Software 43037 Published by

The second release candidate for Samba 4.22.0 has been released for testing purposes. The update introduces new features, including SMB3 Directory Leases, which enable clients to cache directory listings, thereby minimizing SMB requests. The global option "smb3 directory leases" determines the status of the feature, either enabling or disabling it. Samba is now capable of utilizing TCP through the "client netlogon ping protocol" parameter, facilitating operation in environments where firewalls restrict access to port 389 or UDP traffic directed towards domain controllers. The "nmbd proxy logon" feature has been eliminated, and the "cldap port" parameter has been discontinued. The posix_rename option of the vfs_fruit VFS module has been removed to mitigate significant issues for Windows clients. The updates since version 4.21.0rc1 include the elimination of the "cldap port" parameter.



Samba 4.22.0rc2 Available for Download

This is the second release candidate of Samba 4.22.  This is *not* intended for production environments and is designed for testing purposes only.  Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/.

Samba 4.22 will be the next version of the Samba suite.

Gnome_shell_screenshot_9vr5u1

UPGRADING
=========

NEW FEATURES/CHANGES
====================

SMB3 Directory Leases
---------------------

Starting with Samba 4.22 SMB3 Directory Leases are supported. The new global
option "smb3 directory leases" controls whether the feature is enabled or
not. By default, SMB3 Directory Leases are enabled on non-clustered
Samba and
disabled on clustered Samba, based on the "clustering" option. See man
smb.conf
for more details.

SMB3 Directory Leases allow clients to cache directory listings and,
depending
on the workload, result in a decent reduction in SMB requests from clients.

Netlogon Ping over LDAP and LDAPS
---------------------------------

Samba must query domain controller information via simple queries on
the AD rootdse's netlogon attribute. Typically this is done via
connectionless LDAP, using UDP on port 389. The same information is
also available via classic LDAP rootdse queries over TCP. Samba can
now be configured to use TCP via the new "client netlogon ping
protocol" parameter to enable running in environments where firewalls
completely block port 389 or UDP traffic to domain controllers.

REMOVED FEATURES
================

The "nmbd proxy logon" feature was removed. This was used before
Samba4 acquired a NBT server.

The parameter "cldap port" has been removed. CLDAP runs over UDP port
389, we don't see a reason why this should ever be changed to a
different port. Moreover, we had several places in the code where
Samba did not respect this parameter, so the behaviour was at least
inconsistent.

fruit:posix_rename
------------------

This option of the vfs_fruit VFS module that could be used to enable POSIX
directory rename behaviour for OS X clients has been removed as it could
result
in severe problems for Windows clients.

As a possible workaround it is possible to prevent creation of .DS_Store
files
(a Finder thingy to store directory view settings) on network mounts by
running

  $ defaults write com.apple.desktopservices DSDontWriteNetworkStores true

on the Mac.

smb.conf changes
================

  Parameter Name                          Description     Default
  --------------                          -----------     -------
  smb3 directory leases                   New             Auto
  vfs mkdir use tmp name                  New             Auto
  client netlogon ping protocol           New             cldap
  fruit:posix_rename                      Removed
  cldap port                              Removed

CHANGES SINCE 4.21.0rc1
=======================

o  Björn Baumbach [bb@sernet.de]
   * BUG 15798: libnet4: seg fault after dc lookup failure

KNOWN ISSUES
============

https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.22#Release_blocking_bugs

#######################################
Reporting bugs & Development Discussion
#######################################

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical:matrix.org matrix room, or
#samba-technical IRC channel on irc.libera.chat

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the Samba 4.1 and newer product in the project's Bugzilla
database ( https://bugzilla.samba.org/).

======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================

================
Download Details
================

The uncompressed tarballs and patch files have been signed
using GnuPG (ID AA99442FB680B620).  The source code can be downloaded
from:

        https://download.samba.org/pub/samba/rc/

The release notes are available online at:

https://download.samba.org/pub/samba/rc/samba-4.22.0rc2.WHATSNEW.txt

Our Code, Our Bugs, Our Responsibility.
( https://bugzilla.samba.org/)

                        --Enjoy
                        The Samba Team