Samba 4.10.9 Available for Download

Samba 4.10.9 (gzipped)

Patch (gzipped) against Samba 4.10.8

                   Release Notes for Samba 4.10.9
                          October 17, 2019

Changes since 4.10.8:

o  Michael Adam <>
   * BUG 13972: Different Device Id for GlusterFS FUSE mount is causing data
     loss in CTDB cluster.
   * BUG 14141: winbind: Provide passwd struct for group sid with ID_TYPE_BOTH
     mapping (again).

o  Jeremy Allison <>
   * BUG 14094: smbc_readdirplus() is incompatible with smbc_telldir() and
   * BUG 14152: s3: smbclient: Stop an SMB2-connection from blundering into
     SMB1-specific calls.

o  Douglas Bagnall <>
   * BUG 13978: s4/scripting: MORE py3 compatible print functions.

o  Andrew Bartlett <>
   * ldb: Release ldb 1.5.6
   * BUG 13978: undoduididx: Add "or later" to warning about using tools from
     Samba 4.8.
   * BUG 13959: ldb_tdb fails to check error return when parsing pack formats.

o  Ralph Boehme <>
   * BUG 14038: ctdb: Fix compilation on systems with glibc robust mutexes.

o  Isaac Boukris <>
   * BUG 11362: GPO security filtering based on the groups in Kerberos PAC (but
     primary group is missing).
   * BUG 14106: Fix spnego fallback from kerberos to ntlmssp in smbd server.

o  Günther Deschner <>
   * BUG 14130: s3-winbindd: fix forest trusts with additional trust attributes.

o  Poornima G <>
   * BUG 14098: vfs_glusterfs: Use pthreadpool for scheduling aio operations.

o  Aaron Haslett <>
   * BUG 13977: ldb: baseinfo pack format check on init.
   * BUG 13978: ldb: ldbdump key and pack format version comments.

o  Amitay Isaacs <>
   * BUG 14140: Overlinking libreplace against librt and pthread against every
     binary or library causes issues.
   * BUG 14147: ctdb-vacuum: Process all records not deleted on a remote node.

o  Björn Jacke <>
   * BUG 14136: classicupgrade: Fix uncaught exception.
   * BUG 14139: fault.c: Improve fault_report message text pointing to our wiki.

o  Bryan Mason <>
   * BUG 14128: s3:client:Use DEVICE_URI, instead of argv[0],for Device URI.

o  Stefan Metzmacher <>
   * BUG 14055: We should send SMB2_NETNAME_NEGOTIATE_CONTEXT_ID negotiation
   * BUG 14124: 'pam_winbind' with 'krb5_auth' or 'wbinfo -K' doesn't work for
     users of trusted domains/forests principals" logic.

o  Anoop C S <>
   * BUG 14093: vfs_glusterfs: Enable profiling for file system operations.

o  Christof Schmitt <>
   * BUG 14032: vfs_gpfs: Implement special case for denying owner access to

o  Andreas Schneider <>
   * BUG 13884: Joining Active Directory should not use SAMR to set the
   * BUG 14106: s3:libsmb: Do not check the SPNEGO neg token for KRB5.
   * BUG 14140: Overlinking libreplace against librt and pthread against every
     binary or library causes issues.
   * BUG 14155: 'kpasswd' fails when built with MIT Kerberos.

o  Martin Schwenke <>
   * BUG 14084: CTDB replies can be lost before nodes are bidirectionally
   * BUG 14087: "ctdb stop" command completes before databases are frozen.
   * BUG 14129: ctdb-tools: Stop deleted nodes from influencing ctdb nodestatus
     exit code.

o  Evgeny Sinelnikov <>
   * BUG 14007: s3:ldap: Fix join with don't exists machine account.