1 WHATS NEW IN Samba 3.0 alphaX
2 =============================
5 - 'Winbind Default Domain' support:
6 This allows winbind to supply usernames without a 'DOMAIN\'
7 prefix. Particularly handy for shell and e-mail servers,
8 as well as Unix workstations in NT domains.
9 - Associated cleanups in winbindd and smbd.
10 (Alexander Bokovoy <a.bokovoy@sam-solutions.net> and
12 - Winbind protocol changes for better Squid intergration
13 (current version is 3) (abartlet)
14 - pam_winbind password changing
15 (Samuel Ziegler <sam@xpedion.com>, tpot)
16 - runtime selectable pluggable passdb interface.
18 - 'non unix account' support (abartlet)
19 (This allows machines and even users not to exist
21 - Inital implementation of the WINS replication deamon
23 - Changes for better winbind PDC/BDC failover support
25 - Various Winbind/ADS mode stabilty and flexablity fixes
27 - Mangle names like .bashrc properly (trige)
28 - CIFS UNIX extensions (client and server) (jra)
29 - Universal group support outside smbd (via a cache)
30 (Alexander Bokovoy <a.bokovoy@sam-solutions.net>)
31 - Write cache fixes (jra)
34 - updates to try to get more out-of-the-box compiles
35 (mostly kerberos and ldap stuff) (various)
36 - 'net rpc shutdown' remote shutdown of servers
37 (abartlet, original code from idra)
38 - authentication subsystem rework, including move to
39 new RPC client code (abartlet)
41 - use new client code (abartlet)
42 - change winbind_auth_pam_crap interface for squid's
44 - new interface versioning functionality (abartlet)
45 - cope better when inteface does change (tpot)
46 - better winbind trusted domain code (tpot)
48 - new NTSTAUS -> DOS error map (abartlet)
49 - large user list (> 1500) enumeration (jra)
50 - dmalloc support (mbp)
51 - spoolss changes (tpot)
52 - talloc accounting (mbp)
54 - smbmount trivial fixup (abartlet)
55 - start of new unix extenions to CIFS (jra)
59 - store domain sid on ADS join (tridge)
60 - allow a winbind username on ADS connection (tridge)
63 - fixed fallback to "ads server" option (tridge)
64 - fix ACL failure on HP HFS (jra)
65 - net ads password and net ads chostpass commands (Remus Koos)
66 - fixed valid char array generation (tridge)
67 - fixed QFS_INFO for win98 long filenames (tridge)
68 - added net lookup command (tridge)
69 - fixed map to guest with spnego (tridge)
70 - fixed irix warnings (tridge)
74 - hide unreadable fix using acl fns (jra)
75 - lsa_open_policy cleanup (jfm)
76 - mangled directories fix (jra)
77 - fix error return on bad pipe (jra)
78 - fix homes share with no home dir (tpot)
79 - fixed handling of dead or empty domains in winbindd (tridge)
80 - added talloc torture program (mbp)
81 - talloc debug code (mbp)
82 - added trusted domains to winbindd/ADS (tridge)
83 - fix trusted domains in auth code (tridge)
84 - new gss error handling code (a.bokovoy@sam-solutions.net & tridge)
85 - support mixed ADS/NT4 domains (tridge)
88 - nicer net error messages (tpot)
89 - trust account patches (mimir)
90 - solaris link option update (davecb)
91 - added lsa_query_secobj() server fn (jfm)
92 - spoolss changeid fix (jerry)
93 - domain auth error fix (jmcd)
95 - set filetime on close fix (jra)
96 - allow select of org unit in ads join (tridge)
99 - fixed compile of wb_client.c (tridge)
100 - fixed net time to use localtime (tridge)
101 - net help cleanups (jmcd)
102 - debug level fix (tpot)
103 - utmp string length fixes (monyo)
108 - added "net ads info" to probe basic into on your ads server without
110 - improved some error handling
114 - added "net time zone" command (tridge)
115 - pam_smbpass updates (a.bokovoy@sam-solutions.net)
116 - irix updates (herb)
117 - net rpc join handles existing machine acct (tridge)
121 - added "net time" command (tridge)
122 - allow client tools to specify a hostname of form HOST#xx (tridge)
123 - added wbinfo --set-auth-user (tpot)
124 - added lsaquerysecobj to rpcclient (tpot)
128 - fixed nexus/win9x user list (jfm)
129 - fixed large user/group lists in winbindd (tridge)
130 - fixed gssapi headers in redhat (jmcd)
131 - fixed rap error code handling (jra)
132 - more usermanager rpc calls (jfm)
133 - re-added RAP calls at top level to net command (tridge)
137 - fixed a silly tdb bug in alpha2 that affected internal databases
141 - we no longer use cyrus-sasl for LDAP SASL/gssapi. This makes our ADS
142 code much more robust.
143 - winbindd cache code rewritten to be much more efficient. It also
144 copes much better with server outages.
145 - jfm implemented full group mapping and smb.conf option 'domain admin
146 group' is now gone. Consult the GROUP-MAPPING-HOWTO.txt to know how
147 to gain back administrator rights.
148 - docs update started
149 - numerous small bugfixes
153 - winbindd now uses LDAP and works correctly with an ADS server in
155 - XFS quotas code on Linux
156 - group mapping code from JFM
157 - "net rpc join" command replaces smbpasswd -j
158 - fixed winbind initgroups
162 This is a pre-release of Samba 3.0 alpha0. This is NOT a stable
163 release. Use at your own risk.
165 The purpose of this alpha release is to get wider testing of the major
166 new pieces of code in the current Samba 3.0 development tree. We are
167 planning on ceasing development on the 2.2.x release of Samba very
168 shortly and after that we will be concentrating on Samba 3.0. To
169 reduce the time before the final Samba 3.0 release we need as many
170 poeple as possible to start testing these alpha releases, and
171 hopefully giving us some high quality feedback on what needs fixing.
173 Note that Samba 3.0 is not anywhere near feature complete yet. There
174 is a lot more coding we have planned, but unless we get what we have
175 done already more widely tested we will have a hard time doing a
176 stable release in a reasonable time frame.
178 This release is also missing major pieces of documentation, and there
179 are many parts of the docs that have not been updated to reflect the
180 new options and features in 3.0.
185 - Active Directory support. This release is able to join a ADS realm
186 as a member server and authenticate users using
187 LDAP/kerberos. Please read ADS-HOWTO.txt in the release for a very
188 rough guide on how to set this up.
190 - Unicode support. Samba will now negotiate unicode on the wire and
191 interally there is now a much better infrastructure for multi-byte
192 and unicode character sets. You may need the "dos charset", "unix
193 charset" and "display charset" options. The unicode support is not
196 - New authentication system. The internal authentication system has
197 been almost completely rewritten. Most of the changes are internal,
198 but the new auth system is also very configurable. Not documented
201 - new filename mangling system. The filename mangling system has been
202 completely rewritten. An internal database now stores mangling maps
203 persistantly. This needs lots of testing.
205 - new "net" command. A new "net" command has been added. It is
206 somewhat similar to the "net" command in windows. Eventually we plan
207 to replace a bunch of other utilities (such as smbpasswd) with
208 subcommands in "net", at the moment only a few things are
211 - Samba now negotiates NT-style status32 codes on the wire. This
212 improves error handling a lot.
214 - better w2k printing support. The support for printing from win2000
215 clients has improved greatly.
217 Plus lots of other changes!
219 Note that many new features are not documented. Don't let this stop
220 you from using Samba 3.0. It is particularly important that the basic
221 file/print serving abilities of Samba 3.0 are widely tested to ensure
222 that we have not broken any of the basic functionality. As we do more
223 alpha releases we will start to document the new features.
226 Reporting bugs & Development Discussion
227 ---------------------------------------
229 Please discuss this release on the samba-technical mailing list or by
230 joining the #samba-technical IRC channel on irc.openprojects.net
232 If you do report problems then please try to send high quality
233 feedback. If you don't provide vital information to help us track down
234 the problem then you will probably be ignored.