winbind is not started before samba, but should

Bug #315427 reported by gorgooger
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Hi,
in ubuntu 8.10 server (possibly other)
winbind should be started before samba is running
with same S20... winbind is started AFTER samba so resolving user/groups can be messed up.
cups should also be clearly started before samba
so please increase the startup number of samba ...
Thanks
Rainer Peter Feller
may be this could be exploited ...

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

Revision history for this message
gorgooger (gorgooger) wrote : Re: [Bug 315427] Re: winbind is not started before samba, but should

Hm,
since samba would create AND use its own local UID's to manage
privileges you could get access to files which you couldn't read if
winbind would be started before samba ...
Yes we have tested it ...

Wer das Kapital wählt wird durch das Kapital regiert!

Who elects the capital, is governed by the capital!

  H
CUH Rainer Peter Feller
  H

On Fri, Jan 9, 2009 at 6:38 PM, Jamie Strandboge <email address hidden> wrote:
> Thanks for taking the time to report this bug and helping to make Ubuntu
> better. We appreciate the difficulties you are facing, but this appears
> to be a "regular" (non-security) bug. I have unmarked it as a security
> issue since this bug does not show evidence of allowing attackers to
> cross privilege boundaries nor directly cause loss of data/privacy.
> Please feel free to report any other bugs you may find.
>
> ** Visibility changed to: Public
>
> ** This bug is no longer flagged as a security issue
>
> --
> winbind is not started before samba, but should
> https://bugs.launchpad.net/bugs/315427
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in Ubuntu: New
>
> Bug description:
> Hi,
> in ubuntu 8.10 server (possibly other)
> winbind should be started before samba is running
> with same S20... winbind is started AFTER samba so resolving user/groups can be messed up.
> cups should also be clearly started before samba
> so please increase the startup number of samba ...
> Thanks
> Rainer Peter Feller
> may be this could be exploited ...
>

Revision history for this message
Paul Dufresne (paulduf) wrote :

Clear enough for a developer to check and decide, so I Confirm this bug.

Changed in samba:
status: New → Confirmed
Revision history for this message
Chuck Short (zulcss) wrote :

Hi,

Thanks for the bug report this will probably be fixed in karmic+1.

Regards
chuck

Changed in samba (Ubuntu):
importance: Undecided → Wishlist
Revision history for this message
Chuck Short (zulcss) wrote :

I believe this is fixed for lucid now. Please re-open if it isnt.

Regards
chuck

Changed in samba (Ubuntu):
status: Confirmed → Fix Released
Revision history for this message
Alfred (alfred-egger) wrote :

This bug still exists in 11.04 Natty.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.