mirror of
https://github.com/samba-team/samba.git
synced 2024-12-25 23:21:54 +03:00
80ff5a37c7
The phrase "derived work" and word "derived" don't appear in GPLv3; instead, GPLv3 uses the phrases "modified version" and "based on" to implement the strong copyleft clause. Herein, align the VFS statement with the phrases as they appear in the GPLv3 since Samba's license is GPLv3-or-later. Included are also a few other very minor wording changes as suggested by legal counsel who is experienced with presenting these sorts of licensing statements to company lawyers and suggests these changes will comfort that constituency. Finally, update both occurrences of the statement in the codebase in two different files. Signed-off-by: Bradley M. Kuhn <bkuhn@sfconservancy.org> Reviewed-by: Jim McDonough <jmcd@samba.org> Reviewed-by: Karolin Seeger <kseeger@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
162 lines
6.3 KiB
Plaintext
162 lines
6.3 KiB
Plaintext
Release Announcements
|
|
=====================
|
|
|
|
This is the first pre release of Samba 4.14. This is *not*
|
|
intended for production environments and is designed for testing
|
|
purposes only. Please report any defects via the Samba bug reporting
|
|
system at https://bugzilla.samba.org/.
|
|
|
|
Samba 4.13 will be the next version of the Samba suite.
|
|
|
|
|
|
UPGRADING
|
|
=========
|
|
|
|
|
|
NEW FEATURES/CHANGES
|
|
====================
|
|
|
|
Here is a copy of a clarification note added to the Samba code
|
|
in the file: VFS-License-clarification.txt.
|
|
--------------------------------------------------------------
|
|
|
|
A clarification of our GNU GPL License enforcement boundary within the Samba
|
|
Virtual File System (VFS) layer.
|
|
|
|
Samba is licensed under the GNU GPL. All code committed to the Samba
|
|
project or that creates a "modified version" or software "based on" Samba must
|
|
be either licensed under the GNU GPL or a compatible license.
|
|
|
|
Samba has several plug-in interfaces where external code may be called
|
|
from Samba GNU GPL licensed code. The most important of these is the
|
|
Samba VFS layer.
|
|
|
|
Samba VFS modules are intimately connected by header files and API
|
|
definitions to the part of the Samba code that provides file services,
|
|
and as such, code that implements a plug-in Samba VFS module must be
|
|
licensed under the GNU GPL or a compatible license.
|
|
|
|
However, Samba VFS modules may themselves call third-party external
|
|
libraries that are not part of the Samba project and are externally
|
|
developed and maintained.
|
|
|
|
As long as these third-party external libraries do not use any of the
|
|
Samba internal structure, APIs or interface definitions created by the
|
|
Samba project (to the extent that they would be considered subject to the GNU
|
|
GPL), then the Samba Team will not consider such third-party external
|
|
libraries called from Samba VFS modules as "based on" and/or creating a
|
|
"modified version" of the Samba code for the purposes of GNU GPL.
|
|
Accordingly, we do not require such libraries be licensed under the GNU GPL
|
|
or a GNU GPL compatible license.
|
|
|
|
Client Group Policy
|
|
-------------------
|
|
This release extends Samba to support Group Policy functionality for Winbind
|
|
clients. Active Directory Administrators can set policies that apply Sudoers
|
|
configuration, and cron jobs to run hourly, daily, weekly or monthly.
|
|
|
|
To enable the application of Group Policies on a client, set the global
|
|
smb.conf option 'apply group policies' to 'yes'. Policies are applied on an
|
|
interval of every 90 minutes, plus a random offset between 0 and 30 minutes.
|
|
|
|
Policies applied by Samba are 'non-tattooing', meaning that changes can be
|
|
reverted by executing the `samba-gpupdate --unapply` command. Policies can be
|
|
re-applied using the `samba-gpupdate --force` command.
|
|
To view what policies have been or will be applied to a system, use the
|
|
`samba-gpupdate --rsop` command.
|
|
|
|
Administration of Samba policy requires that a Samba ADMX template be uploaded
|
|
to the SYSVOL share. The samba-tool command `samba-tool gpo admxload` is
|
|
provided as a convenient method for adding this policy. Once uploaded, policies
|
|
can be modified in the Group Policy Management Editor under Computer
|
|
Configuration/Policies/Administrative Templates.
|
|
|
|
CTDB CHANGES
|
|
============
|
|
|
|
* The NAT gateway and LVS features now uses the term "leader" to refer
|
|
to the main node in a group through which traffic is routed and
|
|
"follower" for other members of a group. The command for
|
|
determining the leader has changed to "ctdb natgw leader" (from
|
|
"ctdb natgw master"). The configuration keyword for indicating that
|
|
a node can not be the leader of a group has changed to
|
|
"follower-only" (from "slave-only"). Identical changes were made
|
|
for LVS.
|
|
|
|
* Remove "ctdb isnotrecmaster" command. It isn't used by CTDB's
|
|
scripts and can be checked by users with "ctdb pnn" and "ctdb
|
|
recmaster".
|
|
|
|
Python 3.6 or later required
|
|
----------------------------
|
|
|
|
Samba's minimum runtime requirement for python was raised to Python
|
|
3.6 with samba 4.13. Samba 4.14 raises this minimum version to Python
|
|
3.6 also to build Samba. It is no longer possible to build Samba
|
|
(even just the file server) with Python versions 2.6 and 2.7.
|
|
|
|
As Python 2.7 has been End Of Life upstream since April 2020, Samba
|
|
is dropping ALL Python 2.x support in this release.
|
|
|
|
|
|
NT4-like 'classic' Samba domain controllers
|
|
-------------------------------------------
|
|
|
|
Samba 4.13 deprecates Samba's original domain controller mode.
|
|
|
|
Sites using Samba as a Domain Controller should upgrade from the
|
|
NT4-like 'classic' Domain Controller to a Samba Active Directory DC
|
|
to ensure full operation with modern windows clients.
|
|
|
|
SMBv1 only protocol options deprecated
|
|
--------------------------------------
|
|
|
|
A number of smb.conf parameters for less-secure authentication methods
|
|
which are only possible over SMBv1 are deprecated in this release.
|
|
|
|
REMOVED FEATURES
|
|
================
|
|
|
|
The deprecated "ldap ssl ads" smb.conf option has been removed.
|
|
|
|
smb.conf changes
|
|
================
|
|
|
|
Parameter Name Description Default
|
|
-------------- ----------- -------
|
|
ldap ssl ads removed
|
|
domain logons Deprecated no
|
|
raw NTLMv2 auth Deprecated no
|
|
client plaintext auth Deprecated no
|
|
client NTLMv2 auth Deprecated yes
|
|
client lanman auth Deprecated no
|
|
client use spnego Deprecated yes
|
|
|
|
|
|
|
|
KNOWN ISSUES
|
|
============
|
|
|
|
https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.14#Release_blocking_bugs
|
|
|
|
|
|
#######################################
|
|
Reporting bugs & Development Discussion
|
|
#######################################
|
|
|
|
Please discuss this release on the samba-technical mailing list or by
|
|
joining the #samba-technical IRC channel on irc.freenode.net.
|
|
|
|
If you do report problems then please try to send high quality
|
|
feedback. If you don't provide vital information to help us track down
|
|
the problem then you will probably be ignored. All bug reports should
|
|
be filed under the Samba 4.1 and newer product in the project's Bugzilla
|
|
database (https://bugzilla.samba.org/).
|
|
|
|
|
|
======================================================================
|
|
== Our Code, Our Bugs, Our Responsibility.
|
|
== The Samba Team
|
|
======================================================================
|
|
|