Koozali.org: home of the SME Server

Ref [IMPORTANT] SOLVED OK to now apply samba updates

Offline turandot

  • *
  • 82
  • +0/-0
Ref [IMPORTANT] SOLVED OK to now apply samba updates
« on: April 14, 2016, 08:05:57 PM »
I was suffering from the problems described here: https://forums.contribs.org/index.php/topic,52402.0.html

To overcome the problems, uninstall the patches. This is achieved some commands on a root console. How to do that: https://access.redhat.com/solutions/64069

First check the ID number of the patch:
Code: [Select]
yum history
Then uninstall the related patches by
Code: [Select]
yum history undo <ID number>
To be 100% safe, I also applied
Code: [Select]
signal-event post-upgradeand
Code: [Select]
signal-event reboot
I hope this helps other users, I had to find it out  :lol:

turandot

EDIT: added YET to subject.
« Last Edit: June 27, 2016, 09:58:01 PM by TerryF »

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #1 on: April 16, 2016, 10:26:22 AM »
As announced on all mailing list at contribs :


Several people are reporting an issue with the various samba updates
released yesterday (2016-04-13) to fix the mediatic badlock
vulnerability. After installing those updates, Windows clients members
of your domain will loose the trust relationship, making any domain
login impossible.
Please, do not apply the update for now, we need some time to
investigate and work with our upstream vendor to get this fixed.
You can follow the bug here:
https://bugs.contribs.org/show_bug.cgi?id=9448 and here:
https://bugzilla.redhat.com/show_bug.cgi?id=1326918

Offline symie

  • 9
  • +0/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #2 on: April 16, 2016, 08:32:10 PM »
Hi,

thanks for the information!
that cost me today about five hours work.
Code: [Select]
yum history undo <ID number>etc, saved My life

The next time I read here first  :-?

guest22

Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #3 on: April 17, 2016, 06:19:47 AM »

Offline symie

  • 9
  • +0/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #4 on: April 18, 2016, 10:11:51 PM »
Our wiki holds TONS of information :wink:

https://wiki.contribs.org/Useful_Commands#YUM.27ing_and_repositories

Yes, the wiki is great! But my "five hours work" I need before I read this thread and before I see  the need of this command.....
Can someone tell us if the problem is solved?

guest22

Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #5 on: April 18, 2016, 10:13:13 PM »
ONLY if you follow upstream, for there is where the issue resides.

Offline dvdsmith

  • *
  • 40
  • +0/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #6 on: April 18, 2016, 11:04:06 PM »
I set up a new 9.1 server over the weekend, still testing it and ran into this problem. Running "yum downgrade samba3x\* libsmbclient" does nothing since there is nothing to roll back too. This server isn't in use yet. Should I just wait for the fix from Redhat or remove the new version and manually download/install the previous one?

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #7 on: April 18, 2016, 11:34:04 PM »
9.1 is not affected until you apply yum updates  (in which case you should be able to rollback). We're still waiting for a fix from upstream. They already have a fix currently being tested, but not released yet
C'est la fin du monde !!! :lol:

Offline dvdsmith

  • *
  • 40
  • +0/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #8 on: April 22, 2016, 02:38:49 PM »
9.1 is not affected until you apply yum updates  (in which case you should be able to rollback). We're still waiting for a fix from upstream. They already have a fix currently being tested, but not released yet

Thanks! For reasons I couldn't determine, the same rollback command worked the next day. Before that it would return a "nothing to do" message. The Win 8.1 and 10 clients I have joined to it login in fine now.

Offline turandot

  • *
  • 82
  • +0/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #9 on: May 03, 2016, 08:15:16 PM »
I am checking the Redhat bug tracker https://bugzilla.redhat.com/show_bug.cgi?id=1326918 once a while. The bug is neither fixed upstream within CentOS, nor with SME yet?

turandot

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #10 on: May 03, 2016, 08:42:29 PM »
We're still waiting for Red Hat to release the fix
C'est la fin du monde !!! :lol:

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #11 on: May 04, 2016, 12:26:07 AM »
We're still waiting for Red Hat to release the fix


Quote
Andreas Schneider 2016-04-19 01:52:27 EDT
If you require a hotfix until we are able to roll out an update please talk to your Red Hat support contact!

No, we're waiting for them to extract a bit more cash from lots of desperate customers  = ! :-o
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline bunkobugsy

  • *
  • 274
  • +4/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #12 on: May 27, 2016, 05:50:01 AM »
Anyone applied recent 6.8 upstream samba packages? Are these fixed by any chance?

guest22

Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #13 on: May 27, 2016, 07:44:10 AM »
I hope this helps other users, I had to find it out  :lol:


No need to find this out. Simply read the wiki https://wiki.contribs.org/Useful_Commands#YUM.27ing_and_repositories

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: Ref [IMPORTANT] Do not apply samba updates YET
« Reply #14 on: May 27, 2016, 08:01:11 AM »
The new updates show versions samba x86_64 3.6.23-35.el6_8

Version that first caused the issues was samba-3.6.23-30.el6_7.x86_64

BUT, Red Hat bug 1326918, https://bugzilla.redhat.com/show_bug.cgi?id=1326918 that covers the problem HAS NOT been resolved, so I would assume the bug is still evident, even in the latets samba update.
--
qui scribit bis legit