-This file contains a history of changes since the first Samba 4 Technology
-Preview. For a general introduction to Samba 4, see the README file in this
-directory. The NEWS file contains a list of differences between
-Samba 3 and Samba 4.
+What's new in Samba 4 alpha3
+============================
-========================================
-Changes in Samba4-TP2
-Release date: 22 March 2006
-========================================
+Samba 4 is the ambitious next version of the Samba suite that is being
+developed in parallel to the stable 3.0 series. The main emphasis in
+this branch is support for the Active Directory logon protocols used
+by Windows 2000 and above.
+
+Samba 4 is currently not yet in a state where it is usable in
+production environments. Note the WARNINGS below, and the STATUS file,
+which aims to document what should and should not work.
- * Make ldb async internally (idra)
+Samba4 alpha3 follows on from our second alpha release (made in
+December), the first alpha release (made in September), and the
+Technology Preview series we have offered for some time now.
- * Use HDB-LDB as the keytab (abartlet)
+WARNINGS
+========
- * Call the wins hook script again (metze)
+Samba4 alpha3 is not a final Samba release. That is more a reference
+to Samba4's lack of the features we expect you will need than a
+statement of code quality, but clearly it hasn't seen a broad
+deployment yet. If you were to upgrade Samba3 (or indeed Windows) to
+Samba4, you would find many things work, but that other key features
+you may have relied on simply are not there yet.
- * Make sure no more than 25 records are added in the WINS database (metze)
-
- * Documentation updates (jelmer)
+For example, while Samba 3.0 is an excellent member of a Active
+Directory domain, Samba4 is happier as a domain controller: (This is
+where we have done most of the research and development).
- * Fix termination issue in winreg server (metze)
+While Samba4 is subjected to an awesome battery of tests on an
+automated basis, and we have found Samba4 to be very stable in it's
+behaviour, we have to recommend against upgrading production servers
+from Samba 3 to Samba 4 at this stage. If you are upgrading an
+experimental server, or looking to develop and test Samba, you should
+backup all configuration and data.
- * AES fix for Samba 4 <-> Samba4 (abartlet)
+NEW FEATURES
+============
- * Better conformance to FHS (abartlet, jelmer)
+Samba4 supports the server-side of the Active Directory logon environment
+used by Windows 2000 and later, so we can do full domain join
+and domain logon operations with these clients.
- * Improve internal API and code quality in smbclient (jelmer)
+Our Domain Controller (DC) implementation includes our own built-in
+LDAP server and Kerberos Key Distribution Center (KDC) as well as the
+Samba3-like logon services provided over CIFS. We correctly generate
+the infamous Kerberos PAC, and include it with the Kerberos tickets we
+issue.
- * Add testsuite for smbclient (jelmer)
+The new VFS features in Samba 4 adapts the filesystem on the server to
+match the Windows client semantics, allowing Samba 4 to better match
+windows behaviour and application expectations. This includes file
+annotation information (in streams) and NT ACLs in particular. The
+VFS is backed with an extensive automated test suite.
- * Remove support for password as an optional second parameter in
- smbclient (jelmer)
+A new scripting interface has been added to Samba 4, allowing
+Python programs to interface to Samba's internals.
- * Various warning fixes (metze)
+The Samba 4 architecture is based around an LDAP-like database that
+can use a range of modular backends. One of the backends supports
+standards compliant LDAP servers (including OpenLDAP), and we are
+working on modules to map between AD-like behaviours and this backend.
+We are aiming for Samba 4 to be powerful frontend to large
+directories.
- * Several clarifications of comments (abartlet)
+CHANGES SINCE Alpha2
+=====================
- * Remove use of pstring in some places (jelmer)
+In the time since Samba4 Alpha2 was released in December 2007, Samba has
+continued to evolve, but you may particularly notice these areas:
- * Re-add the global -k option to enable kerberos (abartlet)
+ Python Bindings: Bindings for Python are now in place, and used for
+ Samba's provision script, slowly displacing EJS as the embedded
+ scripting language. With its increased use, Python is no longer
+ optional, and configure will generate an error if it cannot locate
+ an appropriate Python installation.
- * Various memory allocation fixes (abartlet)
+ SWAT Disabled: Due to a lack of developer time and without a
+ long-term web developer to maintain it, the SWAT web UI has been
+ disabled.
- * Add new cifsdd client (jpeach)
+ Oplock support: Samba4's file server now supports oplocks
- * Add tests for even more insane delete-on-close semantics (jra, tridge)
-
- * Initial work on BASE-DELETE test passing (tridge)
+ GNU Make: To try and simplfy our build system, we rely on GNU Make
+ to avoid autogenerating a massive single makefile.
- * Optimizations in tdb (tridge)
+ Account Expiry: Samba4 now better handles installations over 30 days
+ old (thanks to our long-suffering testers for keeping installations
+ around that long!)
- * Improvements to ldb documentation (idra, Brad Hards)
+ Registry: Samba4 registry interoperability has been improved in
+ both the client utilities and in the registry service exposed by
+ the Samba4 server itself.
- * Check attribute names to obey rfc2251 (idra)
+ Administrative Tools: Many enhancements have been made that allow
+ better integration with Windows administrative tools, especially
+ Active Directory Users and Computers.
- * Allow WINS replication with NT4SP6A (metze)
+These are just some of the highlights of the work done in the past few
+months. More details can be found in our GIT history.
- * Add ManageDSAIT control (Pete Rowley, idra)
- * Add tests for LDB controls (idra)
+CHANGES
+=======
- * Various LDB crash fixes (idra)
+Those familiar with Samba 3 can find a list of user-visible changes
+since that release series in the NEWS file.
- * Initial work on vlv LDB control (idra)
+KNOWN ISSUES
+============
- * Add -p option to smbtorture (jpeach)
+- Domain member support is in it's infancy, and is not comparable to
+ the support found in Samba3.
- * Several improvements to the SMB URL and UNC parsing (jpeach)
+- There is no printing support in the current release.
- * Make DCE/RPC connect functions work async (rafal)
+- The Samba4 port of the CTDB clustering support is not yet complete
- * Fix invalid steal on supportedControls (closes: #3525) (abartlet)
+- Clock Synchronisation is critical. Many 'wrong password' errors are
+ actually due to Kerberos objecting to a clock skew between client
+ and server.
- * Start parsing saslauthd requests (metze)
- * Split the NBT-WINSREPLICATION test into multiple tests (metze)
+RUNNING Samba4
+==============
- * Add new ACB-bits as seen in acct_flags in the PAC info3 (gd)
+A short guide to setting up Samba 4 can be found in the howto.txt file
+in root of the tarball.
- * Move header files out of include/ (jelmer)
-
- * Create separate library for generic utility functions (jelmer)
+DEVELOPMENT and FEEDBACK
+========================
+Bugs can be filed at https://bugzilla.samba.org/ but please be aware
+that many features are simply not expected to work at this stage.
- * Add highestCommittedUSN, uSNChanged and uSNCreated support to LDB (tridge)
+The Samba Wiki at http://wiki.samba.org should detail some of these
+development plans.
- * Allow more control over the the winbindd socket location (abartlet)
+Development and general discussion about Samba 4 happens mainly on
+the #samba-technical IRC channel (on irc.freenode.net) and
+the samba-technical mailing list (see http://lists.samba.org/ for
+details).
- * Allow messaging without a server messaging context (abartlet)
-
- * Make GSSAPI SASL mech work (abartlet)
-
- * Write out Samba4 version when provisioning (idra)
-
- * Allow servers to bind to non-broadcast interfaces (tridge, abartlet)
-
- * Initialize some ASN.1 elements that are optional (metze)
-
- * Various improvements to RPC-SCHANNEL (abartlet)
-
- * Make Samba4 pass some of the newer schannel tests (abartlet)
-
- * Better handling of connections without SPNEGO (abartlet)
-
- * Generate seperate headers for RPC client functions (jelmer)
-
- * Improve NTLMSSP tests (abartlet, vl)
-
- * Support any size pointers in pidl (tridge)
-
- * Large overhaul of the opendb code to pass BASE-DELETE (tridge)
-
- * Use doxygen for documenting lib/util and lib/registry (jelmer)
-
- * Add registration mechanism for modules and backends in ldb (idra, jelmer)
-
- * Support building shared libraries in the build system (metze, jelmer)
-
- * Install headers in a sane location (jelmer)
-
- * Fix BASE-NEGNOWAIT (tridge)
-
- * Add prefixes to most of the SMB-related functions (metze)
-
- * Get rid of proto.h (jelmer)
-
- * Reduce number of headers included in includes.h (jelmer)
-
- * Support header dependencies (jelmer)
-
- * Add RAW-NOTIFY (tridge, metze)
-
- * Fix 'your password has expired' on every login (abartlet)
-
- * Improvements to RPC-SAMSYNC (abartlet)
-
- * Work on supporting change notify (tridge, metze)
-
- * Reopen log files after SIGHUP (metze)
-
- * Add BUGS.txt (#3523) (jelmer)
-
- * Add summary to configure (#3442) (metze, jelmer)
-
- * Swig fixes (idra)
-
- * Improve NBT-WINSREPLICATION-OWNED test (metze)
-
- * Fix a lot of compiler warnings (metze)
-
- * Several code improvements found by static code checker (tridge, metze)
-
- * Force correct alignment when in ASCII mode (#2921) (tridge)
-
- * Fix coverity bug #127 (vl)
-
- * Add support for changing process titles (metze)
-
- * Support raw NTLMSSP (abartlet)
-
- * Fix debug levels in several places (abartlet)
-
- * Work to unify the ntvfs structures for smb and smb2 (metze, tridge)
-
- * Initial work on asynchronous libnet (rafal)
-
- * Improvements to the wide character set functions (tridge)
-
- * Several heimdal build improvements (abartlet, jelmer)
-
- * A lot of small cleanups and typo fixes
- (metze, abartlet, idra, jpeach, tridge, jelmer)
git.samba.org / jelmer / samba4-debian.git / blobdiff