[Samba] Authentication issue after updating samba on CentOS 7 (from yum)

[Robert Marcano]

On 1/10/22 12:47 PM, Alex via samba wrote:
> Robert, it appears I was too fast in reply. The fix you mentioned didn't help :(

Sad to hear that. I didn't try the missing patch, but the work around using:

   username map script = /var/lib/samba/scripts/username_map_script.sh
   local nt token from nss:SAMBA = no


> 
>> Thank you very much for your reply! I've applied the fixing patch and it did the job! Hopefully, the RH team will release the official fix soon.
> 
>>> On 1/10/22 6:21 AM, Alex via samba wrote:
>>>> Rowland, could you please help me with this? I tried to remove some patches and rebuild but this is very time-consuming and I wasn't able to find the affecting patch yet :(
>>>>> Also I'm wondering what 2.33.1 and 2.30.2 mean in the patch file, for example:
>>>> # diff samba-4.10-redhat.patch.15 samba-4.10-redhat.patch |less
>>>> 4c4
>>>> < Subject: [PATCH 01/48] s3-rpcserver: fix security level check for
>>>> ---
>>>>> Subject: [PATCH 01/88] s3-rpcserver: fix security level check for
>>>> 83c83
>>>> < 2.30.2
>>>> ---
>>>>> 2.33.1
> 
>>> I was hit by this problem, apparently is a missing backported patch [1].
> 
>>> The workaround at [2] is working for me. Just updated the domain name on the script and placed it instead on /var/lib/samba/scripts to make SELinux happy. Will wait for an updated RPM and remove the workaround for testing at that time.
> 
>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=2036595
>>> [2] https://bugzilla.samba.org/show_bug.cgi?id=14901#c0
> 
> 
>> [skip]
> 
> 
> 
>