Samba Features added/changed

https://wiki.samba.org/index.php/Samba_Features_added/changed#Spotlight

Samba Features added/changed
NamespacesPageDiscussionPage actionsReadView sourceHistory

Contents
1 Samba 4.16
1.1 Release Announcements
1.2 NEW FEATURES/CHANGES
1.2.1 New samba-dcerpcd binary to provide DCERPC in the member server setup
1.2.2 Heimdal-8.0pre used for Samba Internal Kerberos, adds FAST support
1.2.3 Certificate Auto Enrollment
1.2.4 Ability to add ports to dns forwarder addresses in internal DNS backend
1.2.5 CTDB changes
1.3 REMOVED FEATURES
1.3.1 Older SMB1 protocol SMBCopy command removed
1.3.2 SMB1 server-side wildcard expansion removed
1.3.3 SMB1 protocol has been deprecated, particularly older dialects
1.3.4 No longer using Linux mandatory locks for sharemodes
1.4 smb.conf changes
2 Samba 4.15
2.1 Release Announcements
2.2 Removed SMB (development) dialects
2.3 New GPG key
2.4 New minimum version for the experimental MIT KDC
2.5 NEW FEATURES/CHANGES
2.5.1 VFS
2.5.2 Bind DLZ: Added the ability to set allow/deny lists for zone transfer clients
2.5.3 “server multi channel support” no longer experimental
2.5.4 samba-tool available without the ad-dc
2.5.5 Improved command line user experience
2.5.5.1 Common parser:
2.5.5.2 Duplicates in command line utils
2.5.6 Scanning of trusted domains and enterprise principals
2.5.7 Support for Offline Domain Join (ODJ)
2.5.8 ‘samba-tool dns zoneoptions’ for aging control
2.5.9 Marking old records as static or dynamic with ‘samba-tool’
2.5.10 DNS tombstones are now deleted as appropriate
2.5.11 DNS tombstones use a consistent timestamp format
2.5.12 samba-tool dns update and RPC changes
2.5.13 CVE-2021-3671: Crash in Heimdal KDC and updated security release policy
2.5.14 samba-tool domain backup offline with the LMDB backend
2.6 REMOVED FEATURES
2.7 smb.conf changes
3 Samba 4.14
3.1 Release Announcements
3.2 New GPG key
3.3 NEW FEATURES/CHANGES
3.3.1 Here is a copy of a clarification note added to the Samba code in the file: VFS-License-clarification.txt.
3.4 VFS
3.5 Printing
3.6 Client Group Policy
3.7 Python 3.6 or later required
3.8 Miscellaneous samba-tool changes
3.9 CTDB CHANGES
3.10 smb.conf changes
4 Samba 4.13
4.1 Release Announcements
4.2 ZeroLogon
4.3 NEW FEATURES/CHANGES
4.3.1 Python 3.6 or later required
4.3.2 wide links functionality
4.3.3 NT4-like ‘classic’ Samba domain controllers
4.3.4 SMBv1 only protocol options deprecated
4.3.5 REMOVED FEATURES
4.4 smb.conf changes
5 Samba 4.12
5.1 Release Announcements
5.2 NEW FEATURES/CHANGES
5.2.1 Python 3.5 Required
5.2.2 Removing in-tree cryptography: GnuTLS 3.4.7 required
5.2.3 zlib library is now required to build Samba
5.2.4 New Spotlight backend for Elasticsearch
5.2.5 “net ads kerberos pac save” and “net eventlog export”
5.2.6 Fuzzing
5.2.7 ‘samba-tool’ improvements add contacts as member to groups
5.2.8 Allow filtering by OU or subtree in samba-tool
5.2.9 VFS
5.2.10 SMB_VFS_NTIMES
5.2.11 ‘io_uring’ vfs module
5.2.12 MS-DFS changes in the VFS
5.2.13 CTDB changes
5.3 REMOVED FEATURES
5.3.1 smb.conf “write cache size”
5.3.2 Retiring DES encryption types in Kerberos.
5.3.3 Samba-DC: DES keys no longer saved in DB.
5.3.4 Heimdal-DC: removal of weak-crypto.
5.3.5 vfs_netatalk: The netatalk VFS module has been removed.
5.3.6 BIND9_FLATFILE deprecated
5.4 smb.conf changes
6 Samba 4.11
6.1 Release Announcements
6.2 UPGRADING
6.2.1 AD Database compatibility
6.2.2 SMB1 is disabled by default
6.2.3 LanMan and plaintext authentication deprecated
6.2.4 BIND9_FLATFILE deprecated
6.3 NEW FEATURES/CHANGES
6.3.1 Default samba process model
6.3.2 Authentication Logging.
6.3.3 LDAP referrals
6.3.4 Bind9 logging
6.3.5 Default schema updated to 2012_R2
6.3.6 GnuTLS 3.2 required
6.3.7 samba-tool improvements
6.3.8 100,000 USER and LARGER Samba AD DOMAINS
6.3.9 Reindex performance improvements
6.3.10 join performance improvements
6.3.11 LDAP Server memory improvements
6.3.12 Setting lmdb map size
6.3.13 LDB “batch_mode”
6.3.14 New LDB pack format
6.3.15 New LDB <= and >= index mode to improve replication performance
6.3.16 Improvements to ldb search performance
6.3.17 Improvements to subtree rename performance
6.3.18 CTDB changes
6.3.19 CephFS Snapshot Integration
6.4 REMOVED FEATURES
6.4.1 Web server
6.4.2 samba-tool join subdomain
6.4.3 Python2 support
7 Samba 4.10
7.1 Release Announcements
7.2 NEW FEATURES/CHANGES
7.2.1 GPO Improvements
7.2.2 KDC prefork
7.2.3 Prefork ‘prefork children’
7.2.4 Netlogon prefork
7.2.5 Offline domain backups
7.2.6 Group membership statistics
7.2.7 Paged results LDAP control
7.2.8 Prefork process restart
7.2.9 Standard process model
7.3 python3 support
7.4 Future Python support
7.4.1 JSON logging
7.4.2 SMBv2 samba-tool support
7.4.3 New glusterfs_fuse VFS module
7.5 REMOVED FEATURES
7.5.1 MIT Kerberos build of the AD DC
7.5.2 samba_backup
7.5.3 SMB client Python bindings
7.6 smb.conf changes
8 Samba 4.9
8.1 Release Announcements
8.2 NEW FEATURES/CHANGES
8.2.1 ‘net ads setspn’
8.2.2 ‘net ads keytab’ changes
8.2.3 Local authorization plugin for MIT Kerberos
8.2.4 VFS audit modules
8.2.5 Database audit support
8.2.6 Password change audit support
8.2.7 Group membership change audit support
8.2.8 Log Authentication duration
8.2.9 JSON library Jansson required for the AD DC
8.2.10 New Experimental LMDB LDB backend
8.2.11 Password Settings Objects
8.2.12 Domain backup and restore
8.2.13 Domain rename tool
8.2.14 New samba-tool options for diagnosing DRS replication issues
8.2.15 Automatic site coverage and GetDCName improvements
8.2.16 Improved ‘samba-tool computer’ command
8.2.17 New ‘samba-tool ou’ command
8.2.18 Samba performance tool now operates against Microsoft Windows AD
8.2.19 DNS entries are now cleaned up during DC demote
8.2.20 samba-tool ntacl sysvolreset is now much faster
8.2.21 Samba now tested with CI GitLab
8.2.22 Dynamic DNS record scavenging support
8.2.23 Improved support for trusted domains (as AD DC)
8.2.24 CTDB changes
8.2.25 GPO Improvements
8.2.26 REMOVED FEATURES
8.3 smb.conf changes
8.4 VFS interface changes
9 Samba 4.8
9.1 Release Announcements
9.2 UPGRADING
9.2.1 New GUID Index mode in sam.ldb for the AD DC
9.2.2 Domain member setups require winbindd
9.2.3 smbclient reparse point symlink parameters reversed
9.2.4 Changed trusted domains listing with wbinfo -m –verbose
9.3 NEW FEATURES/CHANGES
9.3.1 New GUID Index mode in sam.ldb for the AD DC
9.3.2 KDC GPO application
9.3.3 Time Machine Support with vfs_fruit
9.3.4 Support for lower casing the MDNS Name
9.3.5 Encrypted secrets
9.3.6 Active Directory replication visualisation
9.3.7 smbclient reparse point symlink parameters reversed
9.3.8 Winbind changes
9.3.9 Improved support for trusted domains (as AD DC)
9.3.10 Changed trusted domains listing with wbinfo -m –verbose
9.3.11 VirusFilter VFS module
9.4 REMOVED FEATURES
9.4.1 ‘net serverid’ commands removed
9.4.2 NT4-style replication based net commands removed
9.4.3 vfs_aio_linux module removed
9.5 smb.conf changes
10 Samba 4.7
10.1 Release Announcements
10.2 UPGRADING
10.2.1 smbclient changes
10.3 NEW FEATURES/CHANGES
10.3.1 Whole DB read locks: Improved LDAP and replication consistency
10.3.2 Samba AD with MIT Kerberos
10.3.3 Dynamic RPC port range
10.3.4 Authentication and Authorization audit support
10.3.5 Multi-process LDAP Server
10.3.6 Improved Read-Only Domain Controller (RODC) Support
10.3.7 Additional password hashes stored in supplementalCredentials
10.3.8 Improvements to DNS during Active Directory domain join
10.3.9 Significant AD performance and replication improvements
10.3.10 Query record for open file or directory
10.3.11 Removal of lpcfg_register_defaults_hook()
10.3.12 Change of loadable module interface
10.3.13 Parameter changes
10.3.14 SHA256 LDAPS Certificates
10.3.15 CTDB changes
10.3.16 Using x86_64 Accelerated AES Crypto Instructions
10.4 smb.conf changes
11 Samba 4.6
11.1 Release Announcements
11.2 UPGRADING
11.2.1 ID Mapping
11.2.2 vfs_fruit option “fruit:resource” spelling correction
11.2.3 vfs_fruit Netatalk metadata xattr name on *BSD
11.3 NEW FEATURES/CHANGES
11.3.1 Kerberos client encryption types
11.3.2 Printing
11.3.3 New option for owner inheritance
11.3.4 Multi-process Netlogon support
11.3.5 New options for controlling TCP ports used for RPC services
11.3.6 AD LDAP and replication performance improvements
11.3.7 DNS improvements
11.3.8 CTDB changes
11.3.9 winbind changes
11.3.10 winbind primary group and nss info
11.3.11 mvxattr
11.3.12 idmap_hash
11.4 smb.conf changes
12 Samba 4.5
12.1 Release Announcements
12.2 UPGRADING
12.2.1 NTLMv1 authentication disabled by default
12.3 NEW FEATURES/CHANGES
12.3.1 Support for LDAP_SERVER_NOTIFICATION_OID
12.3.2 KCC improvements for sparse network replication
12.3.3 VLV – Virtual List View
12.3.4 DRS Replication for the AD DC
12.3.5 samba-tool drs replicate with new options
12.3.6 replPropertyMetaData Changes
12.3.7 Linked attributes on deleted objects
12.3.8 Improved AD DC performance
12.3.9 Other dbcheck improvements
12.3.10 Tombstone Reanimation
12.3.11 Multiple DNS Forwarders on the AD DC
12.3.12 Password quality plugin support in the AD DC
12.3.13 pwdLastSet is now correctly honoured
12.3.14 net ads dns unregister
12.3.15 samba-tool improvements
12.3.16 SMB 2.1 Leases enabled by default=
12.3.17 Open File Description (OFD) Locks
12.3.18 Password sync as Active Directory domain controller
12.3.19 Python crypto requirements
12.3.20 SmartCard/PKINIT improvements
12.3.21 CTDB changes
12.3.22 New shadow_copy2 options
12.4 REMOVED FEATURES
12.4.1 “only user” and “username” parameters
13 Samba 4.4
13.1 This is the first stable release of the Samba 4.4 release series.
13.2 UPGRADING
13.3 NEW FEATURES/CHANGES
13.3.1 Asynchronous flush requests
13.3.2 s3: smbd
13.3.3 samba-tool sites
13.3.4 samba-tool domain demote
13.3.5 samba-tool drs clone-dc-database
13.3.6 pdbedit
13.3.7 smbstatus
13.3.8 smbget
13.3.9 s4-rpc_server
13.3.10 ntlm_auth
13.3.11 vfs_offline
13.3.12 KCC
13.3.13 DNS
13.3.14 Active Directory
13.3.15 WINS nsswitch module
13.3.16 CTDB changes
13.4 EXPERIMENTAL FEATURES
13.4.1 SMB3 Multi-Channel
13.5 REMOVED FEATURES
13.5.1 Public headers
13.5.2 vfs_smb_traffic_analyzer
13.5.3 vfs_scannedonly
13.6 smb.conf changes
14 Samba 4.3
14.1 This is the first stable release of Samba 4.3.
14.2 UPGRADING
14.3 NEW FEATURES
14.3.1 Logging
14.3.2 Spotlight
14.3.3 New FileChangeNotify subsystem
14.3.4 New SMB profiling code
14.3.5 Improved DCERPC man in the middle detection for kerberos
14.3.6 SMB signing required in winbindd by default
14.3.7 Experimental NTDB was removed
14.3.8 Improved support for trusted domains (as AD DC)
14.3.9 SMB 3.1.1 supported
14.3.10 New smbclient subcommands
14.3.11 New rpcclient subcommands
14.3.12 New modules
14.3.13 New sparsely connected replia graph (Improved KCC)
14.3.14 Configurable TLS protocol support, with better defaults
14.3.15 Samba-tool now supports all 7 FSMO roles
14.3.16 CTDB logging changes
14.3.17 CTDB NFS support changes
14.3.18 Improved Cross-Compiling Support=
14.3.19 Improved Sparse File Support
14.4 Changes
14.4.1 smb.conf changes
14.4.2 Removed modules
15 Samba 4.2
15.1 This is is the first stable release of Samba 4.2.
15.2 IMPORTANT NOTE ABOUT THE SUPPORT END OF SAMBA 3
15.3 UPGRADING
15.4 NEW FEATURES
15.4.1 Transparent File Compression
15.4.2 Previous File Versions with Snapper
15.4.3 Winbindd/Netlogon improvements
15.4.4 Winbindd use on the Samba AD DC
15.4.5 Winbind now requires secured connections
15.4.6 Larger IO sizes for SMB2/3 by default
15.4.7 SMB2 leases
15.4.8 Improved DCERPC man in the middle detection
15.4.9 Overhauled “net idmap” command
15.4.10 tdb improvements
15.4.11 Messaging improvements
15.4.12 Clustering support
15.4.13 Samba Registry Editor
15.4.14 Bad Password Lockout in the AD DC
15.4.15 Correct defaults in the smb.conf manpages
15.4.16 Consistent behaviour between samba-tool testparm and testparm
15.4.17 VFS WORM module
15.4.18 vfs_fruit, a VFS module for OS X clients
15.4.19 smbclient archival improvements
15.5 Changes
15.5.1 smb.conf changes
16 Samba 4.1
16.1 This is is the first stable release of Samba 4.1.
16.1.1 Major enhancements in Samba 4.1.0 include:
16.1.1.1 Client tools support SMB2/3
16.1.1.2 Encrypted transport
16.1.1.3 Directory database replication (AD DC mode)
16.1.1.4 Server-Side Copy Support
16.1.1.5 Btrfs Filesystem Integration
16.1.1.6 REMOVED COMPONENTS
16.1.2 Changes
16.1.2.1 smb.conf changes
16.1.3 RUNNING Samba 4.1 as an AD DC
17 Samba 4.0
17.1 Release Announcements
17.2 This is is the first stable release of Samba 4.0.
17.2.1 Major enhancements in Samba 4.0.0 include:
17.2.1.1 Active Directory services
17.2.1.2 File Services
17.2.1.3 DNS
17.2.1.4 NTP
17.2.1.5 Python Scripting Interface
17.2.1.6 Known Issues
17.2.1.7 Upgrading
17.2.1.8 Supported features
17.2.1.9 smb.conf changes