Page 1 of 1

[SOLVED] Squid HS ntlm authentication after upgrade from Debian 10 to 11

Published: November 3, 2022 - 4:33 PM
by Marlep
Hello everyone,

Debian Bullseye 5.10.149-2, installed Samba version: 4.13.13.
However, in log.winbindd-idmap, I find a forest of error lines of the type:

Code: Select all

ldb: unable to dlopen /usr/lib/x86_64-linux-gnu/samba/ldb/acl.so : /usr/lib/x86_64-linux-gnu/samba/libauthkrb5.so.0: version `SAMBA_4.13.13_DEBIAN' not found (required by /usr/lib/x86_64-linux-gnu/samba/ldb/acl.so)
and a few lines in the style of:

Code: Select all

ldb: module version mismatch in ../../source4/dsdb/samdb/ldb_modules/ranged_results.c : ldb_version=1.4.6 module_version=2.2.4
ldb: failed to initialise module /usr/lib/x86_64-linux-gnu/samba/ldb/ranged_results.so : Unavailable
I don't know what to do to fix this problem anymore.

If anyone has any ideas, I'm all ears!

THANKS.

For your information:

Code: Select all

kinit Administrator
allows us to obtain a valid TGT

Code: Select all

wbinfo --ping-dc
works without any problems

Code: Select all

wbinfo --trusted-domains --verbose
sends a normal return

Code: Select all

getent passwd DOMAIN\\user
sends a normal return

Code: Select all

net ads testjoin
correctly returns "Join is OK"

Re: Squid HS ntlm authentication after upgrade from Debian 10 to 11

Published: November 3, 2022 - 7:27 PM
by vcardon
Hello Marlep,

you'll find almost no one on this forum who doesn't use Tranquil IT's Samba builds, as Samba versions in distributions are often very behind.

https://samba.tranquil.it/debian/

Re: Squid HS ntlm authentication after upgrade from Debian 10 to 11

Published: November 3, 2022 - 8:51 PM
by Marlep
Hi Vincent,

thanks for your reply, which I was somewhat dreading.
I'm really struggling with this problem, you never know, maybe someone will have a brilliant idea...

It's still puzzling that Winbind is complaining about not finding the Samba version, which is precisely the only one installed.

In any case, if anyone with expertise has any leads, I'd be happy to explore them.

Re: Squid HS ntlm authentication after upgrade from Debian 10 to 11

Published: November 8, 2022 - 4:30 PM
by dcardon
Hello Marlep,

as Vincent mentioned, using Samba distribution packages is problematic unless you upgrade the distribution very regularly. The Samba.org project only maintains versions N, N-1, and N-2, so currently 4.17, 4.16, and 4.15. While

distribution maintainers do create backports for some major bugs, they don't address all bugs. And there are still major security bugs in distributions that are still maintained (e.g., the kpasswd bug in Samba-AD in Ubuntu packages, among others).

Regarding your specific problem, if the .deb packages are indeed the correct versions, it's a packaging bug. You can check the backports to see if there are any newer packages available.

Regards,

Denis

Re: Squid HS ntlm authentication after upgrade from Debian 10 to 11

Published: November 11, 2022 - 7:21 PM
by Marlep
Hello Denis,

Thank you for your reply.
I still haven't found a solution to my problem.

I think I'll just reinstall everything from scratch; it'll save me time.

Re: Squid HS ntlm authentication after upgrade from Debian 10 to 11

Published: November 16, 2022 - 10:47 AM
by dcardon
Hello,

as mentioned above, you can retrieve the .deb packages from our repository: https://samba.tranquil.it/debian/samba-4.16/
or from Michael Tokarev's server, the new maintainer of Samba packages for Debian: http://www.corpit.ru/mjt/packages/samba/

I'm marking this topic as resolved.

Regards,

Denis