Your message dated Thu, 05 Jun 2025 18:50:14 +0000
with message-id <e1unffk-009xck...@fasolo.debian.org>
and subject line Bug#1107139: fixed in samba 2:4.22.2+dfsg-1
has caused the Debian Bug report #1107139,
regarding samba-libs: DLZ module for bind9 version 9.20.x is missing, which
breaks --dns-backend=BIND9_DLZ in trixie
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1107139: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107139
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: samba-libs
Version: 2:4.22.1+dfsg-1
Severity: important
Dear Maintainer,
Testing Samba AD provisioning in a freshly installed Debian trixie
machine, I discovered that samba-libs does not provide a DLZ module for
the trixie version of bind9.
Steps to reproduce:
* Create a new Debian trixie virtual machine
* Install packages: samba, samba-ad-dc, bind9 (plus a few more)
* Provision a new AD domain, with --dns-backend=BIND9_DLZ
* Include /var/lib/samba/bind-dns/named.conf in /etc/bind/named.conf
* Restart services: samba-ad-dc, named
* Attempt to resolve the newly-provisioned domain's NS record
* Observe the resolver reports NXDOMAIN instead of the expected NS record
I see that /var/lib/samba/bind-dns/named.conf does not contain config
lines for the version of bind9 in trixie (9.20.x), which I expect should
look like this:
# For BIND 9.20.x
database "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_20.so";
Also, the file /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_20.so
does not exist, although there are files for earlier versions of bind9
within that directory:
root@dc:~# dpkg -L samba-libs | grep -i dlz
/usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_10.so
/usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_11.so
/usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_12.so
/usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_14.so
/usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_16.so
/usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_18.so
Can this can be remedied in time for Trixie's release? Or is there a
work-around or alternative way to get BIND9_DLZ to work in trixie?
Thank you,
-S.M.
-- System Information:
Debian Release: 13.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.27-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE
not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages samba-libs depends on:
ii libacl1 2.3.2-2+b1
ii libavahi-client3 0.8-16
ii libavahi-common3 0.8-16
ii libbsd0 0.12.2-2
ii libc6 2.41-8
ii libcap2 1:2.75-7
ii libcrypt1 1:4.4.38-1
ii libgnutls30t64 3.8.9-2
ii libicu76 76.1-3
ii libjansson4 2.14-2+b3
ii libkeyutils1 1.6.3-6
ii libldap2 2.6.9+dfsg-2
ii libldb2 2:2.11.0+samba4.22.1+dfsg-1
ii libpam0g 1.7.0-3
ii libpopt0 1.19+dfsg-2
ii libsystemd0 257.6-1
ii libtalloc2 2:2.4.3+samba4.22.1+dfsg-1
ii libtdb1 2:1.4.13+samba4.22.1+dfsg-1
ii libtevent0t64 2:0.16.2+samba4.22.1+dfsg-1
ii libtirpc3t64 1.3.6+ds-1
ii libwbclient0 2:4.22.1+dfsg-1
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1
samba-libs recommends no packages.
samba-libs suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: samba
Source-Version: 2:4.22.2+dfsg-1
Done: Michael Tokarev <m...@tls.msk.ru>
We believe that the bug you reported is fixed in the latest version of
samba, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1107...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <m...@tls.msk.ru> (supplier of updated samba package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 05 Jun 2025 19:12:34 +0300
Source: samba
Architecture: source
Version: 2:4.22.2+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Samba Maintainers <pkg-samba-ma...@lists.alioth.debian.org>
Changed-By: Michael Tokarev <m...@tls.msk.ru>
Closes: 1106959 1107139 1107248
Changes:
samba (2:4.22.2+dfsg-1) unstable; urgency=medium
.
* new upstream stable/bugfix release:
- https://bugzilla.samba.org/show_bug.cgi?id=15707:
CVE-2025-0620: smbd doesn't pick up group membership changes when
re-authenticating an expired SMB session
Closes: #1107248
- https://bugzilla.samba.org/show_bug.cgi?id=15727:
net ad join fails with
"Failed to join domain: failed to create kerberos keytab"
- https://bugzilla.samba.org/show_bug.cgi?id=15819:
vfs_ceph_snapshots fails to list snapshots for entries at any level
beyond share root
- https://bugzilla.samba.org/show_bug.cgi?id=15851:
dcerpcd not able to bind to listening port
- https://bugzilla.samba.org/show_bug.cgi?id=15858:
CTDB does not put nodes running NFS into grace on graceful shutdown
- https://bugzilla.samba.org/show_bug.cgi?id=15861:
Profile sync fails due to Directory Leases
* d/control: add libcrypt-dev build-dependency (Closes: #1106959)
* add-support-for-bind-9.20.patch (Closes: #1107139)
Checksums-Sha1:
af26ec8a6164e3004a357b82e23f059a0a9c739c 5626 samba_4.22.2+dfsg-1.dsc
eff6ac5c1be13caf82f25e9c3ed0db6c12f51994 25334584 samba_4.22.2+dfsg.orig.tar.xz
d41df7af8978a3e5412ba9b75846204f6fd631bf 187256
samba_4.22.2+dfsg-1.debian.tar.xz
f97f19128d3ada151a24d77077743b39d91825ee 6005
samba_4.22.2+dfsg-1_source.buildinfo
Checksums-Sha256:
a335e45f8e7a13bf19118dc57f337977f1b55e7bb57a2e6596484b7edac85061 5626
samba_4.22.2+dfsg-1.dsc
dfba6d91d351fb341a8d77feb382bb8a6b559e4d77cd981e3c196efe573ecd91 25334584
samba_4.22.2+dfsg.orig.tar.xz
19e7738a403ec8a5cfabf7285fab3698d9478fb11717315bef7d5af799f2f0c0 187256
samba_4.22.2+dfsg-1.debian.tar.xz
30313a74bf984e91242d160efab6d9bbe75b0341088336f62e26bef5b9bfc949 6005
samba_4.22.2+dfsg-1_source.buildinfo
Files:
1c1b6fb10c8bfbd4fa51106e881a9bf6 5626 net optional samba_4.22.2+dfsg-1.dsc
7cdcf98669e0134e0e576b2ad7d2f497 25334584 net optional
samba_4.22.2+dfsg.orig.tar.xz
5002fb9b2742082fd9ebb03dd09e1445 187256 net optional
samba_4.22.2+dfsg-1.debian.tar.xz
a490efcf2b9f4f1c39ebe1b431ff3efd 6005 net optional
samba_4.22.2+dfsg-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=46uw
-----END PGP SIGNATURE-----
pgpS74O2KlXyz.pgp
Description: PGP signature
--- End Message ---
