[Bug 1572301] Re: Regression with 4.3.8 upgrade, Mac OS X machines can't connect
Bug Watch Updater
1572301 at bugs.launchpad.net
Sat Oct 28 00:18:38 UTC 2017
Launchpad has imported 4 comments from the remote bug at
https://bugzilla.redhat.com/show_bug.cgi?id=1327951.
If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.
------------------------------------------------------------------------
On 2016-04-18T06:46:36+00:00 Toni wrote:
Description of problem:
After upgrading to new samba packages, OS X clients cannot authenticate
as guests making local public network shares inaccessible.
Version-Release number of selected component (if applicable):
Apr 18 08:14:06 Updated: samba-libs-4.2.10-6.el7_2.x86_64
Apr 18 08:14:07 Updated: samba-common-tools-4.2.10-6.el7_2.x86_64
Apr 18 08:14:07 Updated: samba-common-4.2.10-6.el7_2.noarch
Apr 18 08:14:07 Updated: samba-client-libs-4.2.10-6.el7_2.x86_64
Apr 18 08:14:07 Updated: samba-common-libs-4.2.10-6.el7_2.x86_64
Apr 18 08:14:09 Updated: samba-4.2.10-6.el7_2.x86_64
How reproducible:
Immediately after upgrade without any configuration changes. Windows and
Linux clients can mount and work with the shares as usual.
Steps to Reproduce:
1. Upgrade to latest EL 7.2 samba packages
2. Try to mount a guest mountable network share using OS X Yosemite
Actual results:
OS X clients fail to mount with a generic error: 'There was a problem
connecting to the server "<address>".'
Expected results:
Share mountable and browsable.
Additional info:
First encounter on production CentOS 7 server. Downgrading back to
following packages works around the problem:
Apr 18 09:08:01 Installed: samba-libs-4.2.3-12.el7_2.x86_64
Apr 18 09:08:01 Installed: samba-common-tools-4.2.3-12.el7_2.x86_64
Apr 18 09:08:01 Installed: samba-common-4.2.3-12.el7_2.noarch
Apr 18 09:08:02 Installed: samba-client-libs-4.2.3-12.el7_2.x86_64
Apr 18 09:08:02 Installed: samba-common-libs-4.2.3-12.el7_2.x86_64
Apr 18 09:08:02 Installed: samba-4.2.3-12.el7_2.x86_64
I have confirmed this on up-to-date RHEL 7 VM with the developer license
using identical package versions and epochs including downgrading.
Reply at:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572301/comments/0
------------------------------------------------------------------------
On 2016-05-11T18:51:17+00:00 Luc wrote:
Hello...
I have the same problem... We use our Samba fileserver for homedirs and
profils in our Windows and Mac labs.
With this version of Samba, the Mac login session would lock-up and
multiple 'smbd' with 100% CPU usage!
If I haden't notice this so quickly all our labs (Linux, Windows, Mac)
would have been unuseable!
I grabbed the SRPMS from Fedora 24 testing and recompiled:
samba-winbind-4.4.3-1.el7.centos.x86_64
samba-client-libs-4.4.3-1.el7.centos.x86_64
samba-winbind-krb5-locator-4.4.3-1.el7.centos.x86_64
samba-common-tools-4.4.3-1.el7.centos.x86_64
samba-client-4.4.3-1.el7.centos.x86_64
samba-common-4.4.3-1.el7.centos.noarch
samba-libs-4.4.3-1.el7.centos.x86_64
samba-common-libs-4.4.3-1.el7.centos.x86_64
samba-4.4.3-1.el7.centos.x86_64
samba-winbind-modules-4.4.3-1.el7.centos.x86_64
Everything works correctly now (CentOS 7.2).
Cheers!
Reply at:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572301/comments/18
------------------------------------------------------------------------
On 2016-05-31T21:01:12+00:00 Brent wrote:
This is affecting me as well. It appears that Debian has committed a
fix to their packages last week:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=821730
The samba team also has committed a patch for this:
https://attachments.samba.org/attachment.cgi?id=12045
https://bugzilla.samba.org/show_bug.cgi?id=11849
I am experiencing this problem on OS X hosts running 10.9-10.11. In the
mean time, I'll need to compile srpms from the Fedora Project, which is
not a great solution in the long run.
I have also file a bug report with CentOS, which can be viewed here:
https://bugs.centos.org/view.php?id=10935
Thanks!
Reply at:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572301/comments/19
------------------------------------------------------------------------
On 2016-11-04T07:00:38+00:00 errata-xmlrpc wrote:
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHBA-2016-2468.html
Reply at:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572301/comments/20
** Changed in: samba (CentOS)
Status: Unknown => Fix Released
** Changed in: samba (CentOS)
Importance: Unknown => Undecided
** Bug watch added: Samba Bugzilla #11849
https://bugzilla.samba.org/show_bug.cgi?id=11849
** Bug watch added: bugs.centos.org/ #10935
https://bugs.centos.org/view.php?id=10935
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1572301
Title:
Regression with 4.3.8 upgrade, Mac OS X machines can't connect
Status in samba:
Unknown
Status in samba package in Ubuntu:
Fix Released
Status in samba package in CentOS:
Fix Released
Status in samba package in Debian:
Fix Released
Bug description:
With the recent security update to 4.3.8 on Ubuntu 14.04 some Mac OS X
10.11 were unable to connect to shares. The shares were still
accessible fine via Windows 10 machines.
Samba versions that broke: 2:4.3.8+dfsg-0ubuntu0.14.04.2
Samba version that works: 2:4.1.6+dfsg-1ubuntu2.14.04.13
The error message (If you turn up log level to 2) in the /log.IPADDRESSOFMAC:
[2016/04/19 14:06:15.555081, 2] ../source3/auth/auth.c:315(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [GUEST] -> [GUEST] FAILED with error NT_STATUS_NO_SUCH_USER
[2016/04/19 14:06:15.555119, 1] ../auth/ntlmssp/ntlmssp_server.c:910(ntlmssp_server_postauth)
ntlmssp_server_postauth: invalid NTLMSSP_MIC for user=[GUEST] domain=[] workstation=[workstation]
[2016/04/19 14:06:15.555134, 1] ../lib/util/util.c:559(dump_data)
[0000] hex removed`
[2016/04/19 14:06:15.555163, 1] ../lib/util/util.c:559(dump_data)
[0000] hex removed
[2016/04/19 14:06:15.555190, 2] ../auth/gensec/spnego.c:708(gensec_spnego_server_negTokenTarg)
SPNEGO login failed: NT_STATUS_INVALID_PARAMETER
This seems very similar to https://www.mail-archive.com/debian-bugs-
dist at lists.debian.org/msg1414417.html.
The Samba config is a very simple one, with all users just connecting as guest. Some excerpts:
map to guest = bad user
[files]
public = yes
delete readonly = yes
writeable = yes
path = /removed/
Workaround. Reverting packages worked, but is complicated, make
yourself root- sudo -i (because you can break pam!).
Download needed packages from:
https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689
https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294692
You likely should have packages libkdc2-heimdal and libhdb9-heimdal in
/var/cache/apt/archive so install the old version of them.
(something like)
wget https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/libpam-winbind_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/libwbclient0_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/python-samba_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/samba_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/samba-common-bin_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/samba-libs_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/samba-vfs-modules_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/smbclient_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/winbind_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294692/+files/samba-common_4.1.6+dfsg-1ubuntu2.14.04.13_all.deb https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/9294689/+files/samba-dsdb-modules_4.1.6+dfsg-1ubuntu2.14.04.13_amd64.deb
Then sudo dpkg -i *.deb them. Then go through and fix any remaining
missing packages, unconfigured packages.
To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1572301/+subscriptions
More information about the foundations-bugs
mailing list