[Bug 1554720] Re: Winbind maxing out CPU when AD user logs in with expired password

[Mike]

This issue is fixed in the latest Samba version since it was re-based to
the 4.3 branch. I guess I have the Badlock vulnerability (among others)
to thank for this.

Mike

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1554720

Title:
  Winbind maxing out CPU when AD user logs in with expired password

Status in samba package in Ubuntu:
  New

Bug description:
  Hi,

  My systems are Ubuntu 14.04.3 LTS with samba/winbind 2:4.1.6+dfsg-
  1ubuntu2.14.04.11

  I am experiencing issues as described in this Samba bug:
  https://bugzilla.samba.org/show_bug.cgi?id=11038 which is entitled
  'Logging with an account which has the "User must change password on
  next logon" flag cause winbindd to use 100% cpu and stop answering
  request'.

  Jeremy Allison marked this as a blocker bug with the comment "We must
  not ship another Samba release with this bug unfixed".

  The bug appears to have been fixed in Samba 4.2 and 4.3 releases, but
  not in 4.1. Is there any plan to port this bug fix into releases
  available on Ubuntu 14.04 LTS?

  Mike

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1554720/+subscriptions