Bug#897269: [Pkg-samba-maint] Bug#897269: samba: build against system heimdal instead of outdated embedded code copy

2018-05-01 Thread Mathieu Parent
an for the features that don't have parity yet). Andrew, is there any chance to sync Heimdal code with upstream? Or should we switch to MIT? Regards -- Mathieu Parent

Bug#896080: [samba] Improve AppArmor integration

2018-04-19 Thread Mathieu Parent
Package:samba Version: 2:4.7.4+dfsg-2 Ensuring we won't forget this feature request. Mathieu Parent -- Forwarded message -- From: Christian Boltz <appar...@cboltz.de> Date: 2018-03-20 23:50 GMT+01:00 Subject: Re: [apparmor] Let's enable AppArmor by default (why not?) To:

Bug#858923: Proposing a new "try_authtok" option in pam password modules

2018-04-13 Thread Mathieu Parent
ch (0001) for libpam-winbind attached (I'll send it to samba-technical once tested). What do you think? -- Mathieu Parent From 7808a17c18221d3fd95f09bcd3ab18f4a4011165 Mon Sep 17 00:00:00 2001 From: Mathieu Parent <math.par...@gmail.com> Date: Fri, 13 Apr 2018 20:50:20 +0200 Subject: [P

Bug#833287: Adding a mandatory check before upgrade

2018-04-10 Thread Mathieu Parent
Hi, If no one comes with a good reason to have winbind listed before compat (or before files) in nsswitch.conf, I'll add a mandatory check for this during install or upgrade of libwbclient0 and libnss-winbind. Regards -- Mathieu Parent

Bug#791674: Samba configured to forward raw data to cups does not do that

2018-04-09 Thread Mathieu Parent
hich break printing? Regards -- Mathieu Parent

Bug#855918: Merging bugs

2018-04-08 Thread Mathieu Parent
Hi, Just a quick note that #855918 and #873073 have the same cause and are not a samba bug but the consequence of "network-online.target" not working on stretch. Keeping those opens for reference. Regards -- Mathieu Parent

Bug#726459: MIT instead of Heimdal in Debian

2018-04-07 Thread Mathieu Parent
-next stable) Regards -- Mathieu Parent [1]: Samba DCs with MIT Kerberos KDC currently do not support: - PKINIT support required for using smart cards - Service for User to Self-service (S4U2self) - Service for User to Proxy (S4U2proxy) - Running as a Read only domain controller (RODC) (https

Bug#820973: libsoup bug

2018-04-06 Thread Mathieu Parent
Control: reassign -1 libsoup2.4-1 2.48.0-1 Hello, According to https://bugzilla.gnome.org/show_bug.cgi?id=765106, this is a libsoup bug, fixed in 2.54.1+. Regards -- Mathieu Parent

Bug#863285: Solution?

2018-04-03 Thread Mathieu Parent
problem. As said before, the solution is to mask smbd, nmbd and winbind services: sudo systemctl mask smbd nmbd winbind The proper solution would be to better document how to move to samba-ad-dc, AND to automatically mask those services on upgrade when "SERVER ROLE = ACTIVE DIRECTORY DOMAIN CONTROLLER". Regards -- Mathieu Parent

Bug#886897: [Pkg-samba-maint] Bug#886897: Acknowledgement (samba: samba cannot export LUKs encrypted disks mounted manually after systemd boot)

2018-04-03 Thread Mathieu Parent
Control: reassign -1 systemd 236-1 Control: forcemerge 885325 -1 2018-04-03 5:57 GMT+02:00 David Maslen : > Fixed. > -- > Sent with gnus > > ___ > Pkg-samba-maint mailing list > pkg-samba-ma...@lists.alioth.debian.org >

Bug#893762: samba: installation fails when only loopback interface present.

2018-03-31 Thread Mathieu Parent
solution would be to use "dh_installinit -psamba --name nmbd --errorhandler nmbd_failure" in debian/rules and write an nmbd_failure shell function to ignore the error if only the loopback interface is up. Patch welcome! Regards -- Mathieu Parent

Bug#893762: samba: installation fails when only loopback interface present.

2018-03-23 Thread Mathieu Parent
> > workaround is to create dummy interface and configuration then > completes. What is the usecase here? Samba has no use without a network... Regards -- Mathieu Parent

Bug#855918: [Pkg-samba-maint] Bug#855918: samba: connection refused after reboot, fixable by systemctl restart smbd

2018-01-19 Thread Mathieu Parent
Otherwise, you probably need "ifupdown-wait-online.service", introduced in ifupdown 0.8.22 (#868650) and fixed in 0.8.25 (#873475). Stretch has 0.8.19. Can you please test one of those two solutions? Regards Mathieu Parent

Bug#815139: build ldb python3 bindings

2018-01-11 Thread Mathieu Parent
atthias, The patch looks good but is outdated. Also I don't understand all the changes. Can you please update it and send is with a merge request at: https://salsa.debian.org/samba-team/ldb Use several commits in the MR (for the required changes). Regards Mathieu Parent

Bug#886961: lib-nss* packages should go in the admin section too

2018-01-11 Thread Mathieu Parent
Package: lintian Version: 2.5.68 Severity: normal Hi, As a followup to #885899, please add this to data/fields/name_section_mappings: ^libnss-=> admin Regards Mathieu Parent

Bug#741148: Proposed patch

2018-01-10 Thread Mathieu Parent
Control: tag -1 + patch Hello, Here is a quick (i.e not a git-am) patch to pass "--upstream-version" to uscan. Works for me... Regards -- Mathieu Parent diff -ur ../gbp/deb/uscan.py /usr/lib/python3/dist-packages/gbp/deb/uscan.py --- ../gbp/deb/uscan.py 2017-11-28 08:13:55.0

Bug#883156: [pico2wave] Add stdin support

2017-11-30 Thread Mathieu Parent (Debian)
o it, but I though of interfacing with you as upstream on the best way to > move this forward so that the improved pico2wave lands in debian. Samuel or others can decide what they do about it... Regards -- Mathieu Parent /* pico2wave.c * Copyright (C) 2009 Mathieu Parent <math.par...@gmai

Bug#880380: [pkg-horde] Bug#880380: patch correction

2017-11-27 Thread Mathieu Parent
ts to the proposed patch. I hope it will get into new > release. OK. We'll wait that the patch is merged. Regards -- Mathieu Parent

Bug#882797: [Pkg-samba-maint] Bug#882797: samba: time machine support

2017-11-27 Thread Mathieu Parent
I found this upstream bug, > > https://bugzilla.samba.org/show_bug.cgi?id=12380 > > So it's coming in 4.8! > This is a wishlist bug to help others that might be looking for the same > info. I'd love to help test this once 4.8 goes into experimental/unstable, > maintainers please let us k

Bug#881416: Please also depend on php7.1-dev

2017-11-11 Thread Mathieu Parent
Package: php-all-dev Version: 1:54 Severity: wishlist Hi Ondrej, I want to fix #879475, #879476, #879477 by a simple rebuild of those packages. Maybe a regeneration on debian/control is needed? Regards Mathieu Parent -- System Information: Debian Release: buster/sid APT prefers testing

Bug#881381: O: jeepyb -- tools for managing gerrit projects and external sources

2017-11-10 Thread Mathieu Parent
with things like github, launchpad, and storyboard. I don't use gerrit anymore (moved to gitlab). Note that jeepyb depends on gerritlib which I have also orphaned in #881380 and which is RC-buggy with #880230. Regards Mathieu Parent

Bug#880230: gerritlib: build depends on python{,3}-pbr (< 2.0) but 3.1.1-2 is to be installed

2017-11-10 Thread Mathieu Parent
2017-11-07 13:12 GMT+01:00 Adrian Bunk <b...@debian.org>: > On Tue, Nov 07, 2017 at 09:45:49AM +0100, Mathieu Parent wrote: [...] >> I will ask for a removal (of gerritlib and jeepyb) unless someone step >> in within a month as max(popcon[2 years])=4. > > Peopl

Bug#881380: O: gerritlib

2017-11-10 Thread Mathieu Parent
Package: wnpp Severity: normal Hello, I don't use gerrit anymore. This python module was packaged as a dependency of jeepyb. Given the RC bug #880230, I will remove this package before buster if no one adopt it. Regards Mathieu Parent

Bug#860743: [Pkg-samba-maint] Processed: #860743

2017-11-10 Thread Mathieu Parent
ns samba/2:4.2.14+dfsg-0+deb8u8. Hello Will Aoki, Is this reproducible on Debian stretch? Regards -- Mathieu Parent

Bug#881353: [Pkg-samba-maint] Bug#881353: smb.conf: client max protocol = default limits connections to SMB1

2017-11-10 Thread Mathieu Parent
he box I think this needs to be fixed, > ideally in a way > that makes libsmbclient work without the need for /etc/samba/smb.conf > (samba-common). This is fixed in 4.7 by commit 1199907cbe2f003a7df6f56e6cf3878d0732344d and is in Debian testing. We won't do this for stretch as this is not a stability or security fix. Regards Mathieu Parent

Bug#881100: [Pkg-samba-maint] Bug#881100: libnss-winbind is not multiarch safe

2017-11-10 Thread Mathieu Parent
talk to other daemons? >If it's dlopening stuff from that, though, it'd make sense. This looks similar to #647430 which was solved in 2:4.6.5+dfsg-6. Can you test from sid? Regards -- Mathieu Parent

Bug#881239: Panic on opening file on samba share with Microsoft Project

2017-11-10 Thread Mathieu Parent
remove aio_linux from the debian package. I suggest to keep it if it has some use. Frank Chung: Why did you use this vfs? Regards -- Mathieu Parent

Bug#880230: gerritlib: build depends on python{,3}-pbr (< 2.0) but 3.1.1-2 is to be installed

2017-11-07 Thread Mathieu Parent
and jeepyb) unless someone step in within a month as max(popcon[2 years])=4. Regards -- Mathieu Parent

Bug#880380: [pkg-horde] Bug#880380: patch correction

2017-11-05 Thread Mathieu Parent
$quotedSequence, >$quotedPk, >$quotedSequence, >$quotedSequence, >$quotedTable); Can you provide this patch as a pull-request in https://github.com/horde/Db? (master and FRAMEWORK_5_2 branch) Thanks -- Mathieu Parent

Bug#878543: RM: python-ceres -- ROM; FTBFS, unmaintained upstream

2017-10-14 Thread Mathieu Parent
Package: ftp.debian.org Severity: normal Hi, I request the removal of python-ceres, not maintained upstream or in Debian. Regards Mathieu Parent

Bug#841250: [Pkg-php-pecl] Bug#841250: php-facedetect: FTBFS: error with opencv 3.1

2017-10-13 Thread Mathieu Parent
.Hello Mattia, 2017-10-13 19:53 GMT+02:00 Mattia Rizzolo <mat...@debian.org>: > Control: severity -1 serious > > On Thu, Oct 20, 2016 at 02:18:43PM +0200, Mathieu Parent wrote: >> > I am scheduled to transition of opencv. >> > This package is target to transitio

Bug#877583: [octocatalog-diff] Patch for missing scripts

2017-10-06 Thread Mathieu Parent
Control: tag -1 + patch Here is a patch. Regards Mathieu Parent From 30ca15b5ff90d3871d34a12f2c6f9cec378e2dcc Mon Sep 17 00:00:00 2001 From: Mathieu Parent <math.par...@gmail.com> Date: Fri, 6 Oct 2017 20:51:52 +0200 Subject: [PATCH] Install scripts (Closes: #877583) --- debian/rul

Bug#873521: [Pkg-samba-maint] Bug#873521: samba: tls options not compatible with ssl-cert group

2017-10-05 Thread Mathieu Parent
a patch upstream first. Once it'll be merged in upstream (in the master branch), we can backport it in the Debian package. Regards -- Mathieu Parent

Bug#877583: [octocatalog-diff] Missing script files (puppet.sh ...)

2017-10-03 Thread Mathieu Parent
) This script (and others from the scripts directory) are missing. Regards -- Mathieu Parent

Bug#876909: stretch-pu: package samba/2:4.5.12+dfsg-2

2017-09-26 Thread Mathieu Parent
the following defects: - CVE-2017-12150: Some code path don't enforce smb signing, when they should - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects - CVE-2017-12163: Server memory information leak over SMB1 See attached debdiff. Regards Mathieu Parent -- System

Bug#870005: stretch-pu: package samba/2:4.5.12+dfsg-1

2017-08-20 Thread Mathieu Parent
2017-08-17 10:53 GMT+02:00 Adam D. Barratt <a...@adam-barratt.org.uk>: > On 2017-08-17 9:31, Mathieu Parent wrote: >> >> Hi stable release team, >> >> I had no response to this bug. I know this is a huge diff, but please >> review it. > > > For the

Bug#871779: [Pkg-samba-maint] Bug#871779: /sbin/mount.cifs: Some remote folders missing when mounting the share using -o vers=2.x option

2017-08-17 Thread Mathieu Parent
to win10 with cifs1.0 enabled - to win10 with cifs1.0 disabled See https://wiki.samba.org/index.php/LinuxCIFS_troubleshooting#Wire_Captures Regards -- Mathieu Parent

Bug#870005: stretch-pu: package samba/2:4.5.12+dfsg-1

2017-08-17 Thread Mathieu Parent
-- Mathieu Parent

Bug#803924: [Pkg-samba-maint] Bug#803924: for stretch?

2017-08-17 Thread Mathieu Parent
70005. Regards -- Mathieu Parent

Bug#726163: Reassigning to talloc

2017-07-23 Thread Mathieu Parent
Control: reassign -1 python-talloc 2.1.9-2 As per last comment, I'm assigning this to talloc. Regards -- Mathieu Parent

Bug#869183: Updated patch

2017-07-21 Thread Mathieu Parent
Hello, Here is an updated patch with comments from Ewoud Kohl van Wijngaarden [1]. [1]: https://github.com/theforeman/puppet-puppet/pull/520#discussion_r128732270 Regards -- Mathieu Parent From 7e0ef6b59020a96d6736f05efc717442e4f7052a Mon Sep 17 00:00:00 2001 From: Mathieu Parent <mathieu.

Bug#869183: puppet: Fix "No supported formats are acceptable (Accept: s, pson)" while bucketing from Puppet Agent v3

2017-07-21 Thread Mathieu Parent
ttps://github.com/puppetlabs/puppetserver/blob/ff0e5e84860ea9b035839e77e9b27d4c3a923e36/src/clj/puppetlabs/services/legacy_routes/legacy_routes_core.clj#L27-L42 NB: I think this should also go in stretch-pu. Regards Mathieu Parent From eb03e3dcaad385660bf95d692c9bd5acbb8996ea Mon Sep 17 0

Bug#803924: [Pkg-samba-maint] Bug#803924: -HUP needs to be sent more broadly

2017-07-20 Thread Mathieu Parent
, if that hasn't > been rewritten out. Is there an equivalent to "smbcontrol * reload-config" for the samba (AD DC) daemon? Note that under systemd, we can use: systemctl kill --kill-who all --signal=SIGHUP samba thoughts? Regards -- Mathieu Parent

Bug#776223: WIP

2017-07-19 Thread Mathieu Parent
Hi, This was partly fixed by: commit 792da5418cf7924935e2621a075a3cc5b0ba1351 Author: Mathieu Parent <math.par...@gmail.com> Date: Tue Apr 5 00:09:16 2016 +0200 usershare.patch: Fix "usershare max shares" default in XML doc and in s4 Also fixes samba.tes

Bug#868672: Add oldoldstable to "Misc optons"

2017-07-17 Thread Mathieu Parent
=oldoldstable;repeatmerged=on;src=samba (and also oldoldstable is not available in the dist dropdown). Regards Mathieu Parent -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.11.0-1-amd64 (SMP w/2

Bug#868209: [Pkg-samba-maint] Bug#868209: Samba security updates uninstallable due to broken dependency of python-talloc

2017-07-14 Thread Mathieu Parent
, the packages cannot be updated. a build-tim error from my side, and binNMUs for jessie and stretch will be issued, hopefully soon. Regards Mathieu Parent > Package: python-samba > Source: samba > Version: 2:4.2.14+dfsg-0+deb8u7 > Installed-Size: 7,250 kB > Maintainer: Debi

Bug#868209: CVE-2017-11103: Orpheus' Lyre: samba uploads in progress.

2017-07-13 Thread Mathieu Parent
Hello security team, FYI: I have uploaded jessie and stretch versions of samba to fix Orpehus' Lyre. Changes are in the relevant branches of: https://anonscm.debian.org/cgit/pkg-samba/samba.git Regards -- Mathieu Parent

Bug#868209: [Pkg-samba-maint] Bug#868209: CVE-2017-11103: MitM attack, impersonation of the Kerberos client, known as Orpheus Lyre

2017-07-13 Thread Mathieu Parent
some time this afternoon to commit+build+upload. Regards Mathieu Parent 2017-07-13 9:45 GMT+02:00 Andrew Bartlett <abart...@samba.org>: > On Thu, 2017-07-13 at 18:05 +1200, Andrew Bartlett wrote: >> On Thu, 2017-07-13 at 07:14 +0200, Raphael Hertzog wrote: >> > Sou

Bug#727560: samba: Overwrite /etc/samba/smb.conf without warnings

2017-06-27 Thread Mathieu Parent
2017-06-27 12:02 GMT+02:00 L.P.H. van Belle <be...@bazuin.nl>: [...] > > I suggest, close bug. Louis, please do the closing. This triaging is very needed. Also, if you know it, set the fixed version too. Thanks Louis for taking care of those old bugs. -- Mathieu Parent

Bug#721514: [Pkg-samba-maint] Bug#721514: winbind: Winbind authentication also broken after upgrade from from Jessie to Stretch

2017-06-27 Thread Mathieu Parent
info -g". > But "getent passwd", "getent group" return only local data. > And I cannot open shared folder from windows machines using AD credentials. Have you installed libpam-winbind and libnss-winbind and configured /etc/nsswitch.conf? Regards -- Mathieu Parent

Bug#721514: [Pkg-samba-maint] Bug#721514: winbind: Winbind authentication also broken after upgrade from from Jessie to Stretch

2017-06-27 Thread Mathieu Parent
Hello, Have you more info? The package split was in jessie, there is no such thing in stretch. Regards Mathieu Parent

Bug#736953: Debian Jessie domain controller & domain member, winbind not working correctly

2017-06-27 Thread Mathieu Parent
2017-06-21 9:36 GMT+02:00 L.P.H. van Belle <be...@bazuin.nl>: [...] > In my opinion errors in config and not in samba. Should we close this bug then? Regards -- Mathieu Parent

Bug#865288: New upstream version

2017-06-20 Thread Mathieu Parent
Package: elasticsearch-curator Version: 4.2.5-1 Dear Maintainers, elasticsearch-curator 5.1.1 has been released. Please update the package. Thanks -- Mathieu Parent

Bug#833287: [Pkg-samba-maint] Bug#833287: feedback request about patch

2017-06-17 Thread Mathieu Parent
e, this is: https://lists.samba.org/archive/samba-technical/2017-June/121139.html Regards -- Mathieu Parent

Bug#833287: [Pkg-samba-maint] Bug#833287: feedback request about patch

2017-06-14 Thread Mathieu Parent
2017-06-14 9:37 GMT+02:00 Mathieu Parent <math.par...@gmail.com>: > 2017-06-13 17:12 GMT+02:00 Andreas Hasenack <andr...@canonical.com>: >> Hi, >> >> this bug was also filed against Ubuntu as >> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/158448

Bug#833287: [Pkg-samba-maint] Bug#833287: feedback request about patch

2017-06-14 Thread Mathieu Parent
bit > complicated. Another way to fix this is to tune the dependencies (using pre-depends or Conflicts). Can you provide more info of which upgrade broke? (source/dest version) Regards -- Mathieu Parent

Bug#864706: closed by Apollon Oikonomopoulos <apoi...@debian.org> (Bug#864706: fixed in octocatalog-diff 1.3.0-1)

2017-06-14 Thread Mathieu Parent
has been closed by Apollon Oikonomopoulos <apoi...@debian.org>. This was quite fast. Thanks! -- Mathieu Parent

Bug#864723: ruby-httparty: gemfile references json ~> 1.8 which is not available

2017-06-13 Thread Mathieu Parent
ker/httparty/commit/1cbb101feaffcc1f11c77a71009558c6086ebb4b May this fix go in stretch? Regards Mathieu Parent

Bug#864706: octocatalog-diff: New upstream release >= 1.3.0

2017-06-13 Thread Mathieu Parent
Package: octocatalog-diff Version: 1.0.1-1 Severity: wishlist Dear Maintainer, Please update the package to latest release. (NB: I need https://github.com/github/octocatalog-diff/pull/122) Regards Mathieu Parent

Bug#863268: unblock: samba/2:4.5.8+dfsg-2

2017-05-24 Thread Mathieu Parent
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: unblock Please unblock package samba It (only) includes a fix for critical CVE-2017-7494 (rpc_server3: Refuse to open pipe names with / inside) Debdiff attached. Regards Mathieu Parent unblock

Bug#849151: GnuPG 2 support in Horde_Crypt

2017-05-20 Thread Mathieu Parent
smime message." which is worth having given that sha1 is dead now. Niels, what do you think about this plan? Regards -- Mathieu Parent

Bug#862580: [Pkg-samba-maint] Bug#862580: Winbind crashes on ssh login of a domain user.

2017-05-19 Thread Mathieu Parent
ich includes those fixes. really, even without the stretch freeze, doing a major samba upgrade will bring more problems than solutions. We need to cherry-pick changes if problems still exists. Regards -- Mathieu Parent

Bug#861715: unblock: php-horde-crypt/2.7.5-2

2017-05-09 Thread Mathieu Parent (Debian)
2017-05-07 22:47 GMT+02:00 Niels Thykier <ni...@thykier.net>: > Control: tags -1 moreinfo > > Mathieu Parent: >> Package: release.debian.org >> Severity: normal >> User: release.debian@packages.debian.org >> Usertags: unblock >> >> Plea

Bug#858950: [pkg-horde] Bug#858950: Turba does not obey restrictions defined in Horde permission system

2017-05-03 Thread Mathieu Parent
ich ships the version 4.2.18-1 of Turba. > > Attached is a minimal patch that solves the problem. Thanks. This looks like upstream: https://github.com/horde/horde/commit/91ce536ce03a18eb9d30b6f9a104664081cd8159 https://github.com/horde/horde/commit/cbc8d0720c73a44b16ba16dd765c6a8312aad7de Fixed in 4.2.3 (and so, not in stretch). Regards -- Mathieu Parent

Bug#861715: unblock: php-horde-crypt/2.7.5-2

2017-05-02 Thread Mathieu Parent
/changelog 2017-05-03 07:15:32.0 +0200 @@ -1,3 +1,10 @@ +php-horde-crypt (2.7.5-2) unstable; urgency=medium + + * Escape user provided recipients and charset data. Fixes CVE-2017-7413 and +CVE-2017-7414 (Closes: #859635) + + -- Mathieu Parent <sath...@debian.org> Wed, 03 May 2017

Bug#861530: c-icap: Misleading error message if c-icap is running out of temp. diskspace

2017-05-02 Thread Mathieu Parent
ignored. c-icap tries to download > the file runs out of temp. > diskspaceand logs this very misleading error message. This makes it very hard > to detect this error if you > have e.g. a large number of squid users that report infrequent error messages > in their browser "internal > server error" and they are concurrently only downloading small files over > squid. Regards -- Mathieu Parent

Bug#860573: unblock: php-horde-imp/6.2.17-2

2017-04-18 Thread Mathieu Parent
4-18 21:59:43.0 +0200 @@ -1,3 +1,9 @@ +php-horde-imp (6.2.17-2) unstable; urgency=medium + + * Fix sending email after attch_body_check hook fails (Closes: #859048) + + -- Mathieu Parent <sath...@debian.org> Tue, 18 Apr 2017 21:59:43 +0200 + php-horde-imp (6.2.17-1) unstable; urgency=m

Bug#860521: [pkg-horde] Bug#860521: unblock: php-horde-core/2.27.6+debian1-1

2017-04-18 Thread Mathieu Parent (Debian)
2017-04-18 9:09 GMT+02:00 Mathieu Parent <sath...@debian.org>: [...] > [...] and prevent all > Horde to be removed from stretch because of jquery-mobile removal (See > #734101). I'm a bit afraid because they are "Marked for autoremoval on 21 April". Will this fit? Regards -- Mathieu Parent

Bug#859319: unblock: samba/2:4.5.8+dfsg-1

2017-04-02 Thread Mathieu Parent
-04-01 17:41:28.0 +0200 @@ -1,3 +1,18 @@ +samba (2:4.5.8+dfsg-1) unstable; urgency=medium + + * New upstream version +- Drop CVE-2017-2619.patch: merged upstream +- Fix CVE-2017-2619 regression with "follow symlink = no" (Closes: #858564) + + -- Mathieu Parent <sath.

Bug#858601: [Pkg-samba-maint] Bug#858601: Bug#858601: Bug#858601: winbind: user authentication using windows domain fails after upgrade to 4.2.14+dfsg-0+deb8u4

2017-03-31 Thread Mathieu Parent
Control: forcemerge 858648 858590 -1 Control tag 858648 + upstream fixed-upstream confirmed 2017-03-31 0:51 GMT+02:00 Albert Dengg <alb...@fsfe.org>: > On Fri, Mar 31, 2017 at 12:33:29AM +0200, Mathieu Parent wrote: >> 2017-03-30 23:50 GMT+02:00 Albert Dengg <alb...@fsf

Bug#858601: [Pkg-samba-maint] Bug#858601: Bug#858601: winbind: user authentication using windows domain fails after upgrade to 4.2.14+dfsg-0+deb8u4

2017-03-30 Thread Mathieu Parent
fs_shadow_copy2 regression. Can you test those packages, signed by me: https://people.debian.org/~sathieu/samba/ Thanks -- Mathieu Parent

Bug#858590: Test packages fixing samba regressions

2017-03-30 Thread Mathieu Parent
Hello all, I've prepared samba packages fixing vfs_shadowcopy2 and "follow symlink = no". Can you test and report? (I've tested simple cases with those two options only). Those are, signed with my key, at: https://people.debian.org/~sathieu/samba/ Regards -- Mathieu Parent

Bug#858601: [Pkg-samba-maint] Bug#858601: winbind: user authentication using windows domain fails after upgrade to 4.2.14+dfsg-0+deb8u4

2017-03-30 Thread Mathieu Parent
)Control: tag -1 + moreinfo 2017-03-24 15:20 GMT+01:00 Mathieu Parent <math.par...@gmail.com>: > 2017-03-24 11:19 GMT+01:00 Albert Dengg <alb...@fsfe.org>: >> Package: winbind >> Version: 2:4.2.14+dfsg-0+deb8u2 >> Severity: important >> >> after

Bug#859101: [Pkg-samba-maint] Bug#859101: regression: net: security update makes `net ads join` freeze when run a second time

2017-03-30 Thread Mathieu Parent
rs with 2:4.2.14+dfsg-0+deb8u4. > > I've confirmed this issue does not happen with stretch 2:4.5.6+dfsg-1 Can you try this patch: https://git.samba.org/?p=samba.git;a=commitdiff;h=38beef2ff63664d7d5805f1032bb9f69d0b965d7 (first released in 4.3.0) Regards -- Mathieu Parent

Bug#859048: [pkg-horde] Bug#859048: Attachment check hook prevents IMP smartmobile view to send message with 'attachment' word when there's no attachment

2017-03-30 Thread Mathieu Parent
2017-03-29 21:28 GMT+02:00 Leonardo Bruno : > Package: php-horde-imp > Version: 6.2.2-3 > Severity: important > > Scenario: Compose a message using the IMP smartmobile view in a Horde setup > with the 'attach_body_check' enabled. > > Symptoms: When using the IMP smartmobile

Bug#858564: Confirmed on sid

2017-03-28 Thread Mathieu Parent
nition. This doesn't change the urgency of this bug which is very high. I won't change the severity again. Regards Mathieu Parent

Bug#858648: [Pkg-samba-maint] Bug#858648: samba-vfs-modules: After last update i cant connect to a share when vfs objects shadow_copy2 is enabled

2017-03-26 Thread Mathieu Parent
Hi, This is very similar to #858590. Do you have a segfault? Regards 2017-03-24 21:33 GMT+01:00 Erik Gieseler : > Package: samba-vfs-modules > Version: 2:4.2.14+dfsg-0+deb8u4 > Severity: important > > Dear Maintainer, > > *** Reporter, please consider answering these

Bug#858564: Confirmed on sid

2017-03-26 Thread Mathieu Parent
ng "follow symlinks = no" workarounds the problem. Regards -- Mathieu Parent

Bug#858601: [Pkg-samba-maint] Bug#858601: winbind: user authentication using windows domain fails after upgrade to 4.2.14+dfsg-0+deb8u4

2017-03-24 Thread Mathieu Parent
mbd.conf and it works as expected in > 4.2.14+dfsg-0+deb8u2 Please send us your smb.conf. What does "net ads testjoin" tells? Regards -- Mathieu Parent

Bug#858564: [Pkg-samba-maint] Bug#858564: samba: Since 8u4, Samba does not allow files not in root directory of share

2017-03-24 Thread Mathieu Parent
= @AccessHR > (end) > > Permissions are absolutely fine. They are essentially 770. > AppArmor is enabled, but I disabled it and the problem still exists in 8u4. > It does not exist in 8u2. OK. I'm not able to reproduce the problem on a classic config, so this comes from one of those multiple params. Can you please reduce this config to isolate the param which failed? I suspect one of the vfs. Also, does a simple touch fails too? Does it fails too from a Linux machine (via smbclient or cifs-utils)? Regards -- Mathieu Parent

Bug#858590: [Pkg-samba-maint] Bug#858590: segmantation fault after upgrade to 2:4.2.14+dfsg-0+deb8u4

2017-03-24 Thread Mathieu Parent
all samba-dbg and post the stack trace here? - reproduce the crash without shadow_copy2? Thanks -- Mathieu Parent

Bug#857488: [Pkg-heka-maint] Bug#857488: lua-sandbox-extensions: circular_buffer module missing from package

2017-03-13 Thread Mathieu Parent
kes the > throughput.lua analysis module pretty useless. Yes, we know this. No enough time before stretch's freeze. We'll work on it once stretch is released. Also, given the build system, some work is needed to include this with dh-lua. Help is appreciated. Regards -- Mathieu Parent

Bug#855918: [Pkg-samba-maint] Bug#855918: connection refused after reboot: Any feedback on this one?

2017-03-10 Thread Mathieu Parent
2017-03-02 14:37 GMT+01:00 Martin Steigerwald : [...] > Also I believe "nmb.service" to be a typo since the service is called > "nmbd.service". FYI the typo has been fixed in 2:4.5.6+dfsg-1 (#857232). Regards -- Mathieu

Bug#855918: [Pkg-samba-maint] Bug#855918: samba: connection refused after reboot, fixable by systemctl restart smbd

2017-03-09 Thread Mathieu Parent
is up. See also: https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget Regards -- Mathieu Parent

Bug#837148: Bug#837150: Fix XSS with data:html links and form actions

2017-03-09 Thread Mathieu Parent
2017-03-09 15:29 GMT+01:00 Salvatore Bonaccorso <car...@debian.org>: > Hello! Hello Salvatore, > On Fri, Sep 09, 2016 at 11:08:55AM +0200, Mathieu Parent wrote: >> Will upload lastest version to sid shortly, and I plan to fix this in >> jessie too. > > Do you st

Bug#856463: [Pkg-samba-maint] Bug#856463: Bug#856463: cifs-utils: Accessing files with length of 1067 bytes extremly slow

2017-03-09 Thread Mathieu Parent
times in parallel? I can't say for sur. But this looks strange. But why is packet 34 more than 7 seconds after packet 28? Can you post here the debugdata and the kernel log as per: https://wiki.samba.org/index.php/LinuxCIFS_troubleshooting Regards -- Mathieu Parent

Bug#856843: [Pkg-samba-maint] Bug#856843: smbclient: connection flood to port 445 on mounting cifs volume under kernel 4.9.0

2017-03-09 Thread Mathieu Parent
4.0.8? Don't you mean 4.8? Can you point to the exact good/bad versions, from http://snapshot.debian.org/package/linux/? Also, what are your mount options (from fstab?) Regards -- Mathieu Parent

Bug#857232: [Pkg-samba-maint] Bug#857232: winbind: does not resolve DC's hostname, typo in winbind.service

2017-03-09 Thread Mathieu Parent
2017-03-09 0:08 GMT+01:00 Christian Meyer <c2h...@web.de>: [...] > > tracking down several (local?) issues with winbind I think, I found a typo in > /lib/systemd/system/winbind.service Yes. this has already been mentioned in #855918. Fix is pending. Regards -- Mathieu Parent

Bug#857110: [Pkg-samba-maint] Bug#857110: openchangeclient: executables trigger relocation error

2017-03-09 Thread Mathieu Parent
ges/samba/issues/2 which may suggest that this is the case. That would means that Badlock and newer security fixes are not in Devuan, oups... (NB: but I don't care that much) Regards -- Mathieu Parent

Bug#856463: [Pkg-samba-maint] Bug#856463: cifs-utils: Accessing files with length of 1067 bytes extremly slow

2017-03-08 Thread Mathieu Parent
"Control: severity -1 wishlist Control: tag -1 upstream 2017-03-01 10:54 GMT+01:00 Stephan Gampert | GIP : > Subject: cifs-utils: Accessing files with length of 1067 bytes extremly slow [...] > we are using cifs-utils to access Microsoft Windows 2012R2 File-Server >

Bug#856998: [Pkg-samba-maint] Bug#856998: samba-vfs-modules does not contain ceph module

2017-03-07 Thread Mathieu Parent
; > In Ubuntu, the attached patch was applied to achieve the following: > > * d/control: add libcephfs-dev as b-d to build vfs_ceph > (LP: #1668940). hi, Thanks for your report. unfortunately, this won't be in stretch (too late). i will work on it after stretch is released (if not, ping us). Regards -- Mathieu Parent

Bug#702201: [Pkg-samba-maint] Bug#702201: anyone?

2017-03-06 Thread Mathieu Parent
2017-03-06 5:38 GMT+01:00 Alex Malinovich : > Just ran into the same problem and delaycompress took care of it. This should > really be merged IMO. I'll try to get this in stretch. Regards -- Mathieu

Bug#856561: Fwd: [Pkg-samba-maint] Recognised Bug in Samba 4.5.4

2017-03-05 Thread Mathieu Parent
Control: retitle -1 vfs_fruit in 4.5.4 causes Samba to core dump Control: tag -1 +upstream +fixed-upstream >From https://www.samba.org/samba/history/samba-4.5.5.html: > Samba 4.5.4 erroneously included a rewrite of the vfs_fruit module. > This patchset will be reverted with this release, because

Bug#854607: [Pkg-samba-maint] Bug#854607: fixed in cifs-utils 6.7

2017-03-02 Thread Mathieu Parent
2017-03-01 15:40 GMT+01:00 Chad William Seys : > Hello, > This regression is fixed in cifs-utils version 6.7 . Which doesn't exists yet. Do you know which commit fixes this regression? Regards -- Mathieu

Bug#856463: [Pkg-samba-maint] Bug#856463: cifs-utils: Accessing files with length of 1067 bytes extremly slow

2017-03-02 Thread Mathieu Parent
2017-03-01 10:54 GMT+01:00 Stephan Gampert | GIP : > Subject: cifs-utils: Accessing files with length of 1067 bytes extremly slow [...] > > All of the "slow files" have a length of 1067 bytes. > As far as I know this is also the length of symlink files. Perhaps there is >

Bug#855918: [Pkg-samba-maint] Bug#855918: connection refused after reboot: Any feedback on this one?

2017-03-02 Thread Mathieu Parent
2017-03-01 9:46 GMT+01:00 Martin Steigerwald : > Hello. > > Any feedback on this one? smbd should be transitively "After" network-online.target (thru nmbd.service). Can you try to add "Wants=nmbd.service" in smbd.service" (in the Unit section) and reboot? Regards

Bug#852250: [lua-socket] luasocket was not compiled with UNIX sockets support

2017-02-11 Thread Mathieu Parent
2017-02-03 11:54 GMT+01:00 Michael Meskes : >> Here is an updated version of the patch, targeting upstream. >> >> Can you try the attached patch with both lua-socket versions? >> - 3.0~rc1+git+321c0c9-2 >> - 3.0~rc1+git+ac3201d-3 > > Both seem to work, i.e. I can re-start and

Bug#852380: Proposed ekeyd fix

2017-02-11 Thread Mathieu Parent
2017-02-08 10:08 GMT+01:00 Simon McVittie : > On Sat, 04 Feb 2017 at 15:58:11 +, Simon McVittie wrote: >> Since I have the hardware to be able to test ekeyd, which most DDs won't, >> I'm intending to do an NMU with that change if nobody tells me not to. > > I have uploaded the

Bug#852250: [lua-socket] luasocket was not compiled with UNIX sockets support

2017-02-02 Thread Mathieu Parent
2017-02-02 21:36 GMT+01:00 Mathieu Parent <math.par...@gmail.com>: > 2017-02-02 20:36 GMT+01:00 Michael Meskes <mes...@debian.org>: >>> Sorry, my patch was wrong >>> >>> local _, unix = pcall(require, "socket.unix"); >>>

Bug#852380: Proposed ekeyd fix

2017-02-02 Thread Mathieu Parent
Hi, Can you try the attached patch with both lua-socket versions? - 3.0~rc1+git+321c0c9-2 - 3.0~rc1+git+ac3201d-3 Thanks -- Mathieu Parent From 7ae3639338b643a42e3a7dd9672ab00f514debc0 Mon Sep 17 00:00:00 2001 From: Mathieu Parent <sath...@debian.org> Date: Thu, 2 Feb 2017 23:26:03

<    1   2   3   4   5   6   7   8   9   10   >