Koozali.org: home of the SME Server

[IMPORTANT] SOLVED now OK to apply samba updates

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
[IMPORTANT] SOLVED now OK to apply samba updates
« on: April 14, 2016, 10:16:11 AM »
Several people are reporting an issue with the various samba updates released yesterday (2016-04-13) to fix the mediatic badlock vulnerability. After installing those updates, Windows clients members of your domain will loose the trust relationship, making any domain login impossible.
Please, do not apply the update for now, we need some time to investigate and work with our upstream vendor to get this fixed.
You can follow the bug here: https://bugs.contribs.org/show_bug.cgi?id=9448 and here: https://bugzilla.redhat.com/show_bug.cgi?id=1326918
« Last Edit: June 27, 2016, 09:58:46 PM by TerryF »
C'est la fin du monde !!! :lol:

Offline pfloor

  • ****
  • 889
  • +1/-0
Re: [IMPORTANT] Do not apply samba updates
« Reply #1 on: April 15, 2016, 12:08:08 AM »
If you have applied the updates and need to remove them, you can try these instructions posted by turandot in the SME Server 9.X forum...

I was suffering from the problems described here: https://forums.contribs.org/index.php/topic,52402.0.html

To overcome the problems, uninstall the patches. This is achieved some commands on a root console. How to do that: https://access.redhat.com/solutions/64069

First check the ID number of the patch:
Code: [Select]
yum history
Then uninstall the related patches by
Code: [Select]
yum history undo <ID number>
To be 100% safe, I also applied
Code: [Select]
signal-event post-upgradeand
Code: [Select]
signal-event reboot
I hope this helps other users, I had to find it out  :lol:

turandot
In life, you must either "Push, Pull or Get out of the way!"

Offline pfloor

  • ****
  • 889
  • +1/-0
Re: [IMPORTANT] Do not apply samba updates
« Reply #2 on: April 15, 2016, 12:20:44 AM »
In the meantime, if you need to install other critical updates before the Samba issue is resolved, you can install all other updates and exclude Samba updates with the following...

Code: [Select]
yum update --exclude samba*
In life, you must either "Push, Pull or Get out of the way!"