Samba 4.12, ya zo tare da GnuTLS, injin binciken bincike na Elastic da ƙari

Linux-samba

Ya an fitar da sabon samfurin Samba 4.12.0, wanda ke ci gaba tare da haɓaka samba 4.x reshe tare da cikakken aiwatar da mai kula da yanki da sabis na Littafin Aiki, mai dacewa tare da aiwatar da Windows 2000 kuma yana iya hidimtawa duk nau'ikan abokan cinikin Windows wanda Microsoft ke tallafawa, haɗe da Windows 10

Samba 4, shine - wani samfurin sabar mai aiki da yawa, wanda kuma ke samar da aiwatar da sabar fayil, sabis na bugawa da sabar tabbatarwa (winbind).

Menene sabo a Samba 4.12?

A cikin wannan sabon fasalin Samba 4.12, canji na hadedde aiwatarwa na ayyukan cryptographic, waɗanda aka cire daga lambar lambar don amfani da ɗakunan karatu na waje.

Tare da cewa an yanke shawarar amfani da GnuTLS a matsayin babban dakin karatun crypto da wancan ban da rage barazanar da ke tattare da hakan tare da gano yanayin rauni a cikin aiwatarwar da aka sanya na algorithms na cryptographic, miƙa mulki zuwa GnuTLS kuma ya sanya ya yiwu don samun babban ƙaruwa cikin aikin lokacin da ake amfani da ɓoye a cikin SMB3.

Idan aka ba da wannan, an gudanar da gwaje-gwaje tare da aiwatar da abokin cinikin CIFS daga Linux kernel 5.3, wanda a ciki aka ninka ribanya 3 cikin sauri na rubutu da saurin karantawa sau 2.5.

Har ila yau an lura cewa an ƙara sabon bango don bincika sAyyukan SMB ta amfani da yarjejeniyar Haske, dangane da injin binciken Elasticsearch.

Hakanan ya haɗa da mai amfani na mdfind tare da aiwatar da abokin ciniki wanda ke ba da izinin aika tambayoyin bincike zuwa kowane sabar SMB gudanar da sabis ɗin Haske RPC. An sauya saitin "Hasken bayan Haske" zuwa "noindex" ta tsoho (don Tracker ko Elasticsearch, dole ne a bayyane ya saita ƙimomin "tracker" ko "elasticsearch").

A cikin Samba 4.12, ƙila mu ga cewa an canza halayen ayyukan 'net talla kerberos pac ajiye'Y 'net eventlog fitarwa', wanda yanzu baya sake rubuta fayil din ba, kuma idan kayi kokarin fitarwa zuwa wani fayil da yake, an jefa kuskure.

Kayan aikin samba ya inganta ƙarin abubuwan haɗin lamba ga mambobin kungiyar. Idan kafin, ta amfani da umarnin 'samba-kayan aikin addmemers', kuna iya kawai ƙara masu amfani, ƙungiyoyi da kwamfutoci a matsayin sabbin mambobin rukuni, yanzu tallafi don ƙara lambobi kamar yadda aka ƙara mambobin rukuni.

Samba kayan aiki yana ba da izinin tacewa ta ƙungiyar ƙungiya (OU, Organiungiyar )ungiya) ko ƙarami. Sabbin tutoci "–base-dn" da "–member-base-dn" an kara su, wanda ya bada damar aiwatar da aiki kawai tare da wani bangare na Itace Active Directory, misali, kawai a cikin wani sashin OU.

Hakanan an kara sabon tsarin VFS 'io_uring' ta amfani da sabon kernel io_uring kebul na Linux don I / O. asynchronous

Io_uring yana goyan bayan binciken I / O kuma zai iya aiki tare da buffering (tsarin "aio" da aka gabatar a baya baya tallafawa buyayyar I / O).

Lokacin aiki tare da zaɓen kunnawa, io_uring yana da mahimmanci gaban aio a cikin aikin.

Samba ya aiwatar da tallafi don SMB_VFS_ {PREAD, PWRITE, FSYNC} _SEND / RECV kuma ya rage girman saman ajiye teburin zare a sararin masu amfani yayin amfani da tsoffin bayanan VFS. Gina tsarin VFS io_uring yana buƙatar ɗakin karatu na liburing da Linux 5.1+ kernel.

Daga sauran canje-canjen da suka yi fice: 

  • VFS tana ba da ikon tantance ƙayyadadden ƙayyadadden lokaci, UTIME_OMIT, don yin alama akan buƙatar watsi da lokaci a cikin aikin SMB_VFS_NTIMES ().
  • B smb.conf ya dakatar da tallafi don saitin "rubuta cache size", wanda ya rasa ma'anarsa bayan tallafin io_uring ya bayyana.
  • Samba-DC da Kerberos sun dakatar da ɓoye ɓoye ta amfani da algorithm na DES. Heimdal-DC ya cire lambar ɓoye mai rauni.
  • An cire tsarin vfs_netatalk, ba a tare da shi ba kuma ya rasa dacewa.
  • An haɗa ɗakin karatu na zlib tare da abubuwan dogaro. An cire aiwatar da zlib daga tushen lambar (lambar ta dogara ne da sigar zlib da ta gabata, inda tallafin ɓoyewa bai yi aiki ba kwata-kwata).

Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.