The branch, master has been updated
via b540684 NEWS[4.23.0]: Samba 4.23.0 Available for Download
from b4edbb7 NEWS[4.21.8]: Samba 4.21.8 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit b54068405e5d9593d31d1934f0fb847d942ce551
Author: Jule Anger <[email protected]>
Date: Fri Sep 12 10:28:12 2025 +0200
NEWS[4.23.0]: Samba 4.23.0 Available for Download
Signed-off-by: Jule Anger <[email protected]>
-----------------------------------------------------------------------
Summary of changes:
history/header_history.html | 1 +
history/samba-4.23.0.html | 207 +++++++++++++++++++++++
posted_news/20250912-082920.4.23.0.body.html | 12 ++
posted_news/20250912-082920.4.23.0.headline.html | 3 +
4 files changed, 223 insertions(+)
create mode 100644 history/samba-4.23.0.html
create mode 100644 posted_news/20250912-082920.4.23.0.body.html
create mode 100644 posted_news/20250912-082920.4.23.0.headline.html
Changeset truncated at 500 lines:
diff --git a/history/header_history.html b/history/header_history.html
index e73b12f..29d00f1 100755
--- a/history/header_history.html
+++ b/history/header_history.html
@@ -9,6 +9,7 @@
<li><a href="/samba/history/">Release Notes</a>
<li class="navSub">
<ul>
+ <li><a href="samba-4.23.0.html">samba-4.23.0</a></li>
<li><a href="samba-4.22.4.html">samba-4.22.4</a></li>
<li><a href="samba-4.22.3.html">samba-4.22.3</a></li>
<li><a href="samba-4.22.2.html">samba-4.22.2</a></li>
diff --git a/history/samba-4.23.0.html b/history/samba-4.23.0.html
new file mode 100644
index 0000000..e35f257
--- /dev/null
+++ b/history/samba-4.23.0.html
@@ -0,0 +1,207 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>
+<html xmlns="http://www.w3.org/1999/xhtml";>
+<head>
+<title>Samba 4.23.0 - Release Notes</title>
+</head>
+<body>
+<H2>Samba 4.23.0 Available for Download</H2>
+<p>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.23.0.tar.gz";>Samba
4.23.0 (gzipped)</a><br>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.23.0.tar.asc";>Signature</a>
+</p>
+<p>
+<pre>
+ ==============================
+ Release Notes for Samba 4.23.0
+ September 12, 2025
+ ==============================
+
+
+This is the first stable release of the Samba 4.22 release series.
+Please read the release notes carefully before upgrading.
+
+
+NEW FEATURES/CHANGES
+====================
+
+Enable SMB3 Unix Extensions by default
+--------------------------------------
+Starting with Samba 4.23, the SMB3 UNIX Extensions are enabled by
+default. These extensions provide first-class support for POSIX semantics
+over SMB3, allowing UNIX and Linux clients to access file services with
+features such as proper POSIX permissions, symlink handling, hardlinks,
+and special file types.
+
+Enabling this feature by default improves interoperability for UNIX/Linux
+clients without requiring additional configuration. Windows clients that
+do not support the extensions will continue to function normally, by
+using standard SMB3 behavior.
+
+Add support for SMB3 over QUIC
+------------------------------
+The new "client smb transports" and "server smb transport"
+allow a more flexible configuration for the used tcp
+sockets.
+
+It also got the ability specify "quic" as possible transport.
+If quic should be used in addition to the defaults something
+like "server smb transports = +quic" can be used.
+
+For the client quic only works with name based uncs,
+ip address based uncs are not supported.
+
+Note for the server 'quic' requires the quic.ko kernel module
+for Linux from https://github.com/lxin/quic (tested with Linux 6.14).
+Future Linux versions may support it natively, here's the
+branch that will hopefully accepted upstream soon:
+https://github.com/lxin/net-next/commits/quic/
+
+For the client side there's a fallback to the userspace ngtcp2
+library if the quic kernel module is not available.
+
+Check the smb.conf manpage for additional hints
+about the "client smb transports" and "server smb
transport"
+options and interactions with tls related options.
+
+Modern write time update logic
+------------------------------
+Samba 4.23 changes file timestamp handling to match modern Windows servers.
+Earlier releases used delayed write time updates, where last_write_time was
+only refreshed after a short idle period. Now Samba applies immediate
+timestamp updates consistent with modern Windows 10/Server 2016 or newer.
+
+Initial version of smb_prometheus_endpoint
+------------------------------------------
+Samba 4.23 introduces the smb_prometheus_endpoint utility, which exports
+Samba server metrics in Prometheus-compatible format. This enables seamless
+integration of Samba performance and status monitoring into existing
+Prometheus and Grafana environments. For usage and configuration details,
+refer to the new smb_prometheus_endpoint man page.
+
+samba-tool domain backup --no-secrets avoids confidential attributes
+--------------------------------------------------------------------
+The --no-secrets option creates a back-up without secret attributes
+(e.g. passwords), suitable for use in a lab domain. Until now it could
+still contain confidential attributes, including BitLocker recovery
+data and KDS root keys. Objects in the classes msKds-ProvRootKey,
+msFVE-RecoveryInformation, and msTPM-InformationObject will now be
+entirely removed from the backup, as these objects are required by
+schema to have confidential attributes and are no use without them.
+
+CTDB changes
+------------
+CTDB now supports loading tunables from
+/etc/ctdb/tunables.d/*.tunables, in addition to the standard
+/etc/ctdb/tunables.conf. See the ctdb-tunables(7) manual page for
+more details. Note that the above locations are examples - the
+actual location of these files will depend on compile time
+configuration.
+
+It isn't expected that many users will require a directory of tunables
+files, since most users do not need to change tunables from their
+default values. However, this allows vendors to ship their required
+tunables settings (for example, in one or more files marked "do not
+edit") while still allowing local administrators to add their own
+tunables settings (in one or more separate files).
+
+Per-share profiling stats
+-------------------------
+Starting with Samba 4.23, users can collect profile counters at a
+per-share level. This feature requires building Samba with profiling
+data enabled and adding an appropriate `smb.conf` parameter for
+specific shares. It's particularly useful for deployments with a large
+number of active shares, allowing administrators to monitor individual
+share activity and identify potential bottlenecks or hot-spots. When
+enabled, users can inspect current per-share profile information
+("Extended Profile") using the standard `smbstatus` utility.
+
+Currently, this functionality is supported only by the default and
+`ceph_new` VFS modules.
+
+
+REMOVED FEATURES
+================
+
+
+smb.conf changes
+================
+
+ Parameter Name Description Default
+ -------------- ----------- -------
+ smbd profiling share New no
+ client smb transports New tcp, nbt
+ server smb transports New tcp, nbt
+ winbind varlink service New no
+
+
+CHANGES SINCE 4.23.0rc4
+=======================
+
+o Douglas Bagnall <[email protected]>
+ * BUG 15911: samba.tests.safe_tarfile fails on Python 3.13 with additional
+ security fixes for tarfile support.
+
+o Alexander Bokovoy <[email protected]>
+ * BUG 15904: CTDB does not support PCP 7.0.0.
+
+o Pavel Filipenský <[email protected]>
+ * BUG 15905: samba-4.21 fails to join AD when multiple DCs are returned.
+
+o Volker Lendecke <[email protected]>
+ * BUG 15908: Uninitialized read leads to hanging rpcd_spoolss.
+
+o Andreas Schneider <[email protected]>
+ * BUG 15905: samba-4.21 fails to join AD when multiple DCs are returned.
+ * BUG 15907: Stack buffer overflow in samba3.smb2.dirlease.fileserver.
+
+
+CHANGES SINCE 4.23.0rc3
+=======================
+
+o Alexander Bokovoy <[email protected]>
+ * BUG 15902: Regression in gssproxy support in 4.23.rc1+.
+
+o MikeLiu <[email protected]>
+ * BUG 15900: 'net ads group' failed to list domain groups.
+
+
+CHANGES SINCE 4.23.0rc2
+=======================
+
+o Ralph Boehme <[email protected]>
+ * BUG 15843: macOS Finder client DFS broken on 4.22.0.
+
+o Stefan Metzmacher <[email protected]>
+ * BUG 15899: Self-signed certificates don't have X509v3 Subject
Alternative
+ Name for DNS.
+
+o Andreas Schneider <[email protected]>
+ * BUG 15893: Improve handling of principals and realms in client tools.
+
+
+CHANGES SINCE 4.23.0rc1
+=======================
+
+o Björn Baumbach <[email protected]>
+ * BUG 15896: libquic build fixes.
+
+o Ralph Boehme <[email protected]>
+ * BUG 15844: getpwuid does not shift to new DC when current DC is down.
+ * BUG 15876: Windows security hardening locks out schannel'ed netlogon
dc
+ calls like netr_DsRGetDCName.
+
+o Gary Lockyer <[email protected]>
+ * BUG 15896: libquic build fixes.
+
+
+KNOWN ISSUES
+============
+
+https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.23#Release_blocking_bugs
+
+
+</pre>
+</p>
+</body>
+</html>
diff --git a/posted_news/20250912-082920.4.23.0.body.html
b/posted_news/20250912-082920.4.23.0.body.html
new file mode 100644
index 0000000..be7e2c3
--- /dev/null
+++ b/posted_news/20250912-082920.4.23.0.body.html
@@ -0,0 +1,12 @@
+<!-- BEGIN: posted_news/20250912-082920.4.23.0.body.html -->
+<h5><a name="4.23.0">12 September 2025</a></h5>
+<p class=headline>Samba 4.23.0 Available for Download</p>
+<p>
+This is the latest stable release of the Samba 4.23 release series.
+</p>
+<p>
+The uncompressed tarball has been signed using GnuPG (ID AA99442FB680B620).
+The source code can be <a
href="https://download.samba.org/pub/samba/stable/samba-4.23.0.tar.gz";>downloaded
now</a>.
+See <a href="https://www.samba.org/samba/history/samba-4.23.0.html";>the
release notes for more info</a>.
+</p>
+<!-- END: posted_news/20250912-082920.4.23.0.body.html -->
diff --git a/posted_news/20250912-082920.4.23.0.headline.html
b/posted_news/20250912-082920.4.23.0.headline.html
new file mode 100644
index 0000000..b4cac00
--- /dev/null
+++ b/posted_news/20250912-082920.4.23.0.headline.html
@@ -0,0 +1,3 @@
+<!-- BEGIN: posted_news/20250912-082920.4.23.0.headline.html -->
+<li> 12 September 2025 <a href="#4.23.0">Samba 4.23.0 Available for
Download</a></li>
+<!-- END: posted_news/20250912-082920.4.23.0.headline.html -->
--
Samba Website Repository
