Besides including all the latest upstream bugfixes and interoperability improvements the new Samba version contains e.g a GnuTLS based backupkey implementation which integrates Samba better with the systems crypto libraries instead of doing the crypto on its own.
Newer file-server feature might be meeded by the storage team in one of their upcoming products.
winbindd does not list group memberships for display purposes (e.g. getent group ) anymore by default in Samba 4.2.0 and newer.
The new default is "winbind expand groups = 0" now, the reason for this is the same as for "winbind enum users = no" and "winbind enum groups = no". Providing this information is not always reliably possible, e.g. if there are trusted domains.
The -u and -p options for user and password were replaced by the -U option that
accepts username[%password] as in many other tools of the Samba suite.
Similary, smbgetrc files do not accept username and password options any more,
only a single "user" option which also accepts user%password combinations.
The -P option was removed.
WINS nsswitch module
The WINS nsswitch module has been rewritten to address memory issues and to
simplify the code. The module now uses libwbclient to do WINS queries. This
means that winbind needs to be running in order to resolve WINS names using
the nss_wins module. This does not affect smbd.
For the record, the current plan is to rebase to Samba 4.4.4 (released today):
To be able to print with CUPS using Kerberos credentials you need to install the samba-krb5-printing package and configure CUPS appropriately.
As with every Samba release, upgrades of tdb files are supported but not downgrades. Customers need to backup tdb files. Check earlier releases for the text.
Several public headers are not installed any longer. They are made for internal
use only. More public headers will very likely be removed in future releases.
Also public CTDB header files are no longer installed, since Samba and CTDB are built from within the same source tree.
We know about some regressions but they will be documented.
VERFIED as part of qa process.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.