Bug 49663 – Check and fix values for "auth methods" during update to Samba 4.10

Bug 49663 - Check and fix values for "auth methods" during update to Samba 4.10


Summary:	Check and fix values for "auth methods" during update to Samba 4.10

Status:	RESOLVED WORKSFORME

Product:	UCS
Classification:	Unclassified
Component:	Samba
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Samba maintainers
QA Contact:	Samba maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-06-17 11:06 CEST by Arvid Requate
Modified:	2020-01-10 11:20 CET (History)
CC List:	4 users (show)

See Also:	47392 50705
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.137
Enterprise Customer affected?:	Yes
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2018062721000456, 2018042421000812
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2019-06-17 11:06:20 CEST

Bug 47314 Comment 1 recommended setting

samba/global/options/"auth methods"="anonymous sam winbind_rodc sam_failtrusts sam_ignoredomain"

as a workaround for Samba 4.7. These values cause problems after Update to Samba 4.10. We should filter the values e.g. in a postinst to avoid these issues.

Bug 47314 Comment 7 shows the values that work for Samba 4.10.

Comment 1 Ingo Steuwer

2019-06-26 16:43:22 CEST

Samba 4.10 Erratas have been released several weeks ago and many customers already updated. I suggest to create an SDB article that describes the use case and the configurations needed for the different Samba versions.

Comment 2 Ingo Steuwer

2019-08-22 11:59:53 CEST

to late to be fixed in the product, see last comment