summaryrefslogtreecommitdiff
path: root/WHATSNEW.txt
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2018-01-11 12:46:24 +0100
committerKarolin Seeger <kseeger@samba.org>2018-01-13 17:12:38 +0100
commit4b17d365bc8df7860ee28b5b0e1f53a9acf2b69d (patch)
treec208a701ea9512d1c8d0deb1252987d48e0bb90a /WHATSNEW.txt
parentb4e1e3019a1475cb8c1e3ab9314693d6ed130923 (diff)
downloadsamba-4b17d365bc8df7860ee28b5b0e1f53a9acf2b69d.tar.gz
WHATSNEW: document some more new options
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Karolin Seeger <kseeger@samba.org> Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Sat Jan 13 17:12:38 CET 2018 on sn-devel-144
Diffstat (limited to 'WHATSNEW.txt')
-rw-r--r--WHATSNEW.txt21
1 files changed, 20 insertions, 1 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 94278b3418c..f1e43f47546 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -95,15 +95,18 @@ smb.conf changes
client schannel Default changed/ yes
Deprecated
gpo update command New
+ ldap ssl ads Deprecated
map untrusted to domain Removed
oplock contention limit Removed
- prefork children New 1
+ prefork children New 1
mdns name Added netbios
fruit:time machine Added false
profile acls Removed
use spnego Removed
server schannel Default changed/ yes
Deprecated
+ unicode Deprecated
+ winbind scan trusted domains New yes
winbind trusted domains only Removed
@@ -150,6 +153,22 @@ reversed to match the parameter ordering of the UNIX extensions
'symlink' command. The usage message for this command has also
been improved to remove confusion.
+Winbind changes
+---------------
+
+The dependency to global list of trusted domains within
+the winbindd processes has been reduced a lot.
+
+The construction of that global list is not reliable and often
+incomplete in complex trust setups. In most situations the list is not needed
+any more for winbindd to operate correctly. E.g. for plain file serving via SMB
+using a simple idmap setup with autorid, tdb or ad. However some more complex
+setups require the list, e.g. if you specify idmap backends for specific
+domains. Some pam_winbind setups may also require the global list.
+
+If you have a setup that doesn't require the global list, you should set
+"winbind scan trusted domains = no".
+
REMOVED FEATURES
================