Going to hop on this as it is the same question I have... Needing to perform some upgrades on two of my servers, both at 11.1-u7 currently. The need is forced because I have SMB shares for Windows, and there is an update coming from Microsoft that is going to break things if Freenas isn't updated, or you manually configure the registry to avoid the issue (security hole). Thankfully I have no jails or VMs on these servers. Every share has permissions set through AD users and groups as well as extended permissions for user level groups (in some cases) assigned through Windows properties.
I've been using the new UI for a little bit, can't say I'm completely comfortable with it and I've had some issues with ACLs in 11.3 not allowing me to get in, but I'll figure that out when I need to.
So back to the question, better to go to 11.2-u8 (end of life) or 11.3-uX?
Article from iXsystems about the the MS updates that can break integration:
Search Articles... Technical Library Doc: Microsoft LDAP defaults 2020
Microsoft article on changing LDAP including registry settings to avoid problems if resources can't be patched:
LDAP Channel Binding and LDAP Signing Requirements - March 2020 update final release
If this should be broken off into a separate thread, would a mod/admin be so kind as to move this and title it something similar to the original post? And yes, I got this in an email from ixSystems, everyone should subscribe to their emails.
