This file contains al notable changes to the bertvv.samba Ansible role.
This file adheres to the guidelines of http://keepachangelog.com/. Versioning follows Semantic Versioning. "GH-X" refers to the X'th issue or pull request on the Github project.
- (GH-39) Have include_options use absolute paths (credit: Bengt Giger)
- (GH-41) Change default of "map to guest" to "never"
- (GH-42) Only apply mitigation of vulnerability CVE-2017-7494 to vulnerable Samba versions
- Fix deprecation warnings for Ansible 2.8.x
- Removed with_items loop from package tasks
- (GH-36) Control the Samba log level (credit: Karl Goetz)
- (GH-35) Load arbitrary config files in every section (credit: Karl Goetz)
- (GH-34) Control if shares are browseable or not (credit: Karl Goetz)
- (GH-33) Support for enabling Apple SMB extensions (credit: Karl Goetz)
- (GH-28) Enable a cups server to be used (credit: Thiago Gomes Verissimo)
- (GH-30, GH-31) Improve handling of link to www_documentroot (credit: Karl Goetz)
- Update supported versions of Fedora to 27 and 28. Fedora 25 and 26 are EOL. This role will probably still work (for a while) on these platforms, but we do no effort to test them.
- (GH-29) Don't print passwords out to the log (credit: George Hartzell)
- (GH-21) Add config flag to disable CVE-2017-7494 mitigation (credit: Tiemo Kieft)
- (GH-23) Added username map configuration (credit: Tomohiko Ozawa)
- (GH-24) Add samba_server_max_protocol parameter (credit: Jonathan Underwood)
- (GH-25) Add Fedora 26 and 27 support explicitly in meta (credit: Jonathan Underwood)
- (GH-26) Name the include_vars task (credit: Tobias Wolter)
- (GH-20) Added variable
ansible_realm
, which adds support for Realmd. This variable is only needed when the host is joined to an already existing domain by using realmd, and you want to configure this member server as a Samba file server. (credit: Sven Eeckeman)
- (GH-19) Made WINS support configurable (credit: Ben Tomasik)
- Fix for remote code execution vulnerability CVE-2017-7494: https://access.redhat.com/security/cve/cve-2017-7494
- Fix service names for Ubuntu/Debian
- Start services in a single task
- Fix issue with NetBIOS name resolution not working on Ubuntu and Debian
- Updated list of supported platforms
- Added Fedora 25
- Removed Ubuntu 14.04 (the name of the
samba
service was changed tosmbd
in more recent versions, supporting both would become cumbersome) - Removed older versions of EL. The role should still be working on EL6, but the test environment doesn't work.
- (GH-16) Added global option
guest_account
, share optionswritable
andguest_ok
(credit: morbidick) - (GH-17) Added support for vfs options (credit: Slavek Jurkowski)
- (GH-13) Updated documentation, added
setype:
- (GH-14) Fixed an issue with creating users (credit: Sven Eeckeman)
- (GH-15) Fixed the check for SELinux status (credit: Tomohiko Ozawa)
- (GH-12) Add the ability to set owner to the path (credit: Paul Montero)
- Added tags to all tasks
- (GH-11) Introduced variable
samba_interfaces
(credit: Jonas Heinrich) - (GH-11) Added support for Arch Linux (credit: Jonas Heinrich)
This is a bugfix release.
- (GH-6) Made creation of Samba users idempotent. The task "Create Samba users [...]" will now only indicate it has changed when it actually created a user.
- (GH-9) Fixed forgotten
when: samba_create_varwww_symlinks
(credit: DarkStar1973)
- (GH-7) Support for Debian/Ubuntu (credit: Ian Young) and Fedora.
- Vagrant test environment for all supported platforms
- Moved test code to a separate branch
- (GH-8) Fixed deprecation warnings in Ansible 2.0 (partial credit: Ian Young)
- Use the generic
package:
module introduced in Ansible 2.0.
- The
version:
field inmeta/main.yml
was removed because it is no longer accepted in Ansible 2.0. Unfortunately, this change breaks compatibility withlibrarian-ansible
. For more info on this issue, see ansible/ansible#.
- The directory
samba_shares_root
is now created befor creating the directories of the shares, with sane permissions set. This fixes GH-3. Contributed by @birgitcroux.
- The role variables
create_mask
andcreate_directory_mask
were removed. Samba settingscreate mask
andcreate directory mask
are synonyms forcreate mode
andcreate directory mode
, respectively. The former name is misleading, because it suggests they work like the Linux commandumask
.
- (GH-1) The variable type of
samba_create_varwww_symlinks
is now boolean instead of string - The variable
samba_netbios_name
is no longer required and defaults toansible_hostname
.
Bugfix release with changes that are not backwards compatible
- (GH-1) The variable type of
samba_load_*
is now boolean instead of string, which makes more sense. However, this change is not backwards compatible. - (GH-2) Restart WinBind when changing the configuration
- Updated the base box for the test environment to CentOS 7.1 (bertvv/centos71)
- Cleaned up indentation and spaces in the configuration file template
- The firewall configuration is no longer set by this role. This also removes the dependency on firewalld.
First release
- Installation
- Create directories
- SELinux settings
- Configuration template with a.o. configurable print sharing, home directories, user access control
- Set user passwords