Date: Thu, 30 Sep 2004 08:27:18 GMT From: Andriy Gapon <avg@icyb.net.ua> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/72188: net/samba: secrets.tdb is removed when it really should not be Message-ID: <200409300827.i8U8RIW2044495@www.freebsd.org> Resent-Message-ID: <200409300830.i8U8USrn020661@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 72188 >Category: ports >Synopsis: net/samba: secrets.tdb is removed when it really should not be >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Sep 30 08:30:28 GMT 2004 >Closed-Date: >Last-Modified: >Originator: Andriy Gapon >Release: 5.2.1-RELEASE-p10 >Organization: >Environment: 5.2.1-RELEASE-p10 i386 samba-2.2.11_1 >Description: Consider a samba server that provides read-only access to all authenticated users in a certain windows domain. There is no need to add any users to smbpasswd, so it is identical smbpasswd.default. On the other hand the samba server uses security=domain mode and it is added to be a member of windows domain by running "smbpasswd -j DOMAIN -r PDC" so secrets.tdb is not identical any more to original one (created from smbpasswd.default). But during samba reinstallation/upgrade secrets.tdb is removed and the samba server in question is unable to authenticate connecting users. This happens because of this line in package registration: UNEXEC '/usr/bin/cmp -s %D/private/smbpasswd %D/private/smbpasswd.default && /bin/rm -f %D/private/smbpasswd %D/private/secrets.tdb || true' >How-To-Repeat: 1. install samba 2. configure it to use security=domain and windows password server (do not change smbpasswd!) 3. make sure windows users can connect and access shares on the samba server 4. deinstall/reinstall samba (e.g. portupgrade -f) 5. see that windows users can not connect anymore, because secrets.tdb has changed and does not contain machine account password >Fix: sorry >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200409300827.i8U8RIW2044495>