Bug 39025

Summary:	Samba 4.2.3 Backupkey Serverwrap broken
Product:	UCS	Reporter:	Arvid Requate <requate>
Component:	Samba4	Assignee:	Arvid Requate <requate>
Status:	CLOSED FIXED	QA Contact:	Felix Botner <botner>
Severity:	normal
Priority:	P1	CC:	stephan.hendl, walkenhorst
Version:	UCS 4.0
Target Milestone:	UCS 4.0-2-errata
Hardware:	Other
OS:	Linux
URL:	https://bugzilla.samba.org/show_bug.cgi?id=11416
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):	External feedback, Troubleshooting
Max CVSS v3 score:

Description Arvid Requate

2015-07-27 12:19:53 CEST

Ticket#: 2015072421000189 reported problems after the Update to Samba 4.2.3 where users could not unlock their locked Desktop screens, e.g. after returning from lunch. Turns out, there is a bug in the function bkrp_do_retrieve_server_wrap_key in 4.2.3, which has been fixed in Samba master branch since March 4th.

We need at least:

git diff 8e195fb52ecfa3c263f68b74f989fb48a3c9116f..4891a98e20d0719274f6685dfbc39413c9ab39d0

Maybe also the newer fixes, see:

https://git.samba.org/?p=samba.git;a=history;f=source4/rpc_server/backupkey/dcesrv_backupkey.c;h=3edd1b69f5ce16fb52a24711ffa4c0ac677afd27;hb=HEAD

Comment 1 Arvid Requate

2015-07-27 13:32:10 CEST

Also cherrypicked b57c77849af968e7a89df40d05b2e3ef7cef42c1 from master, package has been rebuilt.

Advisory: 2015-07-27-samba.yaml

I filed a bug report upstream.

Comment 2 Felix Botner

2015-07-27 15:34:01 CEST

OK - build with patch

Successful build
Package: samba
Version: 2:4.2.3-1.758.201507271307
User: arequate
Branch: ucs_4.0-0
Scope: errata4.0-2
...
OK
Applying patch 98_bug39025_fix_samba_4.2.3_broken_bkrp_do_retrieve_server_wrap_key.patch using -p1
Output of the patch process:
patching file debian/patches/98_fix_samba_4.2.3_broken_bkrp_do_retrieve_server_wrap_key.patch
patching file debian/patches/series

OK - update via ucs_4.0-0-errata4.0-2
OK - install via ucs_4.0-0-errata4.0-2

OK - YAML

Comment 3 Janek Walkenhorst

2015-07-28 15:49:41 CEST

<http://errata.univention.de/ucs/4.0/262.html>