The Samba Team is pleased to announce a new major release of Samba, Samba 2.0. This is the latest stable release of Samba. This is the version that all production Samba servers should be running for all current bug-fixes. Samba 2.0.0 is available in source form from samba.org and all of our mirror sites at the url : /samba/ftp/samba-2.0.0.tar.gz Binary packages will be available shortly for many popular platforms. Please check the main Web site or email announcements for details. If you have problems, or think you have found a bug please email a report to : samba-bugs@samba.org The WHATSNEW.txt file follows. As always, any bugs are our responsibility, Regards, The Samba Team. ----------------------------------------------------------- Issues fixed between Beta5 and 2.0.0 ------------------------------------ 1). Fixed problems with SIGCLD causing infinite looping of smbd on Solaris in password changing code. 2). Fixed compile problem with mmap for HPUX. 3). Fixed issues with setreuid code not being used in preference to seteuid code. 4). Added capability to return the same NT ACL that NT does when queried on a DOS FAT filesystem. This fixes the "not implemented" error message for GetSecurityDescriptor() calls that was causing some NT apps to fail. 5). Fixed nmbd strange name loop problem. 6). Added fix to show full pathname for locked files. 7). Re-added FTRUNCATE_NEEDS_ROOT code and autoconf test for older systems. 8). nmbd now reloads smb.conf in main loop rather than in signal handler. 9). Re-wrote changenotify tests to do directory scan. Needed for Visual C++ to work correctly. 10). Re-wrote directory handle code to eliminate handle leak and allow infinite (well 4096) simultaneous handles using bitmap code. 11). Fixed bug where MS-Office wouldn't report file in use. 12). Caused timeout processing to be done correctly on timestamps, not on bogus counter. 13). Cause timeout processing to be done on receipt of SMBecho. 14). Added code to cope with NT bug where it's sending 64 bit lock ranges to a server that only handles 32 bit ranges. 15). Allows %S substitution to be used in force user. 16). Fixed autoconf test for setreuid. 17). Fixed bug in testparm with password changing parameter. 18). Fixed SWAT bug - now remove 'commit' button from areas where user doesn't have write access. ----------------------------------------------------------- Issues fixed between Beta4 and Beta5 ------------------------------------ 1). Recuse directory bug with NT and smbtar fixed. smbtar now recurses through all directories correctly. 2). Subtle bug fixed with the SIGCLD eating process status values in cases where they are needed. 3). Fixed autoconf detection and handling of the different setresuid/seteuid/setuid calls on different UNIXs. 4). Wrapped readdir64 for large file support. 5). Fixed --with-nisplus compile for Solaris. 6). Fixed wildcard bug with 16 bit clients. Also got closer to NT wildcard semantics. 7). Allowed seek fails with EPIPE when doing client seeks to allow Windows clients to communicate with UNIX processes via fifo's (worked on 1.9.18, was broken in 2.0.0beta1-4). 8). Fixed compile bug with slow share mode code. 9). Fixes for QNX compiles. 10). Fixed recursion bug in nmbd if WINS server returns an error at a bad time :-). 11). Log AFS auth fail. 12). Fixed Digital UNIX enhanced security problem with SWAT. 13). Updated SID generation code to produce NT compatible SIDs. 14). Fixed bug with ENOSPC on close() calls. This should now be detected and returned to the client. 15). NT transact parameters weren't being zeroed out before use. 16). Fixed lockread bug where it was asking for a read-only lock. It should be using a write lock (however strange this seems :-). 17). Many SWAT printer fixes from Herb Lewis. 18). SWAT parameters now grouped in a more logical way. 19). Changed main smbd select loop to 60 seconds, smb.conf checks to every 120 seconds to reduce load on large servers. ----------------------------------------------------------- Issues fixed between Beta3 and Beta4 ------------------------------------ 1). More sanity checks in testparm code to help diagnose smb.conf problems. 2). Ensure log header not written before log rotated. 3). Fix getrlimit number of file descriptors problem with AIX. AIX supports the call but always returns infinity. This was causing smbd to try and allocate a large amount of memory. 4). Fixed name lookup in lmhosts to match the documentation for name type lookup. 5). Removed need to link password database code into nmbd. 6). Stop nmbd sending broadcast name refresh requests, use permanent TTL on broadcast interfaces. 7). Flag "PRINTER" and "SHARE" parameters so SWAT can display them correctly. 8). Fix SWAT so that it can display auto-generated printer list. 9). Added AFS and DCE auth includes back. 10). Added workaround to Windows NT redirector bug where it sends 64 bit lock requests to systems that don't support 64 bit offsets (eg. Linux). 11). Fixed name mangling cache bug. 12). Fix smbpasswd bug where a missmatched password could be mis-interpreted when adding a user. 13). Updates to SWAT to display "commit" button if user has write access to smb.conf. 14). Fixed to autoconf for HPUX systems to work around broken HPUX shadow.h include file. ----------------------------------------------------------- Issues fixed between Beta2 and Beta3 ------------------------------------ 1). New parameters added : "add user script" "delete user script" Designed to allow Samba servers to be set up with no UNIX users and to allow them to create the needed UNIX users on the fly. See the smb.conf documentation for more details. 2). Autoconf issues including fixes for large file support for Solaris and SINIX, and stat64 tests on SVR4 systems. 3). Code dealing with dos pathnames and native pathnames split to be explicit about when Samba is accessing which type of name. 4). Fix for missing PRINTCAP define under HPUX. 5). Added Samba specific strtoul(). 6). Fix for reverse filename mapping with ISO8859-5 filenames. 7). Fix for nmbd not starting correctly sometimes due to pid locking file. 8). Check for error returns in file descriptor limit checking code. 9). Kernel oplock code bugfix. 10). Restored client retarget code. 11). Fix for potential stack overflow in Digital UNIX crypt check. 12). Explicitly test for negative uids in smbpasswd file. 13). Fix for NT username in Domain logon code. 14). Patch from Scott Moomaw scott@bridgewater.edu to correctly return "Invalid Info level" to Win95 printer clients. 15). Fix to allow NT printer clients to add printers (as 1.9.18 code would allow). 16). Fix to prevent ".." being used in servicename. 17). New SWAT icons. ----------------------------------------------------------- Issues fixed between Beta1 and Beta2 ------------------------------------ 1). Many autoconf issues (too many to list here). 2). Correctly set default printing for AIX. 3). Attempt to fix struct rtentry not being defined problem. 4). Convert all open() style calls to wrappers for 64 bit systems. 5). Get more 'const' correct. 6). Fix bug with O_EXCL not being set on exlusive open requests. 7). Fix string_sub() problem with LinPopup. 8). Fix lmhosts bug causing only 3 character names to be looked up. 9). Fixed bug with NetBIOS pointers in scope names. 10). Removed code that was preventing NT3.51 PDC logons from working. 11). Fixed crash bug when processing DELETE_ON_CLOSE directive from MS Office. 12). Fixed NT4.x problems adding printer. 13). Stop multiple logs of NT ACL's not supported messages. 14). Changed 'security=server' mode to use *SMBSERVER name if initial connect refused. 15). Fixed NT4.x problem with modify times not being preserved on explorer file copy. 16). 'Silent' switch for testparm. 17). Added 'hosts allow/deny' checks to SWAT. ----------------------------------------------------------- WHATS NEW IN Samba 2.0.0 ======================== This is a MAJOR new release of Samba, the UNIX based SMB/CIFS file and print server for Windows systems. There have been many changes in Samba since the last major release, 1.9.18. These have mainly been in the areas of performance and SMB protocol correctness. In addition, a Web based GUI interface for configuring Samba has been added. In addition, Samba has been re-written to help portability to other POSIX-based systems, based on the GNU autoconf tool. Major changes in Samba 2.0 -------------------------- There are many major changes in Samba for version 2.0. Here are some of them: ===================================================================== 1). Speed --------- Samba has been benchmarked on high-end UNIX hardware as out-performing all other SMB/CIFS servers using the Ziff-Davis NetBench benchmark. Many changes to the code to optimise high-end performance have been made. 2). Correctness --------------- Samba now supports the Windows NT specific SMB requests. This means that on platforms that are capable Samba now presents a 64 bit view of the filesystem to Windows NT clients and is capable of handling very large files. 3). Portability --------------- Samba is now self-configuring using GNU autoconf, removing the need for people installing Samba to have to hand configure Makefiles, as was needed in previous versions. You now configure Samba by running "./configure" then "make". See docs/textdocs/UNIX_INSTALL.txt for details. 4). Web based GUI configuration ------------------------------- Samba now comes with SWAT, a web based GUI config system. See the swat man page for details on how to set it up. 5). Cross protocol data integrity --------------------------------- An open function interface has been defined to allow "opportunistic locks" (oplocks for short) granted by Samba to be seen by other UNIX processes. This allows complete cross protocol (NFS and SMB) data integrety using Samba with platforms that support this feature. 6). Domain client capability ---------------------------- Samba is now capable of using a Windows NT PDC for user authentication in exactly the same way that a Windows NT workstation does, i.e. it can be a member of a Domain. See docs/textdocs/DOMAIN_MEMBER.txt for details. 7). Documentation Updates ------------------------- All the reference parts of the Samba documentation (the manual pages) have been updated and converted to a document format that allows automatic generation of HTML, SGML, and text formats. These documents now ship as standard in HTML and manpage format. ===================================================================== NOTE - Some important option defaults changed --------------------------------------------- Several parameters have changed their default values. The most important of these is that the default security mode is now user level security rather than share level security. This (incompatible) change was made to ease new Samba installs as user level security is easier to use for Windows 95/98 and Windows NT clients. ********IMPORTANT NOTE**************** If you have no "security=" line in the [global] section of your current smb.conf and you update to Samba 2.0 you will need to add the line : security=share to get exactly the same behaviour with Samba 2.0 as you did with previous versions of Samba. ********END IMPORTANT NOTE************* In addition, Samba now defaults to case sensitivity options that match a Windows NT server precisely, that is, case insensitive but case preserving. The default format of the smbpasswd file has also been changed for this release, although the new tools will read and write the old format, for backwards compatibility. ===================================================================== NOTE - Primary Domain Controller Functionality ---------------------------------------------- This version of Samba contains code that correctly implements the undocumented Primary Domain Controller authentication protocols. However, there is much more to being a Primary Domain Controller than serving Windows NT logon requests. A useful version of a Primary Domain Controller contains many remote procedure calls to do things like enumerate users, groups, and security information, only some of which Samba currently implements. In addition, there are outstanding (known) bugs with using Samba as a PDC in this release that the Samba Team are actively working on. For this reason we have chosen not to advertise and actively support Primary Domain Controller functionality with this release. This work is being done in the CVS (developer) versions of Samba, development of which continues at a fast pace. If you are interested in participating in or helping with this development please join the Samba-NTDOM mailing list. Details on joining are available at : http://lists.samba.org/listinfo/samba-ntdom/ Details on obtaining CVS (developer) versions of Samba are available at: http://www.samba.org/cvs.html ===================================================================== If you have problems, or think you have found a bug please email a report to : samba-bugs@samba.org As always, all bugs are our responsibility. Regards, The Samba Team. ----------------------------------------------------------------------