[Pkg-samba-maint] Bug#520012: samba: net rpc vampire sets wrong passwords for machine accounts

[Fabio Muzzi]

Package: samba
Version: 2:3.2.5-4
Severity: important


I am setting up a PDC with Lenny, and i have tried to run a "net rpc vampire" against a NT4 PDC. The vampire process seems to fail to get machine account passwords, even if it gets the machine accounts themselves (the entries get created properly in /etc/passwd and in samba auth database).

The result is that if I want to make the clients connect to the domain after switching to the new DC (Samba) I have to rejoin every client to the domain, which is impossibile since we have more than 150 clients here.

I have searched for this bug, and found something on the Samba list (the url of a copy of the messages is here: http://www.nabble.com/net-rpc-vampire-in-release-3.2.x-td19180372.html) even if it is not clear about which version they are talking about. 

I have searched for the bug on the Samba bug tracking system, but I came up with only this: https://bugzilla.samba.org/show_bug.cgi?id=5722. The problem seems to be the same, but no solution.


This bug makes it impossibile to use the "net rpc vampire" command at all.


I will attach later the output of the vampire command, separated in two files, standard output and standard error. You will see that there are a lots of errors regarding machine account creations.





-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages samba depends on:
ii  adduser              3.110               add and remove users and groups
ii  debconf [debconf-2.0 1.5.24              Debian configuration management sy
ii  libacl1              2.2.47-2            Access control list shared library
ii  libattr1             1:2.4.43-2          Extended attribute shared library
ii  libc6                2.7-18              GNU C Library: Shared libraries
ii  libcomerr2           1.41.3-1            common error description library
ii  libcups2             1.3.8-1lenny4.1     Common UNIX Printing System(tm) - 
ii  libgnutls26          2.4.2-6+lenny1      the GNU TLS library - runtime libr
ii  libkrb53             1.6.dfsg.4~beta1-5  MIT Kerberos runtime libraries
ii  libldap-2.4-2        2.4.11-1            OpenLDAP libraries
ii  libpam-modules       1.0.1-5             Pluggable Authentication Modules f
ii  libpam-runtime       1.0.1-5             Runtime support for the PAM librar
ii  libpam0g             1.0.1-5             Pluggable Authentication Modules l
ii  libpopt0             1.14-4              lib for parsing cmdline parameters
ii  libtalloc1           1.2.0~git20080616-1 hierarchical pool based memory all
ii  libwbclient0         2:3.2.5-4           client library for interfacing wit
ii  logrotate            3.7.1-5             Log rotation utility
ii  lsb-base             3.2-20              Linux Standard Base 3.2 init scrip
ii  procps               1:3.2.7-11          /proc file system utilities
ii  samba-common         2:3.2.5-4           Samba common files used by both th
ii  update-inetd         4.31                inetd configuration file updater
ii  zlib1g               1:1.2.3.3.dfsg-12   compression library - runtime

samba recommends no packages.

Versions of packages samba suggests:
pn  ldb-tools                   <none>       (no description available)
ii  openbsd-inetd [inet-superse 0.20080125-2 The OpenBSD Internet Superserver
pn  smbldap-tools               <none>       (no description available)

-- debconf information:
  samba/run_mode: daemons
  samba/generate_smbpasswd: true