[Samba] [Announce] Samba 4.0.0 Available for Download!
Stéphane Lebègue
stephane.lebegue at eilco-ulco.fr
Wed Dec 12 01:50:35 MST 2012
Congratulations, I look forward to testing samba 4 as having an AD
server 2008 (imposed) customers with Debian, I had many difficulties to
operate (Luckily it yay Broken Power / Likewise).
I will replace the samba 4 AD 2008 now
I'd share my feedback.
Thank you again!
Stéphane
On Tue, 11 Dec 2012 18:40:26 +0100, Karolin Seeger <kseeger at samba.org>
wrote:
> ==================================================================
> "Nothing is impossible,
> the word itself says
> 'I'm possible'!"
>
> Audrey Hepburn
>
> ==================================================================
>
>
> Release Announcements
> ---------------------
>
> This is is the first stable release of Samba 4.0.
>
> This release contains the best of all of Samba's
> technology parts, both a file server (that you can reasonably expect
> to upgrade existing Samba 3.x releases to) and the AD domain
> controller work previously known as 'Samba4'.
>
> Major enhancements in Samba 4.0.0 include:
>
> Active Directory services
> =========================
>
> Samba 4.0 supports the server-side of the Active Directory logon
> environment used by Windows 2000 and later, so we can do full domain
> join and domain logon operations with these clients.
>
> Our Domain Controller (DC) implementation includes our own built-in
> LDAP server and Kerberos Key Distribution Center (KDC) as well as the
> Samba3-like logon services provided over CIFS. We correctly generate
> the infamous Kerberos PAC, and include it with the Kerberos tickets we
> issue.
>
> When running an AD DC, you only need to run 'samba' (not smbd/nmbd/winbindd),
> as the required services are co-coordinated by this master binary.
> The tool to administer the Active Directory services is called 'samba-tool'.
>
> A short guide to setting up Samba 4 as an AD DC can be found on the wiki:
>
> http://wiki.samba.org/index.php/Samba4/HOWTO
>
>
> File Services
> =============
>
> Samba 4.0.0 ships with two distinct file servers. We now use the
> file server from the Samba 3.x series 'smbd' for all file serving by
> default.
>
> Samba 4.0 also ships with the 'NTVFS' file server. This file server
> is what was used prior to the beta2 release of Samba 4.0, and is
> tuned to match the requirements of an AD domain controller. We
> continue to support this, not only to provide continuity to
> installations that have deployed it as part of an AD DC, but also as a
> running example of the NT-FSA architecture we expect to move smbd to in
> the longer term.
>
> For pure file server work, the binaries users would expect from that
> series (smbd, nmbd, winbindd, smbpasswd) continue to be available.
>
>
> DNS
> ===
>
> As DNS is an integral part of Active Directory, we also provide two DNS
> solutions, a simple internal DNS server for 'out of the box' configurations
> and a more elaborate BIND plugin using the BIND DLZ mechanism in versions
> 9.8 and 9.9. During the provision, you can select which backend to use.
> With the internal backend, your DNS server is good to go.
> If you chose the BIND_DLZ backend, a configuration file will be generated
> for bind to make it use this plugin, as well as a file explaining how to
> set up bind.
>
>
> NTP
> ===
>
> To provide accurate timestamps to Windows clients, we integrate with
> the NTP project to provide secured NTP replies. To use you need to
> start ntpd and configure it with the 'restrict ... ms-sntp' and
> ntpsigndsocket options.
>
>
> Python Scripting Interface
> ==========================
>
> A new scripting interface has been added to Samba 4, allowing
> Python programs to interface to Samba's internals, and many tools and
> internal workings of the DC code is now implemented in python.
>
>
> Known Issues
> ============
>
> - Replication of DNS data from one AD server to another may not work.
> The DNS data used by the internal DNS server and bind9_dlz is stored
> in an application partition in our directory. The replication of
> this partition is not yet reliable.
>
> - Replication may fail on FreeBSD due to getaddrinfo() rejecting names
> containing _. A workaround will be in a future release.
>
> - samba_upgradeprovision should not be run when upgrading to this release
> from a recent release. No important database format changes have
> been made since alpha16.
>
> - Installation on systems without a system iconv (and developer
> headers at compile time) is known to cause errors when dealing with
> non-ASCII characters.
>
> - Domain member support in the 'samba' binary is in its infancy, and
> is not comparable to the support found in winbindd. As such, do not
> use the 'samba' binary (provided for the AD server) on a member
> server.
>
> - There is no NetBIOS browsing support (network neighbourhood)
> available for the AD domain controller. (Support in nmbd and smbd
> for classic domains and member/standalone servers is unchanged).
>
> - Clock Synchronisation is critical. Many 'wrong password' errors are
> actually due to Kerberos objecting to a clock skew between client
> and server. (The NTP work in the previous alphas are partly to assist
> with this problem).
>
> - The DRS replication code may fail. Please contact the team if you
> experience issues with DRS replication, as we have fixed many issues
> here in response to feedback from our production users.
>
> - Linux inotify will now only be supported on systems where glibc
> also supports
> it (for details, please refer to bug #8850).
>
>
> Upgrading
> =========
>
> Users upgrading from Samba 3.x domain controllers and wanting to use
> Samba 4.0 as an AD DC should use the 'samba-tool domain
> classicupgrade' command. See the wiki for more details:
> https://wiki.samba.org/index.php/Samba4/samba3upgrade/HOWTO.
>
> Users upgrading from Samba 4.0 alpha and beta releases since alpha15
> should run 'samba-tool dbcheck --cross-ncs --fix' before re-starting
> Samba. Users upgrading from earlier alpha releases should contact the
> team for advice.
>
> Users upgrading an AD DC from any previous release should run
> 'samba-tool ntacl sysvolreset' to re-sync ACLs on the sysvol share
> with those matching the GPOs in LDAP and the defaults from an initial
> provision. This will set an underlying POSIX ACL if required (eg not
> using the NTVFS file server).
>
> If you used the BIND9_FLATFILE or BIND9_DLZ features,
> you'll have to add '-dns' to the 'server services' option,
> as the internal dns server (SAMBA_INTERNAL) is the default now.
>
>
> Supported features
> ==================
>
> A whitepaper of currently (un-)supported features is available on the wiki:
>
> https://wiki.samba.org/index.php/Samba_4.0_Whitepaper
>
>
> ######################################################################
> Changes
> #######
>
> smb.conf changes
> ----------------
>
> Parameter Name Description
> -------------- -----------
>
> acl compatibility Removed
> allow dns updates New
> announce as Removed
> announce version Removed
> cldap port New
> client max protocol New
> client min protocol New
> client signing Changed default
> dcerpc endpoint servers New
> dgram port New
> directory security mask Removed
> display charset Removed
> dns forwarder New
> dns update command New
> force security mode Removed
> force directory security mode Removed
> homedir map Changed default
> kernel oplocks Changed default
> kernel share modes New
> kpasswd port New
> krb5 port New
> nbt client socket address New
> nbt port New
> nsupdate command New
> ntp signd socket directory New
> ntvfs handler New
> paranoid server security Removed
> pid directory New
> printer admin Removed
> rndc command New
> rpc big endian New
> samba kcc command New
> security mask Removed
> send spnego principal Removed
> server max protocol New
> server min protocol New
> server role New
> server services New
> server signing Changed default
> share backend New
> share modes Removed
> smb2 max read Changed default
> smb2 max write Changed default
> smb2 max trans Changed default
> socket address Removed
> spn update command New
> time offset Removed
> tls cafile New
> tls certfile New
> tls crlfile New
> tls dh params file New
> tls enabled New
> tls keyfile New
> unicode New
> web port New
> winbindd privileged socket directory New
> winbind sealed pipes New
> winbindd socket directory New
>
>
> CHANGES SINCE 4.0.0rc6
> ======================
>
> o Michael Adam <obnox at samba.org>
> * BUG 9414: Honor password complexity settings.
> * BUG 9456: developer-build: Fix panic when acl_xattr fails with access
> denied.
> * BUG 9457: Fix "map username script" with "security=ads" and Winbind.
>
>
> o Jeremy Allison <jra at samba.org>
> * BUG 9462: Users can not be given write permissions any more by default.
>
>
> o Andrew Bartlett <abartlet at samba.org>
> * BUG 9415: Install SWAT *.msg files with waf.
>
>
> o Alexander Bokovoy <ab at samba.org>
> * BUG 9479: Support FIPS mode when building Samba.
>
>
> o Günther Deschner <gd at samba.org>
> * BUG 9438: Fix netr_ServerPasswordSet2, netr_LogonSamLogon with netlogon
> AES.
>
>
> o Tsukasa Hamano <hamano at osstech.co.jp>
> * BUG 9471: Fix SEGV when using second vfs module.
>
>
> o Stefan Metzmacher <metze at samba.org>
> * BUG 9414: Honor password complexity settings.
> * BUG 9470: Fix MMC crashes.
> * BUG 9481: Fix ACL on "cn=partitions,cn=configuration".
>
>
> o Andreas Schneider <asn at samba.org>
> * BUG 9459: Install manpages only if we install the target.
>
>
> o Richard Sharpe <realrichardsharpe at gmail.com>
> * BUG 9460: Respond correctly to FILE_STREAM_INFO requests.
>
>
> CHANGES SINCE 4.0.0rc5
> ======================
>
> In this release candidate, we have a significant number of improvements
> to our Access Control List (ACL) code, particularly for the Active
> Directory Domain Controller, but also in our general purpose file
> server.
>
> These changes are important, as they enable Group Policy Objects to work
> correctly, allow administrators to impose restrictions on some users
> reading certain parts of the directory and correctly propagating
> inherited ACLs down the LDAP directory tree.
>
> Users of the Active Directory Domain Controller upgrading from any
> previous release should run 'samba-tool ntacl sysvolreset' to re-sync
> ACLs on the sysvol share with those matching the GPOs in LDAP and the
> defaults from an initial provision. This will set an underlying POSIX
> ACL if required.
>
> The ACLs in the Active Directory are also checked on searches by default.
> The automatic inheritance of ACLs is also correctly recalculated on
> changes now.
>
> o Michael Adam <obnox at samba.org>
> * BUG 9350: Fail "configure --with-ads" if ads support is not available.
> * BUG 9446: Id mapping code delivers inconsistent results.
> * BUG 9453: Fix building pdb_ldap as shared module.
>
>
> o Jeremy Allison <jra at samba.org>
> * BUG 9236: ACL masks incorrectly applied when setting ACLs.
> * BUG 9374: Allow smb2.acls torture test to pass against smbd
> with a POSIX
> ACLs backend.
>
>
> o Christian Ambach <ambi at samba.org>
> * BUG 9178: Add DMAPI configure option and checks.
> * BUG 9274: Document shadow:snapdirseverywhere option of
> vfs_shadow_copy2.
> * BUG 9339: Backport build fixes from master.
> * BUG 9411: aio read marks the file as modified.
> * BUG 9413: Fix waf build on AIX6.
>
>
> o Andrew Bartlett <abartlet at samba.org>
> * BUG 9121: Provide and use setproctitle replacement function for samba4
> processes on linux.
> * BUG 9271: samba-tool: Rework ldap attribute fetch in classicupgrade for
> missing attributes.
> * BUG 9421: Fix several build issues.
> * BUG 9448: Backport several crash bugs from master.
>
>
> o Sumit Bose <sbose at redhat.com>
> * BUG 9367: Use work around for 'winbind use default domain' only if it
> is set.
>
>
> o Kai Blin <kai at samba.org>
> * BUG 9399 - 'samba-tool dns serverinfo localhost' returns 'Memory
> allocation error'.
> * BUG 9449: Remove unused samba-dig tool.
>
>
> o Günther Deschner <gd at samba.org>
> * BUG 9426: rpc_client: lookup nametype 0x20 in rpc_pipe_open_tcp_port().
> * BUG 9439: Fix ncacn_ip_tcp reconnection code for lsa lookups.
> * BUG 9451: Allow to force DNS updates using net.
>
>
> o David Disseldorp <ddiss at samba.org>
> * BUG 9433: spoolss: Fix segfault when "default devmode" is disabled.
>
>
> o Amitay Isaacs <amitay at gmail.com>
> * BUG 9265: Bind dlz fails to start if there is a trustedanchors zone.
> * BUG 9354: Fix format string vulnerability in an error message.
>
>
> o Volker Lendecke <vl at samba.org>
> * BUG 9422: Large read requests cause server to issue malformed reply.
> * BUG 9440: Do not rely on dbwrap_record_get_value to return a talloc
> object.
>
>
> o Stefan Metzmacher <metze at samba.org>
> * BUG 8620: Read ACL are not enabled by default on DS.
> * BUG 8621: ACL are not recalculated if parent is changed and inherit is
> enabled.
> * BUG 9373: samba-tool: Report a CommandError if loading of the
> config file
> fails.
> * BUG 9385: Add missing newline in the output of ldb_ldif_write_trace().
> * BUG 9390: Fix segfaults in "log level = 10" on Solaris.
> * BUG 9402: lib/addns: Fix working with a bind9 server.
> * BUG 9406: ACL fixes since 4.0 rc1.
> * BUG 9447: Backport tests from master.
> * BUG 9448: Backport several crash bugs from master.
>
>
> o Ricky Nance <ricky.nance at weaubleau.k12.mo.us>
> * BUG 9449: Remove phpldapadmin inclusion.
>
>
> o Matthieu Patou <mat at matws.net>
> * BUG 9418: Fix MD5 detection in the autoconf build.
>
>
> o Arvid Requate <requate at univention.de>
> * BUG 9376: Fix typo in got_duplicate_group check.
> * BUG 9392: Fix 'samba-tool fsmo --role=schema'.
>
>
> o Andreas Schneider <asn at samba.org>
> * BUG 9386: Failover if netlogon pipe is not available.
> * BUG 9436: Fix leaking sockets of SMB connections to a DC.
>
>
> o Karolin Seeger <kseeger at samba.org>
> * BUG 9425: Do not build ntdb by default.
> * BUG 9437: Warnings when building manpages with waf.
> * BUG 9443: Manpages of the libraries are located in different
> subdirectories.
> * BUG 9444: Merge both samba.8 manpages.
> * BUG 9445: Update man 7 samba.
>
>
> o Jelmer Vernooij <jelmer at samba.org>
> * BUG 9339: Backport build fixes from master.
>
>
> CHANGES SINCE 4.0.0rc4
> ======================
>
> With this release candidate the location of the socket samba accepts
> connections from NTPd has changed, as has the enforced permissions.
>
> This means the ntp.conf will need to change from (eg)
>
> ntpsigndsocket /usr/local/samba/var/run/ntp_signd/
>
> to
>
> ntpsigndsocket /usr/local/samba/var/lib/ntp_signd/
>
> To use the socket with ntp on a system with an ntp user and group, you must
> run:
>
> chgrp ntp /usr/local/samba/var/lib/ntp_signd/
>
> o Michael Adam <obnox at samba.org>
> * BUG 9321: winbindd:cache: Fix offline logons with cached credentials.
> * BUG 9339: Build and quota fixes.
> * BUG 9353: Fix the cluster(ctdb) build without system talloc installed.
>
>
> o Christian Ambach <ambi at samba.org>
> * BUG 9208: Cannot migrate files with inheritance flags to share
> on top of
> NFSv4 filesystem.
> * BUG 9361: Quotas management doesn't work with SMB2/3.
>
>
> o Andrew Bartlett <abartlet at samba.org>
> * BUG 9317: Cannot easily change to internal DNS server.
> * BUG 9338: lib/replace: Return size of xattr if size argument is 0.
> * BUG 9339: Build and quota fixes.
> * BUG 9340: Do not use the wheel group for 'administrators'.
> * BUG 9347: winbind: Extend wbcAuthenticateUserEx to provide PAC.
> * BUG 9352: Fix samba crashes with certain RPC calls.
> * BUG 9355: Set mask values to 0777 and use fileserver.conf.
> * BUG 9357: Don't expose more symbols than specified by abi_match
> setting.
> * BUG 9379: ntp_signd permissions are too broad.
>
>
> o Björn Baumbach <bb at sernet.de>
> * BUG 9300: vfs_streams_depot: Add delete_lost option.
> * BUG 9348: Fix the build against older ctdb versions.
> * BUG 9345: fix use of <smbconfoption> tag.
> * BUG 9349: Fix check for ctdb_private.h
> * BUG 9351: Fail "configure --with-cluster-support" if ctdb
> support is not
> available.
>
>
> o Ira Cooper <ira at samba.org>
> * BUG 9339: Build and quota fixes.
>
>
> o Günther Deschner <gd at samba.org>
> * BUG 9272: 'net ads join' does not provide AES keys in host keytab.
>
>
> o David Disseldorp <ddiss at samba.org>
> * BUG 9125: Revert "s3-winbindd: make sure we obey the -n switch
> also for samlogon cache access" and describe samlogon cache caveat for
> 'winbindd -n'.
>
>
> o Björn Jacke <bj at sernet.de>
> * BUG 7472: Check for dn_expand also in libinet.
> * BUG 9339: Build and quota fixes.
>
>
> o Volker Lendecke <vl at samba.org>
> * BUG 9208: Cannot migrate files with inheritance flags to share
> on top of
> NFSv4 filesystem.
> * BUG 9352: dsdb: Simplify DsCrackNameOneFilter a bit.
>
>
> o Stefan Metzmacher <metze at samba.org>
> * BUG 8620: Read ACL are not enabled by default on DS.
> * BUG 9175: Add smbXcli_session_set_disconnect_expired().
> * BUG 9341: Fix SMBD_SMB2_NUM_IOV_PER_REQ check for sendfile().
> * BUG 9359: Optimization needed for SMB2 performance sensitive workloads.
> * BUG 9360: SMB1 tree connect time is wrong.
>
>
> o Ricky Nance <ricky.nance at weaubleau.k12.mo.us>
> * BUG 9339: Build and quota fixes.
>
>
> o Rusty Russell <rusty at rustcorp.com.au>
> * BUG 9339: Build and quota fixes.
>
>
> o Christof Schmitt <christof.schmitt at us.ibm.com>
> * BUG 9347: winbind: Extend wbcAuthenticateUserEx to provide PAC.
>
>
> o Andreas Schneider <asn at samba.org>
> * BUG 9326: Fix 'net ads join' message for the dns domain.
> * BUG 9336: Add NetworkManager dispatcher script for Winbind.
> * BUG 9339: Build and quota fixes.
>
>
> o Jelmer Vernooij <jelmer at samba.org>
> * BUG 9357: Don't expose more symbols than specified by abi_match
> setting.
>
>
> CHANGES SINCE 4.0.0rc3
> ======================
>
> o Michael Adam <obnox at samba.org>
> * BUG 9304: Remove unused sessionid.tdb and connections.tdb related code.
> * BUG 9319: validate stat(2) information before reconnect durable
> handles.
>
>
> o Jeremy Allison <jra at samba.org>
> * BUG 9190: Fix regression (change in behavior) of default acl masks.
> Remove "security mask", "force security mode", "directory
> security mask"
> "force directory" and "security mode" parameters.
> * BUG 9329: Directory listing with SeBackup can crash smbd.
>
>
> o Andrew Bartlett <abartlet at samba.org>
> * BUG 9295: Assert that auth_domain, auth_builtin, auth_sam, auth_winbind
> are builtin.
> * BUG 9322: Backport ldb version update.
>
>
> o Björn Baumbach <bb at sernet.de>
> * BUG 9190: docs: Fix opening and ending tag mismatch: para.
>
>
> o Gregor Beck <gbeck at sernet.de>
> * BUG 9304: Remove unused sessionid.tdb and connections.tdb related code.
>
>
> o David Disseldorp <ddiss at suse.de>
> * BUG 8564: Fix segfault in pam_sm_authenticate().
>
>
> o Stefan Metzmacher <metze at samba.org>
> * BUG 9184: Fix loop in tdgram_bsd_recvfrom().
> * BUG 9209: Fix unitialized padding in smb2_create_blob_push_one().
> * BUG 9304: Remove unused sessionid.tdb and connections.tdb related code.
> * BUG 9309: Avoid a level 0 DEBUG if tstream_npa_connect_recv fails.
> * BUG 9318: Fix write time updates for durable handles.
>
>
> o Andreas Schneider <asn at samba.org>
> * BUG 9295: Build standard auth modules as internal modules.
> * BUG 9301: Move 'smbprint' to a common location.
>
>
> o Jelmer Vernooij <jelmer at samba.org>
> * BUG 9274: Add documentation and selftest fixes.
>
>
> CHANGES SINCE 4.0.0rc2
> ======================
>
> o Jeremy Allison <jra at samba.org>
> * BUG 8966: Fix 'net rpc share allowedusers' to work with 2008r2.
> * BUG 9209: Parse of invalid SMB2 create blob can cause smbd crash.
> * BUG 9214: Bad user supplied SMB2 credit value can cause smbd to call
> smb_panic.
> * BUG 9222: Document that signing cannot be disabled for SMB2 by design.
>
>
> o Andrew Bartlett <abartlet at samba.org>
> * BUG 9235: Update Samba3-HOWTO Collection.
> * BUG 9271: samba-tool: Skip chown in sysvolreset when it would fail on
> a GID.
> * BUG 9274: Update Samba3-HOWTO Collection.
>
>
> o Björn Baumbach <bb at sernet.de>
> * BUG 9235: Fix opening and ending tag mismatch in Samba3-HOWTO.
> * BUG 9271: Fix typos in samba_backup.
> * BUG 9274: Add delete_lost option to vfs_streams_depot.8.
>
>
> o Kai Blin <kai at samba.org>
> * BUG 9225: Fix return code for deleted DNS records.
> * BUG 8878: Time out UDP requests after DNS_REQUEST_TIMEOUT seconds.
>
>
> o Günther Deschner <gd at samba.org>
> * BUG 9177: pam_winbind: Match more return codes when wbcGetPwnam has
> failed.
>
>
> o David Disseldorp <ddiss at samba.org>
> * BUG 9269: Fix 64bit-portability-issue.
>
>
> o Björn Jacke <bj at sernet.de>
> * BUG 5670: Apply some Solaris packaging fixes.
> * BUG 8107: Fix poll replacement to become a msleep replacement.
> * BUG 8344: Fix --with(out)-sendfile-support option handling.
>
>
> o Volker Lendecke <vl at samba.org>
> * BUG 9223: Fix uninitialized variable in the cldap server.
> * BUG 9268: Make tdb robust against improper CLEAR_IF_FIRST restart.
>
>
> o Stefan Metzmacher <metze at samba.org>
> * BUG 9271: Several samba-tool fixes.
> * BUG 9196: Don't take 'state->te' as indication for "was_deferred".
>
>
> o Matthieu Patou <mat at matws.net>
> * BUG 9240: Remove unused variable in DNS server.
> * BUG 9252: Preliminary tests for dcpromo in Windows 2012 fails with
> Samba DC.
> * BUG 9253: Crackname returns a dns domain name even if there is
> no cracked
> SID.
> * BUG 9255: Getncchanges with exop for repl_obj returns highest_usn.
> * BUG 9256: Getncchanges with exop for repl_obj_with_secrets
> should always
> be allowed for RWDC.
> * BUG 9257: LDAP server has at least one un-initialized variable.
> * BUG 9258: LDAP server ignore configuration values set in the
> database for
> timeout.
> * BUG 9259: rodc join fails complaining that it can't find a RWDC.
> * BUG 9260: kccdrs_replica_get_info returns invalid level when non
> supported should be returned.
> * BUG 9261: ds_replica_sync fails when specifying a name and not a guid.
> * BUG 9264: getncchanges returns invalid_parameters when it should return
> bad_nc.
> * BUG 9254: DsExecuteKCC returns wrong error code if taskid != 0.
> * BUG 9265: Bind dlz fails to start if there is a trustedanchors zone.
>
>
> o Rusty Russell <rusty at rustcorp.com.au>
> * BUG 9268: Make tdb robust against shrinking tdbs.
>
>
> o Andreas Schneider <asn at samba.org>
> * BUG 8769: Fix RAW printing for normal users.
> * BUG 9112: Increase debug level for info that the db is empty.
> * BUG 9244: Build pam_smbpass module only if enabled.
> * BUG 9245: Make sure the registry is set up before we init printing.
> * BUG 9276: Add config for systemd-tmpfiles.
> * BUG 9280: Add support for reloading systemd services.
>
>
> o Karolin Seeger <kseeger at samba.org>
> * BUG 7826: Remove link to Using Samba.
> * BUG 8802: Add basic manpages for 'samba' and 'samba-tool'.
> * BUG 9165: Fix makerpms.sh on RHEL.
> * BUG 9243: Remove duplicate synonym min protocol.
> * BUG 9271: Several samba-tool fixes.
>
>
> o Jelmer Vernooij <jelmer at samba.org>
> * BUG 9243: Add basic documentation for 'server min protocol'.
> * BUG 9271: Several samba-tool fixes.
> * BUG 9274: Add documentation for several parameters.
>
>
> o Matthias Dieter Wallnöfer <mdw at samba.org>
> * BUG 9183: Introduce the wildcard binding feature to allow DNS
> to listen on
> localhost.
>
>
> CHANGES SINCE 4.0.0rc1
> ======================
>
> o Michael Adam <obnox at samba.org>
> * BUG 9173: Make the SMB2 compound request create/delete_on_close/
> close work as Windows.
>
>
> o Jeremy Allison <jra at samba.org>
> * BUG 9161: Re-add the vfs_Chdir() cache.
> * BUG 9189: SMB2 Create doesn't return correct MAX ACCESS access mask in
> blob.
> * BUG 9213: Bad ASN.1 NegTokenInit packet can cause invalid free.
>
>
> o Christian Ambach <ambi at samba.org>
> * BUG 9162: Fix the build of the GPFS VFS module.
> * BUG 9197: Only do 'printing_subsystem_update' when printing is enabled.
>
>
> o Andrew Bartlett <abartlet at samba.org>
> * BUG 9228: Fix build on systems without ldap development headers.
>
>
> o Alexander Bokovoy <ab at samba.org>
> * BUG 9157: Cleanup idmap_ldap build dependencies.
> * BUG 9228: Make smbldaphelper subsystem an internal library.
> * BUG 9229: Fix build of winbindd- and krb5 locator-related manpages.
>
>
> o Sumit Bose <sbose at redhat.com>
> * BUG 9185: Allow DNS resolution of trusted domains if DNS name is
> available.
>
>
> o Ira Cooper <ira at samba.org>
> * BUG 9162: Fix build on Illumos/Solaris using '--with-acl'.
> * BUG 9173: Compound requests should continue processing.
>
>
> o Günther Deschner <gd at samba.org>
> * BUG 9185: Winbind cannot resolve AD DC in a different subnet.
>
>
> o Björn Jacke <bj at sernet.de>
> * BUG 9162: Fix the build of the ACL VFS modules.
> * BUG 9172: Fix reporting of gfs2 quotas.
>
>
> o Volker Lendecke <vl at samba.org>
> * BUG 9217: CreateFile with FILE_DIRECTORY_FILE can create directories
> on read-only shares.
>
>
> o Vladimir Marek <Vladimir.Marek at Oracle.COM>
> * BUG 9192: Fix service control for non-internal services.
>
>
> o Stefan Metzmacher <metze at samba.org>
> * BUG 9173: Make the SMB2 compound request create/delete_on_close/
> close work as Windows.
> * BUG 9184: Fix receiving of UDP packets from 0 bytes.
> * BUG 9191: Release the share mode lock before calling exit_server().
> * BUG 9193: Fix usage of invalid memory in smb2_signing_check_pdu().
> * BUG 9194: Disallow '--prefix=/usr' and '--prefix=/usr/local' without
> '--enable-fhs'.
> * BUG 9198: Fix RHEL-CTDB packaging.
>
>
> o Matthieu Patou <mat at matws.net>
> * BUG 9199: Fix usage of "panic action".
> * BUG 9233: Fix a non handled memory out of memory.
>
>
> o Andreas Schneider <asn at samba.org>
> * BUG 8632: Fix builtin forms order to match Windows again.
> * BUG 9159: Fix generating idmap manpages.
> * BUG 9218: Don't segfault if user specified ports out for range.
> * BUG 9231: Fix NT_STATUS_IO_TIMEOUT during slow import of printers into
> registry.
>
>
> #######################################
> Reporting bugs & Development Discussion
> #######################################
>
> Please discuss this release on the samba-technical mailing list or by
> joining the #samba-technical IRC channel on irc.freenode.net.
>
> If you do report problems then please try to send high quality
> feedback. If you don't provide vital information to help us track down
> the problem then you will probably be ignored. All bug reports should
> be filed under the Samba 4.0 product in the project's Bugzilla
> database (https://bugzilla.samba.org/).
>
>
> ======================================================================
> == Our Code, Our Bugs, Our Responsibility.
> == The Samba Team
> ======================================================================
>
> ================
> Download Details
> ================
>
> The uncompressed tarballs and patch files have been signed
> using GnuPG (ID 6568B7EA). The source code can be downloaded
> from:
>
> http://download.samba.org/samba/ftp/stable/
>
> The release notes are available online at:
>
> http://www.samba.org/samba/history/samba-4.0.0.html
>
> Binary packages will be made available on a volunteer basis from
>
> http://download.samba.org/samba/ftp/Binary_Packages/
>
> Our Code, Our Bugs, Our Responsibility.
> (https://bugzilla.samba.org/)
>
> --Enjoy
> The Samba Team
More information about the samba-technical
mailing list