{"id":105093,"date":"2022-09-14T21:36:59","date_gmt":"2022-09-14T19:36:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-samba-4-17-0"},"modified":"2022-09-14T21:36:59","modified_gmt":"2022-09-14T19:36:59","slug":"vypusk-samba-4-17-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-samba-4-17-0","title":{"rendered":"Sortie de Samba 4.17.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La version Samba 4.17.0 a \u00e9t\u00e9 pr\u00e9sent\u00e9e, poursuivant le d\u00e9veloppement de la branche Samba 4 avec une mise en \u0153uvre compl\u00e8te d'un contr\u00f4leur de domaine et du service Active Directory, compatible avec l'impl\u00e9mentation Windows 2008 et capable de prendre en charge toutes les versions de clients Windows prises en charge par Microsoft, y compris Windows 11. Samba 4 est un produit serveur multifonctionnel, offrant \u00e9galement une mise en \u0153uvre de serveur de fichiers, de service d'impression et de serveur d'identification (winbind).      <\/p>\n<p>Changements cl\u00e9s dans Samba 4.17 :  <\/p>\n<ul>\n<li class=\"l\"> Des efforts ont \u00e9t\u00e9 d\u00e9ploy\u00e9s pour r\u00e9soudre les r\u00e9gressions de performance des serveurs SMB sous forte charge, apparues \u00e0 la suite de l'ajout de protections contre les vuln\u00e9rabilit\u00e9s manipulant les liens symboliques. Parmi les optimisations r\u00e9alis\u00e9es, on mentionne la r\u00e9duction des appels syst\u00e8me lors de la v\u00e9rification du nom de r\u00e9pertoire et l'absence d'\u00e9v\u00e9nements de r\u00e9veil lors du traitement d'op\u00e9rations concurrentes, entra\u00eenant des retards.\n<li class=\"l\"> Il est d\u00e9sormais possible de compiler Samba sans prise en charge du protocole SMB1 dans smbd. Pour d\u00e9sactiver SMB1 dans le script de configuration, l'option \u00ab --without-smb1-server \u00bb a \u00e9t\u00e9 mise en \u0153uvre (cela n'affecte que smbd, le support de SMB1 est maintenu dans les biblioth\u00e8ques clientes).\n<li class=\"l\"> Avec MIT Kerberos 1.20, la possibilit\u00e9 de contrer l'attaque \u00ab Bronze Bit \u00bb (CVE-2020-17049) a \u00e9t\u00e9 mise en place gr\u00e2ce au transfert d'informations suppl\u00e9mentaires entre les composants KDC et KDB. Dans le KDC par d\u00e9faut bas\u00e9 sur Heimdal Kerberos, le probl\u00e8me a \u00e9t\u00e9 r\u00e9solu en 2021.\n<li class=\"l\"> Lors de la compilation avec MIT Kerberos 1.20, le contr\u00f4leur <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/domain\/\"   title=\"de domaine\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4149\">de domaine<\/a> La prise en charge des extensions Kerberos S4U2Self et S4U2Proxy a \u00e9t\u00e9 mise en \u0153uvre dans Samba, et la possibilit\u00e9 de d\u00e9l\u00e9gation contrainte bas\u00e9e sur les ressources (RBCD, Resource Based Constrained Delegation) a \u00e9galement \u00e9t\u00e9 ajout\u00e9e. Pour g\u00e9rer RBCD, les sous-commandes 'add-principal' et 'del-principal' ont \u00e9t\u00e9 ajout\u00e9es \u00e0 l'\u00e9quipe 'samba-tool delegation'. Le mode RBCD n'est pas encore pris en charge dans le KDC par d\u00e9faut bas\u00e9 sur Heimdal Kerberos.\n<li class=\"l\"> Dans le service DNS int\u00e9gr\u00e9, il est d\u00e9sormais possible de modifier le port r\u00e9seau acceptant les requ\u00eates (par exemple, pour ex\u00e9cuter un autre serveur DNS sur le m\u00eame syst\u00e8me, redirigeant certaines requ\u00eates vers Samba).\n<li class=\"l\"> Dans le composant CTDB, responsable des configurations de cluster, les exigences de syntaxe du fichier ctdb.tunables ont \u00e9t\u00e9 r\u00e9duites. Lors de la compilation de Samba avec les options \u00ab --with-cluster-support \u00bb et \u00ab --systemd-install-services \u00bb, l'installation du service systemd pour CTDB est assur\u00e9e. La livraison du script ctdbd_wrapper a \u00e9t\u00e9 arr\u00eat\u00e9e \u2014 le processus ctdbd est d\u00e9sormais lanc\u00e9 directement \u00e0 partir du service systemd ou du script d'initialisation.\n<li class=\"l\"> L'option 'nt hash store = never' a \u00e9t\u00e9 mise en \u0153uvre, interdisant le stockage de hachages de mots de passe utilisateurs Active Directory \u00ab nus \u00bb (sans sel). Dans la prochaine version, la configuration 'nt hash store' sera par d\u00e9faut d\u00e9finie sur \u00ab auto \u00bb, o\u00f9 le mode \u00ab never \u00bb sera appliqu\u00e9 en cas de configuration 'ntlm auth = disabled'.\n<li class=\"l\"> Une liaison pour acc\u00e9der \u00e0 l'API de la biblioth\u00e8que smbconf depuis du code en Python a \u00e9t\u00e9 propos\u00e9e.\n<li class=\"l\"> Dans le programme smbstatus, la possibilit\u00e9 d'afficher des informations au format JSON a \u00e9t\u00e9 ajout\u00e9e (activ\u00e9e par l'option \u00ab --json \u00bb).\n<li class=\"l\"> Le contr\u00f4leur de domaine prend d\u00e9sormais en charge le groupe de s\u00e9curit\u00e9 \u00ab Utilisateurs prot\u00e9g\u00e9s \u00bb, introduit dans Windows Server 2012 R2, qui n'autorise pas l'utilisation de types de chiffrement non fiables (l'authentification NTLM est d\u00e9sactiv\u00e9e pour les utilisateurs de ce groupe, ainsi que les TGT Kerberos bas\u00e9s sur RC4 et la d\u00e9l\u00e9gation limit\u00e9e et illimit\u00e9e).\n<li class=\"l\"> Le support du magasin de mots de passe et de la m\u00e9thode d'authentification bas\u00e9e sur LanMan a \u00e9t\u00e9 arr\u00eat\u00e9 (la configuration 'lanman auth = yes' n'a plus d'effet).<br \/>\n<br \/>Source : <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57782\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 Microsoft \u0432\u0435\u0440\u0441\u0438\u0438 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Windows 11. Samba 4 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (winbind). \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105093","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-samba-4-17-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.17.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-samba-4-17-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-09-14T19:36:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-09-14T19:36:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sortie de Samba 4.17.0 | ProHoster","description":"La version Samba 4.17.0 a \u00e9t\u00e9 publi\u00e9e, poursuivant le d\u00e9veloppement de la branche Samba 4 avec une impl\u00e9mentation compl\u00e8te du contr\u00f4leur de domaine et du service Active Directory, compatible avec l'impl\u00e9mentation Windows 2008 et capable de prendre en charge l'ensemble.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-samba-4-17-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.17.0 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-samba-4-17-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-14T19:36:59+00:00","article:modified_time":"2022-09-14T19:36:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105093","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-03-05 11:12:26","updated":"2026-03-05 11:12:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/105093","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=105093"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/105093\/revisions"}],"predecessor-version":[{"id":163252,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/105093\/revisions\/163252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=105093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=105093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=105093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}