Major changes are:
- fix adduser / addshare prompting on musl libc
- fix use of
veto files
as global share parameter - lookup primary group and don't recurse in ksmbd.conf @group handling
- fix a leak and an intermittent auth failure in Kerberos 5
- add global parameter
kerberos support
Note to existing users: You must now add kerberos support = yes
to
your global section if you rely on Kerberos 5 authentication.
Note to packagers: You can now build with --enable-krb5 as
ksmbd.mountd no longer requires a functioning Kerberos 5 configuration
at startup by default.
- fix intermittent
ksmbd.control --list
failure - fix potential UAFs on mountd shutdown
- use supplementary groups on filesystem access
Note: Use of supplementary groups requires a newer kernel module.
- document long-standing duplicate key-value quirk
- log ignored key-values
- have only one of
read only
,writeable
, etc. take effect on share
Note: Parameters continue to take effect in non-descript order. E.g.
if both writeable = yes
and read only = yes
are about to take
effect on a share, you will now find that writeable
is ignored as
documented in ksmbd.conf(5). Previously, the effect was undefined.
- allow ASCII tab in user names and share names
- invalidate share / server if certain parameters fail to take effect
- increase minimum GLib version to 2.58
- fix man page formatting issues