mirror of
https://github.com/samba-team/samba.git
synced 2025-01-11 05:18:09 +03:00
9b566e7b3c
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Karolin Seeger <kseeger@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Tue Dec 20 11:40:07 CET 2016 on sn-devel-144
123 lines
4.7 KiB
Plaintext
123 lines
4.7 KiB
Plaintext
Release Announcements
|
|
=====================
|
|
|
|
This is the first preview release of Samba 4.6. This is *not*
|
|
intended for production environments and is designed for testing
|
|
purposes only. Please report any defects via the Samba bug reporting
|
|
system at https://bugzilla.samba.org/.
|
|
|
|
Samba 4.6 will be the next version of the Samba suite.
|
|
|
|
|
|
UPGRADING
|
|
=========
|
|
|
|
vfs_fruit option "fruit:resource" spelling correction
|
|
-----------------------------------------------------
|
|
|
|
Due to a spelling error in the vfs_fruit option parsing for the "fruit:resource"
|
|
option, users who have set this option in their smb.conf were still using the
|
|
default setting "fruit:resource = file" as the parser was looking for the string
|
|
"fruit:ressource" (two "s").
|
|
|
|
After upgrading to this Samba version 4.6, you MUST either remove the option
|
|
from your smb.conf or set it to the default "fruit:resource = file", otherwise
|
|
your macOS clients will not be able to access the resource fork data.
|
|
|
|
This version Samba 4.6 accepts both the correct and incorrect spelling, but the
|
|
next Samba version 4.7 will not accept the wrong spelling.
|
|
|
|
Users who were using the wrong spelling "ressource" with two "s" can keep the
|
|
setting, but are advised to switch to the correct spelling.
|
|
|
|
ID Mapping
|
|
----------
|
|
We discovered that the majority of users have an invalid or incorrect
|
|
ID mapping configuration. We implemented checks in the 'testparm' tool to
|
|
validate the ID mapping configuration. You should run it and check if it prints
|
|
any warnings or errors after upgrading! If it does you should fix them. See the
|
|
'IDENTITY MAPPING CONSIDERATIONS' section in the smb.conf manpage.
|
|
There are some ID mapping backends which are not allowed to be used for the
|
|
default backend. Winbind will no longer start if an invalid backend is
|
|
configured as the default backend.
|
|
|
|
To avoid problems in future we advise all users to run 'testparm' after
|
|
changing the smb.conf file!
|
|
|
|
NEW FEATURES/CHANGES
|
|
====================
|
|
|
|
Kerberos client encryption types
|
|
--------------------------------
|
|
Some parts of Samba (most notably winbindd) perform Kerberos client
|
|
operations based on a Samba-generated krb5.conf file. A new
|
|
parameter, "kerberos encryption types" allows configuring the
|
|
encryption types set in this file, thereby allowing the user to
|
|
enforce strong or legacy encryption in Kerberos exchanges.
|
|
|
|
The default value of "all" is compatible with previous behavior, allowing
|
|
all encryption algorithms to be negotiated. Setting the parameter to "strong"
|
|
only allows AES-based algorithms to be negotiated. Setting the parameter to
|
|
"legacy" allows only RC4-HMAC-MD5 - the legacy algorithm for Active Directory.
|
|
This can solves some corner cases of mixed environments with Server 2003R2 and
|
|
newer DCs.
|
|
|
|
Printing
|
|
--------
|
|
Support for uploading printer drivers from newer Windows clients (Windows 10)
|
|
has been added until our implementation of [MS-PAR] protocol is ready.
|
|
Several issues with uploading different printing drivers have been addressed.
|
|
|
|
The OS Version for the printing server has been increased to announce
|
|
Windows Server 2003 R2 SP2. If a driver needs a newer version then you should
|
|
check the smb.conf manpage for details.
|
|
|
|
new option for owner inheritance
|
|
--------------------------------
|
|
The "inherit owner" smb.conf parameter instructs smbd to set the
|
|
owner of files to be the same as the parent directory's owner.
|
|
Up until now, this parameter could be set to "yes" or "no".
|
|
A new option, "unix only", enables this feature only for the UNIX owner
|
|
of the file, not affecting the SID owner in the Windows NT ACL of the
|
|
file. This can be used to emulate something very similar to folder quotas.
|
|
|
|
|
|
REMOVED FEATURES
|
|
================
|
|
|
|
|
|
smb.conf changes
|
|
================
|
|
|
|
Parameter Name Description Default
|
|
-------------- ----------- -------
|
|
kerberos encryption types New all
|
|
inherit owner New option
|
|
fruit:resource Spelling correction
|
|
|
|
|
|
KNOWN ISSUES
|
|
============
|
|
|
|
Currently none.
|
|
|
|
#######################################
|
|
Reporting bugs & Development Discussion
|
|
#######################################
|
|
|
|
Please discuss this release on the samba-technical mailing list or by
|
|
joining the #samba-technical IRC channel on irc.freenode.net.
|
|
|
|
If you do report problems then please try to send high quality
|
|
feedback. If you don't provide vital information to help us track down
|
|
the problem then you will probably be ignored. All bug reports should
|
|
be filed under the Samba 4.1 and newer product in the project's Bugzilla
|
|
database (https://bugzilla.samba.org/).
|
|
|
|
|
|
======================================================================
|
|
== Our Code, Our Bugs, Our Responsibility.
|
|
== The Samba Team
|
|
======================================================================
|
|
|