- gse_krb5: gain root privilege during get server keytab (thx Ivan Volchenko).
  Fix PAM Winbind kerberos auth requires user access to keytab (Samba#12491).

- Fix typo in sss_ec_get_key() for OpenSSL older than 3.0.

- Update to the 2.9.2 for samba-4.20.6 and later releases

- Move executable script to bindir.
- Update systemd unit.

- Update to latest stable release:
 + Added the cmddenial_message sudoers option to provide additional information
   to the user when a command is denied by the sudoers policy.
   The default message is still displayed.
 + The time stamp used for file-based logs is now more consistent with the time
   stamp produced by syslog (GitHub#327).
 + Sudo will now warn the user if it can detect the user's terminal but cannot
   determine the path to the terminal device. The sudoers time stamp file will
   now use the terminal device number directly (GitHub #329).
 + Added a json_compact value for the sudoers log_format option which can be
   used when logging to a file (GitHub#357).
 + new pam_silent sudoers option has been added which may be negated to avoid
   suppressing output from PAM authentication modules (GitHub#216).
 + Fixed several cvtsudoers JSON output problems (GitHub#369, GitHub#370,
   GitHub#371, GitHub#373, GitHub#381).
 + When sudo runs a command in a pseudo-terminal and the user's terminal is
   revoked, the pseudo-terminal's foreground process group will now receive
   SIGHUP before the terminal is revoked. This emulates the behavior of the
   session leader exiting and is consistent with what happens when, for example,
   an ssh session is closed (GitHub#367).
 + Paths specified via a Chdir_Spec or Chroot_Spec in sudoers may now be
   double-quoted.
 + The default sudoers file now enables the secure_path option by default
   and preserves the EDITOR, VISUAL, and SUDO_EDITOR environment variables
   when running visudo (GitHub#387).

- Updated to 14 version (fixes: CVE-2023-50967)

- Added pam_canonicalize_user.so to system-auth-common (closes: #47426).
- Added pam_canonicalize_user control (closes: #47713).
- Disabled legacy pam_propperpwnam.so in system-auth-common during upgrade.

- Update to latest stable release supported latest kernel 6.11.
- Major fixes from upstream:
  + LDAP Ping capability (to find the closest site);
  + smbinfo adds gettconinfo command (allowed dumping session and tcon id);
  + Various improvements to man pages.
- Backport bash completion support for smbinfo (with filestreaminfo, keys,
  gettconinfo) from Fedora.

- Added additional methods on the bus for forced downloading of gpt (thx greh@)

- Fixed problem with local users definition (difference with previous
  release - fixed path to /etc/tcb/ is removed, which allows to work
  with nsswitch.conf) (thx Maria Alexeeva) (ALT#47499).

- new version 1.1.7
- Fixes from upstream:
  + Fix installation of python module
  + Improve config dir creation if we have pam_start_confdir()
  + Fixed PAM_WRAPPER_DISABLE_DEEPBIND
  + Directly fail if we can't create the config dir

- Updated to new version 1.1.16 (released 2024-07-05)
- Fixes from upstream:
  + Fixed copy&paste error in the destructor
  + Fixed thread sanitizer on modern Linux Kernels
  + Fixed building with newer cmocka versions

- Updated to new version 1.3.1 (released 2024-06-12)
- Fixes from upstream:
  + Added support to find libc via LIBC_SO define
  + Fixed uid_wrapper running with jemalloc compiled binaries
  + Fixed socket_wrapper interaction test
  + Fixed thread sanitizer on modern Linux Kernels

- Updates to new version 1.4.3 (released 2024-06-12)
- Fixes from upstream:
  + Fixed socket_wrapper running with jemalloc compiled binaries
  + Fixed thread sanitizer on modern Linux Kernels
  + Fixed swrap_fake_uid_wrapper test

- Update to latest release 124.0-6367.202

- Fix cmocka >= 1.1.6 find_package()

- Update to latest 4.x release

- Update to release 2.6.9 with mutliple fixes and improved libxmlsec compatibility.
- Enable build check tests.

- Fixed build with LTO.

- Add support LDAP add/mod operation to set/change password:
 + fix unable to join to active directory after KB5008380/CVE-2021-42287 with
   option '--ldap-passwd';
 + https://gitlab.freedesktop.org/realmd/adcli/-/issues/27
- Add support fall back to LDAPS if CLDAP ping was not successful
 + If the --use-ldaps option is used and there is no reply on the CLDAP 389/udp
   port adcli will try to send the request to the LDAPS port 636/tcp.
- Fix write SID before secret to Samba's db looks like 'net changesecretpw'
- Add passwd-user sub-command for (re)set a user password.
- Add dont-expire-password option for computer.

- NMU: spec: adapt to new cmake macros.

- require libkbibtexpart9 again
- obsoletes libkbibtexpart4 (needed for upgrade)
- fix descriptions

- NMU: fix building with boost 1.85.0

- New version for samba-4.20

- Update to latest release for samba-4.20

- Update to release for samba-4.20

- Update Administrative Templates (.admx) default source URL:
  Windows 10 October 2020 Update -> Windows 10 2022 Update (22H2).

- NMU: added runtime requirements (ALT #50102)

- Update to latest release, which includes spnego changes.

- Updated to 0.9.32.
- Add lmdb.pc pkg-config file from Fedora to development subpackages.

- Improve oddjob-gpupdate-dbus-timeout control.
- Initial support build for debian.

- Add compatibility with stable releases of samba-4.18 and later (closes: 49404).
- Replace python3 build to new pyproject_build process.

- Initial build for Sisyphus

- Initial build

- NMU: added build dependency on setuptools

- Automatically updated to 0.20.

- Add control pam_propperpwnam for support module in system authentication (ALT#47713).

- new version 1.2.38

- Update samba defaults from samba-4.16.6-alt1 release.
- Update restore script with default configuration files actually placed in
  default directory as in the user's system.

- alterator-entry: fix version printing.

- Fix check of mime type for images.

- Fixed prepare-vm script dependency to gpasswd.

- Initial release

- CMake: Set CMOCKA_LIBRARIES in package config for backwards compatibility

- Initial build for Sisyphus.

- Fixed getopt for license mode.

- Updated spec to allow any compression of man page

- NMU: spec: adapted to new cmake macros.

- Build on aarch64 fixed

- NMU: rebuilt for debuginfo.