-This file contains a history of changes since the first Samba 4 Technology
-Preview. For a general introduction to Samba 4, see the README file in this
-directory. The NEWS file contains a list of differences between
-Samba 3 and Samba 4.
+What's new in Samba 4 alpha17
+=============================
-========================================
-Changes in Samba4-TP2
-Release date: UNRELEASED
-========================================
+Samba 4.0 will be the next version of the Samba suite and incorporates
+all the technology found in both the Samba4 alpha series and the
+stable 3.x series. The primary additional features over Samba 3.6 are
+support for the Active Directory logon protocols used by Windows 2000
+and above.
- * Make ldb async internally (idra)
+WARNINGS
+========
- * Use HDB-LDB as the keytab (abartlet)
+Samba4 alpha17 is not a final Samba release, however we are now making
+good progress towards a Samba 4.0 release, of which this is a preview.
+Be aware the this release contains both the technology of Samba 3.6
+(that you can reasonably expect to upgrade existing Samba 3.x releases
+to) and the AD domain controller work previously known as 'samba4'.
- * Call the wins hook script again (metze)
+While binaries for the stable file server are provided in this
+release, for a stable, supported file server, Samba3 domain or AD
+domain member installation, please run a Samba 3.x release, as we are
+still bedding down the new single build system.
- * Make sure no more then 25 records are added in the WINS database (metze)
-
- * Documentation updates (jelmer)
+Samba4 is subjected to an awesome battery of tests on an automated
+basis, we have found Samba 4.0 to be very stable in it's behavior.
+However, we still recommend against upgrading production servers from
+Samba 3.x release to Samba 4.0 alpha at this stage.
- * Fix termination issue in winreg server (metze)
+If you are upgrading, or looking to develop, test or deploy Samba 4.0
+alpha releases, you should backup all configuration and data.
- * AES fix for Samba 4 <-> Samba4 (abartlet)
+NEW FEATURES
+============
- * Better conformance to FHS (abartlet, jelmer)
+Samba 4.0 alpha supports the server-side of the Active Directory logon
+environment used by Windows 2000 and later, so we can do full domain
+join and domain logon operations with these clients.
- * Improve internal API and code quality in smbclient (jelmer)
+Our Domain Controller (DC) implementation includes our own built-in
+LDAP server and Kerberos Key Distribution Center (KDC) as well as the
+Samba3-like logon services provided over CIFS. We correctly generate
+the infamous Kerberos PAC, and include it with the Kerberos tickets we
+issue.
- * Add testsuite for smbclient (jelmer)
+Samba 4.0 alpha ships with two distinct file servers. The file server
+from the Samba 3.x series is 'smbd', and works with the binaries users
+would expect from that series (nmbd, winbindd, smbpasswd).
- * Remove support for password as an optional second parameter in
- smbclient (jelmer)
+Samba 4.0 also ships with a new file server, which is tuned to match
+the requirements of an AD domain controller. Users should not use the
+file server in the 'samba' binary for non-DC related tasks.
- * Various warning fixes (metze)
+A new scripting interface has been added to Samba 4, allowing Python
+programs to interface to Samba's internals, and many tools and
+internal workings of the DC code is now implemented in python.
- * Several clarifications of comments (abartlet)
- * Remove use of pstring in some places (jelmer)
+CHANGES SINCE alpha16
+=====================
- * Re-add the global -k option to enable kerberos (abartlet)
+For a list of changes since alpha 15, please see the git log.
- * Various memory allocation fixes (abartlet)
+$ git clone git://git.samba.org/samba.git
+$ cd samba.git
+$ git log release-4-0-0alpha16..release-4-0-0alpha17
- * Add new cifsdd client (jpeach)
+Some major user-visible changes include:
- * Add tests for even more insane delete-on-close semantics (jra, tridge)
-
- * Initial work on BASE-DELETE test passing (tridge)
+samba-tool dbcheck
+------------------
- * Optimizations in tdb (tridge)
+We now have an fsck-like tool for Samba's internal sam.ldb database.
+Run samba-tool dbcheck after installation to check your database for
+self-consistency. Any database created with a previous Samba4 alpha
+will have a very large number of consistency errors, which this tool
+can fix.
- * Improvements to ldb documentation (idra, Brad Hards)
+See also the -H option to point dbcheck at a different database to the
+default, and the --fix and --yes options to make changes and to not
+prompt about those changes.
- * Check attribute names to obey rfc2251 (idra)
+After upgrading Samba, it is suggested that you do the following:
- * Allow WINS replication with NT4SP6A (metze)
+ - stop samba
+ - take a backup copy of your sam.ldb and sam.ldb.d/* database files
+ - run samba-tool dbcheck --cross-ncs --fix
+ - use 'all' to say yes to fixing each type of error found
+ - after it has finished, run dbcheck again to ensure it reports no
+ errors
- * Add ManageDSAIT control (Pete Rowley, idra)
+There will be a lot of errors fixed, particularly related to
+bad/missing GUID values. This is due to a bug in previous releases
+that left many objects with bad GUID values. These can all be fixed
+using dbcheck with steps above.
- * Add tests for LDB controls (idra)
- * Various LDB crash fixes (idra)
+New default paths
+-----------------
- * Initial work on vlv LDB control (idra)
+The configure options for paths have changed again, and the
+--enable-fhs option has been reinstated. Packagers should attempt to
+first package Samba using:
- * Add -p option to smbtorture (jpeach)
+./configure --enable-fhs --prefix=/usr --sysconfdir=/etc --localstatedir=/var
- * Several improvements to the SMB URL and UNC parsing (jpeach)
+and only after examining the location Samba uses with these options
+should further changes be made. Existing packaging scripts are not
+expected to work unmodified, instead the Samba Team's aim is to
+simplify such scripts for the long term.
- * Make DCE/RPC connect functions work async (rafal)
+samba-tool domain samba3upgrade
+-------------------------------
- * Fix invalid steal on supportedControls (closes: #3525) (abartlet)
+The new samba-tool domain samba3upgrade command is a supported upgrade route from Samba
+3.x domain controllers to Samba 4.0 AD domain controllers. This
+provides a one-time migration of all users, domain members, passwords,
+groups, group members and account polcies.
- * Start parsing saslauthd requests (metze)
+This tool is still under development and may fail when presented with
+an inconsistant Samba3 database (such as many LDAP configurations).
+We hope to improve the error handling and recovery in these
+situations, so please provide feedback using the samba-technical
+mailing list.
- * Split the NBT-WINSREPLICATION test into multiple tests (metze)
+KNOWN ISSUES
+============
- * Add new ACB-bits as seen in acct_flags in the PAC info3 (gd)
+- Installation on systems without a system iconv (and developer
+ headers at compile time) is known to cause errors when dealing with
+ non-ASCII characters.
- * Move header files out of include/ (jelmer)
-
- * Create separate library for generic utility functions (jelmer)
+- In some situations, group members may not be upgraded by the
+ samba-tool domain upgrade_from_s3 script
- * Add highestCommittedUSN, uSNChanged and uSNCreated support to LDB (tridge)
+- The samba-tool domain join script will not join Windows 2000 domains.
- * Allow more control over the the winbindd socket location (abartlet)
+- Domain member support in the 'samba' binary is in it's infancy, and
+ is not comparable to the support found in winbindd. As such, do not
+ use the 'samba' binary (provided for the AD server) on a member
+ server.
- * Allow messaging without a server messaging context (abartlet)
+- There is no printing support in the 'samba' binary (use smbd instead)
- * Make GSSAPI SASL mech work (abartlet)
+- There is no NetBIOS browsing support (network neighbourhood) in the
+ 'samba' binary (use nmbd and smbd instead)
- * Write out Samba4 version when provisioning (idra)
+- Clock Synchronisation is critical. Many 'wrong password' errors are
+ actually due to Kerberos objecting to a clock skew between client
+ and server. (The NTP work in the previous alphas are partly to assist
+ with this problem).
- * Allow servers to bind to non-broadcast interfaces (tridge, abartlet)
+- The DRS replication code may fail. Please contact the team if you
+ experience issues with DRS replication, as we have fixed many issues
+ here in response to feedback from our production users.
- * Initialize some ASN.1 elements that are optional (metze)
+RUNNING Samba 4.0 as an AD DC
+=============================
- * Various improvements to RPC-SCHANNEL (abartlet)
+A short guide to setting up Samba 4 as an AD DC can be found on the wiki:
- * Make Samba4 pass some of the newer schannel tests (abartlet)
+ http://wiki.samba.org/index.php/Samba4/HOWTO
- * Better handling of connections without SPNEGO (abartlet)
+#######################################
+Reporting bugs & Development Discussion
+#######################################
- * Generate seperate headers for RPC client functions (jelmer)
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
- * Improve NTLMSSP tests (abartlet, vl)
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored. All bug reports should
+be filed under the Samba 4.0 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
- * Support any size pointers in pidl (tridge)
- * Large overhaul of the opendb code to pass BASE-DELETE (tridge)
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
- * Use doxygen for documenting lib/util and lib/registry (jelmer)
-
- * Add registration mechanism for modules and backends in ldb (idra, jelmer)
-
- * Support building shared libraries in the build system (metze, jelmer)
-
- * Install headers in a sane location (jelmer)
-
- * Fix BASE-NEGNOWAIT (tridge)
-
- * Add prefixes to most of the SMB-related functions (metze)
-
- * Get rid of proto.h (jelmer)
-
- * Reduce number of headers included in includes.h (jelmer)
-
- * Support header dependencies (jelmer)
-
- * Add RAW-NOTIFY (tridge, metze)
-
- * Fix 'your password has expired' on every login (abartlet)
-
- * Improvements to RPC-SAMSYNC (abartlet)
-
- * Work on supporting change notify (tridge, metze)
-
- * Reopen log files after SIGHUP (metze)
-
- * Add BUGS.txt (#3523) (jelmer)
-
- * Add summary to configure (#3442) (metze, jelmer)
-
- * Swig fixes (idra)
-
- * Improve NBT-WINSREPLICATION-OWNED test (metze)
-
- * Fix a lot of compiler warnings (metze)
-
- * Several code improvements found by static code checker (tridge, metze)
-
- * Force correct alignment when in ASCII mode (#2921) (tridge)
-
- * Fix coverity bug #127 (vl)
-
- * Add support for changing process titles (metze)
-
- * Support raw NTLMSSP (abartlet)
-
- * Fix debug levels in several places (abartlet)
-
- * Work to unify the ntvfs structures for smb and smb2 (metze, tridge)
-
- * A lot of small cleanups and typo fixes
- (metze, abartlet, idra, jpeach, tridge, jelmer)
-
-(up to date until revno 14554)
git.samba.org / mat / samba.git / blobdiff