[Samba] Samba 3.0.6 Available for Download

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

(Samba goes for the gold!)

This is the latest stable release of Samba. This is the version
that production Samba servers should be running for all
current bug-fixes.  There have been several issues fixes since
the 3.0.4/5 release and new features have been added as well.
See the "Changes" section of the release notes for details
on exact updates.

Common bugs fixed in 3.0.6 include:

  o Schannel failure in winbindd.
  o Numerous memory leaks.
  o Incompatibilities between the 'write list' and 'force user'
    smb.conf options.
  o Premature optimization of the open_directory() internal
    function that broke tools such as the ArcServe backup
    agent, Macromedia HomeSite, and Robocopy.
  o Corrupt workgroup names in nmbd's browse.dat.
  o Sharing violation errors commonly seen when opening
    when serving Microsoft Office documents from a Samba
    file share.
  o Browsing problems caused by an apostrophe (') in the
    computer's description field.
  o Problems creating special file types from UNIX CIFS
    clients and enabling 'unix extensions'.
  o Fix stalls in smbd caused by inaccessible LDAP servers.
  o Fix issues in the password lockout feature.

New features introduced in this release include:

  o Support symlinks created by CIFS clients which
    can be followed on the server.
  o Using a cups server other than localhost.
  o Maintaining the service principal entry in the system
    keytab for integration with other kerberized services.
    Please refer to the 'use kerberos keytab' entry in
    smb.conf(5).  When using the heimdal kerberos libraries,
    you must also specify the following in /etc/krb5.conf:
    [libdefaults]
       default_keytab_name = FILE:/etc/krb5.keytab
  o Support for maintaining individual printer names
    stored separately from the printer's sharename.
  o Support for maintaining user password history.
  o Support for honoring the logon times for user in a
    Samba domain.


smb.conf changes
- ----------------

    Parameter Name              Action
    --------------              ------
    cups server                 New
    defer sharing violations    New
    force unknown acl user      New
    ldap timeout                New
    printcap cache time         New
    use kerberos keytab         New


- --------------------------------------------
unix extensions = yes (default) and symlinks
- --------------------------------------------

Beginning with Samba 3.0.6pre1 (formerly known as 3.0.5pre1), clients
supporting the UNIX extensions to the CIFS protocol can create symlinks to
absolute paths which will be **followed** by the server.  This
functionality has been requested in order to correctly support certain
applications when the user's home directory is mounted using some type of
CIFS client (e.g. the cifsvfs in the Linux 2.6 kernel).

If this behavior is not acceptable for your production environment you can
set 'wide links = no' in the specific share declaration in the server's
smb.conf.  Be aware that disabling wide link support out of a share in
Samba may impact the server's performance due to the fact that smbd will
now have to check each path additional times before traversing it.

- ------------------------
Password History Support
- ------------------------

The new password history feature allows smbd to check the new password in
password change requests against a list of the user's previous passwords.  
The number of previous passwords to save can be set using pdbedit (4 in
this example):

   root# pdbedit -P "password history" -C 4

When using the ldapsam passdb backend, it is vital to secure the following
attributes from access by non-administrative users:

   * sambaNTPassword
   * sambaLMPassword
   * sambaPasswordHistory

You should refer to your directory server's documentation on how to
implement this restriction.

                  ---------------------------------

The source code can be downloaded from :

  http://download.samba.org/samba/ftp/

The uncompressed tarball and patch file have been signed using GnuPG.  
The Samba public key is available at

  http://download.samba.org/samba/ftp/samba-pubkey.asc

Binary packages are available at

  http://download.samba.org/samba/ftp/Binary_Packages/

The release notes are also available on-line at

  http://www.samba.org/samba/whatsnew/samba-3.0.6.html

Our Code, Our Bugs, Our Responsibility.  (https://bugzilla.samba.org/)

                                  --Enjoy
                                  The Samba Team



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFBJWH3IR7qMdg1EfYRAh9hAJsHzXiZQS7N/jr3ntrSPs/EenWdtQCg7aqB
NKwBoDlzqm4kndX6Q91gPoo=
=yfUw
-----END PGP SIGNATURE-----