SMB1 Protocol Officially Removed from Samba
Not that this will affect any current Samba admins across the globe, but the developers of the file-sharing protocol have finally removed the obsolete SMB1 protocol from the stack with the 4.16 release.
Along with the removal of that deprecated protocol, a few noteworthy features have been added. First off, the new samba-dcerpcd binary has been created to make it easier for admins to separate the DCERPC (Distributed Computing Environment/Remote Procedure Calls, which is used for calling a procedure on a remote machine as though it were local) service from smbd. In order to enable this feature, rpc start on demand helpers = should be set to true (which is the default).
Samba 4.16 also includes the ability to add ports to DNS forwarder addresses within the DNS backend.
Also, the Heimdal Kerberos implementation has been updated and adds important new Kerberos security features (such as Kerberos request armoring, known as FAST). This new implementation tunnels ticket requests and replies that are encrypted with weak passwords inside a wrapper built with a stronger password.
Another addition is the per-KDC (as opposed to the per-realm) 'cookie' used to secure part of the FAST protocol.
For more information on Samba 4.16, make sure to check out the official release notes.
Related content
-
Samba 4 appliances by SerNet and Univention
Shortly after the Samba team finalized Samba 4 in December 2012, SerNet and Univention integrated the new Samba into their appliances that give administrators an easy way to set up and test a Samba 4-based Active Directory domain controller. -
Samba domain controller in a heterogeneous environment
The open source Samba service can act as an Active Directory domain controller in a heterogeneous environment. -
What's new in Samba 4
In December 2012, the open source world received the first, and very long awaited, release of the Samba 4.x series. - Samba 4.12 Released
-
Dispatches from the world of IT
