Re: samba security update - workaround does not start

From	Vladislav Kurz <vladislav.kurz@webstep.net>
Newsgroups	linux.debian.security
Subject	Re: samba security update - workaround does not start
Date	2018-03-13 17:00 +0100
Message-ID	<vsUvg-7RH-11@gated-at.bofh.it> (permalink)
References	<vsUvg-7RH-13@gated-at.bofh.it> <vsOSR-450-3@gated-at.bofh.it> <vsUvg-7RH-15@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hello all,

I wanted to run the workaround script from
https://wiki.samba.org/index.php/CVE-2018-1057

But it fails with:

# ./samba_CVE-2018-1057_helper --lock-pwchange
Temporarily overriding 'dsdb:schema update allowed' setting
Traceback (most recent call last):
  File "./samba_CVE-2018-1057_helper", line 139, in <module>
    sd_helper.modify_sd_on_dn(msg.dn, new_desc)
  File "/usr/lib/python2.7/dist-packages/samba/sd_utils.py", line 40, in
modify_sd_on_dn
    m.dn = Dn(self.ldb, object_dn)
TypeError: argument 2 must be string, not ldb.Dn
A transaction is still active in ldb context [0x228cc20] on
tdb:///var/lib/samba/private/sam.ldb


--dry-dun runs nicely, listing all users from LDAP.

Has anyone idea what's wrong? Maybe some python modules?


-- 
Best Regards
        Vladislav Kurz

Back to linux.debian.security | Previous | Next | Find similar | Unroll thread

Thread

Re: samba security update - workaround does not start Vladislav Kurz <vladislav.kurz@webstep.net> - 2018-03-13 17:00 +0100

csiph-web