RHBA-2011:1007 - Bug Fix Advisory

Topic

Updated samba3x packages that fix multiple bugs are now available for Red Hat
Enterprise Linux 5.

Description

Samba is the suite of programs by which a lot of PC-related machines share
files, printers, and other information (such as lists of available files and
printers).

This update fixes the following bugs:

• Prior to this update, the smbd service unexpectedly changed file permissions

while renaming files, although the permissions change was not requested by the
Samba client. This erroneous behavior has been fixed in this update and no
longer occurs. (BZ#661311)

• When trying to access resources on Samba server with an invalid password, any

further attempt to log in after the unsuccessful attempt, no matter what was the
account or Samba shares, failed with the "session setup failed: NT code
0x1c010002" error message. This bug has been fixed in this update so that
further attempts to log in no longer fail, as expected. (BZ#716961)

• Prior to this update, it was not possible to join a Samba machine in the

Windows Server 2008 Active Directory (Active Directory Domain Services) if using
credentials from a trusted domain. This bug has been fixed in this update so
that it is now possible to join a Samba machine in the Windows Server 2008
Active Directory, as expected. (BZ#713552)

• When joining a Windows domain, when an attempt to list all the users with

"wbinfo" and "getent" records was made, there was no output provided although it
was expected. This unintended behavior has been fixed in this update so that
issuing a 'getent passwd "[GROUPNAME]\[username]"' command for all valid users
and groups works, as expected. (BZ#679066)

• When changing printer settings on a Windows client for printers shared via a

Samba Print Server or CUPS, these settings were not saved properly. This bug has
been fixed in this update so that the printer settings are now saved properly,
as expected. (BZ#698400)

• When there was a large number of groups and users, if winbind attempted to

continue after resolving the first 250 groups, winbind terminated unexpectedly
and produced a core dump. This bug has been fixed in this update so that winbind
now works as expected when resolving groups. (BZ#704279)

• The smbclient program incorrectly guessed the server principal if a user and

server were not in the same Kerberos 5 (krb5) realm and the server's short name
was used. As a result, connection to the server failed. This bug has been fixed
in this update so that connection to the server now works as expected.
(BZ#701661)

• Adding and removing printers with CUPS was not correctly handled by Samba if

the "load printers = yes" option was set. Furthermore, error messages emitted by
CUPS to Samba were not handled correctly. Also, trying to set the "printcap name
= /etc/printcap" option in order to avoid performance penalties when using CUPS
with a large number of printers and clients was not working properly. Finally,
parsing a printcap file was not working as expected. The aforementioned problems
have been fixed in this update and no longer occur. (BZ#701975)

• Samba was not able to receive printer's "location" attribute from CUPS. As a

result, it was not possible to view printer's description while browsing
printers that were available on the system. This bug has been fixed in this
update so that the "location" attribute is now received properly by Samba, as
expected. (BZ#702039)

• The mount.cifs(8) man page did not contain a description for the "--nounix"

option. This has been fixed in this update by adding the missing description to
the man page. (BZ#621686)

• Prior to this update, there were certain inconsistencies between the available

options described in the wbinfo(1) man page and the output of the "wbinfo

• -help" command. The majority of these inconsistencies has been fixed in this

update. (BZ#679086)

All users of samba3x are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 621686 - mount.cifs(8) man page missing nounix option
• BZ - 661311 - smbd changing mode of files on rename
• BZ - 698400 - Printer Settings on Windows Client are not applied after update to samba3.5
• BZ - 702039 - Samba3x is not getting printer "location" attribute from Cups
• BZ - 713552 - Problems joining RHEL5 to AD 2008 trusted domain
• BZ - 716961 - After type an invalid password, any further attempt to authenticate fails with error NT code 0x1c010002

CVEs

(none)

References

(none)