The branch, master has been updated via 2f9bf80 NEWS[4.22.0]: Samba 4.22.0 Available for Download from 6e64c84 NEWS[4.22.0rc4]: Samba 4.22.0rc4 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master - Log ----------------------------------------------------------------- commit 2f9bf80cc08305c95195d4102b42f18d44e86d37 Author: Jule Anger <jan...@samba.org> Date: Thu Mar 6 15:04:04 2025 +0100 NEWS[4.22.0]: Samba 4.22.0 Available for Download Signed-off-by: Jule Anger <jan...@samba.org> ----------------------------------------------------------------------- Summary of changes: history/header_history.html | 1 + history/samba-4.22.0.html | 192 +++++++++++++++++++++++ posted_news/20250306-140558.4.22.0.body.html | 12 ++ posted_news/20250306-140558.4.22.0.headline.html | 3 + 4 files changed, 208 insertions(+) create mode 100644 history/samba-4.22.0.html create mode 100644 posted_news/20250306-140558.4.22.0.body.html create mode 100644 posted_news/20250306-140558.4.22.0.headline.html Changeset truncated at 500 lines: diff --git a/history/header_history.html b/history/header_history.html index 9f29453..6f6be4c 100755 --- a/history/header_history.html +++ b/history/header_history.html @@ -9,6 +9,7 @@ <li><a href="/samba/history/">Release Notes</a> <li class="navSub"> <ul> + <li><a href="samba-4.22.0.html">samba-4.22.0</a></li> <li><a href="samba-4.21.4.html">samba-4.21.4</a></li> <li><a href="samba-4.21.3.html">samba-4.21.3</a></li> <li><a href="samba-4.21.2.html">samba-4.21.2</a></li> diff --git a/history/samba-4.22.0.html b/history/samba-4.22.0.html new file mode 100644 index 0000000..9420f57 --- /dev/null +++ b/history/samba-4.22.0.html @@ -0,0 +1,192 @@ +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> +<html xmlns="http://www.w3.org/1999/xhtml"> +<head> +<title>Samba 4.22.0 - Release Notes</title> +</head> +<body> +<H2>Samba 4.22.0 Available for Download</H2> +<p> +<a href="https://download.samba.org/pub/samba/stable/samba-4.22.0.tar.gz">Samba 4.22.0 (gzipped)</a><br> +<a href="https://download.samba.org/pub/samba/stable/samba-4.22.0.tar.asc">Signature</a> +</p> +<p> +<pre> + ============================== + Release Notes for Samba 4.22.0 + March 06, 2025 + ============================== + + +This is the first stable release of the Samba 4.22 release series. +Please read the release notes carefully before upgrading. + + +NEW FEATURES/CHANGES +==================== + +SMB3 Directory Leases +--------------------- + +Starting with Samba 4.22 SMB3 Directory Leases are supported. The new global +option "smb3 directory leases" controls whether the feature is enabled or +not. By default, SMB3 Directory Leases are enabled on non-clustered Samba and +disabled on clustered Samba, based on the "clustering" option. See man smb.conf +for more details. + +SMB3 Directory Leases allow clients to cache directory listings and, depending +on the workload, result in a decent reduction in SMB requests from clients. + +Netlogon Ping over LDAP and LDAPS +--------------------------------- + +Samba must query domain controller information via simple queries on +the AD rootdse's netlogon attribute. Typically this is done via +connectionless LDAP, using UDP on port 389. The same information is +also available via classic LDAP rootdse queries over TCP. Samba can +now be configured to use TCP via the new "client netlogon ping +protocol" parameter to enable running in environments where firewalls +completely block port 389 or UDP traffic to domain controllers. + +Experimental Himmelblaud Authentication in Samba +------------------------------------------------ + +Samba now includes experimental support for Azure Entra ID authentication via +`himmelblaud`, located in the `rust/` directory. This implementation provides +basic authentication and is configured through `smb.conf`, utilizing options +such as `realm`, `winbindd_socket_directory`, and `template_homedir`. New global +parameters include `himmelblaud_sfa_fallback`, `himmelblaud_hello_enabled`, and +`himmelblaud_hsm_pin_path`. +To enable, configure Samba with `--enable-rust --with-himmelblau`. + +AD DC schema upgrade and provision performance improvements +----------------------------------------------------------- + +By increasing the LDB index cache size for certain offline operations +that are likely to require large transactions, these are now several +times faster. + + +REMOVED FEATURES +================ + +The "nmbd proxy logon" feature was removed. This was used before +Samba4 acquired a NBT server. + +The parameter "cldap port" has been removed. CLDAP runs over UDP port +389, we don't see a reason why this should ever be changed to a +different port. Moreover, we had several places in the code where +Samba did not respect this parameter, so the behaviour was at least +inconsistent. + +fruit:posix_rename +------------------ + +This option of the vfs_fruit VFS module that could be used to enable POSIX +directory rename behaviour for OS X clients has been removed as it could result +in severe problems for Windows clients. + +As a possible workaround it is possible to prevent creation of .DS_Store files +(a Finder thingy to store directory view settings) on network mounts by running + + $ defaults write com.apple.desktopservices DSDontWriteNetworkStores true + +on the Mac. + + +smb.conf changes +================ + + Parameter Name Description Default + -------------- ----------- ------- + smb3 directory leases New Auto + vfs mkdir use tmp name New Auto + client netlogon ping protocol New cldap + himmelblaud hello enabled New no + himmelblaud hsm pin path New default hsm pin path + himmelblaud sfa fallback New no + client use krb5 netlogon Experimental no + reject aes netlogon servers Experimental no + server reject aes schannel Experimental no + server support krb5 netlogon Experimental no + fruit:posix_rename Removed + cldap port Removed + + +CHANGES SINCE 4.22.0rc4 +======================= + +o Ralph Boehme <s...@samba.org> + * BUG 15801: `NT_STATUS_ACCESS_DENIED making remote directory` on OpenBSD. + +o Anoop C S <anoo...@samba.org> + * BUG 15797: Unable to connect to CephFS subvolume shares with + vfs_shadow_copy2. + +o Stefan Metzmacher <me...@samba.org> + * BUG 15801: `NT_STATUS_ACCESS_DENIED making remote directory` on OpenBSD. + +o Martin Schwenke <mschwe...@ddn.com> + * BUG 15820: Incorrect FSF address in ctdb pcp scripts. + +o Andrea Venturoli <m...@netfence.it> + * BUG 15804: "samba-tool domain backup offline" hangs. + + +CHANGES SINCE 4.22.0rc3 +======================= + +o Stefan Metzmacher <me...@samba.org> + * BUG 15815: client use krb5 netlogon is experimental and should not be used + in production. + + +CHANGES SINCE 4.22.0rc2 +======================= + +o Douglas Bagnall <douglas.bagn...@catalyst.net.nz> + * BUG 15738: Creation of GPOs applicable to more than one group is impossible + with Samba 4.20.0 and later. + +o Björn Baumbach <b...@sernet.de> + * BUG 15806: samba-tool acl commands broken for relative path names + * BUG 15807: pysmbd seg faults when file is not found. + +o Ralph Boehme <s...@samba.org> + * BUG 15796: Spotlight search results don't show file size and creation date. + +o Pavel Filipenský <pfilipen...@samba.org> + * BUG 15759: net ads create/join/winbind producing unix dysfunctional + keytabs. + +o Volker Lendecke <v...@samba.org> + * BUG 15806: samba-tool acl commands broken for relative path names. + * BUG 15807: pysmbd seg faults when file is not found. + +o Stefan Metzmacher <me...@samba.org> + * BUG 15680: Trust domains are not created. + +o Andreas Schneider <a...@samba.org> + * BUG 15680: Trust domains are not created. + +o Shweta Sodani <ssod...@redhat.com> + * BUG 15703: General improvements for vfs_ceph_new module. + + +CHANGES SINCE 4.22.0rc1 +======================= + +o Björn Baumbach <b...@sernet.de> + * BUG 15798: libnet4: seg fault after dc lookup failure + + +KNOWN ISSUES +============ + +https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.22#Release_blocking_bugs + + +</pre> +</p> +</body> +</html> diff --git a/posted_news/20250306-140558.4.22.0.body.html b/posted_news/20250306-140558.4.22.0.body.html new file mode 100644 index 0000000..36c0bd8 --- /dev/null +++ b/posted_news/20250306-140558.4.22.0.body.html @@ -0,0 +1,12 @@ +<!-- BEGIN: posted_news/20250306-140558.4.22.0.body.html --> +<h5><a name="4.22.0">06 March 2025</a></h5> +<p class=headline>Samba 4.22.0 Available for Download</p> +<p> +This is the latest stable release of the Samba 4.22 release series. +</p> +<p> +The uncompressed tarball has been signed using GnuPG (ID AA99442FB680B620). +The source code can be <a href="https://download.samba.org/pub/samba/stable/samba-4.22.0.tar.gz">downloaded now</a>. +See <a href="https://www.samba.org/samba/history/samba-4.22.0.html">the release notes for more info</a>. +</p> +<!-- END: posted_news/20250306-140558.4.22.0.body.html --> diff --git a/posted_news/20250306-140558.4.22.0.headline.html b/posted_news/20250306-140558.4.22.0.headline.html new file mode 100644 index 0000000..762558a --- /dev/null +++ b/posted_news/20250306-140558.4.22.0.headline.html @@ -0,0 +1,3 @@ +<!-- BEGIN: posted_news/20250306-140558.4.22.0.headline.html --> +<li> 06 March 2025 <a href="#4.22.0">Samba 4.22.0 Available for Download</a></li> +<!-- END: posted_news/20250306-140558.4.22.0.headline.html --> -- Samba Website Repository