--- a/components/samba/Makefile	Tue Dec 20 11:59:29 2016 -0800
+++ b/components/samba/Makefile	Wed Dec 21 12:22:29 2016 -0800
@@ -41,9 +41,9 @@
 export PARFAIT_BUILD=no
 
 COMPONENT_NAME=		samba
-COMPONENT_VERSION=	4.4.5
-TPNO=			30123
-COMPONENT_ARCHIVE_HASH= sha256:b876ef2e63f66265490e80a122e66ef2d7616112b839df68f56ac2e1ce17a7bd
+COMPONENT_VERSION=	4.4.8
+TPNO=			33007
+COMPONENT_ARCHIVE_HASH= sha256:0e54de8a22b77f9712578029639331b51f818b70e194766c98475a5b99470fbf
 COMPONENT_SRC=		$(COMPONENT_NAME)-$(COMPONENT_VERSION)
 COMPONENT_PROJECT_URL=	http://www.samba.org/
 COMPONENT_ARCHIVE=	$(COMPONENT_SRC).tar.gz
@@ -92,6 +92,10 @@
 CPPFLAGS +=	$(CPP_XPG6MODE)
 CPPFLAGS +=	-I/usr/include/openldap
 
+# MIT kerberos uses different enctype defs.
+CPPFLAGS += -DCKSUMTYPE_HMAC_SHA1_96_AES_128=CKSUMTYPE_HMAC_SHA1_96_AES128
+CPPFLAGS += -DCKSUMTYPE_HMAC_SHA1_96_AES_256=CKSUMTYPE_HMAC_SHA1_96_AES256
+
 # Enable adiheap and adistack security extensions
 ADIHEAP_MODE =	$(ADIHEAP_ENABLE)
 ADISTACK_MODE =	$(ADISTACK_ENABLE)