{"id":105093,"date":"2022-09-14T21:36:59","date_gmt":"2022-09-14T19:36:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-samba-4-17-0"},"modified":"2022-09-14T21:36:59","modified_gmt":"2022-09-14T19:36:59","slug":"vypusk-samba-4-17-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/vypusk-samba-4-17-0","title":{"rendered":"Izlaista Samba 4.17.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Tika izlaista Samba 4.17.0 versija, kas turpina Samba 4 att\u012bst\u012bbu ar pilnv\u0113rt\u012bgu dom\u0113na kontroliera un Active Directory pakalpojuma \u012bstenojumu, kas ir sader\u012bgs ar Windows 2008 \u012bstenojumu un sp\u0113j apkalpot visas Microsoft atbalst\u012bt\u0101s Windows klientu versijas, tostarp Windows 11. Samba 4 ir daudzfunkcion\u0101ls servera produkts, kas pied\u0101v\u0101 ar\u012b failu servera, druk\u0101\u0161anas pakalpojuma un identifik\u0101cijas servera (winbind) \u012bstenojumu.      <\/p>\n<p>Galven\u0101s izmai\u0146as Samba 4.17:  <\/p>\n<ul>\n<li class=\"l\"> Veiktas darb\u012bbas, lai nov\u0113rstu regresijas augstas slodzes SMB serveros, kas rad\u0101s, pievienojot aizsardz\u012bbu pret ievainojam\u012bb\u0101m, kas manipul\u0113 ar simboliskaj\u0101m sait\u0113m. No veiktaj\u0101m optimiz\u0101cij\u0101m j\u0101min sist\u0113mas izsaukumu samazin\u0101\u0161ana, p\u0101rbaudot katalogu nosaukumus, un modin\u0101\u0161anas notikumu neizmanto\u0161ana konkur\u0113jo\u0161o oper\u0101ciju apstr\u0101d\u0113, kas noved pie aizkav\u0113\u0161an\u0101s.\n<li class=\"l\"> Ir iesp\u0113ja veidot Samba bez SMB1 protokola atbalsta smbd. Lai atsp\u0113jotu SMB1 konfigur\u0101cijas skript\u0101, ir ieviesta opcija &#171;&#8212;without-smb1-server&#187; (tas ietekm\u0113 tikai smbd, bet klienta bibliot\u0113k\u0101s SMB1 atbalsts tiek saglab\u0101ts).\n<li class=\"l\"> Izmantojot MIT Kerberos 1.20, ir ieviesta iesp\u0113ja pretoties &#171;Bronze Bit&#187; uzbrukumam (CVE-2020-17049), pateicoties papildu inform\u0101cijas p\u0101rs\u016bt\u012b\u0161anai starp KDC un KDB komponent\u0113m. Probl\u0113ma ieviestaj\u0101 KDC, kas balst\u012bts uz Heimdal Kerberos, tika nov\u0113rsta 2021. gad\u0101.\n<li class=\"l\"> Sast\u0101d\u012b\u0161an\u0101 ar MIT Kerberos 1.20 kontrolier\u012b <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/domain\/\"   title=\"dom\u0113ns\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4149\">dom\u0113ns<\/a> Samba b\u0101zes iev\u0113ro Kerberos papla\u0161in\u0101jumus S4U2Self un S4U2Proxy, k\u0101 ar\u012b ir pievienota iesp\u0113ja ierobe\u017eota delag\u0101cija, kas balst\u012bta uz resursiem (RBCD, Resource Based Constrained Delegation). RBCD p\u0101rvald\u012bbai komand\u0101 &#171;samba-tool delegation&#187; pievienotas apak\u0161komandas &#8216;add-principal&#8217; un &#8216;del-principal&#8217;. Noklus\u0113ta KDC, kas balst\u012bta uz Heimdal Kerberos, RBCD re\u017e\u012bms pa\u0161laik netiek atbalst\u012bts.\n<li class=\"l\"> Ieb\u016bv\u0113taj\u0101 DNS pakalpojum\u0101 ir pievienota iesp\u0113ja main\u012bt t\u012bkla portu, kas pie\u0146em piepras\u012bjumus (piem\u0113ram, lai palaistu uz t\u0101s pa\u0161as sist\u0113mas citu DNS serveri, kas p\u0101radres\u0113 noteiktus piepras\u012bjumus uz Samba).\n<li class=\"l\"> CTDB komponent\u0101, kas atbild par klasteriz\u0113to konfigur\u0101ciju, ir samazin\u0101tas pras\u012bbas ctdb.tunables faila sintaksei. Veidojot Samba ar opcij\u0101m &#171;&#8212;with-cluster-support&#187; un &#171;&#8212;systemd-install-services&#187;, tiek nodro\u0161in\u0101ta systemd pakalpojuma uzst\u0101d\u012b\u0161ana CTDB. Ctdbd_wrapper skripta pieg\u0101de ir p\u0101rtraukta \u2014 ctdbd process tagad tiek palaists tie\u0161i no systemd pakalpojuma vai no inicializ\u0101cijas skripta.\n<li class=\"l\"> Ir ieviesta iestat\u012bjuma &#8216;nt hash store = never&#8217; iesp\u0113ja, kas aizliedz uzglab\u0101t &#171;neapstr\u0101d\u0101tus&#187; (bez s\u0101ls) Active Directory lietot\u0101ju parol\u0113m. N\u0101kamaj\u0101 versij\u0101 iestat\u012bjums &#8216;nt hash store&#8217; p\u0113c noklus\u0113juma tiks iestat\u012bts uz &#171;auto&#187;, kur\u0101 re\u017e\u012bm\u0101 &#171;never&#187; tiks piem\u0113rots, ja b\u016bs iestat\u012bts &#8216;ntlm auth = disabled&#8217;.\n<li class=\"l\"> Ieteikta saist\u012bba, lai piek\u013c\u016btu API smbconf bibliot\u0113kai Python valod\u0101.\n<li class=\"l\"> Programmas smbstatus ietvaros ir ieviesta iesp\u0113ja izvad\u012bt inform\u0101ciju JSON form\u0101t\u0101 (iesl\u0113dzams ar opciju &#171;&#8212;json&#187;).\n<li class=\"l\"> Domen\u0101lo kontrolier\u012b ir ieviests atbalsts dro\u0161\u012bbas grupai &#171;Aizsarg\u0101tie lietot\u0101ji&#187;, kas par\u0101d\u012bj\u0101s Windows Server 2012 R2 un nepie\u013cauj nedro\u0161u \u0161ifr\u0113\u0161anas veidu izmanto\u0161anu (lietot\u0101jiem grup\u0101 tiek atsp\u0113jota NTLM autentifik\u0101cija, RC4 balst\u012btas Kerberos TGTs atbalsts, ierobe\u017eota un neierobe\u017eota delag\u0101cija).\n<li class=\"l\"> Ir p\u0101rtraukta paroli glab\u0101\u0161anas un autentifik\u0101cijas metodes atbalsts, kas balst\u012bts uz LanMan (iestat\u012bjums &#171;lanman auth = yes&#187; tagad nav noz\u012bm\u012bgs).<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57782\">opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 Microsoft \u0432\u0435\u0440\u0441\u0438\u0438 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Windows 11. Samba 4 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (winbind). \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105093","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/news\/vypusk-samba-4-17-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.17.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/news\/vypusk-samba-4-17-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-09-14T19:36:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-09-14T19:36:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Samba 4.17.0 izlaidums | ProHoster","description":"Laists klaj\u0101 Samba 4.17.0, kas turpina Samba 4 fili\u0101li ar pilnv\u0113rt\u012bgu dom\u0113na kontroliera un Active Directory pakalpojuma realiz\u0101ciju, sader\u012bgu ar Windows 2008 realiz\u0101ciju un sp\u0113j\u012bgu apkalpot visus.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/vypusk-samba-4-17-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.17.0 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/vypusk-samba-4-17-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-14T19:36:59+00:00","article:modified_time":"2022-09-14T19:36:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105093","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-03-05 11:12:26","updated":"2026-03-05 11:12:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/105093","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=105093"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/105093\/revisions"}],"predecessor-version":[{"id":163252,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/105093\/revisions\/163252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=105093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=105093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=105093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}