This bug was fixed in the package samba - 2:3.6.3-2ubuntu2.5
---
samba (2:3.6.3-2ubuntu2.5) precise; urgency=low
* d/patches/winbind-kerberos-refresh.patch: correctly cache credentials for
automatic Kerberos ticket renewal (LP: #1037055).
-- Robie Basak
Just an update...
3.6.3-2ubuntu2.5 is still working fine for me, and has not had any of
the problems listed above reappear.
** Tags removed: verification-needed
** Tags added: verification-done
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is
Thanks Brian, I've installed the winbind, libpam-winbind, libwbclient0,
samba-common, smbclient packages (3.6.3-2ubuntu2.5) from proposed.
I'll keep you posted. It might take a week or two before I'm confident
they are working correctly.
--
You received this bug notification because you are a
Hello Ian, or anyone else affected,
Accepted samba into precise-proposed. The package will build now and be
available at
http://launchpad.net/ubuntu/+source/samba/2:3.6.3-2ubuntu2.5 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
Although inconvenient, personally I'm ok with quantal being skipped.
Thanks.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1037055
Title:
winbind does not refresh kerberos tickets
** Changed in: samba (Ubuntu)
Status: Confirmed = Fix Released
** Also affects: samba (Ubuntu Precise)
Importance: Undecided
Status: New
** Changed in: samba (Ubuntu Precise)
Importance: Undecided = Low
** Changed in: samba (Ubuntu Precise)
Status: New = Triaged
--
Thanks, I've verified that the fix is in raring and I'm sponsoring the
fix to precise, subscribing ubuntu-sru.
I'm also going to skip quantal unless somebody does a strong case to get
the bug fixed there, that's a nonLTS version and the SRU and QA teams
are already stretched, so we are trying to
** Description changed:
- winbindd will renew kerberos tickets until they expire, but it seems
- unable to refresh them before expiry.
+ [Impact]
+ * If it happens on the client, the client can't authenticate to any
kerberised servers (Windows or Linux).
+ * If it happens on the server, all
** Patch added: quantal.debdiff
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1037055/+attachment/3584862/+files/quantal.debdiff
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
@styro
I've prepared updates for both precise and quantal. Now awaiting a
sponsor.
In the meantime, please could you fix up the test case? It needs to
contain steps to reproduce the problem such that others are able to
perform the same steps that you are.
Someone will need to further verify
** Patch added: precise.debdiff
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1037055/+attachment/3584864/+files/precise.debdiff
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
** Description changed:
[Impact]
* If it happens on the client, the client can't authenticate to any
kerberised servers (Windows or Linux).
* If it happens on the server, all clients (Windows or Linux) are unable to
connect to that server any more.
* The main impact is very flaky
Just a gentle prod...
:)
Q: Will updates be published for both precise and quantal? And will I
need to further test both?
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1037055
@styro
Thanks for testing my package and sorry I haven't taken this further
yet. I need to prepare an SRU. But this week is UDS, Linaro Connect and
Raring Feature Freeze so I'm a bit tied up. I appreciate the reminder
and please do poke me again if I haven't done anything by next week.
--
You
Just checking in...
These PPA updates have been solid for me still.
Is there any more testing or anything that needs doing to progress this
further?
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
After further testing, I'm certain the updated packages have fixed the
bug.
Leaving two machines running logged in and idle over the weekend, the
unpatched machine lost its credential cache (again) while the patched
one succesfully renewed its TGT all weekend. And it also successfully
got a new
I've done some testing on machines with and without the new packages.
Conclusion: I think things have improved with the new packages.
More details:
It is hard to tell for sure as there are various things (eg using sudo,
or unlocking the desktop etc) other than winbind that will refresh the
Thanks Robie, I've installed your PPA for testing.
As soon as I know if it has fixed anything (or if it hasn't), I'll
report back.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
I've uploaded a test fix to my experimental PPA
(https://launchpad.net/~racb/+archive/experimental). Since I can't
verify the fix myself, please can you test the package available from
here before I request an archive upload? Once this is checked, I will
request the fix be uploaded officially. The
I'm also hit by what seems to be the same bug on 12.04. This happens on
both desktops and servers using winbind (pam_winbind) to manage kerberos
keytabs and ticket caches.
We are authenticating against an Active Directory domain controller (2008R2).
We use the winbind/kerberos combo for:
*
This was fixed upstream in 3.6.8 with commit
02c4886863e9a4066b89f2dcb8ff853bfbda7e86. Raring is on 2:3.6.9-1ubuntu1
so already contains the fix.
It looks like it'll be trivial to backport a fix to 12.04 if anybody
needs this. But for this to happen, we need a well-defined test case and
other
It looks like I am being hit by this. I have Windows users being
periodically unable to access shares on a Samba server. I believe Samba
put in a patch in 3.6.7 or thereabouts. Could we please update?
Thanks
--
You received this bug notification because you are a member of Ubuntu
Server Team,
** Changed in: samba
Status: Unknown = Fix Released
** Changed in: samba
Importance: Unknown = Medium
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1037055
Title:
winbind
Thanks for reporting this bug and any supporting documentation. Since
this bug has enough information provided for a developer to begin work,
I'm going to mark it as confirmed and let them handle it from here.
Thanks for taking the time to make Ubuntu better!
** Changed in: samba (Ubuntu)
I compiled 2.6.7 from the original source and it seems to not refresh
kerberos tickets either.
I have reported this upstream.
See https://bugzilla.samba.org/show_bug.cgi?id=9098
** Bug watch added: Samba Bugzilla #9098
https://bugzilla.samba.org/show_bug.cgi?id=9098
--
You received this
** Also affects: samba via
https://bugzilla.samba.org/show_bug.cgi?id=9098
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1037055
** Patch added: diry hack to fix issue
https://bugs.launchpad.net/bugs/1037055/+attachment/3261981/+files/refresh_ticket.patch
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1037055
** Description changed:
+ winbindd will renew kerberos tickets until they expire, but it seems
+ unable to refresh them before expiry.
- winbindd will renew kerberos tickets until they expire, but it seems unable
to refresh them before expiry.
-
- I am using in smb.conf
+ I have the
Thank you for taking the time to report this bug and helping to make
Ubuntu better. I appreciate the quality of this bug report and I'm sure
it'll be helpful to others experiencing the same issue.
This sounds like an upstream bug to me. Please can you verify this by
building directly from the
The attachment diry hack to fix issue of this bug report has been
identified as being a patch. The ubuntu-reviewers team has been
subscribed to the bug report so that they can review the patch. In the
event that this is in fact not a patch you can resolve this situation by
removing the tag
30 matches
Mail list logo
