summaryrefslogtreecommitdiffstats
path: root/WHATSNEW.txt
diff options
context:
space:
mode:
authorGerald Carter <jerry@samba.org>2005-01-26 21:46:21 +0000
committerGerald Carter <jerry@samba.org>2005-01-26 21:46:21 +0000
commita3c5a5b5d7b4874e0d74fcc50720becb802e3080 (patch)
tree1aeccc69ff2b5fb930405f2faa654dedef579bd2 /WHATSNEW.txt
parentd9abdd45339e2d65445a1fd685cb0294729ac4e7 (diff)
downloadsamba-a3c5a5b5d7b4874e0d74fcc50720becb802e3080.tar.gz
samba-a3c5a5b5d7b4874e0d74fcc50720becb802e3080.tar.xz
samba-a3c5a5b5d7b4874e0d74fcc50720becb802e3080.zip
r5022: draft of release notes
Diffstat (limited to 'WHATSNEW.txt')
-rw-r--r--WHATSNEW.txt119
1 files changed, 113 insertions, 6 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 81ca4b771a1..19416db47ed 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,3 +1,87 @@
+ =================================
+ Release Notes for Samba 3.0.11rc1
+ Jan 28, 2005
+ ==================================
+
+This is a release candidate of the Samba 3.0.11 code base and is
+provided for testing only. While close to the final stable release,
+this snapshot is *not* intended for production servers. If all
+goes well, this this version will become the final 3.0.11 stable
+release (with possible minor changes).
+
+Common bugs fixed in 3.0.11rc1 include:
+
+ o Crash in smbd when using CUPS printing.
+ o Parsing error of other SIDs included in the user_info_3
+ structure returned from domain controllers.
+
+
+Administrator Domain SID
+------------------------
+
+Please note that when configured as a DC, it is now required
+that an account in the server's passdb backend be set to the
+domain SID of the default Administrator account. To obtain the
+domain SID on a Samba DC, run the following command:
+
+root# net getlocalsid
+SID for domain FOO is: S-1-5-21-4294955119-3368514841-2087710299
+
+You may then assign the Domain Administrator rid to an account
+via pdbedit:
+
+root# pdbedit -U S-1-5-21-4294955119-3368514841-2087710299-500 \
+-u root -r
+
+
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.11pre2
+------------------------
+
+commits
+-------
+o Jeremy Allison <jra@samba.org>
+ * BUG 2092: Prevent auto-anonymous logins via libsmbclient
+ for better use by desktop environments such as GNOME.
+ * Ensure we can't remove a level II oplock without having the
+ shared memory area locked.
+
+
+o Gerald (Jerry) Carter <jerry@samba.org>
+ * RedHat and Fedora Packaging fixes for perl dependencies.
+ * Remove unused schema items from OpenLDAP schema file.
+ * Remove duplicate enumeration of "Windows x86" architecture
+ when listing printer drivers via rpcclient.
+ * Fail set_privileges() if 'enable privileges = no' to prevent
+ confused admins.
+ * Fix segfault in cups_queue_get().
+ * Tighten restrictions on changing user passwords when
+ the connected user possesses the SeMachineAccountPrivilege.
+
+
+o Guenther Deschner <gd@samba.org>
+ * Fix configure.in tests using KRB5_CONFIG variable and krb5-
+ config utility.
+ * Require assignment of Administrator SID in the passdb
+ backend. No longer default to 'root' or 'admin users' list.
+ * Enhance LDAP failure debug messages.
+
+
+o Volker Lendecke <vl@samba.org>
+ * Allow 'rpcclient -c enumtrust' to enumerate more than 10 trusts.
+ * Fix parsing of other_sids in net_user_info3.
+ * Correct bad failure logic when user was not a member of any
+ domain local groups.
+
+
+Changes for older versions follow below:
+
+ --------------------------------------------------
+
==================================
Release Notes for Samba 3.0.11pre2
Jan 21, 2005
@@ -11,7 +95,7 @@ to the Samba community for wider testing.
Common bugs fixed in 3.0.11pre2 include:
- o Ineffeciencies when searching non-AD LDAP directories.
+ o Inefficiencies when searching non-AD LDAP directories.
o Failure to expand variables in user domain attributes
in tdbsam and ldapsam.
o Memory leaks.
@@ -22,16 +106,41 @@ Additional features introduced in Samba 3.0.11pre1:
o Support for the Windows privilege model to assign rights
to specific SIDs.
- o New adminstrative options to the 'net rpc' command.
+ o New administrative options to the 'net rpc' command.
+
+LDAP Changes
+------------
+
+If "ldap user suffix" or "ldap machine suffix" are defined in
+smb.conf, all user-accounts must reside below the user suffix,
+and all machine trust-accounts must be located below the machine
+suffix.
+
+
+Privilege Model
+---------------
+
+Samba 3.0.11pre2 supports the following assignable rights
+
+SeMachineAccountPrivilege Add machines to domain
+SePrintOperatorPrivilege Manage printers
+SeAddUsersPrivilege Add users and groups to the domain
+SeRemoteShutdownPrivilege Force shutdown from a remote system
+SeDiskOperatorPrivilege Manage disk shares
+
+These rights can be assigned to arbitrary users or groups
+via the 'net rpc rights grant/revoke' command. More details
+of Samba's privilege implementation will be available in a
+forthcoming HOWTO.
######################################################################
Changes
#######
-Changes since 3.0.10
---------------------
+Changes since 3.0.11pre1
+------------------------
smb.conf changes
----------------
@@ -164,8 +273,6 @@ o Jelmer Vernooij <jelmer@samba.org>
* Fixes for pdb_mysql.
-Changes for older versions follow below:
-
--------------------------------------------------
==================================