Samba 4 with Active Directory gets a stable release

SAMBA Logo

Samba 4 has been a long time coming, and now the world has a stable, free and full featured alternative to a Microsoft Server Active Directory Domain Controller on Linux/Unix based systems.  Head over to http://Samba.org and download Samba 4 now!

Samba Press Release:

The Samba Team is proud to announce the release of Samba 4.0, a major new release of the award-winning Free Software file, print and authentication server suite for Microsoft Windows® clients.

The First Free Software Active Directory Compatible Server

As the culmination of ten years’ work, the Samba Team has created the first compatible Free Software implementation of Microsoft’s Active Directory protocols. Familiar to all network administrators, the Active Directory protocols are the heart of modern directory service implementations.

Samba 4.0 comprises an LDAP directory server, Heimdal Kerberos authentication server, a secure Dynamic DNS server, and implementations of all necessary remote procedure calls for Active Directory. Samba 4.0 provides everything needed to serve as an Active Directory Compatible Domain Controller for all versions of Microsoft Windows clients currently supported by Microsoft, including the recently released Windows 8.

The Samba 4.0 Active Directory Compatible Server provides support for features such as Group Policy, Roaming Profiles, Windows Administration tools and integrates with Microsoft Exchange and Free Software compatible services such as OpenChange.

The Samba 4.0 Active Directory Compatible Server can also be joined to an existing Microsoft Active Directory domain, and Microsoft Active Directory Domain Controllers can be joined to a Samba 4.0 Active Directory Compatible Server, showing true peer-to-peer interoperability of the Microsoft and Samba implementations of the Active Directory protocols.

Acknowledging the value of the interoperability of the Samba 4.0 Active Directory Compatible Server, Steve van Maanen, the co-founder of Starsphere LLC, an IT services company in Tokyo, said:

“Thanks to Samba 4, I have two fully replicating Active Directory Domain controllers that boot in under 10 seconds ! It is nice to have alternatives, and Samba 4 is a great one.”

Upgrade scripts are also provided for organizations using the previous Microsoft Windows NT Domain Controller functionality in Samba 3.x, to allow them to migrate smoothly to Samba 4.0.

Suitable for low-power and embedded applications, yet scaling to large clusters, Samba 4.0 is efficient and flexible. Its Python programming interface and administration toolkit help in enterprise deployments.

Created Using Microsoft Documentation

The Samba 4.0 Active Directory Compatible Server was created with help from the official protocol documentation published by Microsoft Corporation and the Samba Team would like acknowledge the documentation help and interoperability testing by Microsoft engineers that made our implementation interoperable.

“Active Directory is a mainstay of enterprise IT environments, and Microsoft is committed to support for interoperability across platforms,” said Thomas Pfenning, director of development, Windows Server. “We are pleased that the documentation and interoperability labs that Microsoft has provided have been key in the development of the Samba 4.0 Active Directory functionality.”

Introducing SMB2.1 File Serving Support

Samba 4.0 includes the first Free Software implementation of Microsoft’s SMB2.1 file serving protocol. Building on the success of the SMB2.0 server in Samba 3.6, the Samba 4.0 file server component is an evolution of the trusted Samba file serving code that is used worldwide by vendors of file servers, such as IBM’s clustered Scale Out Network Attached Storage (SONAS), and many other commercial products.

In addition, the Samba 4.0 file server contains an initial implementation of SMB3, which will be further developed in later Samba 4 releases into a fully-featured SMB3 clustered file server implementation.

Future developments of our SMB3 server and client suite, in combination with our expanding number of SMB3 tests, will keep driving the performance improvements and improved compatibility with Microsoft Windows that Samba users have come to expect from our software.

Integrated Clustered File Server Support

Building on our success as the first commercial implementation of a clustered SMB/CIFS server, Samba 4.0 provides industry-leading scalability and performance as a clustered SMB2/SMB/CIFS file server, using our “clustered tdb” (ctdb) technology – also available as Free Software.

Clustered Samba provides a “Single Server” view of clustered file storage, allowing clients to connect to the least loaded server and still providing a completely coherent view of the underlying clustered file system.

Written and tested to be compatible with most clustered file systems, both Free Software and proprietary, Samba 4.0 with ctdb provides a scalable clustered file server solution with full Windows file sharing semantics.

Samba and ctdb have been shipping in production file serving products for many years, to some of the most demanding customers in the world.

Easy Integration into Existing Directory Services

Samba 4.0 ships with an improved winbind, which allows Samba 4.0 file servers to easily integrate into existing Active Directory services as member servers. Both Microsoft Active Directory and Samba 4.0 Active Directory Compatible servers are supported.

Stability, Security and Performance

Samba 4.0 has been tested using our widely accepted smbtorture test suite, created by the Samba Team to test Samba itself and now used by most of the companies writing SMB3/SMB2/SMB/CIFS file server software to test their own products. We also regularly test interoperability with other major vendors at plug-fest events to make sure Samba 4.0 deployments work correctly with existing customer equipment.

In addition, Samba is one of eleven open source projects that leading software integrity vendor Coverity has certified as “secure” and has reached Coverity “Integrity Rung 2” certification.

The Samba Team provides immediate responses to any security vulnerabilities, and provides fixes to all vendors using the Samba code in coordination with industry standard security reporting agencies.

A Modular Toolbox for OEM Vendor Needs

As Free Software, Samba 4.0 is the ideal choice for Original Equipment Manufacturers (OEMs) to use for their file, print and authentication products. It is easily integrated into a whole host of different tasks, and can be customized at will by the vendor to satisfy their needs.

In addition, Samba 4.0 includes a modular “Virtual File System” (VFS) interface that vendors can use to quickly and efficiently customize Samba to take advantage of any specific features of their underlying technology without having to modify any of the core Samba code. From advanced file systems to network traffic analysis, the Samba VFS layer allows external code to be easily integrated with Samba. Example modules are provided as source code for vendors to customize as they wish.

Samba is the leading choice for Microsoft Windows connectivity

Samba is the leading technology choice for Windows file serving on Linux and UNIX platforms and in embedded Network Attached Storage (NAS) solutions. Samba is used by vendors selling NAS solutions ranging from high end clustered business-critical systems, to low end consumer devices, and everything in between. Samba is fully IPv6 enabled and meets all mandates for modern network interoperability.

Commercial support is available for Samba from many different vendors.

Getting Samba 4.0

Samba 4.0 source code is available now from the Samba Web site.

About Active Directory

Microsoft Windows and Active Directory are trademarks of Microsoft Corporation.

About the Samba Team

The Samba Team is a worldwide group of computer professionals working together via the Internet to produce the highest quality Free Software Windows (SMB3/SMB2/SMB/CIFS) server and client software. We are the undisputed experts in providing interoperability with computers running Microsoft Windows. Members of the Samba Team work for many of the largest companies in the software Industry and even helped Microsoft produce the protocol documentation that fully specifies the SMB/CIFS protocol.

OpenELEC 3.0 Beta 1 released, adding all XBMC 12 features

OpenELEC HTPC Setup

OpenELEC HTPC Setup

The OpenELEC team has been busy. They just released version OpenELEC 2.0 a few weeks ago, and now we get OpenELEC 3.0 beta 1 that includes XBMC in all of it’s glory 12.0 glory.  This includes PVR support,  the modern audio engine that now supports formats like TrueHD and DTS-HD, the Linux kernel 3.6 and support for ARM devices in the form of Raspberry Pi boards.

For those of you that are not familiar with OpenELEC it is, for the most part, an unmodified version of XBMC that runs with only the minimum amount of software needed.  This makes OpenELEC more stable and easier to use.  The setup is even more simplified then the XBMC installer(didn’t think it was needed).  Of course if you would still like the flexibility of Ubuntu or Windows under the hood you can still download the installs over at http://XBMC.org.  Essentially OpenELEC is a XBMC distro of Linux that can auto update itself.

New Features:

  • Based on XBMC 12.0 Frodo
  • ARM Support (Raspberry Pi)
  • Linux 3.6 kernel
  • Improved PRV support
  • Brand New Audio Engine with True HD and DTS-HD support
  • Updated Drivers
  • Boot to RAM option

Manual Update Instructions:

  1. Browse to your OpenELEC boxes SAMBA share  in operating system of your choice.   (if you don’t know what the IP address is, go to the menu of the OpenELEC machine, and browse to the main item “System” and then its subitem “System Info”. This will open a page that shows the IP address among with other information.)
  2. Once you have found the SAMBA share navigate to the “Update” folder.  This is where you will copy the files in step 5
  3. Download the latest version of OpenELEC for your device.  Available for download here: http://openelec.tv/get-openelec
  4. Extract all files from the downloaded file.
  5. Navigate to the “Target” Folder which will be found in the location you extracted the downloaded file.
  6. Copy the files from the “Target” folder to the “Update” folder found on the SAMBA share. The files are KERNEL, KERNEL.md5, SYSTEM and SYSTEM.md5.
  7. Restart OpenELEC and the update will be installed automatically.
  8. When the reboot has finished navigate to the “System > Settings > System > Audio output” menu.  Make sure that the output settings properly reflect your receivers capabilities. (ie: Does your receiver support TrueHD?)

Source: http://openelec.tv/

Samba 4 RC5 has been released

SAMBA Logo

SAMBA Logo

The free alternative to Windows Server Active Directory/Domain Controller, Samba4, has been in the making for years and continues to inch closer to a stable release.  The feature set is now frozen and the development team is busy squashing major bugs before labeling Samba4 stable for production use.

Our experience with Samba4 as a small office domain controller has been a stable, bug free experience.  The installation on our Ubuntu server was fairly painless when following the HOW-TO located on the official Samba website.  The DC has yet to crash or cause any problems with the PC’s on our diverse network.

Samba4 packs everything you expect from a Windows Domain Controller into a free open source package.  Samba4 is in a unique position to shake up the Domain Controller market by making a free option to pricey Microsoft options.  I am excited to see Samba4 reach the stable release, so that I can begin implementation outside of our networks.

Samba4 Features

  • Samba 4.0 supports the server-side of the Active Directory logon environment used by Windows 2000 and later, so we can do full domain join and domain logon operations with these clients.
  • Our Domain Controller (DC) implementation includes our own built-in LDAP server and Kerberos Key Distribution Center (KDC) as well as the Samba3-like logon services provided over CIFS. We correctly generate the infamous Kerberos PAC, and include it with the Kerberos tickets we issue.
  • Samba 4.0.0rc5 ships with two distinct file servers. We now use the file server from the Samba 3.x series ‘smbd’ for all file serving by default.
  • Samba 4.0 also ships with the ‘NTVFS’ file server. This file server is what was used in all previous releases of Samba 4.0, and is tuned to match the requirements of an AD domain controller. We continue to support this, not only to provide continuity to installations that have deployed it as part of an AD DC, but also as a running example of the NT-FSA architecture we expect to move smbd to in the longer term.
  • For pure file server work, the binaries users would expect from that series (nmbd, winbindd, smbpasswd) continue to be available. When running an AD DC, you only need to run ‘samba’ (not nmbd/smbd/winbind), as the required services are co-coordinated by this master binary.
  • As DNS is an integral part of Active Directory, we also provide two DNS solutions, a simple internal DNS server for ‘out of the box’ configurations and a more elaborate BIND plugin using the BIND DLZ mechanism in versions 9.8 and 9.9. During the provision, you can select which backend to use. With the internal backend, your DNS server is good to go. If you chose the BIND_DLZ backend, a configuration file will be generated for bind to make it use this plugin, as well as a file explaining how to set up bind.
  • To provide accurate timestamps to Windows clients, we integrate with the NTP project to provide secured NTP replies. To use you need to start ntpd and configure it with the ‘restrict … ms-sntp’ and ntpsigndsocket options.
  • Finally, a new scripting interface has been added to Samba 4, allowing Python programs to interface to Samba’s internals, and many tools and internal workings of the DC code is now implemented in python.

Source: https://wiki.samba.org/index.php/Samba4/Releases/4.0.0rc5