WHATSNEW: add 'Password sync as active directory domain controller'

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 8cb521ab5cf78dbf02f8d0c5e7a0c8bc71414add..436d9bfdde02d30e7c06355022cdb7d552b4dc15 100644 (file)
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -158,6 +158,20 @@ descriptors having file locks are opened onto the same file. An internal
 tunable "smbd:force process locks = true" may be used to turn off OFD
 locks if there appear to be problems with them.
 
 tunable "smbd:force process locks = true" may be used to turn off OFD
 locks if there appear to be problems with them.
 

+Password sync as active directory domain controller
+---------------------------------------------------
+
+The new commands 'samba-tool user getpassword'
+and 'samba-tool user syncpasswords' provide
+access and syncing of various password fields.
+
+If compiled with GPGME support (--with-gpgme) it's
+possible to store cleartext passwords in a PGP/OpenGPG
+encrypted form by configuring the new "password hash gpg key ids"
+option. This requires gpgme devel and python packages to be installed
+(e.g. libgpgme11-dev and python-gpgme on debian/ubuntu).
+
+

 REMOVED FEATURES
 ================
 
 REMOVED FEATURES
 ================
 


@@ -166,16 +180,19 @@ only user and username parameters
 These two parameters have long been deprecated and superseded by
 "valid users" and "invalid users".
 
 These two parameters have long been deprecated and superseded by
 "valid users" and "invalid users".
 

+

 smb.conf changes
 smb.conf changes

-----------------
-
-  Parameter Name               Description             Default
-  --------------               -----------             -------
-  ntlm auth                    Changed default         no
-  only user                    Removed
-  username                     Removed
-  kccsrv:samba_kcc             Changed default         true
-  smb2 leases                  Changed default         yes
+================
+
+  Parameter Name                Description             Default
+  --------------                -----------             -------
+  kccsrv:samba_kcc              Changed default         yes
+  ntlm auth                     Changed default         no
+  only user                     Removed
+  password hash gpg key ids     New
+  smb2 leases                   Changed default         yes
+  username                      Removed
+

 
 KNOWN ISSUES
 ============
 
 KNOWN ISSUES
 ============