[WHATSNEW] Samba AD with MIT Kerberos + Version change
Andreas Schneider
asn at samba.org
Sun Apr 30 07:45:42 UTC 2017
Hi,
as you can build Samba AD with MIT Kerberos now, I propose to change the
version number to 5.0.0.
It is time that we stop talking about Samba 3 and Samba 4.
The attachd patch adds a section for Samba AD with MIT KRB5 to WHATSNEW and
changes the version number.
Review and push much appreciated!
Thanks,
Andreas
-------------- next part --------------
>From 338a3d397c8de278d2f7410434728f234ff5bbdb Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn at samba.org>
Date: Thu, 27 Apr 2017 11:11:53 +0200
Subject: [PATCH 1/3] WHATSNEW: Give the 'strict sync' change a header line
Signed-off-by: Andreas Schneider <asn at samba.org>
---
WHATSNEW.txt | 15 +++++++++------
1 file changed, 9 insertions(+), 6 deletions(-)
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index d9324e7..6226ef5 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -16,12 +16,6 @@ UPGRADING
NEW FEATURES/CHANGES
====================
-The "strict sync" global parameter has been changed from
-a default of "no" to "yes". This means smbd will by default
-obey client requests to synchronize unwritten data in operating
-system buffers safely onto disk. This is a safer default setting
-for modern SMB1/2/3 clients.
-
Authentication and Authorization audit support
----------------------------------------------
@@ -40,6 +34,15 @@ authentication, SMB and RPC authorization is covered, however password
changes are not at this stage, and this support is not currently
backed by a testsuite.
+Parameter changes
+-----------------
+
+The "strict sync" global parameter has been changed from
+a default of "no" to "yes". This means smbd will by default
+obey client requests to synchronize unwritten data in operating
+system buffers safely onto disk. This is a safer default setting
+for modern SMB1/2/3 clients.
+
smb.conf changes
================
--
2.9.3
>From 3ae0b5bcdda9c8be98fb01e87a649c29f5ee7ada Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn at samba.org>
Date: Thu, 27 Apr 2017 11:19:12 +0200
Subject: [PATCH 2/3] WHATSNEW: Add Samba AD with MIT Kerberos
Pair-Programmed-With: Guenther Deschner <gd at samba.org>
Signed-off-by: Andreas Schneider <asn at samba.org>
Signed-off-by: Guenther Deschner <gd at samba.org>
---
WHATSNEW.txt | 27 +++++++++++++++++++++++++++
1 file changed, 27 insertions(+)
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 6226ef5..1c3e0e2 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -16,6 +16,33 @@ UPGRADING
NEW FEATURES/CHANGES
====================
+Samba AD with MIT Kerberos
+--------------------------
+
+After four years of development Samba finally supports compiling and
+running Samba AD with MIT Kerberos. You can enable it using:
+
+ ./configure --with-system-mitkrb5
+
+Samba requires version 1.15.1 of MIT Kerberos to build with AD DC support. The
+feature set is not on par with with the Heimdal build but the most important
+things are working like forest and external trusts. Samba is using the KDC
+binary provided by MIT Kerberos.
+
+Missing features, compared to Heimdal, are:
+ * PKINIT support
+ * S4U2SELF/S4U2PROXY support
+ * RODC support (not fully working with Heimdal either)
+
+The Samba AD process will take care of starting the MIT KDC and it will load a
+KDB (Kerberos Database) driver to access the Samba AD database. When
+provisioning a AD DC using 'samba-tool' it will take care to create a correct
+kdc.conf file for the MIT KDC. Note that the 'samba-tool' will overwrite the
+system kdc.conf by default. It is possible to use a different location during
+provision. You should consult the 'samba-tool' help for and smb.conf manpage
+details.
+
+
Authentication and Authorization audit support
----------------------------------------------
--
2.9.3
>From 0bc741249c4ed59b250f39bd0541fbda73581380 Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn at samba.org>
Date: Thu, 27 Apr 2017 11:20:16 +0200
Subject: [PATCH 3/3] VERSION: Bump version to 5.0.0
We are enterprise ready! :-)
Signed-off-by: Andreas Schneider <asn at samba.org>
---
VERSION | 4 ++--
WHATSNEW.txt | 6 +++---
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/VERSION b/VERSION
index 74fa2cf..7efebdd 100644
--- a/VERSION
+++ b/VERSION
@@ -23,8 +23,8 @@
# SAMBA_VERSION_RELEASE=0 #
# -> "3.0.0" #
########################################################
-SAMBA_VERSION_MAJOR=4
-SAMBA_VERSION_MINOR=7
+SAMBA_VERSION_MAJOR=5
+SAMBA_VERSION_MINOR=0
SAMBA_VERSION_RELEASE=0
########################################################
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 1c3e0e2..0d82bfb 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,12 +1,12 @@
Release Announcements
=====================
-This is the first preview release of Samba 4.7. This is *not*
+This is the first preview release of Samba 5.0. This is *not*
intended for production environments and is designed for testing
purposes only. Please report any defects via the Samba bug reporting
system at https://bugzilla.samba.org/.
-Samba 4.7 will be the next version of the Samba suite.
+Samba 5.0 will be the next version of the Samba suite.
UPGRADING
@@ -112,7 +112,7 @@ free long-lived data on exist should use the NULL talloc context.
KNOWN ISSUES
============
-https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.7#Release_blocking_bugs
+https://wiki.samba.org/index.php/Release_Planning_for_Samba_5.0#Release_blocking_bugs
#######################################
--
2.9.3
More information about the samba-technical
mailing list