[Bug 1162421] New: pam_winbind broken in version samba 4.9.5 GIT.243
http://bugzilla.opensuse.org/show_bug.cgi?id=1162421 Bug ID: 1162421 Summary: pam_winbind broken in version samba 4.9.5 GIT.243 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Samba Assignee: samba-maintainers@SuSE.de Reporter: juergen.mell@t-online.de QA Contact: samba-maintainers@SuSE.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36 Build Identifier: With the latest SAMBA update comes a broken version of pam_winbind. The error message is: PAM unable to dlopen(/lib64/security/pam_winbind.so): /usr/lib64/samba/libreplace-samba4.so: version `SAMBA_4.9.5_GIT.243.E76C5CB3D97LP151.2.15.1_SUSE_OS1 5.0_X86_64' not found (required by /lib64/security/pam_winbind.so The library libreplace-samba4.so is present, but its version string does not contain the "SUSE_OS15" part. The result is that authentification against a domein controller fails, eg. in Cyrus imap Downgrading to samba 4.9.5 GIT.224 fixed the problem Reproducible: Always Steps to Reproduce: 1.Set up a program to authenticate against a remote domain controller with pam_winbind, eg. Cyrus imap's saslauthd 2. 3. Actual Results: Authentification will always fail and you will see the error mesage shown in the description above. Expected Results: Authentification should succeed. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1162421 http://bugzilla.opensuse.org/show_bug.cgi?id=1162421#c1 Noel Power <nopower@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nopower@suse.com --- Comment #1 from Noel Power <nopower@suse.com> --- looks like you have some out of date packages (or maybe for some reason files didn't get installed properly) error is saying the pam_winbind expects the symbol SAMBA_4.9.5_GIT.243.E76C5CB3D97LP151.2.15.1_SUSE_OS1 in libreplace on my system (where pam is working after update) rpm -qf /usr/lib64/samba/libreplace-samba4.so /usr/lib64/samba/libreplace-samba4.so rpm -qf /usr/lib64/samba/libreplace-samba4.so samba-libs-4.9.5+git.243.e76c5cb3d97-lp151.2.15.1.x86_64 strings /usr/lib64/samba/libreplace-samba4.so | grep SUSE SAMBA_4.9.5_GIT.243.E76C5CB3D97LP151.2.15.1_SUSE_OS15.0_X86_64 you should try and reinstall samba-libs (and actually verify all your samba pacakges) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1162421 http://bugzilla.opensuse.org/show_bug.cgi?id=1162421#c2 --- Comment #2 from Juergen Mell <juergen.mell@t-online.de> --- I will try to install the updates once more and this time I will also reboot the machine, but as this is a productive server I can do this earliest on the weekend. I will come back to you once I have more information. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1162421 http://bugzilla.opensuse.org/show_bug.cgi?id=1162421#c4 Juergen Mell <juergen.mell@t-online.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #4 from Juergen Mell <juergen.mell@t-online.de> --- I installed the update once more yesterday and I think I have found the reason why pam_winbind does not work anymore: it seems that ldconfig is not called after the update for the samba-libs package is installed. I called ldconfig manually today and restarted the sasl_authd service and everything is working well now. Unfortunately this error does not occur immediately after the update, as in my configuration the saslauthd process keeps running and using the old version of pam_winbind until it is restarted later in the night. Then without the new ldconfig data the new version of pam_winbind only finds the old version of the library and fails. It might be a good idea to add the ldconfig command to the RPM post-install script of samba-libs. Thanks for your help! -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com