1 =================================
2 Release Notes for Samba 3.4.0pre2
4 =================================
7 This is the second preview release of Samba 3.4. This is *not*
8 intended for production environments and is designed for testing
9 purposes only. Please report any defects via the Samba bug reporting
10 system at https://bugzilla.samba.org/.
13 Major enhancements in Samba 3.4.0 include:
14 ------------------------------------------
17 o Samba4 and Samba3 sources are included in the tarball
19 Authentication Changes:
20 o Changed the way smbd handles untrusted domain names given during user
24 o Various fixes including printer change notificiation for Samba spoolss
28 o The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog
29 and spoolss) were replaced by autogenerated code based on PIDL.
30 o Samba3 and Samba4 do now share a common tevent library.
31 o The code has been cleaned up and the major basic interfaces are shared with
33 o An asynchronous API has been added.
36 o Parameter syntax made more consistent.
41 On the way towards a standalone Samba AD domain controller, Samba3 and Samba4
42 branches can be built as "merged" build. That's why Samba3 and Samba4 sources
43 are included in the tarball. The merged build is possible in Samba 3.4.0, but
44 disabled by default. To learn more about the merged build,
45 please see http://wiki.samba.org/index.php/Franky.
47 According to this one, there is no "source" directory included in the tarball at
48 all. Samba3 sources are located in "source3", Samba4 sources are located in
49 "source4". The libraries have been moved to the toplevel directory.
51 To build plain Samba3, please change to "source3" and start the build as usual.
52 To build Samba4 as well, please use the "--enable-merged-build" configure
56 Authentication Changes
57 ======================
59 Previously, when Samba was a domain member and a client was connecting using an
60 untrusted domain name, such as BOGUS\user smbd would remap the untrusted
61 domain to the primary domain smbd was a member of and attempt authentication
62 using that DOMAIN\user name. This differed from how a Windows member server
63 would behave. Now, smbd will replace the BOGUS name with it's SAM name. In
64 the case where smbd is acting as a PDC this will be DOMAIN\user. In the case
65 where smbd is acting as a domain member server this will be WORKSTATION\user.
66 Thus, smbd will never assume that an incoming user name which is not qualified
67 with the same primary domain, is part of smbd's primary domain.
69 While this behavior matches Windows, it may break some workflows which depended
70 on smbd to always pass through bogus names to the DC for verification. A new
71 parameter "map untrusted to domain" can be enabled to revert to the legacy
78 The spoolss subsystem was replaced by autogenerated code based on PIDL. That fixes
79 several printing issues including printer change notificiation on Samba print
80 servers and will stabilize the printing functionality generally.
81 The support for spoolss printing with Windows Vista has been improved.
87 The remaining hand-marshalled DCE/RPC services (ntsvcs, svcctl, eventlog and
88 spoolss) were replaced by autogenerated code based on PIDL.
89 So Günther Deschner finally corrected one of the biggest mistakes in the
90 development of Samba: Hand-marshalled RPC stubs.
94 Samba3 and Samba4 do now share a common tevent library for fd and timer events.
96 The code has been cleaned up and Samba3 and Samba4 do share the major basic
97 interfaces now. That is why the libraries were moved to the toplevel directory.
98 That is one of the first steps to share code and minimize the gap between
101 An asynchronous API has been added.
107 The net command now accepts the common command line parameters most other Samba
108 command line utilities use, with a couple of remaining differences:
110 -l still gives long output for net commands supporting the --long flag. This was
111 more useful than the common --log-base parameter.
113 -i still tells net to read data from stdin (like --stdin) instead of toggling
114 the common --scope flag.
116 -S still tells net the server to connect to (like --server) instead of
117 negotiating the common --signing flag. As -S is probably used by most scripts
118 doing net rpc commands, this would have been a high-impact change for little
121 This change was mainly done to unify the authentification options. Here, one
122 flag changed it's meaning and one useful flag was added.
124 -N used to be the short version of --ntname. It now matches the Samba default of
125 --no-pass. Use this to stop net from prompting for a password if you want
126 anonymous authentication.
128 -A --authentication-file now takes an authentication file with the username and
129 password you want net to use, avoiding a password prompt as with plain -U user
130 or having to give a password on the command line as in -U user%pass.
132 Last but not least net now always falls back to your local unix username if no
133 -U is specified and a username is needed. net rpc commands will now prompt for a
134 password unless one is specified using either -U user%pass or -A auth_file
136 ######################################################################
143 Parameter Name Description Default
144 -------------- ----------- -------
146 access based share enum New No
147 dedicated keytab file New ""
148 kerberos method New default
149 map untrusted to domain New No
150 max open files Changed Default auto detected
151 perfcount module New ""
152 use kerberos keytab Removed
158 net eventlog Import/dump/export native win32 eventlog files.
159 net rpc service create Create a new service.
160 net rpc service delete Delete an existing service.
163 New configure options
164 ---------------------
166 --enable-external-libtalloc Enable external talloc
167 --enable-merged-build Build Samba 4 as well
168 --enable-gnutls Turn on gnutls support
169 --with-statedir=DIR Where to put persistent state files
170 --with-cachedir=DIR Where to put temporary cache files
171 --with-ncalprcdir=DIR Where to put ncalrpc sockets
172 --with-selftest-shrdir=DIR The share directory that make test will be run
174 --with-selftest-custom-conf=PATH
175 An optional custom smb.conf that is included in
176 the server smb.conf during make test
177 --with-wbclient Use external wbclient
178 --with-included-popt Use bundled popt library, not from system
179 --with-libiconv=BASEDIR Use libiconv in BASEDIR/lib and BASEDIR/include
180 --with-sqlite3 SQLITE3 backend support
181 --with-pthreads Include pthreads
182 --with-setproctitle Search for setproctitle support
189 o Steven Danneman <steven.danneman@isilon.com>
190 * Change the way smbd handles untrusted domain names given during user
194 o Guenther Deschner <gd@samba.org>
195 * Replace the hand-marshalled DCE/RPC services ntsvcs, svcctl, eventlog
196 and spoolss by autogenerated code based on PIDL.
197 * Fix several printing issues and improve support for printer change
199 * Add 'net eventlog'.
202 o Volker Lendecke <vl@samba.org>
203 * Add asynchronous API.
206 o Stefan Metzmacher <metze@samba.org>
207 * Make Samba3 and Samba4 share a tevent library.
210 o Dan Sledz <dsledz@isilon.com>
211 * Add two new parameters to control how we verify kerberos tickets.
214 o Danny Tylman <danny.tylman@insightix.com>
215 * Add 'net rpc service' subcommands 'create' and 'delete'.
218 o Jelmer Vernooij <jelmer@samba.org>
219 * Make merged build possible.
220 * Move common libraries to the shared lib/ directory.
223 Changes since 3.4.0pre1
224 -----------------------
229 ######################################################################
230 Reporting bugs & Development Discussion
231 #######################################
233 Please discuss this release on the samba-technical mailing list or by
234 joining the #samba-technical IRC channel on irc.freenode.net.
236 If you do report problems then please try to send high quality
237 feedback. If you don't provide vital information to help us track down
238 the problem then you will probably be ignored. All bug reports should
239 be filed under the Samba 3.4 product in the project's Bugzilla
240 database (https://bugzilla.samba.org/).
243 ======================================================================
244 == Our Code, Our Bugs, Our Responsibility.
246 ======================================================================