2.38. samba3x

In a large Active Directory environment with multiple trusted domains, attempting to list the users on all domains by running the wbinfo -u command can fail with the following message:

Error looking up domain users

To work around this problem, use the wbinfo --domain='*' -u command to list the users on all domains.

The updated samba3x packages change the way ID mapping is configured. Users are advised to modify their existing Samba configuration files. Also, due to the ID mapping changes, authconfig does not create a working smb.conf file for the latest samba3x package, it only produces a valid configuration for the samba package.

Note that several tdb files have been updated and the printing support has been rewritten to use the actual registry implementation. This means that all tdb files are upgraded as soon as you start the new version of smbd. You cannot downgrade to an older samba3x version unless you have backups of the tdb files.

For more information about these changes, refer to the Release Notes for Samba 3.6.0.

In Samba 3.0, the privilege SeSecurityPrivilege was granted to a user by default. To make Samba more secure, this privilege is no longer granted to a user by default. If you use an application that requires this privilege, like the IBM Tivoli Storage Manager, you need to grant it to the user running the Storage Manager with the following command:

net sam rights grant <username> SeSecurityPrivilege

See net sam rights list for a list of available privileges.