ClearFoundation Tracker - ClearOS
View Issue Details
0013821ClearOSapp-samba-common - Samba Commonpublic2017-03-15 14:162017-09-21 08:28
dloper 
user2 
normaltweaksometimes
closedno change required 
7.3.1 
7.4.0 Beta 17.4.0 Beta 1 
0013821: winbindd_privileged/pipe has wrong permissions
The file /var/lib/samba/winbindd_privileged/pipe gets written when winbind.service starts with the root:root ownership instead of root:wbpriv. Setting the following fixes the issue:

chmod g+s /var/lib/samba/winbindd_privileged && service winbind restart
No tags attached.
Issue History
2017-03-15 14:16dloperNew Issue
2017-04-10 09:08user2Statusnew => acknowledged
2017-04-10 10:02user2Note Added: 0005311
2017-04-10 10:03user2Statusacknowledged => feedback
2017-08-11 12:52dloperTarget Version7.3.1 Updates => 7.4.0 Updates
2017-09-21 08:27user2Note Added: 0006561
2017-09-21 08:27user2Statusfeedback => resolved
2017-09-21 08:27user2Resolutionopen => no change required
2017-09-21 08:27user2Assigned To => user2
2017-09-21 08:27user2Fixed in Version => 7.4.0 Beta 1
2017-09-21 08:27user2Target Version7.4.0 Updates => 7.4.0 Beta 1
2017-09-21 08:28user2Statusresolved => closed

Notes
(0005311)
user2   
2017-04-10 10:02   
That would be a divergence from upstream. It looks like the security privileges are set at the directory level:

# ls -ald /var/lib/samba/winbindd_privileged/
drwxr-x--- 2 root wbpriv 18 Apr 10 11:45 /var/lib/samba/winbindd_privileged/

While the pipe file is world read/write/execute:

# ls -al /var/lib/samba/winbindd_privileged/pipe
srwxrwxrwx 1 root root 0 Apr 10 12:00 /var/lib/samba/winbindd_privileged/pipe

Any user account that needs read access to the pipe should be added to the wbpriv group.
(0006561)
user2   
2017-09-21 08:27   
Please re-open if there's a problem. A ClearOS box should have squid in the wbpriv group:

# getent group wbpriv
wbpriv:x:88:squid,radiusd