The Samba development team has announced the first stable release of the 4.20 series.
The Samba development team has announced the first stable release of the 4.20 series, which includes significant updates and improvements.
The release enhances the functionality of Samba as a full-fledged domain controller and Active Directory service, providing compatibility with Windows 2008 and support for Windows clients up to Windows 11. Samba 4 is a comprehensive server toolkit that includes a file server, print service, and winbind identification system
The main innovations and changes relate to security and management. For example, to work as an Active Directory domain controller, you need MIT Krb5 version at least 1.21. This is necessary to solve problems related to the CVE-2022-37967 vulnerability. The dependency on the JSON module in Perl is also eliminated, which reduces the build requirements.
Among other updates:
The Samba development team has announced the first stable release of the 4.20 series, which includes significant updates and improvements.
The release enhances the functionality of Samba as a full-fledged domain controller and Active Directory service, providing compatibility with Windows 2008 and support for Windows clients up to Windows 11. Samba 4 is a comprehensive server toolkit that includes a file server, print service, and winbind identification system
The main innovations and changes relate to security and management. For example, to work as an Active Directory domain controller, you need MIT Krb5 version at least 1.21. This is necessary to solve problems related to the CVE-2022-37967 vulnerability. The dependency on the JSON module in Perl is also eliminated, which reduces the build requirements.
Among other updates:
- Improved ability to work with passwords using the samba-tool;
- Support for client-side features for group managed service accounts that include automatic password changes.
- The Windows Search Protocol client is introduced for the first time, allowing you to send search queries to servers that support this protocol.
- Enhanced smbcacls capabilities for saving and restoring access control lists from a file;
- Added new features for managing AD claims, Authentication Policies, and policy containers (Authentication Silos).
- Support for conditional and resource ACES (Access Control Entries) has been introduced, which allows you to more flexibly manage access based on statements and attributes.
- Added support for the Service Witness Protocol in CTDB clusters, which provides clients with the ability to monitor the connection status with the SMB server.
- Removed the function of displaying a list of locally logged-in users based on the /var/run/utmp file. UTMP support was dropped due to format restrictions related to the 2038 issue.
