Release Notes for Synology Directory Server

Synology Directory Server provides Active Directory (AD) domain service powered by Samba. It supports commonly used Active Directory features such as user accounts, group memberships, domain-joining Windows, Linux and Synology DSM, Kerberos-based authentication, and group policies. This makes it easier to manage computers and devices running Synology DSM, Linux, Windows, and deploy Windows applications.

Version: 4.10.18-0365


(2022-04-06)

Compatibility & Installation

  1. Updated to be compatible with DSM 7.1.

Version: 4.10.18-0363


(2022-02-17)

Compatibility & Installation

  1. Synology Directory Server 4.10.18-0363 requires DSM 7.1 or versions above.

What's New

  1. Added support for read-only domain controllers (RODCs).
  2. Added support for exporting logs.

Fixed Issues

  1. Fixed an issue where the domain database could not be created after an existing Windows Server domain was migrated to Synology Directory Server.
  2. Fixed an issue where Windows clients could not load roaming profiles when firewall settings were enabled on Synology NAS.
  3. Fixed an issue where domains could not be migrated when the default value of Zone Replication Scope was changed or when WINS forward lookup was configured in Windows DNS.
  4. Fixed an issue where primary domain controllers could not display the OS names and versions of the secondary domain controllers.
  5. Minor bug fixes.

Known Issues & Limitations

  1. RWDCs must be Windows Server to display the user accounts list when the option "Accounts authenticated on this RODC" is selected.
  2. Windows Server that are deployed as RWDCs synchronize data to RODCs every five minutes.

Version: 4.10.18-0300


(2021-06-01)

Compatibility and Installation

  1. Updated to be compatible with DSM 7.0.

What's New

  1. Updated Samba to version 4.10.
  2. Added support for a single secondary domain controller.
  3. Added support for domain migration from Windows Server 2008 or earlier versions.
  4. Added support for audit logging.
  5. Supports searching and filtering objects by descriptions, full names, emails, and object locations.
  6. Revamped the user interface for displaying a large number of objects.
  7. Displays full names, user login names, offices, emails, and telephones in the object list on the Users & Computers page.
  8. Supports excluding common passwords on the Domain Policy page.
  9. Supports automatically assigning the Domain Admins and Enterprise Admins groups as the domain administrators when a domain is created.

Known Issues and Limitations

  1. The secondary domain controller only works with domains created by Synology Directory Server.
  2. Backups of Synology Directory Server 4.10.15-0244 and above versions cannot be restored on DSM 6.2.
  3. Backups of Active Directory Server 4.4.5-0077 and earlier versions cannot be restored once the package is updated to Synology Directory Server 4.4.5-0086 or above. We recommend creating a new backup task for the updated package in Hyper Backup and running the task immediately.

Version: 4.4.5-0105


(2021-02-23)

Important Note

  1. This update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on regions.

What's New

  1. Enhanced the search engine: search results of users can be filtered by group members.

Fixed Issues

  1. Fixed the issue where the Domain Administrators lists on domain client devices might be incorrectly configured when the package is relaunched.
  2. Fixed the issue where restoration via Hyper Backup might fail.
  3. Fixed the issue where the variable "%HTTP_URL%" in password reset emails could not be displayed properly.
  4. Minor bug fixes.

Version: 4.4.5-0101


(2020-09-17)

Important Note

  1. The following legacy clients may not be able to join the domain.
    • Cisco ISE
    • NetApp data storage systems
    • VMware QuickPrep

Fixed Issue

  1. Fixed a security vulnerability (Synology-SA-20:21).

Version: 4.4.5-0099


(2020-04-28)

Important Note

  1. Synology Directory Server 4.4.5-0099 requires DSM 6.2.3 or above.

What's New

  1. Added support for the option of forcing password changes at the first login when importing users.
  2. Enhanced the compatibility of import user lists and provides clearer error messages when imported files contain syntactic errors.

Fixed Issues

  1. Fixed the issue where Synology Directory Server is falsely detected by Synology High Availability as being abnormal when port 3269 is not open.
  2. Fixed the issue where Synology Directory Server might not work properly even if system errors (e.g., a volume crashes) have been fixed.
  3. Corrected the package name of Synology Directory Server displayed at Control Panel > Security > Firewall.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to Synology Directory Server. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.

Version: 4.4.5-0093


(2019-10-29)

What's New

  1. Support Synology High Availability Manager to failover when Synology Directory Server cannot work properly.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to Synology Directory Server. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.

Version: 4.4.5-0090


(2019-07-09)

Important Note

  1. This package is now renamed to Synology Directory Server. The original database and configuration will keep working after the update.

Fixed Issues

  1. Fixed the issue where logon scripts could not be uploaded through the user's interface.
  2. Fixed the issue where a TLS certificate might become invalid.
  3. Fixed the issue where the IP address registered in DNS Server might be incorrect if Synology High Availability is working.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to 4.4.5-0086 version. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.

Version: 4.4.5-0086


(2019-04-29)

Fixed Issues

  1. Fixed an issue where domain users cannot reset their password in DSM.
  2. When creating domain users, enable "Force this account to change password at next login" by default.
  3. Supports hostname change after restoring package with Hyper Backup.
  4. Aligned display date and time formats with DSM.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to 4.4.5-0086 version. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.

Version: 4.10.18-0365


(2022-04-06)

Compatibility & Installation

  1. Updated to be compatible with DSM 7.1.

Version: 4.10.18-0363


(2022-02-17)

Compatibility & Installation

  1. Synology Directory Server 4.10.18-0363 requires DSM 7.1 or versions above.

What's New

  1. Added support for read-only domain controllers (RODCs).
  2. Added support for exporting logs.

Fixed Issues

  1. Fixed an issue where the domain database could not be created after an existing Windows Server domain was migrated to Synology Directory Server.
  2. Fixed an issue where Windows clients could not load roaming profiles when firewall settings were enabled on Synology NAS.
  3. Fixed an issue where domains could not be migrated when the default value of Zone Replication Scope was changed or when WINS forward lookup was configured in Windows DNS.
  4. Fixed an issue where primary domain controllers could not display the OS names and versions of the secondary domain controllers.
  5. Minor bug fixes.

Known Issues & Limitations

  1. RWDCs must be Windows Server to display the user accounts list when the option "Accounts authenticated on this RODC" is selected.
  2. Windows Server that are deployed as RWDCs synchronize data to RODCs every five minutes.

Version: 4.10.18-0300


(2021-06-01)

Compatibility and Installation

  1. Updated to be compatible with DSM 7.0.

What's New

  1. Updated Samba to version 4.10.
  2. Added support for a single secondary domain controller.
  3. Added support for domain migration from Windows Server 2008 or earlier versions.
  4. Added support for audit logging.
  5. Supports searching and filtering objects by descriptions, full names, emails, and object locations.
  6. Revamped the user interface for displaying a large number of objects.
  7. Displays full names, user login names, offices, emails, and telephones in the object list on the Users & Computers page.
  8. Supports excluding common passwords on the Domain Policy page.
  9. Supports automatically assigning the Domain Admins and Enterprise Admins groups as the domain administrators when a domain is created.

Known Issues and Limitations

  1. The secondary domain controller only works with domains created by Synology Directory Server.
  2. Backups of Synology Directory Server 4.10.15-0244 and above versions cannot be restored on DSM 6.2.
  3. Backups of Active Directory Server 4.4.5-0077 and earlier versions cannot be restored once the package is updated to Synology Directory Server 4.4.5-0086 or above. We recommend creating a new backup task for the updated package in Hyper Backup and running the task immediately.

Version: 4.4.5-0105


(2021-02-23)

Important Note

  1. This update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on regions.

What's New

  1. Enhanced the search engine: search results of users can be filtered by group members.

Fixed Issues

  1. Fixed the issue where the Domain Administrators lists on domain client devices might be incorrectly configured when the package is relaunched.
  2. Fixed the issue where restoration via Hyper Backup might fail.
  3. Fixed the issue where the variable "%HTTP_URL%" in password reset emails could not be displayed properly.
  4. Minor bug fixes.

Version: 4.4.5-0101


(2020-09-17)

Important Note

  1. The following legacy clients may not be able to join the domain.
    • Cisco ISE
    • NetApp data storage systems
    • VMware QuickPrep

Fixed Issue

  1. Fixed a security vulnerability (Synology-SA-20:21).

Version: 4.4.5-0099


(2020-04-28)

Important Note

  1. Synology Directory Server 4.4.5-0099 requires DSM 6.2.3 or above.

What's New

  1. Added support for the option of forcing password changes at the first login when importing users.
  2. Enhanced the compatibility of import user lists and provides clearer error messages when imported files contain syntactic errors.

Fixed Issues

  1. Fixed the issue where Synology Directory Server is falsely detected by Synology High Availability as being abnormal when port 3269 is not open.
  2. Fixed the issue where Synology Directory Server might not work properly even if system errors (e.g., a volume crashes) have been fixed.
  3. Corrected the package name of Synology Directory Server displayed at Control Panel > Security > Firewall.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to Synology Directory Server. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.

Version: 4.4.5-0093


(2019-10-29)

What's New

  1. Support Synology High Availability Manager to failover when Synology Directory Server cannot work properly.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to Synology Directory Server. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.

Version: 4.4.5-0090


(2019-07-09)

Important Note

  1. This package is now renamed to Synology Directory Server. The original database and configuration will keep working after the update.

Fixed Issues

  1. Fixed the issue where logon scripts could not be uploaded through the user's interface.
  2. Fixed the issue where a TLS certificate might become invalid.
  3. Fixed the issue where the IP address registered in DNS Server might be incorrect if Synology High Availability is working.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to 4.4.5-0086 version. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.

Version: 4.4.5-0086


(2019-04-29)

Fixed Issues

  1. Fixed an issue where domain users cannot reset their password in DSM.
  2. When creating domain users, enable "Force this account to change password at next login" by default.
  3. Supports hostname change after restoring package with Hyper Backup.
  4. Aligned display date and time formats with DSM.

Known Issues

  1. Previous Active Directory Server backup cannot be restored after updating to 4.4.5-0086 version. We recommend setting up a new backup task in Hyper Backup for the updated package and run the task immediately.