Sakin Samba 4.13.0

Ƙaddamar da saki Samba 4.13.0, wanda ya ci gaba da bunkasa reshe Samba 4 tare da cikakken aiwatar da mai sarrafa yanki da sabis na Active Directory, mai jituwa tare da aiwatar da Windows 2000 kuma yana iya yin hidima ga duk nau'ikan abokan cinikin Windows da Microsoft ke goyan bayan, gami da Windows 10. Samba 4 samfuri ne na uwar garken multifunctional wanda kuma yana ba da aiwatar da aiwatar da ayyukan. uwar garken fayil, sabis na bugawa da uwar garken ainihi (winbind).

Maɓalli canji Samba 4.13:

• Ƙara kariya ta rauni ZeroLogon (CVE-2020-1472) yana bawa maharin damar samun haƙƙin gudanarwa akan mai sarrafa yanki akan tsarin da baya amfani da saitin "schannel sabar = eh".
• An ƙara ƙaramar sigar Python ɗin da ake buƙata daga Python 3.5 zuwa Python 3.6. Ikon gina uwar garken fayil tare da Python 2 an kiyaye shi a yanzu (kafin kunna ./configure' da 'make' yakamata ku saita yanayin yanayin 'PYTHON=python2'), amma a reshe na gaba za'a cire shi kuma Python 3.6 za a buƙaci don ginawa.
• Ayyukan “fadi mai faɗi = eh”, wanda ke ba masu gudanar da uwar garken fayil damar ƙirƙirar hanyoyin haɗin kai zuwa wani yanki a waje da ɓangaren SMB/CIFS na yanzu, an ƙaura daga smbd zuwa wani keɓantaccen tsarin “vfs_widelinks”. A halin yanzu, ana ɗora wannan ƙirar ta atomatik idan ma'aunin "fadi = eh" yana nan a cikin saitunan. A nan gaba, an shirya cire goyon baya ga "fadi links = eh" saboda matsalolin tsaro, kuma masu amfani da samba suna ƙarfafawa sosai don canzawa daga "fadi links = eh" zuwa amfani da "mount --bind" don hawan sassan waje na waje. tsarin fayil.
• An soke tallafin mai sarrafa yanki na yanayin gargajiya. Masu amfani da masu sarrafa yanki kamar NT4 ('classic') yakamata su canza zuwa amfani da Samba Active Directory masu kula da yanki don samun damar aiki tare da abokan cinikin Windows na zamani.
• Hanyoyin tabbatar da rashin tsaro waɗanda ba za a iya amfani da su kawai tare da ka'idar SMBv1: "domain logons", "raw NTLMv2 auth", "abokin ciniki plaintext auth", "abokin ciniki NTLMv2 auth", "lanman auth abokin ciniki" da "abokin ciniki amfani spnego".
• An cire goyan bayan zaɓin "ldap ssl talla" daga smb.conf. Ana sa ran za a cire zaɓin "Schannel uwar garke" a cikin saki na gaba.

source: budenet.ru