o Expansion of nested domain groups via NSS calls.
o Support for Active Directory LDAP Signing policy.
o New LGPL Winbind client library (libwbclient.so).
+ o Support for establishing interdomain trust relationships with
+ Windows 2008.
Joining:
o New NetApi library for domain join related queries (libnetapi.so)
Users & Groups:
o New ldb backend for local group mapping tables
o Raised level of security defaults for authentication operations.
+ o New NetApi library for user account related queries.
Documentation:
* Fix build of bin/net on Solaris.
* Reformat the parm table of loadparm to use named initializers.
* Fix %I macro expansion for IPv4 mapped IPv6 addresses.
+ * Convert registry.tdb to use dbwrap and fix memleaks.
+ * Several make test fixes and improvements.
+ * Rename libnet_conf to libsmbconf and introduce backend abstraction layer.
+ * Add text backend to libsmbconf, based on params.c.
+ * Fix handling of includes in registry libsmbconf backend.
+ * Fix net conf import by reading from text backend.
+ * Add a "net registry" command to locally access the registry.
+ * Add testsuites for libsmbconf and "net registry".
+ * Fix Coverity IDs 517, 536, 545.
o Jeremy Allison <jra@samba.org>
* Fix build targets for bin/net.
* Fix _dssetup_DsRoleGetPrimaryDomainInformation().
* Fix the build of cifs.spnego.
+ * Migration of the SRVSVC client and server DCE/RPC code to IDL
+ based structures and autogenerated code
+ * Fix Kerberos session setup with Vista SP1 (ignore PAC type 12)
+ * Fix support for vampire of lockout policies and
+ for storing dialin/terminal server settings.
+ * Fix remote join/unjoin server implementation.
+ * BUG 5328: Fix netlogon credential chain with Windows 2008
+ (this also fixes joining Windows 2008 with rpc methods).
+ * Various fixes for establishing and validating interdomain trust
+ relationships with Windows 2008.
+ * Use IDL for storing domain controller information in dsgetdcname.
+ * Re-arranged internal structure of libnetapi.
+ * Add support for domain\dcname syntax in libnetjoin.
+ * Add support for browsing/joining OUs in netdomjoin-gui.
+ * Add various new calls to libnetapi.
o Volker Lendecke <vl@samba.org>
* Change default bufsize to 512k.
* Fix Coverity IDs 473, 481, 506, 507, 525, 526, 527, 528, 529, 530, 537,
538, 547, 548, 551, 552, 553, 554, 555, 557, 558, 559, 563, 564, 567.
+ ... and half a ton more
* Fix some warnings in the tsmsm module.
* Fix warnings.
* BUG 4901: Fix "ldap passwd sync = only".
* BUG 5307: Fix notify changes.
* BUG 5317: Fix debug output in domain_client_validate.
* BUG 5338: Fix format string issue in rpcclient.
+ * Convert account_pol.tdb and share_info.tdb to dbwrap
+ * Protect group_mapping.tdb ops with transactions
+ * BUG 5366: "passwd program" should work on Solaris 10 again now
+ * A level 25 setuserinfo does change the pwdlastset, fixes XP joins
+ * BUG 5350: A Samba DC trusting NT4 should do an anon session setup
+ * BUG 5375: Fix a segfault with "security=share" and [in]valid users
+ * Fix printing from DOS clients -- introduced by inbuf/outbuf rewrite
+ * Fix wbinfo -a trusted\\user%password on a Samba DC with trusts
+ * BUG 5341: Fix async smbclient get command on Solaris
+ * Make winbind use NetSamLogonEx when possible
+ * Merge fixes in the 3-0-ctdb cluster code
+ * Fix a segfault in snprintf replacement code
o Derrell Lipman <derrell@samba.org>
* Fix use of AuthDataWithContext capability.
+o Stefan Metzmacher <metze@samba.org>
+ * Add dbwrap_tdb2 backend, useful for cluster setups.
+ * Add more functions to libwbclient:
+ - wbcGetGroups()
+ - wbcInterfaceDetails()
+ - wbcListUsers()
+ - wbcListGroups()
+ - wbcLookupUserSids()
+ - wbcSetUidMapping()
+ - wbcSetGidMapping()
+ - wbcSetUidHwm()
+ - wbcSetGidHwm()
+ * Let wbinfo use libwbclient where possible.
+ * Let net use only libwbclient to access winbindd.
+ * Make socket wrapper pcap support more portable.
+ * Some libreplace backports from v4-0-test.
+ * Store the write time in the locking.tdb,
+ so that smbd passes the BASE-DELAYWRITE test.
+ * Run RAW-SEARCH and BASE-DELAYWRITE by 'make test'.
+
+
o Karolin Seeger <kseeger@samba.org>
* Fix usage message for "net idmap dump".