Samba 4.22.4 has been released. This update addresses several critical issues, including the NR_STATUS_ACCESS_DENIED error from netr_LogonSamLogonEx, the failure of getpwuid to switch to a new domain controller when the current one is unavailable, Windows security hardening that prevents schannel'ed netlogon DC calls, unresponsiveness of a secondary DC leading to idmapping failures, the kinit command encountering a missing cache error, the malfunction of vfs_streams_depot fstatat, delayed leader broadcasts that indefinitely block ctdb, and the malfunction of SMB ACL inheritance for newly created files.

Samba 4.22.4 Available for Download

This is the latest stable release of the Samba 4.22 release series.

Changes since 4.22.3

o  Ralph Boehme [slow@samba.org]
   * BUG 14981: netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
     SysvolReady=0.
   * BUG 15844: getpwuid does not shift to new DC when current DC is down.
   * BUG 15876: Windows security hardening locks out schannel'ed
netlogon dc
     calls like netr_DsRGetDCName-
   * BUG 15881: Unresponsive second DC can cause idmapping failure when
using
     idmap_ad-

o  Günther Deschner [gd@samba.org]
   * BUG 15840: kinit command is failing with Missing cache Error.

o  Pavel Filipenský [pfilipensky@samba.org]
   * BUG 15891: Figuring out the DC name from IP address fails and breaks
     fork_domain_child().

o  Volker Lendecke [vl@samba.org]
   * BUG 15816: vfs_streams_depot fstatat broken.
   * BUG 15892: Delayed leader broadcast can block ctdb forever.

o  Stefan Metzmacher [metze@samba.org]
   * BUG 14981: netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
     SysvolReady=0.

o  Rabinarayan Panigrahi [rapanigr@redhat.com]
   * BUG 15663: Apparently there is a conflict between shadow_copy2
module and
     virusfilter (action quarantine).

o  Aleksandr Sharov [asharov@redhat.com]
   * BUG 15877: Fix handling of empty GPO link.

o  Srinivas Rao V [Srinivas.Rao.V@ibm.com]
   * BUG 15880: SMB ACL inheritance doesn't work for files created.

Reporting bugs & Development Discussion

Please discuss this release on the samba-technical mailing list or by joining the #samba-technical:matrix.org matrix room, or #samba-technical IRC channel on irc.libera.chat.

If you do report problems then please try to send high quality feedback. If you don't provide vital information to help us track down the problem then you will probably be ignored.  All bug reports should be filed under the Samba 4.1 and newer product in the project's Bugzilla database ( https://bugzilla.samba.org/).

Download Details

The uncompressed tarballs and patch files have been signed using GnuPG (ID AA99442FB680B620).  The source code can be downloaded from:

        https://download.samba.org/pub/samba/stable/

The release notes are available online at:

        https://www.samba.org/samba/history/samba-4.22.4.html

Our Code, Our Bugs, Our Responsibility.
( https://bugzilla.samba.org/)

                        --Enjoy
                        The Samba Team