[Bug 818510] New: samba package from network:samba:STABLE leads to broken sssd
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c0 Summary: samba package from network:samba:STABLE leads to broken sssd Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: Samba AssignedTo: samba-maintainers@SuSE.de ReportedBy: ro@suse.com QAContact: samba-maintainers@SuSE.de Found By: Development Blocker: --- Hi, (summarizing the outcome of the debugging session saturday night at a friend's house): if you install the samba packages from network:samba:STABLE, this will lead to sssd refusing to work and such inoperable ldap authentication on your machine. the problem is that samba updates libldb1 to 1.1.15 but sssd checks the version of this lib and compares the full version (including patchlevel) and then refuses to start (module was compiled with ldb 1.1.14 but libldb is 1.1.15) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c1 Lars Müller <lmuelle@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |jengelh@inai.de, | |samba-maintainers@SuSE.de InfoProvider| |ro@suse.com AssignedTo|samba-maintainers@SuSE.de |lmuelle@suse.com --- Comment #1 from Lars Müller <lmuelle@suse.com> 2013-05-06 11:22:52 CEST --- Jan, doesn't this sound familiar? Yes, we updated Samba from network:samba:STABLE last week. And this update doesn't cause a rebuild of sssd. In general that shouldn't be required as there is only a minor version upgrade for ldb from 1.1.14 to 1.1.15. But the sssd developers don't trust the versioning schema. See for example: bnc#779079 and bnc#769155 which redirects to bso#9495 @Rudi: Can we establish some ebuild trigger mechanism in the Build Service to cover this case? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c2 Jan Engelhardt <jengelh@inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rhafer@suse.com --- Comment #2 from Jan Engelhardt <jengelh@inai.de> 2013-05-06 11:31:04 CEST --- I already have a patch in network:ldap/sssd (added on Feb 26) that kills the version check, because I feel that trying one's luck is the lesser evil of having no sssd at all. Why is the patch not in openSUSE:12.3:Update despite openSUSE:12.3:Update/sssd having a Feb 26 entry? Well, let's ask rhafer, who cross-submitted out of his home project rather than network:ldap and causing a hard branch. ;-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c3 Ralf Haferkamp <rhafer@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|ro@suse.com | AssignedTo|lmuelle@suse.com |jengelh@inai.de --- Comment #3 from Ralf Haferkamp <rhafer@suse.com> 2013-05-06 13:22:10 CEST --- (In reply to comment #2)
Why is the patch not in openSUSE:12.3:Update despite openSUSE:12.3:Update/sssd having a Feb 26 entry? Well, let's ask rhafer, who cross-submitted out of his home project rather than network:ldap and causing a hard branch. ;-) Sorry, but this is not true. Unless I am overlooking something it seems you submitted the "Feb 26" change to openSUSE:12.3:Update (see bug#806078) and that already contained sssd-sysdb-binary-attrs.diff but not the version check fixes.
My submission was some weeks after that and only contained the CVE-2013-0287 fix. So if anybody can answer why the sssd-no-ldb-check.diff wasn't added to the Feb26 commit it would be you :). So my suggestion would be you just request an additional update for sssd to add that missing patch. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c4 Jan Engelhardt <jengelh@inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |maintenance@opensuse.org --- Comment #4 from Jan Engelhardt <jengelh@inai.de> 2013-05-08 19:56:34 CEST --- 174855 State:new By:jengelh When:2013-05-08T17:49:46 maintenance_incident: home:jengelh:branches:openSUSE:12.3:Update/sssd -> openSUSE:Maintenance (release in openSUSE:12.3:Update) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann@suse.com> 2013-05-08 20:00:10 CEST --- This is an autogenerated message for OBS integration: This bug (818510) was mentioned in https://build.opensuse.org/request/show/174855 Maintenance / -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c6 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|maintenance@opensuse.org | --- Comment #6 from Benjamin Brunner <bbrunner@suse.com> 2013-05-16 15:04:31 CEST --- Hi Jan, thanks for your submission. I'll add it to the samba-update and release it together. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c7 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #7 from Benjamin Brunner <bbrunner@suse.com> 2013-05-27 16:03:13 CEST --- Update released for openSUSE 12.3. Resolved fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=818510 https://bugzilla.novell.com/show_bug.cgi?id=818510#c8 --- Comment #8 from Swamp Workflow Management <swamp@suse.de> 2013-06-10 09:11:39 UTC --- openSUSE-RU-2013:0891-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 818510 CVE References: Sources used: openSUSE 12.3 (src): sssd-1.9.5-1.13.2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com