The branch, master has been updated via ff16c74ee2b WHATSNEW: Start release notes for Samba 4.15.0pre1. via 17c3e4a7769 VERSION: Bump version up to 4.15.0pre1... via 60cae14db1b VERSION: Disable GIT_SNAPSHOT for the 4.14.0rc1 release. via 80d14464141 WHATSNEW: Add release notes for Samba 4.14.0rc1. via 38a278b1afe ReleaseKey: add GnuPG key transition statement for the Samba release key via 715b208b513 script/release.sh: always select the GPG key by it's ID via 13485bcecf5 WHATSNEW.txt: Miscellaneous samba-tool changes from 6fd557974bf libcli:smb: Fix a typo in a debug message
https://git.samba.org/?p=samba.git;a=shortlog;h=master - Log ----------------------------------------------------------------- commit ff16c74ee2be501427f6d7b97eb75bc4a1280cf8 Author: Karolin Seeger <ksee...@samba.org> Date: Thu Jan 21 13:55:25 2021 +0100 WHATSNEW: Start release notes for Samba 4.15.0pre1. Signed-off-by: Karolin Seeger <ksee...@samba.org> commit 17c3e4a7769c5947be9545039c7b7ed9c02914f7 Author: Karolin Seeger <ksee...@samba.org> Date: Thu Jan 21 13:51:20 2021 +0100 VERSION: Bump version up to 4.15.0pre1... and re-enable GIT_SNAPSHOT. Signed-off-by: Karolin Seeger <ksee...@samba.org> commit 60cae14db1bbabe8459bb19e01f090303920bedc Author: Karolin Seeger <ksee...@samba.org> Date: Thu Jan 21 13:48:52 2021 +0100 VERSION: Disable GIT_SNAPSHOT for the 4.14.0rc1 release. Signed-off-by: Karolin Seeger <ksee...@samba.org> commit 80d14464141e9c0395ca39e16ca5010ad09355eb Author: Karolin Seeger <ksee...@samba.org> Date: Thu Jan 21 13:47:02 2021 +0100 WHATSNEW: Add release notes for Samba 4.14.0rc1. Signed-off-by: Karolin Seeger <ksee...@samba.org> commit 38a278b1afedd6c0a6de0fd4f08008e83f8597a9 Author: Karolin Seeger <ksee...@samba.org> Date: Thu Jan 21 13:02:26 2021 +0100 ReleaseKey: add GnuPG key transition statement for the Samba release key Signed-off-by: Karolin Seeger <ksee...@samba.org> Signed-off-by: Stefan Metzmacher <me...@samba.org> commit 715b208b513035269a6523f8543c4bf328a7c0f2 Author: Karolin Seeger <ksee...@samba.org> Date: Thu Jan 21 13:03:44 2021 +0100 script/release.sh: always select the GPG key by it's ID Signed-off-by: Karolin Seeger <ksee...@samba.org> Signed-off-by: Stefan Metzmacher <me...@samba.org> commit 13485bcecf5c4b9246e20494ca8048491fa98f86 Author: Björn Baumbach <b...@sernet.de> Date: Mon Jan 18 15:02:22 2021 +0100 WHATSNEW.txt: Miscellaneous samba-tool changes Signed-off-by: Björn Baumbach <b...@sernet.de> Reviewed-by: Karolin Seeger <ksee...@samba.org> ----------------------------------------------------------------------- Summary of changes: GPG_AA99442FB680B620_replaces_6F33915B6568B7EA.txt | 27 ++++ VERSION | 2 +- WHATSNEW.txt | 149 +++------------------ script/release.sh | 4 +- 4 files changed, 49 insertions(+), 133 deletions(-) create mode 100644 GPG_AA99442FB680B620_replaces_6F33915B6568B7EA.txt Changeset truncated at 500 lines: diff --git a/GPG_AA99442FB680B620_replaces_6F33915B6568B7EA.txt b/GPG_AA99442FB680B620_replaces_6F33915B6568B7EA.txt new file mode 100644 index 00000000000..8e240bae8db --- /dev/null +++ b/GPG_AA99442FB680B620_replaces_6F33915B6568B7EA.txt @@ -0,0 +1,27 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + +The GPG release key for Samba releases changed from: + +pub dsa1024/6F33915B6568B7EA 2007-02-04 [SC] [expires: 2021-02-05] + Key fingerprint = 52FB C0B8 6D95 4B08 4332 4CDC 6F33 915B 6568 B7EA +uid [ full ] Samba Distribution Verification Key <samba-b...@samba.org> +sub elg2048/9C6ED163DA6DFB44 2007-02-04 [E] [expires: 2021-02-05] + +to the following new key: + +pub rsa4096/AA99442FB680B620 2020-12-21 [SC] [expires: 2022-12-21] + Key fingerprint = 81F5 E283 2BD2 545A 1897 B713 AA99 442F B680 B620 +uid [ultimate] Samba Distribution Verification Key <samba-b...@samba.org> +sub rsa4096/97EF9386FBFD4002 2020-12-21 [E] [expires: 2022-12-21] + +Starting from Jan 21th 2021, all Samba releases will be signed with the new key. + +This document is signed with the old key. + +-----BEGIN PGP SIGNATURE----- + +iF0EARECAB0WIQRS+8C4bZVLCEMyTNxvM5FbZWi36gUCYAltCQAKCRBvM5FbZWi3 +6ofOAJ491tFEr36jLkf158ueIrDw9zNVtgCbBV3PgocOX5VH57s1NQdBOof+ihw= +=wf56 +-----END PGP SIGNATURE----- diff --git a/VERSION b/VERSION index 0c96dc3bc7c..a560fcfe060 100644 --- a/VERSION +++ b/VERSION @@ -24,7 +24,7 @@ # -> "3.0.0" # ######################################################## SAMBA_VERSION_MAJOR=4 -SAMBA_VERSION_MINOR=14 +SAMBA_VERSION_MINOR=15 SAMBA_VERSION_RELEASE=0 ######################################################## diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 0747811f9d6..7a64854b828 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,146 +1,48 @@ Release Announcements ===================== -This is the first pre release of Samba 4.14. This is *not* +This is the first pre release of Samba 4.15. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. -Samba 4.14 will be the next version of the Samba suite. +Samba 4.15 will be the next version of the Samba suite. UPGRADING ========= +New GPG key +----------- -NEW FEATURES/CHANGES -==================== - -Here is a copy of a clarification note added to the Samba code -in the file: VFS-License-clarification.txt. --------------------------------------------------------------- - -A clarification of our GNU GPL License enforcement boundary within the Samba -Virtual File System (VFS) layer. - -Samba is licensed under the GNU GPL. All code committed to the Samba -project or that creates a "modified version" or software "based on" Samba must -be either licensed under the GNU GPL or a compatible license. - -Samba has several plug-in interfaces where external code may be called -from Samba GNU GPL licensed code. The most important of these is the -Samba VFS layer. - -Samba VFS modules are intimately connected by header files and API -definitions to the part of the Samba code that provides file services, -and as such, code that implements a plug-in Samba VFS module must be -licensed under the GNU GPL or a compatible license. - -However, Samba VFS modules may themselves call third-party external -libraries that are not part of the Samba project and are externally -developed and maintained. - -As long as these third-party external libraries do not use any of the -Samba internal structure, APIs or interface definitions created by the -Samba project (to the extent that they would be considered subject to the GNU -GPL), then the Samba Team will not consider such third-party external -libraries called from Samba VFS modules as "based on" and/or creating a -"modified version" of the Samba code for the purposes of GNU GPL. -Accordingly, we do not require such libraries be licensed under the GNU GPL -or a GNU GPL compatible license. - -VFS ---- - -The effort to modernize Samba's VFS interface has reached a major milestone with -the next release Samba 4.14. - -For details please refer to the documentation at source3/modules/The_New_VFS.txt or -visit the <https://wiki.samba.org/index.php/The_New_VFS>. - -Printing --------- - -Publishing printers in AD is more reliable and more printer features are -added to the published information in AD. Samba now also supports Windows -drivers for the ARM64 architecture. +The GPG release key for Samba releases changed from: +pub dsa1024/6F33915B6568B7EA 2007-02-04 [SC] [expires: 2021-02-05] + Key fingerprint = 52FB C0B8 6D95 4B08 4332 4CDC 6F33 915B 6568 B7EA +uid [ full ] Samba Distribution Verification Key <samba-b...@samba.org> +sub elg2048/9C6ED163DA6DFB44 2007-02-04 [E] [expires: 2021-02-05] -Client Group Policy -------------------- -This release extends Samba to support Group Policy functionality for Winbind -clients. Active Directory Administrators can set policies that apply Sudoers -configuration, and cron jobs to run hourly, daily, weekly or monthly. +to the following new key: -To enable the application of Group Policies on a client, set the global -smb.conf option 'apply group policies' to 'yes'. Policies are applied on an -interval of every 90 minutes, plus a random offset between 0 and 30 minutes. +pub rsa4096/AA99442FB680B620 2020-12-21 [SC] [expires: 2022-12-21] + Key fingerprint = 81F5 E283 2BD2 545A 1897 B713 AA99 442F B680 B620 +uid [ultimate] Samba Distribution Verification Key <samba-b...@samba.org> +sub rsa4096/97EF9386FBFD4002 2020-12-21 [E] [expires: 2022-12-21] -Policies applied by Samba are 'non-tattooing', meaning that changes can be -reverted by executing the `samba-gpupdate --unapply` command. Policies can be -re-applied using the `samba-gpupdate --force` command. -To view what policies have been or will be applied to a system, use the -`samba-gpupdate --rsop` command. +Starting from Jan 21th 2021, all Samba releases will be signed with the new key. -Administration of Samba policy requires that a Samba ADMX template be uploaded -to the SYSVOL share. The samba-tool command `samba-tool gpo admxload` is -provided as a convenient method for adding this policy. Once uploaded, policies -can be modified in the Group Policy Management Editor under Computer -Configuration/Policies/Administrative Templates. Alternatively, Samba policy -may be managed using the `samba-tool gpo manage` command. This tool does not -require the admx templates to be installed. +See also GPG_AA99442FB680B620_replaces_6F33915B6568B7EA.txt -Python 3.6 or later required ----------------------------- - -Samba's minimum runtime requirement for python was raised to Python -3.6 with samba 4.13. Samba 4.14 raises this minimum version to Python -3.6 also to build Samba. It is no longer possible to build Samba -(even just the file server) with Python versions 2.6 and 2.7. - -As Python 2.7 has been End Of Life upstream since April 2020, Samba -is dropping ALL Python 2.x support in this release. - - -NT4-like 'classic' Samba domain controllers -------------------------------------------- - -Samba 4.13 deprecates Samba's original domain controller mode. - -Sites using Samba as a Domain Controller should upgrade from the -NT4-like 'classic' Domain Controller to a Samba Active Directory DC -to ensure full operation with modern windows clients. - - -SMBv1 only protocol options deprecated --------------------------------------- - -A number of smb.conf parameters for less-secure authentication methods -which are only possible over SMBv1 are deprecated in this release. - - -CTDB CHANGES -============ +NEW FEATURES/CHANGES +==================== -* The NAT gateway and LVS features now uses the term "leader" to refer - to the main node in a group through which traffic is routed and - "follower" for other members of a group. The command for - determining the leader has changed to "ctdb natgw leader" (from - "ctdb natgw master"). The configuration keyword for indicating that - a node can not be the leader of a group has changed to - "follower-only" (from "slave-only"). Identical changes were made - for LVS. -* Remove "ctdb isnotrecmaster" command. It isn't used by CTDB's - scripts and can be checked by users with "ctdb pnn" and "ctdb - recmaster". REMOVED FEATURES ================ -The deprecated "ldap ssl ads" smb.conf option has been removed. smb.conf changes @@ -148,25 +50,12 @@ smb.conf changes Parameter Name Description Default -------------- ----------- ------- - smb encrypt Removed - ldap ssl ads Removed - client plaintext auth Deprecated no - client NTLMv2 auth Deprecated yes - client lanman auth Deprecated no - client use spnego Deprecated yes - domain logons Deprecated no - raw NTLMv2 auth Deprecated no - async dns timeout New 10 - client smb encrypt New default - honor change notify privilege New No - smbd force process locks New No - server smb encrypt New default KNOWN ISSUES ============ -https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.14#Release_blocking_bugs +https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.15#Release_blocking_bugs ####################################### diff --git a/script/release.sh b/script/release.sh index fd7e9736416..45e9206005c 100755 --- a/script/release.sh +++ b/script/release.sh @@ -316,7 +316,7 @@ create_release() { echo "Signing ${tarname} => ${tarname}.asc" rm -f "${tarname}.asc" - gpg -u "${GPG_USER}" --detach-sign --armor ${tarname} || { + gpg --default-key "${GPG_KEYID}" --detach-sign --armor ${tarname} || { return 1 } test -f "${tarname}.asc" || { @@ -362,7 +362,7 @@ patch_release() { echo "Signing ${patchfile} => ${patchfile}.asc" rm -f "${patchfile}.asc" CLEANUP_FILES="${CLEANUP_FILES} ${patchfile}.asc" - gpg -u "${GPG_USER}" --detach-sign --armor ${patchfile} || { + gpg --default-key "${GPG_KEYID}" --detach-sign --armor ${patchfile} || { return 1 } test -f "${patchfile}.asc" || { -- Samba Shared Repository