Ukukhishwa kwe-Samba 4.16.0

Ukukhishwa kwe-Samba 4.16.0 kuyethulwa, okuqhubeka nokuthuthukiswa kwegatsha le-Samba 4 ngokuqaliswa okuphelele kwesilawuli sesizinda kanye nesevisi ye-Active Directory ehambisana nokuqaliswa kwe-Windows 2000 futhi ekwazi ukuhlinzeka zonke izinguqulo ze Amaklayenti e-Windows asekelwa yi-Microsoft, okuhlanganisa i-Windows 10. I-Samba 4 iwumkhiqizo weseva osebenza ngezindlela eziningi , ophinde unikeze ngokusetshenziswa kweseva yefayela, isevisi yokuphrinta, kanye neseva kamazisi (winbind).

Izinguquko ezibalulekile ku-Samba 4.16:

  • Isakhiwo sihlanganisa ifayela elisha elisebenzisekayo le-samba-dcerpcd, eliqinisekisa ukusebenza kwezinsizakalo ze-DCE/RPC (Indawo Yekhompyutha Esabalalisiwe / Izingcingo Zenqubo Ekude). Ukuze kucutshungulwe izicelo ezingenayo, i-samba-dcerpcd ingacelwa njengoba idingeka kuzinqubo ze-smbd noma ze-“winbind —np-helper”, idlulise ulwazi ngamapayipi aqanjwe igama. Ngaphezu kwalokho, i-samba-dcerpcd ingaphinda isebenze njengenqubo yangemuva esebenza ngokuzimela ecubungula izicelo ngokuzimela, futhi ingasetshenziswa hhayi nge-samba kuphela, kodwa futhi nokunye ukuqaliswa kwamaseva e-SMB2, njengeseva ye-ksmbd eyakhelwe ku-Linux kernel. Ukuze ulawule ukwethulwa kwe-samba-dcerpcd ku-smb.conf esigabeni esithi “[global]”, isilungiselelo esithi “rpc start on demand helpers = [true|false]” siyaphakanyiswa.
  • Ukufakwa kweseva yomdabu ye-Kerberos kubuyekezwe ku-Heimdal 8.0pre, okuhlanganisa usekelo lwendlela yezokuphepha ye-FAST, ehlinzeka ngokuvikela kokuqinisekisa ngokufaka izicelo nezimpendulo emhubheni obethelwe ohlukile.
  • Kwengezwe indlela yokubhalisa okuzenzakalelayo kwesitifiketi, esikuvumela ukuthi uthole izitifiketi ngokuzenzakalelayo kumasevisi ohlu lwemibhalo uma unika amandla izinqubomgomo zeqembu (“sebenzisa izinqubomgomo zeqembu” ku-smb.conf).
  • Iseva ye-DNS eyakhelwe ngaphakathi ikuvumela ukuthi usebenzise inombolo yembobo yenethiwekhi ngokunganaki lapho unquma amaseva e-DNS yokuqondisa kabusha izicelo (umdluliseli we-dns). Uma ngaphambilini kuphela umsingathi wokuqondisa kabusha ebengacaciswa kuzilungiselelo, manje ulwazi lungacaciswa kumsingathi:ifomethi yembobo.
  • Engxenyeni ye-CTDB, ebhekele ukusebenza kokucushwa kweqoqo, izindima "zokubuyisela kabusha" kanye "nokhiye wokubuyisela" ziqanjwe kabusha ngokuthi "umholi" kanye "ne-cluster lock", futhi esikhundleni sokuthi "master" igama elithi "umholi" kufanele isetshenziswe emiyalweni ehlukahlukene (recmaster -> leader , setrecmasterrole -> setleaderrole).
  • Usekelo lomyalo we-SMBCopy (SMB_COM_COPY) kanye nomsebenzi we-wildcard emagameni wamafayela asebenza ohlangothini lweseva futhi achazwe kuphrothokholi yefa le-SMB1 kunqanyuliwe. Ukusebenza kwephrothokholi ye-SMB2 yokukopisha amafayela ohlangothini lweseva kuhlala kungashintshile.
  • Kuplathifomu ye-Linux, i-smbd iyekile ukusebenzisa ukukhiya ifayela okuyimpoqo ekusetshenzisweni "kwezindlela zokwabelana". Amalokhi anjalo, asetshenziswa ku-kernel ngokusebenzisa izingcingo zesistimu futhi athathwa njengengathembekile ngenxa yezimo zomjaho ezingaba khona, awasekelwa kusukela ku-Linux kernel 5.15.

Source: opennet.ru

Engeza amazwana