debian/changelog

+samba (2:4.9.1+dfsg-2) UNRELEASED; urgency=medium
+
+  * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of
+    DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32
+  * Allow to change password via passwd in default config
+    - third_party: Update pam_wrapper to version 1.0.7
+    - third_party: Add pam_set_items.so from pam_wrapper
+    - nsswitch: Add try_authtok option to pam_winbind
+    - tests: Check pam_winbind pw change with different options
+    - Patch for previous 4 commits
+    - debian/winbind.pam-config: Use the new try_authtok option allowing
+      password change while preserving current behavior with password strength
+      modules (Closes: #858923, LP: #570944)
+
+ -- Mathieu Parent <sathieu@debian.org>  Tue, 09 Oct 2018 10:09:09 +0200
+
 samba (2:4.9.1+dfsg-1) experimental; urgency=medium
 
   * New upstream release