Samba 4.12.0 kumasulidwa

Yovomerezedwa ndi kumasula Samba 4.12.0, amene anapititsa patsogolo chitukuko cha nthambi Samba 4 ndi kukhazikitsa kwathunthu kwa domain controller ndi Active Directory service, yogwirizana ndi kukhazikitsidwa kwa Windows 2000 komanso yokhoza kutumizira mitundu yonse yamakasitomala a Windows mothandizidwa ndi Microsoft, kuphatikiza Windows 10. Samba 4 ndi seva yamitundu yambiri yomwe imaperekanso kukhazikitsa seva yamafayilo, ntchito yosindikiza ndi seva yodziwika (winbind).

Chinsinsi kusintha mu Samba 4.12:

• Kukhazikitsa kokhazikitsidwa kwa ntchito za cryptographic kwachotsedwa pamakina ogwiritsira ntchito malaibulale akunja. Anaganiza zogwiritsa ntchito GnuTLS ngati laibulale yayikulu ya crypto (osachepera mtundu wa 3.4.7 ukufunika). Kuphatikiza pa kuchepetsa ziwopsezo zomwe zingachitike pozindikira zovuta pakukhazikitsa kokhazikika kwa ma cryptographic algorithms, kusintha kupita ku GnuTLS kunalolanso kukonza magwiridwe antchito pogwiritsa ntchito kubisa mu SMB3. Poyesa ndi kukhazikitsidwa kwa kasitomala wa CIFS kuchokera ku Linux 5.3 kernel, kuwonjezereka kwa 3 kwa liwiro lolemba ndi kuwonjezereka kwa 2.5 kwa liwiro la kuwerenga kunalembedwa.
• Anawonjezera kumbuyo kwatsopano posaka magawo a SMB pogwiritsa ntchito protocol Zowonekerasearch engine zochokera Elasticsearch (m'mbuyomu backend idaperekedwa kutengera GNOME Tracker). Chothandizira cha "mdfind" chawonjezedwanso ku phukusi ndikukhazikitsa kwa kasitomala komwe kumakupatsani mwayi wotumiza zopempha ku seva iliyonse ya SMB yomwe ikuyenda ndi Spotlight RPC service. Mtengo wokhazikika wa "spotlight backend" wasinthidwa kukhala "noindex" (pa Tracker kapena Elasticsearch, muyenera kuyika momveka bwino mikhalidweyo kukhala "tracker" kapena "elasticsearch").
• Makhalidwe a 'net ads kerberos pac save' ndi 'net eventlog export' asinthidwa kuti asalembenso fayiloyo, koma m'malo mwake amawonetsa cholakwika ngati ayesa kutumiza ku fayilo yomwe ilipo.
• samba-Tool yapita patsogolo powonjezera zolembera za mamembala. Ngati m'mbuyomu, pogwiritsa ntchito lamulo la 'samba-tool group addmemers', mutha kungowonjezera ogwiritsa ntchito, magulu ndi makompyuta ngati mamembala atsopano, koma tsopano pali chithandizo chowonjezera olumikizana nawo ngati mamembala agulu.
• Chida cha Samba chimalola kusefa ndi magawo abungwe (OU, Organisation Unit) kapena subtree. Mabendera atsopano "--base-dn" ndi "-member-base-dn" awonjezedwa, zomwe zimapangitsa kuti zitheke kugwira ntchito ndi gawo lina la mtengo wa Active Directory, mwachitsanzo, mkati mwa OU imodzi yokha.
• Onjezani gawo latsopano la VFS 'io_uring' pogwiritsa ntchito mawonekedwe atsopano a Linux kernel io_kunena kwa asynchronous I/O. Io_uring imathandizira kuvota kwa I/O ndipo imatha kugwira ntchito ndi buffering (makina a "aio" omwe adanenedwa kale sanagwirizane ndi I/O yosungidwa). Mukamagwira ntchito ndi kuvota, magwiridwe antchito a io_uring amakhala patsogolo kwambiri kuposa aio. Samba tsopano imagwiritsa ntchito io_uring kuthandizira SMB_VFS_{PREAD,PWRITE,FSYNC}_SEND/RECV ndipo imachepetsa kuchuluka kwa ulusi pamalo ogwiritsira ntchito mukamagwiritsa ntchito VFS yokhazikika. Kuti mupange gawo la 'io_uring' VFS, laibulale ikufunika kumasula ndi Linux kernels 5.1+.
• VFS imapereka mwayi wofotokozera mtengo wa nthawi yapadera UTIME_OMIT kuti iwonetse kufunika konyalanyaza nthawi mu SMB_VFS_NTIMES() ntchito.
• Mu smb.conf, kuthandizira kwa gawo la "lembani cache size" kwathetsedwa, zomwe zidakhala zopanda tanthauzo pambuyo poyambitsa chithandizo cha io_uring.
• Samba-DC ndi Kerberos sizikuthandizanso kubisa kwa DES. Kuchotsedwa kwa code yofooka ya crypto ku Heimdal-DC.
• Ma module a vfs_netatalk achotsedwa, omwe adasiyidwa osasungidwa komanso osafunikiranso.
• BIND9_FLATFILE backend yatsitsidwa ndipo ichotsedwa ikatulutsidwa mtsogolo.
• Laibulale ya zlib ikuphatikizidwa ngati kudalira msonkhano. Kukhazikitsa kwa zlib komweko kwachotsedwa ku codebase (kodiyo idatengera mtundu wakale wa zlib womwe sunathandizire kubisa bwino).
• Kuyesa kosokoneza kwa code base kwakhazikitsidwa, kuphatikiza muutumiki
  oss-fuzi. Pakuyesa kwa fuzzing, zolakwika zambiri zidadziwika ndikuwongolera.

• Zofunikira zochepa za mtundu wa Python zidakwera kuchokera ku Python
  3.4 mpaka Python 3.5. Kuthekera kopanga seva yamafayilo ndi Python 2 kumasungidwabe (musanayambe ./configure' ndi 'kupanga', muyenera kukhazikitsa kusintha kwa chilengedwe 'PYTHON=python2').

Source: opennet.ru