Bug#1064337: [Pkg-samba-maint] Bug#1064337: samba: NMU diff for 64-bit time_t transition

2024-02-20 Thread Andrew Bartlett
analysis of libsmbclient ABI? I checked the header, and there are a lot of references to "struct timespec" in the main structures, plus one of time_t in a printing thing. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/Samba Team Member (since 2001)

Bug#1064337: samba: NMU diff for 64-bit time_t transition

2024-02-19 Thread Andrew Bartlett
the description of libsmbclient to libsmbclient0 unintentionally in the free text. I think therefore with some care we can reduce the impact of this significantly, down to libsmbclient, which seems to use struct timespec. Andrew Bartlett On Mon, 2024-02-19 at 22:30 -0800, Steve Langasek wrote: > Sou

Bug#1063149: [Pkg-samba-maint] Bug#1063149: "SyntaxWarning: invalid escape sequence '\s'" errors on updating

2024-02-06 Thread Andrew Bartlett
xed in Samba master and will be released in Samba 4.20. commit 26ff87dcfeaf5a2aff5f28c0aa5d99437c79a68cAuthor: Joseph Sutton < josephsut...@catalyst.net.nz>Date: Mon Sep 11 11:59:34 2023 +1200 python:tests: Fix invalid escape sequencesSigned-off-by: Joseph Sutton Reviewed-by:

Bug#1034417: samba: Samba can no longer authenticate users via Kerberos from a standalone KDC

2023-08-10 Thread Andrew Bartlett
ag. > Thanks, > /mjt Per https://lists.samba.org/archive/samba/2023-April/244999.html it *might* work if the MIT KDC were adjusted not to issue a PAC https://web.mit.edu/kerberos/krb5-1.20/ suggests disable_pac in the realm configuration on the KDC. Andrew Bartlett -- Andrew Bartlett (he/him) h

Bug#1011163: samba: FTBFS on kfreebsd

2023-08-10 Thread Andrew Bartlett
This looks like a build environment issue being unable to find a compiler. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/Samba Team Member (since 2001) https://samba.orgSamba Team Lead https://catalyst.net.nz/services/sambaCatalyst.Net Ltd

Bug#1030593: [Pkg-samba-maint] Bug#1030593: tdb FTCBFS: performs run checks

2023-02-05 Thread Andrew Bartlett
Please submit patches for Samba's wafsamba upstream to Samba. https://wiki.samba.org/index.php/Contribute Andrew Bartlett On Sun, 2023-02-05 at 12:34 +0100, Helmut Grohne wrote: > Source: tdb > Version: 1.4.8-2 > Tags: patch > User: debian-cr...@lists.debian.org > Usertags: ft

Bug#974868: [Pkg-samba-maint] Bug#974868: samba-vfs-modules: Still causing issues - at least on armv5tel/armel

2022-11-16 Thread Andrew Bartlett
go for a xsltproc doc build issue, but it was a hastle on most cloud providers). Bonus points if that 32 bit host is actually FreeBSD (to catch that as well) somehow running under docker via qemu yet still behaving as a subprocess, but that's off topic here. Andrew, -- Andrew Bartlett (he

Bug#726459: MIT instead of Heimdal in Debian

2022-11-10 Thread Andrew Bartlett
upport required for using smart cards > > - Service for User to Self-service (S4U2self) > > - Service for User to Proxy (S4U2proxy) These are fixed. > > - Running as a Read only domain controller (RODC) > > (https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_wi

Bug#963899: Build smbclient against MIT krb5

2022-11-10 Thread Andrew Bartlett
l ad-dc code. This is the only approach, a separate build profile.  If there is the motivation, the user could be allowed to install one suite or the other I guess. Andrew Bartlett -- Andrew Bartlett (he/him)https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Developer, Catalyst IThttps://catalyst.net.nz/services/samba

Bug#1023609: smbclient does not work with kerberos ccache of KEYRING: type

2022-11-07 Thread Andrew Bartlett
AD DC at this time. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba

Bug#1022945: smbclient: ambiguous duplications in the smbclient(1) manpage

2022-11-03 Thread Andrew Bartlett
manpages and even more importantly code use common elements so that we have consistent behaviour and consistent documentation, the rough edges just need a clean up and this would be an awesome contributed patch, as it just takes time. Andrew Bartlett On Thu, 2022-11-03 at 20:04 +0100, Patrice Duroux

Bug#696634: marked as done (samba-common: logfile log.%m no longer supported in samba4)

2022-11-03 Thread Andrew Bartlett
What is going on is that smbd still supports the % macros in places, but the AD DC (once known as samba4) stripped that out in a rush to be rid of global variables, and never got it back, even when the two parts of the codebase were stitched back into one project.

Bug#991767: samba: Attempt to change password over IPv6 using kpasswd fails on AD DC server

2022-10-23 Thread Andrew Bartlett
Given that Debian 11 Bullseye has 4.13.13 now I think this can be closed as fixed.

Bug#833287: A proper fix for Samba plugins linking against other libraries is upstream

2022-10-23 Thread Andrew Bartlett
-contained. Andrew, -- Andrew Bartlett (he/him)https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Developer, Catalyst IThttps://catalyst.net.nz/services/samba

Bug#1013259: samba-libs: Possible policy violation

2022-06-20 Thread Andrew Bartlett
eam Samba doesn't have the resources to provide a stable ABI to libndr, but the output of PIDL (eg compile-time API) should still work. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://c

Bug#1013205: [Pkg-samba-maint] Bug#1013205: Bug#1013205: samba-common: samba no longer installable on sparc64 due to impossible version conflict

2022-06-20 Thread Andrew Bartlett
very time-consuming. So it needs either some external effort or for someone impacted enough by it do fund a developer to dig into it for them. Sorry! Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba Samba Development and Support, Catalyst IT - Expert Open Source Solutions

Bug#1012783: samba: Non upstream changes in source tarball

2022-06-13 Thread Andrew Bartlett
manpages, > and html files. These are generated by the Samba Team at tarball creation time (eg waf dist), just not checked into git. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT ht

Bug#1012240: [Pkg-samba-maint] Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Andrew Bartlett
ng reason for this we should check into this. There have been regressions in the past, so if only expressed in packaging this might be historical. -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://cataly

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Andrew Bartlett
On Thu, 2022-06-02 at 18:37 +0300, Michael Tokarev wrote: > 02.06.2022 10:38, Andrew Bartlett wrote: > > > Just make sure we don't get the opposite problem if smbd is > > installed > > without winbindd. > > (I've not checked the deps, but upstream you can still

Bug#1012240: [Pkg-samba-maint] Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Andrew Bartlett
Just make sure we don't get the opposite problem if smbd is installed without winbindd. (I've not checked the deps, but upstream you can still run smbd that without winbindd for a standalone fileserver)

Bug#971249: [Pkg-samba-maint] Bug#971249: waf: CHECK_VALUEOF does not work during cross compilation

2022-05-08 Thread Andrew Bartlett
like > this one, to be able to run the small test binaries in an emulated > mode, > provided you do have the foreign libs installed on the system. Yes > it > is not the fastest, but for sizeof/valueof tests like this it will > Just Work, hopefully... This would seem to be the b

Bug#1006875: samba-libs: The dependency on python3-talloc breaks multiarch support

2022-03-31 Thread Andrew Bartlett
good reminder that it should get moved behind --enable-selftest really. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba Samba Development and Support, Catalyst IT - Expert Open Source Solutions

Bug#1006875: samba-libs: The dependency on python3-talloc breaks multiarch support

2022-03-31 Thread Andrew Bartlett
n-38-x86-64-linux-gnu-samba4.so is indeed a normal library linked to by other bits of Samba that links to python (it opens python modules and runs them). With some work that could possibly be removed for a production build, the use case ends up only being smbtorture, but currently it is the case. So movi

Bug#1007835: [Pkg-samba-maint] Bug#1007835: samba: Full audit logs all activity instead of selected only -- error after upgrade from buster to bullseye

2022-03-17 Thread Andrew Bartlett
t versions (I've not checked 4.13). Andrew Bartlett On Thu, 2022-03-17 at 16:45 +0100, Leszek Dubiel wrote: > Package: samba > Version: 2:4.13.13+dfsg-1~deb11u3 > Severity: normal > > After upgrade from buster to bullseye samba full audit started to log > ALL activity >

Bug#1006863: tevent: reproducible-builds: build path embedded in various libraries

2022-03-12 Thread Andrew Bartlett
On Sat, 2022-03-12 at 13:53 -0800, Vagrant Cascadian wrote: > On 2022-03-07, Andrew Bartlett wrote: > > I would rather this be discussed and implemented upstream. > > > > For one, the tevent build system is shared with the rest of Samba, and > > if possible this shoul

Bug#1006863: [Pkg-samba-maint] Bug#1006863: tevent: reproducible-builds: build path embedded in various libraries

2022-03-06 Thread Andrew Bartlett
I would rather this be discussed and implemented upstream. For one, the tevent build system is shared with the rest of Samba, and if possible this should be implemented by default for all 'make install' runs, just as we do to strip out the bin/default from -rpath. Andrew Bartlett On Sun, 2022

Bug#1005721: [Pkg-samba-maint] Bug#1005721: samba: Intermittent segfault+coredump when volume_label calls strlen

2022-02-13 Thread Andrew Bartlett
ose that to Debian. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba Samba Development and Support, Catalyst IT - Expert Open Source Solutions

Bug#1002059: [Pkg-samba-maint] Bug#1002059: regression: 2:4.9.5+dfsg-5+deb10u2 breaks SID to UID conversion

2022-02-07 Thread Andrew Bartlett
st-release as a workaround. Please see the work here, per bug 1001068: > In case you have the possiblity, can you test the packages from > https://people.debian.org/~carnil/tmp/samba/2022-01-31/bullseye/ ? > > Regards, > Salvatore Andrew Bartlett -- Andrew Bartlett (he/him) http

Bug#999797: [Pkg-samba-maint] Bug#999797: Unable to net ads join samba to an active directory domain Failed to join domain: failed to connect to AD: Can't contact LDAP server

2021-11-16 Thread Andrew Bartlett
For user assistance, please use the samba mailing list. You are trying to join as 'root' which isn't a user on the domain, let alone an administrative one. You should use "-Uadministrator" to set the correct user. Andrew Bartlett

Bug#998423: samba: Shares with variable substitutions cause core dump upon connection from macOS Big Sur or newer

2021-11-03 Thread Andrew Bartlett
It is important to note that in this case the fix has been applied and backported, so a backport to the debian package would be appropriate (eg upstream-first has been followed). Thanks, Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001

Bug#862338: libsmbclient is not multi-arch co-installable due to samba-libs->python-talloc

2021-11-02 Thread Andrew Bartlett
On Tue, 2021-11-02 at 06:00 +, Vasyl Gello wrote: > Hi Andrew, > > 2 листопада 2021 р. 05:31:26 UTC, Andrew Bartlett > написав(-ла): > >My recommendation is that someone works with us upstream to kill > samba- > >libs, which would reduce the set. It

Bug#862338: libsmbclient is not multi-arch co-installable due to samba-libs->python-talloc

2021-11-01 Thread Andrew Bartlett
Without them, it will fail piuparts > and > receive an rc bug from Andreas Beckmann at best or get angry users at > worst. > > Then Andrew Bartlett pointed out that other packages may depend on > that > functionality via samba-libs. Of course those need to have their > De

Bug#862338: libsmbclient is not multi-arch co-installable due to samba-libs->python-talloc

2021-11-01 Thread Andrew Bartlett
. It is unclear why this library is shipped, but that should be an upstream discussion. Andrew Bartlett On Mon, 2021-11-01 at 22:53 +, Vasyl Gello wrote: > Source: samba > Version: 2:4.13.5+dfsg-2 > Followup-For: Bug #862338 > X-Debbugs-Cc: sath...@debian.org, jo...@debian.org,

Bug#993728: Multi-user data corruption issue

2021-09-05 Thread Andrew Bartlett
and what steps may be triggering the issue. The upstream bugzilla is at https://bugzilla.samba.org Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba

Bug#989646: [Pkg-samba-maint] Bug#989646: samba: Samba AD backup does not work with includes in smb.conf

2021-06-09 Thread Andrew Bartlett
not- upstream patches in any case and and doesn't in general backport them anyway (due resources), so it just makes much more sense to work with us upstream. Sorry! Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba

Bug#912717: msg.sock issue still upstream

2021-05-14 Thread Andrew Bartlett
Sadly still unfixed upstream as far as I can tell: https://bugzilla.samba.org/show_bug.cgi?id=12435 I've checked the code and can't find a commit deliberately fixing this. Confirmation on a current version would be appreciated, particularly to the upstream bug. Sorry, -- Andrew Bartlett (he

Bug#881353: SMB2 is the default in stable version

2021-05-14 Thread Andrew Bartlett
This is now fixed in maintained and Debian stable versions. (I've not learnt the tags handling on this yet). Andrew -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services

Bug#781913: Samba 4.13 is Python3 only

2021-05-14 Thread Andrew Bartlett
Samba 4.11 became Python3 only so this is fixed in (testing, almost stable) bullseye 2:4.13.5+dfsg-2 (unstable) sid 2:4.13.5+dfsg-2 Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst

Bug#765408: Windows 2012 support

2021-05-14 Thread Andrew Bartlett
. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba Samba Development and Support, Catalyst IT - Expert Open Source Solutions

Bug#685349: Still current, but opposite (log level 1 forced)

2021-05-14 Thread Andrew Bartlett
We still overwrite the log level (due to internal handling), but now overwrite it with 1, even if the smb.conf says log level = 2. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Andrew Bartlett
On Fri, 2020-11-27 at 07:59 +0800, Paul Wise wrote: > On Fri, 2020-11-27 at 06:45 +1300, Andrew Bartlett wrote: > > > What should come of this bug is that the testparm output and > > associated > > documentation needs to be much more verbose as to what this means, > >

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Andrew Bartlett
On Thu, 2020-11-26 at 20:55 +0800, Paul Wise wrote: > On Thu, 2020-11-26 at 21:57 +1300, Andrew Bartlett wrote: > > > No, this is just a reflection of what mode GnuTLS is set to on your > > system. > > Hmm, I haven't customised the GnuTLS config, so does that mean th

Bug#975882: samba-common-bin: smb.conf testparm: Weak crypto is allowed

2020-11-26 Thread Andrew Bartlett
don't see anything about crypto in the > default configuration file, so I'm guessing the samba build config is > what is causing this issue. No, this is just a reflection of what mode GnuTLS is set to on your system. Andrew Bartlett -- Andrew Bartlett (he/him)https://samba.org/~abartlet/

Bug#866823: [Pkg-samba-maint] Bug#866823: Bug#866823: samba: does not follow symbolic links

2020-11-23 Thread Andrew Bartlett
, nobody (else) here develops the code (and I do the AD DC) so it becomes message-passing at best. When you are there, explain in painful detail exactly what did work, the smb.conf used in the past, and what now fails to work, including the full FS layout information. Andrew Bartlett On Mon, 2020-11

Bug#972223: [Pkg-samba-maint] Bug#972223: Acknowledgement (samba: NT4-style domain member doesn't work without winbind, but even with it, doesn't work)

2020-10-16 Thread Andrew Bartlett
urce, and then build > and > install that, and restart all daemons, but nothing changes in the > logs. > > How do I debug this? I wouldn't automatically assume this is catastrophic, it could just as easily be code that wants to parse something as a SID if it is a SID (avoiding a remote name look

Bug#971292: samba: Switch to python3-pycryptodome

2020-10-11 Thread Andrew Bartlett
3-crypto are in error, thankfully Samba 4.12 removed that requirement. https://bugzilla.samba.org/show_bug.cgi?id=14255 Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba

Bug#963971: samba-libs: libndr.so.0 gone from latest version, breaks sssd-ad-common dependency

2020-06-29 Thread Andrew Bartlett
aking sssd- > ad-common. We can't put a version number in samba-libs as there are multiple public libraries in there. (Upstream) Samba doesn't promise not to keep doing this - the underlying change has happened before, but this time we were honest and bumped the .so - so sssd may need to have a depende

Bug#960171: max_update_suze(): bad call flug

2020-05-10 Thread Andrew Bartlett
2.3.0-5 > ii libtevent0 0.10.1-4 > ii libwbclient02:4.11.5+dfsg-1+b1 > ii python3 3.8.2-3 > ii python3-crypto 2.6.1-13.1+b1 > ii python3-ldb 2:2.0.8-2 > ii python3-talloc 2.3.0-5 > ii python3-tdb 1.4.2-3+b1 > ii samba-libs 2:4.

Bug#955474: [Pkg-samba-maint] Bug#955474: FTBFS: fatal error: stropts.h: No such file or directory

2020-04-01 Thread Andrew Bartlett
a python bug, it should not be setting HAVE_STROPTS_H. See bug 954582 -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba

Bug#954582: samba: FTBFS glibc/stropts/python issue.

2020-03-30 Thread Andrew Bartlett
Python. The correct fix is for Python not to leak these defines. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba

Bug#953915: samba: Build-Depends on unused libattr1-dev

2020-03-14 Thread Andrew Bartlett
gt; got left behind. If so, upstream's bootstrap package list also needs to be updated, see bootstrap/config.py Do you know at what Samba or OS version libattr stopped being needed? It would be incredibly awesome if someday we could tie these together. Andrew Bartlett -- Andrew Bartlett

Bug#942433: [Pkg-samba-maint] Bug#942433: Protocol negotiation also fails in QEMU smb shares

2019-10-24 Thread Andrew Bartlett
mba or qemu > ? Samba's new minimum protocol default of SMB2 was changed deliberately, the old protocol versions are now deprecated. smbd supports --option= to set smb.conf options, that might be the easiest way to fix this. Andrew Bartlett -- Andrew Bartlett https://samb

Bug#939419: libparse-pidl-perl: version ordering issue.

2019-09-04 Thread Andrew Bartlett
install it from the Samba tarball. PIDL is maintained for Samba's internal use (where we use it extensively, and actively modify it for our needs), it really isn't suitable for external consumption, except by wireshark which has a modified, vendored copy. Andrew Bartlett -- Andrew Bartlet

Bug#929303: Please include backtraces in AD DC

2019-05-21 Thread Andrew Bartlett
. Thanks! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#918432: [Pkg-samba-maint] Bug#918432: Bug#918432: samba: net ads join to armel arch Samba DC failed

2019-02-08 Thread Andrew Bartlett
m adding > too > much lag... I'm very sorry for the intrusive nature of our spam-prevention measures.  I've invited you to create an account. Andrew Bartlett --  Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#918564: [Pkg-samba-maint] Bug#918564: Real libparse-pidl-perl version number is different from its source package

2019-01-19 Thread Andrew Bartlett
mba to preserve the upstream's version number. Samba is upstream for PIDL.  wireshark occasionally syncs their tree with ours, but may well have local patches.  Any other versions are likely incredibly out of date. The version of PIDL really is the Samba version number. Andrew Bartlett --

Bug#909465:

2018-12-15 Thread Andrew Bartlett
hopefully we can get a fix. I don't really understand what is going on here and why our tests don't notice this. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT

Bug#903971: [Pkg-samba-maint] Bug#903971: closed by Mathieu Parent (Re: Bug#903971: ntdb: DoS issues upon offline data corruption, unmaintained upstream)

2018-12-11 Thread Andrew Bartlett
t is a well understood, trusted and reliable component. We are using LMDB in one component (LDB) only for now, and only because of the 4GB limit of TDB. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba

Bug#912340: [Pkg-samba-maint] Bug#912340: [src:samba]: Unreproducible on sid

2018-10-30 Thread Andrew Bartlett
On Wed, 2018-10-31 at 06:08 +1300, Andrew Bartlett wrote: > On Tue, 2018-10-30 at 16:43 +0100, Mathieu Parent wrote: > > > > Source: samba > > Version: 2:4.6.5+dfsg-6 > > Tags: patch > > User: reproducible-bui...@lists.alioth.debian.org > > Usertags: bui

Bug#532856: [Pkg-samba-maint] Bug#532856: Bug#532856: Bug#532856: Bug#532856: closed by Mathieu Parent (Closing " umask settings overridden by Mac OS X 10.5 (Leopard) clients")

2018-07-03 Thread Andrew Bartlett
it ships e.g. /etc/apache2/mods-available/ssl.conf with a fair bit > of info, and there's other docs too). Please take this upstream, with a patch. This isn't the forum, and won't achieve your aims. Sorry, Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Devel

Bug#902883: [Pkg-samba-maint] Bug#902883: FTBFS on arch != amd64 because different libpytalloc-util.*.so name

2018-07-02 Thread Andrew Bartlett
bols doesn't match > completely debian/python3-talloc.symbols See also https://github.com/samba-team/samba/pull/110 for BaT trying to fix this kind of thing on FreeBSD. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.o

Bug#532856: [Pkg-samba-maint] Bug#532856: Bug#532856: Bug#532856: closed by Mathieu Parent (Closing " umask settings overridden by Mac OS X 10.5 (Leopard) clients")

2018-07-01 Thread Andrew Bartlett
On Mon, 2018-07-02 at 01:14 +0200, Josip Rodin wrote: > On Mon, Jul 02, 2018 at 09:41:39AM +1200, Andrew Bartlett wrote: > > > How does that make sense? If the option is called "do X", and fails to > > > do X in some opaque circumstances, how is that not a bu

Bug#532856: [Pkg-samba-maint] Bug#532856: Bug#532856: closed by Mathieu Parent (Closing " umask settings overridden by Mac OS X 10.5 (Leopard) clients")

2018-07-01 Thread Andrew Bartlett
tored by full-time Samba developers. Likewise the upstream bugzilla tracks issues for the project as a whole, and is actively reponded to (mostly) by Samba Team members. Finally, the Debian Samba project has a fairly strict policy of not carrying local patches, so any change has to go via

Bug#899269: [Pkg-samba-maint] Bug#899269: Acknowledgement (samba: upgrade of samba causes smbd crash with "failed to setup guest info")

2018-05-21 Thread Andrew Bartlett
til it gives a more useful answer? Thanks, Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba

Bug#691278: Fixed in Samba 4.8

2018-05-20 Thread Andrew Bartlett
The samba-tool domain provision now bails out early if the password does not meet the minimum criteria, additionally the provision is now much faster so re-running it is not much trouble anyway. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication

Bug#883972: samba: FTBFS on kfreebsd: error: storage size of 'cr' isn't known

2017-12-12 Thread Andrew Bartlett
with the CTDB folks to find a fix? Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#883972: samba: FTBFS on kfreebsd: error: storage size of 'cr' isn't known

2017-12-09 Thread Andrew Bartlett
particular.   (There is very strong preference to not carry Debian-specific patches unless they are already upstream.) Lastly however, it looks like what is desired here is simply not possible: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215202 You may wish to disabled building CTDB on kfreebsd or find a way not to build the tests. Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#878612: please drop dependency on python-talloc from samba-libs

2017-12-05 Thread Andrew Bartlett
cently who tried and failed to patch it over a few months. Hopefully they work out something they are happy with and then Debian can follow. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer

Bug#881239: [Pkg-samba-maint] Bug#881239: Panic on opening file on samba share with Microsoft Project

2017-11-16 Thread Andrew Bartlett
his > vfs? Please don't keep it. It just confuses folks and the code should have been removed upstream much earlier, and we have an alternative that is much safer. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba

Bug#781913: [Pkg-samba-maint] Bug#781913: please build bindings for Python3 and let samba-common-bin use them

2017-10-14 Thread Andrew Bartlett
ries the build system produces. On the hopeful side, upstream Samba did merge patches to allow a build without linking to python recently. Thanks! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#878612: please drop dependency on python-talloc from samba-libs

2017-10-14 Thread Andrew Bartlett
may be needed upstream to change the libraries the build system produces. On the hopeful side, upstream Samba did merge patches to allow a build without linking to python recently. Thanks! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#781913: python3 work ongoing in upstream

2017-10-14 Thread Andrew Bartlett
, we use the C bindings extensively. Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#876984: python-samba: Remove Suggests on python-gpgme

2017-10-14 Thread Andrew Bartlett
s it for part of the expected functionality. However, most users will not use the impacted feature, and the import error is trapped with a helpful message printed. Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#873521: [Pkg-samba-maint] Bug#873521: samba: tls options not compatible with ssl-cert group

2017-08-28 Thread Andrew Bartlett
debian-only patches. Once upstream, you can ask that it be backported, both to a current upstream release and to whatever Debian is shipping. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Develop

Bug#803924: Nice work

2017-07-28 Thread Andrew Bartlett
Thanks for finding a way to get that SIGHUP out to all the processes! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#803924: -HUP needs to be sent more broadly

2017-07-19 Thread Andrew Bartlett
. This is going to need code changes to do properly - adding the reopen- logs smbcontrol as I mention, and having the parent process be responsible for telling the children, or broadcast it, if that hasn't been rewritten out. Andrew Bartlett -- Andrew Bartlett http://samba.org

Bug#459972: nss_wins uses winbind, which only does wins

2017-07-17 Thread Andrew Bartlett
Version: 4.2.0 G'Day, nss_wins now uses winbindd (not direct socket access), and that only does a WINS lookup, not a broadcast lookup. Samba 4.2.14 was forced into all supported releases by the 'badlock' fixes a year ago. Thanks, Andrew Bartlett -- Andrew Bartlett http

Bug#745567: samba starts smbd and nmbd

2017-07-17 Thread Andrew Bartlett
To be clear, the 'samba' binary starts the required components, such as an nbt server similar to nmbd, smbd and winbindd for the use of the AD DC. You should not start these yourself.  Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer

Bug#820997: no smb.conf changes

2017-07-17 Thread Andrew Bartlett
To be clear, winbind is an alias for winbindd, you don't need to worry which you specify in 'server services'. You should not start these yourself.  -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer

Bug#868209: CVE-2017-11103: MitM attack, impersonation of the Kerberos client, known as Orpheus Lyre

2017-07-13 Thread Andrew Bartlett
On Thu, 2017-07-13 at 18:05 +1200, Andrew Bartlett wrote: > On Thu, 2017-07-13 at 07:14 +0200, Raphael Hertzog wrote: > > Source: samba > > Severity: grave > > Tags: security patch > > Version: 2:4.1.11+dfsg-1 > > > > Hi, > > > > the followin

Bug#868209: CVE-2017-11103: MitM attack, impersonation of the Kerberos client, known as Orpheus Lyre

2017-07-13 Thread Andrew Bartlett
. Proposed updates are in jessie and stretch branches at: git://git.samba.org/abartlet/samba-debian.git I've only built them, not tested them.  Then again, the upstream patches were not manually tested either (we relied on autobuild), such was the rush... I can upload the buil

Bug#866138: samba-ad-dc package metadata unused

2017-06-27 Thread Andrew Bartlett
in any case. Perhaps we could restore running provision, but even that I think is better done manually. (untested) Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http

Bug#833287: feedback request about patch

2017-06-14 Thread Andrew Bartlett
It is best to go to samba-technical for this kind of feedback. We really would prefer this kind of patch was upstream, not in packages. Thanks, Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development

Bug#859390: new upstream (4.6)

2017-04-03 Thread Andrew Bartlett
elp. To be clear, to package a new samba release, first (in this order) we need packaged: - talloc - tdb - tevent - ldb Then Samba can be packaged. It is all quite practical, but the thing I find most trouble is the git foo required for bringing in a new upstream release into git- buildpackage

Bug#857110: [Pkg-samba-maint] Bug#857110: openchangeclient: executables trigger relocation error

2017-03-08 Thread Andrew Bartlett
be possible to take over and or revive the project > but not without some level of funding. Ideally the Samba community > would take over the project but I'm not sure if they are interested. We are not looking to fold OpenChange in to Samba. We are busy enough with the AD DC - those who had a cross-over interest were already involved in the OpenChange project. Sorry, Andrew Bartlett

Bug#850908: samba: compile in support for GPGME ("password hash gpg key ids" config option)

2017-01-11 Thread Andrew Bartlett
ash.c:1546) > > I've also attached patch for the relevant control files of the > package. Thanks. I agree we should support the gpgme extension in the Debian packages. I'm not actively involved right now, but I hope the patch can be merged soon, otherwise bug me in a couple of weeks, and I'll page back in my debian packaging skills ;-) Andrew Bartlett

Bug#836433: [Pkg-samba-maint] Bug#836433: samba: install "hangs", synaptic more details reveals pager prompt

2016-09-05 Thread Andrew Bartlett
ortunately, this is too late, but having the list of processes > during the problem would have helped. This (we/I have had a number of reports in various places) is due to the very long NEWS entry, that causes the pager to trigger in situations that most admins encounter rarely.   As I understan

Bug#835404: [Pkg-samba-maint] Bug#835404: samba4: cannot connect with plaintext password

2016-08-25 Thread Andrew Bartlett
oint where less than 1 user per user needs it enough to make contact (plaintext passwords are not to be encouraged...) Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT

Bug#830304: python-novaclient: Fails to boot against openstack nova kilo

2016-07-07 Thread Andrew Bartlett
Package: python-novaclient Version: 2:3.3.1-2 Severity: important Tags: upstream Dear Maintainer, * What led up to the situation? dist-upgrade to 2:3.3.1-2 * What exactly did you do (or not do) that was effective (or ineffective)? nova boot or nova list --debug * What was the

Bug#804781: [Pkg-samba-maint] Bug#804781: vfs_snapper missing

2016-06-25 Thread Andrew Bartlett
ie/amd64/samba-vfs-modules/filelist > > related ubuntu bug > https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572950?comments > =all Any chance of a tested patch to the packaging for this? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ A

Bug#828054: NTLM apache2 auth broken in samba

2016-06-24 Thread Andrew Bartlett
trace (.pcap format) uploaded as a private attachment to a bug in Samba's bugzilla is the next step we need to move this forward. You should also change the password used in this log (it isn't plaintext, but no NTLM mech is very strong). Thanks, Andrew Bartlett -- Andrew Ba

Bug#827141: winbind: regression in 4.2.10: extremely slow user/group name lookup

2016-06-12 Thread Andrew Bartlett
delay in dealing with regressions here, so any assistance most welcome (package 4.3.12 and then the bump to 4.2.13 will be trivial). Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support,

Bug#820982: Bug#821811: [Pkg-samba-maint] Bug#821811: samba: badlock patch breaks trust relationship

2016-06-09 Thread Andrew Bartlett
On Thu, 2016-05-26 at 11:40 +0200, Santiago Ruano Rincón wrote: > El 23/05/16 a las 22:28, Andrew Bartlett escribió: > > > > On Wed, 2016-05-18 at 15:47 -0400, Antoine Beaupré wrote: > > > > > > On 2016-04-29 08:55:43, Santiago Ruano Rincón wrote: > &

Bug#825511: [Pkg-samba-maint] Bug#825511: smbcontrol manpage refers to Samba 3

2016-05-28 Thread Andrew Bartlett
tom). > > If this manpage is correct for Samba 4, could you write instead that > it refers to > Samba 4 suite ? Any chance you can prepare such a patch for upstream? Ideally it would automatically embed the version, but just fixing any remaining such issues in Samba git master would be a

Bug#821811: [Pkg-samba-maint] Bug#821811: samba: badlock patch breaks trust relationship

2016-05-23 Thread Andrew Bartlett
is point. I'm happy to review things, just not had the time to switch back on to debian matters. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

Bug#741492: FW: Bug#741492: samba: all process have same title (setproctitle not

2016-05-11 Thread Andrew Bartlett
e between first (mail from 6.5.2016) and second > compilations (9.5.2016)? It will be due to the libbsd versions. Someone just needs to patch Samba's build system to link the suggested libbsd-ctr static lib against our binaries. Andrew Bartlett -- Andrew Bartlett http://s

Bug#823487: [Pkg-samba-maint] Bug#823487: samba update from 4.3.8 to 4.4.3 fails

2016-05-05 Thread Andrew Bartlett
l manually glade and python-glade2 first for synaptic > to > be able to solve the update process. > > I suggest that samba-libs 2:4.4.3+dfsg-2 depend on glade and > python-glade2 to avoid that. > What part of Samba is using python-glade2? Is this perhaps some kind of conflic

Bug#820982: Subscription to 820...@bugs.debian.org successful

2016-05-03 Thread Andrew Bartlett
, we have not re-built the 3.6 packages yet.  I was waiting to ensure that had all settled down before we re-sent out old-stable packages. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support,

Bug#803924: samba: missing logrotate for /var/log/samba/log.samba

2016-04-30 Thread Andrew Bartlett
disk filling bug.;) We really shouldn't restart samba just to rotate the logs. Try sending a SIGHUP instead. However, ideally we would patch a reopen -logs command into smbcontrol, that would be nicer than sending a signal. Andrew Bartlett -- Andrew Bartlett http:

Bug#750593: This bug prevents Samba including correct manpages

2016-04-30 Thread Andrew Bartlett
as the binaries, producing a less-confusing output. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

  1   2   3   >