rebase new/debian:
pick 8072170 - debian/VERSION.patch: Update vendor string to "Ubuntu".
pick 010ba5c - debian/smb.conf; + Add "(Samba, Ubuntu)" to server string.
pick ed56e25 + Comment out the default [homes] share, and add a comment about "valid users = %s" to show users how to restrict access to \\server\username to only username.
pick 42a9eec - debian/samba-common.config: + Do not change priority to high if dhclient3 is installed.
pick 3ed6931 - Add apport hook: + Created debian/source_samba.py. + debian/rules, debian/samba-common-bin.install: install hook.
pick 1107b3f - Add extra DEP8 tests to samba (LP: #1696823): + d/t/control: enable the new DEP8 tests + d/t/smbclient-anonymous-share-list: list available shares anonymously + d/t/smbclient-authenticated-share-list: list available shares using an authenticated connection + d/t/smbclient-share-access: create a share and download a file from it + d/t/cifs-share-access: access a file in a share using cifs
pick a188e95 - Ask the user if we can run testparm against the config file. If yes, include its stderr and exit status in the bug report. Otherwise, only include the exit status. (LP: #1694334)
pick a83e0e9 - If systemctl is available, use it to query the status of the smbd service before trying to reload it. Otherwise, keep the same check as before and reload the service based on the existence of the initscript. (LP: #1579597)
pick 3f6c0c2 - d/rules: Compile winbindd/winbindd statically.
pick 7045847307a5618092edac5adeada81190a73bc3 * Drop: - d/p/krb_zero_cursor.patch - apply proposed-upstream fix for pam_winbind krb5_ccache_type=FILE failure [Replaced by d/p/s3-gse_krb5-fix-a-possible-crash-in-fill_mem_keytab.patch in 2:4.6.5+dfsg-3 that closed Debian's bug #739768]
pick 8c0b0390ce7b2b946db990bcf807e7ef372084c6 - debian/patches/winbind_trusted_domains.patch: make sure domain members can talk to trusted domains DCs. [Upstream committed a different fix, see updated patch attached to https://bugzilla.samba.org/show_bug.cgi?id=11830]
pick c82ba5b51b6ed73bcf8b1e733b73beb210ad76c7 - d/control: add libcephfs-dev as b-d to build vfs_ceph [Adopted by Debian in 2:4.6.5+dfsg-1]
pick 734302d4ab44442fea6740d54266b487d52b84a6 - debian/patches/CVE-2017-11103.patch: use encrypted service name rather than unencrypted (and therefore spoofable) version in heimdal [Adopted by Debian as d/p/CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.patch]
pick 53c3ce3baa487544305ed24d0df9ad046a7cffb5 - Cherrypick upstream patch to fix FTBFS with new ceph lib. [Merged upstream in 4.6.0rc1]
$ git show 3f6c0c2
commit 3f6c0c22c69c04c5702e68f0193df7d7043216b4
Author: Andreas Hasenack <andreas@canonical.com>
Date: Wed Aug 9 15:03:20 2017 -0300
- d/rules: Compile winbindd/winbindd statically.
diff --git a/debian/rules b/debian/rules
index cb9cc5f..b5a31c2 100755
--- a/debian/rules
+++ b/debian/rules
@@ -65,6 +65,7 @@ conf_args = \
--enable-avahi \
--disable-rpath \
--disable-rpath-install \
+ --nonshared-binary=winbindd/winbindd \
--bundled-libraries=NONE,pytevent,iniparser,roken,wind,hx509,asn1,heimbase,hcrypto,krb5,gssapi,heimntlm,hdb,kdc,com_err,compile_et,asn1_compile \
--builtin-libraries=replace,ccan,samba-cluster-support \
--minimum-library-version="$(shell ./debian/autodeps.py --minimum-library-version)" \