ThelatestcodechangesandimprovementstoSamba3.0.25weren''toverlydramatic,saidtheproject''sreleasemanager,butthesubtlechangesdopushthingsalongtowardascheduledproductionreleaseinearlyApril.
ThechangesalsopushSamba3alongitspathtowardmakingLinuxmachinesbehaveabitmorelikeWindows,saidSambareleasemanagerJerryCarter.
Offlinelogonsupport
Firstandforemost,offlinelogonsupportthatwasoriginallyinstalledintothe3.0.23sourcecodeisbeingrevampedthankstoamonthoftestingsincethelastpreviewrelease.TheSambateam,agroupofmorethan20coredevelopersworldwide,routinelysubmitspreviewreleasestotheSambamailinglistfortestingbytheoverallSambacommunity.
TheresultofthecurrentroundoftestingpromptedtheSambateamtomakeLinuxmachinessupportdisconnectedlogonsjustlikeinWindows,Cartersaid."So,forexample,youcanjoinaLinuxhosttoaWindowsdomain,unplugitandgoontheroadandstillbeabletologonusingyourdomainuseraccount,"hesaid.
JoiningActiveDirectorydomains
"Wealsohavethecapabilitynowtoregisterthehost''sdomainnamesystem[DNS]recordswhenjoininganActiveDirectory(AD)domainjustlikeWindowsdoes,"Cartersaid.ThiscapabilitycanalsobeintegratedintoDHCPclienthooksonUnixandLinuxserverstoensuretheDNSrecordsareuptodatewhenevertheserverobtainsanewIPaddress.
ThisnewActiveDirectorysitesupportalsoallowswinbindandotherapplicationsintheSambasuitetolocatetheclosestdomaincontrollerbasedonthesitepartitionsconfiguredinAD.Whenanewmachinemovestoanewlocation,youcanbeguaranteedthatitwillfindadomaincontrollerinitsownsiteratherthancontactingoneattheotherendofpotentiallyexpensiveWANlinks.
WinbindisacomponentofSambathataddressestheunifiedlogonproblem.WinbindusesaUniximplementationofMicrosoftremoteprocedurecalls,pluggableauthenticationmodules(PAM)andthenameserviceswitch(NSS)toallowWindowsNTdomainuserstoappearandoperateasUnixusersonaUnixmachine.Gettingstuffto"justwork"betweenLinux,UnixandWindowsboxeshasbeendescribedbytheSambateamandotherdevelopersasaholygrailoftechnologicalachievements--especiallywhenyoubegintotalkaboutaunifiedlogonbetweeneachoftheseoperatingsystems.
WinbindandIDMAP
WhenitlaunchesinApril,theproduction3.0.25releaseofSambawillincludearewrittenIDMAPinterfaceforwinbindthatreplacesthe"idmapbackend"parameter.TheprimarypurposeofthenewIDMAPinterface,Cartersaid,istoallowwinbindtouseActiveDirectorySID/uid/gid(securityID,userIDandgroupID)mappingtablesonaper-domainbasis.Thepreviewreleasetestedthisfunctionalityextensivelytomakeitreadyintimeforlaunch.
Withthatinplace,SambawillbeabletobetterleverageinformationcontainedwithinActiveDirectory."IftheSambahostisjoinedtoanActiveDirectorydomainsupportingUnixschemaattributes--likeRFC2307ortheSFUschema--winbindcouldretrievethatinformationfromADwhilemappingdomainusersandgroupsinatrustedSambadomainusingtheunderlyingNameServiceSwitchinterface,"Carterwroteinanemail.
Thisisimportanttonote,becausemappingSIDstouids/gidsisoneofthemostcriticalpiecestoserverinteroperabilitybetweenUnix/LinuxandWindowshosts.Theadditionalflexibilitygivesanadministratormorecontroloverselectingtherightapplicationforacompany''snetwork.
Finally,thechangestotheSambaVirtualFileSysteminterfacewillallowtheSambaserverdaemon(smbd)tosupportmultipleAccessControlListimplementationswithouthavingtorecompiletheserver.Withthisconfiguration,smbdcanloadprovidersforinterfacingwithNFSv4ACLsandlocalPOSIXACLsatthesametimefordifferentfileshares.
阅读(314) | 评论(0) | 转发(0) |
