RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1944657 - Rebase Samba to the the latest 4.14.x release
Summary: Rebase Samba to the the latest 4.14.x release
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: samba
Version: 8.5
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Andreas Schneider
QA Contact: Denis Karpelevich
Marc Muehlfeld
URL:
Whiteboard:
Depends On: 1945014 1945020 1945021 1970961 1974753
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-03-30 12:26 UTC by Andreas Schneider
Modified: 2021-11-10 09:14 UTC (History)
6 users (show)

Fixed In Version: samba-4.14.4-4.el8
Doc Type: Enhancement
Doc Text:
._samba_ rebased to version 4.14.4 The _samba_ packages have been upgraded to upstream version 4.14.4, which provides bug fixes and enhancements over the previous version: * Publishing printers in Active Directory (AD) has increased reliability, and additional printer features have been added to the published information in AD. Also, Samba now supports Windows drivers for the ARM64 architecture. * The `ctdb isnotrecmaster` command has been removed. As an alternative, use `ctdb pnn` or the `ctdb recmaster` commands. * The clustered trivial database (CTDB) `ctdb natgw master` and `slave-only` parameters have been renamed to `ctdb natgw leader` and `follower-only`. Back up the database files before starting Samba. When the `smbd`, `nmbd`, or `winbind` services start Samba automatically updates its `tdb` database files. Note that Red Hat does not support downgrading `tdb` database files. After updating Samba, verify the `/etc/samba/smb.conf` file using the `testparm` utility. For further information about notable changes, read the link:https://www.samba.org/samba/history/samba-4.14.0.html[upstream release notes] before updating.
Clone Of:
Environment:
Last Closed: 2021-11-09 19:47:56 UTC
Type: Bug
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2021:4438 0 None None None 2021-11-09 19:48:17 UTC

Description Andreas Schneider 2021-03-30 12:26:27 UTC 
Description of problem:

Rebase Samba to the latest 4.13 release to get improved FIPS support.


Printing
--------

Publishing printers in AD is more reliable and more printer features are
added to the published information in AD. Samba now also supports Windows
drivers for the ARM64 architecture.

Client Group Policy
-------------------
This release extends Samba to support Group Policy functionality for Winbind
clients. Active Directory Administrators can set policies that apply Sudoers
configuration, and cron jobs to run hourly, daily, weekly or monthly.

To enable the application of Group Policies on a client, set the global
smb.conf option 'apply group policies' to 'yes'. Policies are applied on an
interval of every 90 minutes, plus a random offset between 0 and 30 minutes.

Policies applied by Samba are 'non-tattooing', meaning that changes can be
reverted by executing the `samba-gpupdate --unapply` command. Policies can be
re-applied using the `samba-gpupdate --force` command.
To view what policies have been or will be applied to a system, use the
`samba-gpupdate --rsop` command.

Administration of Samba policy requires that a Samba ADMX template be uploaded
to the SYSVOL share. The samba-tool command `samba-tool gpo admxload` is
provided as a convenient method for adding this policy. Once uploaded, policies
can be modified in the Group Policy Management Editor under Computer
Configuration/Policies/Administrative Templates. Alternatively, Samba policy
may be managed using the `samba-tool gpo manage` command. This tool does not
require the admx templates to be installed.

smb.conf changes
================

  Parameter Name                     Description                Default
  --------------                     -----------                -------
  smb encrypt                        Removed
  async dns timeout                  New                        10
  client smb encrypt                 New                        default
  honor change notify privilege      New                        No
  smbd force process locks           New                        No
  server smb encrypt                 New                        default
Comment 7 errata-xmlrpc 2021-11-09 19:47:56 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (samba bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4438
Note You need to log in before you can comment on or make changes to this bug.