Bug 952766 - pam_smbpass.so missing from samba4
Summary: pam_smbpass.so missing from samba4
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: samba4
Version: 22
Hardware: All
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Andreas Schneider
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-04-16 16:04 UTC by Peter Pindsle
Modified: 2016-07-19 18:57 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2016-07-19 18:57:57 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Peter Pindsle 2013-04-16 16:04:33 UTC
Description of problem:
pam_smbpass.so is not available in any FC18 RPM  It also appears to be missing from the samba4 packages in FC17

It is however included in the samba-common package (e.g. samba-common-3.6.5-86.fc17.1.x86_64.rpm) in FC17


Version-Release number of selected component (if applicable):


How reproducible:
Always


Steps to Reproduce:
1. yum provides */pam_smbpass.so

  
Actual results:
yum provides */pam_smbpass.so
Loaded plugins: langpacks, presto, refresh-packagekit
No Matches found


Expected results:
pam_smbpass.so is available in the samba-common or other samba package


Additional info:
There was a similar problem reported in 170471, but that was resolved.  This appears to be another instance, unless there was a deliberate decision made to remove the file, which I haven't been able to find any evidence for.

Thanks in advance for your help, Peter

Comment 1 Fedora End Of Life 2013-12-21 12:51:57 UTC
This message is a reminder that Fedora 18 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 18. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '18'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 18's end of life.

Thank you for reporting this issue and we are sorry that we may not be 
able to fix it before Fedora 18 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior to Fedora 18's end of life.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 2 Peter Pindsle 2013-12-24 12:23:36 UTC
Confirmed still present in F19.  Haven't tried 20 yet.

Comment 3 Jakub Dorňák 2015-01-09 13:28:20 UTC
Is there any reason why is it disabled? I have tried to enable it and it works.

diff --git a/samba.spec b/samba.spec
index 37be778..46ec283 100644
--- a/samba.spec
+++ b/samba.spec
@@ -26,7 +26,7 @@
 %global with_libsmbclient 1
 %global with_libwbclient 1
 
-%global with_pam_smbpass 0
+%global with_pam_smbpass 1
 %global with_internal_talloc 0
 %global with_internal_tevent 0
 %global with_internal_tdb 0

Comment 4 Fedora End Of Life 2015-11-04 14:19:03 UTC
This message is a reminder that Fedora 21 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 21. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as EOL if it remains open with a Fedora  'version'
of '21'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 21 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 5 Peter Pindsle 2015-11-04 14:36:59 UTC
Confirmed this is still present in F22:

dnf provides */pam_smbpass.so
Last metadata expiration check performed 1:57:27 ago on Wed Nov  4 12:31:10 2015.
Error: No Matches found

Comment 6 Alexander Bokovoy 2015-11-04 15:30:20 UTC
pam_smbpass is removed upstream and will be removed in next release (4.4):

commit 3c00e8d76a2ef6194a8ce522c15853e5b8e9262b
Author: Andrew Bartlett <abartlet>
Date:   Sat Oct 10 08:45:41 2015 +1300

    pam_smbpass: REMOVE this PAM module
    
    This pam module causes GPLv3, thread-unsafe Samba code to be directly loaded
    into the address space of many system services.  The code in question was not
    expected to run in this context, and while using the Samba, rather than the system
    password file is a admirable goal, this needs to be done over inter-process
    communication, such as is done by pam_winbind.
    
    pam_winbind is not a total replacement, as the migrate functionality used
    to keep the Samba password up to date with the system password is not
    present, but otherwise can provide essentially the same services.
    
    Andrew Bartlett
    
    Signed-off-by: Andrew Bartlett <abartlet>
    Reviewed-by: Jeremy Allison <jra>


As such, I don't think we want to continue supporting pam_smbpass.

Comment 7 Peter Pindsle 2015-11-04 15:38:21 UTC
OK, fair enough, thanks for the insight.  I don't think pam_winbind provides the functionality I need, but I'll investigate again what other options are available.

Comment 8 Andreas Schneider 2015-11-10 11:21:01 UTC
What is your usecase?

Comment 9 Fedora End Of Life 2016-07-19 18:57:57 UTC
Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.