FileZerver release V04.10.00 is now available for download for
firmware update of Cyclone 2+ boards using the admin "Firmware
Update" web page, ZerverView, or FTP, in file fzi0410.bin.


Major Changes for V04.10.00 --

To handle Windows/CIFS/SMB protocol, a newer version of program
Samba, version 3.0.4, has been used, with numerous improvements
in function, error handling, character sets, and performance.

The maximum number of user names that can be known is now 2040,
increased from 1000.  The maximum number of group names that
can be known is now 250, increased from 125.  These numbers are
not a Linux limitation, but a limit imposed by the admin web
page interface, the representation of share security for users
and groups, and the limits of available flash memory space.

For using "Active Directory" features with Windows/CIFS/SMB
protocol, some number of user-id and group-id values must be
available for allocation by the Samba code.  The number of
user-id values that had been available with V04.00 code was
256 (of 1000), and the number of group-id was 64 (of 125),
which was enough for testing within fairly small environments.
With the V04.10 release, the number of user-id values available
for Samba allocation is now 1784 (of 2040), and the number of
group-id is now 186 (of 250).  The other user-id and group-id
values remain available as FileZerver-created users and groups,
and for allocation by NetWare integration.

An additional change related to the handling of user names
within an "Active Directory" environment -- With the V04.00
code, as soon as a Windows-Domain was identified, all user
names and group names from that Domain could be listed on
the FileZerver admin web pages, and if there were trust
relationships between that Domain and others, the user names
and group names from those other Windows-Domains would be
listed also.

With the V04.10 release, the full set of Windows-Domain user
names are generally not listed.  Similar to user migration with
the previously-available (and still available) password-server
method, a Windows-Domain user name is listed on the admin
web pages only after a login (or login attempt).  Only after
that transition is a FileZerver user-id value assigned, and
the username can be used with share security.  A delete of
that user name removes the name (and user-id association)
from FileZerver flash memory, not from the Windows-Domain.

Unlike the user names which migrate only as needed, in V04.10
all of the Active Directory group names appear immediately,
so that share security can be set using group defintions even
before any of the user names have been migrated.  The set of
group-id numbers (186 in the default configuration) can be
rapidly used up, since each Windows-Domain may come with a
dozen groups already defined (Domain Users, Administrators,
Cert Publishers, Schema Admins, etc) but should support 10 to
15 Windows-Domains.

The password-server method available in earlier
releases, in which a single password-server is identified
(rather than a Windows-Domain which can have Primary- and
Backup-Domain-Controllers) and a user is migrated as "username"
(rather than "DOMAINNAME\username"), has been extensively
tested, is still available, and is the default configuration
if a FileZerver is upgraded from a Cyclone-2 (4MB flash)
release, such as V03.26, to a Cyclone-2+ (8MB flash) release.
Testing has also been done with usernames which are established
on the FileZerver itself, without any domain integration.



June 2, 2004