Bug 643362

Summary:	Check for wbpriv group existence in samba-common sub-package
Product:	[Fedora] Fedora	Reporter:	Jiri Skala <jskala>
Component:	samba	Assignee:	Guenther Deschner <gdeschner>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	14	CC:	aglotov, gdeschner, henrik, jlayton, jonathansteffan, jskala, morenstein, sjensen, ssorce
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	samba-3.5.8-76.fc14	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	584161	Environment:
Last Closed:	2011-05-19 05:04:39 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	584161
Bug Blocks:

Description Jiri Skala 2010-10-15 12:08:24 UTC

+++ This bug was initially created as a clone of Bug #584161 +++

Description of problem: If squid is installed before samba-winbind, then the wbpriv group, when created, does not include squid.  This results in ntlm_auth calls by squid failing. "failed due to [winbind client not authorized to use winbindd_pam_auth_auth_crap. Ensure permissions on /var/lib/samba/winbindd_privileged are set correctly." 

Installing samba-winbind first resolves the problem


Version-Release number of selected component (if applicable): Fedora 12 x86_64 updated 2010/04/20.

How reproducible: Always


Steps to Reproduce:
1.During anaconda install check off squid
2.After Fedora is installed, yum install samba-squid
3.
  
Actual results: In /etc/group with corresponding gshadow
wbpriv:x:88:

Expected results: In /etc/group with corresponding gshadow
wbpriv:x:88:squid


Additional info:

--- Additional comment from sjensen on 2010-09-04 02:52:27 EDT ---

Same here on F13

--- Additional comment from fedora-admin-xmlrpc on 2010-10-08 10:44:07 EDT ---

This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

--- Additional comment from gdeschner on 2010-10-08 10:57:40 EDT ---

Reassigning to squid

--- Additional comment from jskala on 2010-10-14 09:16:31 EDT ---

I've renewed trigger in squid.spec then I've extended it about this lines:

if ! getent group wbpriv >/dev/null 2>&1 ; then
  /usr/sbin/groupadd -g 88 wbpriv >/dev/null 2>&1 || :
fi

It works fine for me.

This trigger is invoked when samba-common (required by samba-winbind) is installed/upgraded.

I've made a build in rawhide and the one should be available to test in rawhide repository in next hours. Please, give me a feedback. I'll backport it into f14 and olders when it works fine.

Guenther, is this extension fine for you? What about the same conditional group 'wbpriv' insertion in samba-common subpackage?

--- Additional comment from ssorce on 2010-10-14 10:32:39 EDT ---

Jiri we discussed exactly this approach a few days ago.
Can you open a samba bug (maybe just clone) so that we can make sure to remember to do the change on our side?

Comment 1 Fedora Update System 2011-04-01 18:18:10 UTC

samba-3.5.8-76.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/samba-3.5.8-76.fc14

Comment 2 Fedora Update System 2011-04-02 22:49:17 UTC

Package samba-3.5.8-76.fc14:
* should fix your issue,
* was pushed to the Fedora 14 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing samba-3.5.8-76.fc14'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/samba-3.5.8-76.fc14
then log in and leave karma (feedback).

Comment 3 Fedora Update System 2011-05-19 05:04:14 UTC

samba-3.5.8-76.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.