[Pkg-samba-maint] Bug#408981: samba: smbd 3.0.23a and later does parse multiple backends in "passdb backend"

[Modestas Vainius]

Hi,

2007 m. sausis 30 d., antradienis 08:04, Christian Perrier rašė:
> According to upstream, chained backends for "passdb backend" are no
> longer supported:
>
> (3.0.23 release notes)
> The "passdb backend" parameter no long accepts multiple backends
> in a chaining configuration.  Also be aware that the SQL and XML
> based passdb modules have been removed in this release.  More
> information of external support for a SQL passdb module can be
> found at http://pdbsql.sourceforge.net/.
Yeah, I noticed that later. I was kind of surprised to see a newer samba 
release dropping features which were working properly.

> Moreover, smbd now fails when that line contains a comma to separate
> arguments. See the numerous bug reports for the samba package about
> it.
>
> The samba packaging team decided to include code for fixing smb.conf
> *when that file contains the (wrong) value we were providing by
> default on sarge*, namely:
>
> passbd backend = tdbsam, guest
>
> We *only* fix the default provided smb.conf file, *not* user crafted
> smb.conf file, to respect the wise Debian package mantra: "thou shalt
> not change user-modified settings".
OK, so that's why I suggest adding a debconf note which would appear when 
upgrading from 3.0.22 or earlier to 3.0.23 or later if a comma or a space is 
found in "passdb backend" parameter (should be pretty easy to implement). 
Users need to know about this change in advance, because samba might start 
failing in very weird and confusing ways like in my case. I personally wasted 
quite some time checking slapd, getting earlier versions from snapshot.d.n. 
Reading release notes from 3.0.14 to 3.0.23d didn't appear a viable option at 
that time either (due to length). Searching release notes turned out to be 
useless because I was looking for LDAP changes (the error indicated LDAP 
breakage). All this could be avoided by a simple note.

> You should remove the comma and everything will work as before. Please
> note, however that "tdbsam" here is now useless.
It's not just useless, it _breaks_ things!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20070130/2ce64ea3/attachment.pgp