[SCM] Samba Shared Repository - branch master updated
Uri Simchoni
uri at samba.org
Thu Nov 24 19:24:03 UTC 2016
The branch, master has been updated
via 60fd6a3 WHATSNEW: document new inherit owner option
via bb75943 WHATSNEW: document kerberos encryption types
from a59e547 docs: fix funny typo in smb.conf manpage wrt Samba's FSRVP server.
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit 60fd6a324b1b98a02674b8afe36277359bdb5893
Author: Uri Simchoni <uri at samba.org>
Date: Wed Aug 10 08:38:59 2016 +0300
WHATSNEW: document new inherit owner option
Signed-off-by: Uri Simchoni <uri at samba.org>
Reviewed-by: Rowland Penny <rpenny at samba.org>
Autobuild-User(master): Uri Simchoni <uri at samba.org>
Autobuild-Date(master): Thu Nov 24 20:23:46 CET 2016 on sn-devel-144
commit bb7594392f61ee284d1caec6c865e9663a705174
Author: Uri Simchoni <uri at samba.org>
Date: Wed Aug 10 08:38:30 2016 +0300
WHATSNEW: document kerberos encryption types
Signed-off-by: Uri Simchoni <uri at samba.org>
Reviewed-by: Rowland Penny <rpenny at samba.org>
-----------------------------------------------------------------------
Summary of changes:
WHATSNEW.txt | 27 +++++++++++++++++++++++++++
1 file changed, 27 insertions(+)
Changeset truncated at 500 lines:
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 6b96cae..6778a0a 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -16,6 +16,31 @@ UPGRADING
NEW FEATURES/CHANGES
====================
+kerberos client encryption types
+--------------------------------
+Some parts of Samba (most notably winbindd) perform Kerberos client
+operations based on a Samba-generated krb5.conf file. A new
+parameter, "kerberos encryption types" allows configuring the
+encryption types set in this file, thereby allowing the user to
+enforce strong or legacy encryption in Kerberos exchanges.
+
+The default value of "all" is compatible with previous behavior, allowing
+all encryption algorithms to be negotiated. Setting the parameter to "strong"
+only allows AES-based algorithms to be negotiated. Setting the parameter to
+"legacy" allows only RC4-HMAC-MD5 - the legacy algorithm for Active Directory.
+This can solves some corner cases of mixed environments with Server 2003R2 and
+newer DCs.
+
+
+new option for owner inheritance
+--------------------------------
+The "inherit owner" smb.conf parameter instructs smbd to set the
+owner of files to be the same as the parent directory's owner.
+Up until now, this parameter could be set to "yes" or "no".
+A new option, "unix only", enables this feature only for the UNIX owner
+of the file, not affecting the SID owner in the Windows NT ACL of the
+file. This can be used to emulate something very similar to folder quotas.
+
REMOVED FEATURES
================
@@ -26,6 +51,8 @@ smb.conf changes
Parameter Name Description Default
-------------- ----------- -------
+ kerberos encryption types New all
+ inherit owner New option
KNOWN ISSUES
--
Samba Shared Repository
More information about the samba-cvs
mailing list