Ya nooca cusub ee Samba 4.12.0 ayaa la sii daayay, kaas oo ku sii soconaya horumarinta laanta Samba 4.x oo leh fulin buuxda oo ah xakamaynta domainka iyo adeegga Tilmaamaha Firfircoon, oo la jaan qaadaya hirgelinta Windows 2000 isla markaana awood u leh inuu u adeego dhammaan noocyada macaamiisha Windows ee ay taageerayaan Microsoft, oo ay ku jiraan Windows 10.
Samba 4, waa - shey adeegsi badan, kaas oo sidoo kale bixiya hirgelinta server file, adeegga daabacaadda iyo server xaqiijinta (winbind).
Maxaa ku cusub Samba 4.12?
Qaabkan cusub ee Samba 4.12, isbedelka fulintiinii laga hirgaliyay hawlaha cryptographic, Kuwaas oo laga saaray salka furaha iyadoo laga doorbidayo adeegsiga maktabadaha dibedda.
Iyadoo taas leh waxaa la go'aansaday in la isticmaalo GnuTLS sida maktabadda weyn ee crypto iyo taas marka lagu daro yareynta khataraha suurtagalka ah ee suurtogalka ah iyada oo la aqoonsanayo dayacanka ku jira hirgelinta gundhigga algorithms-ka, u gudubka GnuTLS sidoo kale waxay suurto galisay in la gaaro koror la taaban karo ee waxqabadka marka sirta loo isticmaalo SMB3.
Marka tan la eego, tijaabooyinka waxaa lagu qaaday hirgelinta macaamilka CIFS ee Linux Kernel 5.3, kaas oo lagu kordhiyay 3 laab xawaaraha qorista iyo 2.5-laab xawliga akhriska.
Sidoo kale waxaa xusid mudan in gadaal cusub lagu soo daray raadinta sWaxqabadka SMB adoo adeegsanaya borotokoolka tooska ah, ku saleysan mashiinka raadinta Elasticsearch.
Halabuurka waxaa sidoo kale ka mid ah utility-ka mdfind oo ay weheliso hirgelinta macmiilka u oggolaanaya inuu u diro weydiimaha raadinta adeeg kasta oo SMB ah socda adeegga 'Spotlight RPC'. Dejinta "Iftiinka iftiinka" waxaa loo beddelay "noindex" markii hore (Tracker ama Elasticsearch, waa inaad si cad u dejiso qiimaha "tracker" ama "elasticsearch").
Samba 4.12, waxaa laga yaabaa inaan ku ogaanno in habdhaqanka hawlgallada la beddelay 'xayeysiiska net kerberos pac badbaadiyo'Y 'dhoofinta eventlog net', oo hadda aan dib loo qorin feylka, oo haddii aad isku daydo inaad u dhoofiso fayl jira, qalad ayaa la tuuraa.
Aaladda samba waxay hagaajisay ku darista galka xiriirka xubnaha kooxda. Haddii kahor, adoo adeegsanaya amarka 'kooxda samba-tool addmemers', waxaad si fudud ugu dari kartaa isticmaaleyaasha, kooxaha iyo kombiyuutarada xubno cusub oo kooxeed ah, hadda taageer inaad ku darto xiriirada maadaama xubnaha kooxda lagu daray.
Qalabka samba wuxuu u oggolaanayaa shaandhaynta cutub urur (OU, Unug Urur) ama subtree. Calamo cusub "–base-dn" iyo "–member-base-dn" ayaa lagu daray, taasoo suurta gal ka dhigaysa in lagu fuliyo qalliin kaliya qayb gaar ah oo ka mid ah geedka Firfircoon ee Firfircoon, tusaale ahaan, kaliya gudaha cutubka OU.
Sidoo kale, ku daray module cusub VFS 'io_uring' adoo adeegsanaya Linux kernel cusub io_uring interface ee isku mid ah I / O.
Io_uring waxay taageertaa baaritaanka I / O waxayna la shaqeyn kartaa keydinta (farsamadii hore ee "aio" ma aysan taageerin buunshaha I / O).
Markaad la shaqeyneyso codbixinta karti, io_uring ayaa si weyn uga horeysa aio waxqabadka.
Samba waxay hirgelisay taageerada SMB_VFS_ {PREAD, PWRITE, FSYNC} _SEND / RECV oo waxay hoos u dhigtay dusha sare ee ku haynta barkad xarig ku jirta meesha isticmaalaha marka la isticmaalayo dhabarka VFS ee caadiga ah Dhisidda moduleka VFS io_uring wuxuu u baahan yahay maktabadda maktabadda iyo Linux 5.1+ kernel.
Isbedelada kale ee muuqda:
- VFS waxay bixisaa awooda lagu cadeeyo qiimaha waqtiga gaarka ah, UTIME_OMIT, si loo calaamadiyo baahida loo qabo in la iska indhatiro waqtiga shaqada SMB_VFS_NTIMES ().
- B smb.conf wuxuu joojiyay taageerida cabbirka "qor kaydadka", oo macnihiisii lumay kadib markii taageerada io_uring ay muuqatay.
- Samba-DC iyo Kerberos waxay joojiyeen sirta iyagoo adeegsanaya DES algorithm. Heimdal-DC waxay ka saartay koodhkii sirta ee daciifka ahaa.
- Module-ka vfs_netatalk ayaa laga saaray, lama wehelin oo lumiyay xiriirkiisa.
- Maktabada zlib waxaa lagu soo daray ku tiirsanaanta dhismaha. Hirgelinta zlib gundhigga ah ayaa laga saaray salka koodhka (koodhku wuxuu ku salaysnaa qaabkii hore ee zlib, halkaasoo taageerada sirta aysan si caadi ah u shaqeyn).