cifs-utils 2.6.6 broken with kerberos

Bug #1671445 reported by Marcel
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
cifs-utils (Debian)
Fix Released
Unknown
cifs-utils (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Current alpha2 of Ubuntu 17.04 ships with version 6.6 of cifs-utils.

This version is buggy, when used with kerberos authentication.

This has also been confirmed by the samba team:

https://lists.samba.org/archive/samba-technical/2017-March/119036.html

According to this post, the bug should be fixed with version 6.7
of cifs-utils.

Please upgrade/fix package for final release of Ubuntu 17.04.

More details:
Version 6.6 does only use
    /tmp/krb5cc_<uid>
style credential caches. Ubuntu however create
    /tmp/krb5cc_<uid>_<random>
filenames.

Kerberos based cifs mounts do fail because of this.

Revision history for this message
Marcel (linux-ng) wrote :

A more detailed bug description was supplied as a debian bug report:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854607

The current cifs-utils version 6.7 seems to be published in the
debian unstable tree to fix this issue.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in cifs-utils (Ubuntu):
status: New → Confirmed
Revision history for this message
Reimar Döffinger (reimar-doeffinger) wrote :

Considering that cifs+kerberos mounting is completely broken, please either upgrade cifs-utils to 6.6 or drop 6.6 and provide 6.4 instead (which works just fine even in a 17.04 system).
For anyone needing a workaround, add xenial to /etc/apt/sources.list and downgrade cifs-utils to 6.4.

Revision history for this message
Reimar Döffinger (reimar-doeffinger) wrote :

I obviously meant "upgrade to 6.7". If there are concerns with that, at least putting it into -proposed or similar would provide a nicer fix for anyone needing it than having to install the xenial package.

Changed in cifs-utils (Debian):
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.