[Release Planning 4.0] Samba 4.0.0rc6 on Tuesday December 4, 2012

Karolin Seeger kseeger at samba.org
Tue Dec 4 04:25:45 MST 2012


Hi Andrew,

On Tue, Dec 04, 2012 at 02:43:27PM +1100, Andrew Bartlett wrote:
> Thanks Karolin.  It's been great to see these patches finally land and I
> agree that making an RC without these would not have been helpful.
> 
> We should include something like this in the WHATSNEW, to explain the
> situation:
> 
> In this release candidate, we have a significant number of improvements
> to our Access Control List (ACL) code, particularly for the Active
> Directory Domain Controller, but also in our general purpose file
> server.
> 
> These changes are important, as they enable Group Policy Objects to work
> correctly, allow administrators to impose restrictions on some users
> reading certain parts of the directory and correctly propagating
> inherited ACLs down the LDAP directory tree.
> 
> It is unusual to make such changes so late in the RC series, however we
> felt uncomfortable knowingly releasing Samba 4.0 without having these
> features working.  In particular, this does address the regression in
> Group Policy support seen during the beta series. 
> 
> Users of the Active Directory Domain Controller upgrading from any
> previous release should run 'samba-tool ntacl sysvolreset' to re-sync
> ACLs on the sysvol share with those matching the GPOs in LDAP and the
> defaults from an initial provision.  This will set an underlying POSIX
> ACL if required (eg not using the NTVFS file server).

thanks a lot for providing the text. It has been added to the release
notes slightly modified.

Thanks!

Karolin

-- 
Samba			http://www.samba.org
SerNet			http://www.sernet.de
sambaXP			http://www.sambaxp.org



More information about the samba-technical mailing list