Samba 4.13 Features added/changed: Difference between revisions
Line 1: | Line 1: | ||
Samba 4.13 is [[Samba_Release_Planning#Upcoming_Release|'''next upcoming release series''']]. |
Samba 4.13 is [[Samba_Release_Planning#Upcoming_Release|'''next upcoming release series''']]. |
||
==Samba 4. |
==Samba 4.13rc4== |
||
<onlyinclude> |
<onlyinclude> |
||
:Release Notes for Samba 4.13rc3 |
:Release Notes for Samba 4.13rc3 |
||
: |
:September 7, 2020 |
||
===Release Announcements=== |
===Release Announcements=== |
||
This is the |
This is the fourth release condidate of Samba 4.13. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. |
||
===Samba 4.13 will be the next version of the Samba suite.=== |
===Samba 4.13 will be the next version of the Samba suite.=== |
||
Line 56: | Line 56: | ||
client use spnego Deprecated yes |
client use spnego Deprecated yes |
||
</onlyinclude> |
</onlyinclude> |
||
===CHANGES SINCE 4.13.0rc3=== |
|||
* David Disseldorp <ddiss at samba.org> |
|||
:* [https://bugzilla.samba.org/show_bug.cgi?id=14437 BUG #14437]: build: Toggle vfs_snapper using "--with-shared-modules". |
|||
* Volker Lendecke <vl at samba.org> |
|||
:* [https://bugzilla.samba.org/show_bug.cgi?id=14465 BUG #14465]: idmap_ad does not deal properly with a RFC4511 section 4.4.1 response. |
|||
* Stefan Metzmacher <metze at samba.org> |
|||
:* [https://bugzilla.samba.org/show_bug.cgi?id=14428 BUG #14428]: PANIC: Assert failed in get_lease_type(). |
|||
:* [https://bugzilla.samba.org/show_bug.cgi?id=14465 BUG #14465]: idmap_ad does not deal properly with a RFC4511 section 4.4.1 |
|||
===CHANGES SINCE 4.13.0rc2=== |
===CHANGES SINCE 4.13.0rc2=== |
||
Line 87: | Line 96: | ||
[[Release_Planning_for_Samba_4.13#Release_blocking_bugs]] |
[[Release_Planning_for_Samba_4.13#Release_blocking_bugs]] |
||
https://download.samba.org/pub/samba/rc/samba-4.13. |
https://download.samba.org/pub/samba/rc/samba-4.13.0rc4.WHATSNEW.txt |
||
---- |
---- |
||
[[Category:Release Notes]] |
[[Category:Release Notes]] |
Revision as of 14:18, 7 September 2020
Samba 4.13 is next upcoming release series.
Samba 4.13rc4
- Release Notes for Samba 4.13rc3
- September 7, 2020
Release Announcements
This is the fourth release condidate of Samba 4.13. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/.
Samba 4.13 will be the next version of the Samba suite.
UPGRADING
NEW FEATURES/CHANGES
Python 3.6 Required
Samba's minimum runtime requirement for python was raised to Python 3.5 with samba 4.12. Samba 4.13 raises this minimum version to Python 3.6 both to access new features and because this is the oldest version we test with in our CI infrastructure.
(Build time support for the file server with Python 2.6 has not changed)
wide links functionality
For this release, the code implementing the insecure "wide links = yes" functionality has been moved out of the core smbd code and into a separate VFS module, vfs_widelinks. Currently this vfs module is implicitly loaded by smbd as the last but one module before vfs_default if "wide links = yes" is enabled on the share (note, the existing restrictions on enabling wide links around the SMB1 "unix extensions" and the "allow insecure wide links" parameters are still in force). The implicit loading was done to allow existing users of "wide links = yes" to keep this functionality without having to make a change to existing working smb.conf files.
Please note that the Samba developers recommend changing any Samba installations that currently use "wide links = yes" to use bind mounts as soon as possible, as "wide links = yes" is an inherently insecure configuration which we would like to remove from Samba. Moving the feature into a VFS module allows this to be done in a cleaner way in future.
A future release to be determined will remove this implicit linkage, causing administrators who need this functionality to have to explicitly add the vfs_widelinks module into the "vfs objects =" parameter lists. The release notes will be updated to note this change when it occurs.
NT4-like 'classic' Samba domain controllers
Samba 4.13 deprecates Samba's original domain controller mode.
Sites using Samba as a Domain Controller should upgrade from the NT4-like 'classic' Domain Controller to a Samba Active Directory DC to ensure full operation with modern windows clients.
SMBv1 only protocol options deprecated
A number of smb.conf parameters for less-secure authentication methods which are only possible over SMBv1 are deprecated in this release.
REMOVED FEATURES
The deprecated "ldap ssl ads" smb.conf option has been removed.
smb.conf changes
Parameter Name Description Default -------------- ----------- ------- ldap ssl ads removed smb2 disable lock sequence checking No domain logons Deprecated no raw NTLMv2 auth Deprecated no client plaintext auth Deprecated no client NTLMv2 auth Deprecated yes client lanman auth Deprecated no client use spnego Deprecated yes
CHANGES SINCE 4.13.0rc3
- David Disseldorp <ddiss at samba.org>
- BUG #14437: build: Toggle vfs_snapper using "--with-shared-modules".
- Volker Lendecke <vl at samba.org>
- BUG #14465: idmap_ad does not deal properly with a RFC4511 section 4.4.1 response.
- Stefan Metzmacher <metze at samba.org>
- BUG #14428: PANIC: Assert failed in get_lease_type().
- BUG #14465: idmap_ad does not deal properly with a RFC4511 section 4.4.1
CHANGES SINCE 4.13.0rc2
- Andrew Bartlett <abartlet@samba.org>
- BUG #14460: Deprecate domain logons, SMBv1 things.
- Günther Deschner <gd@samba.org>
- BUG #14318: docs: Add missing winexe manpage.
- Christof Schmitt <cs@samba.org>
- BUG #14166: util: Allow symlinks in directory_create_or_exist.
- Martin Schwenke <martin@meltin.net>
- BUG #14466: ctdb disable/enable can fail due to race condition.
CHANGES SINCE 4.13.0rc1
- Andrew Bartlett <abartlet at samba.org>
- BUG #14450: dbcheck: Allow a dangling forward link outside our known NCs.
- Isaac Boukris <iboukris at gmail.com>
- BUG #14462: Remove deprecated "ldap ssl ads" smb.conf option.
- Volker Lendecke <vl at samba.org>
- BUG #14435: winbind: Fix lookuprids cache problem.
- Stefan Metzmacher <metze at samba.org>
- BUG #14354: kdc:db-glue: Ignore KRB5_PROG_ETYPE_NOSUPP also for Primary:Kerberos.
- Andreas Schneider <asn at samba.org>
- BUG #14358: docs: Fix documentation for require_membership_of of pam_winbind.conf.
- Martin Schwenke <martin at meltin.net>
- BUG #14444: ctdb-scripts: Use nfsconf as a last resort get nfsd thread count.
KNOWN ISSUES
Release_Planning_for_Samba_4.13#Release_blocking_bugs
https://download.samba.org/pub/samba/rc/samba-4.13.0rc4.WHATSNEW.txt