File _patchinfo of Package patchinfo.21237

<patchinfo incident="21237">
  <issue tracker="bnc" id="14571"></issue>
  <issue tracker="bnc" id="1189017">net rpc group members broken in Leap 15.3</issue>
  <issue tracker="bnc" id="1188727">race condition between replication of ADDCs and net_ads_changetrustpw() leads to invalid kvno</issue>
  <issue tracker="jsc" id="SLE-18456"/>
  <packager>scabrero</packager>
  <rating>important</rating>
  <category>recommended</category>
  <summary>Recommended update for samba</summary>
  <description>This update for samba fixes the following issues:

Features added:

- Add Certificate Auto Enrollment Policy. (jsc#SLE-18456)

Bugs fixed:

- Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay. (bsc#1188727)
- Fix 'net rpc' authentication when using the machine account. (bsc#1189017)

Samba was updated to 4.13.10

* s3: smbd: Ensure POSIX default ACL is mapped into returned
  Windows ACL for directory handles; (bso#14708);
* Take a copy to make sure we don't reference free'd memory; (bso#14721);
* s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722);
* s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
  change_file_owner_to_parent() error path; (bso#14736);
* samba-tool: Give better error information when the
  'domain backup restore' fails with a duplicate SID; (bso#14575);
* smbd: Correctly initialize close timestamp fields; (bso#14714);
* Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740);
* ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475);
* gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750);
* smbXsrv_{open,session,tcon}: Protect
  smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752);
* samba-tool domain backup offline doesn't work against bind DLZ
  backend; (bso#14027);
* netcmd: Use next_free_rid() function to calculate a SID for
  restoring a backup; (bso#14669);

Samba was updated to 4.13.9:

* s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696);
* Add documentation for dsdb_group_audit and dsdb_group_json_audit
  to "log level", synchronise "log level" in smb.conf with the code; (bso#14689);
* Fix smbd panic when two clients open same file; (bso#14672);
* Fix memory leak in the RPC server; (bso#14675);
* s3: smbd: Fix deferred renames; (bso#14679);
* s3-iremotewinspool: Set the per-request memory context; (bso#14675);
* rpc_server3: Fix a memleak for internal pipes; (bso#14675);
* third_party: Update socket_wrapper to version 1.3.2; (bso#11899);
* third_party: Update socket_wrapper to version 1.3.3; (bso#14639);
* idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid
  conflict; (bso#14663);
* Fix the build on OmniOS; (bso#14288);

Update to 4.13.7

* Release with dependency on ldb version 2.2.1.
- Fix wrong kvno exported to keytab after net ads changetrustpw due to replication delay (bsc#1188727)

</description>
</patchinfo>