-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Samba-TNG 0.4.99 released
=========================

The Samba-TNG team is pleased to announce the release of
Samba-TNG 0.4.99.  This release is considered beta code.

As with release 0.4, we highly recommend a working iconv library.
Iconv is bundled with some C libraries - notably GNU libc - and shipped
with almost all Linux systems, and some Unix systems.  If your system
does not have an iconv library, or (like Solaris) only has a limited
one, we highly recommend installing the GNU libiconv, which you can
find at http://www.gnu.org/software/libiconv/ .  Samba-TNG will still
compile and run with its own iconv stubs, but this probably will not
handle international character sets well, if at all.

Source and selected binaries can be downloaded from
http://download.samba-tng.org/tng/ .  The source tarball is
http://download.samba-tng.org/tng/samba-tng.0.4.99.tar.gz .  You can
also download the source for this release from CVS; see
http://www.samba-tng.org/cvs.html for details.

Thanks to all who send in feedback and tested patches for this
release.  A summary of changes since version 0.4 follows.

Peter Samuelson,
for the Samba-TNG team


Important changes between 0.4 and 0.4.99 (many of these changes were in
0.4.98 as well, which we did not announce separately):

  * Security: CAN-2004-0686, CAN-2004-0815, CAN-2004-0930

  * smb.conf parameter changes:
    + Killed "coding system" from smb.conf, it was already
      unused in 0.4.
    + "character set" is now useless as well.
    + Finally killed "lock dir"
    + "ldap protocol version = 3" works for normal ldap now.
    + "ldap uniquemember = yes", for using the uniqueMember attribute
      for group memberships in LDAP, is not really new, but it's still
      undocumented and somewhat untested.  Testing appreciated.
    + "unicode = yes" for use of Unicode on the wire, is also not new,
      but it's now completely supported.  Please test it.

  * New utilities:
    + smbsend, to send winpopup messages easily and flexibly
    + convert_fs_charset, to change the character set used in filenames
      on your server

  * Major update of the manpages and HTML docs, still in progress

  * The updated Usermanager for w2k3 works now on w2k3-sp1.

  * Major work on the file server code:
    + NTSTATUS status codes enabled on the wire, by default
    + Unicode support seems fully functional
    + Many new and fixed functions, better error checking
    + Locking and share access ("deny") now much more compliant
      (if you want it fully compliant, add "strict locking = yes" to
       smb.conf)
    + ChangeNotify works

  * rpcclient:
    + new command "devel unjoin" to let a workstation leave
      its domain
    + Fixed abortshutdown for xp/w2k3

  * Portability:
    + Better support for freebsd
    + More lsb-compliant init.d script
    + Steady progress on support for Windows / ReactOS

  * Lots of small cleanups and fixes

  * Updated tdb to debian's current version (1.0.6-13).
    Your system libtdb will be used in place of the in-tree copy, if
    development files are available.

  * Removed support for loadable vfs modules.  This support has been
    broken for quite awhile and nobody noticed, so apparently nobody
    uses it.

  * Known issues:
    + Storing profiles on tng-as-fileserver still needs
      docs/windows-registry-patches/WinXP_RoamingProfiles.reg
      applied on most clients
      The cause for this are the bad ACL support in TNG. We've
      targetted this for post 0.5.
    + samba3's schannel isn't compatible with ours, so you
      need to disable theirs.  (Help debugging this would be
      appreciated.)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDJot+Xk7sIRPQRh0RAsObAKCaneFHUT6dP6LPhTV4qtO+p4j+VACg2ZSw
xcmTvi//ZqrPJC1jqZkz+IA=
=7yDd
-----END PGP SIGNATURE-----