Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/index.php/Reporting_Bug_Guidelines

Do NOT report bugs when a package is just outdated, or it is in Unsupported. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#63846 - Vanilla Samba breaks e.g. printing via Cups to a shared printer

Attached to Project: Arch Linux
Opened by Danny Schneider (schnedan) - Thursday, 19 September 2019, 22:11 GMT
Task Type Bug Report
Category Packages: Extra
Status Unconfirmed
Assigned To No-one
Architecture All
Severity Critical
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

Description: since Version 4.10.x Samba breaks e.g. printing in Cups if using a smb shared printer.

My setup is 2 Computers both dualboot.
PrinterServer is Arch/WinXP [named AL & AW]
PrinterClient is Arch/Win10 [named BL & BW]

AL to BW fails
AW to BW works
AL to BL fails
AW to BW works

So it only fails when I try to print from Archlinux to my printerserver - where it fails even with WinXP...
The Errors reported in Cups are related to authentication: NT_STATUS_ACCESS_DENIED

You can google for it, the problem is reported by several people on different distributions

The problem now exists for at least 2-3 month and I have blocked updates of samba since I located the problem

The Problem is caused by vanilla samba has dropped support for MIT Kerberos as stated in their Release notes
https://wiki.samba.org/index.php/Samba_4.10_Features_added/changed#MIT_Kerberos_build_of_the_AD_DC

REMOVED FEATURES
MIT Kerberos build of the AD DC
While not removed, the MIT Kerberos build of the Samba AD DC is still considered experimental. Because Samba will not issue security patches for this configuration, such builds now require the explicit configure option: --with-experimental-mit-ad-dc
For further details see Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC

I know the normal policy in Arch is to use vanilla upstream if no security issues are related, but this one really breaks the Linux Desktop as printing is a must work feature.
Please provide samba compiled with MIT Kerberos support until a other working solution is presented.

Additional info:
* package version(s)
samba 4.10.8-1 [installed: 4.9.5-1]
cups 2.3.0-3 [installed] --> was updated so it also failed with older versions

Steps to reproduce:
install samba, cups, add a simple shared printer and print, or at least try to...
This task depends upon

Comment by loqs (loqs) - Thursday, 19 September 2019, 22:47 GMT

Loading...