I would be very interested to know if that breaks compatibility with
unpatched Unix/Linux/Solaris samba machines (if you are running anyway.)
On 06/08/16 07:52, Steve Fenn wrote:> ORACLE have released this patch for Solaris 10 - Samba v3.6.25:
>
> IDR152387-03 addressing CVE-2016-2118 (BADLOCK) and other CVEs for S10
SPARC
>
> Which has addressed our issue.
>
> Thanks
>
>
> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Gaiseric
Vandal
> Sent: 07 June 2016 14:51
> To: samba at lists.samba.org
> Subject: Re: [Samba] Solaris 10 Configure failure
>
> Compiling samba (or much open source code) on solaris 10 is a major
> pain. (At least with samba 3.4.x which I had to compile because Sun
> took so long to release anything beyond samba 3.0.x)
>
> The biggest issue I ran into was that, regardless of compiler, the
> linker ( /usr/ccs/bin/ld) seems really old. One option may be to
> compile a relatively recent version of GCC - though I think the problem
> was that you still end up being dependent on /usr/ccs/bin/ld. You
> could rename and symlink /usr/ccs/bin/ld to point to the gnu ld.
>
> I think the proper way to build it is to use sun studio for the c / c++
> compilers (not gnu gcc / g++) with dmake (not make or gmake.)
>
> My notes say
>
> CC='/usr/bin/cc -xc99'
> CXX=/usr/bin/CC
>
>
> Don't set "-xc99" in CFLAGS
>
>
>
> Is this machine a member or PDC of classic domain? Or is it a member of
> an active directory domain? If you followed some of the other posts
> you will see that the "badlock" can break compatibility with
classic
> domains- at least for domains where you have NOT upgraded or patched all
the systems.
>
> Solaris 10 does not use opendlap.
>
> I configured with
>
> ./configure --prefix=/usr/local/samba-3.4.12 \
--with-privatedir=/etc/samba/private \ --with-lockdir=/var/samba/locks \
--with-configdir=/etc/samba \ --with-libtalloc=no \ --with-libtdb=yes \
--with-ads=no \ --with-ldap=yes \ --with-krb5=/usr
>
>
>
> I don't run Solaris 10 anymore. I moved to Solaris 11, which provides
> the latest Samba 3.x binaries (3.6.25) along with gcc and openldap ,
> but with out any badlock back ported patches. But it was really easy
> to compile Samba 4.x.
>
>
>
>
>
>
> On 06/07/16 04:49, Steve Fenn wrote:
>> Currently running version 3.6.25 on a SPARC Solaris 10 64 bit server.
>>
>> Due to CVE-2016-2118 need to upgrade to version 4.2.11 / 4.3.8 / 4.4.2
>>
>> No Solaris package available.
>>
>> Configure script fails with “Couldn't determine size of
'bool'”
>>
>> Is it possible to install these versions on Solaris 10 and if so how?
>>
>> Many Thanks
>>
>> Steve.
>>
>>
>>
>> This Email and any attachments contains confidential information and
>> is intended solely for the individual to whom it is addressed. If this
>> Email has been misdirected, please notify the author as soon as
>> possible. If this email has a protective marking of OFFICIAL –
>> SENSITIVE, PROTECT or RESTRICTED in its title or contents, the
>> information within must be subject to appropriate safeguards to
>> protect against unauthorised or unlawful processing and against
>> accidental loss or destruction or damage. OFFICIAL – SENSITIVE,
>> PROTECT and RESTRICTED information should only be further shared where
>> there is a legitimate need. If you are not the intended recipient you
>> must not disclose, distribute, copy, print or rely on any of the
>> information contained, and all copies must be deleted immediately.
>> Whilst we take reasonable steps to try to identify any software
>> viruses, any attachments to this e-mail may nevertheless contain
>> viruses which our anti- virus software has failed to identif
> y. You should therefore carry out your own anti-virus checks before
opening any documents. Dudley Metropolitan Borough Council will not accept any
liability for damage caused by computer viruses emanating from any attachment or
other document supplied with this e-mail.
>> Please consider the environment - do you need to print this e-mail?
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
> This Email and any attachments contains confidential information and is
intended solely for the individual to whom it is addressed. If this Email has
been misdirected, please notify the author as soon as possible. If this email
has a protective marking of OFFICIAL – SENSITIVE, PROTECT or RESTRICTED in its
title or contents, the information within must be subject to appropriate
safeguards to protect against unauthorised or unlawful processing and against
accidental loss or destruction or damage. OFFICIAL – SENSITIVE, PROTECT and
RESTRICTED information should only be further shared where there is a legitimate
need. If you are not the intended recipient you must not disclose, distribute,
copy, print or rely on any of the information contained, and all copies must be
deleted immediately. Whilst we take reasonable steps to try to identify any
software viruses, any attachments to this e-mail may nevertheless contain
viruses which our anti- virus software has failed to identify. You should
therefore carry out your own anti-virus checks before opening any documents.
Dudley Metropolitan Borough Council will not accept any liability for damage
caused by computer viruses emanating from any attachment or other document
supplied with this e-mail.
>
> Please consider the environment - do you need to print this e-mail?