Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Samba DC 4.7.7 upgrade #5457

Closed
DavidePrincipi opened this issue Apr 16, 2018 · 8 comments
Closed

Samba DC 4.7.7 upgrade #5457

DavidePrincipi opened this issue Apr 16, 2018 · 8 comments
Labels
verified All test cases were verified successfully
Projects
NethServer 7
Milestone
NSW18.17

Comments

@DavidePrincipi
Copy link
Member

DavidePrincipi commented Apr 16, 2018 •
edited

The Samba 4.6.x branch is now in "security fixes" mode. The stable branch is 4.7 (see maintenance mode).

To upgrade we need to fix the backup procedure, as experienced during this issue #5356 (closed as "wontfix")

See also
@DavidePrincipi DavidePrincipi added this to the v7 milestone Apr 16, 2018
@DavidePrincipi DavidePrincipi added this to ✋ Needs review in NethServer 7 via automation Apr 16, 2018
@DavidePrincipi DavidePrincipi mentioned this issue Apr 16, 2018
Merged
@DavidePrincipi DavidePrincipi moved this from ✋ Needs review to ⚙ Developing in NethServer 7 Apr 16, 2018
DavidePrincipi added a commit to NethServer/nethserver-dc that referenced this issue Apr 17, 2018
@DavidePrincipi
Fix Samba 4.7.x backup config error (#77)
b27fa53 
NethServer/dev#5457
@nethbot
Copy link
Member

nethbot commented Apr 17, 2018

in 7.4.1708/testing:

@DavidePrincipi DavidePrincipi added the testing Packages are available from testing repositories label Apr 17, 2018
@DavidePrincipi
Copy link
Member Author

Samba 4.7 has a new dynamic RPC port range, 49152-65535, as documented here

https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage

PORT      STATE SERVICE
53/tcp    open  domain
88/tcp    open  kerberos-sec
135/tcp   open  msrpc
139/tcp   open  netbios-ssn
389/tcp   open  ldap
445/tcp   open  microsoft-ds
464/tcp   open  kpasswd5
636/tcp   open  ldapssl
3268/tcp  open  globalcatLDAP
3269/tcp  open  globalcatLDAPssl
49152/tcp open  unknown
49153/tcp open  unknown
49154/tcp open  unknown

@DavidePrincipi
Copy link
Member Author

DavidePrincipi commented Apr 17, 2018 •
edited by gsanchietti

Test cases

  • new install
  • upgrade
  • restore from 4.6 backup
  • restore from 4.7 backup
  • test against legacy NTLM configuration regression

@DavidePrincipi DavidePrincipi modified the milestones: v7, NSR18.17 Apr 23, 2018
@gsanchietti gsanchietti self-assigned this Apr 26, 2018
@gsanchietti
Copy link
Member

Legacy NTLM configuration tested using:

echo "ntlm auth = yes" >> /var/lib/machines/nsdc/etc/samba/smb.conf.include
systemctl -M nsdc restart samba

Then, follow instructions from #5289

@gsanchietti
Copy link
Member

Verified

@gsanchietti gsanchietti added verified All test cases were verified successfully and removed testing Packages are available from testing repositories labels Apr 26, 2018
@gsanchietti gsanchietti removed their assignment Apr 26, 2018
@nethbot
Copy link
Member

nethbot commented Apr 26, 2018

in 7.4.1708/testing:

@gsanchietti
Copy link
Member

Verified also with Samba 4.7.7

@DavidePrincipi DavidePrincipi changed the title Samba DC 4.7.6 upgrade Samba DC 4.7.7 upgrade Apr 26, 2018
@nethbot
Copy link
Member

nethbot commented Apr 26, 2018

in 7.4.1708/updates:

NethServer 7 automation moved this from ⚙ Developing to 🗑 Done Apr 26, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
verified All test cases were verified successfully
Projects
No open projects
NethServer 7
🗑 Done
Milestone
NSW18.17
Development

No branches or pull requests
3 participants
@gsanchietti @DavidePrincipi @nethbot