Bug 217293

Summary:	security=ads broken, update to 3.0.23d
Product:	[Fedora] Fedora	Reporter:	Rudi Chiarito <nutello>
Component:	samba	Assignee:	Simo Sorce <ssorce>
Status:	CLOSED CURRENTRELEASE	QA Contact:	David Lawrence <dkl>
Severity:	high	Docs Contact:
Priority:	medium
Version:	6	CC:	arechenberg, Colin.Simpson, jplans, zing
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	3.0.24-1.fc6	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-03-02 18:00:18 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	218774

Description Rudi Chiarito 2006-11-26 17:13:04 UTC

Description of problem:
SPNEGO will fail when using a 3.0.23c server in an AD domain. The bug is known
and fixed in 3.0.23d:

https://bugzilla.samba.org/show_bug.cgi?id=4095

I can confirm that applying the patch from that report solves the problem. An
update to 3.0.23d might still be preferrable, because it fixes several bugs more
as well.

Version-Release number of selected component (if applicable):
3.0.23c-2

Comment 1 Dmitry Butskoy 2006-12-08 12:59:32 UTC

Please, update for FC5 too.

Comment 2 Andrew Rechenberg 2006-12-18 19:30:05 UTC

ADS security still seems broken on FC6 even with the patch from Samba Bugzilla
4095.  I've applied the patch and rebuild the RPM, but users still can't access
their home directory on a Samba server from a Windows XP SP2 client.  They
receive an access denied error.

I don't see 3.0.23d in Rawhide either (same 3.0.23c).

Any updates on this bug?

Comment 3 Colin.Simpson 2007-01-22 18:02:46 UTC

Any progress on this bug, I have the same problem and 3.0.23d seems to fix it
but no 64 bit version in RPM on the upstream. Yet 3.0.23d isn't in testing or
Rawhide. I'd have thought this would be quite a high priority bug to fix.

Comment 4 Dmitry Butskoy 2007-02-16 14:07:34 UTC

It seems to be fixed for me in the latest updated samba 3.0.24

Comment 5 Colin.Simpson 2007-02-16 14:42:41 UTC

Yup, fixed for me with the 3.0.24 update.

Comment 6 Colin.Simpson 2007-05-02 22:01:05 UTC

I haven't had a chance to fully test this, I may have something wrong in my
setup, but is this also broken in RH EL 5? Given that it ships with samba-3.0.23c-2?

Comment 7 Colin.Simpson 2007-06-01 12:39:50 UTC

This looks broken on RH EL 5. We had to install the latest FC6 Samba RPMS to
allow this to work.