Your message dated Fri, 13 Jan 2006 07:16:57 +0100
with message-id <[EMAIL PROTECTED]>
and subject line Closing this fixed bug with version tracking
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 30 Sep 2005 23:56:34 +0000
>From [EMAIL PROTECTED] Fri Sep 30 16:56:34 2005
Return-path: <[EMAIL PROTECTED]>
Received: from wavelength.wn.citylink.fx.net.nz (hinau.hq.wl.co.nz)
[131.203.100.35]
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1ELUjy-0007Mm-00; Fri, 30 Sep 2005 16:56:34 -0700
Received: from ewen by hinau.hq.wl.co.nz with local (Exim 3.35 #1 (Debian))
id 1ELUjw-0005VI-00
for <[EMAIL PROTECTED]>; Sat, 01 Oct 2005 11:56:32 +1200
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Ewen McNeill <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: samba.postinst destroys smbpasswd if LDAP/NIS is down
X-Mailer: reportbug 3.8
Date: Sat, 01 Oct 2005 11:56:32 +1200
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
Package: samba
Version: 3.0.14a-3
Severity: grave
Justification: causes non-serious data loss
When upgrading from Debian Woody (with Samba 2.x) to Debian Sarge (with
Samba 3.x), /var/lib/dpkg/info/samba.postinst attempts to convert the
smbpasswd database to the new TDB format, with the following commands:
umask 066
pdbedit -i smbpasswd -e tdbsam
rm /etc/samba/smbpasswd
umask 022
Unfortunately if the user accounts are provided by, eg, LDAP (or NIS, or
some other external password database), and that password database is
down (due, eg, to being in the process of upgrading from Debian Woody
to Debian Sarge...) then there will be a large number of errors reported
of the form:
build_sam_account: smbpasswd database is corrupt! username ewen with
uid 1024 is not in unix passwd database!
and the resulting TDB password database will contain few, if any, of
the original users because these are omitted since they're "missing"
(temporarily due to, eg, slapd being down).
samba.postinst then removes the original /etc/samba/smbpasswd file with
out making any backup copy or asking the user for permission to do so.
This prevents the administrator from rerunning the migration once the
LDAP/NIS/etc database has been restarted during the upgrade.
IMHO it is inexcusible to deliberately destroy the old version of the
password database simply on the assumption that the conversion command
"must" have worked. The old password database should be renamed to
something which makes it obvious that it is not used any longer (eg,
/etc/samba/smbpasswd.pre-migration-to-tdb), but left in place to allow
the administrator to recover from any issues that might occur.
It would also be an extrememly good idea to delay running the smbpasswd
conversion script until the end of the sequence of upgrades so that
there is the most chance that LDAP/NIS/etc will be functional again.
FWIW, the sole reason that I didn't mark this a critical bug was that,
fortunately, smbpasswd is backed up daily into /var/backups. So I
don't have to resort to last nights tape backup to recover from this
destructive postinst script.
Ewen
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.4.26-wavelength-amd-via
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages samba depends on:
ii debconf [debconf-2.0] 1.4.30.13 Debian configuration management sy
ii libacl1 2.2.23-1 Access control list shared library
ii libattr1 2.4.16-1 Extended attribute shared library
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libcomerr2 1.37-2sarge1 common error description library
ii libcupsys2-gnutls10 1.1.23-10 Common UNIX Printing System(tm) -
ii libkrb53 1.3.6-2sarge2 MIT Kerberos runtime libraries
ii libldap2 2.1.30-8 OpenLDAP libraries
ii libpam-modules 0.76-22 Pluggable Authentication Modules f
ii libpam-runtime 0.76-22 Runtime support for the PAM librar
ii libpam0g 0.76-22 Pluggable Authentication Modules l
ii libpopt0 1.7-5 lib for parsing cmdline parameters
ii logrotate 3.7-5 Log rotation utility
ii netbase 4.21 Basic TCP/IP networking system
ii samba-common 3.0.14a-3 Samba common files used by both th
-- debconf information:
samba/nmbd_from_inetd:
* samba/run_mode: daemons
* samba/log_files_moved:
* samba/tdbsam: true
* samba/generate_smbpasswd: false
---------------------------------------
Received: (at 330999-done) by bugs.debian.org; 13 Jan 2006 06:54:11 +0000
>From [EMAIL PROTECTED] Thu Jan 12 22:54:11 2006
Return-path: <[EMAIL PROTECTED]>
Received: from onera.onera.fr ([144.204.65.4])
by spohr.debian.org with esmtp (Exim 4.50)
id 1ExIp9-0002EV-F5
for [EMAIL PROTECTED]; Thu, 12 Jan 2006 22:54:11 -0800
Received: from cc-mykerinos.onera (localhost [127.0.0.1])
by onera.onera.fr with ESMTP id k0D6s8CN007350
for <[EMAIL PROTECTED]>; Fri, 13 Jan 2006 07:54:08 +0100 (MET)
Received: by cc-mykerinos.onera (Postfix, from userid 1000)
id 8B5D340A29E; Fri, 13 Jan 2006 07:16:57 +0100 (CET)
Date: Fri, 13 Jan 2006 07:16:57 +0100
From: Christian Perrier <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Closing this fixed bug with version tracking
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.11
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no
version=2.60-bugs.debian.org_2005_01_02
Version: 3.0.20b-3
This bugs was closed when the postinst code to handle woody->sarge
upgrades was removed.
--
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
