The branch, master has been updated
via 6873e01 Add Samba 4.10.0.
via ad0c5bf NEWS[4.10.0]: Samba 4.10.0 Available for Download
from 1eb87be docs: remove dead links to outdated and valished doc
translations
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit 6873e01a73f1c8650faa791dc1933f6759f6c825
Author: Karolin Seeger <[email protected]>
Date: Tue Mar 19 11:15:44 2019 +0100
Add Samba 4.10.0.
Signed-off-by: Karolin Seeger <[email protected]>
commit ad0c5bf11b9149722e17cdfdd30bad7edffdbc36
Author: Karolin Seeger <[email protected]>
Date: Tue Mar 19 11:12:00 2019 +0100
NEWS[4.10.0]: Samba 4.10.0 Available for Download
Signed-off-by: Karolin Seeger <[email protected]>
-----------------------------------------------------------------------
Summary of changes:
history/header_history.html | 1 +
history/samba-4.10.0.html | 413 +++++++++++++++++++++++
posted_news/20190319-101508.4.10.0.body.html | 12 +
posted_news/20190319-101508.4.10.0.headline.html | 3 +
4 files changed, 429 insertions(+)
create mode 100644 history/samba-4.10.0.html
create mode 100644 posted_news/20190319-101508.4.10.0.body.html
create mode 100644 posted_news/20190319-101508.4.10.0.headline.html
Changeset truncated at 500 lines:
diff --git a/history/header_history.html b/history/header_history.html
index 1eb2399..e4e89c5 100755
--- a/history/header_history.html
+++ b/history/header_history.html
@@ -9,6 +9,7 @@
<li><a href="/samba/history/">Release Notes</a>
<li class="navSub">
<ul>
+ <li><a href="samba-4.10.0.html">samba-4.10.0</a></li>
<li><a href="samba-4.9.5.html">samba-4.9.5</a></li>
<li><a href="samba-4.9.4.html">samba-4.9.4</a></li>
<li><a href="samba-4.9.3.html">samba-4.9.3</a></li>
diff --git a/history/samba-4.10.0.html b/history/samba-4.10.0.html
new file mode 100644
index 0000000..e84fb70
--- /dev/null
+++ b/history/samba-4.10.0.html
@@ -0,0 +1,413 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>
+<html xmlns="http://www.w3.org/1999/xhtml";>
+<head>
+<title>Samba 4.10.0 - Release Notes</title>
+</head>
+<body>
+<H2>Samba 4.10.0 Available for Download</H2>
+<p>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.10.0.tar.gz";>Samba
4.10.0 (gzipped)</a><br>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.10.0.tar.asc";>Signature</a>
+</p>
+<p>
+<pre>
+ ==============================
+ Release Notes for Samba 4.10.0
+ March 19, 2019
+ ==============================
+
+
+This is the first stable release of the Samba 4.10 release series.
+Please read the release notes carefully before upgrading.
+
+
+NEW FEATURES/CHANGES
+====================
+
+GPO Improvements
+----------------
+
+A new 'samba-tool gpo backup' command has been added that can export
a
+set of Group Policy Objects from a domain in a generalised XML format.
+
+A corresponding 'samba-tool gpo restore' command has been added to
+rebuild the Group Policy Objects from the XML after generalization.
+(The administrator needs to correct the values of XML entities between
+the backup and restore to account for the change in domain).
+
+KDC prefork
+-----------
+
+The KDC now supports the pre-fork process model and worker processes will be
+forked for the KDC when the pre-fork process model is selected for samba.
+
+Prefork 'prefork children'
+--------------------------
+
+The default value for this smdb.conf parameter has been increased from 1 to
+4.
+
+Netlogon prefork
+----------------
+
+DCERPC now supports pre-forked NETLOGON processes. The netlogon processes are
+pre-forked when the prefork process model is selected for samba.
+
+Offline domain backups
+----------------------
+
+The 'samba-tool domain backup' command has been extended with a new
'offline'
+option. This safely creates a backup of the local DC's database directly
from
+disk. The main benefits of an offline backup are it's quicker, it stores
more
+database details (for forensic purposes), and the samba process does not have
+to be running when the backup is made. Refer to the samba-tool help for more
+details on using this command.
+
+Group membership statistics
+---------------------------
+
+A new 'samba-tool group stats' command has been added. This provides
summary
+information about how the users are spread across groups in your domain.
+The 'samba-tool group list --verbose' command has also been updated
to include
+the number of users in each group.
+
+Paged results LDAP control
+--------------------------
+
+The behaviour of the paged results control (1.2.840.113556.1.4.319, RFC2696)
+has been changed to more closely match Windows servers, to improve memory
+usage. Paged results may be used internally (or is requested by the user) by
+LDAP libraries or tools that deal with large result sizes, for example, when
+listing all the objects in the database.
+
+Previously, results were returned as a snapshot of the database but now,
+some changes made to the set of results while paging may be reflected in the
+responses. If strict inter-record consistency is required in answers (which is
+not possible on Windows with large result sets), consider avoiding the paged
+results control or alternatively, it might be possible to enforce restrictions
+using the LDAP filter expression.
+
+For further details see https://wiki.samba.org/index.php/Paged_Results
+
+Prefork process restart
+-----------------------
+
+The pre-fork process model now restarts failed processes. The delay between
+restart attempts is controlled by the "prefork backoff increment"
(default = 10)
+and "prefork maximum backoff" (default = 120) smbd.conf parameters.
A linear
+back off strategy is used with "prefork backoff increment" added to
the
+delay between restart attempts up until it reaches "prefork maximum
backoff".
+
+Using the default sequence the restart delays (in seconds) are:
+ 0, 10, 20, ..., 120, 120, ...
+
+Standard process model
+----------------------
+
+When using the standard process model samba forks a new process to handle ldap
+and netlogon connections. Samba now honours the 'max smbd
processes' smb.conf
+parameter. The default value of 0, indicates there is no limit. The limit
+is applied individually to netlogon and ldap. When the process limit is
+exceeded Samba drops new connections immediately.
+
+python3 support
+---------------
+
+This is the first release of Samba which has full support for Python 3.
+Samba 4.10 still has support for Python 2, however, Python 3 will be used by
+default, i.e. 'configure' & 'make' will execute using
python3.
+
+To build Samba with python2 you *must* set the 'PYTHON' environment
variable
+for both the 'configure' and 'make' steps, i.e.
+ 'PYTHON=python2 ./configure'
+ 'PYTHON=python2 make'
+This will override the python3 default.
+
+Alternatively, it is possible to produce Samba Python bindings for both
+Python 2 and Python 3. To do so, specify
'--extra-python=/usr/bin/python2'
+as part of the 'configure' command. Note that python3 will still be
used as
+the default in this case.
+
+Note that Samba 4.10 supports Python 3.4 onwards.
+
+Future Python support
+---------------------
+
+Samba 4.10 will be the last release that comes with full support for
+Python 2. Unfortunately, the Samba Team doesn't have the resources to
support
+both Python 2 and Python 3 long-term.
+
+Samba 4.11 will not have any runtime support for Python 2. This means if
+you use Python 2 bindings it is time to migrate to Python 3 now.
+
+If you are building Samba using the '--disable-python' option (i.e.
you're
+excluding all the run-time Python support), then this will continue to work
+on a system that supports either python2 or python3.
+
+Also note that Samba 4.11 will most likely only support Python 3.6 onwards.
+
+JSON logging
+------------
+
+Authentication messages now contain the Windows Event Id "eventId"
and logon
+type "logonType". The supported event codes and logon types are:
+ Event codes:
+ 4624 Successful logon
+ 4625 Unsuccessful logon
+
+ Logon Types:
+ 2 Interactive
+ 3 Network
+ 8 NetworkCleartext
+
+The version number for Authentication messages is now 1.1, changed from 1.0
+
+Password change messages now contain the Windows Event Id "eventId",
the
+supported event Id's are:
+ 4723 Password changed
+ 4724 Password reset
+
+The version number for PasswordChange messages is now 1.1, changed from 1.0
+
+Group membership change messages now contain the Windows Event Id
"eventId",
+the supported event Id's are:
+ 4728 A member was added to a security enabled global group
+ 4729 A member was removed from a security enabled global group
+ 4732 A member was added to a security enabled local group
+ 4733 A member was removed from a security enabled local group
+ 4746 A member was added to a security disabled local group
+ 4747 A member was removed from a security disabled local group
+ 4751 A member was added to a security disabled global group
+ 4752 A member was removed from a security disabled global group
+ 4756 A member was added to a security enabled universal group
+ 4757 A member was removed from a security enabled universal group
+ 4761 A member was added to a security disabled universal group
+ 4762 A member was removed from a security disabled universal group
+
+
+The version number for GroupChange messages is now 1.1, changed from 1.0. Also
+A GroupChange message is generated when a new user is created to log that the
+user has been added to their primary group.
+
+The leading "JSON <message type>:" and source file prefix of
the JSON formatted
+log entries has been removed to make the parsing of the JSON log messages
+easier. JSON log entries now start with 2 spaces followed by an opening brace
+i.e. " {"
+
+SMBv2 samba-tool support
+------------------------
+
+On previous releases, some samba-tool commands would not work against a remote
+DC that had SMBv1 disabled. SMBv2 support has now been added for samba-tool.
+The affected commands are 'samba-tool domain backup|rename' and the
+'samba-tool gpo' set of commands. Refer also bug #13676.
+
+New glusterfs_fuse VFS module
+-----------------------------
+
+The new vfs_glusterfs_fuse module improves performance when Samba
+accesses a glusterfs volume mounted via FUSE (Filesystem in Userspace
+as part of the Linux kernel). It achieves that by leveraging a
+mechanism to retrieve the appropriate case of filenames by querying a
+specific extended attribute in the filesystem. No extra configuration
+is required to use this module, only glusterfs_fuse needs to be set in
+the "vfs objects" parameter. Further details can be found in the
+vfs_glusterfs_fuse(8) manpage. This new vfs_glusterfs_fuse module does
+not replace the existing vfs_glusterfs module, it just provides an
+additional, alternative mechanism to access a Gluster volume.
+
+REMOVED FEATURES
+================
+
+MIT Kerberos build of the AD DC
+-------------------------------
+
+While not removed, the MIT Kerberos build of the Samba AD DC is still
+considered experimental. Because Samba will not issue security
+patches for this configuration, such builds now require the explicit
+configure option: --with-experimental-mit-ad-dc
+
+For further details see
+https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC
+
+samba_backup
+------------
+
+The samba_backup script has been removed. This has now been replaced by the
+'samba-tool domain backup offline' command.
+
+SMB client Python bindings
+--------------------------
+
+The SMB client python bindings are now deprecated and will be removed in future
+Samba releases. This will only affects users that may have used the Samba
+Python bindings to write their own utilities, i.e. users with a custom Python
+script that includes the line 'from samba import smb'.
+
+smb.conf changes
+================
+
+ Parameter Name Description Default
+ -------------- ----------- -------
+ prefork backoff increment Delay added to process restart 10 (seconds)
+ between attempts.
+ prefork maximum backoff Maximum delay for process between 120 (seconds)
+ process restart attempts
+ smbd search ask sharemode Name changed, old name was
+ "smbd:search ask sharemode"
+ smbd async dosmode Name changed, old name was
+ "smbd:async dosmode"
+ smbd max async dosmode Name changed, old name was
+ "smbd:max async dosmode"
+ smbd getinfo ask sharemode New: similar to "smbd search ask yes
+ sharemode" but for SMB getinfo
+
+
+CHANGES SINCE 4.10.0rc4
+=======================
+
+o Andrew Bartlett <[email protected]>
+ * BUG 13760: s4-server: Open and close a transaction on sam.ldb at startup.
+
+o Ralph Boehme <[email protected]>
+ * BUG 13812: access_check_max_allowed() doesn't process "Owner
Rights" ACEs.
+
+o Joe Guo <[email protected]>
+ * s4/scripting/bin: Open unicode files with utf8 encoding and write
+ * unicode string.
+
+o Björn Jacke <[email protected]>
+ * BUG 13759: sambaundoguididx: Use the right escaped oder unescaped sam ldb
+ files.
+
+o Volker Lendecke <[email protected]>
+ * BUG 13813: Fix idmap cache pollution with S-1-22- IDs on winbind hickup.
+
+o Christof Schmitt <[email protected]>
+ * passdb: Update ABI to 0.27.2.
+ * BUG 13813: lib/winbind_util: Add winbind_xid_to_sid for --without-winbind.
+
+o Andreas Schneider <[email protected]>
+ * BUG 13823: lib:util: Move debug message for mkdir failing to log level 1.
+
+
+CHANGES SINCE 4.10.0rc3
+=======================
+
+o Jeremy Allison <[email protected]>
+ * BUG 13803: SMB1 POSIX mkdir does case insensitive name lookup.
+
+o Ralph Boehme <[email protected]>
+ * BUG 13802: Fix idmap xid2sid cache issue.
+
+o David Disseldorp <[email protected]>
+ * BUG 13807: vfs_ceph strict_allocate_ftruncate calls (local FS) ftruncate
+ and fallocate.
+
+o Volker Lendecke <[email protected]>
+ * BUG 13786: messages_dgm: Properly handle receiver re-initialization.
+
+o Gary Lockyer <[email protected]>
+ * BUG 13765: man pages: Document prefork process model.
+ * BUG 13773: CVE-2019-3824 ldb: wildcard_match end of data check.
+
+o Stefan Metzmacher <[email protected]>
+ * tdb: Fix compatibility of wscript with older python.
+ * tevent: version 0.9.39
+ * BUG 13773: CVE-2019-3824 ldb: version 1.5.4
+
+o David Mulder <[email protected]>
+ * Search for location of waf script.
+
+o Noel Power <[email protected]>
+ * BUG 13777: buildtools/wafsamba: Avoid decode when using python2.
+
+o JiÅà ŠaÅ¡ek <[email protected]>
+ * BUG 13704: notifyd: Fix SIGBUS on sparc.
+
+o Swen Schillig <[email protected]>
+ * BUG 13791: ctdb: Buffer write beyond limits.
+
+o Lukas Slebodnik <[email protected]>
+ * BUG 13773: CVE-2019-3824 ldb: Out of bound read in ldb_wildcard_compare.
+
+o Martin Schwenke <[email protected]>
+ * BUG 13790: ctdb-config: Change example recovery lock setting to one that
+ fails.
+ * BUG 13800: Fix recovery lock bug.
+
+
+CHANGES SINCE 4.10.0rc2
+=======================
+
+o Jeremy Allison <[email protected]>
+ * BUG 13690: smbd: uid: Don't crash if 'force group' is
added to an existing
+ share connection.
+ * BUG 13770: s3: VFS: vfs_fruit. Fix the NetAtalk deny mode compatibility
+ code.
+
+o Andrew Bartlett <[email protected]>
+ * ldb: Release ldb 1.5.3
+ * BUG 13762: Avoid inefficient one-level searches.
+ * BUG 13772: The test api.py should not rely on order of entries in dict.
+
+o Tim Beale <[email protected]>
+ * BUG 13762: ldb: Avoid inefficient one-level searches.
+
+o Ralph Boehme <[email protected]>
+ * BUG 13776: tldap: Avoid use after free errors.
+
+o Günther Deschner <[email protected]>
+ * BUG 13746: s3-smbd: Use fruit:model string for mDNS registration.
+
+o David Disseldorp <[email protected]>
+ * BUG 13766: printing: Check lp_load_printers() prior to pcap cache update.
+
+o Christof Schmitt <[email protected]>
+ * BUG 13787: waf: Check for libnscd.
+
+o Andreas Schneider <[email protected]>
+ * BUG 13770: s3:vfs: Correctly check if OFD locks should be enabled or not.
+ * BUG 13778: Public ZERO_STRUCT() uses undefined C11 function memset_s().
+
+
+CHANGES SINCE 4.10.0rc1
+=======================
+
+o Jeremy Allison <[email protected]>
+ * BUG 13750: libcli: dns: Change internal DNS_REQUEST_TIMEOUT from 2 to 10
+ seconds.
+
+o Tim Beale <[email protected]>
+ * BUG 13676: samba-tool SMB/sysvol connections do not work if SMBv1 is
+ disabled.
+ * BUG 13747: join: Throw CommandError instead of Exception for simple
errors.
+
+o Günther Deschner <[email protected]>
+ * BUG 13774: s3-vfs: Add glusterfs_fuse vfs module.
+
+o Volker Lendecke <[email protected]>
+ * BUG 13742: ctdb: Print locks latency in machinereadable stats.
+
+o Stefan Metzmacher <[email protected]>
+ * BUG 13752: s4:server: Add support for 'smbcontrol samba
shutdown'.
+
+o Anoop C S <[email protected]>
+ * BUG 13330: vfs_glusterfs: Adapt to changes in libgfapi signatures.
+ * BUG 13774: s3-vfs: Use ENOATTR in errno comparison for getxattr.
+
+o Justin Stephenson <[email protected]>
+ * BUG 13727: s3:libsmb: Honor disable_netbios option in
smbsock_connect_send.
+
+
+KNOWN ISSUES
+============
+
+https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.10#Release_blocking_bugs
+
+
+</pre>
+</p>
+</body>
+</html>
diff --git a/posted_news/20190319-101508.4.10.0.body.html
b/posted_news/20190319-101508.4.10.0.body.html
new file mode 100644
index 0000000..2c1c7eb
--- /dev/null
+++ b/posted_news/20190319-101508.4.10.0.body.html
@@ -0,0 +1,12 @@
+<!-- BEGIN: posted_news/20190319-101508.4.10.0.body.html -->
+<h5><a name="4.10.0">19 March 2019</a></h5>
+<p class=headline>Samba 4.10.0 Available for Download</p>
+<p>
+This is the latest stable release of the Samba 4.10 release series.
+</p>
+<p>
+The uncompressed tarball has been signed using GnuPG (ID 6F33915B6568B7EA).
+The source code can be <a
href="https://download.samba.org/pub/samba/stable/samba-4.10.0.tar.gz";>downloaded
now</a>.
+See <a href="https://www.samba.org/samba/history/samba-4.10.0.html";>the
release notes for more info</a>.
+</p>
+<!-- END: posted_news/20190319-101508.4.10.0.body.html -->
diff --git a/posted_news/20190319-101508.4.10.0.headline.html
b/posted_news/20190319-101508.4.10.0.headline.html
new file mode 100644
index 0000000..cc3af57
--- /dev/null
+++ b/posted_news/20190319-101508.4.10.0.headline.html
@@ -0,0 +1,3 @@
+<!-- BEGIN: posted_news/20190319-101508.4.10.0.headline.html -->
+<li> 19 March 2019 <a href="#4.10.0">Samba 4.10.0 Available for
Download</a></li>
+<!-- END: posted_news/20190319-101508.4.10.0.headline.html -->
--
Samba Website Repository
