Search results

* CTDB_DBDIR can now be set to tmpfs[:<tmpfs-options>] * Configuration variable VerifyRecoveryLock is now marked obsolete

# Deletion of pre-configured Samba and Kerberos placeholder configuration files # Any environmental configuration based on Unix/Linux Distribution

Inside this HowTo, we will be using the following configuration/settings: ...he external LDAP server. In this case, make sure that you check/adapt your configuration (ldap.conf, smb.conf) to retrieve the information from your old LDAP backen

New options added are: ...honours any existing claims, authentication policy and authentication silo configuration previously created (eg from an import of a Microsoft AD), as well as new co

...alue of "wide links" has been changed to "no" to avoid an insecure default configuration ("wide links = yes" and "unix extensions = yes"). For more details, please ====New configure options====

...97]: s3:auth: ignore create_builtin_guests() failing without a valid idmap configuration. ...53 CVE-2018-16853] Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported)

# Your specific Samba configuration can use a number of VFS modules that do not have to overlap. That is, they ...them. Some of them can modify the path into an absolute path, depending on configuration (for example, vfs_shadow_copy2, if configured with an absolute snapsharepat

...ients. Active Directory Administrators can set policies that apply Sudoers configuration, and cron jobs to run hourly, daily, weekly or monthly. ...icies can be modified in the Group Policy Management Editor under Computer Configuration/Policies/Administrative Templates. Alternatively, Samba policy may be manag

...org/show_bug.cgi?id=12615 BUG #12615]: manpages/vfs_fruit: Document global options. ...ge the (default) behavior for some protocols. Please see the "New smb.conf options" and "Behavior changes" sections below.

====samba-tool drs replicate with new options==== 'samba-tool drs replicate' got two new options:

...e server only are not directly affected by this flaw, though they may need configuration changes to continue to talk to domain controllers (see "file servers and do ...w_bug.cgi?id=14069 BUG #14069]: Incomplete conversion of former parametric options.

...ck for the strings "streams_depot" or "streams_xattr" inside your smb.conf configuration file. ...lease, id mapping has been rewritten yet again with the goal of making the configuration more simple and more coherent while keeping the needed flexibility and even

...ge the (default) behavior for some protocols. Please see the "New smb.conf options" and "Behavior changes" sections below. ...mba-tool", "ldbsearch", "ldbedit" and more. Some of them have command line options like "--sign" and "--encrypt". With the security update they will also obey

...org/show_bug.cgi?id=12615 BUG #12615]: manpages/vfs_fruit: Document global options. ...n. We implemented checks in the 'testparm' tool to validate the ID mapping configuration. You should run it and check if it prints any warnings or errors after upgr

...a.org/show_bug.cgi?id=14538 BUG #14538]: smb.conf.5: Add clarification how configuration changes reflected by Samba. ...ounts as soon as possible, as "wide links = yes" is an inherently insecure configuration which we would like to remove from Samba. Moving the feature into a VFS mod

....cgi?id=8093 BUG #8093]: access based share enum: Handle permission set in configuration files. ...ge the (default) behavior for some protocols. Please see the "New smb.conf options" and "Behavior changes" sections below.

...53 CVE-2018-16853] Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported) ...main can crash the KDC when Samba is built in the non-default MIT Kerberos configuration.

...including Windows) using the --local-dc-ipaddress= (and other --local-dc-* options). ...rotocol in smbd. This can be selected at configure time with either of the options:

...f smbcacls is used with the "-C|--chown name" or "-G|--chgrp name" command options it will remove the existing ACL on the object being modified, leaving the f ...ck for the strings "streams_depot" or "streams_xattr" inside your smb.conf configuration file.

...including Windows) using the --local-dc-ipaddress= (and other --local-dc-* options). ...to provide services like SRVSVC in the same way that smbd used to in this configuration.