+++ This bug was initially created as a clone of Bug #584161 +++ Description of problem: If squid is installed before samba-winbind, then the wbpriv group, when created, does not include squid. This results in ntlm_auth calls by squid failing. "failed due to [winbind client not authorized to use winbindd_pam_auth_auth_crap. Ensure permissions on /var/lib/samba/winbindd_privileged are set correctly." Installing samba-winbind first resolves the problem Version-Release number of selected component (if applicable): Fedora 12 x86_64 updated 2010/04/20. How reproducible: Always Steps to Reproduce: 1.During anaconda install check off squid 2.After Fedora is installed, yum install samba-squid 3. Actual results: In /etc/group with corresponding gshadow wbpriv:x:88: Expected results: In /etc/group with corresponding gshadow wbpriv:x:88:squid Additional info: --- Additional comment from sjensen on 2010-09-04 02:52:27 EDT --- Same here on F13 --- Additional comment from fedora-admin-xmlrpc on 2010-10-08 10:44:07 EDT --- This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component. --- Additional comment from gdeschner on 2010-10-08 10:57:40 EDT --- Reassigning to squid --- Additional comment from jskala on 2010-10-14 09:16:31 EDT --- I've renewed trigger in squid.spec then I've extended it about this lines: if ! getent group wbpriv >/dev/null 2>&1 ; then /usr/sbin/groupadd -g 88 wbpriv >/dev/null 2>&1 || : fi It works fine for me. This trigger is invoked when samba-common (required by samba-winbind) is installed/upgraded. I've made a build in rawhide and the one should be available to test in rawhide repository in next hours. Please, give me a feedback. I'll backport it into f14 and olders when it works fine. Guenther, is this extension fine for you? What about the same conditional group 'wbpriv' insertion in samba-common subpackage? --- Additional comment from ssorce on 2010-10-14 10:32:39 EDT --- Jiri we discussed exactly this approach a few days ago. Can you open a samba bug (maybe just clone) so that we can make sure to remember to do the change on our side?
samba-3.5.8-76.fc14 has been submitted as an update for Fedora 14. https://admin.fedoraproject.org/updates/samba-3.5.8-76.fc14
Package samba-3.5.8-76.fc14: * should fix your issue, * was pushed to the Fedora 14 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing samba-3.5.8-76.fc14' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/samba-3.5.8-76.fc14 then log in and leave karma (feedback).
samba-3.5.8-76.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.