1 WHATS NEW IN Samba 3.0 alpha24
3 ==============================
5 This is a pre-release of Samba 3.0. This is NOT a stable release.
8 The purpose of this alpha release is to get wider testing of the major
9 new pieces of code in the current Samba 3.0 development tree. We have
10 officially ceased development on the 2.2.x release of Samba and are
11 concentrating on Samba 3.0. To reduce the time before the final Samba 3.0
12 release we need as many people as possible to start testing these alpha
13 releases, and hopefully giving us some high quality feedback on what needs
16 Note that Samba 3.0 is not feature complete yet. There is a more
17 coding we have planned, but unless we get what we have done already more
18 widely tested we will have a hard time doing a stable release in a
19 reasonable time frame.
24 - Active Directory support. This release is able to join a ADS realm
25 as a member server and authenticate users using LDAP/kerberos.
27 - Unicode support. Samba will now negotiate UNICODE on the wire and
28 internally there is now a much better infrastructure for multi-byte
29 and UNICODE character sets.
31 - New authentication system. The internal authentication system has
32 been almost completely rewritten. Most of the changes are internal,
33 but the new auth system is also very configurable.
35 - new filename mangling system. The filename mangling system has been
36 completely rewritten. An internal database now stores mangling maps
37 persistently. This needs lots of testing.
39 - new "net" command. A new "net" command has been added. It is
40 somewhat similar to the "net" command in windows. Eventually we plan
41 to replace a bunch of other utilities (such as smbpasswd) with
42 subcommands in "net", at the moment only a few things are
45 - Samba now negotiates NT-style status32 codes on the wire. This
46 improves error handling a lot.
48 - better w2k printing support including publishing printer
49 attributes in active directory
51 - new loadable RPC modules
53 - new dual-daemon winbindd support for better performance
55 - support for migrating from a Windows NT 4.0 domain
57 - support for establishing trust relationships with Windows NT 4.0
60 Plus lots of other changes!
63 Reporting bugs & Development Discussion
64 ---------------------------------------
66 Please discuss this release on the samba-technical mailing list or by
67 joining the #samba-technical IRC channel on irc.freenode.net.
69 If you do report problems then please try to send high quality
70 feedback. If you don't provide vital information to help us track down
71 the problem then you will probably be ignored.
79 A new objectclass (sambaSamAccount) has been introduced to replace the old
80 sambaAccount. This change aids us in the renaming of attributes to prevent
81 clashes with attributes from other vendors. There is a conversion script
82 (examples/LDAP/convertSambaAccount) to modify and LDIF file to the new schema.
86 $ ldapsearch .... -b "ou=people,dc=..." > old.ldif
87 $ convertSambaAccount <DOM SID> old.ldif new.ldif
89 The <DOM SID> can be obtained by running 'net getlocalsid <DOMAINNAME>'
90 on the Samba PDC as root.
92 The sambaDomain and sambaGroupMapping objects have also been modified
93 to use the new attribute naming conventions as well. There are no
94 conversion scripts for this data since the old schema was never published
97 The old sambaAccount schema may still be used by specifying the
98 "ldapsam_compat" passdb backend.
110 The following are known issues with this release and will be corrected
113 1) Automatically generating accounts for users and groups from
114 trusted domains when Samba is acting as a PDC
115 2) Maintaining idmap ID's in a LDAP directory in order to implement
116 a distributed winbind solution
121 See cvs log for SAMBA_3_0 for complete details. There are many
122 smaller numerous changes that would clutter the release notes.
124 1) Fix policy handle leak and crash bug in rpc printing code
125 2) Changed the order of checking whether a SID is a UID or a GID
127 3) Merge of winbind nss cleanup from HEAD branch
128 4) Inclusion of idmap backend for mapping SIDs to uids/gids
129 5) Fix for very subtle POSIX lock interaction race condition
130 6) Re-fix close of delete semantics
131 7) Inclusion of schannel functionality (merged from SAMBA_TNG)
132 8) Remove unixsam passdb
133 9) Add debugging code to decode the Win2k PAC
134 10) Very large amounts of documentation fixes (including the move from
136 11) Fix support for local_password_change() in pam_smbpass
137 12) Ensure we have WinXP-like semantics for checking TIDs and FIDs
138 13) More print job change notify fixes
139 14) Handle deep referrals in MS-DFS code
140 15) Add echo named pipe for testing purposes
141 16) Workaround streams leak on SCO openserver 5.0.x
142 17) Lots of popt changes to command line tools
143 18) Use the new modules system for passdb (merge from HEAD)
144 19) Inclusion of editreg.c for editing Windows NT+registry files off line
145 20) Fix byte ordering when using CIDR notation in hosts allow/deny (again)
146 21) Replace smbgroupedit tool with 'net groupmap'
147 22) Merge SMB Signing, NTLMv2 and NTLMSSP fixes from HEAD branch
148 23) Merge of trusted domain code from HEAD branch
149 24) Fix up crashes in lanman printing code (e.g. disable spoolss = yes)
150 25) Store the IP address in the utmp record when possible
151 26) Fix bug in FindFirst code and OS/2 clients
152 27) Fix local master browsing bug when synchronizing browse lists
153 28) Fix browse synchronization when primary interface is no listed
154 in the interfaces list and "bind interfaces only" is enabled.
155 29) removed ldapsam_nua and tdbsam_nua passdb backends (replaced by idmap)
156 30) Include support for storing next rid value in LDAP using a
158 31) Removed "printing = SOFTQ" option
159 32) Fix winbindd dual mode
160 33) Revert from wins.tdb back to wins.dat (flat text file)
161 34) More Trust relationship fixes
162 35) More quota fixes (including server support for NT quota info levels)