CacheEntryExpire setting ignored & default value of 4 hours is too low
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
likewise-open (Ubuntu) |
Fix Committed
|
Undecided
|
Gerald Carter | ||
Lucid |
Won't Fix
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: likewise-open
likewise-open 5.4.0.42111-
The CacheEntryExpire setting seems to be ignored. I changed the setting to: "CacheEntryExpi
Next I took the machine down, removed it from the network and booted. I was able to login used cached credentials. However 4 hours later I ran into problems. getent returned no information and logging on with the user was not allowed anymore (user not found). Since 4h (dword:00003840) is the default value it would seem that my updated entry was not picked up by lsassd.
IMPACT
======
Having a short 4h expiration period prevents laptops from being used for any length of time outside the corporate network, including even overnight. Not being able to effectively change this setting prevents the software from being deployed in enterprise environments.
TEST CASE
=========
1. Install likewise-open
2. using lwregshell, check registry value for CacheEntryExpiry:
[HKEY_THIS_
"AssumeDefaultD
"CacheEntryExpi
Related branches
- Dustin Kirkland : Needs Fixing
-
Diff: 958 lines (+806/-26)13 files modifieddebian/changelog (+27/-0)
debian/control (+3/-2)
debian/likewise-open.postinst (+23/-17)
debian/likewise-open.preinst (+9/-7)
debian/likewise-open.prerm (+9/-0)
debian/patches/assume_default_domain.diff (+334/-0)
debian/patches/disable_dcerpc_auto_start.diff (+26/-0)
debian/patches/ignore_group_update_failure_on_leave.diff (+37/-0)
debian/patches/lsass_turn_off_ncacn_ip_tcp.diff (+39/-0)
debian/patches/lwupgrade_multi_sz.diff (+77/-0)
debian/patches/offline_v2.diff (+201/-0)
debian/patches/reg_import_multi_sz.diff (+14/-0)
debian/patches/series (+7/-0)
- Dustin Kirkland : Needs Fixing
-
Diff: 1427 lines (+1234/-32)14 files modifieddebian/changelog (+49/-0)
debian/control (+7/-6)
debian/likewise-open.postinst (+34/-19)
debian/likewise-open.preinst (+9/-7)
debian/likewise-open.prerm (+9/-0)
debian/patches/assume_default_domain.diff (+334/-0)
debian/patches/disable_dcerpc_auto_start.diff (+26/-0)
debian/patches/ignore_group_update_failure_on_leave.diff (+37/-0)
debian/patches/lp-security-CVE-2010-0833.diff (+390/-0)
debian/patches/lsass_turn_off_ncacn_ip_tcp.diff (+39/-0)
debian/patches/lwupgrade_multi_sz.diff (+77/-0)
debian/patches/offline_v2.diff (+201/-0)
debian/patches/reg_import_multi_sz.diff (+14/-0)
debian/patches/series (+8/-0)
description: | updated |
Changed in likewise-open (Ubuntu): | |
status: | New → In Progress |
assignee: | nobody → Gerald Carter (coffeedude.jerry) |
description: | updated |
tags: | added: testcase |
Sorry, small typo: CacheEntryExpire should of course be CacheEntryExpiry