about summary refs log tree commit diff
path: root/pkgs/servers
diff options
context:
space:
mode:
authorAndrew Dunham <andrew@du.nham.ca>2019-02-16 01:26:54 -0800
committerAndrew Dunham <andrew@du.nham.ca>2019-02-24 02:36:41 -0500
commit2acd0004c17338530766cbe584364b62fd50005a (patch)
tree39742665a0cb4187321e0033576536d56db16dc9 /pkgs/servers
parentd98ac166b5bf74860f03becebe16568069fee41e (diff)
downloadnixlib-2acd0004c17338530766cbe584364b62fd50005a.tar
nixlib-2acd0004c17338530766cbe584364b62fd50005a.tar.gz
nixlib-2acd0004c17338530766cbe584364b62fd50005a.tar.bz2
nixlib-2acd0004c17338530766cbe584364b62fd50005a.tar.lz
nixlib-2acd0004c17338530766cbe584364b62fd50005a.tar.xz
nixlib-2acd0004c17338530766cbe584364b62fd50005a.tar.zst
nixlib-2acd0004c17338530766cbe584364b62fd50005a.zip
samba: 4.7.10 -> 4.7.12
Version 4.7.12 is a security release.

This fixes a couple of security related issues:
 - https://www.samba.org/samba/security/CVE-2018-14629.html
 - https://www.samba.org/samba/security/CVE-2018-16841.html
 - https://www.samba.org/samba/security/CVE-2018-16851.html
 - https://www.samba.org/samba/security/CVE-2018-16853.html
Diffstat (limited to 'pkgs/servers')
-rw-r--r--pkgs/servers/samba/4.x.nix8
1 files changed, 5 insertions, 3 deletions
diff --git a/pkgs/servers/samba/4.x.nix b/pkgs/servers/samba/4.x.nix
index 3d421e7a6ecb..4da3ae362c4d 100644
--- a/pkgs/servers/samba/4.x.nix
+++ b/pkgs/servers/samba/4.x.nix
@@ -20,11 +20,11 @@ with lib;
 
 stdenv.mkDerivation rec {
   name = "samba-${version}";
-  version = "4.7.10";
+  version = "4.7.12";
 
   src = fetchurl {
     url = "mirror://samba/pub/samba/stable/${name}.tar.gz";
-    sha256 = "0w5y6a7kiw5ap7hd84yglzk7cjax6lxlszd0wz1sxnmqx4a6hn9l";
+    sha256 = "0jmg39xigrh48j39r4f1390kmr1p3xbfxzfabln4b0r9qdmki70f";
   };
 
   outputs = [ "out" "dev" "man" ];
@@ -72,7 +72,9 @@ stdenv.mkDerivation rec {
       "--sysconfdir=/etc"
       "--localstatedir=/var"
     ]
-    ++ optional (!enableDomainController) "--without-ad-dc"
+    ++ [(if enableDomainController
+         then "--with-experimental-mit-ad-dc"
+         else "--without-ad-dc")]
     ++ optionals (!enableLDAP) [ "--without-ldap" "--without-ads" ]
     ++ optional (!enableAcl) "--without-acl-support"
     ++ optional (!enablePam) "--without-pam";