Ukukhishwa kwe-Samba 4.14.0

Ukukhishwa kwe-Samba 4.14.0 kuyethulwa, okuqhubeka nokuthuthukiswa kwegatsha le-Samba 4 ngokuqaliswa okuphelele kwesilawuli sesizinda kanye nesevisi ye-Active Directory ehambisana nokuqaliswa kwe-Windows 2000 futhi ekwazi ukuhlinzeka zonke izinguqulo ze Amaklayenti e-Windows asekelwa yi-Microsoft, okuhlanganisa i-Windows 10. I-Samba 4 iwumkhiqizo weseva osebenza ngezindlela eziningi , ophinde unikeze ngokusetshenziswa kweseva yefayela, isevisi yokuphrinta, kanye neseva kamazisi (winbind).

Izinguquko ezibalulekile ku-Samba 4.14:

  • Ukuthuthukiswa okuphawulekayo kwenziwe kungqimba lwe-VFS. Ngenxa yezizathu zomlando, ikhodi ngokusetshenziswa kweseva yefayela yayiboshelwe ekucutshungulweni kwezindlela zefayela, nayo eyayisetshenziselwa iphrothokholi ye-SMB2, eyadluliselwa ekusetshenzisweni kwezichazi. Ku-Samba 4.14.0, ikhodi enikeza ukufinyelela kusistimu yefayela yeseva iklanywe kabusha ukuze isebenzise izichazi zefayela kunezindlela zefayela. Isibonelo, ukushayela i-fstat() esikhundleni sokuthi stat() kanye ne-SMB_VFS_FSTAT() esikhundleni sokuthi SMB_VFS_STAT() kuhilelekile.
  • Ukuthembeka kwamaphrinta okushicilela ku-Active Directory sekuthuthukisiwe futhi ulwazi lwephrinta oluthunyelwe ku-Active Directory lunwetshiwe. Usekelo olungeziwe lwamashayeli ephrinta ye-Windows kumasistimu we-ARM64.
  • Ikhono lokusebenzisa i-Group Policy kumakhasimende e-Winbind linikeziwe. Umqondisi Wohlu Lwemibhalo Esebenzayo manje usengakwazi ukuchaza izinqubomgomo ezishintsha izilungiselelo ze-sudoers noma zengeze imisebenzi ye-cron ngezikhathi ezithile. Ukuze unike amandla ukusetshenziswa kwezinqubomgomo zeqembu kuklayenti, ukulungiselelwa kokuthi 'sebenzisa izinqubomgomo zeqembu' kunikezwa ku-smb.conf. Izinqubomgomo zisetshenziswa njalo ngemizuzu engama-90-120. Esimeni sezinkinga, kungenzeka ukuhlehlisa izinguquko ngomyalo othi "samba-gpupdate -unapply" noma uphinde usebenzise umyalo othi "samba-gpupdate -force". Ukuze ubuke izinqubomgomo ezizosetshenziswa ohlelweni, ungasebenzisa umyalo "samba-gpupdate -rsop".
  • Izidingo zenguqulo yolimi lwePython zinyusiwe. Ukwakha iSamba manje kudinga okungenani inguqulo yePython 3.6. Ukwakha ngokukhishwa okudala kwePython kunqanyuliwe.
  • Ithuluzi le-samba lisebenzisa amathuluzi okuphatha izinto Kuhla Lwemibhalo Olusebenzayo (abasebenzisi, amakhompyutha, amaqembu). Ukwengeza into entsha ku-AD, manje ungasebenzisa umyalo othi “engeza” ngaphezu komyalo othi “dala”. Ukuqamba kabusha abasebenzisi, amaqembu kanye noxhumana nabo, umyalo othi "qamba kabusha" uyasekelwa. Ukuze uvule abasebenzisi, umyalo 'we-samba-tool user unlock' uyaphakanyiswa. 'Uhlu lwabasebenzisi bethuluzi le-samba' kanye nemiyalo ye-'samba-tool group listmembers' isebenzisa izinketho "--hide-expired" kanye "--hide-disabled" ukuze kufihlwe ama-akhawunti omsebenzisi aphelelwe yisikhathi noma akhutshaziwe.
  • Ingxenye ye-CTDB, ebhekele ukusebenza kokucushwa kweqoqo, isuliwe imigomo engalungile ngokwepolitiki. Esikhundleni senkosi nesigqila, lapho kumiswa i-NAT ne-LVS, kuhlongozwa ukuthi kusetshenziswe "umholi" ukubhekisela ku-node eyinhloko eqenjini kanye "nomlandeli" ukumboza amalungu asele eqembu. Umyalo othi "ctdb natgw master" ufakwe esikhundleni sika-"ctdb natgw leader". Ukukhombisa ukuthi i-node ayiyena umholi, ifulegi elithi “umlandeli kuphela” seliboniswa esikhundleni sokuthi “inceku kuphela”. Umyalo othi "ctdb isnotrecmaster" ususiwe.

Ukwengeza, incazelo inikezwa mayelana nobubanzi belayisensi ye-GPL, lapho ikhodi ye-Samba isatshalaliswa ngaphansi kwayo, kuzingxenye ze-VFS (Virtual File System). Ilayisensi ye-GPL idinga ukuthi yonke imisebenzi esuselwe ivulwe ngaphansi kwemigomo efanayo. I-Samba ine-plugin interface ekuvumela ukuthi ushayele ikhodi yangaphandle. Elinye lalawa ma-plugin amamojula e-VFS, asebenzisa amafayela kanhlokweni afanayo njenge-Samba anencazelo ye-API okufinyelelwa ngayo amasevisi aqaliswe ku-Samba, yingakho amamojula e-Samba VFS kufanele asatshalaliswe ngaphansi kwe-GPL noma ilayisensi ehambisanayo.

Kuvela ukungaqiniseki mayelana namalabhulali ezinkampani zangaphandle amamojula we-VFS afinyelela kuwo. Ikakhulukazi, kwavezwa umbono wokuthi imitapo yolwazi engaphansi kwe-GPL kuphela namalayisensi ahambisanayo angasetshenziswa kumamojula e-VFS. Onjiniyela be-Samba bacacise ukuthi imitapo yolwazi ayibizi ikhodi ye-Samba nge-API noma ifinyelele izakhiwo zangaphakathi, ngakho ayikwazi ukubhekwa njengemisebenzi ephuma kokunye futhi akudingekile ukuthi isatshalaliswe ngaphansi kwamalayisensi athobela i-GPL.

Source: opennet.ru

Engeza amazwana