[Bug 1330220] Re: Winbind upstart script uses incorrect path to winbindd_privileged

[Philippe Clérié]

Still valid for Xenial.

I lost several hours chasing ghosts before I found that little problem.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1330220

Title:
  Winbind upstart script uses incorrect path to winbindd_privileged

Status in samba package in Ubuntu:
  Confirmed

Bug description:
  Description:	Ubuntu 14.04 LTS
  Release:	14.04

  winbind:
    Installed: 2:4.1.6+dfsg-1ubuntu2.14.04.1
    Candidate: 2:4.1.6+dfsg-1ubuntu2.14.04.1
    Version table:
   *** 2:4.1.6+dfsg-1ubuntu2.14.04.1 0
          500 http://be.archive.ubuntu.com/ubuntu/ trusty-updates/main amd64 Packages
          100 /var/lib/dpkg/status
       2:4.1.6+dfsg-1ubuntu2 0
          500 http://be.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages

  Upstart script seems to think winbindd_privileged lives in
  /var/run/samba, but it in fact lives in /var/lib/samba by default.

  This may have changed in an upstream samba release.

  Error in upstart script masks issue by creating winbindd_privileged
  directory in the wrong place, and then fails to correct the
  permissions on the actual winbindd_privileged directory, so users that
  are members of winbindd_priv can't access the socket.

  /etc/init/samba:
  pre-start script
          test -x /usr/sbin/winbindd || exit 0
          mkdir -p /var/run/samba/winbindd_privileged
          chgrp winbindd_priv /var/run/samba/winbindd_privileged
          chmod 0750 /var/run/samba/winbindd_privileged
  end script

  should be changed to

  pre-start script
          test -x /usr/sbin/winbindd || exit 0
          mkdir -p /var/lib/samba/winbindd_privileged
          chgrp winbindd_priv /var/lib/samba/winbindd_privileged
          chmod 0750 /var/lib/samba/winbindd_privileged
  end script

  Official documentation states http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html:
  winbindd privileged socket directory (G)

  This setting controls the location of the winbind daemon's privileged
  socket.

  Default: winbindd privileged socket directory =
  $prefix/lib/winbindd_privileged

  Default is definitely /var/lib.

  Package's smb.conf does not set winbindd privileged socket directory
  nor has it ever AFAIK.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1330220/+subscriptions