diff options
| author | Stefan Metzmacher <metze@samba.org> | 2017-06-26 10:24:45 +0200 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2017-06-27 16:57:48 +0200 |
| commit | b039ef422444144c52194f030f6df92dd29bbeef (patch) | |
| tree | 29d756e907d85ab353a7d7a7fa0226b2b426c12b /WHATSNEW.txt | |
| parent | 1199907cbe2f003a7df6f56e6cf3878d0732344d (diff) | |
| download | samba-b039ef422444144c52194f030f6df92dd29bbeef.tar.gz | |
WHATSNEW: document "client max protocol" change to SMB3_11
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'WHATSNEW.txt')
| -rw-r--r-- | WHATSNEW.txt | 28 |
1 files changed, 25 insertions, 3 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 14d1972a2cb..e8fbecb2b81 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -21,6 +21,26 @@ there's no way to print this information reliable. Now we avoid it at all consistently. In interactive session the following banner is now presented to the user: 'Try "help" do get a list of possible commands.'. +The default for "client max protocol" has changed to "SMB3_11", +which means that smbclient (and related commands) will work against +servers without SMB1 support. + +It's possible to use the '-m/--max-protocol' option to overwrite +the "client max protocol" option temporary. + +Note that the '-e/--encrypt' option also works with most SMB3 servers +(e.g. Windows >= 2012 and Samba >= 4.0.0), so the SMB1 unix extensions +are not required for encryption. + +The change to SMB3_11 as default also means smbclient no longer +negotiates SMB1 unix extensions by default, when talking to a Samba server with +"unix extensions = yes". As a result some commands are not available, e.g. +posix_encrypt, posix_open, posix_mkdir, posix_rmdir, posix_unlink, posix_whoami, +getfacl and symlink. Using "-mNT1" reenabled them, if the server supports SMB1. + +Note the default ("CORE") for "client min protocol" hasn't changed, +so it's still possible to connect to SMB1-only servers by default. + NEW FEATURES/CHANGES ==================== @@ -136,15 +156,17 @@ smb.conf changes Parameter Name Description Default -------------- ----------- ------- - allow unsafe cluster upgrade New parameter no + allow unsafe cluster upgrade New parameter no auth event notification New parameter no auth methods Deprecated + client max protocol Effective SMB3_11 + default changed map untrusted to domain New value/ auto Default changed/ Deprecated - mit kdc command New parameter + mit kdc command New parameter profile acls Deprecated - rpc server dynamic port range New parameter 49152-65535 + rpc server dynamic port range New parameter 49152-65535 strict sync Default changed yes |