[SCM] Samba Shared Repository - branch v4-9-stable updated
Karolin Seeger
kseeger at samba.org
Thu Sep 13 12:34:00 UTC 2018
The branch, v4-9-stable has been updated
via 4fc4ae2 VERSION: Disable GIT_SNAPSHOT for the 4.9.0 release
via ea7784a WHATSNEW: Add release notes for Samba 4.9.0.
via 834631b WHATSNEW: Fix typo.
via efbb842 WHATSNEW: 'samba-tool ou' command: manage organizational units
via 9bb128f samba_dnsupdate: honor 'dns zone scavenging' option, only update if needed
via b94c676 WHATSNEW.txt: announce 4.9.0 trust improvements
via c9743ba wafsamba: Fix 'make -j<jobs>'
via fa4c7f4 VERSION: Bump version up to 4.9.0rc6...
from 71aa4d1 VERSION: Disable GIT_SNAPSHOT for the 4.9.0rc5 release.
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-9-stable
- Log -----------------------------------------------------------------
-----------------------------------------------------------------------
Summary of changes:
VERSION | 2 +-
WHATSNEW.txt | 80 +++++++++++++++++++++++++++++------
buildtools/wafsamba/samba_utils.py | 9 +++-
selftest/knownfail.d/dns | 2 -
source4/scripting/bin/samba_dnsupdate | 15 ++++++-
5 files changed, 89 insertions(+), 19 deletions(-)
Changeset truncated at 500 lines:
diff --git a/VERSION b/VERSION
index 89ac63f..cbf21a9 100644
--- a/VERSION
+++ b/VERSION
@@ -87,7 +87,7 @@ SAMBA_VERSION_PRE_RELEASE=
# e.g. SAMBA_VERSION_RC_RELEASE=1 #
# -> "3.0.0rc1" #
########################################################
-SAMBA_VERSION_RC_RELEASE=5
+SAMBA_VERSION_RC_RELEASE=
########################################################
# To mark SVN snapshots this should be set to 'yes' #
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 07cd9f2..d344d9b 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,22 +1,16 @@
-Release Announcements
-=====================
-
-This is the fifth release candidate of Samba 4.9. This is *not*
-intended for production environments and is designed for testing
-purposes only. Please report any defects via the Samba bug reporting
-system at https://bugzilla.samba.org/.
-
-Samba 4.9 will be the next version of the Samba suite.
+ =============================
+ Release Notes for Samba 4.9.0
+ September 13, 2018
+ =============================
-UPGRADING
-=========
+This is the first stable release of the Samba 4.9 release series.
+Please read the release notes carefully before upgrading.
NEW FEATURES/CHANGES
====================
-
'net ads setspn'
----------------
@@ -215,6 +209,25 @@ accounts including creating a new computer and resetting the password.
This allows an 'offline join' of a member server or workstation to the
Samba AD domain.
+New 'samba-tool ou' command
+---------------------------
+
+The new 'samba-tool ou' command allows to manage organizational units.
+
+Available subcommands are:
+ create - Create an organizational unit.
+ delete - Delete an organizational unit.
+ list - List all organizational units
+ listobjects - List all objects in an organizational unit.
+ move - Move an organizational unit.
+ rename - Rename an organizational unit.
+
+In addition to the ou commands, there are new subcommands for the user
+and group management, which can make use of the organizational units:
+ group move - Move a group to an organizational unit/container.
+ user move - Move a user to an organizational unit/container.
+ user show - Display a user AD object.
+
Samba performance tool now operates against Microsoft Windows AD
----------------------------------------------------------------
@@ -265,6 +278,38 @@ feature, currently it should be enabled from the DNS Manager tool from
Windows. Also the feature needs to have been enabled by setting the smb.conf
parameter "dns zone scavenging = yes".
+Improved support for trusted domains (as AD DC)
+-----------------------------------------------
+
+The support for trusted domains/forests has been further improved.
+
+External domain trusts, as well a transitive forest trusts,
+are supported in both directions (inbound and outbound)
+for Kerberos and NTLM authentication.
+
+The following features are new in 4.9 (compared to 4.8):
+
+- It's now possible to add users/groups of a trusted domain
+ into domain groups. The group memberships are expanded
+ on trust boundaries.
+- foreignSecurityPrincipal objects (FPO) are now automatically
+ created when members (as SID) of a trusted domain/forest
+ are added to a group.
+- The 'samba-tool group *members' commands allow
+ members to be specified as foreign SIDs.
+
+However there are currently still a few limitations:
+
+- Both sides of the trust need to fully trust each other!
+- No SID filtering rules are applied at all!
+- This means DCs of domain A can grant domain admin rights
+ in domain B.
+- Selective (CROSS_ORGANIZATION) authentication is
+ not supported. It's possible to create such a trust,
+ but the KDC and winbindd ignore them.
+- Samba can still only operate in a forest with just
+ one single domain.
+
CTDB changes
------------
@@ -446,7 +491,7 @@ syntax changed to better match the same tool on Windows.
REMOVED FEATURES
================
-
+%
smb.conf changes
================
@@ -479,7 +524,16 @@ SMB_VFS_FCHMOD_ACL: Removed: Only FCHMOD is used.
Any external VFS modules will need to be updated to match these
changes in order to work with 4.9.x.
+CHANGES SINCE 4.9.0rc5
+======================
+o Björn Baumbach <bb at sernet.de>
+ * BUG 13605: samba_dnsupdate: Honor 'dns zone scavenging' option, only
+ update if needed.
+
+o Andreas Schneider <asn at samba.org>
+ * BUG 13606: wafsamba: Fix 'make -j<jobs>'.
+o
CHANGES SINCE 4.9.0rc4
======================
diff --git a/buildtools/wafsamba/samba_utils.py b/buildtools/wafsamba/samba_utils.py
index 0f95c12..c20f61e 100644
--- a/buildtools/wafsamba/samba_utils.py
+++ b/buildtools/wafsamba/samba_utils.py
@@ -467,6 +467,7 @@ def CHECK_MAKEFLAGS(bld):
if makeflags is None:
return
jobs_set = False
+ jobs = None
# we need to use shlex.split to cope with the escaping of spaces
# in makeflags
for opt in shlex.split(makeflags):
@@ -489,17 +490,21 @@ def CHECK_MAKEFLAGS(bld):
setattr(Options.options, opt[0:loc], opt[loc+1:])
elif opt[0] != '-':
for v in opt:
- if v == 'j':
+ if re.search(r'j[0-9]*$', v):
jobs_set = True
+ jobs = opt.strip('j')
elif v == 'k':
Options.options.keep = True
- elif opt == '-j':
+ elif re.search(r'-j[0-9]*$', opt):
jobs_set = True
+ jobs = opt.strip('-j')
elif opt == '-k':
Options.options.keep = True
if not jobs_set:
# default to one job
Options.options.jobs = 1
+ elif jobs_set and jobs:
+ Options.options.jobs = int(jobs)
Build.BuildContext.CHECK_MAKEFLAGS = CHECK_MAKEFLAGS
diff --git a/selftest/knownfail.d/dns b/selftest/knownfail.d/dns
index 99b0f1d..a517665 100644
--- a/selftest/knownfail.d/dns
+++ b/selftest/knownfail.d/dns
@@ -69,5 +69,3 @@ samba.tests.dns.__main__.TestSimpleQueries.test_qtype_all_query\(rodc:local\)
# The SOA override should not pass against the RODC, it must not overstamp
samba.tests.dns.__main__.TestSimpleQueries.test_one_SOA_query\(rodc:local\)
-.*samba.tests.blackbox.samba_dnsupdate.SambaDnsUpdateTests.test_samba_dnsupate_set_ip
-.*samba.tests.blackbox.samba_dnsupdate.SambaDnsUpdateTests.test_samba_dnsupate_no_change
diff --git a/source4/scripting/bin/samba_dnsupdate b/source4/scripting/bin/samba_dnsupdate
index 071cebe..fda3beb 100755
--- a/source4/scripting/bin/samba_dnsupdate
+++ b/source4/scripting/bin/samba_dnsupdate
@@ -102,6 +102,8 @@ else:
nsupdate_cmd = lp.get('nsupdate command')
+dns_zone_scavenging = lp.get("dns zone scavenging")
+
if len(IPs) == 0:
print "No IP interfaces - skipping DNS updates"
sys.exit(0)
@@ -847,7 +849,18 @@ for d in dns_list:
rebuild_cache = True
if opts.verbose:
print "need cache add: %s" % d
- update_list.append(d)
+ if dns_zone_scavenging:
+ update_list.append(d)
+ if opts.verbose:
+ print "scavenging requires update: %s" % d
+ elif opts.all_names:
+ update_list.append(d)
+ if opts.verbose:
+ print "force update: %s" % d
+ elif not check_dns_name(d):
+ update_list.append(d)
+ if opts.verbose:
+ print "need update: %s" % d
for c in cache_list:
found = False
--
Samba Shared Repository
More information about the samba-cvs
mailing list