Samba 4.23.0rc3 is now available for testing
The Samba Team has officially announced the third release candidate of Samba 4.23, marking a significant update for the widely-used open-source file and print sharing software. This release is intended solely for testing purposes and is not suitable for use in production environments.
Essential Features and Changes:
Set SMB3 Unix Extensions to be enabled by default.
Beginning with Samba 4.23, the SMB3 UNIX Extensions are enabled by default. These extensions deliver exceptional support for POSIX semantics over SMB3, enabling UNIX and Linux clients to utilize file services with capabilities including accurate POSIX permissions, symlink management, hardlinks, and specialized file types.
Activating this feature by default enhances interoperability for UNIX/Linux clients without the need for further configuration. Windows clients lacking support for the extensions will operate as expected, utilizing the standard SMB3 behavior.
Implement Support for SMB3 over QUIC
Samba 4.23 introduces support for SMB3 over QUIC, a new transport protocol developed by Google. This facilitates quicker and more effective file transfers between Samba servers and clients. To enable QUIC, configure the server smb transports option in the smb.conf file.
It is important to note that on Linux systems, the quic kernel module is necessary to enable SMB3 over QUIC on the server side. If the kernel module is unavailable, a fallback to the userspace ngtcp2 library will be utilized.
Contemporary Write Time Update Procedure
Samba 4.23 updates file timestamp management to align with contemporary Windows servers. Previous versions implemented delayed write time updates, with last_write_time being refreshed solely after a brief idle interval. Samba now implements immediate timestamp updates in alignment with contemporary Windows 10/Server 2016 or later versions.
Initial Version of smb_prometheus_endpoint
Samba 4.23 introduces the smb_prometheus_endpoint utility, which exports Samba server metrics in a format compatible with Prometheus. This facilitates the smooth incorporation of Samba performance and status monitoring within current Prometheus and Grafana setups.
Utilize samba-tool domain backup with the --no-secrets option to exclude confidential attributes.
The --no-secrets option generates a backup that excludes secret attributes (e.g., passwords), making it appropriate for application in a lab domain. As of now, it may still include confidential attributes, such as BitLocker recovery data and KDS root keys. The classes msKds-ProvRootKey, msFVE-RecoveryInformation, and msTPM-InformationObject will now be completely excluded from the backup.
CTDB Modifications
CTDB (Clustered Trivial Database) now offers the capability to load tunables from /etc/ctdb/tunables.d/*.tunables, in addition to the standard /etc/ctdb/tunables.conf. This enables vendors to deliver their necessary tunable settings while permitting local administrators to incorporate their own tunable settings as well.
Per-Share Profiling Statistics
With the release of Samba 4.23, users have the capability to gather profile counters on a per-share basis. This feature necessitates the construction of Samba with profiling data activated and the inclusion of a suitable smb.conf parameter for designated shares. This tool is especially beneficial for environments with numerous active shares, enabling administrators to oversee individual share activity and pinpoint potential bottlenecks or hotspots.
Features have been removed
The subsequent parameters have been removed from the smb.conf file:
- smbd profiling share
- client smb transports
- server smb transports
- winbind varlink service
Download:
The uncompressed tarballs and patch files have been signed with GnuPG (ID AA99442FB680B620). The source code is available for download at the following location:
The release notes can be accessed online at:
https://download.samba.org/pub/samba/rc/samba-4.23.0rc3.WHATSNEW.txt
