Samba 4.24.0rc3 has been released, introducing various enhancements for Active Directory (AD) administrators that streamline operations and improve policy enforcement. Key features include the implementation of policy hints during password resets, extended PKINIT handling for Windows Hello logons, and a new rate-limiting VFS module to manage high traffic on Samba shares. The update also modifies Kerberos behavior by including PACs in responses by default and tightening certificate binding enforcement to bolster security. Although still a release candidate, Samba 4.24.0rc3 offers significant potential improvements for managing AD and modern authentication flows, with a straightforward upgrade process for users
Samba 4.24.0rc3: New Features and Security Enhancements for Active Directory Administrators
Samba 4.24.0rc3 has arrived, offering several improvements that simplify life for AD administrators and enhance policy enforcement. Notable features include policy hints during password resets, extended PKINIT handling, and a new rate-limiting VFS module to manage peak traffic. The release also introduces changes to Kerberos behavior, such as including PACs in every response by default, and strengthens certificate binding enforcement.
