Bug 976110

Summary: GOA and evolution fail to login using NTLM on exchange EWS since last samba update
Product: [openSUSE] openSUSE Distribution Reporter: Robin Roevens <robin.roevens1>
Component: EvolutionAssignee: The 'Opening Windows to a Wider World' guys <samba-maintainers>
Status: RESOLVED FIXED QA Contact: Akhil Laddha <akhil.laddha>
Severity: Major    
Priority: P5 - None CC: ab, aburgemeister, fcrozat, forgotten_rwiaD0Rwva, forgotten_xuTK2AJT_g, gnome-bugs, harvey, jmcdonough, maintenance, meissner, nopower, pchadwick, ralph.roth, robin.roevens1, vkrevs, zaitor
Version: Leap 42.1   
Target Milestone: ---   
Hardware: x86-64   
OS: openSUSE 42.1   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Bug Depends on: 977669    
Bug Blocks: 979083    
Attachments: zypper package installation history

Description Robin Roevens 2016-04-19 07:31:30 UTC
User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Build Identifier: 

After last LEAP software update Gnome Online Accounts complains about the Exchange credentials being expired. Re-login fails due to "authentication failure".
When configuring the exchange account using evolution itself and authentication method set to NTLM, it also can't open the Exchange mailbox due to "401 - Unauthorized".
The credentials however are correct and work correctly on a fresh Leap install until all updates up to now are installed. Then it stops working with the symptoms described.
According to zypper history log last packages updated where samba. (see attached history)


Reproducible: Always

Steps to Reproduce:
1.Install fresh Leap 42.1 without updates
2.Add a new Exchange account to GOA
3.Check correct functionality using Evolution(-ews)
4.perform zypper update until all latest updates are installed
5.try to use Evolution to open the configured Exchange mailbox
Actual Results:  
Connection with mailbox fails due to 401 - Unauthorized

Expected Results:  
Opening the mailbox

This problem also seems to occur on opensuse 13.2
Comment 1 Robin Roevens 2016-04-19 07:42:11 UTC
Created attachment 673487 [details]
zypper package installation history

History of zypper update after which the problem started to occur. I have rolled back my system (using snapper) to right before this update and the Exchange account worked again instantly
Comment 2 Marcus Meissner 2016-04-19 08:03:16 UTC
to samba team for review
Comment 3 Noel Power 2016-04-19 09:44:55 UTC
it would be really helpful if you could provide some more information with the failing packages installed. If possible could you provide this information

  + rpm -qa | grep samba
  + output of testparm -sv
  + set of logs from /var/log/samba/ (with elevated debug (level 10) ) [*] immediately after a failed authentication attempt. (it would also be really useful if you let us know the output of date 'before' and 'after' you attempt to authentication as the content of the log files can be quite big and this will help narrow down where to look in the log files
  + a network capture for the just for the duration of the authentication attempt

[*] Note: there is some useful information here https://en.opensuse.org/openSUSE:Bugreport_Samba describing how to provide the necessary information for attaching to a bug including setting the debug levels and obtaining network traces.
Comment 4 Marcus Meissner 2016-04-19 11:39:00 UTC
*** Bug 976173 has been marked as a duplicate of this bug. ***
Comment 5 Noel Power 2016-04-21 09:00:17 UTC
*** Bug 976369 has been marked as a duplicate of this bug. ***
Comment 6 Andreas Stieger 2016-04-21 13:40:06 UTC
*** Bug 976004 has been marked as a duplicate of this bug. ***
Comment 7 Noel Power 2016-04-21 14:05:41 UTC
https://bugzilla.redhat.com/show_bug.cgi?id=1327072 seems relevant and in particular it seems some new updates to libsoup are necessary (there is at least a patch attached to the bug above)
Comment 8 Forgotten User xuTK2AJT_g 2016-04-22 14:23:33 UTC
Also affected here (42.1) and a colleage of mine (13.1).

Downgraded to 4.2.4-12.1 (from -15.1) and evolution-ews works again. Colleage is still looking for packages, if available.
Comment 9 Bjørn Lie 2016-04-22 17:28:12 UTC
I stumbled on this bug via dumb luck....

libsoup and evolution-ews are "community owned" in Leap as far as I can tell, hence this bug should probably be assigned to us (gnome-maintainers), but I guess SLE people want to fix this for them too, so current assigned can stay.

----
Leap users:

Please test the packages in

http://download.opensuse.org/repositories/home:/Zaitor:/boo976110/standard/

and report back how they work for you.
Comment 10 Forgotten User xuTK2AJT_g 2016-04-25 05:22:58 UTC
With the afformentioned test repo:
- Tested with samba still downgraded to 4.2.4-12.1: Works for me.
- Tested with samba upgraded to 4.2.4-15.1 again: Doesn't work. Asks for legitimation again and again.

Hope this procedure was "the right way".
Comment 11 Bjørn Lie 2016-04-25 08:04:20 UTC
(In reply to Michael Weirauch from comment #10)
> With the afformentioned test repo:
> - Tested with samba still downgraded to 4.2.4-12.1: Works for me.
> - Tested with samba upgraded to 4.2.4-15.1 again: Doesn't work. Asks for
> legitimation again and again.
> 
> Hope this procedure was "the right way".

With old samba is not of interest, but thanks.

Slightly odd that it didn't work as both patches are from upstream, and are what fedora have pushed out too.

Did you make sure you got all the needed pacakges from above repo? (Note that you will probably need to reboot, or at least log in/out and restart your samba service since you were upgrading that too. (evo and libsoup requires at least a logout/login).

Please try a zypper dup --from reponame, reboot (with the new samba) and test again.
Comment 12 Forgotten User xuTK2AJT_g 2016-04-25 11:32:17 UTC
(In reply to Bjørn Lie from comment #11)
> Did you make sure you got all the needed pacakges from above repo? (Note
> that you will probably need to reboot, or at least log in/out and restart
> your samba service since you were upgrading that too. (evo and libsoup
> requires at least a logout/login).

That was the issue. Not rebooting and or loging-out.

Just made sure samba is current (-15.1) and assured all packages are from your test repo. Rebooted and I can connect to Exchange without issues.
Comment 13 Bjørn Lie 2016-04-25 13:39:17 UTC
rq#391559 for Leap

Adding maintenance to cc

If someone feels like stepping up and backport the patches for 13.2, please say so.
Comment 14 Robin Roevens 2016-04-25 15:03:26 UTC
I can also confirm that the packages from Zaitor:boo976110 seem to solve the problem. Evolution-ews works again after installation of those packages followed by a reboot..

Meanwhile I also noticed that since this upgrade of samba wbinfo -u no longer works (similar to what is described here: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1573526) . It looks like that problem arises from the same source as the evolution-ews problem. Should I create a new bugreport for this, as this is not fixed with the packages from Zaitor:boo976110.. or should this remain in this one ?
Comment 15 Bjørn Lie 2016-04-25 18:22:57 UTC
(In reply to Robin Roevens from comment #14)

> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1573526) . It looks
> like that problem arises from the same source as the evolution-ews problem.
> Should I create a new bugreport for this, as this is not fixed with the
> packages from Zaitor:boo976110.. or should this remain in this one ?

Create a new bug.
Comment 16 Swamp Workflow Management 2016-04-29 12:10:26 UTC
openSUSE-RU-2016:1190-1: An update that has one recommended fix can now be installed.

Category: recommended (important)
Bug References: 976110
CVE References: 
Sources used:
openSUSE Leap 42.1 (src):    evolution-ews-3.16.5-5.1, libsoup-2.50.0-5.1
Comment 18 James McDonough 2016-05-12 10:37:23 UTC
could you try https://build.opensuse.org/project/repositories/home:jmcdough:branches:OBS_Maintained:samba and choose the repository for your opensuse version?  This has been submitted for maintenance.
Comment 21 Robin Roevens 2016-06-23 13:31:14 UTC
(In reply to James McDonough from comment #18)
> could you try
> https://build.opensuse.org/project/repositories/home:jmcdough:branches:
> OBS_Maintained:samba and choose the repository for your opensuse version? 
> This has been submitted for maintenance.

wbinfo -u seems to work correctly again after performing zypper dup from your repository on openSUSE LEAP.
Comment 22 James McDonough 2016-08-04 11:11:44 UTC
submitted fix works, closing.