freeipa

#7893 ipasam needs changes for Samba 4.10
Closed: fixed by cheimes. Opened by sin.

Closed: fixed
Reopen Issue

Description of problem

With Samba 4.10 access to sid_string_talloc() and sid_string_dbg() functions from libsmbconf.so will not be available for external applications (replaced to /usr/lib64/samba/libsamba-security-samba4.so). FreeIPA's ipasam module was using those for own needs. Now it needs to reimplement.

See https://git.samba.org/?p=samba.git;a=commitdiff;h=6a7a993317119f54e1b1d6e4aa6b295a9827c15f and https://git.samba.org/?p=samba.git;a=commit;h=131ee1b2dbfab5267bb601d935c6af249d7ec6bd

Actual problem

During testing we got:
x86_64: NEW bad_elf_symbols detected:
freeipa-server-trust-ad-4.7.1-alt7.x86_64.rpm /usr/lib64/samba/pdb/ipasam.so
U sid_string_dbg
freeipa-server-trust-ad-4.7.1-alt7.x86_64.rpm /usr/lib64/samba/pdb/ipasam.so
U sid_string_talloc
aarch64: NEW bad_elf_symbols detected:
freeipa-server-trust-ad-4.7.1-alt7.aarch64.rpm /usr/lib64/samba/pdb/ipasam.so
U sid_string_dbg
freeipa-server-trust-ad-4.7.1-alt7.aarch64.rpm /usr/lib64/samba/pdb/ipasam.so
U sid_string_talloc

Create fix for this problem:
https://pagure.io/fork/sin/freeipa/c/6ef2fc4b18a10c9f48b4b55e3e11e478f887e109?branch=ipa-sam-sid_string

master:

  • ffcbb835089c8fb71eadd48230e3c034d7ecda96 ipasam: use SID formatting calls to libsss_idmap

ipa-4-7:

  • 137af1d2c38925404dc92f70321ac0f5fb1cf5eb ipasam: use SID formatting calls to libsss_idmap

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-6:

  • 37fa917fa2630dd90dd3a12bab213aeb6adfe182 Use unicode strings for Python 2 version
  • fa0b273874760503c7f57f279721e97aaf007ca5 ipa_sam: remove dependency to talloc_strackframe.h
  • 910e56333d4631244053b5c506ba2bec905d1c27 Remove ZERO_STRUCT() call
  • 95c91b5709d0c7fec20eef5ef69a084a74868c2d ipasam: use SID formatting calls to libsss_idmap
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.