{"id":105093,"date":"2022-09-14T21:36:59","date_gmt":"2022-09-14T19:36:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-samba-4-17-0"},"modified":"2022-09-14T21:36:59","modified_gmt":"2022-09-14T19:36:59","slug":"vypusk-samba-4-17-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-samba-4-17-0","title":{"rendered":"Wydanie Samba 4.17.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Wydano wydanie Samba 4.17.0, kt\u00f3re kontynuuje rozw\u00f3j ga\u0142\u0119zi Samba 4 z pe\u0142n\u0105 realizacj\u0105 kontrolera domeny i us\u0142ugi Active Directory, zgodnej z realizacj\u0105 Windows 2008 i mog\u0105cej obs\u0142ugiwa\u0107 wszystkie obs\u0142ugiwane przez Microsoft wersje klient\u00f3w Windows, w tym Windows 11. Samba 4 jest wielofunkcyjnym produktem serwerowym, kt\u00f3ry zapewnia r\u00f3wnie\u017c realizacj\u0119 serwera plik\u00f3w, us\u0142ugi druku oraz serwera identyfikacji (winbind).      <\/p>\n<p>Kluczowe zmiany w Samba 4.17:  <\/p>\n<ul>\n<li class=\"l\"> Przeprowadzono prace nad usuni\u0119ciem regresji w wydajno\u015bci obci\u0105\u017conych serwer\u00f3w SMB, kt\u00f3re pojawi\u0142y si\u0119 w wyniku dodania zabezpiecze\u0144 przed lukami manipuluj\u0105cymi linkami symbolicznymi. W\u015br\u00f3d przeprowadzonych optymalizacji wymienia si\u0119 skr\u00f3cenie wywo\u0142a\u0144 systemowych podczas sprawdzania nazwy katalogu oraz brak wykorzystywania zdarze\u0144 wakeup podczas przetwarzania konkurencyjnych operacji, prowadz\u0105cych do op\u00f3\u017anie\u0144.\n<li class=\"l\"> Wprowadzono mo\u017cliwo\u015b\u0107 kompilacji Samby bez wsparcia dla protoko\u0142u SMB1 w smbd. Aby wy\u0142\u0105czy\u0107 SMB1 w skrypcie konfiguracyjnym, dodano opcj\u0119 &#171;&#8212;without-smb1-server&#187; (dotyczy tylko smbd, wsparcie dla SMB1 pozostaje w bibliotekach klienckich).\n<li class=\"l\"> Przy u\u017cyciu MIT Kerberos 1.20 dodano mo\u017cliwo\u015b\u0107 przeciwdzia\u0142ania atakowi &#171;Bronze Bit&#187; (CVE-2020-17049), dzi\u0119ki przekazaniu dodatkowych informacji mi\u0119dzy komponentami KDC i KDB. Problem w stosowanym domy\u015blnie KDC opartym na Heimdal Kerberos zosta\u0142 rozwi\u0105zany w 2021 roku.\n<li class=\"l\"> Podczas kompilacji z MIT Kerberos 1.20 w kontrolerze <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pl\/domain\/\"   title=\"domeny\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4149\">domeny<\/a> W oparciu o Samb\u0119 dodano wsparcie dla rozszerze\u0144 Kerberos S4U2Self i S4U2Proxy, a tak\u017ce wprowadzono mo\u017cliwo\u015b\u0107 ograniczonego delegowania zasob\u00f3w (RBCD, Resource Based Constrained Delegation). Do komendy &#171;samba-tool delegation&#187; dodano podkomendy &#8216;add-principal&#8217; i &#8216;del-principal&#8217;. W stosowanym domy\u015blnie KDC opartym na Heimdal Kerberos tryb RBCD nie jest jeszcze wspierany.\n<li class=\"l\"> W wbudowanej us\u0142udze DNS dodano mo\u017cliwo\u015b\u0107 zmiany portu sieciowego, kt\u00f3ry przyjmuje zapytania (na przyk\u0142ad, aby uruchomi\u0107 na tej samej maszynie inny serwer DNS, kt\u00f3ry przekierowuje okre\u015blone zapytania do Samba).\n<li class=\"l\"> W komponencie CTDB, odpowiedzialnym za dzia\u0142anie konfiguracji klastrowych, zmniejszono wymagania dotycz\u0105ce sk\u0142adni pliku ctdb.tunables. Przy kompilacji Samby z opcjami &#171;&#8212;with-cluster-support&#187; i &#171;&#8212;systemd-install-services&#187; zapewniono instalacj\u0119 us\u0142ugi systemd dla CTDB. Zako\u0144czono dostarczanie skryptu ctdbd_wrapper \u2014 proces ctdbd jest teraz uruchamiany bezpo\u015brednio z us\u0142ugi systemd lub ze skryptu inicjalizacji.\n<li class=\"l\"> Dodano ustawienie &#8216;nt hash store = never&#8217;, uniemo\u017cliwiaj\u0105ce przechowywanie &#171;go\u0142ych&#187; (bez soli) skr\u00f3t\u00f3w hase\u0142 u\u017cytkownik\u00f3w Active Directory. W nast\u0119pnej wersji ustawienie &#8216;nt hash store&#8217; domy\u015blnie b\u0119dzie ustawione na &#171;auto&#187;, w kt\u00f3rym tryb &#171;never&#187; b\u0119dzie stosowany w przypadku, gdy ustawienie &#8216;ntlm auth = disabled&#8217; jest w\u0142\u0105czone.\n<li class=\"l\"> Proponowany jest interfejs do korzystania z API biblioteki smbconf z kodu w j\u0119zyku Python.\n<li class=\"l\"> W programie smbstatus wprowadzono mo\u017cliwo\u015b\u0107 wy\u015bwietlania informacji w formacie JSON (w\u0142\u0105czane opcj\u0105 &#171;&#8212;json&#187;).\n<li class=\"l\"> W kontrolerze domeny dodano wsparcie dla grupy bezpiecze\u0144stwa &#171;Chronieni u\u017cytkownicy&#187;, kt\u00f3ra pojawi\u0142a si\u0119 w Windows Server 2012 R2 i nie zezwala na u\u017cywanie niebezpiecznych typ\u00f3w szyfrowania (dla u\u017cytkownik\u00f3w w grupie wy\u0142\u0105czono wsparcie dla uwierzytelniania NTLM, Kerberos TGTs opartych na RC4 oraz ograniczonego i nieograniczonego delegowania).\n<li class=\"l\"> Zako\u0144czono wsparcie dla magazynu hase\u0142 oraz metody uwierzytelniania opartej na LanMan (ustawienie &#171;lanman auth = yes&#187; nie ma teraz znaczenia).<br \/>\n<br \/>\u0179r\u00f3d\u0142o: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57782\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 Microsoft \u0432\u0435\u0440\u0441\u0438\u0438 Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Windows 11. Samba 4 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u0435\u0447\u0430\u0442\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (winbind). \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105093","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-samba-4-17-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.17.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-samba-4-17-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-09-14T19:36:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-09-14T19:36:59+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wydanie Samba 4.17.0 | ProHoster","description":"Przedstawiono wydanie Samba 4.17.0, kt\u00f3re kontynuuje rozw\u00f3j ga\u0142\u0119zi Samba 4 z pe\u0142n\u0105 realizacj\u0105 kontrolera domeny i us\u0142ugi Active Directory, zgodnej z realizacj\u0105 Windows 2008 i zdolnej do obs\u0142ugi wszystkich.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-samba-4-17-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Samba 4.17.0 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 Samba 4.17.0, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 Samba 4 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Active Directory, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 Windows 2008 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0433\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-samba-4-17-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-14T19:36:59+00:00","article:modified_time":"2022-09-14T19:36:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105093","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-03-05 11:12:26","updated":"2026-03-05 11:12:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/105093","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=105093"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/105093\/revisions"}],"predecessor-version":[{"id":163252,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/105093\/revisions\/163252"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=105093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=105093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=105093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}