Bug 39025 - Samba 4.2.3 Backupkey Serverwrap broken
Samba 4.2.3 Backupkey Serverwrap broken
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 4.0
Other Linux
: P1 normal (vote)
: UCS 4.0-2-errata
Assigned To: Arvid Requate
Felix Botner
Depends on:
  Show dependency treegraph
Reported: 2015-07-27 12:19 CEST by Arvid Requate
Modified: 2015-07-28 15:49 CEST (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Ticket number:
Bug group (optional): External feedback, Troubleshooting
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2015-07-27 12:19:53 CEST
Ticket#: 2015072421000189 reported problems after the Update to Samba 4.2.3 where users could not unlock their locked Desktop screens, e.g. after returning from lunch. Turns out, there is a bug in the function bkrp_do_retrieve_server_wrap_key in 4.2.3, which has been fixed in Samba master branch since March 4th.

We need at least:

git diff 8e195fb52ecfa3c263f68b74f989fb48a3c9116f..4891a98e20d0719274f6685dfbc39413c9ab39d0

Maybe also the newer fixes, see:

Comment 1 Arvid Requate univentionstaff 2015-07-27 13:32:10 CEST
Also cherrypicked b57c77849af968e7a89df40d05b2e3ef7cef42c1 from master, package has been rebuilt.

Advisory: 2015-07-27-samba.yaml

I filed a bug report upstream.
Comment 2 Felix Botner univentionstaff 2015-07-27 15:34:01 CEST
OK - build with patch

Successful build
Package: samba
Version: 2:4.2.3-1.758.201507271307
User: arequate
Branch: ucs_4.0-0
Scope: errata4.0-2
Applying patch 98_bug39025_fix_samba_4.2.3_broken_bkrp_do_retrieve_server_wrap_key.patch using -p1
Output of the patch process:
patching file debian/patches/98_fix_samba_4.2.3_broken_bkrp_do_retrieve_server_wrap_key.patch
patching file debian/patches/series

OK - update via ucs_4.0-0-errata4.0-2
OK - install via ucs_4.0-0-errata4.0-2

Comment 3 Janek Walkenhorst univentionstaff 2015-07-28 15:49:41 CEST