Bug#699461: /usr/sbin/smbd: Data corruption / file truncation not working with large readwrite set to no

2013-01-31 Thread Tobias Vogel
Package: samba
Version: 2:3.5.6~dfsg-3squeeze8
Severity: important
File: /usr/sbin/smbd


On a debian default install of samba, when setting the parameter large 
readwrite to no (which is often recommended by users in some wikis / blogs / 
communities), file truncation will not happen when rewriting / saving the file. 
When the new content's size is smaller than the old one, trailing garbage is 
left at the end and thus leaving a corrupted file on the disk.

This bug may also affect upstream samba, as another user with a NAS experienced 
the same behaviour:
http://stackoverflow.com/questions/12211629/php-file-put-contents-not-truncating-file-in-cifs-mount


Test script to reproduce the behaviour:

echo thisisabigfatpandaonwheelsgoingdownthestreet  /mnt/test/newfile.txt
cat /mnt/test/newfile.txt

= thisisabigfatpandaonwheelsgoingdownthestreet

echo -n blah  /mnt/test/newfile.txt
cat /mnt/test/newfile.txt

= blahisabigfatpandaonwheelsgoingdownthestreet

Expected output of the second cat command:

= blah


Changes to default smb.conf:

diff -pruN /usr/share/samba/smb.conf /etc/samba/smb.conf
--- /usr/share/samba/smb.conf   2012-04-30 08:53:47.0 +0200
+++ /etc/samba/smb.conf 2013-01-31 16:51:24.0 +0100
@@ -31,6 +31,7 @@
 #=== Global Settings ===

 [global]
+   large readwrite = no

 ## Browsing/Identification ###

@@ -323,3 +324,9 @@
 ;   preexec = /bin/mount /cdrom
 ;   postexec = /bin/umount /cdrom

+[test]
+   writable = yes
+   path = /export/test
+   valid users = testuser
+   create mask = 0644
+   guest ok = no


Mount on the test client:

//smbserver/test /mnt/testcifsrw,user=testuser,passwd=xxx 0 0


-- System Information:
Debian Release: 6.0.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages samba depends on:
ii  adduser   3.112+nmu2 add and remove users and groups
ii  debconf [debconf- 1.5.36.1   Debian configuration management sy
ii  libacl1   2.2.49-4   Access control list shared library
ii  libattr1  1:2.4.44-2 Extended attribute shared library
ii  libc6 2.11.3-4   Embedded GNU C Library: Shared lib
ii  libcap2   1:2.19-3   support for getting/setting POSIX.
ii  libcomerr21.41.12-4stable1   common error description library
ii  libcups2  1.4.4-7+squeeze2   Common UNIX Printing System(tm) - 
ii  libgssapi-krb5-2  1.8.3+dfsg-4squeeze6   MIT Kerberos runtime libraries - k
ii  libk5crypto3  1.8.3+dfsg-4squeeze6   MIT Kerberos runtime libraries - C
ii  libkrb5-3 1.8.3+dfsg-4squeeze6   MIT Kerberos runtime libraries
ii  libldap-2.4-2 2.4.23-7.2 OpenLDAP libraries
ii  libpam-modules1.1.1-6.1+squeeze1 Pluggable Authentication Modules f
ii  libpam-runtime1.1.1-6.1+squeeze1 Runtime support for the PAM librar
ii  libpam0g  1.1.1-6.1+squeeze1 Pluggable Authentication Modules l
ii  libpopt0  1.16-1 lib for parsing cmdline parameters
ii  libtalloc22.0.1-1hierarchical pool based memory all
ii  libwbclient0  2:3.5.6~dfsg-3squeeze8 Samba winbind client library
ii  lsb-base  3.2-23.2squeeze1   Linux Standard Base 3.2 init scrip
ii  procps1:3.2.8-9squeeze1  /proc file system utilities
ii  samba-common  2:3.5.6~dfsg-3squeeze8 common files used by both the Samb
ii  update-inetd  4.38+nmu1+squeeze1 inetd configuration file updater
ii  zlib1g1:1.2.3.4.dfsg-3   compression library - runtime

Versions of packages samba recommends:
ii  logrotate 3.7.8-6Log rotation utility

Versions of packages samba suggests:
pn  ctdb  none (no description available)
pn  ldb-tools none (no description available)
pn  openbsd-inetd | inet-superser none (no description available)
pn  smbldap-tools none (no description available)

-- debconf information:
  samba/run_mode: daemons
  samba/generate_smbpasswd: true


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#517377: apache 1.3 shows perl script source in iphone-browser

2009-02-27 Thread Tobias Vogel

Package: apache
Version: 1.3.34-4.1+etch1
Severity: grave

When a script called index.cgi is the directory-index in apache 1.3
and this script is accessed using the iphone browser, apache shows the
script source of the perl script, even if the perl script is correctly
being executed when accessed with any other browser.

This might expose passwords and might be a severe security issue.

I am using Debian GNU/Linux 4.0 Etch, kernel 2.6.18-6-vserver-686



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#517377: apache 1.3 shows perl script source in iphone-browser

2009-02-27 Thread Tobias Vogel

In case of a normal Firefox access:
+0100] GET /wol/ HTTP/1.1 304 - https://proxy.xyz.ch/; Mozilla/5.0 
(X11; U; Linux i686; en-US; rv:1.9.0.5) Gecko/2008120121 Firefox/3.0.5


In case of the iphone-acess:
+0100] GET /wol HTTP/1.1 301 269 - Mozilla/5.0 (iPhone; U; CPU 
iPhone OS 2_2_1 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, like 
Gecko) Version/3.1.1 Mobile/5H11 Safari/525.20




--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#500998: machine hangs because if network-manager when authenticating via ldap

2008-10-03 Thread Tobias Vogel

Package: Network-Manager
Version: 0.6.6-2

We are using several computers in our OpenLDAP-Domain and they all have 
the same issue: the users authenticate against the LDAP-Domain.

X shows up, but the grey background and the black X-cursor stay, and
the machine does not respond any more, [Alt]+[Ctrl]+[F1-12] neither work
as [Alt]+[Ctrl]+[Del] does. The only thing to solve the problem is to
remove the Network-Manager -symlink from the init. Then everything 
(except the Network-Manager of course, works).


Before LDAP-Authentication was set up, everything worked fine.

We are using Debian GNU/Linux Lenny, kernel 2.6.26-1-686



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#500998: Problem does not occur under debian etch

2008-10-03 Thread Tobias Vogel

The problem does not occur under debian etch.




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#499378: linux-image on lenny hangs when running in vmware-instance

2008-09-18 Thread Tobias Vogel

Package: linux-image-2.6.26-1-686
Version: 2.6.26-1-686

We are using VMware-Servers for our Infrastructure.
When upgrading to lenny from etch within a vmware
the system becomes broken, because the kernel waits saying

Begin: Waiting for root filesystem...

and then fails with

ALERT! /dev/sda1 does not exist. Dropping to a shell
...
...
...
/bin/sh: can't access tty; job control turned off
(initramfs)


Selecting the older kernel-entry from grub of course works.

I am using Debian GNU/Linux Lenny, kernel 2.6.26-1-686



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#450419: wine crashes on use with i810 Xorg-driver

2007-11-07 Thread Tobias Vogel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Package: wine
Version: 0.9.25-2.1

Wine crashes when the Xorg-Server is running with the i810-driver.
Using the vesa-driver helps, but that's kind of a dirty workaround..


Output:


bufmgr_fake.c:1245: bmReleaseBuffers: Assertion `intel-locked' failed.
wine: Assertion failed at address 0xb7f99410 (thread 0009), starting
debugger...
err:seh:start_debugger Couldn't start debugger (winedbg 8 80) (2)
Read the Wine Developers Guide on how to set up winedbg or another debugger


I am using Debian GNU/Linux 4, and the standard kernel 2.6.18-5-686


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHMX87V2BJzU43y1QRAilyAKCp8j+/mNzakjSRTovA+ud64LxuZwCgjU0P
9kxnKJV9xnd4+s9jiR4gCnk=
=ezOE
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#447237: login bug with kernel 2.6.22.2

2007-10-19 Thread Tobias Vogel
Package: login
Version: 1:4.0.18.1-11

Problem with login with kernel-versions higher than 2.6.22.2 (vanilla).
When there is one user logged in, it is not possible to log in as a
second user, neither as a regular user nor as root. It just hangs after
the password-prompt.

$ su -
$ Password:



I am using Debian lenny, kernel 2.6.22.9



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#428964: klogd freaks in vservers

2007-06-29 Thread Tobias Vogel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

seems to be better now, but in my opinion it still uses too much cpu,
5% for a log-deamon on an average 1-year-old machine with 2gb ram and
1 vserver?
but at least that bug seems to be fixed.

thanks,

toby

Martin Schulze schrieb:
 Tobias Vogel wrote:
 Package: klogd
 Version: 1.4.1
 Severity: grave

 klogd randomly starts using 99 cpu.if work
 on the certain vserver is still possible, then
 killing the klogd (-9) is the only thing to stop the
 process.
 
 I assume that you don't have an idea on what's going on there, right?
 
 Just to see if this problem still exists, could you test the current
 CVS HEAD of sysklogd?  Just copy the debian/ directory and compile it.
 http://www.infodrom.org/projects/sysklogd/cvs.php
 
 Regards,
 
   Joey
 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGhLRtV2BJzU43y1QRAkS7AKDDdl5qFc7Yo3P+nISuk20tN29QdgCeOk2f
/hBww4ux9LHj3bczgA+OkmU=
=NG78
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#428964: klogd freaks in vservers

2007-06-15 Thread Tobias Vogel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Package: klogd
Version: 1.4.1
Severity: grave

klogd randomly starts using 99 cpu.if work
on the certain vserver is still possible, then
killing the klogd (-9) is the only thing to stop the
process.


Linux vs 2.6.18-4-vserver-686 #1 SMP Mon Mar 26 19:55:22 UTC 2007 i686
GNU/Linux

cat /etc/debian_version
4.0
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGck4ZV2BJzU43y1QRAtu5AKDbdJ0WF5bhKl1iSYc8mVpc1VaOpgCfailC
aN39+SX9O1F7g7z990ZVKX4=
=Rpvv
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]