Page MenuHomeSolus
Differential D3232

Update Samba to 4.7.8 and change to more secure default settings.
ClosedPublic
Actions

Authored by ermo on Jul 4 2018, 12:24 PM.
Tags
None
Referenced Files
F11008356: D3232.diff
Wed, Aug 2, 2:41 AM
F11003626: D3232.diff
Mon, Jul 31, 4:53 PM
F10975623: D3232.id8033.diff
Sat, Jul 22, 5:52 AM
F10896928: D3232.id8059.diff
Jul 2 2023, 3:14 AM
F10874345: D3232.id7996.diff
Jun 20 2023, 12:12 AM
F10874334: D3232.diff
Jun 20 2023, 12:09 AM
F10870080: D3232.diff
Jun 18 2023, 8:23 AM
F10867091: D3232.id.diff
Jun 17 2023, 6:40 PM
View All 16 Files
Subscribers
None

Details

Reviewers
JoshStrobl
Group Reviewers
Triage Team
Maniphest Tasks
T6595: Update Samba to 4.7.x and ensure that it integrates properly with GNOME/KDE/MATE
Commits
R2842:c0585dfdd2dd: Update Samba to 4.7.8 and change to more secure default settings.
Summary

Solus default configuration changes:

  • Disable SMB1 for security reasons (can be enabled by the user)
  • Replace SMB1 workgroup browsing with Avahi autodiscovery
  • Set up logging differently (useful for debugging auth/proto issues)
  • Move /etc/samba/smb.conf.README to a symlink (for easier updates)

Updated from 4.6.14

Depends on D3229, D3231

Closes T6595

Changes from Samba 4.6.x series:

  • 'smbclient' changes (allows SMB3)
  • Whole DB read locks: Improved LDAP and replication consistency
  • Samba AD with MIT Kerberos support
  • Dynamic RPC port range
  • Authentication and Authorization audit support
  • Multi-process LDAP Server
  • Improved Read-Only Domain Controller (RODC) Support
  • Additional password hashes stored in supplementalCredentials
  • Improvements to DNS during Active Directory domain join
  • Significant AD performance and replication improvements
  • Query record for open file or directory
  • Removal of lpcfg_register_defaults_hook()
  • Change of loadable module interface
  • SHA256 LDAPS Certificates
  • CTDB changes
  • Using x86_64 Accelerated AES Crypto Instructions
  • Parameter changes
  • smb.conf changes

Release Notes:

Test Plan

Start local samba instance and browse for shares:

sudo systemctl stop nmb smb && systemctl status nmb smb && systemctl start smb && systemctl status smb && smbclient -N -L localhost

Test usershare functionality by sharing a folder with Nautilus (nautilus-usershare)

Test network browsing via gvfs and Nautilus

Connect to usershare folder from Budgie / GNOME (Nautilus), Windows 10, macOS Sierra and High Sierra.

Diff Detail

Repository
R2842 samba
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

ermo created this revision.Jul 4 2018, 12:24 PM
Herald added a reviewer: Triage Team. · View Herald TranscriptJul 4 2018, 12:24 PM
ermo requested review of this revision.Jul 4 2018, 12:24 PM
ermo edited the summary of this revision. (Show Details)Jul 5 2018, 1:48 PM
ermo edited the test plan for this revision. (Show Details)
ermo added parent revisions: D3231: Update ldb to 1.3.4 for Samba 4.7.8, D3229: Update tevent to 0.9.36 for Samba 4.7.8..
ermo updated this revision to Diff 8033.Jul 6 2018, 2:34 PM

Configure with --disable-rpath-install per T6626

JoshStrobl accepted this revision.Jul 10 2018, 4:16 PM
This revision is now accepted and ready to land.Jul 10 2018, 4:16 PM
Closed by commit R2842:c0585dfdd2dd: Update Samba to 4.7.8 and change to more secure default settings. (authored by ermo, committed by JoshStrobl). · Explain WhyJul 10 2018, 4:17 PM
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathSize
143 lines
1 line
files/
14 lines
59 lines
38 lines
19 lines
466 lines

Diff 8059

View Options

abi_symbols

Loading...
View Options

abi_used_libs

Loading...
View Options

files/avahi.smb.service

Loading...
View Options

files/smb.conf.README

Loading...
View Options

files/smb.conf.solus

Loading...
View Options

package.yml

Loading...
View Options

pspec_x86_64.xml

Loading...
Copyright © 2015-2021 Solus Project. The Solus logo is Copyright © 2016-2021 Solus Project. All Rights Reserved.