The branch, v4-9-stable has been updated via 4fc4ae2 VERSION: Disable GIT_SNAPSHOT for the 4.9.0 release via ea7784a WHATSNEW: Add release notes for Samba 4.9.0. via 834631b WHATSNEW: Fix typo. via efbb842 WHATSNEW: 'samba-tool ou' command: manage organizational units via 9bb128f samba_dnsupdate: honor 'dns zone scavenging' option, only update if needed via b94c676 WHATSNEW.txt: announce 4.9.0 trust improvements via c9743ba wafsamba: Fix 'make -j<jobs>' via fa4c7f4 VERSION: Bump version up to 4.9.0rc6... from 71aa4d1 VERSION: Disable GIT_SNAPSHOT for the 4.9.0rc5 release.
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-9-stable - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: VERSION | 2 +- WHATSNEW.txt | 80 +++++++++++++++++++++++++++++------ buildtools/wafsamba/samba_utils.py | 9 +++- selftest/knownfail.d/dns | 2 - source4/scripting/bin/samba_dnsupdate | 15 ++++++- 5 files changed, 89 insertions(+), 19 deletions(-) Changeset truncated at 500 lines: diff --git a/VERSION b/VERSION index 89ac63f..cbf21a9 100644 --- a/VERSION +++ b/VERSION @@ -87,7 +87,7 @@ SAMBA_VERSION_PRE_RELEASE= # e.g. SAMBA_VERSION_RC_RELEASE=1 # # -> "3.0.0rc1" # ######################################################## -SAMBA_VERSION_RC_RELEASE=5 +SAMBA_VERSION_RC_RELEASE= ######################################################## # To mark SVN snapshots this should be set to 'yes' # diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 07cd9f2..d344d9b 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,22 +1,16 @@ -Release Announcements -===================== - -This is the fifth release candidate of Samba 4.9. This is *not* -intended for production environments and is designed for testing -purposes only. Please report any defects via the Samba bug reporting -system at https://bugzilla.samba.org/. - -Samba 4.9 will be the next version of the Samba suite. + ============================= + Release Notes for Samba 4.9.0 + September 13, 2018 + ============================= -UPGRADING -========= +This is the first stable release of the Samba 4.9 release series. +Please read the release notes carefully before upgrading. NEW FEATURES/CHANGES ==================== - 'net ads setspn' ---------------- @@ -215,6 +209,25 @@ accounts including creating a new computer and resetting the password. This allows an 'offline join' of a member server or workstation to the Samba AD domain. +New 'samba-tool ou' command +--------------------------- + +The new 'samba-tool ou' command allows to manage organizational units. + +Available subcommands are: + create - Create an organizational unit. + delete - Delete an organizational unit. + list - List all organizational units + listobjects - List all objects in an organizational unit. + move - Move an organizational unit. + rename - Rename an organizational unit. + +In addition to the ou commands, there are new subcommands for the user +and group management, which can make use of the organizational units: + group move - Move a group to an organizational unit/container. + user move - Move a user to an organizational unit/container. + user show - Display a user AD object. + Samba performance tool now operates against Microsoft Windows AD ---------------------------------------------------------------- @@ -265,6 +278,38 @@ feature, currently it should be enabled from the DNS Manager tool from Windows. Also the feature needs to have been enabled by setting the smb.conf parameter "dns zone scavenging = yes". +Improved support for trusted domains (as AD DC) +----------------------------------------------- + +The support for trusted domains/forests has been further improved. + +External domain trusts, as well a transitive forest trusts, +are supported in both directions (inbound and outbound) +for Kerberos and NTLM authentication. + +The following features are new in 4.9 (compared to 4.8): + +- It's now possible to add users/groups of a trusted domain + into domain groups. The group memberships are expanded + on trust boundaries. +- foreignSecurityPrincipal objects (FPO) are now automatically + created when members (as SID) of a trusted domain/forest + are added to a group. +- The 'samba-tool group *members' commands allow + members to be specified as foreign SIDs. + +However there are currently still a few limitations: + +- Both sides of the trust need to fully trust each other! +- No SID filtering rules are applied at all! +- This means DCs of domain A can grant domain admin rights + in domain B. +- Selective (CROSS_ORGANIZATION) authentication is + not supported. It's possible to create such a trust, + but the KDC and winbindd ignore them. +- Samba can still only operate in a forest with just + one single domain. + CTDB changes ------------ @@ -446,7 +491,7 @@ syntax changed to better match the same tool on Windows. REMOVED FEATURES ================ - +% smb.conf changes ================ @@ -479,7 +524,16 @@ SMB_VFS_FCHMOD_ACL: Removed: Only FCHMOD is used. Any external VFS modules will need to be updated to match these changes in order to work with 4.9.x. +CHANGES SINCE 4.9.0rc5 +====================== +o Björn Baumbach <b...@sernet.de> + * BUG 13605: samba_dnsupdate: Honor 'dns zone scavenging' option, only + update if needed. + +o Andreas Schneider <a...@samba.org> + * BUG 13606: wafsamba: Fix 'make -j<jobs>'. +o CHANGES SINCE 4.9.0rc4 ====================== diff --git a/buildtools/wafsamba/samba_utils.py b/buildtools/wafsamba/samba_utils.py index 0f95c12..c20f61e 100644 --- a/buildtools/wafsamba/samba_utils.py +++ b/buildtools/wafsamba/samba_utils.py @@ -467,6 +467,7 @@ def CHECK_MAKEFLAGS(bld): if makeflags is None: return jobs_set = False + jobs = None # we need to use shlex.split to cope with the escaping of spaces # in makeflags for opt in shlex.split(makeflags): @@ -489,17 +490,21 @@ def CHECK_MAKEFLAGS(bld): setattr(Options.options, opt[0:loc], opt[loc+1:]) elif opt[0] != '-': for v in opt: - if v == 'j': + if re.search(r'j[0-9]*$', v): jobs_set = True + jobs = opt.strip('j') elif v == 'k': Options.options.keep = True - elif opt == '-j': + elif re.search(r'-j[0-9]*$', opt): jobs_set = True + jobs = opt.strip('-j') elif opt == '-k': Options.options.keep = True if not jobs_set: # default to one job Options.options.jobs = 1 + elif jobs_set and jobs: + Options.options.jobs = int(jobs) Build.BuildContext.CHECK_MAKEFLAGS = CHECK_MAKEFLAGS diff --git a/selftest/knownfail.d/dns b/selftest/knownfail.d/dns index 99b0f1d..a517665 100644 --- a/selftest/knownfail.d/dns +++ b/selftest/knownfail.d/dns @@ -69,5 +69,3 @@ samba.tests.dns.__main__.TestSimpleQueries.test_qtype_all_query\(rodc:local\) # The SOA override should not pass against the RODC, it must not overstamp samba.tests.dns.__main__.TestSimpleQueries.test_one_SOA_query\(rodc:local\) -.*samba.tests.blackbox.samba_dnsupdate.SambaDnsUpdateTests.test_samba_dnsupate_set_ip -.*samba.tests.blackbox.samba_dnsupdate.SambaDnsUpdateTests.test_samba_dnsupate_no_change diff --git a/source4/scripting/bin/samba_dnsupdate b/source4/scripting/bin/samba_dnsupdate index 071cebe..fda3beb 100755 --- a/source4/scripting/bin/samba_dnsupdate +++ b/source4/scripting/bin/samba_dnsupdate @@ -102,6 +102,8 @@ else: nsupdate_cmd = lp.get('nsupdate command') +dns_zone_scavenging = lp.get("dns zone scavenging") + if len(IPs) == 0: print "No IP interfaces - skipping DNS updates" sys.exit(0) @@ -847,7 +849,18 @@ for d in dns_list: rebuild_cache = True if opts.verbose: print "need cache add: %s" % d - update_list.append(d) + if dns_zone_scavenging: + update_list.append(d) + if opts.verbose: + print "scavenging requires update: %s" % d + elif opts.all_names: + update_list.append(d) + if opts.verbose: + print "force update: %s" % d + elif not check_dns_name(d): + update_list.append(d) + if opts.verbose: + print "need update: %s" % d for c in cache_list: found = False -- Samba Shared Repository