Package samba-winbind-krb5-locator: Information

  • Default inline alert: Version in the repository: 4.19.5-alt1

Binary package: samba-winbind-krb5-locator
Version: 4.14.13-alt1
Architecture: e2k
Build time:  Apr 12, 2022, 09:56 PM
Source package: samba
Category: System/Servers
Report package bug
License: GPLv3+ and LGPLv3+
Summary: Samba winbind krb5 locator
Description: 
The winbind krb5 locator is a plugin for the system kerberos library to allow
the local kerberos library to use the same KDC as samba and winbind use

Maintainer: Evgeny Sinelnikov


Last changed


April 5, 2022 Evgeny Sinelnikov 4.14.13-alt1
- Update to latest bugfix release of Samba 4.14
- Fixes:
  + Renaming file on DFS root fails with NT_STATUS_OBJECT_PATH_NOT_FOUND.
  + Samba does not response STATUS_INVALID_PARAMETER when opening 2 objects with
    same lease key.
  + NT error code is not set when overwriting a file during rename in libsmbclient.
  + net ads info shows LDAP Server: 0.0.0.0 depending on contacted server.
  + wbinfo -a doesn't work reliable with upn names.
  + Problem when winbind renews Kerberos.
  + NT_STATUS_ACCESS_DENIED translates into EPERM instead of EACCES in
    SMBC_server_internal.
  + Multpile RODC fixes:
    - Simple bind doesn't work against an RODC (with non-preloaded users).
    - Crash of winbind on RODC.
    - Uncached logon on RODC always fails once.
    - Changing the machine password against an RODC likely destroys the domain join.
    - Simple bind doesn't work against an RODC (with non-preloaded users).
  + Avoid mixing the main krbtgt account keys with an RODC if the
    msDS-KeyVersionNumber is larger than 65535 (set 16 upper bits to zero).
  + Use Heimdal 8.0 (pre) rather than an earlier snapshot.
  + LDAP simple binds should honour "old password allowed period".
  + Fix ldap simple bind with TLS auditing.
  + "password hash userPassword schemes = CryptSHA256" does not seem to work
    with samba-tool.
March 3, 2022 Evgeny Sinelnikov 4.14.12-alt2
- Fix linking of some libraries (libsmbldap.so.2.1.0, libpopt-samba3-samba4.so,
  libsamba-modules-samba4.so, winbind_krb5_locator.so and smbpasswd.so):
  + find-requires: ERROR: /usr/lib/rpm/lib.req failed.
Feb. 9, 2022 Evgeny Sinelnikov 4.14.12-alt1
- Update to latest security release of Samba 4.14
- Security fixes:
  + CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
  + CVE-2022-0336:  Re-adding an SPN skips subsequent SPN conflict checks.