User authentication is broken with 2:4.15.13+dfsg-0ubuntu0.20.04.1 package
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
samba (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned | ||
Focal |
Confirmed
|
Critical
|
Unassigned |
Bug Description
Upgrading from samba 2:4.13.
From the mac, I see
[2023/03/09 10:20:43.242196, 1] ../../source3/
lookup_
From Windows, I see:
[2023/03/09 10:21:49.274935, 1] ../../source3/
create_
[2023/03/09 10:21:49.275020, 1] ../../source3/
create_
Rolling back to 2:4.13.
There also appears to be a dependency bug. If I run apt-mark hold samba and then upgrade, samba is broken on startup with:
Mar 09 10:31:36 samba systemd[1]: Failed to start Samba SMB Daemon.
Mar 09 10:31:59 samba systemd[1]: Starting Samba SMB Daemon...
Mar 09 10:31:59 samba smbd[1180]: /usr/sbin/smbd: /lib/x86_
Mar 09 10:31:59 samba smbd[1180]: /usr/sbin/smbd: /lib/x86_
I had to manually mark a hold on libldb2 as well.
Here's the relevant config. I've pruned the shares to just the two listed above, but in practice no shares work.
The username map handles mapping Microsoft account email addresses to unix usernames for automatic authentication from Windows hosts.
[global]
log level = 1
workgroup = WORKGROUP
server string = %h server (Samba, Ubuntu)
max log size = 10000
logging = file
panic action = /usr/share/
server role = standalone server
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\
pam password change = yes
map to guest = bad user
usershare allow guests = yes
inherit permissions = yes
username map = /etc/samba/
unix extensions = no
vfs objects = catia fruit streams_xattr acl_xattr
fruit:nfs_aces = no
fruit:model = MacSamba
fruit:resource = xattr
fruit:encoding = native
fruit:metadata = stream
[media]
comment = media
browseable = yes
valid users = <redacted>
force user = media
writeable = yes
path = /main/media
create mask = 0774
directory mask = 0775
[imazing]
browseable = yes
valid users = <redacted>
guest ok = no
force user = media
writeable = yes
path = /backups/imazing
create mask = 0774
directory mask = 0775
tags: | added: regression-update |
Changed in samba (Ubuntu Focal): | |
status: | New → Confirmed |
importance: | Undecided → Critical |
Status changed to 'Confirmed' because the bug affects multiple users.