Blog

Teaser SDC 2019 talks by SerNet

At the Storage Developer Conferenece (SDC) last year (September 23 - 26, 2019, Santa Clara/California), Volker Lendecke and Ralph Böhme, both part of SerNet and the international Samba Team, gave presentations. These are available on the SNIA YouTube channel.

Ralph Böhme: What's new in Samba?
Direct Link: https://www.youtube.com/watch?v=g7cngkehwP8
Abstract: Presenting an overview on the latest advancements, new features and changes in Samba. The key focus is on Samba's SMB3 fileserver implementation, while also covering recent enhancements in Clustered Samba and Samba's implementation of Active Directory.

Volker Lendecke: Samba's RPC Services for non GPL SMB Servers
Direct Link: https://www.youtube.com/watch?v=0ePEfzPrqDg
Abstract: Implementing [MS-SMB2] is a first step towards Windows interoperability. The simple task of listing shares is a nontrivial challenge, because Windows uses the srvsvc RPC service for this. Samba provides a seamless Windows user experience, it implements both SMB and RPC. It does so in a way that can be easily split apart in a GPL-compatible manner without putting GPL requirements on the SMB implementation. This talk presents a project where a non-GPL SMB implementor uses Samba's RPC implementation to provide a share listing and other RPC-based services, providing a much shorter time to market than by implementing the RPC stack independently. The talk also covers ways forward how Samba could implement a full RPC stack usable for simple integration of other RPC-based services.

Volker Lendecke:  Progress in making clustered Samba more scalable
Direct Link: https://www.youtube.com/watch?v=jewaMvKD32o
Abstract: This talk is a sequel to the 2018 talk about how to make Samba really fly in a clustered environment (direct link). It provides insights on the progress of the deep restructuring of Samba's core data structures as well as plans to optimize both the isolated as well as the heavily concurrent, shared file access that suffers from significant lock contention on internal data structures.


Ticket sales for the sambaXP 2020 have begun. SerNet will host the annual meeting of the international Samba community from 26 to 28 May 2020 at the Hotel Freizeit In in Göttingen. For the first time an SMB3 interoperability laboratory (IO-Lab) will be held parallel to the sambaXP.

The new IO-Lab format starts on May 24 and ends on May 29: On all days, a collaborative exchange for testing SMB3 implementations should be possible in a cooperative atmosphere. All participants can get involved in testing, identifying and fixing bugs in order to develop and improve interoperable products. Microsoft and SerNet provide networks and infrastructure for the IO-Lab. The participants define the testing process together and ensure that their goals are achieved.

The SerNet/Microsoft SMB3 IO-Lab offers

  • the latest Windows client and server software from Microsoft, including test suites that help to verify interoperability for various functions of the SMB3 protocols,
  • technical support for SMB3 engineers to investigate traces and help diagnose problems.

The participants of the interoperability laboratory are subject to a non-disclosure agreement and entry is restricted to registrants only.

Tickets for the conference as well as the IO-lab are available at an early bird price until 29 February 2020. In addition, a tutorial on Tuesday 26 May can be booked: Stefan Kania, longtime sambaXP speaker and samba trainer, will focus on the topic "CTDB".  Tickets and further information about the CfP can be found here: sambaxp.org.

The Call for Papers is also still running, submissions of papers are still welcome.

The sambaXP 2020 is sponsored by Google and Microsoft. This year's organiser is once again SerNet GmbH, which would like to use the conference to promote exchange between Samba developers and users from all over the world.


SAMBA+ 4.11.6 packages have just been released by SerNet. The packages are available for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu.

For details, please see the release notes.

SAMBA+ packages and all later versions are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.


SAMBA+ 4.10.13 packages have just been released by SerNet. The packages are available for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu.

For details, please see the release notes.

SAMBA+ packages and all later versions are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.


SAMBA+ 4.11.5, 4.10.12 and 4.9.18 packages have just been released by SerNet. These are important security releases, please update affected systems as soon as possible. The packages are available for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu.

The packages address the following issues:

  • CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD Directory not automatic.
    The implementation of ACL inheritance in the Samba AD DC was not complete, and so absent a 'full-sync' replication, ACLs could get out of sync between domain controllers.
     
  • CVE-2019-14907: Crash after failed character conversion at log level 3 or above.
    When processing untrusted string input Samba can read past the end of the allocated buffer when printing a "Conversion error" message to the logs.
     
  • CVE-2019-19344: Use after free during DNS zone scavenging in Samba AD DC.
    During DNS zone scavenging (of expired dynamic entries) there is a read of memory after it has been freed.

Also, SAMBA+ Long Term Support packages 4.8.12-25.lts.4, 4.7.12-21.lts.6 and 4.6.16-17.lts.8 including these fixes are available now.

SAMBA+ packages and all later versions are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.


Newsletter

SerNet's Samba newsletter informs you about all important developments and events with its main focus on new packages.

+ subscribe to Newsletter

SAMBA+ Shop

Buy and manage software subscriptions. SAMBA+ subscriptions are available for one, two and three years at the SAMBA+ shop.

+ visit the shop

Deutsche SpracheEnglish languageLangue française