Re: Call for testing: upcoming samba security update

2016-04-14 Thread Birgit Berger (UV Wien)
is it better to wait to update samba 4.1.17 to 4.2.10 on jessie? How do I revert to previous version if the update fails? Are there any instructions how to that? KR birgit Virgo Pärna schreibt: >On Thu, 14 Apr 2016 10:02:22 +0100, Chris Boot > wrote: >> >> When running a Samba 4 DC, the shift

Re: Call for testing: upcoming samba security update

2016-04-14 Thread oeh univie edv lists
This doesn't sound very reassuring. Is it better to wait to update samba 4.1.17 to 4.2.10 on jessie? How do I revert to previous version 4.1.17 if the update fails? Are there any instructions how do that? KR birgit Virgo Pärna schreibt: >On Thu, 14 Apr 2016 10:02:22 +0100, Chris Boot > wrote: >

Re: Call for testing: upcoming samba security update

2016-04-14 Thread Virgo Pärna
On Thu, 14 Apr 2016 10:02:22 +0100, Chris Boot wrote: > > When running a Samba 4 DC, the shift from 4.1 to 4.2 brings some major > changes with it and people's smb.conf will need changing. The "server > services" line needs "winbind" replacing with "winbindd", and the user > must ensure the winbi

Re: Call for testing: upcoming samba security update

2016-04-14 Thread Chris Boot
On 14/04/16 10:02, Chris Boot wrote: > Firstly: > >> Finally, two important configuration options should be considered, >> that we were unable to silently change defaults for: >> - smb signing = required >> - ntlm auth = no >> >> Without smb signing = required, Man in the Middl

Re: Call for testing: upcoming samba security update

2016-04-14 Thread Paul Wise
On Thu, Apr 14, 2016 at 6:03 PM, Vladislav Kurz wrote: > I have noticed that samba-common-bin now depends on samba. It didn't before > the upgrade. Is there any special reason for that? I just need nmblookup on > some servers (and smbclient/cifs) but not the server package. This has been fixed in

Re: Call for testing: upcoming samba security update

2016-04-14 Thread Vladislav Kurz
Hi, I have noticed that samba-common-bin now depends on samba. It didn't before the upgrade. Is there any special reason for that? I just need nmblookup on some servers (and smbclient/cifs) but not the server package. -- Best Regards Vladislav Kurz

Re: Call for testing: upcoming samba security update

2016-04-14 Thread Chris Boot
On 12/04/16 21:27, Salvatore Bonaccorso wrote: > Hi > > The upcoming Samba update is bigger than usual since for Jessie an > update is needed to 4.2. We want to expose the package a bit more for > additional testing. Please test the packages found on [snip] Hi folks, So I missed the testing win

Call for testing: upcoming samba security update

2016-04-12 Thread Salvatore Bonaccorso
Hi The upcoming Samba update is bigger than usual since for Jessie an update is needed to 4.2. We want to expose the package a bit more for additional testing. Please test the packages found on https://people.debian.org/~carnil/tmp/samba/ (no apt repository available for these test packa