy chunk.

o  Volker Lendecke <>
   * BUG 12509: messaging: Fix dead but not cleaned-up-yet destination sockets.
   * BUG 12551: smbd: Fix "map acl inherit" = yes.

o  Stefan Metzmacher <>
   * BUG 11830: Domain member cannot resolve trusted domains' users.
   * BUG 12262: Domain join broken under certain circumstances after winbindd
     changed the trust password.
   * BUG 12480: 'kinit' succeeded, but ads_sasl_spnego_gensec_bind(KRB5) failed: An
     internal error occurred (with MIT krb5).
   * BUG 12540: s3:smbd: allow "server min protocol = SMB3_00" to go via "SMB
     2.???" negprot.
   * BUG 12581: 'smbclient' fails on bad endianess when listing shares from
     Solaris kernel SMB server on SPARC.
   * BUG 12585: librpc/rpc: fix regression in
   * BUG 12586: netlogon_creds_cli_LogonSamLogon doesn't work without
   * BUG 12587: Fix winbindd child segfaults on connect to an NT4 domain.
   * BUG 12588: cm_prepare_connection may return NT_STATUS_OK without a valid
   * BUG 12598: winbindd (as member) requires kerberos against trusted ad domain,
     while it shouldn't.

o  Andreas Schneider <>
   * BUG 12441: s3:libads: Include system /etc/krb5.conf if we use MIT Kerberos.
   * BUG 12571: s3-vfs: Only walk the directory once in open_and_sort_dir().

o  Martin Schwenke <>
   * BUG 12589: CTDB statd-callout does not cause grace period when

o  Uri Simchoni <>
   * BUG 12529: waf: Backport finding of pkg-config.