Your message dated Mon, 24 Apr 2017 19:32:57 +0000 with message-id <e1d2jjf-000eob...@fasolo.debian.org> and subject line Bug#859101: fixed in samba 2:4.2.14+dfsg-0+deb8u5 has caused the Debian Bug report #859101, regarding regression: net: security update makes `net ads join` freeze when run a second time to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 859101: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859101 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: samba-common-bin Version: 2:4.2.10+dfsg-0+deb8u1 Severity: serious File: /usr/bin/net Control: found -1 2:4.2.14+dfsg-0+deb8u4 X-Debbugs-CC: secur...@debian.org The jessie security upgrade from samba 2:4.1.17+dfsg-2+deb8u2 to 2:4.2.10+dfsg-0+deb8u1 causes the `net ads join` command to freeze when run on a system that has already been joined to the domain. I've confirmed that the freeze does not happen on samba 4.1 using snapshot.d.o. The issue still occurs with 2:4.2.14+dfsg-0+deb8u4. When I increase the debug level to 15, it appears that it freezes while trying to remove old keytab entries. The command doesn't use much CPU so it appears to be a deadlock. $ sudo apt install samba-common-bin smbclient $ grep -A13 \\[global /etc/samba/smb.conf [global] ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of workgroup = TEST realm = TEST.LOCAL dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab preferred master = no domain master = No password server = * security = ADS ldap timeout = 300 $ sudo net ads join -d15 -UAdministrator ... Enter Administrator's password: ... $ sudo net ads join -d15 -UAdministrator ... Enter Administrator's password: ... ../source3/libads/kerberos_keytab.c:65: Will try to delete old keytab entries ../source3/libads/kerberos_keytab.c:139: Found old entry for principal: host/test46.test.local@TEST.LOCAL (kvno 6) - trying to remove it. ^C $ sudo smbclient -Utester -L //testsbs01 Enter Indexer's password: Domain=[TEST] OS=[Windows Server 2003 3790 Service Pack 2] Server=[Windows Server 2003 5.2] $ cat /etc/apt/sources.d/snapshot.list deb http://snapshot.debian.org/archive/debian/20160103T163148Z/ jessie main deb http://snapshot.debian.org/archive/debian-security/20160413T203215Z/ jessie/updates main deb http://snapshot.debian.org/archive/debian/20160314T035958Z/ jessie main deb http://snapshot.debian.org/archive/debian-security/20160312T072202Z/ jessie/updates main -- System Information: Debian Release: 8.7 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages samba-common-bin depends on: ii libbsd0 0.7.0-2 ii libc6 2.19-18+deb8u7 ii libldap-2.4-2 2.4.40+dfsg-1+deb8u2 ii libncurses5 5.9+20140913-1+b1 ii libpopt0 1.16-10 ii libreadline6 6.3-8+b3 ii libtalloc2 2.1.2-0+deb8u1 ii libtdb1 1.3.6-0+deb8u1 ii libtevent0 0.9.28-0+deb8u1 ii libtinfo5 5.9+20140913-1+b1 ii libwbclient0 2:4.2.14+dfsg-0+deb8u4 ii python 2.7.9-1 ii python-samba 2:4.2.14+dfsg-0+deb8u4 pn python2.7:any <none> ii samba-common 2:4.2.14+dfsg-0+deb8u4 ii samba-libs 2:4.2.14+dfsg-0+deb8u4 samba-common-bin recommends no packages. Versions of packages samba-common-bin suggests: pn heimdal-clients <none> -- no debconf information -- bye, pabs https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---Source: samba Source-Version: 2:4.2.14+dfsg-0+deb8u5 We believe that the bug you reported is fixed in the latest version of samba, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 859...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Mathieu Parent <sath...@debian.org> (supplier of updated samba package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 01 Apr 2017 11:10:22 +0200 Source: samba Binary: samba samba-libs samba-common samba-common-bin smbclient samba-testsuite registry-tools libparse-pidl-perl samba-dev samba-doc python-samba samba-dsdb-modules samba-vfs-modules libpam-smbpass libsmbclient libsmbclient-dev winbind libpam-winbind libnss-winbind samba-dbg libwbclient0 libwbclient-dev ctdb Architecture: source amd64 all Version: 2:4.2.14+dfsg-0+deb8u5 Distribution: jessie-security Urgency: high Maintainer: Debian Samba Maintainers <pkg-samba-ma...@lists.alioth.debian.org> Changed-By: Mathieu Parent <sath...@debian.org> Description: ctdb - clustered database to store temporary data libnss-winbind - Samba nameservice integration plugins libpam-smbpass - pluggable authentication module for Samba libpam-winbind - Windows domain authentication integration plugin libparse-pidl-perl - IDL compiler written in Perl libsmbclient - shared library for communication with SMB/CIFS servers libsmbclient-dev - development files for libsmbclient libwbclient-dev - Samba winbind client library - development files libwbclient0 - Samba winbind client library python-samba - Python bindings for Samba registry-tools - tools for viewing and manipulating the Windows registry samba - SMB/CIFS file, print, and login server for Unix samba-common - common files used by both the Samba server and client samba-common-bin - Samba common files used by both the server and the client samba-dbg - Samba debugging symbols samba-dev - tools for extending Samba samba-doc - Samba documentation samba-dsdb-modules - Samba Directory Services Database samba-libs - Samba core libraries samba-testsuite - test suite from Samba samba-vfs-modules - Samba Virtual FileSystem plugins smbclient - command-line SMB/CIFS clients for Unix winbind - service to resolve user and group information from Windows NT ser Closes: 858564 858590 858648 859101 Changes: samba (2:4.2.14+dfsg-0+deb8u5) jessie-security; urgency=high . * This is a security release in order to fix regressions from CVE-2017-2619 * Fix "follow symlink = no" (Closes: #858564) - s3: smbd: Fix incorrect logic exposed by fix for the security bug 12496 (CVE-2017-2619). - s3: smbd: Fix "follow symlink = no" regression part 2. - s3: smbd: Fix "follow symlink = no" regression part 2. * Fix shadow_copy2 (Closes: #858648, #858590) - vfs_shadow_copy: handle non-existant files and wildcards - vfs_shadow_copy2: fix crash in 4.2.x backport - vfs_shadow_copy2: add a blackbox test suite - s3: libsmb: Correctly align create contexts in a create call. - s3: libsmb: Add return args to clistr_is_previous_version_path(). - s3: libsmb: Add cli_smb2_shadow_copy_data() function that gets shadow copy info over SMB2. - s3: libsmb: Plumb new SMB2 shadow copy call into cli_shadow_copy_data(). - s3: libsmb: Add the capability to find a @GMT- path in an SMB2 create and transform to a timewarp token. - s2-selftest: run shadow_copy2 test both in NT1 and SMB3 modes - selftest: add content to files created during shadow_copy2 test - selftest: check file readability in shadow_copy2 test - selftest: test listing directories inside snapshots * Fix `net ads join` freeze when run a second time (Closes: #859101) since 4.2 - libads: Fix deadlock when re-joining a domain and updating keytab Checksums-Sha1: 84e7a651db38a2ec849d67c076236f532de9eeae 4188 samba_4.2.14+dfsg-0+deb8u5.dsc 7b34f18cb5f75b2b135a66019a8a6ffc1a841427 260788 samba_4.2.14+dfsg-0+deb8u5.debian.tar.xz 521df5da091099a6ddf0f995e5dbf0ccbd57ebdd 1031188 samba_4.2.14+dfsg-0+deb8u5_amd64.deb c8e453cb27a14c64274b68b4ab3026ddecf45c5e 5114906 samba-libs_4.2.14+dfsg-0+deb8u5_amd64.deb e478680751ce7d7386e01689588cc69dca8ce458 270220 samba-common_4.2.14+dfsg-0+deb8u5_all.deb 35623f8078ca48d34ac3db0e30194bc343b39c5b 615486 samba-common-bin_4.2.14+dfsg-0+deb8u5_amd64.deb 70157a9e30edd1b744c85336cadca7352f5221b5 344012 smbclient_4.2.14+dfsg-0+deb8u5_amd64.deb 525db82f5f72ab4e444238a1fa41e7cd6c203d5c 1571950 samba-testsuite_4.2.14+dfsg-0+deb8u5_amd64.deb d99218873d5a59bd1a1eaa131c22618a812dbcad 123816 registry-tools_4.2.14+dfsg-0+deb8u5_amd64.deb eaf8cd500bd601075ebc88f52b2685b98a226517 185040 libparse-pidl-perl_4.2.14+dfsg-0+deb8u5_amd64.deb e00333e07934c34bcb0d32d179c03ccd70fba868 336160 samba-dev_4.2.14+dfsg-0+deb8u5_amd64.deb ed3e63ca799e31550a3f84c19b2d0de3911772c8 321288 samba-doc_4.2.14+dfsg-0+deb8u5_all.deb 088373cd58efc982c20b89da7ac4e55aaafbf4aa 1018330 python-samba_4.2.14+dfsg-0+deb8u5_amd64.deb 092bcf70ff225b0ead151bb43e6cc01e50bb6219 308204 samba-dsdb-modules_4.2.14+dfsg-0+deb8u5_amd64.deb 38e43d603ea03328aae20867a2eef28d0ca7330e 330368 samba-vfs-modules_4.2.14+dfsg-0+deb8u5_amd64.deb 1baf00ba16b4339d3764bcdfeada91c3befee327 111830 libpam-smbpass_4.2.14+dfsg-0+deb8u5_amd64.deb 41bfec6528859ed772a7b5203314da16c843501c 147064 libsmbclient_4.2.14+dfsg-0+deb8u5_amd64.deb b29cc44232c7b13c63fb9174bd1a5a60af193041 134806 libsmbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb 6c845dee479adeb7e67e14c40ada5e0ab71f1e37 495568 winbind_4.2.14+dfsg-0+deb8u5_amd64.deb 0d6fdd47f0a61936d6a4728255c47dd248cd7de9 122936 libpam-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb c23225055dac2ab0123bab842e197fff734b405f 107482 libnss-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb f7ee868f4263820bcabbe7ba7054d776a079bd14 29554116 samba-dbg_4.2.14+dfsg-0+deb8u5_amd64.deb fd638b1679e324c51abbe469566838c0097db999 122110 libwbclient0_4.2.14+dfsg-0+deb8u5_amd64.deb a22e42d36170564a8eb30d2663f22d0b40eac606 107276 libwbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb e977d47e9e55f598ff234199acd9b566ffe86e14 512570 ctdb_4.2.14+dfsg-0+deb8u5_amd64.deb Checksums-Sha256: cb752ec311f56b3027d87896d6fe039379e2c6ec7c157bfde8c9bcdfacc31f98 4188 samba_4.2.14+dfsg-0+deb8u5.dsc 20189eae2f81abb8869dcec6cf2b9afe254e1f52bebe645fa0fad1e9801e812a 260788 samba_4.2.14+dfsg-0+deb8u5.debian.tar.xz 35b1e53d732792fa4f2799b6e99b9542af6569afdfd61faf6a720c020ae43676 1031188 samba_4.2.14+dfsg-0+deb8u5_amd64.deb bbf51f341c08925de1c0eb4c0f40118ab5a5ae452426c01ef0ccb5f77827b612 5114906 samba-libs_4.2.14+dfsg-0+deb8u5_amd64.deb 01faf8c36ae622481bce7b4d1a36d08babd8268247f27816fd950148004fe8a0 270220 samba-common_4.2.14+dfsg-0+deb8u5_all.deb a6077ddfee70d94c2d989365d597f8b7d0f0c5347cb65fedc9bf9ac90d90f040 615486 samba-common-bin_4.2.14+dfsg-0+deb8u5_amd64.deb 03038e6cd2617aa5df74eb7f63b3682261f86ad52e02dd3a868c0cef6455c37f 344012 smbclient_4.2.14+dfsg-0+deb8u5_amd64.deb 3e918ac8a432f5e07c42cdfe1286e5722fde706a50240a1745c281ff635ff44b 1571950 samba-testsuite_4.2.14+dfsg-0+deb8u5_amd64.deb a4b57cf24b7920ee5ce7aab0808b9f79f33f22803361f6718046a599b06f4782 123816 registry-tools_4.2.14+dfsg-0+deb8u5_amd64.deb 62d7ca63dd84fd2ebd98d43781ea4f67900e9d4717ab0f93e0c4e0aef9547f10 185040 libparse-pidl-perl_4.2.14+dfsg-0+deb8u5_amd64.deb 0abb81714af72d83c393cf1bb0d808eb4949f82de4f3088d5eaedf14076aacac 336160 samba-dev_4.2.14+dfsg-0+deb8u5_amd64.deb 70b4307eeb667a935b8729e79b7823c77d79993eb3463d323c84e0eac6a477a9 321288 samba-doc_4.2.14+dfsg-0+deb8u5_all.deb 269f3934d5d656aad7c341f7bf26b945019501295d77afce1131ffe0fb578295 1018330 python-samba_4.2.14+dfsg-0+deb8u5_amd64.deb 60c9d63fb2932e9f1955cf4355c85f696e36d9f40ed2ff9dfd965e3abb061f7a 308204 samba-dsdb-modules_4.2.14+dfsg-0+deb8u5_amd64.deb 44f89ac7f2c4c5e002185287cb5da5fcc569292d02c15b58a332b2d818dcf081 330368 samba-vfs-modules_4.2.14+dfsg-0+deb8u5_amd64.deb 5557cac2c77a9e1207e9c878cc44ab4ddd36c3b0c9c3c575eb54236abca2d0ad 111830 libpam-smbpass_4.2.14+dfsg-0+deb8u5_amd64.deb 52ed9ca178b3b6257892a388d0f5df00aa4aa3440b7ff6432ee449b8a91fbcee 147064 libsmbclient_4.2.14+dfsg-0+deb8u5_amd64.deb c8d3eaf3957a08a7a20c1228122768716f69ffa1c2da2a7dd6a1ada1398d5317 134806 libsmbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb e1c0358253179c803c310feb29cbf12599b6607d9a8539d8054ee6b7dba480e1 495568 winbind_4.2.14+dfsg-0+deb8u5_amd64.deb bb5b31b1a5deb5627a5ef7ef9d62466a61e67227f643d31a2181148d07523e5b 122936 libpam-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb c5b8e9a88df59ccbc9d52ecb252276cc2307df3efdd4dba1c012862246e70283 107482 libnss-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb 6cf46099fc54ba6132f3ce78aae253d1535bd674ef46a40dcb9487477594a682 29554116 samba-dbg_4.2.14+dfsg-0+deb8u5_amd64.deb c75c0c47a588318e670666a4a7717cff3091e4b86c4526676fc3d8e11f347877 122110 libwbclient0_4.2.14+dfsg-0+deb8u5_amd64.deb cca086964e87522845c8558f0497a9f7dec0172bffce142228a0c1deb25ec1c1 107276 libwbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb bc3935a60e40388c141e3dddabd37ef5a19105edc2b733630a888ad5ca38ac45 512570 ctdb_4.2.14+dfsg-0+deb8u5_amd64.deb Files: 8f9239ed9044483cc3c89d64de0c35c0 4188 net optional samba_4.2.14+dfsg-0+deb8u5.dsc e9ceb0e7892a5dc783b7b62bfadb5aee 260788 net optional samba_4.2.14+dfsg-0+deb8u5.debian.tar.xz e2be048049f5f29106ae424b6405234d 1031188 net optional samba_4.2.14+dfsg-0+deb8u5_amd64.deb 04c06cb77af904355996c6facddd6673 5114906 libs optional samba-libs_4.2.14+dfsg-0+deb8u5_amd64.deb b4f372203ac54230f48da6443198c4bb 270220 net optional samba-common_4.2.14+dfsg-0+deb8u5_all.deb 2e031e5c76dfc50dd71a3661d4252581 615486 net optional samba-common-bin_4.2.14+dfsg-0+deb8u5_amd64.deb 9b6697b28dbeede9e668fb0b0c2400ab 344012 net optional smbclient_4.2.14+dfsg-0+deb8u5_amd64.deb a61ff7273136ac8f93209c2e190bf506 1571950 net optional samba-testsuite_4.2.14+dfsg-0+deb8u5_amd64.deb d1e93f9f6fdfc6c4d0151884d2297c46 123816 net optional registry-tools_4.2.14+dfsg-0+deb8u5_amd64.deb 2d035213bf7170938687e6c3a1cdd1d3 185040 perl optional libparse-pidl-perl_4.2.14+dfsg-0+deb8u5_amd64.deb d944f5096d6268da6e442182ef5c4eb9 336160 devel optional samba-dev_4.2.14+dfsg-0+deb8u5_amd64.deb 0a7be07428709c2b7b75a87fd2399878 321288 doc optional samba-doc_4.2.14+dfsg-0+deb8u5_all.deb da6e573ae3026c21b7569c3785ae7f3a 1018330 python optional python-samba_4.2.14+dfsg-0+deb8u5_amd64.deb 869fea2bbf2d9c0cbec3ff414450b7d9 308204 libs optional samba-dsdb-modules_4.2.14+dfsg-0+deb8u5_amd64.deb 84a95b64b7d556dcd20948431c90b235 330368 net optional samba-vfs-modules_4.2.14+dfsg-0+deb8u5_amd64.deb e0e53ba35cdeffd6e639028861f2fd2c 111830 admin extra libpam-smbpass_4.2.14+dfsg-0+deb8u5_amd64.deb 2f746fad872858531d98f9eb35746e78 147064 libs optional libsmbclient_4.2.14+dfsg-0+deb8u5_amd64.deb 53cedb6899b479d4b7bbacf23fa9570f 134806 libdevel extra libsmbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb 7c371caae0993bf0ce40d33547526035 495568 net optional winbind_4.2.14+dfsg-0+deb8u5_amd64.deb 561f24f69135b3fc42576888a7459334 122936 net optional libpam-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb dcb1209b61d1dfe78c1827ecb56b978b 107482 net optional libnss-winbind_4.2.14+dfsg-0+deb8u5_amd64.deb 10cf5b216e1243ba81f88179c451f1ae 29554116 debug extra samba-dbg_4.2.14+dfsg-0+deb8u5_amd64.deb 00da9e8be4fd44a799b06cdca9fd9ec7 122110 libs optional libwbclient0_4.2.14+dfsg-0+deb8u5_amd64.deb 73d8b1419b29726718c629b6690f5d2f 107276 libdevel optional libwbclient-dev_4.2.14+dfsg-0+deb8u5_amd64.deb a3dce7366fe23bf80b98c64cba929e6d 512570 net optional ctdb_4.2.14+dfsg-0+deb8u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEqIGbPTP9weQZ135HrgOYBGZoH6UFAljfipgACgkQrgOYBGZo H6VkLBAAqM4XqNJ0PzvjoqF0HoupTnOj/5UeequPzZ87CuCwUT1tEH/892zoDvdq Cm5DaRrYYCr8wikbYmrz6K/6zBqvLNY4OAgimHUsb6i5y+lvWxv7AcUCdJXQhHQL UQ66QANnwsSTyDjOpbiTO+s08Pz8QGkAeGq6q0Oz8zRt5/kK5G0I8mhwiQ67gc9w PDUhLF3lq27mMU6T1/AOZGwWBA4/YdDN6UpspXc+WJ5BR1pm1fhi+76r5EXq0z5K QxsFrqwHUTrFbZnsdu3J7BonD7w1RMwZR+UCQlvbUvk/JpzZ0KYxwhwBCkOSaBcg XzoX1BEv9jZ/0WhAUoaQz8cnQYzn2Bk6pOoytsQ2JRujV4iN/AaAchIuplK5hE8V BOB6tRBmYxwCIdhVaKPMhv1w+R4gyV+V1FAZvVP+nGbR4MRFZME585havkhpCTxw ZW+dEfXAfmJauqXgqo9VOQohKlBPNxvk7JWFHNVNd4WRh3Hlao4vLYtJx7vWptKS b/8nt3TI1/MbiID0eV0SmoTGP6XeXb5FZ/GiUfBaV4XcPXWxCEThxKCAT0ZlT/cF yjXQv1/LG6QJw093SCUeoOBi1gRBBeo2QvGwskuwMFcAJCSxMQD1jZjJyqi9UoRS wwLPrHw6NpYDcsULVLIS6S2BgC1yWqr0dp5vi2NoAog6BMS9eQg= =85TD -----END PGP SIGNATURE-----
--- End Message ---
