samba4: bump to 4.24.3

libs/libpam/test-version.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+
+# shellcheck shell=busybox
+
+case "$PKG_NAME" in
+libpam)
+	exit 0
+	;;
+
+*)
+	echo "Untested package: $PKG_NAME" >&2
+	exit 1
+	;;
+esac

net/samba4/Makefile

@@ -2,16 +2,16 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=samba
-PKG_VERSION:=4.22.7
-PKG_RELEASE:=3
+PKG_VERSION:=4.24.3
+PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:= \
 		https://ftp.gwdg.de/pub/samba/stable/ \
 		https://ftp.riken.jp/net/samba/samba/stable/ \
 		https://www.nic.funet.fi/index/samba/pub/samba/stable/ \
 		https://download.samba.org/pub/samba/stable/
-PKG_HASH:=12195811d4542f661536e9055b44d58c53020412beafaae205e227bf72f6a497
+PKG_HASH:=4a5e0ed1ea192b798c873d9957c50a5767c10c2767cccb00d56ecc427e94f8e9
 
 PKG_BUILD_FLAGS:=gc-sections
 
@@ -336,9 +336,9 @@ ifdef CONFIG_KERNEL_IO_URING
 	SYSTEM_BUNDLED_LIBS:=,uring
 endif
 ifeq ($(CONFIG_SAMBA4_SERVER_AD_DC),y)
-	CONFIGURE_ARGS += --bundled-libraries=NONE,$(SYSTEM_PRIVATE_BUNDLED_LIBS)$(SYSTEM_BUNDLED_LIBS),$(PYTHON_BUNDLED_LIBS)
+	CONFIGURE_ARGS += --bundled-libraries=$(SYSTEM_PRIVATE_BUNDLED_LIBS)$(SYSTEM_BUNDLED_LIBS),$(PYTHON_BUNDLED_LIBS)
 else
-	CONFIGURE_ARGS += --bundled-libraries=NONE,$(SYSTEM_PRIVATE_BUNDLED_LIBS)$(SYSTEM_BUNDLED_LIBS)
+	CONFIGURE_ARGS += --bundled-libraries=$(SYSTEM_PRIVATE_BUNDLED_LIBS)$(SYSTEM_BUNDLED_LIBS)
 endif
 CONFIGURE_ARGS += --private-libraries=$(SYSTEM_PRIVATE_BUNDLED_LIBS)
 
@@ -363,9 +363,9 @@ define Host/Prepare
 	$(call Host/Prepare/Default)
 	$(SED) 's,mandatory=True,mandatory=False,g' $(HOST_BUILD_DIR)/wscript_configure_system_gnutls
 	$(SED) 's,gnutls_version =.*,gnutls_version = gnutls_min_required_version,g' $(HOST_BUILD_DIR)/wscript_configure_system_gnutls
-	$(SED) 's,gnutls_version_str.*,gnutls_version_str = "3.7.7",g' $(HOST_BUILD_DIR)/wscript_configure_system_gnutls
+	$(SED) 's,gnutls_version_str =.*,gnutls_version_str = "3.8.10",g' $(HOST_BUILD_DIR)/wscript_configure_system_gnutls
 	$(SED) 's,(gnutls_version > .*,(parse_version(gnutls_version) > parse_version("3.6.10")):,g' $(HOST_BUILD_DIR)/wscript_configure_system_gnutls
-	$(SED) 's,(gnutls_version < .*,(parse_version(gnutls_version) < parse_version("3.5.2")):,g' $(HOST_BUILD_DIR)/wscript_configure_system_gnutls
+	$(SED) 's,(gnutls_version >= .*,(parse_version(gnutls_version) >= parse_version("3.5.2")):,g' $(HOST_BUILD_DIR)/wscript_configure_system_gnutls
 endef
 define Host/Compile
 	(cd $(HOST_BUILD_DIR); \
@@ -408,6 +408,8 @@ endef
 
 # Build via "waf install", avoid the make wrapper. (Samba logic is 'waf install' = build + install)
 define Build/Compile
+	$(LN) $(STAGING_DIR_HOSTPKG)/bin/compile_et_samba $(PKG_BUILD_DIR)/bin/compile_et
+	$(LN) $(STAGING_DIR_HOSTPKG)/bin/asn1_compile_samba $(PKG_BUILD_DIR)/bin/asn1_compile
 	(cd $(PKG_BUILD_DIR); \
 		./buildtools/bin/waf install \
 		--jobs=$(shell nproc) \

net/samba4/files/smb.conf.template

@@ -5,6 +5,8 @@
 	unix charset = |CHARSET|
 	workgroup = |WORKGROUP|
 
+	client ipc min protocol = SMB2
+
 	## This global parameter allows the Samba admin to limit what interfaces on a machine will serve SMB requests.
 	bind interfaces only = yes
 
@@ -19,10 +21,13 @@
 
 	## This parameter controls whether a remote client is allowed or required to use SMB encryption.
 	## It has different effects depending on whether the connection uses SMB1 or SMB2 and newer:
-    ## If the connection uses SMB1, then this option controls the use of a Samba-specific extension to the SMB protocol introduced in Samba 3.2 that makes use of the Unix extensions.
+	## If the connection uses SMB1, then this option controls the use of a Samba-specific extension to the SMB protocol introduced in Samba 3.2 that makes use of the Unix extensions.
 	## If the connection uses SMB2 or newer, then this option controls the use of the SMB-level encryption that is supported in SMB version 3.0 and above and available in Windows 8 and newer. 
 	## (default/auto,desired,required,off)
-	#smb encrypt = default
+	smb encrypt = default
+	server signing = default
+	client smb encrypt = default
+	server smb encrypt = default
 
 	## set invalid users
 	invalid users = root

net/samba4/patches/005-musl_uintptr.patch

@@ -1,8 +1,7 @@
 commit f81e5b71ce78f33250347914dacc75c8463bf102
-Author: Breno Leitao <breno.leitao@gmail.com>
+From: Breno Leitao <breno.leitao@gmail.com>
 Date:   Wed Mar 29 15:22:38 2017 -0300
-
-    include: Check for previous declaration of uintptr_t
+Subject: [PATCH] include: Check for previous declaration of uintptr_t
 
     Adding a extra check before declaring uintptr_t. Currently musl uses
     macro __DEFINED_uintptr_t once it defines uintptr_t type. Checking
@@ -13,16 +12,7 @@ Date:   Wed Mar 29 15:22:38 2017 -0300
 
 --- a/third_party/cmocka/cmocka.h
 +++ b/third_party/cmocka/cmocka.h
-@@ -111,7 +111,7 @@ typedef uintmax_t LargestIntegralType;
-     ((LargestIntegralType)(value))
-
- /* Smallest integral type capable of holding a pointer. */
--#if !defined(_UINTPTR_T) && !defined(_UINTPTR_T_DEFINED)
-+#if !defined(_UINTPTR_T) && !defined(_UINTPTR_T_DEFINED) && !defined(__DEFINED_uintptr_t)
- # if defined(_WIN32)
-     /* WIN32 is an ILP32 platform */
-     typedef unsigned int uintptr_t;
-@@ -137,6 +137,8 @@ typedef uintmax_t LargestIntegralType;
+@@ -147,6 +147,8 @@ typedef uintmax_t LargestIntegralType;
 
  # define _UINTPTR_T
  # define _UINTPTR_T_DEFINED

net/samba4/patches/011-samba-4-14-disable-python-module-host-check.patch

@@ -1,6 +1,14 @@
+From: Aditya Nugraha <vortexilation@gmail.com>
+Date:   Wed Jul 01 02:06:00 2026 +0700
+Subject: [PATCH] Disable python module host check
+
+    Disable detection for host's third party python module check.	
+
+    Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>
+
 --- a/python/wscript
 +++ b/python/wscript
-@@ -90,9 +90,9 @@ def configure(conf):
+@@ -103,9 +103,9 @@ def configure(conf):
                                        "'python3-iso8601'. Please install "
                                        "one of the packages.")
 

net/samba4/patches/102-samba-4.11-unbundle-libbsd.patch

@@ -1,8 +1,16 @@
+From: Aditya Nugraha <vortexilation@gmail.com>
+Date:   Wed Jul 01 02:06:00 2026 +0700
+Subject: [PATCH] Unbundle libbsd
+
+    Remove libbsd dependency
+
+    Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>
+
 --- a/lib/replace/wscript
 +++ b/lib/replace/wscript
 @@ -441,33 +441,13 @@ def configure(conf):
 
-     conf.CHECK_FUNCS('prctl dirname basename')
+     conf.CHECK_FUNCS('dirname basename')
 
 -    strlcpy_in_bsd = False
 +    # Not checking for libbsd

net/samba4/patches/104-fix-build-on-aarch64-and-risc.patch

@@ -1,6 +1,19 @@
+From: John Audia <therealgraysky@proton.me>
+Date:   Wed Jul 01 02:06:00 2026 +0700
+Subject: [PATCH] Fix build on aarch64 and risc
+
+    For aarch64 and risc64, the discard_const macro is used to remove
+const qualifiers from string literals, but casting a string literal’s
+address to uintptr_t and then to void * is not a constant expression in
+some compilers or environments e.g. the musl libc and aarch64/risc64
+combination seems to enforce stricter rules for constant initializers
+or pointer/integer size handling compared to glibc-based systems.
+
+    Signed-off-by: John Audia <therealgraysky@proton.me>
+
 --- a/lib/ldb/tests/test_ldb_comparison_fold.c
 +++ b/lib/ldb/tests/test_ldb_comparison_fold.c
-@@ -52,7 +52,7 @@ struct ranked_value {
+@@ -53,7 +53,7 @@ struct ranked_value {
  	int rank;
  };
 

net/samba4/waf-cross-answers/aarch64.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: OK
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/arc.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: NO
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/arm.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials with 32-bit system
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: NO
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/armeb.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials with 32-bit system
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: NO
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/i386.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials with 32-bit system
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: NO
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/mips.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: NO
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/mips64.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: OK
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/mips64el.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: OK
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/mipsel.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: NO
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/powerpc.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: NO
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/powerpc64.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: OK
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/riscv64.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: OK
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK

net/samba4/waf-cross-answers/x86_64.txt

@@ -31,7 +31,7 @@ Checking whether we can use Linux thread-specific credentials: OK
 Checking whether fcntl locking is available: OK
 Checking whether fcntl lock supports open file description locks: NO
 Checking whether fcntl supports flags to send direct I/O availability signals: OK
-Checking whether fcntl supports setting/geting hints: (-11, "")
+Checking whether fcntl supports setting/getting hints: (-11, "")
 Checking for the maximum value of the 'time_t' type: OK
 Checking whether the realpath function allows a NULL argument: OK
 Checking for ftruncate extend: OK