[Pkg-samba-maint] Bug#1036587: samba: named crashes on DLZ zone update

[Steven Monai]

Package: samba
Version: 2:4.17.8+dfsg-1
Severity: important
X-Debbugs-Cc: stevemoca at gmail.com

Dear Maintainer,

Using samba 4.17.8 with bind_dlz DNS backend. A new DC is joined to an 
existing domain with a single 4.17.8 DC.

When samba_dnsupdate runs on the newly joined DC, it causes the local 
named to abort with an assertion failure when adding the necessary DNS RRs.

This issue is potentially show-stopping for new Bookworm DCs, as it 
prevents the necessary DNS RRs (NS and SRV records) from being created.

There is a patch upstream for this issue, for both 4.18.latest and 
4.17.latest (see: https://bugzilla.samba.org/show_bug.cgi?id=14030 ).

Upstream says the patch is vetted (see: 
https://lists.samba.org/archive/samba/2023-May/245231.html ).

I hope this fix can make it into Bookworm!

Thanks for your time.

Cheers,
-S.M.
--


-- Package-specific info:
* /etc/samba/smb.conf present, but not attached
* /var/lib/samba/dhcp.conf not present

-- System Information:
Debian Release: 12.0
   APT prefers testing-security
   APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-9-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages samba depends on:
ii  init-system-helpers  1.65.2
ii  libbsd0              0.11.7-2
ii  libc6                2.36-9
ii  libcups2             2.4.2-3
ii  libgnutls30          3.7.9-2
ii  libldap-2.5-0        2.5.13+dfsg-5
ii  libldb2              2:2.6.2+samba4.17.8+dfsg-1
ii  libpam-modules       1.5.2-6
ii  libpam-runtime       1.5.2-6
ii  libpopt0             1.19+dfsg-1
ii  libtalloc2           2.4.0-f2
ii  libtasn1-6           4.19.0-2
ii  libtdb1              1.4.8-2
ii  libtevent0           0.14.1-1
ii  passwd               1:4.13+dfsg1-1+b1
ii  procps               2:4.0.2-3
ii  python3              3.11.2-1+b1
ii  python3-dnspython    2.3.0-1
ii  python3-samba        2:4.17.8+dfsg-1
ii  samba-common         2:4.17.8+dfsg-1
ii  samba-common-bin     2:4.17.8+dfsg-1
ii  samba-libs           2:4.17.8+dfsg-1
ii  tdb-tools            1.4.8-2

Versions of packages samba recommends:
ii  attr                1:2.5.1-4
ii  logrotate           3.21.0-1
ii  python3-markdown    3.4.1-2
ii  samba-ad-provision  2:4.17.8+dfsg-1
ii  samba-dsdb-modules  2:4.17.8+dfsg-1
ii  samba-vfs-modules   2:4.17.8+dfsg-1

Versions of packages samba suggests:
ii  bind9                     1:9.18.12-1
ii  bind9-utils [bind9utils]  1:9.18.12-1
ii  chrony                    4.3-2+deb12u1
pn  ctdb                      <none>
ii  ldb-tools                 2:2.6.2+samba4.17.8+dfsg-1
pn  ufw                       <none>
ii  winbind                   2:4.17.8+dfsg-1

-- no debconf information