VSI-AXPVMS-SAMBA-V0406-5E-1-RELNOTES.PDF

This document provides release notes for Samba for OpenVMS version 4.6-5E, a significant update based on Samba 4.6.5, released in March 2020. This new version replaces the previous "CIFS for OpenVMS" and offers numerous enhancements and bug fixes.

Key New Features & Enhancements:

• Support for AES encryption, SMB2 and SMB3 protocols, and Heimdal Kerberos.
• WINBIND functionality is now a separate process, simplifying name resolution.
• Improved OpenVMS cluster support (multiple instances, shared SAMBA$ROOT), Unicode character handling in filenames, and enhanced error reporting.
• Ability to specify Kerberos client encryption types and changes to smb.conf parameters.

System Requirements:

• OpenVMS Version 8.4-1H1 or higher.
• VSI, HPE, TCPware, or MultiNet TCP/IP stack.
• Must be installed and used on an ODS-5 enabled file system (not ODS-2).
• OpenVMS internationalization data kit (VMSI18N) for international characters in filenames.
• Requires adjustment of SYSGEN parameters PROCSECTCNT and CHANNELCNT before installation.

Installation and Configuration:

• Installed via a compressed OpenVMS PCSI kit.
• SAMBA$ROOT logical name defines the root for configuration and log files.
• Installation on mixed-architecture clusters requires installation on a node of each architecture type with the same destination.
• SAMBA$CONFIG.COM utility is used for post-installation configuration, including migration of existing CIFS for OpenVMS configurations and creating backups.
• For clusters, Core and Generic configuration options are shared, while System Specific options are unique per node.
• WINBIND, now a separate daemon process, provides user and group identity mapping, and can dynamically create OpenVMS accounts and resource identifiers (requiring a specified UIC range).

Known Limitations & Issues:

• Does not support classic Primary Domain Controller (PDC), Backup Domain Controller (BDC), or Active Directory Domain Controller roles.
• Source code is not included in the kit (available on request).
• Not supported for Microsoft Windows XP and Windows 7 clients.
• Specific issues related to inherit owner parameter interactions and Kerberos authentication with SMBCLIENT requiring privilege adjustments.
• TCPware TCP/IP stack requires manual configuration of Samba interface addresses.

Issues Fixed in this Release: Numerous bugs have been addressed, including:

• Inter-process communication timeouts when using bind interfaces only with WINBIND.
• smb2 leases now defaults to "no" to prevent issues with empty files.
• Resolution of various issues with international characters in filenames.
• SMBD crashes when processing complex ACLs.
• net rpc user add command failures and NT STATUS ACCESS DENIED errors for directory write access.
• Incorrect file allocation sizes and issues related to TCPware integration.
• Problems with SMBCLIENT ! command, CTRL+Z behavior in utilities, and SMBSTATUS display limitations.
• WINBIND auto-start behavior, configuration failures after cluster alias changes, and ACCVIO crashes related to memory management.
• Print file carriage control character stripping during file transfers.

The document recommends consulting https://www.samba.org/samba/docs/ for further documentation.