samba announce - Oct 2020 - [Announce] Samba 4.12.8 Available for Download

Release Announcements
---------------------

This is the latest stable release of the Samba 4.12 release series.


Changes since 4.12.7
--------------------

o  G?nther Deschner <gd at samba.org>
   * BUG 14318: docs: Add missing winexe manpage.

o  Volker Lendecke <vl at samba.org>
   * BUG 14465: idmap_ad does not deal properly with a RFC4511 section 4.4.1
     response.

o  Laurent Menase <laurent.menase at hpe.com>
   * BUG 14388: winbind: Fix a memleak.

o  Stefan Metzmacher <metze at samba.org>
   * BUG 14465: idmap_ad does not deal properly with a RFC4511 section 4.4.1
     response.
   * BUG 14482: Compilation of heimdal tree fails if libbsd is not installed.

o  Christof Schmitt <cs at samba.org>
   * BUG 14166: util: Allow symlinks in directory_create_or_exist.

o  Andreas Schneider <asn at samba.org>
   * BUG 14399: waf: Only use gnutls_aead_cipher_encryptv2() for GnuTLS >
     3.6.14.
   * BUG 14467: s3:smbd: Fix %U substitutions if it contains a domain name.

o  Martin Schwenke <martin at meltin.net>
   * BUG 14466: ctdb disable/enable can fail due to race condition.


#######################################
Reporting bugs & Development Discussion
#######################################

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the Samba 4.1 and newer product in the project's Bugzilla
database (https://bugzilla.samba.org/).


======================================================================= Our
Code, Our Bugs, Our Responsibility.
== The Samba Team
=====================================================================


===============Download Details
===============
The uncompressed tarballs and patch files have been signed
using GnuPG (ID 6F33915B6568B7EA).  The source code can be downloaded
from:

        https://download.samba.org/pub/samba/stable/

The release notes are available online at:

        https://www.samba.org/samba/history/samba-4.12.8.html

Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)

                        --Enjoy
                        The Samba Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL:
<http://lists.samba.org/pipermail/samba-announce/attachments/20201007/7db25ae2/signature.sig>

> o  Laurent Menase <laurent.menase at hpe.com>
>   * BUG 14388: winbind: Fix a memleak.
This is nice. I had hoped this also would fix the slow/always failing
enumeration triggered by ?wbinfo -u? but still no go :-)

Our AD has 146331 users. Attempting a ?wbinfo -u? will cause winbindd to use
100% CPU for about 7 minutes before calming down again.
?wbinfo -u? gives up after about a minute and returns an error ?Error looking up
domain users? but that doesn?t cause winbindd to stop doing whatever it?s doing
:-)

(This is on a fast machine with lots of RAM and CPU and 10G ethernet
interfaces?)

But atleast winbindd doesn?t grow forever now, it reaches around 300MB and then
backs down to 140MB again. FreeBSD 11.3.

Doing a truss (strace equiv) when it?s 100% busy it seems to be doing:

...
fcntl(16,F_SETLK, ?.) = 0 
fcntl(16, F_SETLKW, ?.) = 0
? (repeat) ?

Possibly on the gencache.tdb file (sometimes it?s that file that has fd 16
atleast - lsof)

Anyway, I?ll just keep on staying away from doing ?wbinfo -u? so no big issue
for me :-)

- Peter

On 08/10/2020 13:57, Peter Eriksson via samba wrote:
>> o  Laurent Menase <laurent.menase at hpe.com>
>>    * BUG 14388: winbind: Fix a memleak.
> This is nice. I had hoped this also would fix the slow/always failing
enumeration triggered by ?wbinfo -u? but still no go :-)
>
> Our AD has 146331 users. Attempting a ?wbinfo -u? will cause winbindd to
use 100% CPU for about 7 minutes before calming down again.
> ?wbinfo -u? gives up after about a minute and returns an error ?Error
looking up domain users? but that doesn?t cause winbindd to stop doing whatever
it?s doing :-)
>
> (This is on a fast machine with lots of RAM and CPU and 10G ethernet
interfaces?)
>
> But atleast winbindd doesn?t grow forever now, it reaches around 300MB and
then backs down to 140MB again. FreeBSD 11.3.
>
> Doing a truss (strace equiv) when it?s 100% busy it seems to be doing:
>
> ...
> fcntl(16,F_SETLK, ?.) = 0
> fcntl(16, F_SETLKW, ?.) = 0
> ? (repeat) ?
>
> Possibly on the gencache.tdb file (sometimes it?s that file that has fd 16
atleast - lsof)
>
> Anyway, I?ll just keep on staying away from doing ?wbinfo -u? so no big
issue for me :-)
>
> - Peter
Running 'wbinfo -u' is akin to having 'winbind enum users = yes'
in
smb.conf and running? 'getent passwd'. Perhaps users will now understand
why having the 'winbind enum' lines in smb.conf is a BAD idea, the same 
goes for running 'wbinfo -u'

Rowland