[SOLVED] Squid HS ntlm authentication after upgrade from Debian 10 to 11

[Marlep]

Hello everyone,

Debian Bullseye 5.10.149-2, installed Samba version: 4.13.13.
However, in log.winbindd-idmap, I find a forest of error lines of the type:

Code: Select all

ldb: unable to dlopen /usr/lib/x86_64-linux-gnu/samba/ldb/acl.so : /usr/lib/x86_64-linux-gnu/samba/libauthkrb5.so.0: version `SAMBA_4.13.13_DEBIAN' not found (required by /usr/lib/x86_64-linux-gnu/samba/ldb/acl.so)

and a few lines in the style of:

Code: Select all

ldb: module version mismatch in ../../source4/dsdb/samdb/ldb_modules/ranged_results.c : ldb_version=1.4.6 module_version=2.2.4
ldb: failed to initialise module /usr/lib/x86_64-linux-gnu/samba/ldb/ranged_results.so : Unavailable

I don't know what to do to fix this problem anymore.

If anyone has any ideas, I'm all ears!

THANKS.

For your information:

Code: Select all

kinit Administrator

allows us to obtain a valid TGT

Code: Select all

wbinfo --ping-dc

works without any problems

Code: Select all

wbinfo --trusted-domains --verbose

sends a normal return

Code: Select all

getent passwd DOMAIN\\user

sends a normal return

Code: Select all

net ads testjoin

correctly returns "Join is OK"

[vcardon]

Hello Marlep,

you'll find almost no one on this forum who doesn't use Tranquil IT's Samba builds, as Samba versions in distributions are often very behind.

https://samba.tranquil.it/debian/

[Marlep]

Hi Vincent,

thanks for your reply, which I was somewhat dreading.
I'm really struggling with this problem, you never know, maybe someone will have a brilliant idea...

It's still puzzling that Winbind is complaining about not finding the Samba version, which is precisely the only one installed.

In any case, if anyone with expertise has any leads, I'd be happy to explore them.

[dcardon]

Hello Marlep,

as Vincent mentioned, using Samba distribution packages is problematic unless you upgrade the distribution very regularly. The Samba.org project only maintains versions N, N-1, and N-2, so currently 4.17, 4.16, and 4.15. While

distribution maintainers do create backports for some major bugs, they don't address all bugs. And there are still major security bugs in distributions that are still maintained (e.g., the kpasswd bug in Samba-AD in Ubuntu packages, among others).

Regarding your specific problem, if the .deb packages are indeed the correct versions, it's a packaging bug. You can check the backports to see if there are any newer packages available.

Regards,

Denis

[Marlep]

Hello Denis,

Thank you for your reply.
I still haven't found a solution to my problem.

I think I'll just reinstall everything from scratch; it'll save me time.

[dcardon]

Hello,

as mentioned above, you can retrieve the .deb packages from our repository: https://samba.tranquil.it/debian/samba-4.16/
or from Michael Tokarev's server, the new maintainer of Samba packages for Debian: http://www.corpit.ru/mjt/packages/samba/

I'm marking this topic as resolved.

Regards,

Denis