2010-04-30 12:23:32 |
Alexander Brinkman |
bug |
|
|
added bug |
2010-04-30 17:02:02 |
Pasi Sjöholm |
summary |
CacheEntryExpire setting ignored |
CacheEntryExpire setting ignored & default value of 4 hours is too low |
|
2010-05-03 10:17:48 |
Marc Steffens |
description |
Binary package hint: likewise-open
likewise-open 5.4.0.42111-2ubuntu1 on 10.04 64 bit
The CacheEntryExpire setting seems to be ignored. I changed the setting to: "CacheEntryExpiry"=dword:0013C680 then imported the registry file and issued a lw-refresh-configuration. Cleared the cache, rebooted the machine and logged in with a domain user. This worked as expected.
Next I took the machine down, removed it from the network and booted. I was able to login used cached credentials. However 4 hours later I ran into problems. getent returned no information and logging on with the user was not allowed anymore (user not found). Since 4h (dword:00003840) is the default value it would seem that my updated entry was not picked up by lsassd. |
Binary package hint: likewise-open
likewise-open 5.4.0.42111-2ubuntu1 on 10.04 64 bit
The CacheEntryExpire setting seems to be ignored. I changed the setting to: "CacheEntryExpiry"=dword:0013C680 then imported the registry file and issued a lw-refresh-configuration. Cleared the cache, rebooted the machine and logged in with a domain user. This worked as expected.
Next I took the machine down, removed it from the network and booted. I was able to login used cached credentials. However 4 hours later I ran into problems. getent returned no information and logging on with the user was not allowed anymore (user not found). Since 4h (dword:00003840) is the default value it would seem that my updated entry was not picked up by lsassd.
|
|
2010-05-03 16:34:12 |
Gerald Carter |
likewise-open (Ubuntu): status |
New |
In Progress |
|
2010-05-03 16:34:19 |
Gerald Carter |
likewise-open (Ubuntu): assignee |
|
Gerald Carter (coffeedude.jerry) |
|
2010-06-15 23:58:12 |
Aaron C. de Bruyn |
bug |
|
|
added subscriber Aaron C. de Bruyn |
2010-06-24 13:43:47 |
Gerald Carter |
likewise-open (Ubuntu): status |
In Progress |
Fix Committed |
|
2010-06-24 15:34:26 |
Pasi Sjöholm |
nominated for series |
|
Ubuntu Lucid |
|
2010-07-14 18:22:03 |
Dan Joakim Eiworth |
bug |
|
|
added subscriber jeiworth |
2010-07-14 19:22:01 |
Etienne Goyer |
bug |
|
|
added subscriber Etienne Goyer |
2010-08-06 11:44:04 |
Ben Hagen |
bug |
|
|
added subscriber Ben "C7" Hagen |
2010-08-30 18:51:20 |
Henric Carlström |
removed subscriber Henric Carlström |
|
|
|
2010-10-20 16:43:29 |
Scott Salley |
branch linked |
|
lp:~ssalley/ubuntu/maverick/likewise-open/likewise-open.fix627272 |
|
2010-12-01 20:50:45 |
Launchpad Janitor |
branch linked |
|
lp:~ssalley/likewise-open/likewise-open.fix627272 |
|
2010-12-01 21:19:28 |
Launchpad Janitor |
branch linked |
|
lp:~ssalley/ubuntu/lucid/likewise-open/likewise-open.fix627272 |
|
2011-01-06 23:27:44 |
Mark Russell |
bug |
|
|
added subscriber Mark Russell |
2011-02-14 13:58:04 |
Eric Williams |
description |
Binary package hint: likewise-open
likewise-open 5.4.0.42111-2ubuntu1 on 10.04 64 bit
The CacheEntryExpire setting seems to be ignored. I changed the setting to: "CacheEntryExpiry"=dword:0013C680 then imported the registry file and issued a lw-refresh-configuration. Cleared the cache, rebooted the machine and logged in with a domain user. This worked as expected.
Next I took the machine down, removed it from the network and booted. I was able to login used cached credentials. However 4 hours later I ran into problems. getent returned no information and logging on with the user was not allowed anymore (user not found). Since 4h (dword:00003840) is the default value it would seem that my updated entry was not picked up by lsassd.
|
Binary package hint: likewise-open
likewise-open 5.4.0.42111-2ubuntu1 on 10.04 64 bit
The CacheEntryExpire setting seems to be ignored. I changed the setting to: "CacheEntryExpiry"=dword:0013C680 then imported the registry file and issued a lw-refresh-configuration. Cleared the cache, rebooted the machine and logged in with a domain user. This worked as expected.
Next I took the machine down, removed it from the network and booted. I was able to login used cached credentials. However 4 hours later I ran into problems. getent returned no information and logging on with the user was not allowed anymore (user not found). Since 4h (dword:00003840) is the default value it would seem that my updated entry was not picked up by lsassd.
IMPACT
======
Having a short 4h expiration period prevents laptops from being used for any length of time outside the corporate network, including even overnight. Not being able to effectively change this setting prevents the software from being deployed in enterprise environments.
TEST CASE
=========
1. Install likewise-open
2. using lwregshell, check registry value for CacheEntryExpiry:
[HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory]^M
"AssumeDefaultDomain"=dword:00000000^M
"CacheEntryExpiry"=dword:00003840^M
|
|
2011-02-14 13:58:45 |
Eric Williams |
bug |
|
|
added subscriber Canonical PSE |
2011-02-15 12:18:14 |
Eric Williams |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2011-02-16 07:31:30 |
Martin Pitt |
bug task added |
|
likewise-open (Ubuntu Lucid) |
|
2011-03-03 20:44:27 |
Launchpad Janitor |
branch linked |
|
lp:~zulcss/ubuntu/lucid/likewise-open/likewise-open-sru |
|
2011-03-03 20:52:29 |
Nate Gingras |
removed subscriber Nate Gingras |
|
|
|
2011-03-04 10:06:59 |
Koen Biermans |
removed subscriber Koen Biermans |
|
|
|
2011-09-19 21:16:55 |
Ubuntu Foundations Team Bug Bot |
tags |
|
testcase |
|
2011-12-08 12:00:35 |
Ben Hagen |
removed subscriber Ben Hagen |
|
|
|
2015-06-17 12:03:42 |
Rolf Leggewie |
likewise-open (Ubuntu Lucid): status |
New |
Won't Fix |
|
2015-06-17 13:02:39 |
Pierre Girard |
bug |
|
|
added subscriber Pierre Girard |
2015-06-17 13:02:45 |
Pierre Girard |
removed subscriber Pierre Girard |
|
|
|