4 This is the first pre release of Samba 4.14. This is *not*
5 intended for production environments and is designed for testing
6 purposes only. Please report any defects via the Samba bug reporting
7 system at https://bugzilla.samba.org/.
9 Samba 4.13 will be the next version of the Samba suite.
22 This release extends Samba to support Group Policy functionality for Winbind
23 clients. Active Directory Administrators can set policies that apply Sudoers
24 configuration, and cron jobs to run hourly, daily, weekly or monthly.
26 To enable the application of Group Policies on a client, set the global
27 smb.conf option 'apply group policies' to 'yes'. Policies are applied on an
28 interval of every 90 minutes, plus a random offset between 0 and 30 minutes.
30 Policies applied by Samba are 'non-tattooing', meaning that changes can be
31 reverted by executing the `samba-gpupdate --unapply` command. Policies can be
32 re-applied using the `samba-gpupdate --force` command.
33 To view what policies have been or will be applied to a system, use the
34 `samba-gpupdate --rsop` command.
36 Administration of Samba policy requires that a Samba ADMX template be uploaded
37 to the SYSVOL share. The samba-tool command `samba-tool gpo admxload` is
38 provided as a convenient method for adding this policy. Once uploaded, policies
39 can be modified in the Group Policy Management Editor under Computer
40 Configuration/Policies/Administrative Templates.
45 * The NAT gateway and LVS features now uses the term "leader" to refer
46 to the main node in a group through which traffic is routed and
47 "follower" for other members of a group. The command for
48 determining the leader has changed to "ctdb natgw leader" (from
49 "ctdb natgw master"). The configuration keyword for indicating that
50 a node can not be the leader of a group has changed to
51 "follower-only" (from "slave-only"). Identical changes were made
54 * Remove "ctdb isnotrecmaster" command. It isn't used by CTDB's
55 scripts and can be checked by users with "ctdb pnn" and "ctdb
59 NT4-like 'classic' Samba domain controllers
60 -------------------------------------------
62 Samba 4.13 deprecates Samba's original domain controller mode.
64 Sites using Samba as a Domain Controller should upgrade from the
65 NT4-like 'classic' Domain Controller to a Samba Active Directory DC
66 to ensure full operation with modern windows clients.
68 SMBv1 only protocol options deprecated
69 --------------------------------------
71 A number of smb.conf parameters for less-secure authentication methods
72 which are only possible over SMBv1 are deprecated in this release.
77 The deprecated "ldap ssl ads" smb.conf option has been removed.
82 Parameter Name Description Default
83 -------------- ----------- -------
85 domain logons Deprecated no
86 raw NTLMv2 auth Deprecated no
87 client plaintext auth Deprecated no
88 client NTLMv2 auth Deprecated yes
89 client lanman auth Deprecated no
90 client use spnego Deprecated yes
97 https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.14#Release_blocking_bugs
100 #######################################
101 Reporting bugs & Development Discussion
102 #######################################
104 Please discuss this release on the samba-technical mailing list or by
105 joining the #samba-technical IRC channel on irc.freenode.net.
107 If you do report problems then please try to send high quality
108 feedback. If you don't provide vital information to help us track down
109 the problem then you will probably be ignored. All bug reports should
110 be filed under the Samba 4.1 and newer product in the project's Bugzilla
111 database (https://bugzilla.samba.org/).
114 ======================================================================
115 == Our Code, Our Bugs, Our Responsibility.
117 ======================================================================