Your message dated Thu, 09 Jun 2016 05:48:42 +0000 with message-id <e1baspe-0005qt...@franck.debian.org> and subject line Bug#822937: fixed in samba 2:4.2.10+dfsg-0+deb8u3 has caused the Debian Bug report #822937, regarding samba: throws error on atempt to connect to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 822937: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822937 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: samba Version: 2:3.6.6-6+deb7u9 Severity: grave Justification: renders package unusable Dear Maintainer, after update to version 2:3.6.6-6+deb7u9 all attempts at smb connection to a AD share result in the error "ntlmssp3_handle_neg_flags: Got challenge flags[0x60898201] - possible downgrade detected! missing_flags[0x00000010] - NT_STATUS_RPC_SEC_PKG_ERROR session setup failed: NT_STATUS_MORE_PROCESSING_REQUIRED *** Please consider answering these questions, where appropriate *** did you forget to run kinit?" The kinit did throw me off, but I realised that kerberos was not at issue since nothing changed with it and it's not used for authentication. My primary use for smbclient is with the icinga2 monitoring platform for space checks, something that was the first to indicate a problem. Commandline, both from icinga2 and in separate tests by myself has been smbclient //[server]/[share] -U [domain]/[user] -- System Information: Debian Release: 7.10 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages samba depends on: ii adduser 3.113+nmu3 ii debconf [debconf-2.0] 1.5.49 ii dpkg 1.16.17 ii libacl1 2.2.51-8 ii libattr1 1:2.4.46-8 ii libc6 2.13-38+deb7u10 ii libcap2 1:2.22-1.2 ii libcomerr2 1.42.5-1.1+deb7u1 ii libcups2 1.5.3-5+deb7u6 ii libgssapi-krb5-2 1.10.1+dfsg-5+deb7u7 ii libk5crypto3 1.10.1+dfsg-5+deb7u7 ii libkrb5-3 1.10.1+dfsg-5+deb7u7 ii libldap-2.4-2 2.4.31-2+deb7u1 ii libpam-modules 1.1.3-7.1 ii libpam-runtime 1.1.3-7.1 ii libpam0g 1.1.3-7.1 ii libpopt0 1.16-7 ii libtalloc2 2.0.7+git20120207-1 ii libtdb1 1.2.10-2 ii libwbclient0 2:3.6.6-6+deb7u9 ii lsb-base 4.1+Debian8+deb7u1 ii procps 1:3.3.3-3 ii samba-common 2:3.6.6-6+deb7u9 ii update-inetd 4.43 ii zlib1g 1:1.2.7.dfsg-13 Versions of packages samba recommends: ii logrotate 3.8.1-4 ii tdb-tools 1.2.10-2 Versions of packages samba suggests: pn ctdb <none> pn ldb-tools <none> pn openbsd-inetd | inet-superserver <none> pn smbldap-tools <none> -- debconf information: samba/run_mode: daemons samba-common/title:
--- End Message ---
--- Begin Message ---Source: samba Source-Version: 2:4.2.10+dfsg-0+deb8u3 We believe that the bug you reported is fixed in the latest version of samba, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 822...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <car...@debian.org> (supplier of updated samba package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 01 Jun 2016 17:05:31 +0200 Source: samba Binary: samba samba-libs samba-common samba-common-bin smbclient samba-testsuite registry-tools libparse-pidl-perl samba-dev samba-doc python-samba samba-dsdb-modules samba-vfs-modules libpam-smbpass libsmbclient libsmbclient-dev winbind libpam-winbind libnss-winbind samba-dbg libwbclient0 libwbclient-dev ctdb Architecture: all source Version: 2:4.2.10+dfsg-0+deb8u3 Distribution: jessie-security Urgency: high Maintainer: Debian Samba Maintainers <pkg-samba-ma...@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <car...@debian.org> Closes: 802621 821002 822937 Description: ctdb - clustered database to store temporary data libnss-winbind - Samba nameservice integration plugins libpam-smbpass - pluggable authentication module for Samba libpam-winbind - Windows domain authentication integration plugin libparse-pidl-perl - IDL compiler written in Perl libsmbclient - shared library for communication with SMB/CIFS servers libsmbclient-dev - development files for libsmbclient libwbclient-dev - Samba winbind client library - development files libwbclient0 - Samba winbind client library python-samba - Python bindings for Samba registry-tools - tools for viewing and manipulating the Windows registry samba - SMB/CIFS file, print, and login server for Unix samba-common - common files used by both the Samba server and client samba-common-bin - Samba common files used by both the server and the client samba-dbg - Samba debugging symbols samba-dev - tools for extending Samba samba-doc - Samba documentation samba-dsdb-modules - Samba Directory Services Database samba-libs - Samba core libraries samba-testsuite - test suite from Samba samba-vfs-modules - Samba Virtual FileSystem plugins smbclient - command-line SMB/CIFS clients for Unix winbind - service to resolve user and group information from Windows NT ser Changes: samba (2:4.2.10+dfsg-0+deb8u3) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. . [ Salvatore Bonaccorso ] * Add missing Breaks+Replaces for samba-libs binary package. The 2:4.2.10+dfsg-0+deb8u2 update moved some libraries back to the samba-libs binary package from the samba binary package but did not add respective Breaks and Replaces package relations. (Closes: #821002) * Add Patchset for regression introduced by CVE-2016-2110. NetAPP SMB servers don't negotiate NTLMSSP_SIGN. (Closes: #822937) . [ Steven Chamberlain ] * ctdb: Fix detection of gnukfreebsd (Closes: #802621) GNU/kFreeBSD's platform name is 'gnukfreebsd', not just 'kfreebsd'. . [ Andrew Bartlett ] * Add back better NEWS item for 2:4.2.10+dfsg-0+deb8u1 . [ Salvatore Bonaccorso ] * s3:smbd: fix anonymous authentication if signing is mandatory Checksums-Sha1: defad633dc81433aed51ea8d10d77e9e2b1e0040 4174 samba_4.2.10+dfsg-0+deb8u3.dsc 7a410b0eba7dadaeb679717e8417abe895bae6c3 241532 samba_4.2.10+dfsg-0+deb8u3.debian.tar.xz 0ef15d1695a78d7095c32131cc391dc454c936a3 238666 samba-common_4.2.10+dfsg-0+deb8u3_all.deb 252cddd6fc7f6d85a7e2eacec52223fe013db86f 316064 samba-doc_4.2.10+dfsg-0+deb8u3_all.deb Checksums-Sha256: 743557d2f1675d628a32464bf9fda584dd597225d27d2267022480963ff05593 4174 samba_4.2.10+dfsg-0+deb8u3.dsc dadcee4a4c5caa7bb04bfa95de65f8f02942e31cfe6f740aa7a06777dd79e198 241532 samba_4.2.10+dfsg-0+deb8u3.debian.tar.xz 5db6d41577e8b22301efef35cc8adb65114eb65d03843833cc3d4bde982bc4b4 238666 samba-common_4.2.10+dfsg-0+deb8u3_all.deb fe1ffd8acf179cefd7f90a35c4991c7e4b63fc3c779848bdb071c552657fb178 316064 samba-doc_4.2.10+dfsg-0+deb8u3_all.deb Files: fb8a91b8126df719b47ae2baa2ea5342 4174 net optional samba_4.2.10+dfsg-0+deb8u3.dsc bff8527d1fbcc2e61d97373d36951ef7 241532 net optional samba_4.2.10+dfsg-0+deb8u3.debian.tar.xz 3ce0b6b7744c0cb6c38a82718aaa8680 238666 net optional samba-common_4.2.10+dfsg-0+deb8u3_all.deb 2598e4763a9ad24bcdb5df46f269c6a3 316064 doc optional samba-doc_4.2.10+dfsg-0+deb8u3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJXTv2ZAAoJEAVMuPMTQ89EbNYP/2AfOmk4ZyMhtm72O8Um7SdN 5o1H/Fs+NcUrmjf1YmTB87H+O+8gNqBYKmwFEO3tSA0UBHTW6O9UgRMe+HjGZpEr 65rsHUESC/ZUtdI+QvoUURu31Fa0c9+82nhQ9yQExLnIYGTY5+UBPbHAkfmtyYuu 03si7Fa8ThPTjT+/8Qgy2UpKpt+arPZGcKMToNCsbkKBDnXepvXAMyshpc/vpXrq gX4qAIvnbTyzLoM7pTbXYwHNi3/7aS2y8gO10CoFLbjVG1cMY8fGSEERxanlhKu7 zfSSElDUlk19Fhnv0QrEhZpNSOa2oDPAIxUgP5YxXQNb/U3wiQe5k+BX7sDx+Xfl WSpzP8rFwjFD/fb5u+uk72DuSeENJf6eH30W11o83HqITC6wVGThy+Usfw0LUJZv FSsiB/Kk+Oz9GotSwbsOBKB8EPfDPy34rpas0zVANOx5WKIUfa1LDNjHkR3zgsw1 ftxImTwRDfT4Kh7S75KInLQHEtYu8o/2IdNvX0/OfWQCgNy8ArnQ/jRYRPy2W7l/ dtLbPWcoO7CfkMQwJ8WpLavH2j6sqVpPAMqO0YIusJ9l9LioFccZ9r6f7rQrTi+i ohe/f5ED1Q3BaXM1vCfgxU9DfiSfSYmsfNleluA5CsJRVXSVvzH+aVTsGwSDXLAk Q+ONwBX+z3GfMMqxJoye =L3Na -----END PGP SIGNATURE-----
--- End Message ---
