[Pkg-samba-maint] Bug#427444: Bug#427444: Etch / Samba server weirdness

[Steve Langasek]

On Sun, Jun 03, 2007 at 11:04:38PM -0400, Michael Lueck wrote:
> Package: samba
> Version: 3.0.24-6etch2

> I am noticing weirdness testing Etch / Samba. Specifically:

> 1) Wrong / Missing Windows group memberships (domain groups, etc...)
> 2) Inability to use the 'net' command to assign the permission to add
> workstations to the domain for a special account
> 3) Inability to make the domain admin group printer admins with the net
> command

What precise commands are you running, what does your smb.conf look like,
what errors are you getting, in what sense are your Windows group
memberships "wrong"?  You haven't given anything here that's directly
verifiable and debuggable.

> I just now booted off a HDD in the same machine loaded with Sarge,
> installed the 3.0.24 packages from samba.org, and following the same steps
> received the expected results.

The package version you reported this against is not identical to pristine
3.0.24; it includes the security fixes for CVE-2007-2444, CVE-2007-2446, and
CVE-2007-2447.  The upstream fix for CVE-2007-2446 is known to have
introduced regressions, which are unfixed in 3.0.24-6etch2 (and in 3.0.25)
and are fixed in 3.0.24-6etch4, which is still pending release by the
security team.

You can find a copy of this package for i386 at
<http://people.debian.org/~vorlon/samba/>.

> Unfortunately we do not have time to look into this further as we are
> doing a demonstration of "Samba for Windows clients" next weekend... so
> defniately taking the Sarge HDD along, and planning to load Ubuntu Server
> 7.04 on the HDD currently with Debian Etch.

So you have no intention of working with us to provide the information
needed to resolve this issue, and I should close this report as a troll
rather than a bug report from a Debian user?

If the Ubuntu package works, then you are almost certainly experiencing bug
#425680/#426002, which appears to have been corrected in the most recent
security update for Feisty and which is fixed in 3.0.24-6etch4 for etch.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon at debian.org                                   http://www.debian.org/