=================================
Release Notes for Samba 3.2.0pre2
- Oct XX, 2007
+ Feb 29, 2008
=================================
This is the second preview release of Samba 3.2.0. This is *not*
o Introduction of a registry based configuration system.
o Improved CIFS Unix Extensions support.
o Experimental support for file serving clusters.
-
+ o Support for IPv6 in the server, and client tools and libraries.
+ o Support for storing alternate data streams in xattrs.
+ o Encrypted SMB transport in client tools and libraries, and server.
Winbind and Active Directory Integration:
o Full support for Windows 2003 cross-forest, transitive trusts
o Support in pam_winbind for logging on using the userPrincipalName.
o Expansion of nested domain groups via NSS calls.
o Support for Active Directory LDAP Signing policy.
+ o New LGPL Winbind client library (libwbclient.so)
Users & Groups:
The Samba Team has adopted the Version 3 of the GNU General Public
License for the 3.2 and later releases. The GPLv3 is the updated
version of the GPLv2 license under which Samba is currently
-distributed. It has been updated to improvecompatibility with other
-licenses and to make it easier to adopt internationally, and is an
+distributed. It has been updated to improve compatibility with other
+licenses and to make it easier to adopt internationally, and is an
improved version of the license to better suit the needs of Free
Software in the 21st Century.
-The original announcement is available on-line at
+The original announcement is available on-line at
http://news.samba.org/announcements/samba_gplv3/
New Security Defaults for Authentication
========================================
-Support for LanMan passwords is now disabled in both client and server
-applications. Additionally, clear text authentication requests are
+Support for LanMan passwords is now disabled in both client and server
+applications. Additionally, clear text authentication requests are
disabled by default in client utilities such as smbclient and all
-libsmbclient based applications. This will affect connection both
-to and from hosts running DOS, Windows 9x/ME, and OS/2. Please refer
-to the "Changes" section for details on the exact parameters that were
+libsmbclient based applications. This will affect connection both
+to and from hosts running DOS, Windows 9x/ME, and OS/2. Please refer
+to the "Changes" section for details on the exact parameters that were
updated.
Samba is now able to use a registry based configuration backed to
supplement smb.conf setting. This feature may be enabled by setting
-"include = registry" and "registry shares = yes" in the [global]
-section of smb.conf and may be managed using the "net conf" command.
+"config backend = registry" and "registry shares = yes" in the [global]
+section of smb.conf and may be managed using the "net conf" command.
-More information may be obtained from the smb.conf(5) and net(8) man
+More information may be obtained from the smb.conf(5) and net(8) man
pages.
client plaintext auth Changed Default No
clustering New No
cluster addresses New ""
+ config backend New file
ctdb socket New ""
+ debug class New No
+ hidden New No
lanman auth Changed Default No
- mangle map Removed
+ ldap debug level New 0
+ ldap debug threshold New 10
+ mangle map Removed
open files database hashsize Removed
- read bmpx Removed
+ read bmpx Removed
registry shares New No
- winbind expand groups New 1
- winbind rpc only New No
+ winbind expand groups New 1
+ winbind rpc only New No
Changes since 3.2.0pre1:
-----------------------
+o Michael Adam <obnox@samba.org>
+ * Add library for access to the registry configuration data.
+ * BUG 5023: Separate NFS4 and POSIX ACL code in file access checks.
+ * BUG 4308: Fix Excel save operation ACL bug.
+ * Refactor and consolidate logic for retrieving the machine
+ trust password information.
+ * VFS API cleanup (remove redundant parameter).
+ * BUG 4801: Correctly implement LSA lookup levels for LookupNames.
+ * Add new option "debug class" to control printing of the debug class.
+ in debug headers.
+ * Enable building of the zfsacl and notify_fam vfs modules.
+ * BUG 5083: Fix memleak in solarisacl module.
+ * BUG 5063: Fix build on RHEL5.
+ * New smb.conf parameter "config backend = registry" to enable registry
+ only configuration.
+ * Move "net conf" functionality into a separate module libnet_conf.c
+ * Restructure registry code, eliminating the dynamic overlay.
+ Make use of reg_api instead of backend code in most places.
+ * Add support for intercepting LDAP libraries' debug output and print
+ it in Samba's debugging system.
+ * Libreplace fixes.
+ * Build fixes.
+ * Initial support for using subsystems as shared libraries.
+ Use talloc, tdb, and libnetapi as shared libraries internally.
+
+
+o Jeremy Allison <jra@samba.org>
+ * Added support for IPv6 client and server connections.
+ * Add in the recvfile entry to the VFS layer.
+ * Removal of pstring data type.
+ * Remove unused utilities: smbctool and rpctorture.
+ * Fix service principal detection to match Windows Vista
+ (based on work from Andreas Schneider).
+ * Encrypted SMB transport in client tools and libraries, and server.
+
+o Kai Blin <kai@samba.org>
+ * Added support for an SMB_CONF_PATH environment variable
+ containing the path to smb.conf.
+ * Various fixes to ntlm_auth.
+ * make test now supports more extensive SPOOLSS testing using vlp.
+ * Correctly handle mixed-case hostnames in NTLMv2 authentication.
+
+
+o Gerald (Jerry) Carter <jerry@samba.org>
+ * Add Winbind client library.
+ * Decouple static linking between smbd and winbindd's client
+ interface.
+
+
+o Guenther Deschner <gd@samba.org>
+ * Enhance client and server remote registry access.
+ * Add client calls for remotely joining a computer to a domain
+ (including calls from "net dom" command).
+ * Add libnetapi.so library for joining domains including
+ sample GTK+ app.
+
+
+o Steve Langasek <vorlon@debian.org>
+ * Integrate 2 out of 3 --with-fhs patches from Debian packaging
+ for better adherence to the FHS standard.
+
+
+o Volker Lendecke <vl@samba.org>
+ * Add talloc_stackframe() and talloc_pool() features.
+ * Removal of pstring data type.
+ * Add generic a in-memory cache.
+ * Import the Linux red-black tree implementation.
+ * Remove large amount of global variables.
+ * Support for storing xattrs in tdb files
+ * Support for storing alternate data streams in xattrs
+ * Implement a generic in-memory cache based on rb-trees
+ * Add implicit temporary talloc contexts via talloc_stack()
+
+
+o Stefan Metzmacher <metze@samba.org>
+ * Fixes for libreplace.
+ * Pidl fixes.
+ * Build fixes.
+ * Add nss_wrapper support.
+ * Start and test winbindd by 'make test'
+ * Split up child_dispatch_table into domain, idmap and locator tables
+ in winbindd.
+ * Fix for a crash bug in pidl generated client code.
+ This could have happend with [in,out,unique] pointers
+ when the client sends a valid pointer, but the server
+ responds with a NULL pointer (as samba-3.0.26a does for some calls).
+ * Change NTSTATUS into enum ndr_err_code in librpc/ndr.
+ * Remove unused calls in the struct based winbindd protocol.
+ * Add --configfile option to wbinfo.
+ * Convert winbind_env_set(), winbind_on() and winbind_off() into macros.
+ * Return rids and other_sids arrays in WBFLAG_PAM_INFO3_TEXT mode.
+ * Implement wbcErrorString() and wbcAuthenticateUserEx().
+ * Convert auth_winbind to use wbcAuthenticateUserEx().
+
+
+o James Peach <jpeach@samba.org>
+ * Add support for DNS Service Discovery. Based on work from
+ Rishi Srivatsavai <rishisv@gmail.com>.
+
+
+o Andreas Schneider <anschneider@suse.de>
+ * Don't restart winbind if a corrupted tdb is found during
+ initialization.
+ * Fix Windows 2008 (Longhorn) join.
+ * Fix crashbug in winbindd.
+ * Add share parameter "hidden".
+
+
+o Karolin Seeger <ks@sernet.de>
+ * Improve error messages of net subcommands.
+ * Add 'net rap file user'.
+ * Change LDAP search filter to find machine accounts which
+ are not located in the user suffix.
+
+
+o David Shaw <dshaw@jabberwocky.com>
+ * BUG 5073: Allow "delete readonly = yes" to correctly override
+ deletion of a file.
+
+
+o Rishi Srivatsavai <rishisv@gmail.com>
+ * Register the smb service with mDNS if mDNS is supported.
+ * Add smbclient support for basic mDNS browsing.
+
+
+o Andrew Tridgell <tridge@samba.org>
+ * Fix padding between Winbind 32bit/64bit client library in
+ the request/response structures.
+ * Added a syncops VFS module for file systems which do not
+ guarantee meta-data operations are immediately committed to
+ disk in stable form.
+
+
+o Jelmer Vernooij <jelmer@samba.org>
+ * Additional portability support for building shared libraries.
+
+o Corinna Vinschen <corinna@vinschen.de>
+ * Get Samba version or capability information from Windows user space
+
Original 3.2.0pre1 commits:
---------------------------
* Merged \winreg server code from the SAMBA_3_2 development branch.
* Fixes for libreplace.
* Implement new registry configuration backend.
-
+
o Jeremy Allison <jra@samba.org>
* Add support for file system objectIDs.
* Winbind cache validation support.
* Add in the UNIX capability for 24-bit readX.
* Improve Delete-on-Close semantics.
- * Removal of static file and path name buffers in SMB file serving
+ * Removal of static file and path name buffers in SMB file serving
code.
-
+
o Danilo Almeida <dalmeida@centeris.com>
* Move the machine account to the OU specified when running "net
o Andrew Bartlett <abartlet@samba.org>
- * Tighten authentication protocol defaults in client tools and
+ * Tighten authentication protocol defaults in client tools and
servers.
* Fix lockups in Winbind when running nscd.
* UPN logon support in pam_winbind.
* Add support for GNU linker scripts when build shared libraries
- (based on work by Julien Cristau <jcristau@debian.org> and James
+ (based on work by Julien Cristau <jcristau@debian.org> and James
Peach).
o Steve Langasek <vorlon@debian.org>
* Allow SIGTERM to cause nmbd to exit while awaiting a interface
- to come up.
+ to come up.
o Volker Lendecke <vl@samba.org>
* Add client support for the SamLogonEx() authentication request.
* Implement RPC proxy stubs in the Samba server code to allow
replacing implementation functions one by one.
- * Remove static incoming and outgoing buffers from core server SMB
+ * Remove static incoming and outgoing buffers from core server SMB
packet processing code.
* Add "net sam rights" command.
o Jiri Sasek <Jiri.Sasek@Sun.COM>
- * Added vfs_vfsacl module.
+ * Added vfs_zfsacl module.
o Karolin Seeger <ks@sernet.de>
git.samba.org / gd / samba / .git / blobdiff