English Korean
File Servers and Domain Controllers 파일 서버와 도메인 제어기
Samba 4.9 삼바 4.9
Samba suite has been upgraded to 4.9 series. The upgrade brings a number of changes that might affect default configuration or existing deployments. 삼바군은 4.9 번대로 향상되었습니다. 향상은 기존 구성 또는 존재하는 배포판에 영향을 미칠 수 있는 변경 번호를 가져옵니다.
A detailed set of release notes for Samba 4.9 is available at https://www.samba.org/samba/history/samba-4.9.0.html 삼바 4.9의 출시 기록의 상세한 묶음은 https://www.samba.org/samba/history/samba-4.9.0.html에서 사용 할 수 있습니다
Extended attributes support 확장된 속성 지원
Since Linux systems have support for extended attributes enabled by default, parameters "map readonly", "store dos attributes" and "ea support" have had their defaults changed to allow better Windows fileserver compatibility in a default install.
smb.conf parameters changes smb.conf 매개변수 변경
|Parameter Name|Description|Default

|map readonly
|Default changed
|no

|store dos attributes
|Default changed
|yes

|ea support
|Default changed
|yes

|full_audit:success
|Default changed
|none

|full_audit:failure
|Default changed
|none
|Parameter Name|Description|Default

|map readonly
|Default changed
|no

|store dos attributes
|Default changed
|yes

|ea support
|Default changed
|yes

|full_audit:success
|Default changed
|none

|full_audit:failure
|Default changed
|none
Identity mapping changes 맵핑 변경을 식별합니다
Over several releases, Samba configuration checks were improved to detect typical identity mapping errors earlier and fail start up before the changes might affect actual operation. With changes in identities causing access control breaches and possibility of a data leakage to unwanted parties, this effort is helping to reduce a number of incorrect but widely deployed cases.
Since Samba 4.6, the 'testparm' tool can be used to validate the ID mapping configuration. After an upgrade please run it and check if it prints any warnings or errors. Please see the 'IDENTITY MAPPING CONSIDERATIONS' section in the smb.conf manpage for suggestions and recommendations. There are some ID mapping backends which are not allowed to be used for the default backend. Winbind daemon will no longer start if an invalid backend is configured as the default backend.
Since Samba 4.8, configurations with "`security = domain`" or "`security = ads`" require a running '`winbindd`' now. The fallback that smbd directly contacts domain controllers is gone.
Finally, Samba 4.9 differentiates between anonymous and guest access via SMB protocol. A side effect of this is that it is now required to have a mapping for `BUILTIN\Guests` group. The mapping can be provided automatically if a default identity backend allows to create entries on demand. Alternatively, `net` utility can be used to provide a group mapping for `BUILTIN\Guests` via
net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin
net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin
CTDB configuration changes CTDB 구성 변경
Clustered Samba daemon (`CTDB`) configuration has been completely overhauled. 클러스터된 삼바 데몬(`CTDB`) 구성은 완전하게 새롭게 변신하였습니다.
Daemon and tool options are now specified in a new ctdb.conf Samba-style configuration file. See `ctdb.conf(5)` for details. 데몬과 도구 선택은 이제 신규 ctdb.conf 삼바-유형의 구성 파일에서 지정되었습니다. 상세히 하기 위해 `ctdb.conf(5)`를 참고하세요.
Event script configuration is no longer specified in the top-level configuration file. It can now be specified per event script. For example, configuration options for the `50.samba` event script can be placed alongside the event script in a file called `50.samba.options`. Script options can also be specified in a new script.options file. See `ctdb-script.options(5)` for details.
Options that affect CTDB startup should be configured in the distribution-specific configuration file. See `ctdb.sysconfig(5)` for details.
Tunable settings are now loaded from `ctdb.tunables`. Using `CTDB_SET_TunableVariable=<value>` in the main configuration file is no longer supported. See `ctdb-tunables(7)` for details.