Samba yog ib qho khoom siv rau txhua tus neeg rau zaub mov, uas tseem muab cov ntaub ntawv server siv, kev pabcuam luam tawm, thiab tus neeg rau zaub mov.
Tus tshiab version ntawm Samba 4.19 twb tau tso tawm lawm thiab los tsuas yog tom qab 6 lub hlis ntawm kev txhim kho txij li qhov kev tso tawm loj kawg. Qhov tshiab version no suav hais tias yog qhov tshiab ruaj khov thiab suav nrog ntau qhov kev hloov pauv thiab kev txhim kho.
Ntawm qhov zoo tshaj plaws novelties ntawm Samba 4.19 peb tuaj yeem nrhiav kev txhim kho hauv winbind, ua haujlwm los npaj AD raws li FL 2016 cov qauv, nrog rau kev txhim kho KDC, thiab lwm yam.
Tshooj lus
Lub ntsiab tshiab tseem ceeb ntawm Samba 4.19
Hauv qhov tshiab version ntawm Samba 4.19 uas tau nthuav tawm, ib qho ntawm nws cov yam ntxwv tshiab tseem ceeb uas sawv tawm yog kev tsiv teb tsaws chaw. smbgt ua siv ib qho kev hais kom ua kab parser. Thiab nyob rau hauv no tshiab version tau raug muab txhais ua cov cai nrog rau lwm yam khoom siv hauv Samba txhawm rau txheeb xyuas cov kab hais kom ua (yav dhau los, smbgt ua siv cov parser tshwj xeeb rau cov khoom siv no). Qhov kev hloov pauv tau tso cai ntxiv cov yam ntxwv xws li Kerberos authentication los ua kom tiav, tab sis ntawm tus nqi ntawm deprecating cov ntaub ntawv smbgetrc thiab rhuav rov qab compatibility ntawm cov kev xaiv qib.
Lwm qhov kev hloov pauv uas sawv hauv qhov tshiab version yog qhov hloov mus rau gpupdate hais kom ua, uas muaj nuj nqi libgpo.get_gpo_list tau dhau los lawm, txij li nws tau hloov los ntawm kev siv Python uas tuaj yeem raug xa tawm ntawm "import samba.gp".
Hauv Samba 4.19, qhov pib ib feem ntawm kev ua haujlwm ntawm Active Directory functional theem 2012, 2012R2 thiab 2016 tau raug npaj nrog uas Samba yuav muaj peev xwm dhau qhov kev lees paub txoj cai thov los ntawm Active Directory rau PAC.
Ntxiv rau qhov ntawd rau cov neeg siv Windows, thaum Active Directory 2012, 2012_R2, lossis 2016 ua haujlwm qib tau qhib, kev txhawb nqa rau qhov txuas ntxiv yog siv. FAST Kerberos. Txhawm rau txuas mus rau Active Directory, qhov kev siv tshiab siv SamDB module hloov ADS.
Peb tseem tuaj yeem pom qhov ntawd ntxiv kev txhawb nqa rau cov teb tshiab: 'traceid' los tso saib cov ntaub ntawv ntsig txog tib cov lus nug hauv kev sau npe khaws cia qib zes ntawm cov lus nug hauv daim ntawv teev npe.
Ntawm qhov tod tes, peb kuj tuaj yeem pom qhov ntawd ntxiv RBCD kev txhawb nqa rau Heimdal Kerberos-based domain controller configurations, nrog rau cov nqi hluav taws xob samba-cov cuab yeej siv kev txhawb nqa rau kev nthuav tawm, ntxiv, thiab hloov kho qhov tseeb silos
thiab Active Directory Authentication claims.
Ntawm qhov lwm yam kev hloov uas sawv tawm los ntawm qhov tshiab version:
- Code tshem tawm nrog kev siv ntawm built-in cryptographic functions.
- KDC cov cuab yeej tshawb xyuas tau txhim kho
- Active Directory PAC ntxiv kev txhawb nqa rau compressing centralized access txoj cai cwj pwm siv tib compression algorithm ib yam li hauv Microsoft Windows.
- Muaj peev xwm nkag mus, khaws cia hauv JSON hom, feem ntau ua tsis tiav thiab txhua daim pib Kerberos tau tshaj tawm, suav nrog cov uas ua txhaum txoj cai tswj xyuas tsis raug cai.
- Heimdal Kerberos code siv nyob rau hauv Samba (lorikeet-heimdal ceg) tau hloov kho rau cov xwm txheej ntawm lub ntsiab repository ntawm lub ntsiab Heimdal project.
- Ntxiv qhov kev xeem tshiab rau PKINIT (smart card ID nkag mus).
- Heimdal KDC ntxiv muaj peev xwm tshem tawm daim npav ntse daim ntawv pov thawj siv rau PKINIT authentication.
- Hloov cov UnicodePwd thiab userPassword tus cwj pwm ntawm tus tswj hwm tam sim no tsuas yog tso cai thaum siv kev sib txuas encrypted.
- Ntxiv rau "smbcontrol ldap_server reload-certs" hais kom rov thauj cov ntawv pov thawj TLS siv rau ntawm Active Directory domain controller yam tsis tau rov pib Samba Cheebtsam.
Thaum kawg, yog tias koj xav paub ntau ntxiv txog nws, koj tuaj yeem sab laj cov ntsiab lus hauv kev txuas mus ntxiv.
Yuav ua li cas rau nruab lossis upgrade rau Samba ntawm Ubuntu thiab derivatives?
Zoo, rau cov neeg txaus siab ua kom muaj peev xwm nruab qhov tshiab no ntawm Samba lossis xav hloov kho lawv cov qauv dhau los rau qhov tshiab noLawv tuaj yeem ua nws los ntawm kev ua raws cov theem uas peb qhia hauv qab no.
Nws yog ib qho tsim nyog hais tias, txawm hais tias samba suav nrog hauv Ubuntu repositories, koj yuav tsum paub tias cov pob ntawv tsis tau hloov kho thaum lub tshiab version raug tso tawm, yog li qhov no peb nyiam siv lub chaw cia khoom.
Thawj qhov uas peb yuav ua yog qhib lub davhlau ya nyob twg thiab hauv nws peb yuav ntaus cov lus txib hauv qab no ntxiv rau qhov chaw khaws cia rau hauv qhov system:
sudo add-apt-repository ppa:linux-schools/samba-latest sudo apt-get update
Thaum lub repository tau ntxiv lawm, peb mus rau nruab samba ntawm lub system thiab rau qhov no, peb tsuas yog ntaus cov lus txib nram qab no:
sudo apt install samba
Yog hais tias koj twb muaj ib tug yav dhau los version ntsia, nws yuav muab kho tshiab txiav.