-What's new in Samba 4 alpha6
+What's new in Samba 4 alpha9
============================
Samba 4 is the ambitious next version of the Samba suite that is being
this branch is support for the Active Directory logon protocols used
by Windows 2000 and above.
-Samba4 alpha6 follows on from the alpha release series we have been
+Samba4 alpha9 follows on from the alpha release series we have been
publishing since September 2007
WARNINGS
========
-Samba4 alpha6 is not a final Samba release. That is more a reference
+Samba4 alpha9 is not a final Samba release. That is more a reference
to Samba4's lack of the features we expect you will need than a
statement of code quality, but clearly it hasn't seen a broad
deployment yet. If you were to upgrade Samba3 (or indeed Windows) to
We are aiming for Samba 4 to be powerful frontend to large
directories.
-CHANGES SINCE Alpha5
+CHANGES SINCE alpha8
=====================
-In the time since Samba4 Alpha5 was released in June 2008, Samba has
+In the time since Samba4 alpha8 was released in June 2009, Samba has
continued to evolve, but you may particularly notice these areas
(in no particular order):
- The source code for various libraries that are used by both Samba 3 and
- Samba 4 are now shared between the two rather than duplicated
- (and being slightly diverged).
+ Samba4 now includes the full set of user interface strings (display Specifiers)
+ required to have the Microsoft Management Console operate
- The tevent library has been split out and is now usable on its own.
+ LDB (the core Samba4 database library) has again been reworked for
+ better performance
- Several crash bugs and memory leaks in the registry library have been fixed.
+ Replication between Samba4 and Active Directory domains using the
+ native replication protocol (DRS) has been demonstrated.
- The Python modules have been extended and are no longer generated using SWIG.
+ Access Control Lists (in nTSecurityDescriptor) are now set correctly
+ on objects in the directory, based on the same rules as Windows 2008.
+ (Searches and still use a simplistic administrator/not administrator
+ criteria)
- Stream renames are now supported.
-
- The provision script now has an interactive mode.
-
- The (broken) copy of CTDB has been removed.
-
- More work towards supporting an OpenLDAP backend.
-
- Initial work on using the Microsoft LDAP schema.
-
- The storage of schemas in LDB is now much more efficient.
-
- Support for extended DNs in LDB has been added.
-
- Incoming trusts are now supported.
-
- Compatibility of the registry server with several Windows versions has been
- improved.
-
- Improvements to LSA.idl for better functionality in the usrmgr.exe.
-
- Improved handling of non-standard characters in passwords.
-
- The embedded JavaScript library has been removed in favor of Python.
-
- The WMI implementation has been re-added, but does not completely work yet.
-
- xpress compression is now supported in the NDR layer.
-
- The main binary is now named "samba" rather than "smbd".
-
- A simple script for setting the expiration of a user was added.
-
- It is now possible to use the system-installed Heimdal using the
- experimental --enable-external-heimdal option to configure.
-
- The LDB library is now completely asynchronous internally.
-
- Various unknowns and correctness issues in the drsblobs and drsuapi RPC
- interface implementations have been fixed.
-
- It is now possible to connect to an LDAP backend using SASL credentials.
-
- Multi-fragment NTtrans request support has been added.
-
- The DCE/RPC server can now listen on a separate pipe to allow DCE/RPC
- connections forwarded from Samba 3. The user credentials are provided
- by the client.
-
- A large number of bugs in the SMB2 implementation have been fixed.
-
- Auxiliary classes in LDAP schema conversion are now collapsed.
-
-These are just some of the highlights of the work done in the past few
-months. More details can be found in our GIT history.
+These are just some of the user-visible highlights of the work done in
+the past few months. More details of the work done 'under the hood'
+can be found in our GIT history.
CHANGES
- Clock Synchronisation is critical. Many 'wrong password' errors are
actually due to Kerberos objecting to a clock skew between client
- and server. (The NTP work in the previous alpha is partly to assist
+ and server. (The NTP work in the previous alphas are partly to assist
with this problem).
-- Samba4 alpha6 is currently only portable to recent Linux
- distributions. Work to return support for other Unix varients is
- expected during the next alpha cycle
+- The DRS replication code often fails, and is very new
+
+- Users upgrading existing databases to Samba4 should carefully
+ consult upgrading-samba4.txt. We have made a number of changes in
+ this release that should make it easier to upgrade in future.
+ Btw: there exists also a script under the "setup" directory of the
+ source distribution called "upgrade_from_s3" which should allow a step-up
+ from Samba3 to Samba4. It's not included yet in the binary distributions
+ since it's completely experimental!
-- Samba4 alpha6 is incompatible with GnuTLS 2.0, found in Fedora 9 and
- recent Ubuntu releases. GnuTLS use may be disabled using the
- --disable-gnutls argument to ./configure. (otherwise 'make test' and
- LDAPS operations will hang).
+- ACL are not set by default on shares created by the provision.
+ Work is underway on this subject and it should be fixed in Alpha10.
RUNNING Samba4
==============
DEVELOPMENT and FEEDBACK
========================
+
Bugs can be filed at https://bugzilla.samba.org/ but please be aware
that many features are simply not expected to work at this stage.