On September 17, 2019, version 4.11.0 was released — the first stable release in the Samba 4.11 branch.
Key features of the package include:
- Full implementation of domain controller and AD services, compatible with Windows 2000 protocols and capable of serving all Windows clients up to Windows 10.
- File Server server
- Print Server
- Winbind identification service
Features of release 4.11.0:
- By default, the process launch model 'prefork' is used, allowing for a certain number of active handler processes.
- Winbind logs authentication events for PAM_AUTH and NTLM_AUTH, as well as the attribute 'logonId', which contains the login identifier.
- Added the ability to log the duration of DNS operations.
- The default schema for working with AD has been updated to version 2012_R2. The previously used schema can be selected at startup using the ‘—base-schema’ key.
- Cryptographic functions now require the mandatory GnuTLS 3.2 library as a dependency, replacing the built-in libraries in Samba.
- A new command 'samba-tool contact' has been added, allowing you to search, view, and edit entries in the LDAP address book.
- Work has been done to optimize Samba's performance in organizations with more than 100,000 users and 120,000 objects.
- Reindexing performance has been improved for large datasets. domains AD
- The method for storing the AD database on disk has been updated. The new format will be automatically applied after upgrading to release 4.11, but reverting from Samba 4.11 to older releases will require manual format conversion.
- Support for the SMB1 protocol, which is considered obsolete, is disabled by default.
- The command line utilities smbclient and smbcacls have added the ‘—option’ option, allowing overriding parameters set in the smb.conf configuration file.
- LanMan and plaintext authentication methods have been deprecated.
- The code for the built-in HTTP server, which previously supported the SWAT web interface, has been removed.
- Support for Python 2 is disabled by default, and Python 3 is used. To enable support for the second version of Python, you need to set the environment variable 'PYTHON=python2' before using ./configure and make.
Source: linux.org.ru
