samba-mirror/WHATSNEW.txt at 233b074f490b3b01f3a462284aa8117536df0082

mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00

Andrew Tridgell 453a822a76 first pass at updating head branch to be to be the same as the SAMBA_2_0 branch

0001-01-01 00:00:00 +00:00

414 lines

15 KiB

Plaintext

Raw Blame History

               WHATS NEW IN Samba 2.0.4b
               =========================
 This is the latest stable release of Samba. This is the
 version that all production Samba servers should be running
 for all current bug-fixes.
 New/Changed parameters in 2.0.4
 -------------------------------
 There are 5 new parameters and one modified parameter in
 the smb.conf file.
 allow trusted domains
 restrict anonymous
 mangle locks
 oplock break wait time
 oplock contention limit
 The new parameters are :
 allow trusted domains
 ---------------------
 This option is used in "security=domain" settings and allows
 the Samba admin to restrict access to users within the domain
 the the Samba server is in.
 restrict anonymous
 ------------------
 This parameter allows the Samba admin to cause Samba to
 refuse access to anonymous users. Use of this parameter
 is only recommened for homogenous NT client environments.
 mangle locks
 ------------
 This parameter was added to get around a bug in Windows NT
 when dealing with Samba running on 32-bit systems (such
 as Linux x86). This bug causes NT to send 64 bit locking
 requests to 32-bit systems even though Samba correctly
 tells the NT client not to do so. This option causes Samba
 to map the lock requests from 64 bits to 32 bits on these
 systems.
 oplock break wait time
 ----------------------
 This tuning parameter, added to help with clients that don't
 respond to oplock break requests, causes Samba to deley for
 this number of milliseconds before sending an oplock break
 request to a client that caused the break to be sent. The
 default is 10ms. This is an advanced tuning parameter and
 should not be changed lightly.
 oplock contention limit
 -----------------------
 This tuning parameter causes Samba not to grant oplocks
 when an smbd daemon notices that there have been this
 many concurrent requests for an oplock on a file. This
 prevents the "baton passing" oplock problem where many
 clients accessing one file pass the oplock between themselves
 like a baton. The default is 2. This is an advanced tuning
 parameter and should not be changed lightly.
 The modified parameter is :
 nt acl support
 --------------
 This is a global parameter that defaulted to False in
 the previous release (2.0.3) and now defaults to True
 as the RPC code has been added to Samba to allow it to
 map UNIX permissions to NT ACLs.
 All of these new parameters and changes are documented in the
 smb.conf man pages and html pages.
 Updated and New documentation
 -----------------------------
 A new document describing the manipulation of UNIX permissions
 via the Windows NT security dialogs and their interaction with
 Samba 2.0.4 is provided as :
 docs/textdocs/NT_Security.txt
 docs/htmldocs/NT_Security.html
 Changes in 2.0.4b
 -----------------
 A bug with MS-Word 97 saving files with zero UNIX permissions
 was fixed. Even though a workaround is available (set force
 create mode = 644 on the share) Word is such an important
 application that a point fix was neccessary.
 Changes in 2.0.4a
 -----------------
 The text and html versions of NT_Security were missing from
 the shipping tarball. Also a compile bug for platforms that
 don't have usleep was fixed.
 Bugfixes added since 2.0.3
 --------------------------
 ). Fix for 8 character password problem when using HPUX and
 plaintext passwords.
 ). --with-pam option added to ./configure.
 ). Client fixes for memory leak and display of 64 bit values.
 ). Fixes for -E and -s option with smbclient.
 ). smbclient now allows -L //server or -L \\server
 ). smbtar fix for display of 64 bit values.
 ). Endian independence added to DCE/RPC code.
 ). DCE/RPC marshalling/unmarshalling code re-written to provide
 overflow reporting and sign and seal support.
 ). Bind NAK reply packet added to DCE/RPC code, used to correctly
 refuse bind requests (prevents NT system event log messages).
 ). Mapping of UNIX permissions into NT ACL's for get and set
 added.
 ). DCE/RPC enumeration of numbers of shares made dynamic.
 Samba now has no limit on the number of exported shares seen.
 ). Fix to speed up random number seed generation on /dev/urandom
 being unavailable.
 ). Several memory fixes added by running Purify on the code.
 ). Read from client error messages improved.
 ). Fixed endianness used in UNICODE strings.
 ). Cope with ERRORmoredata in an RPC pipe client call.
 ). Check for malformed responses in nmbd register name.
 ). NT Encrypted password changing from the NT password dialog box
 now fully implmented.
 ). Mangle 64-bit lock ranges into 32-bits (NT bug!) on a 32-bit
 Samba platform.
 ). Allow file to be pseudo-openend in order to read security only.
 ). Improve filename mangling to reduce chance of collisions.
 ). Added code to prevent granting of oplocks when a file is under
 contention.
 ). Added tunable wait time before sending an oplock break request
 to a client if the client caused the break request. Helps with clients
 not responding to oplock breaks.
 ). Always respond negatively to queued local oplock break messages
 before shutdown. This can prevent "freezes" on an oplock error.
 ). Allow admin to restrict logons to correct domain when in domain
 level security.
 ). Added "restrict anonymous" patch from Andy (thwartedefforts@wonky.org)
 to prevent parameter substitution problems with anonymous connections.
 ). Fix SMBseek where seeking to a negative number sets the offset
 to zero.
 ). Fixed problem with mode getting corrupted in trans2 request
 (setting to zero means please ignore it).
 ). Correctly become the authenticated user on an authenticated
 DCE/RPC pipe request.
 ). Correctly reset debug level in nmbd if someone set it on the
 command line.
 ). Added more checking into testparm
 ). NetBench simulator added to smbtorture by Andrew.
 ). Fixed NIS+ option compile (was broken in 2.0.3).
 ). Recursive smbclient directory listing fix. Patch from E. Jay Berkenbilt
 (ejb@ql.org)
 Bugfixes added since 2.0.2
 --------------------------
 ). --with-ssl configure now include ssl include directory. Fix
 from Richard Sharpe.
 ). Patch for configure for glibc2.1 support (large files etc.).
 ). Several bugfixes for smbclient tar mode from Bob Boehmer
 (boehmer@worldnet.att.net) to fix smbclient aborting problems
 when restoring tar files.
 ). Some automount fixes for smbmount.
 ). Attempt to fix the AIX 4.1.x/3.x problems where smbd runs as
 root. As no-one has given us root access to such a server this
 cannot be tested fully, but should work.
 ). Crash bug fix in debug code where *real* uid rather than
 *effective* uid was being checked before attempting to rotate
 log files. This fix should help a *lot* of people who were
 reporting smbd aborting in the middle of a copy operation.
 ). SIGALRM bugfix to ensure infinate file locks time out.
 ). New code to implement NT ACL reporting for cacls.exe program.
 ). UDP loopback socket rebind fix for Solaris.
 ). Ensure all UNICODE strings are correctly in little-endian
 format.
 ). smbpasswd file locking fix.
 ). Fixes for strncpy problems with glibc2.1.
 ). Ensure smbd correctly reports major and minor version number
 and server type when queried via NT rpc calls.
 ). Bugfix for short mangled names not being pulled off the
 mangled stack correctly.
 ). Fix for mapping of rwx bits being incorrectly overwritten
 when doing ATTRIB.EXE
 ). Fix for returning multiple PDU packets in NT rpc code. Should
 allow multiple shares to be returned correctly).
 ). Improved mapping of NT open access requests into UNIX open
 modes.
 ). Fix for copying files from an NTFS volume that contain
 multiple data forks. Added 'magic' error code NT needs.
 ). Fixed crash bug when primary NT authentication server
 is down, rolls over to secondaries correctly now.
 ). Fixed timeout processing to be timer based. Now will
 always occur even if smbd is under load.
 ). Fixed signed/unsigned problem in quotas code.
 ). Fixed bug where setting the password of a completely fresh
 user would end up setting the account disabled flag.
 ). Improved user logon messages to help admins having
 trouble with user authentication.
 Bugfixes added since 2.0.1
 --------------------------
 Note that due to a critical signal handling bug in 2.0.1,
 this release has been removed and replaced immediately with
 .0.2. The Samba Team would like to apologise for any problem
 this may have caused.
 ). Fixed smbd looping on SIGCLD problem. This was
     caused by a missing break statement in a critical
     piece of code.
 Bugfixes added since 2.0.0
 --------------------------
 ). Autoconf changes for gcc2.7.x and Solaris 2.5/2.6
 ). Autoconf changes to help HPUX configure correctly.
 ). Autoconf changes to allow lock directory to be set.
 ). Client fix to allow port to be set.
 ). clitar fix to send debug messages to stderr.
 ). smbmount race condition fix.
 ). Fix for bug where trying to browse large numbers of shares
     generated an error from an NT client.
 ). Wrapper for setgroups for SunOS 4.x
 ). Fix for directory deleting failing from multiuser NT.
 ). Fix for crash bug if bitmap was full.
 ). Fix for Linux genrand where /dev/random could cause
      clients to timeout on connect if the entropy pool was
      empty.
 ). The default PASSWD_CHAT may now be overridden in local.h
 ). HPUX printing fixes for default programs.
 ). Reverted (erroneous) code in MACHINE.SID generation that
      was setting the sid to 0x21 - should be *decimal* 21.
 ). Fix for printing to remote machine under SVR4.
 ). Fix for chgpasswd wait being interrupted with EINTR.
 ). Fix for disk free routine. NT and Win98 now correctly
      show greater than 2GB disks.
 ). Fix for crash bug in stat cache statistics printing.
 ). Fix for filenames ending in .~xx.
 ). Fix for access check code wait being interrupted with EINTR.
 ). Fix for password changes from "invalid password" to a valid
      one setting the account disabled bit.
 ). Fix for smbd crash bug in SMBreadraw cache prime code.
 ). Fix for overly zealous lock range overflow reporting.
 ). Fix for large disk disk free reporting (NT SMB code).
 ). Fix for NT failing to truncate files correctly.
 ). Fix for smbd crash bug with SMBcancel calls.
 ). Additional -T flag to nmblookup to do reverse DNS on addresses.
 ). SWAT fix to start/stop smbd/nmbd correctly.
 Major changes in Samba 2.0
 --------------------------
 This is a MAJOR new release of Samba, the UNIX based SMB/CIFS file
 and print server for Windows systems.
 There have been many changes in Samba since the last major release,
 .9.18.  These have mainly been in the areas of performance and
 SMB protocol correctness.  In addition, a Web based GUI interface
 for configuring Samba has been added.
 In addition, Samba has been re-written to help portability to
 other POSIX-based systems, based on the GNU autoconf tool.
 There are many major changes in Samba for version 2.0.  Here are
 some of them:
 =====================================================================
 ). Speed
 ---------
 Samba has been benchmarked on high-end UNIX hardware as out-performing
 all other SMB/CIFS servers using the Ziff-Davis NetBench benchmark.
 Many changes to the code to optimise high-end performance have been made.
 ). Correctness
 ---------------
 Samba now supports the Windows NT specific SMB requests.  This
 means that on platforms that are capable Samba now presents a
 bit view of the filesystem to Windows NT clients and is
 capable of handling very large files.
 ). Portability
 ---------------
 Samba is now self-configuring using GNU autoconf, removing
 the need for people installing Samba to have to hand configure
 Makefiles, as was needed in previous versions.
 You now configure Samba by running "./configure" then "make".  See
 docs/textdocs/UNIX_INSTALL.txt for details.
 ). Web based GUI configuration
 -------------------------------
 Samba now comes with SWAT, a web based GUI config system.  See
 the swat man page for details on how to set it up.
 ). Cross protocol data integrity
 ---------------------------------
 An open function interface has been defined to allow
 "opportunistic locks" (oplocks for short) granted by Samba
 to be seen by other UNIX processes.  This allows complete
 cross protocol (NFS and SMB) data integrety using Samba
 with platforms that support this feature.
 ). Domain client capability
 ----------------------------
 Samba is now capable of using a Windows NT PDC for user
 authentication in exactly the same way that a Windows NT
 workstation does, i.e. it can be a member of a Domain.  See
 docs/textdocs/DOMAIN_MEMBER.txt for details.
 ). Documentation Updates
 -------------------------
 All the reference parts of the Samba documentation (the
 manual pages) have been updated and converted to a document
 format that allows automatic generation of HTML, SGML, and
 text formats.  These documents now ship as standard in HTML
 and manpage format.
 =====================================================================
 NOTE - Some important option defaults changed
 ---------------------------------------------
 Several parameters have changed their default values.  The most
 important of these is that the default security mode is now user
 level security rather than share level security.
 This (incompatible) change was made to ease new Samba installs
 as user level security is easier to use for Windows 95/98 and
 Windows NT clients.
 ********IMPORTANT NOTE****************
 If you have no "security=" line in the [global] section of
 your current smb.conf and you update to Samba 2.0 you will
 need to add the line :
 security=share
 to get exactly the same behaviour with Samba 2.0 as you
 did with previous versions of Samba.
 ********END IMPORTANT NOTE*************
 In addition, Samba now defaults to case sensitivity options that
 match a Windows NT server precisely, that is, case insensitive
 but case preserving.
 The default format of the smbpasswd file has also been
 changed for this release, although the new tools will read
 and write the old format, for backwards compatibility.
 =====================================================================
 NOTE - Primary Domain Controller Functionality
 ----------------------------------------------
 This version of Samba contains code that correctly implements
 the undocumented Primary Domain Controller authentication
 protocols.  However, there is much more to being a Primary
 Domain Controller than serving Windows NT logon requests.
 A useful version of a Primary Domain Controller contains
 many remote procedure calls to do things like enumerate users,
 groups, and security information, only some of which Samba currently
 implements. In addition, there are outstanding (known) bugs with
 using Samba as a PDC in this release that the Samba Team are actively
 working on. For this reason we have chosen not to advertise and
 actively support Primary Domain Controller functionality with this
 release.
 This work is being done in the CVS (developer) versions of Samba,
 development of which continues at a fast pace.  If you are
 interested in participating in or helping with this development
 please join the Samba-NTDOM mailing list.  Details on joining
 are available at :
 http://samba.org/listproc/
 Details on obtaining CVS (developer) versions of Samba
 are available at:
 http://samba.org/cvs.html
 =====================================================================
 If you have problems, or think you have found a bug please email
 a report to :
         samba-bugs@samba.org
 As always, all bugs are our responsibility.
 Regards,
         The Samba Team.

414 lines 15 KiB Plaintext Raw Blame History

414 lines

15 KiB

Plaintext

Raw Blame History