X-Git-Url: http://git.samba.org/?p=samba.git;a=blobdiff_plain;f=WHATSNEW.txt;h=bdc3df78b2329b3e2c65b52c1b781174d88af318;hp=475ebcbdc840d38135f8d8f355f676e7a9a14559;hb=6a76a317793d6ae8fa1ce05f4faacbd0978fd5cb;hpb=6381044c0270a647c20935d22fd23f235d19b328 diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 475ebcbdc84..bdc3df78b23 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,12 +1,12 @@ Release Announcements ===================== -This is the first preview release of Samba 4.8. This is *not* +This is the first preview release of Samba 4.10. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. -Samba 4.8 will be the next version of the Samba suite. +Samba 4.10 will be the next version of the Samba suite. UPGRADING @@ -16,68 +16,33 @@ UPGRADING NEW FEATURES/CHANGES ==================== -Using x86_64 Accelerated AES Crypto Instructions -================================================ +GPO Improvements +---------------- -Samba on x86_64 can now be configured to use the Intel accelerated AES -instruction set, which has the potential to make SMB3 signing and -encryption much faster on client and server. To enable this, configure -Samba using the new option --accel-aes=intelaesni. +A new 'samba-tool gpo export' command has been added that can export a +set of Group Policy Objects from a domain in a generalised XML format. -This is a temporary solution that is being included to allow users -to enjoy the benefits of Intel accelerated AES on the x86_64 platform, -but the longer-term solution will be to move Samba to a fully supported -external crypto library. +A corresponding 'samba-tool gpo restore' command has been added to +rebuild the Group Policy Objects from the XML after generalization. +(The administrator needs to correct the values of XML entities between +the backup and restore to account for the change in domain). -The third_party/aesni-intel code will be removed from Samba as soon as -external crypto library performance reaches parity. -The default is to build without setting --accel-aes, which uses the -existing Samba software AES implementation. +REMOVED FEATURES +================ + smb.conf changes ================ Parameter Name Description Default -------------- ----------- ------- - oplock contention limit Removed - -NT4-style replication based net commands removed -================================================ - -The following commands and sub-commands have been removed from the -"net" utility: - -net rpc samdump -net rpc vampire ldif - -Also, replicating from a real NT4 domain with "net rpc vampire" and -"net rpc vampire keytab" has been removed. - -The NT4-based commands were accidentially broken in 2013, and nobody -noticed the breakage. So instead of fixing them including tests (which -would have meant writing a server for the protocols, which we don't -have) we decided to remove them. - -For the same reason, the "samsync", "samdeltas" and "database_redo" -commands have been removed from rpcclient. - -"net rpc vampire keytab" from Active Directory domains continues to be -supported. - -vfs_aio_linux module removed -============================ -The current Linux kernel aio does not match what Samba would -do. Shipping code that uses it leads people to false -assumptions. Samba implements async I/O based on threads by default, -there is no special module required to see benefits of read and write -request being sent do the disk in parallel. KNOWN ISSUES ============ -https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.8#Release_blocking_bugs +https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.10#Release_blocking_bugs #######################################