Blog

SAMBA+ Updates for 4.13.2, 4.12.10 and 4.11.16 packages have just been released by SerNet. Packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux and Ubuntu are available now.

These packages include regression fixes for the recently fixed issue in the GlusterFS VFS module:

  •  Bug 14486: vfs_glusterfs: Avoid data corruption with the write-behind translator.

Additionally fixes for the following bug are included:

  • Bug 14572: NULL pointer dereference in token_contains_name()

Both fixes avoid possible smbd crashes in affected setups.

SAMBA+ packages are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.


SAMBA+ 4.13.2, 4.12.10 and 4.11.16 packages have just been released by SerNet. Packages for various SUSE and Red Hat platforms as well as for Debian GNU/Linux, Ubuntu and AIX are available now.

These packages address a major issue which affects the GlusterFS VFS module:

  • Bug 14486: vfs_glusterfs: Avoid data corruption with the write-behind translator.

Further issues are listed in the Samba release history:

Samba Bug 14537 (ctdb-common: Avoid aliasing errors during code optimization) does not affect the SAMBA+ packages.

SAMBA+ packages are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.


In his talk at this year's sambaXP 2020 Ralph Böhme (SerNet / Samba Team) presents a "Developers guide to smbd: SMB2 packet processing".

Abstract

From the network down to the filesystem and back. This talk will give an overview on Samba's SMB2 packet processing with the goal of giving novice smbd hackers a starting point to the most important source code subsystems involved when a client sends a "create a file" request to the server.

(Slides as PDF)

About the "sambaXP 2020 Retrospective"

In this series we will present recordings of the sambaXP 2020 in the coming month. The 19th edition of the international conference on the open source software Samba took place from 26 - 28 May 2020 for the first time exclusively in digital form. Due to the changed event format and the use of an online conference platform, organizer SerNet is able to offer all talks as videos for viewing (link).


SAMBA+ 4.13.1, 4.12.9 and 4.11.15 packages have just been released by SerNet. These are important security releases, please update affected systems as soon as possible. The packages are available for various SUSE and Red Hat platforms as well as for Debian GNU/Linux, Ubuntu and AIX.

Also, SAMBA+ Long Term Support packages for the SAMBA+ LTS 4.10, 4.9 and 4.8 release series are available.

The packages address the following issues:

  • CVE-2020-14383 An authenticated user can crash the DCE/RPC DNS with easily crafted records.
  • CVE-2020-14323 Unprivileged user can crash winbind.
  • CVE-2020-14318 Missing handle permissions check in SMB1/2/3 ChangeNotify.

SAMBA+ 4.13.1 is the first stable release if the 4.13 release series. Please read the 4.13.0 release notes also carefully before upgrading.

Samba 4.13 raises the minimum requirement for Python to Python 3.6. Due to this requirement SAMBA+ 4.13 is not available for Debian stretch (9) and Ubuntu xenial (16.04) for now.

SAMBA+ 4.10 has reached the end of its life and will not receive any further updates. Please update to a more recent version of SAMBA+. Optionally you can switch to SAMBA+ LTS.

SAMBA+ packages are available as software subscription. They can be purchased at the SAMBA+ shop, detailed information and prices are listed at https://shop.samba.plus. The subscriptions are managed at our platform OPOSSO (https://oposso.samba.plus). Users can activate their subscriptions here and manage access credentials. The new SAMBA+ packages are included in existing subscriptions.


In this "Report from the field" Günther Deschner (Red Hat / Samba Team) and Anoop C S (Red Hat) talk about "Samba clustering with GlusterFS". Their presentation was part of this year's sambaXP 2020.

Abstract

Samba supports building a clustered SMB storage solution using the Gluster filesystem for several years now. While Samba and it’s cluster component CTDB are well established components for SMB clustering, the Gluster filesystem itself needed to adapt in various areas to provide all necessary features.

The talk covers the lessons learned during the process of maturing the Samba and GlusterFS setup and explore the architecture of Samba and GlusterFS in general. Based on support experiences we  point out the importance of sometimes overseen prerequisites in the area of networking and DNS. Driven by customer demands several important performance improvements have been made in the past months. Users of the glusterfs fuse filesystem now can use a new Samba VFS module that provides enhanced guarantees for accessing files within the cluster. It also implements a mechanism to circumvent expensive case folding pathname operations. The older Samba VFS module which consumes Gluster’s gfapi library now uses Samba’s threadpool implementation based on pthreads which lead to significant performance improvements. The presentation concludes with an outlook for the ongoing work related to SMB3 features such as multichannel and transparent failover.

(Slides as PDF)

About the "sambaXP 2020 Retrospective"

In this series we will present recordings of the sambaXP 2020 in the coming weeks. The 19th edition of the international conference on the open source software Samba took place from 26 - 28 May 2020 for the first time exclusively in digital form. Due to the changed event format and the use of an online conference platform, organizer SerNet is able to offer all talks as videos for viewing (link).


Newsletter

La bulletin d'information Samba de SerNet vous informe sur tous les développements et événements importants avec un accent particulier sur les nouveaux paquets.

+ s'abonner à la Bulletins

RSS Feed

Ne manquez plus les actualités de SAMBA+ ? Lisez les dernières nouvelles dans le lecteur de flux RSS de votre choix.

+ subscribe to RSS feed

SAMBA+ Shop

Acheter et gérer les abonnements aux logiciels. Les abonnements SAMBA+ sont disponibles pour un, deux et trois ans dans la SAMBA+ shop.

+ visiter la shop

Deutsche SpracheEnglish languageLangue française