enterprise-support team mailing list archive

[Arran Cudbard-bell <a.cudbardb@xxxxxxxxxxxxxx>]

Public bug reported:

Description:	Ubuntu 14.04 LTS
Release:	14.04

winbind:
  Installed: 2:4.1.6+dfsg-1ubuntu2.14.04.1
  Candidate: 2:4.1.6+dfsg-1ubuntu2.14.04.1
  Version table:
 *** 2:4.1.6+dfsg-1ubuntu2.14.04.1 0
        500 http://be.archive.ubuntu.com/ubuntu/ trusty-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     2:4.1.6+dfsg-1ubuntu2 0
        500 http://be.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages

Upstart script seems to think winbindd_privileged lives in
/var/run/samba, but it in fact lives in /var/lib/samba by default.

This may have changed in an upstream samba release.

Error in upstart script masks issue by creating winbindd_privileged
directory in the wrong place, and then fails to correct the permissions
on the actual winbindd_privileged directory, so users that are members
of winbindd_priv can't access the socket.

/etc/init/samba:
pre-start script
        test -x /usr/sbin/winbindd || exit 0
        mkdir -p /var/run/samba/winbindd_privileged
        chgrp winbindd_priv /var/run/samba/winbindd_privileged
        chmod 0750 /var/run/samba/winbindd_privileged
end script

should be changed to

pre-start script
        test -x /usr/sbin/winbindd || exit 0
        mkdir -p /var/lib/samba/winbindd_privileged
        chgrp winbindd_priv /var/lib/samba/winbindd_privileged
        chmod 0750 /var/lib/samba/winbindd_privileged
end script

Official documentation states http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html:
winbindd privileged socket directory (G)

This setting controls the location of the winbind daemon's privileged
socket.

Default: winbindd privileged socket directory =
$prefix/lib/winbindd_privileged

Default is definitely /var/lib.

Package's smb.conf does not set winbindd privileged socket directory nor
has it ever AFAIK.

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to samba in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1330220

Title:
  Winbind upstart script uses incorrect path to winbindd_privileged

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1330220/+subscriptions