4 This is the fourth release condidate of Samba 4.13. This is *not*
5 intended for production environments and is designed for testing
6 purposes only. Please report any defects via the Samba bug reporting
7 system at https://bugzilla.samba.org/.
9 Samba 4.13 will be the next version of the Samba suite.
22 Samba's minimum runtime requirement for python was raised to Python
23 3.5 with samba 4.12. Samba 4.13 raises this minimum version to Python
24 3.6 both to access new features and because this is the oldest version
25 we test with in our CI infrastructure.
27 (Build time support for the file server with Python 2.6 has not
30 wide links functionality
31 ------------------------
33 For this release, the code implementing the insecure "wide links = yes"
34 functionality has been moved out of the core smbd code and into a separate
35 VFS module, vfs_widelinks. Currently this vfs module is implicitly loaded
36 by smbd as the last but one module before vfs_default if "wide links = yes"
37 is enabled on the share (note, the existing restrictions on enabling wide
38 links around the SMB1 "unix extensions" and the "allow insecure wide links"
39 parameters are still in force). The implicit loading was done to allow
40 existing users of "wide links = yes" to keep this functionality without
41 having to make a change to existing working smb.conf files.
43 Please note that the Samba developers recommend changing any Samba
44 installations that currently use "wide links = yes" to use bind mounts
45 as soon as possible, as "wide links = yes" is an inherently insecure
46 configuration which we would like to remove from Samba. Moving the
47 feature into a VFS module allows this to be done in a cleaner way
50 A future release to be determined will remove this implicit linkage,
51 causing administrators who need this functionality to have to explicitly
52 add the vfs_widelinks module into the "vfs objects =" parameter lists.
53 The release notes will be updated to note this change when it occurs.
55 NT4-like 'classic' Samba domain controllers
56 -------------------------------------------
58 Samba 4.13 deprecates Samba's original domain controller mode.
60 Sites using Samba as a Domain Controller should upgrade from the
61 NT4-like 'classic' Domain Controller to a Samba Active Directory DC
62 to ensure full operation with modern windows clients.
64 SMBv1 only protocol options deprecated
65 --------------------------------------
67 A number of smb.conf parameters for less-secure authentication methods
68 which are only possible over SMBv1 are deprecated in this release.
73 The deprecated "ldap ssl ads" smb.conf option has been removed.
78 Parameter Name Description Default
79 -------------- ----------- -------
81 smb2 disable lock sequence checking No
82 domain logons Deprecated no
83 raw NTLMv2 auth Deprecated no
84 client plaintext auth Deprecated no
85 client NTLMv2 auth Deprecated yes
86 client lanman auth Deprecated no
87 client use spnego Deprecated yes
90 CHANGES SINCE 4.13.0rc3
91 =======================
93 o David Disseldorp <ddiss@samba.org>
94 * BUG 14437: build: Toggle vfs_snapper using "--with-shared-modules".
96 o Volker Lendecke <vl@samba.org>
97 * BUG 14465: idmap_ad does not deal properly with a RFC4511 section 4.4.1
100 o Stefan Metzmacher <metze@samba.org>
101 * BUG 14428: PANIC: Assert failed in get_lease_type().
102 * BUG 14465: idmap_ad does not deal properly with a RFC4511 section 4.4.1
106 CHANGES SINCE 4.13.0rc2
107 =======================
109 o Andrew Bartlett <abartlet@samba.org>
110 * BUG 14460: Deprecate domain logons, SMBv1 things.
112 o Günther Deschner <gd@samba.org>
113 * BUG 14318: docs: Add missing winexe manpage.
115 o Christof Schmitt <cs@samba.org>
116 * BUG 14166: util: Allow symlinks in directory_create_or_exist.
118 o Martin Schwenke <martin@meltin.net>
119 * BUG 14466: ctdb disable/enable can fail due to race condition.
122 CHANGES SINCE 4.13.0rc1
123 =======================
125 o Andrew Bartlett <abartlet@samba.org>
126 * BUG 14450: dbcheck: Allow a dangling forward link outside our known NCs.
128 o Isaac Boukris <iboukris@gmail.com>
129 * BUG 14462: Remove deprecated "ldap ssl ads" smb.conf option.
131 o Volker Lendecke <vl@samba.org>
132 * BUG 14435: winbind: Fix lookuprids cache problem.
134 o Stefan Metzmacher <metze@samba.org>
135 * BUG 14354: kdc:db-glue: Ignore KRB5_PROG_ETYPE_NOSUPP also for
138 o Andreas Schneider <asn@samba.org>
139 * BUG 14358: docs: Fix documentation for require_membership_of of
142 o Martin Schwenke <martin@meltin.net>
143 * BUG 14444: ctdb-scripts: Use nfsconf as a last resort get nfsd thread
150 https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.13#Release_blocking_bugs
153 #######################################
154 Reporting bugs & Development Discussion
155 #######################################
157 Please discuss this release on the samba-technical mailing list or by
158 joining the #samba-technical IRC channel on irc.freenode.net.
160 If you do report problems then please try to send high quality
161 feedback. If you don't provide vital information to help us track down
162 the problem then you will probably be ignored. All bug reports should
163 be filed under the Samba 4.1 and newer product in the project's Bugzilla
164 database (https://bugzilla.samba.org/).
167 ======================================================================
168 == Our Code, Our Bugs, Our Responsibility.
170 ======================================================================