WHATSNEW.txt: Preparing for 1.9.18alpha2 release.

smb.conf.5: Added 'bind interfaces only' parameter.
version.h: Updated to 1.9.18alpha2.
Jeremy (jallison@whistle.com)

4 files changed, 180 insertions, 100 deletions

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 072679d0401..69d6185e02a 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,95 +1,140 @@
-              WHATS NEW IN 1.9.17 - August 25th 1997
-              ======================================
-
-New stable release of Samba.
-----------------------------
-
-This is the new stable release of Samba, superceding
-the last stable release 1.9.16p11. All users are
-encouraged to upgrade to this new release as there have
-been many improvements to the code since that time.
-See the Frequently Asked Questions (under docs/faq) for
-an explanation of how the version numbering scheme works,
-distinguishing between stable and development releases.
-
-Changes since 1.9.16p11.
-------------------------
-
-Improved browsing support. 
---------------------------
-
-Samba now should support propagation of browse lists 
-across subnets correctly. Look in the file docs/BROWSING.txt 
-as it has been largely re-written to explain how to do this.
-
-*IMPORTANT* All Samba servers acting as local/domain master
-browsers must be running 1.9.17 (or later).
-
-Thanks to Silicon Graphics for allowing us to test the new 
-code on their corporate network.
-
-
-Improved share mode handling
-----------------------------
-
-The handling of share modes has been completely rewritten.
-Samba can now run agressive PC Benchmarks (Ziff-Davis
-NetBench) correctly with many hundreds of concurrent PC's.
-The confidence level on share mode handling in Samba
-is now much higher than it was previously. PC database
-packages should be safe when run against a Samba share. 
-Thanks to Silicon Graphics for testing this code for us.
-
-If at all possible compile Samba to use the new share
-mode handling with shared memory (set the flags 
-FAST_SHARE_MODES in the Makefile). This will be *much* faster
-than old file-based share modes. FAST_SHARE_MODES have
-been turned on by default on the following platforms in
-the Makefile :
-
-	Linux
-	Solaris
-	BSDI
-	IRIX 5.x.x
-	FreeBSD
-
-Roving profile support.
------------------------
-
-Roving profiles are believed to work correctly
-with Windows NT 4.x and Windows 95. Domain logons
-are fully implemented *for Windows 95 machines only*.
-
-
-Updated documentation
----------------------
-All options are now documented in the smb.conf man page
-we believe. Much work has been done by Samba Team members
-to improve the quality and quantity of the Samba documentation.
-
-A draft new structure for documentation is being worked on: see
-docs/faq/Samba-meta-FAQ for details. This will soon be a master
-reference to all Samba documentation.
-
-Many bugfixes and improvements
-------------------------------
-From around the 'net around the world. Many
-thanks to everyone who contributed.
-
-Commercial thanks.
-------------------
-
-Thanks to Cisco for the new netbios alias code support.
-Thanks to Silicon Graphics for the help with the cross
-subnet browsing and NetBench code.
-Thanks to Whistle for funding one of the Samba Team
-members.
-
-Reporting bugs
---------------
-
-The Samba Team believes that this is a stable
-production release, but all software has bugs.
+          WHATS NEW IN 1.9.18alpha2 Oct 21st 1997
+          =======================================
+
+This is NOT a production release of Samba code.
+For production servers please run Samba 1.9.17p4
+or later releases in the 1.9.17 series.
+
+This release contains some experimental features and
+changes and is being made available so people can
+test and provide feedback and patches for ongoing
+Samba development.
+
+Please note that only the Domain controler code
+is truly experimental. The other changes have
+been extensively tested and are of the same
+quality as normal Samba alpha releases. The
+Domain controler code is disabled in the Makefile
+by default and is being made available to Samba
+programmers in the interests of advancing a 
+public implementation of this important protocol.
+
+This release contains three major changes to the 
+1.9.17 series and much re-written code.
+
+The main changes are :
+
+1). Oplock support now operational.
+-----------------------------------
+
+Samba now supports 'exclusive' and 'batch' oplocks.
+These are an advanced networked file system feature
+that allows clients to obtain a exclusive use of a 
+file. This allows a client to cache any changes it
+makes locally, and greatly improves performance.
+
+Windows NT has this feature and prior to this
+release this was one of the reasons Windows NT
+could be faster in some situations.
+
+The oplock code in Samba has been extensively
+tested and is believed to be completely stable.
+
+Please report any problems to the samba-bugs alias.
+
+2). Experimental Domain controler code.
+---------------------------------------
+
+Samba now contains a *VERY* experimental
+implementation of part of the Windows NT
+4.x Domain Controler specification, as
+published by Paul Ashton (now a Samba Team
+member). This code is not enabled in the
+Makefile by default, and to work on this 
+code you must read the file :
+
+   docs/NTDOMAIN.txt
+
+Please note that as this code is not complete.
+It is being made available as part of this
+release to allow interested parties to contribute
+and help the Samba Team in implementing this
+important feature.
+
+Please do not expect to be able to replace your
+NT Domain Controlers with Samba until this code
+is finished, tested and an announcement is made.
+
+At present the Domain Controler code is for 
+programmers and people interested in Microsoft 
+protocols only.
+
+3). New Internationalization support.
+-------------------------------------
+
+With this release Samba no longer needs to be
+separately compiled for Japanese (Kanji) support,
+the same binary will serve both Kanji and non-Kanji
+clients.
+
+A new method of dynamically loading client code pages
+has been added to allow the case insensitivity to
+be done dependent on the code page of the client.
+
+Note that Samba still will only handle one client
+code page at a time. This will be fixed when
+Samba is fully UNICODE enabled.
+
+Please see the new man page for make_smbcodepage
+for details on adding additional client code page
+support.
+
+Changed code.
+-------------
+
+Samba no longer needs the libdes library to support
+encrypted passwords. Samba now contains a restricted
+version of DES that can only be used for authentication
+purposes (to comply with the USA export encryption
+regulations and to allow USA Mirror sites to carry
+Samba source code). The 'encrypt passwords' parameter
+may now be used without recompiling.
+
+Much of the internals of Samba has been re-structured
+to support the oplock and Domain controler changes.
+
+New parameters in smb.conf.
+---------------------------
+
+New Global parameters.
+----------------------
+
+Documented in the smb.con man pages :
+
+"bind interfaces only"
+"username level"
+
+Not yet documented in the smb.conf man page, please 
+read docs/NTDOMAIN.txt for information on the next 
+parameters.
+
+"domain sid"
+"domain groups"
+"logon drive"
+"logon home"
+
+New Share level parameters.
+---------------------------
+
+Documented in the smb.con man pages :
+
+"delete veto files"
+"oplocks"
+
+
+Reporting bugs.
+---------------
+
 If you have problems, or think you have found a
 bug please email a report to :
 
diff --git a/docs/manpages/smb.conf.5 b/docs/manpages/smb.conf.5
index 44a6d7dfd0b..3f2643450df 100644
--- a/docs/manpages/smb.conf.5
+++ b/docs/manpages/smb.conf.5
@@ -331,6 +331,8 @@ announce version
 
 auto services
 
+bind interfaces only
+
 browse list
 
 character set
@@ -375,6 +377,8 @@ hosts equiv
 
 include
 
+interfaces
+
 keepalive
 
 lock dir
@@ -816,6 +820,40 @@ ALL attempts to connect to the service will fail. Such failures are logged.
 
 .B Example:
  	available = no
+
+.SS bind interfaces only (G)
+This global parameter (new for 1.9.18) allows the Samba admin to limit
+what interfaces on a machine will serve smb requests. If affects file service
+(smbd) and name service (nmbd) in slightly different ways.
+
+For name service it causes nmbd to bind to ports 137 and 138 on
+the interfaces listed in the 'interfaces' parameter. nmbd also binds
+to the 'all addresses' interface (0.0.0.0) on ports 137 and 138
+for the purposes of reading broadcast messages. If this option is
+not set then nmbd will service name requests on all of these
+sockets. If "bind interfaces only" is set then nmbd will check
+the source address of any packets coming in on the broadcast
+sockets and discard any that don't match the broadcast addresses
+of the interfaces in the 'interfaces' parameter list. As unicast
+packets are received on the other sockets it allows nmbd to
+refuse to serve names to machines that send packets that arrive
+through any interfaces not listed in the 'interfaces' list.
+IP Source address spoofing does defeat this simple check, however
+so it must not be used seriously as a security feature for nmbd.
+
+For file service it causes smbd to bind only to the interface
+list given in the 'interfaces' parameter. This restricts the
+networks that smbd will serve to packets coming in those interfaces.
+Note that you should not use this parameter for machines that
+are serving ppp or other intermittant or non-broadcast network
+interfaces as it will not cope with non-permanent interfaces.
+
+.B Default:
+       bind interfaces only = False
+
+.B Example:
+       bind interfaces only = True
+
 .SS browseable (S)
 This controls whether this share is seen in the list of available
 shares in a net view and in the browse list.
@@ -3673,7 +3711,7 @@ administrator easy, but the various combinations of default attributes can be
 tricky. Take extreme care when designing these sections. In particular,
 ensure that the permissions on spool directories are correct.
 .SH VERSION
-This man page is (mostly) correct for version 1.9.16 of the Samba suite, plus some
+This man page is (mostly) correct for version 1.9.18 of the Samba suite, plus some
 of the recent patches to it. These notes will necessarily lag behind 
 development of the software, so it is possible that your version of 
 the server has extensions or parameter semantics that differ from or are not 
diff --git a/docs/textdocs/DOMAIN_CONTROL.txt b/docs/textdocs/DOMAIN_CONTROL.txt
index 0b077320cdb..7e1b5c62096 100644
--- a/docs/textdocs/DOMAIN_CONTROL.txt
+++ b/docs/textdocs/DOMAIN_CONTROL.txt
@@ -19,12 +19,9 @@ SMB domains based on shared authentication database schemes other than the
 Windows NT SAM.
 
 Microsoft Windows NT Domain Control is an extremely complex protocol.
-We have received countless requests to implement Domain Control in Samba
-and have seriously investigated the potential to support this. The Samba
-Team have now concluded that since Domain Control is a completely
-undocumented protocol we ought NOT to implement our best guess of this
-technology. It is a Microsoft business policy NOT to release the information
-necessary to enable this to be implemented in a dependable manner.
+We have received countless requests to implement Domain Control in Samba.
+The 1.9.18 release of Samba contains experimental code to implement
+this. Please read the file docs/NTDOMAIN.txt for more information on this.
 ============================================================================
 
 Windows NT Server can be installed as either a plain file and print server
diff --git a/source/include/version.h b/source/include/version.h
index 33c9d240baf..129c695d8b9 100644
--- a/source/include/version.h
+++ b/source/include/version.h
@@ -1 +1 @@
-#define VERSION "1.9.18alpha1"
+#define VERSION "1.9.18alpha2"