Samba 4.25.0 has been released as the first stable version of the 4.25 series, introducing key features like experimental SMB3 persistent handles, support for exporting Ceph object storage as SMB shares, and a cluster functional level for safer rolling upgrades. The persistent handles allow clients to maintain open file handles after server restarts, which is crucial for virtual machine storage and clustered databases, although it comes with performance trade-offs and interoperability limitations. Additionally, AES encryption has been set as the default for domain authentication to enhance security, addressing various vulnerabilities tied to earlier versions. This release marks a significant step for Samba as it aims to extend its functionality further into enterprise-level solutions while still being mindful of its traditional role in providing Windows-compatible file services on non-Windows hardware

Samba 4.25.0 Released: Persistent Handles, Ceph SMB Export, and Cluster HA

Samba 4.25.0 shipped as the first stable release of the new 4.25 series, opening the feature track for new deployments. The headline addition is experimental SMB3 persistent handles, which let clients keep open file handles valid after a server restart or outage to support transparent failover for VM storage and clustered databases. The release also adds a cluster functional level for safe rolling upgrades, cluster-wide rate limiting via a new ratelimitd daemon, and a Ceph RGW module that exports object storage buckets as SMB shares. Finally, AES encryption becomes the default for domain authentication under CVE-2026-20833, though the persistent handles remain experimental, carrying real performance costs and POSIX/NFS interoperability trade-offs.

Samba 4.25.0 Released: Persistent Handles, Ceph SMB Export, and Cluster HA @ Linux Compatible