|Written by Alex Amstrong|
|Friday, 23 September 2016|
• Wine 1.9.19 Released
Sometimes the news is reported well enough elsewhere and we have little to add other than to bring it to your attention.
No Comment is a format where we present original source information, lightly edited, so that you can decide if you want to follow it up.
Samba is the Linux subsystem that allows it to work with SMB networking - i.e. Windows file sharing.
This is the first stable release of the Samba 4.5 release series.
In order to improve security we have changed the default value for the "ntlm auth" option from "yes" to "no". This may have impact on very old clients which doesn't support NTLMv2 yet. The primary user of NTLMv1 is MSCHAPv2 for VPNs and 802.1x. By default, Samba will only allow NTLMv2 via NTLMSSP now, as we have the following default "lanman auth = no", "ntlm auth = no" and "raw NTLMv2 auth = no".
The ldap server has support for the LDAP_SERVER_NOTIFICATION_OID control. This can be used to monitor the Active Directory database for changes.
The Samba KCC will now be the default knowledge consistency checker in Samba AD. Instead of using full mesh replication between every DC, the KCC will set up connections to optimize replication latency and cost (using site links to calculate the routes). This change should allow larger domains to function significantly better in terms of replication traffic and the time spent performing DRS replication.
The VLV Control allows applications to page the LDAP directory in the way you might expect a live phone book application to operate, without first downloading the entire directory.
DRS Replication in Samba 4.5 is now much more efficient in handling linked attributes, particularly in large domains with over 1000 group memberships or other links. Replication is also much more reliable in the handling of tree renames, such as the rename of an organizational unit containing many users. Extensive tests have been added to ensure this code remains reliable, particularly in the case of conflicts between objects added with the same name on different servers. Schema updates are also handled much more reliably.
'samba-tool drs replicate' got two new options: The option '--local-online' will do the DsReplicaSync() via IRPC to the local dreplsrv service. The option '--async-op' will add DRSUAPI_DRS_ASYNC_OP to the DsReplicaSync(), which won't wait for the replication result.
During the development of the DRS replication, tests showed that Samba stores the replPropertyMetaData object incorrectly. To address this, be aware that 'dbcheck' will now detect and offer to fix all objects in the domain for this error.
In Active Directory, an object that has been tombstoned or recycled has no linked attributes. However, Samba incorrectly maintained such links, slowing replication and run-time performance. 'dbcheck' now offers to remove such links, and they are no longer kept after the object is tombstoned or recycled.
Many other improvements have been made to our LDAP database layer in the AD DC, to improve performance, both during 'samba-tool domain provision' and at runtime.
Wine the Linux package that allows you to run Windows apps under Linux is now available in a new version.
The Wine development release 1.9.19 is now available.
What's new in this release:
The GNOME Linux desktop is available in a new release.
The GNOME Project is proud to announce the release of GNOME 3.22, "Karlsruhe".
This release brings comprehensive Flatpak support. GNOME Software can install and update Flatpaks, GNOME Builder can create them, and the desktop provides portal implementations to enable sandboxed applications. Improvements to core GNOME applications include support for batch renaming in Files, sharing support in GNOME Photos, an updated look for GNOME Software, a redesigned keyboard settings panel, and many more.
For more information about the changes in GNOME 3.22, you can visit the release notes: https://help.gnome.org/misc/release-notes/3.22/
GNOME 3.22 will be available shortly in many distributions.
If you want to try it today, you can use the openSUSE nightly live images which include GNOME 3.22.
or email your comment to: firstname.lastname@example.org
|Last Updated ( Friday, 23 September 2016 )|