I-Samba 4.12, iza ne-GnuTLS, injini yokukhangela esekwe kwi-Elasticsearch kunye nokunye

I-linux-samba

Ya Inguqulelo entsha yeSamba 4.12.0 ikhutshiwe, eqhubeka nokuphuculwa kwesebe le-Samba 4.x ngokuphunyezwa ngokupheleleyo kwesilawuli sedomeyini kunye nenkonzo ye-Active Directory, ehambelana nokuphunyezwa kweWindows 2000 kwaye inakho ukukhonza zonke iinguqulelo zabathengi beWindows ezixhaswa nguMicrosoft, kubandakanya Windows 10.

USamba 4, ngu imveliso yeserver yemisebenzi emininzi, ekwabonelela ngokuphunyezwa kweseva yefayile, inkonzo yokuprinta kunye neseva yokuqinisekisa (winbind).

Yintoni entsha kwiSamba 4.12?

Kule nguqulo intsha yeSamba 4.12, utshintsho lwe ukumiliselwa okwakhelweyo kwe imisebenzi yokubhala, ezikhutshiweyo kwisiseko sekhowudi ukuxhasa ukusetyenziswa kwamathala eencwadi angaphandle.

Ngaloo nto kwagqitywa ekubeni kusetyenziswe i-GnuTLS njengeyona ndawo iphambili yeelayibrari ye-crypto kwaye ukongeza ekunciphiseni izoyikiso ezinxulumene noko ngokuchongwa kobuthathaka ekusebenziseni okufezekisiweyo kwe-cryptographic algorithms, utshintsho ukuya I-GnuTLS ikwenze ukuba kube nokwenzeka ukonyuka okubonakalayo kwintsebenzo xa usebenzisa ukubethela kwi-SMB3.

Ngenxa yoku, iimvavanyo zenziwa ngophumezo lomthengi weCIFS ovela kwiLinux kernel 5.3, apho ukonyuka okuphindwe kathathu kwisantya sokubhala kunye nesantya sokufunda esiphindwe kabini.

Kwakhona kuyacaciswa ukuba umva omtsha wongezwe kuphando sIimpawu zeSMB zisebenzisa umthetho obonakalayo, ngokusekwe kwi-injini yokukhangela ye-Elasticsearch.

Ukwenziwa kukwabandakanya isixhobo se-mdfind kunye nomiliselo lwabathengi oluvumela ukuthumela imibuzo yokukhangela kuyo nayiphi na iseva ye-SMB Ukuqhuba inkonzo yeRotlight RPC. Useto lwe "Spotlight backend" lutshintshelwe ku "noindex" ngokungagqibekanga (kwiTracker okanye kwi-Elasticsearch, kufuneka usete ngokucacileyo amaxabiso "tracker" okanye "elasticsearch").

KwiSamba 4.12, sinokufumanisa ukuba indlela yokusebenza iyitshintshile 'iintengiso ze-kerberos pac zigcina'Ewe 'net netloglog yokuthumela ngaphandle', ngoku engabhali ngaphezulu ifayile, kwaye ukuba uzama ukuthumela ngaphandle kwifayile esele ikho, impazamo iyaphoswa.

Isixhobo se-samba siphucule ukongezwa kwamagalelo onxibelelwano yamalungu eqela. Ukuba ngaphambili, usebenzisa umyalelo 'Izongezo zeqela lesixhobo se-samba', Unokongeza ngokulula abasebenzisi, amaqela kunye neekhompyuter njengamalungu eqela elitsha, ngoku inkxaso yokongeza abafowunelwa njengamalungu eqela ongezelelweyo.

Isixhobo se-samba sivumela ukucoca ngeyunithi yentlangano (i-OU, iCandelo loMbutho) okanye i-subtree. Iiflegi ezintsha "-base-dn" kunye ne "–ember-base-dn" ziye zongezwa, ezenza ukuba kwenzeke ukwenza umsebenzi kuphela ngenxalenye ethile yomthi we-Active Directory, umzekelo, kuphela ngaphakathi kweyunithi ye-OU.

Kwakhona yongeze imodyuli entsha ye-VFS 'io_uring' usebenzisa i-Linux kernel entsha io_uring interface ye-I / O ye-asynchronous.

Io_uring ixhasa uphononongo lwe-I / O kwaye inokusebenza ngokunika amandla (indlela ebicetywe ngaphambili ye "aio" khange ixhase i-O / O).

Xa usebenza ngee-polls ezinikwe amandla, io_uring ibaluleke kakhulu ngaphambi kwe-aio ekusebenzeni.

USamba uyiphumezile Inkxaso ye-SMB_VFS_ {PREAD, PWRITE, FSYNC} _SEND / RECV kwaye inciphise ngaphezulu kokugcina iphuli ngentambo kwindawo yomsebenzisi xa usebenzisa i-VFS engapheliyo. Ukwakha imodyuli ye-VFS io_uring ifuna ithala leencwadi elikhululayo kunye neLinux 5.1+ kernel.

Olunye utshintsho olwahlukileyo: 

  • I-VFS ibonelela ngesakhono sokukhankanya ixabiso lexesha elikhethekileyo, UTIME_OMIT, ukuphawula isidingo sokungahoyi ixesha kwi-SMB_VFS_NTIMES () umsebenzi.
  • I-s smb.conf iyekile ukuxhasa iparameter "bhala ubungakanani be-cache", ephulukene nentsingiselo yayo emva kokuvela kwenkxaso ye-io_uring.
  • I-Samba-DC kunye ne-Kerberos ziyeke ukubethela usebenzisa i-DES algorithm. UHeimdal-DC uyisusile ikhowudi yokubethela ebuthathaka.
  • Imodyuli ye-vfs_netatalk isusiwe, engakhange ikhatshwe kwaye yaphulukana nokubaluleka kwayo
  • Ithala leencwadi le-zlib libandakanyiwe kunye nokuxhomekeka kokwakha. Ukuphunyezwa kwe-zlib kususwe kwisiseko sekhowudi (ikhowudi ibisekwe kuhlobo lwangaphambili lwe-zlib, apho inkxaso ye-encryption ingakhange isebenze ngesiqhelo).

Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.