group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1578576@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package samba - 2:4.3.9+dfsg-0ubuntu1

---------------
samba (2:4.3.9+dfsg-0ubuntu1) yakkety; urgency=medium

  * SECURITY REGRESSION: Updated to 4.3.9 to fix multiple regressions in
    the previous security updates. (LP: #1577739)
    - debian/control: bump tevent Build-Depends to 0.9.28.
  * SECURITY REGRESSION: NTLM authentication issues (LP: #1578576)
    - debian/patches/samba-bug11912.patch: let msrpc_parse() return
      talloc'ed empty strings in libcli/auth/msrpc_parse.c.
    - debian/patches/samba-bug11914.patch: make
      ntlm_auth_generate_session_info() more complete in
      source3/utils/ntlm_auth.c.

 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>  Wed, 25 May 2016
09:29:15 -0400

** Changed in: samba (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1578576

Title:
  ntlm_auth --helper-protocol=squid-2.5-ntlmssp report segfault

Status in samba:
  Unknown
Status in samba package in Ubuntu:
  Fix Released
Status in samba source package in Trusty:
  Fix Released
Status in samba source package in Wily:
  Fix Released
Status in samba source package in Xenial:
  Fix Released

Bug description:
  System version: Ubuntu 14.04.4 LTS
  Squid version: 2:4.3.8+dfsg-0ubuntu0.14.04.2
  Winbind version: 2:4.3.8+dfsg-0ubuntu0.14.04.2 upgrade to 2:4.3.9+dfsg-0ubuntu0.14.04.1

  My ubuntu server installed Squid to perform http_proxy. Squid auth the
  Active Directory users(Win2003) by winbind, settings like follow:

  ...
  auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
  ...

  Everything is ok until I upgrade winbind from 2:4.3.8+dfsg-
  0ubuntu0.14.04.2 to 2:4.3.9+dfsg-0ubuntu0.14.04.1 today. Squid can't
  auth the AD users anymore. There are some error log in the cache.log:

  ...
  2016/05/05 13:50:45| ERROR: NTLM Authentication Helper '0x7fb54812af68' crashed!.
  2016/05/05 13:50:45| ERROR: NTLM Authentication validating user. Error returned 'BH Internal error'
  ...

  And there are some error log in the /var/log/syslog:

  ...
  May  5 09:26:08 ocelot kernel: [  187.793014] ntlm_auth[4543]: segfault at 8 ip 00007f10aad619b0 sp 00007ffc1ed0e778 error 4 in libsamba-security.so.0[7f10aad56000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.207378] ntlm_auth[5062]: segfault at 8 ip 00007f41ada4d9b0 sp 00007ffebc1a1108 error 4 in libsamba-security.so.0[7f41ada42000+1b000]
  May  5 09:26:08 ocelot kernel: [  188.438501] ntlm_auth[4535]: segfault at 8 ip 00007f73fa26a9b0 sp 00007ffc1c63f808 error 4 in libsamba-security.so.0[7f73fa25f000+1b000]
  May  5 09:26:35 ocelot kernel: [  214.949867] ntlm_auth[5063]: segfault at 8 ip 00007fc1b5c459b0 sp 00007fffd3d5b398 error 4 in libsamba-security.so.0[7fc1b5c3a000+1b000]
  May  5 09:26:35 ocelot kernel: [  215.026850] ntlm_auth[5067]: segfault at 8 ip 00007f782ba5c9b0 sp 00007ffe59d96aa8 error 4 in libsamba-security.so.0[7f782ba51000+1b000]
  ...

  And now I downgraded winbind to 2:4.1.6+dfsg-1ubuntu2(I can't
  downgrade it to 2:4.3.8+dfsg-0ubuntu0.14.04.2, it keeps telling me
  "Unable to find a version..."), Squid auth_param ntlm works again.

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1578576/+subscriptions