The effort to integrate the Samba AD service with OpenLDAP has been going, off and on, for a few years now. While the idea to replace Samba's LDAP server with OpenLDAP is far from dead, the actual implementation plan has evolved, largely because of the progress Samba has made over the years, such as its LMDB back-end. What started as an effort to revive the long defunct OpenLDAP back-end for Samba and use it as a base to gradually port Samba functionality as overlay modules, is being transformed into a different type of integration - execute Samba's LDB module stack inside OpenLDAP, with the possibility to optimize it for better performance. The purpose of this talk is to give some history on the project development so far, explain the new direction, and present the challenges it faces.

Slides (PDF)

For a while now we have been fuzzing many parts of Samba using OSS-Fuzz and private runs. What have we learnt?

Slides (PDF)

Join me for an informative and interactive session as we explore the latest developments in Linux Group Policy. We'll dive into the various policies and how they can help you manage and secure your organization's network infrastructure. Additionally, I'll be highlighting new documentation, which provides step-by-step instructions on setting up Linux Group Policy.

Slides (PDF)

With the past 1-2 releases Samba has matured itself on the new VFS implementation rooted on the handle based approach for accessing the underlying UNIX file systems. Irrespective of the type of file system beneath it Samba successfully tackles the symbolic link race condition to the fullest. GlusterFS being a software defined distributed file system has always tried to keep up with the major changes in Samba to make use of safe and sound mechanisms in providing data access to SMB clients. But what are the challenges involved? How do we comply with pathref changes in Samba to ensure seamless service to end-users? In this talk we closely look at the changes done at the VFS module for GlusterFS as an attempt to adapt itself to the new VFS structure. As we move forward we also highlight the bugs (and improvements) discovered in this process with a note on overall performance impact on such distributed file systems.

Slides (PDF)

SambaXP 2022 was supposed to give a perspective on RHEL 9.0 experience in making Active Directory interoperability possible in FIPS 140-3-compliant environments. The talk was canceled for health reasons. Since that time, we have found a few more stumbling stones on the path to make Samba and FreeIPA interoperate with Active Directory while being compliant with FIPS 140-3. This talk aims to cover our progress in understanding and solving tightened crypto requirements within the authentication and identity management area.

Slides (PDF)

With the increasing amount of network throughput, we'll reach a point where a data copies are too much for a single cpu core to handle.

This talk gives an overview about how the io_uring infrastructure of the Linux kernel could be used in order to avoid copying data, as well as spreading the load between cpu cores. A prototype for this exists for quite some time and shows excellent results.

The talk will explain:

• What the current implementation status is
• How the proposed design looks like
• What challenges we are hitting in bringing it upstream

Slides (PDF)

To implement smb2 unix extensions, smbd needs to implement ntfs reparse points to present symlinks, sockets and other special files to clients. This talk will present an overview of what reparse points are at their core and where Samba stands to implement them. This talk will serve as the basis for discussion about how Samba should go forward to implement smb2 unix extensions.

Slides (PDF)

An overview of the available interoperability resources and programs. This talk will introduce the Open Specifications and highlight all major technology areas of the site – Windows, Office, SharePoint, Exchange, SQL, as well as types of content – Protocols, Standards, File Formats, Data Portability and Languages.

WOPI and FSSHTTP are important protocols in the overall Office protocol landscape. This session will provide an overview of how the WOPI and FSSHTTP protocols function and provide resources that will allow you to learn more. 

For the past several years FreeIPA and SSSD teams have been working on enabling end to end passwordless access in centralized and local environments, be it corporate or home deployment. This talk will go into details of our progress in passwordless access implementation for Linux systems. What can be shared across FreeIPA and Samba AD in this area?
In 2022 FreeIPA project introduced the ability to authenticate users against OAuth2 identity providers (IdPs). This functionality allows to obtain Kerberos credentials after authentication and authorization has been done by the external IdP. As many OAuth2 IdPs allow passwordless authentication with WebAuthn tokens, a true passwordless transition across Linux systems is now available, from login to console, raising privileges within PAM services (e.g. sudo access), to accessing remote systems over SSH. We hope to expand this support with native FIDO2/WebAuthn integration as well.
The work is not complete yet and needs a lot of collaboration across multiple open source projects. Come to the talk to see a demo and discuss how we can improve our passwordless experience together.

Slides (PDF)

Learn about the Office Open XML file format and Azure Cognitive Services by using just a few lines of code and the Open XML SDK with Azure Cognitive Services for Language, to redact personally identifiable information from a Word document and save it to a new file.

Samba will soon have full support for AD claims and conditional ACEs. But what are these good for apart from being able to tout functional level 2012 support? And what do these words actually mean? We'll try to find answers.

Slides (PDF)

Now that Samba server has support for the SMB3.1.1 POSIX Extensions, this presentation will give a demo of some of the features enabled by the SMB3.1.1 POSIX extensions (with examples to multiple servers including Samba and ksmbd) – and how this can help common workloads.    

As Linux continues to evolve, adding syscalls every year – this presentation will also cover some of the places where additional extensions (or emulation) could help.  

After some neglect I have restarted some effort around WSP (windows search protocol) support
There is currently an upstream merge request to add a simple WSP search client for samba.

This talk will recap the previous WSP efforts, additionally it will introduce the client and what you can do with it.

What about the server side ? I'll talk about my plans about that too and also some of the choices and challenges around that.
 

Slides (PDF)

The Linux SMB3.1.1 client continues to be one of the most active filesystems in Linux, with many improvements added each year, enhancing its ability to securely, reliably and efficiently access remote data. This presentation will cover new features added to the Linux client, and new features you can expect to see over the coming year.