Issued:
2014-09-16
Updated:
2014-09-16

RHBA-2014:1212 - samba3x bug fix and enhancement update

Synopsis

samba3x bug fix and enhancement update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated samba3x packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 5.

Description

Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

The samba3x packages have been upgraded to upstream version 3.6.23, which provides a number of bug fixes and enhancements over the previous version. Note that this also changes the format of the Trivial Database (TDB) files, and the existing TDB files are updated to conform to the new format when you upgrade your Samba packages. In addition, earlier versions of Samba are not compatible with the new TDB file format. In order to successfully downgrade to an earlier version of Samba, you must use a backed up version of your TDB files, which uses the previous formatting. (BZ#1035006)

This update also fixes the following bugs:

  • Due to incorrect Security Identifier (SID) mappings for Access Control List (ACL) files, generating a user access token previously sometimes failed. With this update, the conversion of SID values for ACL files has been amended and user access tokens are created as expected. (BZ#1109436)

  • Prior to this update, an incorrect return value check caused the fallback from TCP/IP to a named pipe to fail. As a consequence, it was not possible to create a Local Security Authority (LSA) query for user and group information. This update fixes the check of the above return value, allowing the fallback to a named pipe to occur. As a result, LSA querying over a named pipe now works as expected. (BZ#981369)

  • Prior to this update, the search string of the function encoding the Lightweight Directory Access Protocol (LDAP) binary, ldb_binary_encode(), detected the used character set incorrectly. As a consequence, Samba generated invalid search strings. This update fixes the encoding of the local string, and Samba now generates valid LDAP search strings. (BZ#1033773)

  • Previously, Samba always wrote a negative cache entry for the user map. As a consequence, user name mapping did not function consistently. With this update, Samba only writes a negative cache entry if the mapping fails, and user name mapping now works correctly. (BZ#1081002)

  • When the smbd server daemon executed spooling for a print action, it previously did not include the job ID in the generated spool-file path. As a consequence, the spool check could not validate the spool-file's existence, and the printing thus failed. With this update, smbd includes the job ID in the spool-file path and parsing the file name succeeds. As a result, printing via Samba now works as expected. (BZ#996656)

In addition, this update adds the following enhancements:

  • A timeout option has been added to the smbclient command-line tool. This allows users to customize the timeout value for Samba file operations by using the "smbclient --help | grep timeout" command. (BZ#1037273)

  • It is now possible to set a different OS version for the Spool Subsystem (spoolss) configuration. This allows users to work around situations where printing drivers do not interact with the printing server because they detect that the version of the printing server is too old. (BZ#1101922)

Users of Samba are advised to upgrade to these updated packages, which fix these bugs and add these enhancements. After installing this update, the smb service will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied, and back up your existing TDB files.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for Power, big endian5ppc
Red Hat Enterprise Linux for IBM z Systems5s390x
Red Hat Enterprise Linux Workstation5x86_64
Red Hat Enterprise Linux Workstation5i386
Red Hat Enterprise Linux Server5x86_64
Red Hat Enterprise Linux Server5ia64
Red Hat Enterprise Linux Server5i386
Red Hat Enterprise Linux Server from RHUI5x86_64
Red Hat Enterprise Linux Server from RHUI5i386
Red Hat Enterprise Linux Desktop5x86_64
Red Hat Enterprise Linux Desktop5i386

Updated Packages

  • samba3x-winbind-3.6.23-6.el5.i386.rpm
  • samba3x-swat-3.6.23-6.el5.ppc.rpm
  • samba3x-winbind-devel-3.6.23-6.el5.s390x.rpm
  • samba3x-client-3.6.23-6.el5.i386.rpm
  • samba3x-swat-3.6.23-6.el5.s390x.rpm
  • samba3x-3.6.23-6.el5.ppc.rpm
  • samba3x-winbind-3.6.23-6.el5.ppc.rpm
  • samba3x-common-3.6.23-6.el5.ia64.rpm
  • samba3x-debuginfo-3.6.23-6.el5.s390x.rpm
  • samba3x-debuginfo-3.6.23-6.el5.i386.rpm
  • samba3x-3.6.23-6.el5.i386.rpm
  • samba3x-winbind-3.6.23-6.el5.ia64.rpm
  • samba3x-winbind-devel-3.6.23-6.el5.x86_64.rpm
  • samba3x-winbind-devel-3.6.23-6.el5.ppc.rpm
  • samba3x-common-3.6.23-6.el5.s390x.rpm
  • samba3x-winbind-devel-3.6.23-6.el5.ppc64.rpm
  • samba3x-3.6.23-6.el5.s390x.rpm
  • samba3x-client-3.6.23-6.el5.ppc.rpm
  • samba3x-winbind-3.6.23-6.el5.s390.rpm
  • samba3x-doc-3.6.23-6.el5.ppc.rpm
  • samba3x-debuginfo-3.6.23-6.el5.ppc.rpm
  • samba3x-common-3.6.23-6.el5.ppc.rpm
  • samba3x-client-3.6.23-6.el5.s390x.rpm
  • samba3x-winbind-3.6.23-6.el5.s390x.rpm
  • samba3x-winbind-3.6.23-6.el5.ppc64.rpm
  • samba3x-debuginfo-3.6.23-6.el5.ia64.rpm
  • samba3x-client-3.6.23-6.el5.x86_64.rpm
  • samba3x-debuginfo-3.6.23-6.el5.x86_64.rpm
  • samba3x-domainjoin-gui-3.6.23-6.el5.ppc.rpm
  • samba3x-swat-3.6.23-6.el5.x86_64.rpm
  • samba3x-debuginfo-3.6.23-6.el5.s390.rpm
  • samba3x-swat-3.6.23-6.el5.ia64.rpm
  • samba3x-doc-3.6.23-6.el5.s390x.rpm
  • samba3x-winbind-devel-3.6.23-6.el5.i386.rpm
  • samba3x-swat-3.6.23-6.el5.i386.rpm
  • samba3x-debuginfo-3.6.23-6.el5.ppc64.rpm
  • samba3x-domainjoin-gui-3.6.23-6.el5.s390x.rpm
  • samba3x-winbind-devel-3.6.23-6.el5.ia64.rpm
  • samba3x-domainjoin-gui-3.6.23-6.el5.i386.rpm
  • samba3x-winbind-3.6.23-6.el5.x86_64.rpm
  • samba3x-winbind-devel-3.6.23-6.el5.s390.rpm
  • samba3x-doc-3.6.23-6.el5.ia64.rpm
  • samba3x-domainjoin-gui-3.6.23-6.el5.x86_64.rpm
  • samba3x-common-3.6.23-6.el5.x86_64.rpm
  • samba3x-3.6.23-6.el5.ia64.rpm
  • samba3x-doc-3.6.23-6.el5.x86_64.rpm
  • samba3x-client-3.6.23-6.el5.ia64.rpm
  • samba3x-doc-3.6.23-6.el5.i386.rpm
  • samba3x-3.6.23-6.el5.x86_64.rpm
  • samba3x-3.6.23-6.el5.src.rpm
  • samba3x-common-3.6.23-6.el5.i386.rpm
  • samba3x-domainjoin-gui-3.6.23-6.el5.ia64.rpm

Fixes

CVEs

(none)

References

(none)

Additional information