The branch, master has been updated
via 8b61355 NEWS[4.20.3]: Samba 4.20.3 Available for Download
from a13124c NEWS[4.21.0rc1]: Samba 4.21.0rc1 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit 8b6135578a6975f6677e16313d0d1202e23ed874
Author: Stefan Metzmacher <me...@samba.org>
Date: Fri Aug 2 14:02:26 2024 +0200
NEWS[4.20.3]: Samba 4.20.3 Available for Download
Signed-off-by: Stefan Metzmacher <me...@samba.org>
-----------------------------------------------------------------------
Summary of changes:
history/samba-4.20.3.html | 102 +++++++++++++++++++++++
posted_news/20240802-120549.4.20.3.body.html | 13 +++
posted_news/20240802-120549.4.20.3.headline.html | 3 +
3 files changed, 118 insertions(+)
create mode 100644 history/samba-4.20.3.html
create mode 100644 posted_news/20240802-120549.4.20.3.body.html
create mode 100644 posted_news/20240802-120549.4.20.3.headline.html
Changeset truncated at 500 lines:
diff --git a/history/samba-4.20.3.html b/history/samba-4.20.3.html
new file mode 100644
index 0000000..b697293
--- /dev/null
+++ b/history/samba-4.20.3.html
@@ -0,0 +1,102 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>
+<html xmlns="http://www.w3.org/1999/xhtml";>
+<head>
+<title>Samba 4.20.3 - Release Notes</title>
+</head>
+<body>
+<H2>Samba 4.20.3 Available for Download</H2>
+<p>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.20.3.tar.gz";>Samba
4.20.3 (gzipped)</a><br>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.20.3.tar.asc";>Signature</a>
+</p>
+<p>
+<a
href="https://download.samba.org/pub/samba/patches/samba-4.20.2-4.20.3.diffs.gz";>Patch
(gzipped) against Samba 4.20.2</a><br>
+<a
href="https://download.samba.org/pub/samba/patches/samba-4.20.2-4.20.3.diffs.asc";>Signature</a>
+</p>
+<p>
+<pre>
+ ==============================
+ Release Notes for Samba 4.20.3
+ August 02, 2024
+ ==============================
+
+
+This is the latest stable release of the Samba 4.20 release series.
+
+LDAP TLS/SASL channel binding support
+-------------------------------------
+
+The ldap server supports SASL binds with
+kerberos or NTLMSSP over TLS connections
+now (either ldaps or starttls).
+
+Setups where 'ldap server require strong auth = allow_sasl_over_tls'
+was required before, can now most likely move to the
+default of 'ldap server require strong auth = yes'.
+
+If SASL binds without correct tls channel bindings are required
+'ldap server require strong auth =
allow_sasl_without_tls_channel_bindings'
+should be used now, as 'allow_sasl_over_tls' will generate a
+warning in every start of 'samba', as well as '[samba-tool
]testparm'.
+
+This is similar to LdapEnforceChannelBinding under
+HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
+on Windows.
+
+All client tools using ldaps also include the correct
+channel bindings now.
+
+smb.conf changes
+================
+
+ Parameter Name Description Default
+ -------------- ----------- -------
+ ldap server require strong auth new values
+
+Changes since 4.20.2
+--------------------
+
+o Andreas Schneider <a...@samba.org>
+ * BUG 15683: Running samba-bgqd a a standalone systemd service does not
work.
+
+o Andrew Bartlett <abart...@samba.org>
+ * BUG 15655: When claims enabled with heimdal kerberos, unable to log on to
a
+ Windows computer when user account need to change their own password.
+
+o Douglas Bagnall <douglas.bagn...@catalyst.net.nz>
+ * BUG 15671: Invalid client warning about command line passwords.
+ * BUG 15672: Version string is truncated in manpages.
+ * BUG 15673: --version-* options are still not ergonomic, and they reject
+ tilde characters.
+ * BUG 15674: cmdline_burn does not always burn secrets.
+ * BUG 15685: Samba does not parse SDDL found in defaultSecurityDescriptor in
+ AD_DS_Classes_Windows_Server_v1903.ldf.
+
+o Jo Sutton <josut...@catalyst.net.nz>
+ * BUG 15655: When claims enabled with heimdal kerberos, unable to log on to
a
+ Windows computer when user account need to change their own password.
+
+o Pavel Filipenský <pfilipen...@samba.org>
+ * BUG 15660: The images don\'t build after the git security release and
+ CentOS 8 Stream is EOL.
+
+o Ralph Boehme <s...@samba.org>
+ * BUG 15676: Fix clock skew error message and memory cache clock skew
+ recovery.
+
+o Stefan Metzmacher <me...@samba.org>
+ * BUG 15603: Heimdal ignores _gsskrb5_decapsulate errors in
+ init_sec_context/repl_mutual.
+ * BUG 15621: s4:ldap_server: does not support tls channel bindings
+ for sasl binds.
+
+o Xavi Hernandez <xhernan...@redhat.com>
+ * BUG 15678: CTDB socket output queues may suffer unbounded delays under
some
+ special conditions.
+
+
+</pre>
+</p>
+</body>
+</html>
diff --git a/posted_news/20240802-120549.4.20.3.body.html
b/posted_news/20240802-120549.4.20.3.body.html
new file mode 100644
index 0000000..fcb5286
--- /dev/null
+++ b/posted_news/20240802-120549.4.20.3.body.html
@@ -0,0 +1,13 @@
+<!-- BEGIN: posted_news/20240802-120549.4.20.3.body.html -->
+<h5><a name="4.20.3">02 August 2024</a></h5>
+<p class=headline>Samba 4.20.3 Available for Download</p>
+<p>
+This is the latest stable release of the Samba 4.20 release series.
+</p>
+<p>
+The uncompressed tarball has been signed using GnuPG (ID AA99442FB680B620).
+The source code can be <a
href="https://download.samba.org/pub/samba/stable/samba-4.20.3.tar.gz";>downloaded
now</a>.
+A <a
href="https://download.samba.org/pub/samba/patches/samba-4.20.2-4.20.3.diffs.gz";>patch
against Samba 4.20.2</a> is also available.
+See <a href="https://www.samba.org/samba/history/samba-4.20.3.html";>the
release notes for more info</a>.
+</p>
+<!-- END: posted_news/20240802-120549.4.20.3.body.html -->
diff --git a/posted_news/20240802-120549.4.20.3.headline.html
b/posted_news/20240802-120549.4.20.3.headline.html
new file mode 100644
index 0000000..3c83f41
--- /dev/null
+++ b/posted_news/20240802-120549.4.20.3.headline.html
@@ -0,0 +1,3 @@
+<!-- BEGIN: posted_news/20240802-120549.4.20.3.headline.html -->
+<li> 02 August 2024 <a href="#4.20.3">Samba 4.20.3 Available for
Download</a></li>
+<!-- END: posted_news/20240802-120549.4.20.3.headline.html -->
--
Samba Website Repository
