Few days ago the new version of Samba 4.10.0 was released which adds new improvements, features and especially bug fixes around its previous version.
This new version of Samba 4.10.0 continues development of the Samba 4 branch with a full implementation of a domain controller and an Active Directory service.
Samba 4.10.0 It is compatible with the Windows 2000 implementation and capable of serving all supported Microsoft versions of Windows clients, including Windows 10.
Samba 4 is a multifunctional server product providing also the implementation of a file server, a print service and an identification server (winbind).
Main new features of Samba 4.10.0
With the release of this new version of Samba 4.10.0 it is highlighted that KDC and Netlogon added support for the pre-for process startup modelk, allowing you to maintain a group of pre-run handling processes. The default value of the 'prefork children' parameter in smdb.conf has been increased from 1 to 4.
In the pre-fork model implementation, automatic restart of failed processes is provided. The delays between restart attempts are determined by the parameters "prefork backoff increment" and "prefork maximum backoff".
In addition, full support for Python 4.10.0 is provided in Samba 3. Python 2 support is still possible, but by default Python 3 is now used in compilation (Python 3.4+).
Building with Python 2 requires setting the environment variable: «PYTHON = python2 ./configure; PYTHON = python2 make ».
Creating samba folders is possible at the same time for Python 3 and Python 2 specifying the flag 'configure-extra-python = / usr / bin / python2'. In the Samba 4.11 branch, it is planned to discontinue Python 2 support for archivers and raise the version requirements to Python 3.6.
Backups
The 'samba-tool domain backup' command has been extended with a new 'offline' option. This safely creates a backup of the local DC database directly from disk.
The main benefits of an offline backup are that it is fasteror, since al stores more details of the database (for forensic purposes), and the samba process doesn't have to run when the backup is done.
On the other hand, we also find that added the command 'samba-tool group stats', which shows a summary of the distribution of users between groups in the domain. The existing command 'samba-tool group list –verbose' is expanded with data on the number of users in each group.
Protocols and modules
Samba 4.10.0 comes with support for the SMBv2 protocol to the samba-tool utility and a new VFS module glusterfs_fuse, which enables increased performance when accessing Samba to partitions with GlusterFS mounted using the FUSE (User Space File System) mechanism.
To improve performance, the module directly extracts information about file names through an extended attribute query on the file system.
To enable acceleration, just add glusterfs_fuse to the "vfs objects" parameter.
The new module is not replaced by vfs_glusterfs, but only offers an alternative mechanism to access the Gluster sections.
It was deprecated and will be removed in the next branch of the Python binding to the SMB client. The removal will affect users using their own utilities with 'from samba import smb'.
LDAP control paginated results
For LDAP, the behavior of the paginated results extension has been changed, allowing parties to process the query results with pagination.
Processing of paging requests in Samba is aligned with the behavior of Windows servers previously, different sample pages were provided based on a static print from the static database, and now they take into account changes in the database received since the last request for the page.
The display of the event identifier ("EventId", successful or unsuccessful login code) and the type of input ("logonType", interactive, network and unprotected network) has been added to the authentication messages displayed in the JSON-log authentication messages.
Source: https://www.samba.org
Dear David
Note that I install samba 4 as a domain controller and everything has worked perfectly, however I have web applications whose username and password I validate with the php ldap_bind function, however in samba 4 I have not been able to make them work. The question would be if I am missing some configuration in samba to make it work or if there is some other way to perform this process?