localized pam == no samba password changing

Bug #139265 reported by Steve Langasek on 2007-09-13
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Andrew Mitchell

Bug Description

Binary package hint: samba

To apply password change requests from Samba clients to system passwords and not just to Samba passwords, Samba invokes PAM either directly or by way of /usr/bin/passwd and is configured to know how to communicate with PAM modules using expect-style rules (smb.conf setting "passwd chat"). Version of pam includes l10n support, which means that the prompts generated by PAM modules are now different for each locale. To account for this, Samba should explicitly use the C locale when attempting a password sync and restore the user's locale setting afterwards.

Note that a separate but related bug, #50624, appears to prevent the passwd chat from working by default.

Related branches

Martin Pitt (pitti) on 2007-09-14
Changed in samba:
importance: Undecided → High
Martin Pitt (pitti) on 2007-09-14
Changed in samba:
assignee: nobody → ajmitch
Mathias Gug (mathiaz) wrote :

Fixed in 3.0.26a-1ubuntu1.

Changed in samba:
status: New → Fix Released
Steve Langasek (vorlon) wrote :

The patch in 3.0.26a-1ubuntu1 fixes the behavior when calling /usr/bin/passwd, the default configuration, but not when "pam password change" is set. Note that systems which want Unix and Samba passwords kept completely in sync should use pam_smbpass or pam_winbind from /usr/bin/passwd, and therefore Samba must use "pam password change" to avoid recursion.

Changed in samba:
status: Fix Released → Confirmed
Steve Langasek (vorlon) wrote :

Attached is a debdiff that sets the locale for pam password changes as well. Please consider uploading this fix; a signed source package that should be suitable for sponsorship can be found at http://rookery.ubuntu.com/~vorlon/samba/ if that is more convenient for you.

Steve Langasek (vorlon) wrote :
Steve Langasek (vorlon) wrote :

samba (3.0.26a-1ubuntu2) gutsy; urgency=low

  * debian/patches/chgpasswd.patch:
    - Also set the locale to 'C' when using PAM for password changes,
      since the PAM conversation is equally affected by PAM l10n support
      (LP: #139265).

 -- Steve Langasek <email address hidden> Tue, 02 Oct 2007 13:54:23 -0700

Changed in samba:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers