Ukukhishwa kwe-Samba 4.12.0

Kuthunyelwe ngu- ukukhululwa I-Samba 4.12.0, owaqhubeka nokuthuthukiswa kwegatsha I-Samba 4 ngokuqaliswa okuphelele kwesilawuli sesizinda kanye nesevisi ye-Active Directory ehambisana nokusetshenziswa kwe-Windows 2000 futhi ekwazi ukuhlinzeka zonke izinguqulo zamaklayenti e-Windows asekelwa yi-Microsoft, okuhlanganisa Windows 10. I-Samba 4 iwumkhiqizo weseva ocebile futhi ihlinzeka ngokusetshenziswa kweseva yefayela, isevisi yokuphrinta, kanye neseva kamazisi (winbind).

Ukhiye shintsha ku-Samba 4.12:

• Kukhishwe ukusetshenziswa okwakhelwe ngaphakathi kwemisebenzi ye-cryptographic kusuka ku-codebase ngokuvuna ukusebenzisa amalabhulali angaphandle. Kunqunywe ukusebenzisa i-GnuTLS njengomtapo wezincwadi omkhulu we-crypto (okungenani inguqulo engu-3.4.7 iyadingeka). Ngokungeziwe ekwehliseni izinsongo ezingaba khona ezihlobene nokutholwa kobungozi ekusetshenzisweni okwakhelwe ngaphakathi kwama-cryptographic algorithms, ukushintshela ku-GnuTLS kuphinde kwavumela ukuthuthukiswa kokusebenza okubalulekile lapho kusetshenziswa ukubethela ku-SMB3. Lapho ihlolwa ngokusetshenziswa kweklayenti le-CIFS kusukela ku-Linux 5.3 kernel, ukukhuphuka okungu-3x kwesivinini sokubhala kanye nesivinini sokufunda esingu-2.5x sarekhodwa.
• Kwengezwe i-backend entsha yokusesha kuma-partitions we-SMB kusetshenziswa umthetho olandelwayo Ukubukekainjini yokusesha esekelwe Islastiki (inikeziwe ngaphambilini i-backend esekelwe I-GNOME Tracker). Insiza ye-"mdfind" iphinde yengezwa ekuqanjweni ngokusetshenziswa kweklayenti okukuvumela ukuthi uthumele izicelo zosesho kunoma iyiphi iseva ye-SMB esebenzisa isevisi ye-Spotlight RPC. Ukulungiselelwa kwe-'spotlight backend' kushintshile ukusuka kokuzenzakalelayo kuya ku-'noindex' (I-Tracker noma i-Elasticsearch kufanele isethwe ngokucacile ukuze ithi 'tracker' noma 'elasticsearch').
• Kushintshwe ukuziphatha kwemisebenzi ye-'net ads kerberos pac save' kanye nemisebenzi 'ye-net eventlog export', manje engalisusi ifayela, futhi uma bezama ukuthekelisa kufayela elikhona, babonisa iphutha.
• Ukwengeza okufakiwe koxhumana nabo kumalungu eqembu kuthuthukisiwe ngethuluzi le-samba. Ngenkathi ngaphambilini, usebenzisa umyalo 'we-samba-tool group addmemers', ungavele wengeze abasebenzisi, amaqembu, namakhompyutha njengamalungu amasha amaqembu, manje kukhona usekelo lokwengeza abathintwayo njengamalungu amaqembu.
• Ithuluzi le-samba livumela ukuhlunga ngeyunithi yenhlangano (i-OU, Iyunithi Yenhlangano) noma i-subtree. Amafulegi amasha "--base-dn" kanye "--member-base-dn" engeziwe, okwenza kube nokwenzeka ukwenza umsebenzi kuphela ngengxenye ethile yesihlahla se-Active Directory, isibonelo, ngaphakathi kwe-OU eyodwa kuphela.
• Kwengezwe imojula entsha ye-VFS 'io_uring' kusetshenziswa isixhumi esibonakalayo se-Linux kernel entsha io_ring okwe-asynchronous I/O. I-Io_uring isekela ukuvota kwe-I/O futhi ingasebenza ngokugcina kumthamo (indlela ye-"aio" ehlongozwe ngaphambilini ayizange isekele i-I/O egciniwe). Uma usebenza ngokuvota kunikwe amandla, i-io_uring ihamba phambili kakhulu kune-aio ngokuya ngokusebenza. I-Samba manje isekela i-SMB_VFS_{PREAD,PWRITE,FSYNC}_SEND/RECV ngokusekelwe ku-io_uring futhi yehlisa i-overhead yokugcina i-threadpool yendawo yomsebenzisi uma usebenzisa i-backend ye-VFS ezenzakalelayo. Ukwakha imojuli ye-VFS ethi 'io_uring' kudinga umtapo wolwazi ukukhulula kanye ne-Linux kernel 5.1+.
• I-VFS inikeza ikhono lokucacisa inani lesikhathi le-UTIME_OMIT elikhethekile lokumaka isidingo sokuziba isikhathi kumsebenzi we-SMB_VFS_NTIMES().
• I-smb.conf yehlise usekelo lwepharamitha "yosayizi wenqolobane yokubhala", engaba yize ngemva kokuthi io_uring yengezwe.
• I-Samba-DC kanye ne-Kerberos yehlile usekelo lokubethela kwe-DES. Kukhishwe ikhodi ye-crypto ebuthakathaka ku-Heimdal-DC.
• Kukhishwe imojuli ye-vfs_netatalk, eshiywe inganakekile futhi isiphelelwe yisikhathi.
• I-backend ye-BIND9_FLATFILE yehlisiwe futhi izosuswa ekukhishweni okuzayo.
• Umtapo wezincwadi we-zlib ufakiwe kokuncika kokwakha. Ukuqaliswa okwakhelwe ngaphakathi kwe-zlib kukhishiwe ku-codebase (ikhodi ibisekelwe enguqulweni endala ye-zlib ebingakusekeli kahle ukubethela).
• Kusungulwe ukuhlola okufingqiwe kwesisekelo sekhodi, okuhlanganisa nesevisi
  oss fuz. Ngesikhathi sokuhlolwa kwe-fuzzing, izimbungulu eziningi zikhonjiwe futhi zalungiswa.

• Izidingo ezincane zenguqulo yePython eziphakanyiswe kuPython
  3.4 kuya kuPython 3.5. Ikhono lokwakha iseva yefayela nge-Python 2 lilondolozwe okwamanje (ngaphambi kokuqalisa ./configure' kanye 'nokwenza', kufanele usethe ukuguquguquka kwemvelo 'PYTHON=python2').

Source: opennet.ru