VSI-I64VMS-SAMBA-V0406-5B-1.PDF

This document announces VMS Software Inc.'s (VSI) new release of Samba for OpenVMS, version 4.6-5B, based on Samba 4.6.5. This version is a significant update from previous "CIFS for OpenVMS" releases, bringing numerous new features and enhancements.

Key Features and Enhancements:

• Support for AES encryption, SMB2 and SMB3 protocols.
• Use of Heimdal Kerberos.
• WINBIND functionality is now a separate daemon process, offering enhanced name resolution and simplified lookups.
• New tools, utilities, and smb.conf parameters.

System Requirements:

• OpenVMS Version 8.4-1H1 or higher.
• VSI TCP/IP, HPE TCP/IP Services for OpenVMS, or MultiNet TCP/IP stack.
• Must be installed and used on an ODS-5-enabled file system.

Installation and Migration: The release is installed via a compressed OpenVMS PCSI kit. A key feature is the migration utility (SAMBA$CONFIG.COM) which converts existing CIFS for OpenVMS configurations, users, and groups to the new Samba format, backing up old configuration files.

Cluster Considerations:

• Running previous CIFS for OpenVMS and this Samba release simultaneously in the same cluster is not supported.
• Samba can run simultaneously on multiple cluster members only if each member has a separate SAMBA$ROOT directory tree. Otherwise, only manual failover is supported.

WINBIND Support: WINBIND, now a separate daemon process, provides user and group identity mapping. For member servers, it enables referencing domain user/group accounts and dynamically creating OpenVMS user accounts and resource identifiers. Configuration options for WINBIND are detailed, including setting UIC number ranges.

Known Limitations in this Release:

• Minimal OpenVMS cluster support (full support is planned).
• Classic Primary Domain Controller (PDC) and Backup Domain Controller (BDC) roles are not supported.
• Active Directory Domain Controller role is not supported (under consideration).
• Source code is not included but available upon request.
• No support for OpenVMS Alpha (planned for a future release).

Known Issues: The document lists several known issues, including potential NetBIOS configuration duplication on cluster members, incorrect file allocation size reporting, "access denied" errors in specific WINBIND scenarios, and instructions for Kerberos authentication with SMBCLIENT. A workaround for incorrect object ownership (inherit owner = yes) is provided.

Fixed Issues: This release corrects a locking issue that prevented simultaneous Samba operation on multiple cluster members using separate SAMBA$ROOT directory trees.

Product Roadmap: VSI plans regular releases and updates to ensure support for the latest OpenVMS versions (including x86 when available), enhanced quality, security improvements, and parity with open-source Samba.