The branch, master has been updated
via 2f9bf80 NEWS[4.22.0]: Samba 4.22.0 Available for Download
from 6e64c84 NEWS[4.22.0rc4]: Samba 4.22.0rc4 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit 2f9bf80cc08305c95195d4102b42f18d44e86d37
Author: Jule Anger <[email protected]>
Date: Thu Mar 6 15:04:04 2025 +0100
NEWS[4.22.0]: Samba 4.22.0 Available for Download
Signed-off-by: Jule Anger <[email protected]>
-----------------------------------------------------------------------
Summary of changes:
history/header_history.html | 1 +
history/samba-4.22.0.html | 192 +++++++++++++++++++++++
posted_news/20250306-140558.4.22.0.body.html | 12 ++
posted_news/20250306-140558.4.22.0.headline.html | 3 +
4 files changed, 208 insertions(+)
create mode 100644 history/samba-4.22.0.html
create mode 100644 posted_news/20250306-140558.4.22.0.body.html
create mode 100644 posted_news/20250306-140558.4.22.0.headline.html
Changeset truncated at 500 lines:
diff --git a/history/header_history.html b/history/header_history.html
index 9f29453..6f6be4c 100755
--- a/history/header_history.html
+++ b/history/header_history.html
@@ -9,6 +9,7 @@
<li><a href="/samba/history/">Release Notes</a>
<li class="navSub">
<ul>
+ <li><a href="samba-4.22.0.html">samba-4.22.0</a></li>
<li><a href="samba-4.21.4.html">samba-4.21.4</a></li>
<li><a href="samba-4.21.3.html">samba-4.21.3</a></li>
<li><a href="samba-4.21.2.html">samba-4.21.2</a></li>
diff --git a/history/samba-4.22.0.html b/history/samba-4.22.0.html
new file mode 100644
index 0000000..9420f57
--- /dev/null
+++ b/history/samba-4.22.0.html
@@ -0,0 +1,192 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";>
+<html xmlns="http://www.w3.org/1999/xhtml";>
+<head>
+<title>Samba 4.22.0 - Release Notes</title>
+</head>
+<body>
+<H2>Samba 4.22.0 Available for Download</H2>
+<p>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.22.0.tar.gz";>Samba
4.22.0 (gzipped)</a><br>
+<a
href="https://download.samba.org/pub/samba/stable/samba-4.22.0.tar.asc";>Signature</a>
+</p>
+<p>
+<pre>
+ ==============================
+ Release Notes for Samba 4.22.0
+ March 06, 2025
+ ==============================
+
+
+This is the first stable release of the Samba 4.22 release series.
+Please read the release notes carefully before upgrading.
+
+
+NEW FEATURES/CHANGES
+====================
+
+SMB3 Directory Leases
+---------------------
+
+Starting with Samba 4.22 SMB3 Directory Leases are supported. The new global
+option "smb3 directory leases" controls whether the feature is
enabled or
+not. By default, SMB3 Directory Leases are enabled on non-clustered Samba and
+disabled on clustered Samba, based on the "clustering" option. See
man smb.conf
+for more details.
+
+SMB3 Directory Leases allow clients to cache directory listings and, depending
+on the workload, result in a decent reduction in SMB requests from clients.
+
+Netlogon Ping over LDAP and LDAPS
+---------------------------------
+
+Samba must query domain controller information via simple queries on
+the AD rootdse's netlogon attribute. Typically this is done via
+connectionless LDAP, using UDP on port 389. The same information is
+also available via classic LDAP rootdse queries over TCP. Samba can
+now be configured to use TCP via the new "client netlogon ping
+protocol" parameter to enable running in environments where firewalls
+completely block port 389 or UDP traffic to domain controllers.
+
+Experimental Himmelblaud Authentication in Samba
+------------------------------------------------
+
+Samba now includes experimental support for Azure Entra ID authentication via
+`himmelblaud`, located in the `rust/` directory. This implementation provides
+basic authentication and is configured through `smb.conf`, utilizing options
+such as `realm`, `winbindd_socket_directory`, and `template_homedir`. New
global
+parameters include `himmelblaud_sfa_fallback`, `himmelblaud_hello_enabled`, and
+`himmelblaud_hsm_pin_path`.
+To enable, configure Samba with `--enable-rust --with-himmelblau`.
+
+AD DC schema upgrade and provision performance improvements
+-----------------------------------------------------------
+
+By increasing the LDB index cache size for certain offline operations
+that are likely to require large transactions, these are now several
+times faster.
+
+
+REMOVED FEATURES
+================
+
+The "nmbd proxy logon" feature was removed. This was used before
+Samba4 acquired a NBT server.
+
+The parameter "cldap port" has been removed. CLDAP runs over UDP port
+389, we don't see a reason why this should ever be changed to a
+different port. Moreover, we had several places in the code where
+Samba did not respect this parameter, so the behaviour was at least
+inconsistent.
+
+fruit:posix_rename
+------------------
+
+This option of the vfs_fruit VFS module that could be used to enable POSIX
+directory rename behaviour for OS X clients has been removed as it could result
+in severe problems for Windows clients.
+
+As a possible workaround it is possible to prevent creation of .DS_Store files
+(a Finder thingy to store directory view settings) on network mounts by running
+
+ $ defaults write com.apple.desktopservices DSDontWriteNetworkStores true
+
+on the Mac.
+
+
+smb.conf changes
+================
+
+ Parameter Name Description Default
+ -------------- ----------- -------
+ smb3 directory leases New Auto
+ vfs mkdir use tmp name New Auto
+ client netlogon ping protocol New cldap
+ himmelblaud hello enabled New no
+ himmelblaud hsm pin path New default hsm pin path
+ himmelblaud sfa fallback New no
+ client use krb5 netlogon Experimental no
+ reject aes netlogon servers Experimental no
+ server reject aes schannel Experimental no
+ server support krb5 netlogon Experimental no
+ fruit:posix_rename Removed
+ cldap port Removed
+
+
+CHANGES SINCE 4.22.0rc4
+=======================
+
+o Ralph Boehme <[email protected]>
+ * BUG 15801: `NT_STATUS_ACCESS_DENIED making remote directory` on OpenBSD.
+
+o Anoop C S <[email protected]>
+ * BUG 15797: Unable to connect to CephFS subvolume shares with
+ vfs_shadow_copy2.
+
+o Stefan Metzmacher <[email protected]>
+ * BUG 15801: `NT_STATUS_ACCESS_DENIED making remote directory` on OpenBSD.
+
+o Martin Schwenke <[email protected]>
+ * BUG 15820: Incorrect FSF address in ctdb pcp scripts.
+
+o Andrea Venturoli <[email protected]>
+ * BUG 15804: "samba-tool domain backup offline" hangs.
+
+
+CHANGES SINCE 4.22.0rc3
+=======================
+
+o Stefan Metzmacher <[email protected]>
+ * BUG 15815: client use krb5 netlogon is experimental and should not be used
+ in production.
+
+
+CHANGES SINCE 4.22.0rc2
+=======================
+
+o Douglas Bagnall <[email protected]>
+ * BUG 15738: Creation of GPOs applicable to more than one group is
impossible
+ with Samba 4.20.0 and later.
+
+o Björn Baumbach <[email protected]>
+ * BUG 15806: samba-tool acl commands broken for relative path names
+ * BUG 15807: pysmbd seg faults when file is not found.
+
+o Ralph Boehme <[email protected]>
+ * BUG 15796: Spotlight search results don't show file size and
creation date.
+
+o Pavel Filipenský <[email protected]>
+ * BUG 15759: net ads create/join/winbind producing unix dysfunctional
+ keytabs.
+
+o Volker Lendecke <[email protected]>
+ * BUG 15806: samba-tool acl commands broken for relative path names.
+ * BUG 15807: pysmbd seg faults when file is not found.
+
+o Stefan Metzmacher <[email protected]>
+ * BUG 15680: Trust domains are not created.
+
+o Andreas Schneider <[email protected]>
+ * BUG 15680: Trust domains are not created.
+
+o Shweta Sodani <[email protected]>
+ * BUG 15703: General improvements for vfs_ceph_new module.
+
+
+CHANGES SINCE 4.22.0rc1
+=======================
+
+o Björn Baumbach <[email protected]>
+ * BUG 15798: libnet4: seg fault after dc lookup failure
+
+
+KNOWN ISSUES
+============
+
+https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.22#Release_blocking_bugs
+
+
+</pre>
+</p>
+</body>
+</html>
diff --git a/posted_news/20250306-140558.4.22.0.body.html
b/posted_news/20250306-140558.4.22.0.body.html
new file mode 100644
index 0000000..36c0bd8
--- /dev/null
+++ b/posted_news/20250306-140558.4.22.0.body.html
@@ -0,0 +1,12 @@
+<!-- BEGIN: posted_news/20250306-140558.4.22.0.body.html -->
+<h5><a name="4.22.0">06 March 2025</a></h5>
+<p class=headline>Samba 4.22.0 Available for Download</p>
+<p>
+This is the latest stable release of the Samba 4.22 release series.
+</p>
+<p>
+The uncompressed tarball has been signed using GnuPG (ID AA99442FB680B620).
+The source code can be <a
href="https://download.samba.org/pub/samba/stable/samba-4.22.0.tar.gz";>downloaded
now</a>.
+See <a href="https://www.samba.org/samba/history/samba-4.22.0.html";>the
release notes for more info</a>.
+</p>
+<!-- END: posted_news/20250306-140558.4.22.0.body.html -->
diff --git a/posted_news/20250306-140558.4.22.0.headline.html
b/posted_news/20250306-140558.4.22.0.headline.html
new file mode 100644
index 0000000..762558a
--- /dev/null
+++ b/posted_news/20250306-140558.4.22.0.headline.html
@@ -0,0 +1,3 @@
+<!-- BEGIN: posted_news/20250306-140558.4.22.0.headline.html -->
+<li> 06 March 2025 <a href="#4.22.0">Samba 4.22.0 Available for
Download</a></li>
+<!-- END: posted_news/20250306-140558.4.22.0.headline.html -->
--
Samba Website Repository
