[SCM] Samba Shared Repository - branch master updated

Uri Simchoni uri at samba.org
Thu Nov 24 19:24:03 UTC 2016


The branch, master has been updated
       via  60fd6a3 WHATSNEW: document new inherit owner option
       via  bb75943 WHATSNEW: document kerberos encryption types
      from  a59e547 docs: fix funny typo in smb.conf manpage wrt Samba's FSRVP server.

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 60fd6a324b1b98a02674b8afe36277359bdb5893
Author: Uri Simchoni <uri at samba.org>
Date:   Wed Aug 10 08:38:59 2016 +0300

    WHATSNEW: document new inherit owner option
    
    Signed-off-by: Uri Simchoni <uri at samba.org>
    Reviewed-by: Rowland Penny <rpenny at samba.org>
    
    Autobuild-User(master): Uri Simchoni <uri at samba.org>
    Autobuild-Date(master): Thu Nov 24 20:23:46 CET 2016 on sn-devel-144

commit bb7594392f61ee284d1caec6c865e9663a705174
Author: Uri Simchoni <uri at samba.org>
Date:   Wed Aug 10 08:38:30 2016 +0300

    WHATSNEW: document kerberos encryption types
    
    Signed-off-by: Uri Simchoni <uri at samba.org>
    Reviewed-by: Rowland Penny <rpenny at samba.org>

-----------------------------------------------------------------------

Summary of changes:
 WHATSNEW.txt | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 6b96cae..6778a0a 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -16,6 +16,31 @@ UPGRADING
 NEW FEATURES/CHANGES
 ====================
 
+kerberos client encryption types
+--------------------------------
+Some parts of Samba (most notably winbindd) perform Kerberos client
+operations based on a Samba-generated krb5.conf file. A new
+parameter, "kerberos encryption types" allows configuring the
+encryption types set in this file, thereby allowing the user to
+enforce strong or legacy encryption in Kerberos exchanges.
+
+The default value of "all" is compatible with previous behavior, allowing
+all encryption algorithms to be negotiated. Setting the parameter to "strong"
+only allows AES-based algorithms to be negotiated. Setting the parameter to
+"legacy" allows only RC4-HMAC-MD5 - the legacy algorithm for Active Directory.
+This can solves some corner cases of mixed environments with Server 2003R2 and
+newer DCs.
+
+
+new option for owner inheritance
+--------------------------------
+The "inherit owner" smb.conf parameter instructs smbd to set the
+owner of files to be the same as the parent directory's owner.
+Up until now, this parameter could be set to "yes" or "no".
+A new option, "unix only", enables this feature only for the UNIX owner
+of the file, not affecting the SID owner in the Windows NT ACL of the
+file. This can be used to emulate something very similar to folder quotas.
+
 
 REMOVED FEATURES
 ================
@@ -26,6 +51,8 @@ smb.conf changes
 
   Parameter Name                Description             Default
   --------------                -----------             -------
+  kerberos encryption types     New                     all
+  inherit owner                 New option
 
 
 KNOWN ISSUES


-- 
Samba Shared Repository



More information about the samba-cvs mailing list