[Samba] gnutls 3.7.2 in https://copr.fedorainfracloud.org/coprs/sergiomb/SambaAD/ ?

[Jürgen Echter]

Hi,

i got the update today and now samba (after compiling) isn't working as i expect it to work.

In fact dovecot/pfsense cannot authenticate users anymore.

What i see in the logs:

2022/01/23 20:31:10.008619, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2022/01/23 20:31:10.011317, 0] ../../source4/lib/tls/tls_tstream.c:1300(_tstream_tls_accept_send) _tstream_tls_accept_send: TLS ../../source4/lib/tls/tls_tstream.c:1300 - The request is invalid.. Failed to set default priorities [2022/01/23 20:31:10.011428, 3] ../../source4/samba/service_stream.c:67(stream_terminate_connection) stream_terminate_connection: Terminating connection - 'ldapsrv_accept_tls_loop: tstream_tls_accept_recv() - 22:Invalid argument' [2022/01/23 20:31:21.797979, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb

I compiled samba before the update like this and it worked:

export PKG_CONFIG_PATH=/usr/lib64/compat-gnutls34/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig
./configure
make

I haven't found any compat-nettle in /usr/lib64

compat-gnutls34 is present, samba also compiled and installed fine but i cannot authenticate anymore.

i'm using centos 7 and samba-4.15.4

Thanks for hints

Juergen

(did send this mail twice as i'm not sure if the first one did arrive properly)

Am Donnerstag, Januar 20, 2022 15:53 CET, schrieb Sérgio Basto via samba <samba at lists.samba.org>:
 Hi,

copr sergiomb/SambaAD update finished

mock -r epel-7-x86_64 -a
https://download.copr.fedorainfracloud.org/results/sergiomb/SambaAD/epel-7-x86_64/
install "pkgconfig(gnutls) >= 3.5"

installs compat-gnutls37-devel.x86_64

any feedback is welcome

Best regards,

On Mon, 2022-01-17 at 14:50 +0000, Sérgio Basto wrote:
> Hi, added contacts from previous thread (back to 2020 )
>
> as requested I will update sergiomb/SambaAD with compat-gnutls 3.7.2
> and his dependencies.
>
> Hopefully was just follow c9-beta [1] .
>
> Centos 9 is just a continuation of Centos 8 , but now Centos will be
> ahead of RHEL, i.e., first will came out centos 9 stream and just after
> RHEL 9 , that is why the release number was bumped. AFAIU
>  
> [1]
> https://git.centos.org/rpms/nettle/tree/c9-beta
> https://git.centos.org/rpms/gnutls/tree/c9-beta
>
> On Mon, 2022-01-17 at 14:36 +0100, Volker Lendecke wrote:
> > Hi Sérgio,
> >
> > that looks very good, thanks!
> >
> > Can you move that to just SambaAD?
> >
> > Thanks!
> >
> > Volker
> >
> > Am Mon, Jan 17, 2022 at 01:13:58AM +0000 schrieb Sérgio Basto:
> > > Please test it in SambaAD-testing copr
> > >
> > > https://copr.fedorainfracloud.org/coprs/sergiomb/SambaAD-testing/
> > >  
> > > if it is good I will move to SambaAD
> > >
> > >
> > >
> > > On Sat, 2022-01-15 at 15:02 +0000, Sérgio Basto wrote:
> > > > Checking ...
> > > >
> > > > On Fri, 2022-01-14 at 11:39 +0100, Volker Lendecke wrote:
> > > > > Hi Sergio,
> > > > >
> > > > > due to
> > > > > https://gitlab.com/samba-team/samba/-/merge_requests/2327 and
> > > > > the fix in
> > > > > https://gitlab.com/gnutls/gnutls/-/merge_requests/1396
> > > > > we're considering to require gnutls 3.7.2 to build Samba on
> > > > > RHEL7. As
> > > > > we're using your copr repo in our gitlab CI infrastructure, it
> > > > > would
> > > > > be great if we could get 3.7.2 in copr. Would that be possible?
> > > > >
> > > > > Thanks,
> > > > >
> > > > > Volker
> > > >
> > >
> > > --
> > > Sérgio M. B.
> > >
>

--
Sérgio M. B.


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba