Bug 51532 - samba: Multiple issues (4.4)
samba: Multiple issues (4.4)
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 4.4
Other Linux
: P5 normal (vote)
: UCS 4.4-4-errata
Assigned To: Erik Damrose
Felix Botner
https://bugzilla.samba.org/show_bug.c...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2020-06-19 13:59 CEST by Arvid Requate
Modified: 2020-07-03 12:44 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)


Attachments
samba yaml (1.03 KB, application/x-yaml)
2020-07-01 18:21 CEST, Erik Damrose
Details
ldb yaml (248 bytes, application/x-yaml)
2020-07-01 18:21 CEST, Erik Damrose
Details
u-ldb-modules yaml (265 bytes, application/x-yaml)
2020-07-01 18:21 CEST, Erik Damrose
Details

Note You need to log in before you can comment on or make changes to this bug.
Comment 2 Erik Damrose univentionstaff 2020-07-01 18:20:52 CEST
Patch applied to samba package. As the fixes contained changes to LDB, a new LDB Version 1.5.8 was added. Our ldb package was patched accordingly, and a rebuild of univention-ldb-modules took place.

samba 2:4.10.1-1A~4.4.0.202006301635
ldb 2:1.5.8-1A~4.4.0.202006301631
univention-ldb-modules 7.0.0-4A~4.4.0.202007011440

Preliminary yaml files will be attached
Comment 3 Erik Damrose univentionstaff 2020-07-01 18:21:11 CEST
Created attachment 10409 [details]
samba yaml
Comment 4 Erik Damrose univentionstaff 2020-07-01 18:21:21 CEST
Created attachment 10410 [details]
ldb yaml
Comment 5 Erik Damrose univentionstaff 2020-07-01 18:21:37 CEST
Created attachment 10411 [details]
u-ldb-modules yaml
Comment 6 Felix Botner univentionstaff 2020-07-02 16:47:35 CEST
OK - patches
OK - yaml

OK - installation (master, backup, basic tests)
OK - update (master, backup, basic tests)
Comment 7 Felix Botner univentionstaff 2020-07-02 17:19:11 CEST
01.07.20 18:19:12.741  LISTENER    ( PROCESS ) : updating 'uid=user1,dc=ar41i1,dc=qa' command a
ldb: module version mismatch in ../../modules/asq.c : ldb_version=1.5.7 module_version=1.5.8
ldb: failed to initialise module /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/asq.so : Unavailable
Setting license/base
Setting uuid/license
File: /etc/apt/apt.conf.d/55user_agent
Module: univention_blog
File: /usr/share/univention-management-console/meta.json
Traceback (most recent call last):
  File "/usr/lib/univention-directory-listener/system/samba4-idmap.py", line 253, in handler
    idmap = open_idmap()
  File "/usr/lib/univention-directory-listener/system/samba4-idmap.py", line 110, in open_idmap
    open_idmap.instance = IDmapDB(idmap_ldb, session_info=system_session(), lp=lp)
MemoryError
01.07.20 18:19:14.188  LISTENER    ( WARN    ) : handler: samba4-idmap (failed)
01.07.20 18:19:14.211  LISTENER    ( PROCESS ) : updating 'cn=uidNumber,cn=temporary,cn=univention,dc=ar41i1,dc=qa' command m
01.07.20 18:19:14.283  LISTENER    ( PROCESS ) : updating 'cn=2011,cn=uidNumber,cn=temporary,cn=univention,dc=ar41i1,dc=qa' com
mand d
01.07.20 18:19:14.302  LISTENER    ( PROCESS ) : updating 'cn=user1,cn=uid,cn=temporary,cn=univention,dc=ar41i1,dc=qa' command 
d
01.07.20 18:19:14.312  LISTENER    ( PROCESS ) : updating 'cn=Domain Users,cn=groups,dc=ar41i1,dc=qa' command m
01.07.20 18:19:22.940  LISTENER    ( PROCESS ) : updating 'cn=S-1-5-21-2660895256-1678062113-3852026326-1113,cn=sid,cn=temporar
y,cn=univention,dc=ar41i1,dc=qa' command a

we have to restart the listener (idmap.py)
Comment 8 Erik Damrose univentionstaff 2020-07-02 17:30:35 CEST
50c618a3 Restart univention-directory-listener on package update
e2fd33be yaml

univention-ldb-modules 7.0.0-6A~4.4.0.202007021721
Comment 9 Felix Botner univentionstaff 2020-07-02 18:45:52 CEST
OK restart u-d-l during update (although i get a strange message in the updater.log

libunivention-ldb-modules (7.0.0-6A~4.4.0.202007021721) wird eingerichtet ...^M
invoke-rc.d: syntax error: missing required parameter^M
[....] Restarting univention-directory-listener (via systemctl): univention-directory-listener.service^[[?25l^[7^[[1G[^[[32m ok ^[[39;49m^[8^[[?12l^[[?25h.^M
winbind (2:4.10.1-1A~4.4.0.202006301635) wird eingerichtet ...^M
Comment 11 Erik Damrose univentionstaff 2020-07-02 18:54:08 CEST
<http://errata.software-univention.de/ucs/4.4/648.html>