ISamba 4.12, iza ne-GnuTLS, injini yokusesha esekwe ku-Elasticsearch nokuningi

linux-samba

Ya kukhishwe inguqulo entsha yeSamba 4.12.0, eqhubeka nokwakhiwa kwegatsha le-Samba 4.x ngokuqalisa ngokuphelele kwesilawuli sesizinda ne-Active Directory service, ehambisana nokusetshenziswa kweWindows 2000 futhi ekwazi ukusebenzela zonke izinhlobo zamakhasimende weWindows asekelwa yiMicrosoft, kufaka phakathi iWindows 10.

ISamba 4, ngu umkhiqizo we-server osebenza ngemisebenzi eminingi, enikezela futhi ukwenziwa kweseva yefayela, insizakalo yokuphrinta neseva yokufakazela ubuqiniso (winbind).

Yini okusha kuSamba 4.12?

Kule nguqulo entsha yeSamba 4.12, ushintsho lwe ukusetshenziswa okuhlanganisiwe kwe- imisebenzi ye-cryptographic, ezisusiwe kwisisekelo sekhodi esivuna ukusetshenziswa kwemitapo yolwazi yangaphandle.

Ngayo kwanqunywa ukuthi kusetshenziswe i-GnuTLS njengomtapo wolwazi omkhulu we-crypto nalokho ngaphezu kokunciphisa izinsongo ezihambisanayo ngokuhlonza ubungozi ekusetshenzisweni okushumekiwe kwama-cryptographic algorithms, ushintsho oluya ku I-GnuTLS futhi yenze ukuthi kube nokwenzeka ukuthola ukuthuthuka okukhulu ekusebenzeni lapho ukubethela kusetshenziswa ku-SMB3.

Ngokunikezwe lokhu, izivivinyo zenziwa ngokusetshenziswa kweklayenti le-CIFS kusuka ku-Linux kernel 5.3, lapho kwanda khona amahlandla ama-3 ngejubane lokubhala nejubane lokufunda elingu-2.5-fold.

Futhi kuyaziwa ukuthi kungezwe i-backend entsha ukusesha ama-sIzinketho ze-SMB zisebenzisa umthetho olandelwayo obonakalayo, ngokususelwa kunjini yokusesha ye-Elasticsearch.

Ukwakheka kufaka phakathi nokusetshenziswa kwe-mdfind nokusetshenziswa kweklayenti okuvumela ukuthi imibuzo yokusesha ithunyelwe kunoma iyiphi iseva ye-SMB eqhuba insiza ye-Spotlight RPC. Isethingi se- "Spotlight backend" sishintshelwe ku- "noindex" ngokuzenzakalela (se-Tracker noma i-Elasticsearch, kufanele usethe ngokusobala amanani we- "tracker" noma "elasticsearch").

KuSamba 4.12, singathola ukuthi ukusebenza kokusebenza kushintshiwe 'izikhangiso zenetha kerberos pac londoloza'Y 'net eventlog ukuthekelisa', manje engabhali phezu kwefayela, futhi uma uzama ukuthekelisa kufayela elivele likhona, iphutha liyajikijelwa.

Ithuluzi le-samba lithuthukise ukungezwa kokufakwa kokuxhumana yamalungu eqembu. Uma ngaphambili, usebenzisa umyalo 'izithasiselo zeqembu le-samba-tool', ungavele ungeze abasebenzisi, amaqembu namakhompyutha njengamalungu eqembu elisha, manje ukusekelwa kokwengeza oxhumana nabo njengoba kungezwe amalungu eqembu.

Ithuluzi le-samba livumela ukuhlunga ngeyunithi yenhlangano (i-OU, i-Organisation Unit) noma i-subtree. Kufakwe amafulegi amasha "-base-dn" ne "–member-base-dn", enza kube nokwenzeka ukwenza umsebenzi kuphela ngengxenye ethile yesihlahla se-Active Directory, ngokwesibonelo, kuphela ngaphakathi kweyunithi ye-OU.

Futhi ungeze imodyuli entsha ye-VFS 'io_uring' kusetshenziswa i-Linux kernel io_uring interface entsha ye-asynchronous I / O.

Io_uring isekela ukuhlola i-I / O futhi ingasebenza nge-buffering (inqubo ephakanyiswe ngaphambili ye- "aio" ayizange isekele i-O / O ebhajiwe).

Lapho ukusebenza ngamapholi kunikwe amandla, io_uring ihamba phambili kakhulu kune-aio ekusebenzeni.

ISamba isebenzise i- ukusekelwa kwe-SMB_VFS_ {PREAD, PWRITE, FSYNC} _SEND / RECV futhi yehlise ngaphezulu kokugcina ichibi lezintambo esikhaleni somsebenzisi lapho usebenzisa i-backend VFS ezenzakalelayo. Ukwakha imodyuli ye-VFS io_uring kudinga umtapo wezincwadi okhululayo kanye ne-Linux 5.1+ kernel.

Kwezinye izinguquko ezigqamile: 

  • I-VFS inikeza amandla okucacisa inani lesikhathi elikhethekile, i-UTIME_OMIT, ukumaka isidingo sokunganaki isikhathi emsebenzini we-SMB_VFS_NTIMES ().
  • I-B smb.conf iyekile ukusekela ipharamitha "bhala isilondolozi", elahlekelwe yincazelo yayo ngemuva kokuvela kosekelo lwe-io_uring.
  • I-Samba-DC ne-Kerberos ziyeke ukubethela zisebenzisa i-DES algorithm. U-Heimdal-DC ususe ikhodi yokubethela ebuthakathaka.
  • Imodyuli ye-vfs_netatalk isusiwe, ayizange ihambisane futhi ilahlekelwe ukuhambisana kwayo.
  • Umtapo wezincwadi we-zlib ufakiwe nokuncika kokwakha. Ukuqaliswa kwe-zlib okushumekiwe kukhishiwe kusisekelo sekhodi (ikhodi ibisuselwa kunguqulo yangaphambilini ye-zlib, lapho ukwesekwa kokubethela kungasebenzi ngokujwayelekile).

Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.