[Pkg-samba-maint] Bug#767990: samba: dependency on too old version of Heimdal kerberos

[Oxan van Leeuwen]

Package: samba
Version: 2:4.1.13+dfsg-2
Severity: important

Dear Maintainer,

The Samba version currently in jessie has a dependency on a too old version
of Heimdal Kerberos. When I installed the Samba package from jessie on a wheezy
 host, Samba failed to start and samba-tool gave the following output:

23:11 oxan at oppenheimer [#125   0] /var/log/samba$ samba-tool testparm --parameter-name="server role"  
Traceback (most recent call last):
  File "/usr/bin/samba-tool", line 33, in <module>
    from samba.netcmd.main import cmd_sambatool
  File "/usr/lib/python2.7/dist-packages/samba/__init__.py", line 50, in <module>
    from samba._ldb import Ldb as _Ldb
ImportError: /usr/lib/x86_64-linux-gnu/libgssapi.so.3: symbol krb5_ntlm_init_get_challange, version HEIMDAL_KRB5_2.0 not defined in file libkrb5.so.26 with link time reference

This was using version 1.6~git20120403+dfsg1-2 of the various Heimdal library
packages. Once I updated them all to the version in jessie (1.6~rc2+dfsg-8), 
Samba started and samba-tool started working again:

23:12 oxan at oppenheimer [#127   0] /var/log/samba$ samba-tool testparm --parameter-name="server role"  
active directory domain controller

I currently have the following heimdal library packages installed, which I 
think are all pulled in by Samba:

23:18 oxan at oppenheimer [#129   0] /var/log/samba$ aptitude search heimdal~i
i A libasn1-8-heimdal               - Heimdal Kerberos - ASN.1 library
i A libgssapi3-heimdal              - Heimdal Kerberos - GSSAPI support library
i A libhcrypto4-heimdal             - Heimdal Kerberos - crypto library
i A libhdb9-heimdal                 - Heimdal Kerberos - kadmin server library
i A libheimbase1-heimdal            - Heimdal Kerberos - Base library
i A libheimntlm0-heimdal            - Heimdal Kerberos - NTLM support library
i A libhx509-5-heimdal              - Heimdal Kerberos - X509 support library
i A libkdc2-heimdal                 - Heimdal Kerberos - KDC support library
i A libkrb5-26-heimdal              - Heimdal Kerberos - libraries
i A libroken18-heimdal              - Heimdal Kerberos - roken support library
i A libwind0-heimdal                - Heimdal Kerberos - stringprep implementati

Please update the version constraint in the dependency.

-- System Information:
Debian Release: 7.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (110, 'testing-updates'), (110, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/6 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages samba depends on:
ii  adduser                              3.113+nmu3
ii  dpkg                                 1.17.13
ii  libasn1-8-heimdal                    1.6~rc2+dfsg-8
ii  libbsd0                              0.7.0-2
ii  libc6                                2.19-12
ii  libcomerr2                           1.42.5-1.1
ii  libhdb9-heimdal [heimdal-hdb-api-8]  1.6~rc2+dfsg-8
ii  libkdc2-heimdal                      1.6~rc2+dfsg-8
ii  libkrb5-26-heimdal                   1.6~rc2+dfsg-8
ii  libldb1                              1:1.1.17-1~bpo70+0
ii  libpam-modules                       1.1.3-7.1
ii  libpam-runtime                       1.1.3-7.1
ii  libpopt0                             1.16-7
ii  libpython2.7                         2.7.8-11
ii  libroken18-heimdal                   1.6~rc2+dfsg-8
ii  libtalloc2                           2.1.1-2
ii  libtdb1                              1.3.1-1
ii  libtevent0                           0.9.21-1
ii  lsb-base                             4.1+Debian8+deb7u1
ii  multiarch-support                    2.13-38+deb7u6
ii  procps                               1:3.3.3-3
ii  python                               2.7.8-1
ii  python-dnspython                     1.10.0-1
ii  python-ntdb                          1.0-5
ii  python-samba                         2:4.1.13+dfsg-2
pn  python2.7:any                        <none>
ii  samba-common                         2:4.1.13+dfsg-2
ii  samba-common-bin                     2:4.1.13+dfsg-2
ii  samba-dsdb-modules                   2:4.1.13+dfsg-2
ii  samba-libs                           2:4.1.13+dfsg-2
ii  tdb-tools                            1.3.0-1.1~bpo70+0
ii  update-inetd                         4.43

Versions of packages samba recommends:
ii  attr               1:2.4.46-8
ii  logrotate          3.8.1-4
ii  samba-vfs-modules  2:4.1.13+dfsg-2

Versions of packages samba suggests:
pn  bind9          <none>
pn  bind9utils     <none>
pn  ctdb           <none>
ii  ldb-tools      1:1.1.17-1~bpo70+0
ii  ntp            1:4.2.6.p5+dfsg-2
pn  smbldap-tools  <none>
ii  winbind        2:4.1.13+dfsg-2

-- Configuration Files:
/etc/logrotate.d/samba changed [not included]

-- no debconf information