mirror of
https://github.com/samba-team/samba.git
synced 2025-02-02 09:47:23 +03:00
WHATSNEW.txt: Preparing for 1.9.18alpha2 release.
smb.conf.5: Added 'bind interfaces only' parameter. version.h: Updated to 1.9.18alpha2. Jeremy (jallison@whistle.com) (This used to be commit 7221e19d5ef4a242ce29d3148957c3e481456934)
This commit is contained in:
Jeremy Allison
parent
79b314447b
commit
7985bcfe0c
209
WHATSNEW.txt
209
WHATSNEW.txt
@ -1,95 +1,140 @@
|
||||
WHATS NEW IN 1.9.17 - August 25th 1997
|
||||
======================================
|
||||
WHATS NEW IN 1.9.18alpha2 Oct 21st 1997
|
||||
=======================================
|
||||
|
||||
New stable release of Samba.
|
||||
----------------------------
|
||||
This is NOT a production release of Samba code.
|
||||
For production servers please run Samba 1.9.17p4
|
||||
or later releases in the 1.9.17 series.
|
||||
|
||||
This is the new stable release of Samba, superceding
|
||||
the last stable release 1.9.16p11. All users are
|
||||
encouraged to upgrade to this new release as there have
|
||||
been many improvements to the code since that time.
|
||||
See the Frequently Asked Questions (under docs/faq) for
|
||||
an explanation of how the version numbering scheme works,
|
||||
distinguishing between stable and development releases.
|
||||
This release contains some experimental features and
|
||||
changes and is being made available so people can
|
||||
test and provide feedback and patches for ongoing
|
||||
Samba development.
|
||||
|
||||
Changes since 1.9.16p11.
|
||||
------------------------
|
||||
Please note that only the Domain controler code
|
||||
is truly experimental. The other changes have
|
||||
been extensively tested and are of the same
|
||||
quality as normal Samba alpha releases. The
|
||||
Domain controler code is disabled in the Makefile
|
||||
by default and is being made available to Samba
|
||||
programmers in the interests of advancing a
|
||||
public implementation of this important protocol.
|
||||
|
||||
Improved browsing support.
|
||||
--------------------------
|
||||
This release contains three major changes to the
|
||||
1.9.17 series and much re-written code.
|
||||
|
||||
Samba now should support propagation of browse lists
|
||||
across subnets correctly. Look in the file docs/BROWSING.txt
|
||||
as it has been largely re-written to explain how to do this.
|
||||
The main changes are :
|
||||
|
||||
*IMPORTANT* All Samba servers acting as local/domain master
|
||||
browsers must be running 1.9.17 (or later).
|
||||
1). Oplock support now operational.
|
||||
-----------------------------------
|
||||
|
||||
Thanks to Silicon Graphics for allowing us to test the new
|
||||
code on their corporate network.
|
||||
Samba now supports 'exclusive' and 'batch' oplocks.
|
||||
These are an advanced networked file system feature
|
||||
that allows clients to obtain a exclusive use of a
|
||||
file. This allows a client to cache any changes it
|
||||
makes locally, and greatly improves performance.
|
||||
|
||||
Windows NT has this feature and prior to this
|
||||
release this was one of the reasons Windows NT
|
||||
could be faster in some situations.
|
||||
|
||||
The oplock code in Samba has been extensively
|
||||
tested and is believed to be completely stable.
|
||||
|
||||
Please report any problems to the samba-bugs alias.
|
||||
|
||||
2). Experimental Domain controler code.
|
||||
---------------------------------------
|
||||
|
||||
Samba now contains a *VERY* experimental
|
||||
implementation of part of the Windows NT
|
||||
4.x Domain Controler specification, as
|
||||
published by Paul Ashton (now a Samba Team
|
||||
member). This code is not enabled in the
|
||||
Makefile by default, and to work on this
|
||||
code you must read the file :
|
||||
|
||||
docs/NTDOMAIN.txt
|
||||
|
||||
Please note that as this code is not complete.
|
||||
It is being made available as part of this
|
||||
release to allow interested parties to contribute
|
||||
and help the Samba Team in implementing this
|
||||
important feature.
|
||||
|
||||
Please do not expect to be able to replace your
|
||||
NT Domain Controlers with Samba until this code
|
||||
is finished, tested and an announcement is made.
|
||||
|
||||
At present the Domain Controler code is for
|
||||
programmers and people interested in Microsoft
|
||||
protocols only.
|
||||
|
||||
3). New Internationalization support.
|
||||
-------------------------------------
|
||||
|
||||
With this release Samba no longer needs to be
|
||||
separately compiled for Japanese (Kanji) support,
|
||||
the same binary will serve both Kanji and non-Kanji
|
||||
clients.
|
||||
|
||||
A new method of dynamically loading client code pages
|
||||
has been added to allow the case insensitivity to
|
||||
be done dependent on the code page of the client.
|
||||
|
||||
Note that Samba still will only handle one client
|
||||
code page at a time. This will be fixed when
|
||||
Samba is fully UNICODE enabled.
|
||||
|
||||
Please see the new man page for make_smbcodepage
|
||||
for details on adding additional client code page
|
||||
support.
|
||||
|
||||
Changed code.
|
||||
-------------
|
||||
|
||||
Samba no longer needs the libdes library to support
|
||||
encrypted passwords. Samba now contains a restricted
|
||||
version of DES that can only be used for authentication
|
||||
purposes (to comply with the USA export encryption
|
||||
regulations and to allow USA Mirror sites to carry
|
||||
Samba source code). The 'encrypt passwords' parameter
|
||||
may now be used without recompiling.
|
||||
|
||||
Much of the internals of Samba has been re-structured
|
||||
to support the oplock and Domain controler changes.
|
||||
|
||||
New parameters in smb.conf.
|
||||
---------------------------
|
||||
|
||||
New Global parameters.
|
||||
----------------------
|
||||
|
||||
Documented in the smb.con man pages :
|
||||
|
||||
"bind interfaces only"
|
||||
"username level"
|
||||
|
||||
Not yet documented in the smb.conf man page, please
|
||||
read docs/NTDOMAIN.txt for information on the next
|
||||
parameters.
|
||||
|
||||
"domain sid"
|
||||
"domain groups"
|
||||
"logon drive"
|
||||
"logon home"
|
||||
|
||||
New Share level parameters.
|
||||
---------------------------
|
||||
|
||||
Documented in the smb.con man pages :
|
||||
|
||||
"delete veto files"
|
||||
"oplocks"
|
||||
|
||||
|
||||
Improved share mode handling
|
||||
----------------------------
|
||||
Reporting bugs.
|
||||
---------------
|
||||
|
||||
The handling of share modes has been completely rewritten.
|
||||
Samba can now run agressive PC Benchmarks (Ziff-Davis
|
||||
NetBench) correctly with many hundreds of concurrent PC's.
|
||||
The confidence level on share mode handling in Samba
|
||||
is now much higher than it was previously. PC database
|
||||
packages should be safe when run against a Samba share.
|
||||
Thanks to Silicon Graphics for testing this code for us.
|
||||
|
||||
If at all possible compile Samba to use the new share
|
||||
mode handling with shared memory (set the flags
|
||||
FAST_SHARE_MODES in the Makefile). This will be *much* faster
|
||||
than old file-based share modes. FAST_SHARE_MODES have
|
||||
been turned on by default on the following platforms in
|
||||
the Makefile :
|
||||
|
||||
Linux
|
||||
Solaris
|
||||
BSDI
|
||||
IRIX 5.x.x
|
||||
FreeBSD
|
||||
|
||||
Roving profile support.
|
||||
-----------------------
|
||||
|
||||
Roving profiles are believed to work correctly
|
||||
with Windows NT 4.x and Windows 95. Domain logons
|
||||
are fully implemented *for Windows 95 machines only*.
|
||||
|
||||
|
||||
Updated documentation
|
||||
---------------------
|
||||
All options are now documented in the smb.conf man page
|
||||
we believe. Much work has been done by Samba Team members
|
||||
to improve the quality and quantity of the Samba documentation.
|
||||
|
||||
A draft new structure for documentation is being worked on: see
|
||||
docs/faq/Samba-meta-FAQ for details. This will soon be a master
|
||||
reference to all Samba documentation.
|
||||
|
||||
Many bugfixes and improvements
|
||||
------------------------------
|
||||
From around the 'net around the world. Many
|
||||
thanks to everyone who contributed.
|
||||
|
||||
Commercial thanks.
|
||||
------------------
|
||||
|
||||
Thanks to Cisco for the new netbios alias code support.
|
||||
Thanks to Silicon Graphics for the help with the cross
|
||||
subnet browsing and NetBench code.
|
||||
Thanks to Whistle for funding one of the Samba Team
|
||||
members.
|
||||
|
||||
Reporting bugs
|
||||
--------------
|
||||
|
||||
The Samba Team believes that this is a stable
|
||||
production release, but all software has bugs.
|
||||
If you have problems, or think you have found a
|
||||
bug please email a report to :
|
||||
|
||||
|
||||
@ -331,6 +331,8 @@ announce version
|
||||
|
||||
auto services
|
||||
|
||||
bind interfaces only
|
||||
|
||||
browse list
|
||||
|
||||
character set
|
||||
@ -375,6 +377,8 @@ hosts equiv
|
||||
|
||||
include
|
||||
|
||||
interfaces
|
||||
|
||||
keepalive
|
||||
|
||||
lock dir
|
||||
@ -816,6 +820,40 @@ ALL attempts to connect to the service will fail. Such failures are logged.
|
||||
|
||||
.B Example:
|
||||
available = no
|
||||
|
||||
.SS bind interfaces only (G)
|
||||
This global parameter (new for 1.9.18) allows the Samba admin to limit
|
||||
what interfaces on a machine will serve smb requests. If affects file service
|
||||
(smbd) and name service (nmbd) in slightly different ways.
|
||||
|
||||
For name service it causes nmbd to bind to ports 137 and 138 on
|
||||
the interfaces listed in the 'interfaces' parameter. nmbd also binds
|
||||
to the 'all addresses' interface (0.0.0.0) on ports 137 and 138
|
||||
for the purposes of reading broadcast messages. If this option is
|
||||
not set then nmbd will service name requests on all of these
|
||||
sockets. If "bind interfaces only" is set then nmbd will check
|
||||
the source address of any packets coming in on the broadcast
|
||||
sockets and discard any that don't match the broadcast addresses
|
||||
of the interfaces in the 'interfaces' parameter list. As unicast
|
||||
packets are received on the other sockets it allows nmbd to
|
||||
refuse to serve names to machines that send packets that arrive
|
||||
through any interfaces not listed in the 'interfaces' list.
|
||||
IP Source address spoofing does defeat this simple check, however
|
||||
so it must not be used seriously as a security feature for nmbd.
|
||||
|
||||
For file service it causes smbd to bind only to the interface
|
||||
list given in the 'interfaces' parameter. This restricts the
|
||||
networks that smbd will serve to packets coming in those interfaces.
|
||||
Note that you should not use this parameter for machines that
|
||||
are serving ppp or other intermittant or non-broadcast network
|
||||
interfaces as it will not cope with non-permanent interfaces.
|
||||
|
||||
.B Default:
|
||||
bind interfaces only = False
|
||||
|
||||
.B Example:
|
||||
bind interfaces only = True
|
||||
|
||||
.SS browseable (S)
|
||||
This controls whether this share is seen in the list of available
|
||||
shares in a net view and in the browse list.
|
||||
@ -3673,7 +3711,7 @@ administrator easy, but the various combinations of default attributes can be
|
||||
tricky. Take extreme care when designing these sections. In particular,
|
||||
ensure that the permissions on spool directories are correct.
|
||||
.SH VERSION
|
||||
This man page is (mostly) correct for version 1.9.16 of the Samba suite, plus some
|
||||
This man page is (mostly) correct for version 1.9.18 of the Samba suite, plus some
|
||||
of the recent patches to it. These notes will necessarily lag behind
|
||||
development of the software, so it is possible that your version of
|
||||
the server has extensions or parameter semantics that differ from or are not
|
||||
|
||||
@ -19,12 +19,9 @@ SMB domains based on shared authentication database schemes other than the
|
||||
Windows NT SAM.
|
||||
|
||||
Microsoft Windows NT Domain Control is an extremely complex protocol.
|
||||
We have received countless requests to implement Domain Control in Samba
|
||||
and have seriously investigated the potential to support this. The Samba
|
||||
Team have now concluded that since Domain Control is a completely
|
||||
undocumented protocol we ought NOT to implement our best guess of this
|
||||
technology. It is a Microsoft business policy NOT to release the information
|
||||
necessary to enable this to be implemented in a dependable manner.
|
||||
We have received countless requests to implement Domain Control in Samba.
|
||||
The 1.9.18 release of Samba contains experimental code to implement
|
||||
this. Please read the file docs/NTDOMAIN.txt for more information on this.
|
||||
============================================================================
|
||||
|
||||
Windows NT Server can be installed as either a plain file and print server
|
||||
|
||||
@ -1 +1 @@
|
||||
#define VERSION "1.9.18alpha1"
|
||||
#define VERSION "1.9.18alpha2"
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user