Samba samfuri ne na uwar garken multifunctional, wanda kuma yana ba da aiwatar da uwar garken fayil, sabis na bugawa, da uwar garken ainihi (winbind).
Kwanan nan an sanar da sakin sabuwar sigar Samba 4.17.0, wanda ke ci gaba da haɓaka reshen Samba 4 tare da cikakken aiwatar da mai sarrafa yanki da sabis na Active Directory wanda ya dace da aiwatar da Windows 2008 kuma yana iya yin hidima ga duk nau'ikan Abokan ciniki na Windows da Microsoft ke goyan bayan, gami da windows 11.
Wannan sabon sakin samba ya haɗa da canje-canje iri-iri da gyare-gyare hadedde daga juzu'in gyara na baya na reshen 4.16.x kuma sabbin abubuwan da suka fi shahara shine haɓaka haɓakawa, wasu canje-canje a cikin tsarin tattarawa da ƙari.
Babban sabon fasalin Samba 4.17.0
A cikin wannan sabon fasalin Samba 4.17.0, an yi aiki don cire koma bayan aikin sabobin SMB da aka ɗora wanda ya bayyana sakamakon ƙara kariya ta rauni wanda ke sarrafa hanyoyin haɗin gwiwa. Wasu haɓakawa waɗanda aka yi sun haɗa da rage kiran tsarin lokacin duba sunan directory da rashin amfani da abubuwan da suka faru lokacin sarrafa ayyukan gasa waɗanda ke haifar da jinkiri.
Wani canjin da ya fito waje shine cewa ikon tattara Samba ba tare da tallafin yarjejeniya na SMB1 ba in smbd. Don musaki SMB1, ana aiwatar da zaɓin "-without-smb1-server" a cikin rubutun ginawa (kawai yana rinjayar smbd, tallafin SMB1 yana kiyaye shi a cikin ɗakunan karatu na abokin ciniki).
Bayan haka, aiwatar da saitin 'nt hash store=ba', wanda ya hana adana hashes kalmar sirri na Active Directory masu amfani. A cikin sakin gaba, saitin 'nt hash store' zai zama tsoho zuwa 'auto', wanda zai yi amfani da yanayin 'ba' taɓa idan saitin'ntlm auth=disabled' yana nan.
A cikin ɓangaren CTDB da ke da alhakin aikin daidaitawar tari, an rage abubuwan da ake buƙata don daidaitawa na fayil ɗin ctdb.tunables. Lokacin da aka haɗa Samba tare da zaɓuɓɓukan "-with-cluster-support" da "-systemd-install-services", an shigar da tsarin sabis na CTDB. An dakatar da rubutun ctdbd_wrapper: Yanzu an fara aiwatar da ctdbd kai tsaye daga sabis ɗin da aka tsara ko daga rubutun farawa.
Na sauran canje-canje waɗanda aka haɗa cikin wannan sabon sigar Samba:
- Ana ba da hanyar haɗin kai don samun damar smbconf API ɗin ɗakin karatu daga lambar Python.
- Amfani da MIT Kerberos 1.20, an aiwatar da harin "Bronze Bit" (CVE-2020-17049) ta hanyar wuce ƙarin bayani tsakanin abubuwan KDC da KDB. Tsohuwar KDC dangane da Heimdal Kerberos an gyara shi a cikin 2021.
- An ƙara 'add-principal' da 'del-principal' ƙananan umarni zuwa umarnin wakilai na samba-tool don sarrafa RBCDВ.
- Tsohuwar tushen KDC na Heimdal Kerberos bai goyi bayan yanayin RBCD ba tukuna.
- Sabis na DNS da aka gina a ciki yana ba da damar canza tashar tashar yanar gizon da ke karɓar buƙatun (misali, don gudanar da wani uwar garken DNS akan wannan tsarin da ke tura wasu buƙatun zuwa Samba).
- Shirin smbstatus yanzu yana da ikon nuna bayanai a tsarin JSON (an kunna shi tare da zaɓin "-json").
- Mai sarrafa yanki yana aiwatar da tallafi don ƙungiyar tsaro ta Masu amfani da Kare, wanda aka gabatar a cikin Windows Server 2012 R2, wanda baya ba da damar yin amfani da nau'ikan ɓoye ɓoyayyen rauni (ga masu amfani da rukuni, tallafi don amincin NTLM, Kerberos TGT dangane da RC4, ƙayyadaddun wakilai da marasa iyaka shine nakasassu).
- Cire goyan bayan ajiyar kalmar sirri da hanyar tabbatar da tushen LanMan (saitin "lanman=ee tabbatarwa" yanzu ba shi da mahimmanci).
A ƙarshe, idan kuna sha'awar samun damar ƙarin sani game da shi, kuna iya tuntuɓar cikakkun bayanai a cikin bin hanyar haɗi.
Zazzage kuma sami Samba 4.17.0
To, ga wadanda suke da sha'awar iya shigar da wannan sabon nau'ikan na Samba ko kuma suke son sabunta nasu fasalin na baya zuwa wannan sabon., dole ne su san cewa an haɗa samba a cikin ma'ajin Ubuntu, dole ne su san cewa ba a sabunta fakitin ba lokacin da aka fitar da sabon sigar, don haka mun fi son a cikin wannan yanayin don ba da shawarar tattara sabon sigar, daga lambar tushe.
Za a iya samun lambar tushe daga mahada mai zuwa.