Synopsis

samba bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated samba packages that fix several bugs and add an enhancement are now
available.

Description

Samba is a suite of programs used by machines to share files, printers, and
other information.

These updated samba packages provide fixes for the following bugs:

• Using a share name 24 to 32 characters long caused a string overflow.
  Share names are now permitted to be up to 32 characters long and string
  overflows no longer occur. (BZ#159019)
  
• Providing a join user from one Kerberos realm/Active Directory domain, while
  attempting to join the Samba server to a different Kerberos realm/Active
  Directory domain using Samba's 'net' utility failed. This was caused by a faulty
  reading of the system global "/etc/krb5.conf" file. Instead of the
  "/etc/krb5.conf" file being read, the 'net' utility read a local private
  krb5.conf.[Active Directory realm] file. The 'net' utility now properly reads
  the global "/etc/krb5.conf" file. (BZ#467775)
  
• A Samba server had no way of knowing that an operation performed by the kernel
  CIFS client was in fact a file creation. As a result, the "force create mode"
  (which sets permissions of a file during its creation) was never initiated and
  appeared to be broken. The file creation was handled by a POSIX open call and to
  Samba the file creation then appeared as a simple 'chmod' operation. By using
  the POSIX open call in the samba client, the server can now properly recognize
  the file creation and apply the "force create mode".
  

Note: This issue was fixed on the server part of Red Hat Enterprise Linux 4,
however, this issue remains broken on the client part. Therefore, the "force
create mode" works properly on Red Hat Enterprise Linux 4 systems with newer
clients (for example, Red Hat Enterprise Linux 5). (BZ#493962)

• The 'restorecon' utility was required during the installation of the
  samba-common package. As a result, attempting to update samba without this
  utility installed may have failed with the following error message:
  

/var/tmp/rpm-tmp.89611: line 7: restorecon: command not found

The utility is now used when it is already present in the system only, and the
package is now always updated as expected. (BZ#518785)

• Due to faulty parsing routines, an attempt to mount a CIFS (Common Internet
  File System) share with credentials files specified failed. The parsing routines
  were fixed and mounting CIFS shares works as expected. (BZ#532094)
  
• Setting the "allow trusted domain = no" parameter on a Samba server would not
  have any effect on the configuration and Samba would still attempt to contact
  trusted domains. By refreshing the trusted domain cache only if the parameter
  "allow trusted domain = yes" is set, Samba no longer attempts to contact trusted
  domains when "allow trusted domain = no" is set. (BZ#559609)
  
• Mounting and unmounting a CIFS file system too quickly would eventually lead
  to the CIFS mounts becoming unmountable. The issue has been corrected by linking
  mtab.o to the building of mount.cifs and unmount.cifs. CIFS mounts no longer
  become unmountable when performing quick mounting and unmounting of the file
  system. (BZ#562836)
  
• Upgrading domain controllers to Windows Server 2008 R2 caused the Samba
  servers, running Red Hat Enterprise Linux 4, to fail to authenticate any Active
  Directory domain users. This was caused by Samba's strict expectations on
  certain buffer lengths which made the "NETLOGON" secure channel fail. This could
  occur when the 'winbind' daemon or the 'smbd' daemon contacted a Windows Server
  2008 R2 domain controller. The failure of the secure channel caused the failure
  of the whole authentication process. Samba now correctly deals with larger
  buffers and the authentication process no longer fails. (BZ#585360)
  

In addition, these updated samba packages provide the following enhancement:

• This update introduces a 'configtest' parameter for the SMB service which can
  detect certain errors in the "/etc/samba/smb.conf" configuration file.
  (BZ#157602)
  

Users are advised to upgrade to these updated samba packages, which resolve
these issues and add this enhancement.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 157602 - A 'configtest' parameter for the smb service (attached).
• BZ - 159019 - Share names over 32 characters cause smbd trouble
• BZ - 493962 - samba needs patch to make it so that POSIX opens work correctly
• BZ - 518785 - restorecon: command not found after upgrade - leaves two samba-common versions
• BZ - 532094 - Can't mount cifs shares with credentials files.
• BZ - 585360 - Samba authentication problem against Windows Server 2008 R2

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
samba-3.0.33-0.29.el4.src.rpm	SHA-256: 9f038231d345939b0742e486affeb39ebf7b6c58f407f933c5c825f2850e52fa
x86_64
samba-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 7586deb1265c072c9fda09b9878861bf5f66ddfbc666af802070d30a694b8d8c
samba-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 7586deb1265c072c9fda09b9878861bf5f66ddfbc666af802070d30a694b8d8c
samba-client-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 27d3087a44958b01c2168f8809e50f6d4f60f40f07e9b214abfd85ae0aadceb1
samba-client-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 27d3087a44958b01c2168f8809e50f6d4f60f40f07e9b214abfd85ae0aadceb1
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 4ab0ea389e1097128d352301c63d091d537ffb41d900fad7407e1f55335fb505
samba-common-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 4ab0ea389e1097128d352301c63d091d537ffb41d900fad7407e1f55335fb505
samba-swat-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 244891b0096ff43573b082aa4e23760d174bb7f3740bed0e5a9201167c888667
samba-swat-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 244891b0096ff43573b082aa4e23760d174bb7f3740bed0e5a9201167c888667
ia64
samba-3.0.33-0.29.el4.ia64.rpm	SHA-256: b234af266cdd3fed9e3e8436cc03aa2c908d084d0d01bcde656abf140cd6908f
samba-3.0.33-0.29.el4.ia64.rpm	SHA-256: b234af266cdd3fed9e3e8436cc03aa2c908d084d0d01bcde656abf140cd6908f
samba-client-3.0.33-0.29.el4.ia64.rpm	SHA-256: 9ab01a37efa9b1fc49232cc0213c9b9ac57d1eed576691928935ef3ba9258858
samba-client-3.0.33-0.29.el4.ia64.rpm	SHA-256: 9ab01a37efa9b1fc49232cc0213c9b9ac57d1eed576691928935ef3ba9258858
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.ia64.rpm	SHA-256: 7c632bff2730f8f354a5d311f3402ee7459ca3e7a147e136d45e7109ff89c121
samba-common-3.0.33-0.29.el4.ia64.rpm	SHA-256: 7c632bff2730f8f354a5d311f3402ee7459ca3e7a147e136d45e7109ff89c121
samba-swat-3.0.33-0.29.el4.ia64.rpm	SHA-256: 794626bfe49215732b2364493669a76c224010f619431825a4308850920c7676
samba-swat-3.0.33-0.29.el4.ia64.rpm	SHA-256: 794626bfe49215732b2364493669a76c224010f619431825a4308850920c7676
i386
samba-3.0.33-0.29.el4.i386.rpm	SHA-256: 59f1ae0e77345009d239767a48eacebd89426aada7068de24c36f637dc7b3757
samba-3.0.33-0.29.el4.i386.rpm	SHA-256: 59f1ae0e77345009d239767a48eacebd89426aada7068de24c36f637dc7b3757
samba-client-3.0.33-0.29.el4.i386.rpm	SHA-256: cbbac28f49bca6c39bf46f009153e74a0b6ea0b071d0988366bba1bf5b7ce55f
samba-client-3.0.33-0.29.el4.i386.rpm	SHA-256: cbbac28f49bca6c39bf46f009153e74a0b6ea0b071d0988366bba1bf5b7ce55f
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-swat-3.0.33-0.29.el4.i386.rpm	SHA-256: f746922dd2d53183a62ee074769028951b1bd3a0acb6488e942492088153708a
samba-swat-3.0.33-0.29.el4.i386.rpm	SHA-256: f746922dd2d53183a62ee074769028951b1bd3a0acb6488e942492088153708a

Red Hat Enterprise Linux Workstation 4

SRPM
samba-3.0.33-0.29.el4.src.rpm	SHA-256: 9f038231d345939b0742e486affeb39ebf7b6c58f407f933c5c825f2850e52fa
x86_64
samba-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 7586deb1265c072c9fda09b9878861bf5f66ddfbc666af802070d30a694b8d8c
samba-client-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 27d3087a44958b01c2168f8809e50f6d4f60f40f07e9b214abfd85ae0aadceb1
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 4ab0ea389e1097128d352301c63d091d537ffb41d900fad7407e1f55335fb505
samba-swat-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 244891b0096ff43573b082aa4e23760d174bb7f3740bed0e5a9201167c888667
ia64
samba-3.0.33-0.29.el4.ia64.rpm	SHA-256: b234af266cdd3fed9e3e8436cc03aa2c908d084d0d01bcde656abf140cd6908f
samba-client-3.0.33-0.29.el4.ia64.rpm	SHA-256: 9ab01a37efa9b1fc49232cc0213c9b9ac57d1eed576691928935ef3ba9258858
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.ia64.rpm	SHA-256: 7c632bff2730f8f354a5d311f3402ee7459ca3e7a147e136d45e7109ff89c121
samba-swat-3.0.33-0.29.el4.ia64.rpm	SHA-256: 794626bfe49215732b2364493669a76c224010f619431825a4308850920c7676
i386
samba-3.0.33-0.29.el4.i386.rpm	SHA-256: 59f1ae0e77345009d239767a48eacebd89426aada7068de24c36f637dc7b3757
samba-client-3.0.33-0.29.el4.i386.rpm	SHA-256: cbbac28f49bca6c39bf46f009153e74a0b6ea0b071d0988366bba1bf5b7ce55f
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-swat-3.0.33-0.29.el4.i386.rpm	SHA-256: f746922dd2d53183a62ee074769028951b1bd3a0acb6488e942492088153708a

Red Hat Enterprise Linux Desktop 4

SRPM
samba-3.0.33-0.29.el4.src.rpm	SHA-256: 9f038231d345939b0742e486affeb39ebf7b6c58f407f933c5c825f2850e52fa
x86_64
samba-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 7586deb1265c072c9fda09b9878861bf5f66ddfbc666af802070d30a694b8d8c
samba-client-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 27d3087a44958b01c2168f8809e50f6d4f60f40f07e9b214abfd85ae0aadceb1
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-common-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 4ab0ea389e1097128d352301c63d091d537ffb41d900fad7407e1f55335fb505
samba-swat-3.0.33-0.29.el4.x86_64.rpm	SHA-256: 244891b0096ff43573b082aa4e23760d174bb7f3740bed0e5a9201167c888667
i386
samba-3.0.33-0.29.el4.i386.rpm	SHA-256: 59f1ae0e77345009d239767a48eacebd89426aada7068de24c36f637dc7b3757
samba-client-3.0.33-0.29.el4.i386.rpm	SHA-256: cbbac28f49bca6c39bf46f009153e74a0b6ea0b071d0988366bba1bf5b7ce55f
samba-common-3.0.33-0.29.el4.i386.rpm	SHA-256: 20563efa3f4b2f97ba7b68bcda44cad8f15973e2a67813a944cf4b91a533b106
samba-swat-3.0.33-0.29.el4.i386.rpm	SHA-256: f746922dd2d53183a62ee074769028951b1bd3a0acb6488e942492088153708a

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
samba-3.0.33-0.29.el4.src.rpm	SHA-256: 9f038231d345939b0742e486affeb39ebf7b6c58f407f933c5c825f2850e52fa
s390x
samba-3.0.33-0.29.el4.s390x.rpm	SHA-256: 1c108b9a4f6bbcfe8dfca05adda421f77834c44e90dbeb16ccdcec3eab196d41
samba-client-3.0.33-0.29.el4.s390x.rpm	SHA-256: 856dea48ae1021a1fafce7b895948aee86bdff80499740a9516dbfcf1339e450
samba-common-3.0.33-0.29.el4.s390.rpm	SHA-256: 13af434b5dd7bd225e28ba9ee9573801b7649b76865743a69a0fe68caecc2ba8
samba-common-3.0.33-0.29.el4.s390x.rpm	SHA-256: 09f124a9420a2be9282f0c82d86d9ccf25f8987e72a4dc1b918fca31cc34d56c
samba-swat-3.0.33-0.29.el4.s390x.rpm	SHA-256: 68880514cf6c59039ad15957d5da288c1961ecd082b2b5d606d63dd61cc46494
s390
samba-3.0.33-0.29.el4.s390.rpm	SHA-256: 8eb71549161c375ffd262cb2242b73cc3b788939abbce833c497936b7e3743f5
samba-client-3.0.33-0.29.el4.s390.rpm	SHA-256: 171f780728760af54168be809b6401975ba954b3881c23ede530d28a4e8e6606
samba-common-3.0.33-0.29.el4.s390.rpm	SHA-256: 13af434b5dd7bd225e28ba9ee9573801b7649b76865743a69a0fe68caecc2ba8
samba-swat-3.0.33-0.29.el4.s390.rpm	SHA-256: 1f6a64780885bf00dc150ee401935378380ca1c459083323ea7862971dc169fa

Red Hat Enterprise Linux for Power, big endian 4

SRPM
samba-3.0.33-0.29.el4.src.rpm	SHA-256: 9f038231d345939b0742e486affeb39ebf7b6c58f407f933c5c825f2850e52fa
ppc
samba-3.0.33-0.29.el4.ppc.rpm	SHA-256: 123c8c70dd48c2c6ba0feb5ae5e62eeb343928c9057fc1a7b7120cd16cac5813
samba-client-3.0.33-0.29.el4.ppc.rpm	SHA-256: 7f7afc4818c7d43ecd4ac18ca1d1f9ae9230b42645736dc0f2d85500329d5dfc
samba-common-3.0.33-0.29.el4.ppc.rpm	SHA-256: 5dc012f6873de887bdf84ae6e9e99e801d8f9e0f0aa1637cc6a426d987050416
samba-common-3.0.33-0.29.el4.ppc64.rpm	SHA-256: a2f9a04a99d181e76f139c9ab7d3fd39d833c6570bf5148ea04f2aee9afc77a7
samba-swat-3.0.33-0.29.el4.ppc.rpm	SHA-256: 7192746bc82a871f266952cfdb3c636e2a871a7f4d28d5dc2f3043e4196495df