[SCM] Samba Shared Repository - branch v3-5-test updated
Karolin Seeger
kseeger at samba.org
Fri Jun 24 13:12:41 MDT 2011
The branch, v3-5-test has been updated
via eb7c10ea s3-WHATSNEW 3.5.9 Add information on kerberos change
from d42bf67 s3: Fix bug 8238 -- KB2536276 prevents access to shares
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test
- Log -----------------------------------------------------------------
commit eb7c10ea16ff7db34d8ab71306c7d5d298df8d40
Author: Andrew Bartlett <abartlet at samba.org>
Date: Tue Jun 14 22:04:11 2011 +1000
s3-WHATSNEW 3.5.9 Add information on kerberos change
-----------------------------------------------------------------------
Summary of changes:
WHATSNEW.txt | 16 +++++++++++++++-
1 files changed, 15 insertions(+), 1 deletions(-)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 7132a02..2d18bc3 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -52,7 +52,21 @@ Major enhancements in Samba 3.5.9 include:
o Sgid bit lost on folder rename (bug #7996).
o ACL can get lost when files are being renamed (bug #7987).
o Respect "allow trusted domains = no" in Winbind (bug #6966).
+o Samba now follows windows behaviour as a kerberos client,
+requesting a CIFS/ ticket (bug 7893)
+New Kerberos behaviour
+----------------------
+
+A new parameter 'client use spnego principal' defaults to 'no' and
+mean Samba will use CIFS/hostname to obtain a kerberos ticket, acting
+more like Windows when using Kerberos against a CIFS server in
+smbclient, winbind and other Samba client tools. This will change
+which servers we will successfully negotiate kerberos connections to.
+This is due to Samba no longer trusting a server-provided hint which
+is not available from Windows 2008 or later. For correct operation
+with all clients, all aliases for a server should be recorded as a as
+a servicePrincipalName on the server's record in AD.
Changes since 3.5.8:
--------------------
--
Samba Shared Repository
More information about the samba-cvs
mailing list