Samba 4 Status Report

Similar documents
Development Using Samba 4

Samba4 Status - April Andrew Tridgell Samba Team

Samba4 Progress - March Andrew Tridgell Samba Team

Gerald Carter Samba Team/HP

Samba4: War Stories. Andrew Bartlett Samba Team / Red Hat

Jelmer Vernooij. April 21, 2008

Samba4 and Directory Services. Andrew Bartlett Samba Team

Simo Sorce Samba Team.

SerNet. Samba Status Update. SNIA SDC 2011 Santa Clara, CA. Volker Lendecke SerNet Samba Team

SDC EMEA 2019 Tel Aviv

The return of the vampires

Badlock. One Year In Security Hell. Stefan Metzmacher Samba Team / SerNet

Samba. OpenLDAP Developer s Day. Volker Lendecke, Günther Deschner Samba Team

The State of Samba (June 2011) Jeremy Allison Samba Team/Google Open Source Programs Office

Beyond the Horizon. What's after Samba 3.0? (Or is the earth really flat?)

The workstation account, netlogon schannel and credentials. SambaXP Volker Lendecke Samba Team / SerNet

Clustered NAS For Everyone Clustering Samba With CTDB A Tutorial At sambaxp 2009

Andrew Bartlett Hawker College

A new DCERPC infrastructure for Samba

A new DCERPC infrastructure for Samba

Clustering Samba With CTDB A Tutorial At sambaxp 2010

Clustering Samba With CTDB A Tutorial At sambaxp 2010

SMB2 and SMB3 in Samba: Durable File Handles and Beyond. sambaxp 2012

Security Services for Samba4. Andrew Bartlett Samba Team

CTDB + Samba: Scalable Network Storage For The Cloud. Storage Networking World Europe 2011

PLAYING NICE WITH OTHERS: Samba HA with Pacemaker

Using samba base libraries SSSD as an example application

Clustered NAS For Everyone Clustering Samba With CTDB. NLUUG Spring Conference 2009 File Systems and Storage

FreeIPA Cross Forest Trusts

Clustered Samba Not just a hack any more

Running And Troubleshooting A Samba/CTDB Cluster. A Tutorial At sambaxp 2011

Packaging Samba for Debian

SerNet. Async Programming in Samba. Linuxkongress Oktober Volker Lendecke SerNet Samba Team. Network Service in a Service Network

Improving DCERPC Security

SMB3 Multi-Channel in Samba

Samba ARMed and Ready

Improving DCERPC Security Hardening

Samba and Ceph. Release the Kraken! David Disseldorp

Windows Authentication With Multiple Domains and Forests

Advances in the Samba Testsuite

Samba in a cross protocol environment

Windows Authentication With Multiple Domains and Forests

Windows Authentication With Multiple Domains and Forests

Replacing Windows Servers with Linux

Implementing the Witness protocol in Samba

CTDB Remix - Dreaming the Fantasy

FUDConBrussels. Fedora Project 24 February Fedora/ RedHat Directory Server. by Jens Kühnel (Germany) Jens Kühnel

Implementing SMB2 in Samba. Opening Windows to a Wider. Jeremy Allison Samba Team/Google Open Source Programs Office

Migration of NT4 to Samba-3

The Samba-3: Overview, Authentication, Integration

Implementing Persistent Handles in Samba. Ralph Böhme, Samba Team, SerNet

HANDLING PERSISTENT PROBLEMS: PERSISTENT HANDLES IN SAMBA. Ira Cooper Tech Lead / Red Hat Storage SMB Team May 20, 2015 SambaXP

The CephFS Gateways Samba and NFS-Ganesha. David Disseldorp Supriti Singh

JetBrains TeamCity Comparison

Clustered Samba Challenges and Directions. SDC 2016 Santa Clara

Linux CIFS client year in review: From Nocturnal Monster Puppies to Funky Weasels

Samba in Business. John H Terpstra

Emulating Windows file serving on POSIX. Jeremy Allison Samba Team

Linux Administration

SDC 2015 Santa Clara

Service layering. Integrating Samba with existing DNS infrastructure. SambaXP 2018 June 6th/7th 2018 Pieter Hollants

HP OpenVMS CIFS File Security and Management

Manually Run Ad Logon Script As Administrator Group Policy

Linux File Systems: Challenges and Futures Ric Wheeler Red Hat

Beyond Technical Fulfillment

The Samba-3 Enchilada: Overview, Authentication, Integration

CIFS Geeks in Exile - or -

Using SSL/TLS with Active Directory / LDAP

WINS Replication. Stefan Metzmacher SerNet Service Network GmbH Samba Team

Advanced Network and System Administration. Accounts and Namespaces

Ldap Error Code 53 - Function Not Implemented Remaining Name

GLOBAL CATALOG SERVICE IMPLEMENTATION IN FREEIPA. Alexander Bokovoy Red Hat Inc. May 4th, 2017

CEPHALOPODS AND SAMBA IRA COOPER SNIA SDC

Using the MyProxy Online Credential Repository

VMware s (Open Source) Way of Container. Dr. Udo Seidel

Next Generation Storage for The Software-Defned World

Gluster roadmap: Recent improvements and upcoming features

Centralized configuration management using registry tdb in a CTDB cluster

Towards full NTFS semantics in Samba. Andrew Tridgell

perdition: Mail Retrieval Proxy

How To Disable Password Complexity In Windows 2008 R2 Domain Controller

TPF Users Group Fall 2008 Title: z/tpf Support for OpenLDAP

Univention Corporate Server. Performance guide

HPE Common Internet File System (CIFS) Server Release Notes Version B for HP-UX 11i v3

Powerful Toys A Toolkit Approach to Windows Interoperability

From an open storage solution to a clustered NAS appliance

Microsoft SQL Server Reporting Services (SSRS)

Comparison.

Distributed Systems. Hajussüsteemid MTAT Distributed File Systems. (slides: adopted from Meelis Roos DS12 course) 1/25

G/On. G/On is available for Windows, MacOS and Linux (selected distributions).

Windows Authentication With Multiple Domains and Forests

BlackBerry Enterprise Server for IBM Lotus Domino Version: 5.0. Administration Guide

MIT KDC integration. Andreas Schneider Günther Deschner May 21th, Red Hat

Univention Corporate Server. Extended Windows integration documentation

Red Hat Directory Server Red Hat Directory Server 9 Updates Available in Red Hat Enterprise Linux 6.4

Linux authentication using the System Security Services Daemon (SSSD) explained

RED HAT GLUSTER STORAGE TECHNICAL PRESENTATION

Identity Management In Red Hat Enterprise Linux. Dave Sirrine Solutions Architect

Open Source Storage. Ric Wheeler Architect & Senior Manager April 30, 2012

Open-Xchange Server Service Pack 1 (SP1)

Transcription:

Status Report Jelmer Vernooij Samba Team / SerNet jelmer@samba.org Andrew Bartlett Samba Team / Red Hat abartlet@samba.org SambaXP April 2007 1

- Where are we now? Originally started in 2003, as an effort to improve the SMB server Later became the effort to get an AD DC working Strong focus on the right infrastructure 12000 commits since april 2004, 4000 in the last year 2

On our way to an alpha Improvements in the last year Protocol knowledge Protocol Coverage Usability Improvements Development Tool Improvements 3

Protocol knowledge We now know the format of all AD attributes previously, we didn't know the internal format of encrypted attributes Knowing this means we know the LDB data format won't change drastically Give administrators confidence to try an alpha 4

Protocol coverage 5

SMB2 server Implementation of Microsoft's new SMB protocol As seen in windows Vista passes most of our SMB2 client testsuite 6

Kerberos PKINIT Basis for smart-card login to Samba4 Heimdal merge Collaboration with Heimdal developers No longer running a drastically custom version of Heimdal 7

DRSUAPI The Windows way of doing LDAP replication Decryption Some attributes are doubly encrypted Replication We now understand and implement AD replication! Allows us to be a peer DC to a Windows DC [see Metze's talk] 8

LDAP Backends run samba4 backend onto OpenLDAP or Fedora DS Start-TLS in LDAP server Better SASL support 9

File change notification Missing part of our file-server implementation new implementation backed by Linux inotify() Ported to Samba 3.0.25 10

Asynchronous IO Based on new Linux Kernel Async IO functionality DCE/RPC This layer is now fully non-blocking/async LDB No longer blocks waiting for LDAP replies. 11

Usability 12

SWAT Browser-based LDB Editor qooxdoo libnet getting more mature 13

GTK+ tools Now a separate project Applications managing for registry, SAM, services, crontab 14

Clustering Samba4 has hosted a big effort to create a clustered Samba. Uses 'ctdb', clustered version of TDB 15

Development Tool Improvements 16

lib/replace provides standard functions/macros/defines not provided by the system Not required on recent POSIX-compatible systems Similar in purpose to libroken or GNUlib 17

PIDL improvements Pidl-generated code now used by Wireshark Use of standard IDL constructions Compatible with Wine, MIDL, jcifs IDL Now also used in Samba 3 tests! 18

Build system all functionality now exported as shared libraries used happily by openchange and (now a separate project) samba-gtk 19

Test improvements 'make testenv' (development environment improvements) lcov test coverage driven testing new perl-based test infrastructure progress indication test environments: can now test domain member code can run individual testsuites 20

Code Coverage Percentage of the code that is run during the testsuite 41.6% now! Main untested code: Heimdal SWAT Winbind Registry 21

22

Static Analysis (checker) Developed by IBM Run regularly on the build farm 23

Build Farm http://build.samba.org/ Now shows test coverage One of the hosts runs against Windows List with most often broken tests 24

Already in use 25

Merged into Samba3-1 TDB transactions LDB File notification using inotify() pidl First interface used in 3.0.25 Some more interfaces ported over for 3.0.26 plans to port over DCE/RPC library 26

Merged into Samba3 2 Talloc improvements Socket Wrapper lib/replace 's test suite is used for Samba 3 testing events - maybe soon? 27

OpenChange Built around Samba4 Uses the DCE/RPC library and pidl Hooks into smbtorture 28

Domain Controller Status Basic DC works Some core functionality still missing Group Policies Schema not enforced yet Access control still limited Browsing 29

Member Server Status Winbind still missing Idmap needs to be ported across Improving winbind is Kai's SoC project 30

Releases TP4 was released in january TP5 due out this week Alpha up next Already in Debians' experimental 31

Development Coordination IRC: #samba-technical on irc.freenode.net Mailing list: samba-technical@samba.org Wiki: http://wiki.samba.org/ 32