On September 17, 2019, version 4.11.0 was released - the first stable release in the Samba 4.11 branch.
The main features of the package:
- A complete implementation of a domain controller and AD services, compatible with Windows 2000 protocols and capable of serving all Windows clients up to Windows 10
- File server
- Print server
- Winbind identification service
Features of release 4.11.0:
- By default, the “prefork” process launch model is used, which allows you to support a certain number of running handler processes
- winbind logs the PAM_AUTH and NTLM_AUTH authentication events, as well as the “logonId” attribute containing the login identifier
- Added the ability to save the duration of DNS operations in the log
- The default scheme for working with AD has been updated to version 2012_R2. The previously used schema can be selected using the '—base-schema' switch at startup
- Cryptography functions now require the required GnuTLS 3.2 library as dependencies, replacing those built into Samba
- The “samba-tool contact” command has appeared, allowing you to search, view and edit entries in the LDAP address book
- Work was carried out to optimize the work of Sambs in organizations with over 100000 users and 120000 objects
- Improved reindexing performance for large AD domains
- The method for storing the AD database on disk has been updated. The new format will be automatically applied after upgrading to release 4.11, but if you downgrade from Samba 4.11 to older releases, you will need to manually convert the format to the old one
- By default, support for the SMB1 protocol is disabled, which is considered obsolete
- The '--option' option has been added to the smbclient and smbcacls console utilities, allowing you to override the parameters specified in the smb.conf configuration file
- LanMan and plaintext authentication methods have been deprecated
- The code of the built-in http server, which previously supported the SWAT web interface, has been removed
- By default, support for python 2 is disabled and python 3 is used. To enable support for the second version of python, you need to set the environment variable "PYTHON=python2" before using ./configure and make.
Source: linux.org.ru