1 ==============================
2 Release Notes for Samba 3.2.0
4 ==============================
6 This is the first stable release of Samba 3.2.0.
8 Please be aware that Samba is now distributed under the version 3
9 of the new GNU General Public License. You may refer to the COPYING
10 file that accompanies these release notes for further licensing details.
12 Major enhancements in Samba 3.2.0 include:
15 o Use of IDL generated parsing layer for several DCE/RPC
17 o Removal of the 1024 byte limit on pathnames and 256 byte limit on
18 filename components to honor the MAX_PATH setting from the host OS.
19 o Introduction of a registry based configuration system.
20 o Improved CIFS Unix Extensions support.
21 o Experimental support for file serving clusters.
22 o Support for IPv6 in the server, and client tools and libraries.
23 o Support for storing alternate data streams in xattrs.
24 o Encrypted SMB transport in client tools and libraries, and server.
25 o Support for Vista clients authenticating via Kerberos.
27 Winbind and Active Directory Integration:
28 o Full support for Windows 2003 cross-forest, transitive trusts
29 and one-way domain trusts.
30 o Support for userPrincipalName logons via pam_winbind and NSS
32 o Expansion of nested domain groups via NSS calls.
33 o Support for Active Directory LDAP Signing policy.
34 o New LGPL Winbind client library (libwbclient.so).
35 o Support for establishing interdomain trust relationships with
39 o New NetApi library for domain join related queries (libnetapi.so)
40 and example GTK+ Domain join gui.
41 o New client and server support for remotely joining and unjoining
43 o Support for joining into Windows 2008 domains.
46 o New ldb backend for local group mapping tables
47 o Raised level of security defaults for authentication operations.
48 o New NetApi library for user account related queries.
52 o Inclusion of an HTML version of the 3rd edition of "Using Samba"
53 from O'Reilly Publishing.
56 Now Licensed under the GNU GPLv3
57 ================================
59 The Samba Team has adopted the Version 3 of the GNU General Public
60 License for the 3.2 and later releases. The GPLv3 is the updated
61 version of the GPLv2 license under which Samba is currently
62 distributed. It has been updated to improve compatibility with other
63 licenses and to make it easier to adopt internationally, and is an
64 improved version of the license to better suit the needs of Free
65 Software in the 21st Century.
67 The original announcement is available on-line at
69 http://news.samba.org/announcements/samba_gplv3/
72 New Security Defaults for Authentication
73 ========================================
75 Support for LanMan passwords is now disabled in both client and server
76 applications. Additionally, clear text authentication requests are
77 disabled by default in client utilities such as smbclient and all
78 libsmbclient based applications. This will affect connection both
79 to and from hosts running DOS, Windows 9x/ME, and OS/2. Please refer
80 to the "Changes" section for details on the exact parameters that were
84 Registry Configuration Backend
85 ==============================
87 Samba is now able to use a registry based configuration backed to
88 supplement smb.conf settings. This feature may be enabled by setting
89 "config backend = registry" in the [global] section of smb.conf for a
90 registry only configuration, or by specifying "include = registry" to
91 include global options from registry for a mixed setup.
93 The new parameter "registry shares = yes" in the [global] section of
94 smb.conf can be used to activate share definitions from registry.
95 These shares are loaded on demand by the server. Registry shares are
96 automatically activated by the global registry options above.
98 The configuration stored in registry can be conveniently managed using
99 the "net conf" command.
101 More information may be obtained from the smb.conf(5) and net(8) man
108 Both the Python bindings and the libmsrpc shared library have been
109 removed from the tree due to lack of an official maintainer.
111 As smbfs is no longer supported in current kernel versions, smbmount has
112 been removed in this Samba version. Please use cifs (mount.cifs) instead.
113 See examples/scripts/mount/mount.smbfs as an example for a wrapper which
114 calls mount.cifs instead of smbmount/mount.smbfs.
117 Modified API for libsmbclient
118 ==============================================================================
120 Maintaining ABI compatibility for libsmbclient has become increasingly
121 difficult to accomplish, while also keeping the code organization such that it
122 is easily readable. Towards the goal of maintaining ABI compatibility and
123 also keeping the code easy to maintain and enhance, the API has been enhanced.
124 In particular, the fields in the SMBCCTX context structure are no longer
125 intended to be read/write by the user, and are marked as deprecated. An
126 application that previously accessed the members of the SMBCCTX context
127 structure will now encounter warnings if recompiled. This is intentional, to
128 encourage implementation of the small changes required for the new interface.
129 The number of changes is expected to be quite small for the vast majority of
130 applications, and no changes need be made for many applications. The changes
131 required for KDE (konqueror) to conform to the new interface, for example, are
132 only four lines in only one file.
134 Instead of the application manually changing or reading values in the context
135 structure, there are now setter and getter functions for each configurable
136 member in that structure. Similarly, the smbc_option_get() and
137 smbc_option_set() functions are deprecated in favor of the setter/getter
138 interface. The setters and getters are all documented in libsmbclient.h
139 under these comment blocks:
141 Getters and setters for CONFIGURATION
142 Getters and setters for OPTIONS
143 Getters and setters for FUNCTIONS
144 Callable functions for files
145 Callable functions for directories
146 Callable functions applicable to both files and directories
148 Example changes that may be required to eliminate "deprecated" warnings:
150 /* Set the debug level */
153 smbc_setDebug(context, 99);
155 /* Specify the authentication callback function */
156 context->callbacks.auth_fn = auth_smbc_get_data;
158 smbc_setFunctionAuthData(context, auth_smbc_get_data);
160 /* Specify the new-style authentication callback with context parameter */
161 smbc_option_set("auth_function", auth_smbc_get_data_with_ctx);
163 smbc_setFunctionAuthDataWithContext(context, auth_smbc_get_data_with_ctx);
165 /* Set kerberos flags */
166 context->flags = (SMB_CTX_FLAG_USE_KERBEROS |
167 SMB_CTX_FLAG_FALLBACK_AFTER_KERBEROS);
169 smbc_setOptionUseKerberos(context, 1);
170 smbc_setOptionFallbackAfterKerberos(context, 1);
175 ######################################################################
182 Parameter Name Description Default
183 -------------- ----------- -------
184 administrative share New No
185 client lanman auth Changed Default No
186 client ldap sasl wrapping New plain
187 client plaintext auth Changed Default No
189 cluster addresses New ""
190 config backend New file
193 lanman auth Changed Default No
194 ldap connection timeout New 2
195 ldap debug level New 0
196 ldap debug threshold New 10
198 min receive file size New 0
199 open files database hashsize Removed
201 registry shares New No
203 winbind expand groups New 1
204 winbind rpc only New No
206 New special meaning of "include = registry".
209 Changes since 3.2.0rc2:
210 -----------------------
213 o Jeremy Allison <jra@samba.org>
214 * BUG 5531: Fix conversion of ns units when converting
215 from nttime to timespec.
216 * BUG 5533: Fix handling of workgroup names containing a '.' in Winbindd.
217 * BUG 5551: Fix group enumeration with 'wbinfo -g' on PDCs.
218 * BUG 5555: Fix setting of the password last set field during domain joins.
219 * Fix gcc warnings at -O3.
222 o Michael Adam <obnox@samba.org>
223 * BUG 5548: Fix segfaults in handle_include with %m macro expansion.
224 * Add several tests to the testsuite.
227 o Volker Lendecke <vl@samba.org>
228 * BUG 5500: Add missing become_root to enable access to LDAP DB.
229 * Fix coverity IDs 464, 474.
230 * Fix an uninitialized variable found by the IBM checker.
231 * Fix group parsing in libwbclient's copy_group_entry().
232 * Fix max_fd calculation in event_loop_once.
233 * Fix warnings on Fedory Core 9.
234 * Fix several memleaks.
235 * Fix a segfaults in wbcLookupRids.
236 * Fix a segfault in clitar.
237 * Fix the build on FreeBSD 4.6.2 and Darwin.
238 * Fix a double-closedir() in form_junctions().
239 * Fix a crash in _dfs_Enum.
240 * Fix a segfault in rpcclient adddriver.
241 * Fix valgrind errors in _spoolss_addprinterdriver.
244 o Günther Deschner <gd@samba.org>
245 * BUG 5542: Fix empty passwords of samsync.
248 o William Jojo <jojowil@hvcc.edu>
249 * Fix several AIX build issues.
250 * Add -brtl to the AIX linker flags.
253 o Andreas Schneider <anschneider@suse.de>
254 * Add documentation for kerberos support in libsmbclient.
255 * Add krb5 support for the testbrowse example.
258 o John H Terpstra <jht@samba.org>
260 * Add documentation for TDB file.
263 o Bo Yang <boyang@novell.com>
264 * Fix update of cached credentials during password change in pam_winbind.
267 o Christoph Zauner <christoph.zauner@sernet.de>
268 * Fix several typos in the man pages and the Samba3 HowTo Collection.
272 ######################################################################
273 Reporting bugs & Development Discussion
274 #######################################
276 Please discuss this release on the samba-technical mailing list or by
277 joining the #samba-technical IRC channel on irc.freenode.net.
279 If you do report problems then please try to send high quality
280 feedback. If you don't provide vital information to help us track down
281 the problem then you will probably be ignored. All bug reports should
282 be filed under the Samba 3.2 product in the project's Bugzilla
283 database (https://bugzilla.samba.org/).
286 ======================================================================
287 == Our Code, Our Bugs, Our Responsibility.
289 ======================================================================