Samba 4.15.0 yatsopano yamasulidwa kale, imabwera ndi chithandizo cha SMB3, kusintha ndi zina zambiri

Posachedwa kutulutsidwa kwa Samba 4.15.0 yatsopano yalengezedwa, yomwe ikupitiliza kukula kwa nthambi ya Samba 4 ndikukhazikitsa kwathunthu kwa woyang'anira madera ndi Active Directory service.

Samba yatsopanoyi kumaliza ntchito ya VFS wosanjikiza kukuwonetsedwa, Komanso idathandizidwa mwachisawawa komanso kuwonjezera kukhazikika kwa chithandizo cha kukulitsidwa kwa SMB3, mzere wolamula udasinthidwa, mwazinthu zina.

Zinthu zatsopano za Samba 4.15

M'masinthidwe atsopanowa awonetsedwa kuti Ntchito yamasanjidwe a VFS yosintha yatha ndi pazifukwa zakale, code yokhala ndi fayilo yokhazikitsidwa ndi seva yolumikizidwa ndi kukonza njira, yomwe idagwiritsidwa ntchito, mwazinthu zina, pa protocol ya SMB2, yomwe idamasuliridwa kuti igwiritse ntchito zofotokozera.

Zamakono zidayamba kumasulira nambala yomwe imapereka mwayi wogwiritsa ntchito seva kuti mugwiritse ntchito mafotokozedwe amafayilo m'malo mwa mafayilo njira fstat () imagwiritsidwa ntchito m'malo mwa stat () ndi SMB_VFS_FSTAT () imagwiritsidwa ntchito m'malo mwa SMB_VFS_STAT ().

Kukhazikitsidwa kwa ukadaulo wa BIND's Dynamically Loaded Zones (DLZ), womwe umathandizira makasitomala kutumiza zopempha za DNS zone ku seva ya BIND ndikulandila yankho kuchokera ku Samba, kwawonjezera kuthekera kofotokozera mindandanda yolowera kuti adziwe zomwe makasitomala amaloledwa kupempha ndi zomwe omwe sali.

Chachilendo china chomwe chikuwonekera ndichakuti idathandizidwa mwachisawawa kuphatikiza chithandizo chakhazikika pakuwonjezera kwa SMB3 (Multichannel SMB3), yomwe imalola makasitomala kukhazikitsa maulalo angapo kuti agwirizane ndi kusamutsidwa kwa gawo limodzi la SMB. Mwachitsanzo, mukamagwiritsa ntchito fayilo yomweyo, ntchito za I / O zitha kufalikira pamalumikizidwe angapo nthawi imodzi. Njirayi imathandizira magwiridwe antchito ndipo imakulitsa kulolerana kolakwika. Kulepheretsa SMB3 yama multichannel mu smb.conf, sinthani njira ya "multichannel server support", yomwe tsopano imathandizidwa mwachisawawa pamapulatifomu a Linux ndi FreeBSD.

Ndikothekanso kugwiritsa ntchito chida cha samba pamakonzedwe a Samba omangidwa popanda Active Directory domain controller support (ndi "-outout-ad-dc" njira yomwe yatchulidwa). Koma pankhaniyi, sizinthu zonse zomwe zilipo, mwachitsanzo, kuthekera kwa lamulo la 'samba tool domain' kuli ndi malire.

Komanso, zadziwika kuti mawonekedwe amtundu wamalamulo asinthidwa ndipo pulogalamu yatsopano yamalamulo yasankhidwa kuti mugwiritse ntchito pazinthu zosiyanasiyana za samba. Zosankha zomwezi ndizogwirizana, zomwe zimasiyana mosiyanasiyana, mwachitsanzo, kugwiritsa ntchito njira zina zokhudzana ndi kubisa, kugwira ntchito ndi siginecha ya digito ndikugwiritsa ntchito kerberos kwakhala kogwirizana. Smb.conf imatanthauzira zoikidwazo kuti zikhazikitse zosankha zosankha mwanjira zomwe mungasankhe.

Komanso, anawonjezera chithandizo cha Offline Domain Join limagwirira (ODJ), yomwe imakupatsani mwayi wolowa nawo makompyuta kudera linalake osalumikizana ndi wowongolera. Pa machitidwe opangidwa ndi Unix monga Samba, lamulo la 'net offlinejoin' limaperekedwa kuti mulowe nawo, ndipo pa Windows mutha kugwiritsa ntchito pulogalamu ya djoin.exe.

Mwa kusintha kwina zoonekera:

• Kuti muwonetse zolakwika pazinthu zonse, STDERR imagwiritsidwa ntchito (potulutsa ku STDOUT, njira ya "-debug-stdout" imaperekedwa).
  Chowonjezedwa "- chitetezo -makasitomala = kuchotsedwapo | chizindikiro | encrypt '.
• Pulogalamu yowonjezera ya DLZ DNS sichithandizanso nthambi zolumikizira 9.8 ndi 9.9.
• Mwachikhazikitso, mndandanda wamaudindo wodalirika umalephereka poyambitsa winbindd, zomwe zinali zomveka m'masiku a NT4, koma sizothandiza pa Directory Directory.
• DCE / RPC ma seva a DNS tsopano atha kugwiritsidwa ntchito ndi chida cha samba ndi Windows zofunikira kugwiritsa ntchito zolemba za DNS pa seva yakunja.
• Lamulo "samba-tool domain backup offline" likakwaniritsidwa, kusanja kolondola mu nkhokwe ya LMDB kumatsimikizika kuti kudzatetezedwa pakusintha kwofananira kwa nthawi yomweyo.
• Kuthandizira ziyankhulo zoyeserera za protocol ya SMB kwasiya: SMB2_22, SMB2_24, ndi SMB3_10, zomwe zimagwiritsidwa ntchito pamawindo a Windows okha.
• Kuyesera kumayesedwa ndi kuyesa kwa Active Directory kukhazikitsa kutengera MIT Kerberos, zofunikira zakwezedwa kuti mtundu wa phukusili. Zomanga tsopano zimafunikira osachepera MIT Kerberos 1.19 (yotumizidwa ndi Fedora 34).
• Thandizo la NIS lachotsedwa.
• Inakonza chiopsezo cha CVE-2021-3671 chomwe chingalole wogwiritsa ntchito osatsimikizika kuti atseke woyang'anira madera a Heimdal KDC ngati paketi ya TGS-REQ itumizidwa popanda dzina la seva.

Mapeto ngati mukufuna kudziwa zambiri za izi, mutha kuwona Zambiri mu ulalo wotsatira.