Synopsis

samba bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated samba packages that fix several bugs and add an enhancement are now
available.

Description

Samba is a suite of programs used by machines to share files, printers, and
other information.

These updated packages fix the following bugs:

• it was possible to use the smbd and nmbd commands to specify invalid port
  numbers (higher than 65536), causing invalid ports to be created, and, in
  some cases, a "port number definition: unsigned short" error. Now, when an
  invalid port number is specified, the default port number is used.
  
• in certain situations, Windows® clients intermittently lost access to
  Samba shares. Errors relating to "secrets.tdb", such as "tdb_lock failed on
  list" and "alarm (10) timed out for key replay cache mutex in tdb", were
  logged to the Samba log file.
  
• the "/etc/pam.d/samba" file was missing the following line, which caused
  authentication to fail when "smb.conf" was configured with the "obey pam
  restrictions = yes" option:
  

session required /lib/security/pam_stack.so service=system-auth

• missing sections in "/etc/pam.d/samba" caused password changes to fail,
  when "smb.conf" was configured with the "pam password change = yes" option.
  
• due to a change in libsmbclient, it was not possible to rebuild the
  "gnome-vfs2-2.8.2-8.6.EL4" package.
  
• communication problems with trusted domains from a Samba Domain
  Controller, which caused an "Error looking up domain users" error when
  running the "wbinfo -u" command, have been resolved.
  
• when Windows® clients performed file operations on files stored on a
  Samba share, various error messages popped-up, and the "Event ID: 4322"
  error was logged on the Windows® clients:
  

NetBT failed to process a request because it encountered OutOfResources
exception(s) in the last 1 hour.

• in the previous samba packages, it was not possible for Windows Vista™
  clients, who have installed Windows Vista™ Service Pack 1, to access Samba
  shares.
  
• when "Change Notify" was enabled on a Samba server, notifications of file
  changes were lost. Red Hat Enterprise Linux 4 users need to install the
  "gamin" package, and set "vfs object = notify_fam" in "smb.conf" to
  activate notifications. In these updated packages, "Change Notify"
  correctly sends notifications, which resolves this issue.
  
• Samba servers using the "net ads join" command to connect to a Windows
  Server® 2003-based domain failed with "failed to gets channel session key
  from server" and "NT_STATUS_ACCESS_DENIED" errors.
  

Note: these updated packages upgrade Samba to version 3.0.28. For a full
list of bug fixes and enhancements, refer to the Samba release notes:
http://us3.samba.org/samba/history/samba-3.0.28a.html

Users of samba are advised to upgrade to these updated packages, which
resolve these issues and add this enhancement.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 205353 - smbd allows ports higher than 65536.
• BZ - 291511 - update samba to 3.0.26a or later
• BZ - 377621 - Error acquiring lock on secrets.tdb
• BZ - 400581 - Incorrect /etc/pam.d/samba (causes authentication failure when obey pam restrictions = yes)
• BZ - 407101 - Critical Regression caused by CVE-2007-4572
• BZ - 422721 - Password change fails with samba pam module
• BZ - 428028 - samba 3.0.25b breaks rebuilds of stock RHEL4 packages
• BZ - 431709 - Adding a user to an ACL via Windows XP GUI gives away read access for owning group
• BZ - 431710 - After establish trust with AD, wbinfo -u does not work
• BZ - 431960 - 'Event ID: 4322' message appearing on windows systems that access samba shares (samba bug 4796)
• BZ - 438407 - 3.0.25b ntlmv2 auth compatibility with Vista SP1 clients
• BZ - 440463 - Notification of changes to files are lost
• BZ - 450652 - samba cannot join windows 2000 domains
• BZ - 450653 - Samba server can't authenticate to NT domain after 2008-05-28 update

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
samba-3.0.28-0.el4.9.src.rpm	SHA-256: 95e1a452503522181ca342d18e2c754ff686a337193f257fd0470f597f732481
x86_64
samba-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 632a04c5fccc6c7b16c32900fc0ba297c194763049bd2eb0e993e00f03c9c102
samba-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 632a04c5fccc6c7b16c32900fc0ba297c194763049bd2eb0e993e00f03c9c102
samba-client-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 0d892d66b7c51d2bfcee3075c1d6c0904377496de88b0bef129beca650c4ca49
samba-client-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 0d892d66b7c51d2bfcee3075c1d6c0904377496de88b0bef129beca650c4ca49
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 514456cc733b1ec190d333fd7c56e65cc715e8355d26be33b20f36dafcc8dfe4
samba-common-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 514456cc733b1ec190d333fd7c56e65cc715e8355d26be33b20f36dafcc8dfe4
samba-swat-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 79088f30fee8cdff1673400be94e1b6d14765e1b6677dda6ae9e02558f03d3af
samba-swat-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 79088f30fee8cdff1673400be94e1b6d14765e1b6677dda6ae9e02558f03d3af
ia64
samba-3.0.28-0.el4.9.ia64.rpm	SHA-256: fd6ee1b39a7ae179f7f955a28ca90725daadb882e32371c7585118a38d526328
samba-3.0.28-0.el4.9.ia64.rpm	SHA-256: fd6ee1b39a7ae179f7f955a28ca90725daadb882e32371c7585118a38d526328
samba-client-3.0.28-0.el4.9.ia64.rpm	SHA-256: 0f72a181bb46e4f6a215998e695bd799936d2788e62a41963d5b18590f726d57
samba-client-3.0.28-0.el4.9.ia64.rpm	SHA-256: 0f72a181bb46e4f6a215998e695bd799936d2788e62a41963d5b18590f726d57
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.ia64.rpm	SHA-256: cdd165ae5ec7fe091e959ccc156eb3b7cea3f28667883a62a0368d1ff358f0ea
samba-common-3.0.28-0.el4.9.ia64.rpm	SHA-256: cdd165ae5ec7fe091e959ccc156eb3b7cea3f28667883a62a0368d1ff358f0ea
samba-swat-3.0.28-0.el4.9.ia64.rpm	SHA-256: 5c8cc93963db2fadf674bc04f4e8b4a9ca9a39b240f1c62ced5b4fe03fe3b789
samba-swat-3.0.28-0.el4.9.ia64.rpm	SHA-256: 5c8cc93963db2fadf674bc04f4e8b4a9ca9a39b240f1c62ced5b4fe03fe3b789
i386
samba-3.0.28-0.el4.9.i386.rpm	SHA-256: 280b6461ab8c88d53489a16a2ecdde24b2d930b86ade4695d22101fe40f85dc7
samba-3.0.28-0.el4.9.i386.rpm	SHA-256: 280b6461ab8c88d53489a16a2ecdde24b2d930b86ade4695d22101fe40f85dc7
samba-client-3.0.28-0.el4.9.i386.rpm	SHA-256: ff46ef283fef12a4c4f1140bb307b6110f1d53a0b89864fc0b46ccf0653c5f9d
samba-client-3.0.28-0.el4.9.i386.rpm	SHA-256: ff46ef283fef12a4c4f1140bb307b6110f1d53a0b89864fc0b46ccf0653c5f9d
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-swat-3.0.28-0.el4.9.i386.rpm	SHA-256: 7cbbc09fa988c628068711ed2578871e8a8d2221c9a920ad00725dc4e708edf4
samba-swat-3.0.28-0.el4.9.i386.rpm	SHA-256: 7cbbc09fa988c628068711ed2578871e8a8d2221c9a920ad00725dc4e708edf4

Red Hat Enterprise Linux Workstation 4

SRPM
samba-3.0.28-0.el4.9.src.rpm	SHA-256: 95e1a452503522181ca342d18e2c754ff686a337193f257fd0470f597f732481
x86_64
samba-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 632a04c5fccc6c7b16c32900fc0ba297c194763049bd2eb0e993e00f03c9c102
samba-client-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 0d892d66b7c51d2bfcee3075c1d6c0904377496de88b0bef129beca650c4ca49
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 514456cc733b1ec190d333fd7c56e65cc715e8355d26be33b20f36dafcc8dfe4
samba-swat-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 79088f30fee8cdff1673400be94e1b6d14765e1b6677dda6ae9e02558f03d3af
ia64
samba-3.0.28-0.el4.9.ia64.rpm	SHA-256: fd6ee1b39a7ae179f7f955a28ca90725daadb882e32371c7585118a38d526328
samba-client-3.0.28-0.el4.9.ia64.rpm	SHA-256: 0f72a181bb46e4f6a215998e695bd799936d2788e62a41963d5b18590f726d57
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.ia64.rpm	SHA-256: cdd165ae5ec7fe091e959ccc156eb3b7cea3f28667883a62a0368d1ff358f0ea
samba-swat-3.0.28-0.el4.9.ia64.rpm	SHA-256: 5c8cc93963db2fadf674bc04f4e8b4a9ca9a39b240f1c62ced5b4fe03fe3b789
i386
samba-3.0.28-0.el4.9.i386.rpm	SHA-256: 280b6461ab8c88d53489a16a2ecdde24b2d930b86ade4695d22101fe40f85dc7
samba-client-3.0.28-0.el4.9.i386.rpm	SHA-256: ff46ef283fef12a4c4f1140bb307b6110f1d53a0b89864fc0b46ccf0653c5f9d
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-swat-3.0.28-0.el4.9.i386.rpm	SHA-256: 7cbbc09fa988c628068711ed2578871e8a8d2221c9a920ad00725dc4e708edf4

Red Hat Enterprise Linux Desktop 4

SRPM
samba-3.0.28-0.el4.9.src.rpm	SHA-256: 95e1a452503522181ca342d18e2c754ff686a337193f257fd0470f597f732481
x86_64
samba-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 632a04c5fccc6c7b16c32900fc0ba297c194763049bd2eb0e993e00f03c9c102
samba-client-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 0d892d66b7c51d2bfcee3075c1d6c0904377496de88b0bef129beca650c4ca49
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-common-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 514456cc733b1ec190d333fd7c56e65cc715e8355d26be33b20f36dafcc8dfe4
samba-swat-3.0.28-0.el4.9.x86_64.rpm	SHA-256: 79088f30fee8cdff1673400be94e1b6d14765e1b6677dda6ae9e02558f03d3af
i386
samba-3.0.28-0.el4.9.i386.rpm	SHA-256: 280b6461ab8c88d53489a16a2ecdde24b2d930b86ade4695d22101fe40f85dc7
samba-client-3.0.28-0.el4.9.i386.rpm	SHA-256: ff46ef283fef12a4c4f1140bb307b6110f1d53a0b89864fc0b46ccf0653c5f9d
samba-common-3.0.28-0.el4.9.i386.rpm	SHA-256: 74e90509aec4fd05633b425312933b50bce1b25fb5fdc4c7fdd2899a9f76c0fd
samba-swat-3.0.28-0.el4.9.i386.rpm	SHA-256: 7cbbc09fa988c628068711ed2578871e8a8d2221c9a920ad00725dc4e708edf4

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
samba-3.0.28-0.el4.9.src.rpm	SHA-256: 95e1a452503522181ca342d18e2c754ff686a337193f257fd0470f597f732481
s390x
samba-3.0.28-0.el4.9.s390x.rpm	SHA-256: 57d763e1815561e6f64b19e09dfaa604601e7bc640b40710c1e0464fb14ec23a
samba-client-3.0.28-0.el4.9.s390x.rpm	SHA-256: 8f020bf6431fbcf422ac377d2220ac09ac7a8472f4f97c4338e25678ef498728
samba-common-3.0.28-0.el4.9.s390.rpm	SHA-256: 82602e338ee269312504f4b18e59dea2e57e9d5e297dfd15c1cda181f55196d5
samba-common-3.0.28-0.el4.9.s390x.rpm	SHA-256: ba1df4e8df35e58c3ce739457430ad93372773e7feace5e0bce9f2044ec01841
samba-swat-3.0.28-0.el4.9.s390x.rpm	SHA-256: 4d1b5fec1fd721aa0f9e863cbe7acc1267bb4e4b54433c7c97e6fa55c8187787
s390
samba-3.0.28-0.el4.9.s390.rpm	SHA-256: 3f842191ee97f34827d4f0964b8f9f1ef882a5091a414789690de51432377723
samba-client-3.0.28-0.el4.9.s390.rpm	SHA-256: 229296b4cac807eeaf3500a5903fde5cafa3265c1e5671ba316cbd07dc399f9c
samba-common-3.0.28-0.el4.9.s390.rpm	SHA-256: 82602e338ee269312504f4b18e59dea2e57e9d5e297dfd15c1cda181f55196d5
samba-swat-3.0.28-0.el4.9.s390.rpm	SHA-256: 74a6524dece250fa34ee831f370daa308a681f216803c4a3fd730ca077aeba22

Red Hat Enterprise Linux for Power, big endian 4

SRPM
samba-3.0.28-0.el4.9.src.rpm	SHA-256: 95e1a452503522181ca342d18e2c754ff686a337193f257fd0470f597f732481
ppc
samba-3.0.28-0.el4.9.ppc.rpm	SHA-256: 9ff719fc94297f071073431ec02eded275c2cecd9669c9fd42ae41dcc6a6ffcd
samba-client-3.0.28-0.el4.9.ppc.rpm	SHA-256: 067676317ff63b6e8ed897ffc852dc0b0c5702b1c20c5df415c6723bbee530a6
samba-common-3.0.28-0.el4.9.ppc.rpm	SHA-256: 96c5135b6e4c2432697a2a8abe2e3412567141445a57ddedbc673f9216fa47f7
samba-common-3.0.28-0.el4.9.ppc64.rpm	SHA-256: 4132dcbbd40d0408792d402fb7a98a54ad15c22ef1a37d0bf55388c338ec0206
samba-swat-3.0.28-0.el4.9.ppc.rpm	SHA-256: 605280391576dcb00de6486d54adeb3db759943ace30b5df6c2c03a23e83dc2e