Distribution EOLE

h1. Ajouter backend-store dans le dico

si pas de valeur ==> ne pas utiliser l'option 'backend-store' au provisioning
si valeur=mdb ==> utiliser l'option 'backend-store=<valeur>' au provisioning

attention: signaler la fonctionnalité expériementalle

<pre>
New experimental LMDB LDB backend
---------------------------------

A new experimental LDB backend using LMDB is now available. This allows
databases larger than 4Gb (Currently the limit is set to 6Gb, but this will be
increased in a future release). To enable lmdb, provision or join a domain using
the "--backend-store=mdb" option.
</pre>

h1. Amélioration backup

<pre>
Domain backup and restore
-------------------------

The new 'samba-tool domain backup online' command takes a snapshot of the
domain DB from a given DC. ...
</pre>

h1. Modification de la commande "samba-tool drs showrepl"

Vérifier diagnose

<pre>
New samba-tool options for diagnosing DRS replication issues
------------------------------------------------------------

The 'samba-tool drs showrepl' command has two new options controlling
the output. With --summary, the command says very little when DRS
replication is working well. ...
</pre>

h1. Enlever (conditionner) 'store dos attribute=yes' car la valeur est par défaut en 4.9

<pre>
smb.conf changes
================

As the most popular Samba install platforms (Linux and FreeBSD) both
support extended attributes by default, the parameters "map readonly",
"store dos attributes" and "ea support" have had their defaults changed
to allow better Windows fileserver compatibility in a default install.

Parameter Name Description Default
-------------- ----------- -------
map readonly Default changed no
store dos attributes Default changed yes
ea support Default changed yes
full_audit:success Default changed none
full_audit:failure Default changed none
</pre>

h1. Nouveauté: Etudier "offline join"

<pre>
Improved 'samba-tool computer' command
--------------------------------------
The 'samba-tool computer' command allow manipulation of computer
accounts including creating a new computer and resetting the password.
This allows an 'offline join' of a member server or workstation to the
Samba AD domain.
</pre>

h1. Nouveauté: Etudier "samba-tool ou"

La commande permet de créer des "ou" et d'y déplacer des groups/users

h1. Amélioration GPO

la commande samba_gpoupdate est renommée

<pre>
The 'samba_gpoupdate' command (used in applying Group Policies to the
Samba machine itself) has been renamed to "samba_gpupdate" and had the
syntax changed to better match the same tool on Windows.
</pre>

h1. Changelog samba 4.8 ==> réindex LDB

Les fichiers LDB seront réindexés après l'upgrade Samba. Un temps de démarrage doit être toléré.

h1. Changelog samba 4.8 ==> les membres ont besoin de 'winbindd'

<pre>
Domain member setups require winbindd
-------------------------------------
Setups with "security = domain" or "security = ads" require a
running 'winbindd' now. The fallback that smbd directly contacts
domain controllers is gone.
</pre>

h1. Changelog samba 4.8 ==> Etudier "apply group policies = yes"

h1. Changelog samba 4.8 ==> Etudier "mdns name = mdns"

h1. Changelog samba 4.8 ==> Etudier "--plaintext-secrets"

et ses conséquences sur les mots de passe

h1. Changelog samba 4.8 ==> Etudier "VirusFilter VFS"

h1. Changelog samba 4.8 ==> modification smb.conf

<pre>
smb.conf changes
================
Parameter Name Description Default
-------------- ----------- -------
apply group policies New no
auth methods Removed
binddns dir New
client schannel Default changed/ yes
Deprecated
gpo update command New
ldap ssl ads Deprecated
map untrusted to domain Removed
oplock contention limit Removed
prefork children New 1
mdns name New netbios
fruit:time machine New false
profile acls Removed
use spnego Removed
server schannel Default changed/ yes
Deprecated
unicode Deprecated
winbind scan trusted domains New yes
winbind trusted domains only Removed
</pre>