[FC1] samba update breaks samba-vscan-clamav...

[James Kosin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Everyone,

FYI....

I recently noticed that samba-3.0.4 breaks samba-vscan-clamav-0.3.5-1...

I fixed the problem by downloading the samba source and the
samba-vscan-clamav source and rebuilding the samba-vscan-clamav package
against the samba source.  The resulting package works and fixes the
problems with samba-3.0.4 recently released.

But, now this has broken something in clamd (in the clamav package).
I've emailed the bugs list for clamav and they informed me that the fix
will be out in clamav 0.73!  The error reported is "clamd[1007]:
Command parser: read() failed."

I'm considering this to be a minor issue until resolved.  Which I'm
expecting soon.

I do have a compiled i386.rpm package built for anyone needing
samba-vscan-clamav recompiled for version 3.0.4 of samba.

Note: The current version of samba-vscan-clamav package will install,
but will have problems with samba.  This case it errors out with
"smbd_vscan-clamav[1298]: ERROR: daemon failed with a minor error -
access to file ... denied."  As a result, users no longer have access to
any files on the share.

Thanks,
James

> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFAzebnc7lFLjBWKW0RAg5nAJ9O3oob6ly5ro/JC3LpUKiQ+KDmugCfSD28
> hIATcEmp9rrEPgy2hu05wcY=
> =cOuO
> -----END PGP SIGNATURE-----

[James Kosin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Updates...  see below.

James Kosin wrote:

| Everyone,
|
| FYI....
|
<<--snip-->>
|
| I'm considering this to be a minor issue until resolved.  Which I'm
| expecting soon.

This was a minor issue...  Even though it reported as an error, it was
when the client disconnected from the stream that the problem cropped up
and really isn't an error but truly a warning in this case.  This error
can be safely ignored.  It is fixed in the newly released clamav-0.73,
which may make it to the fedora rpm sites soon.


|
| I do have a compiled i386.rpm package built for anyone needing
| samba-vscan-clamav recompiled for version 3.0.4 of samba.

I guess I should publish the link to the file on my server.

http://support.intcomgrp.com/mirror/fedora-core/beta/i386/samba-vscan-cla...
the MD5SUM is 879eb3fea2241692802165d5aaf3c4a0
The package is NOT signed...  I'll have to look at signing packages and
such later.
This package has only been tested with samba-3.0.4 only.  I can not say
anything about it working with the prior version of samba with FC1 or
any other version of samba.

|
| Note: The current version of samba-vscan-clamav package will install,
| but will have problems with samba.  This case it errors out with
| "smbd_vscan-clamav[1298]: ERROR: daemon failed with a minor error -
| access to file ... denied."  As a result, users no longer have access to
| any files on the share.

This error is fatal to all users of samba-3.0.4.

James
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFAzfo/c7lFLjBWKW0RArMBAJ98VAVrDM0G/inhTB1Ssmt53f8P8wCfdIK4
> QyJGfWGZUm+xl+lQ9fDebck=
> =G4Hb
> -----END PGP SIGNATURE-----

[James Kosin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

<<--snip-->>

Ok... so I'm a little impatient sometimes.  I noticed that crash-hat had
the source and updates to 0.73 of clamav for FC2.  I downloaded the
source and recompiled for FC1.

This fixes the issue of an ERROR being reported for a closed or
disconnected socket when using samba-vscan with samba-3.0.4 for FC1.

But, I'm a little disappointed in the 3rd party support of FC1 so soon
after FC2 release.  Is it normal for this to happen?

I'm now posting the FC1 compiled version of ClamAV-0.73 on my server.

http://support.intcomgrp.com/mirror/fedora-core/beta/i386

The MD5SUM file contains all the sums for the files located here.

apcupsd	-- is an APC UPS daemon compiled for FC1.  Source was from DAG site.

epca	-- is drivers for a Digi card compiled for FC1 latest 2.4.22
kernel.  The driver is kernel specific and source is from Digi.

samba-vscan-clamav	-- is a samba vfs object driver for clamav scanning
of samba shares.  This is compiled for FC1 with the samba-3.0.4 version
of samba.

clamav-*	-- is a newly compiled version of ClamAV for FC1 taken from the
source on crash-hat for FC2.  I'm not sure if he is compiling for FC1
anymore.  DAG is several versions back for ClamAV also.

Thanks,
James Kosin
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFAzvwDc7lFLjBWKW0RAj/OAJsF/TPtrkgJu/QZhk/u9k44k6b3nQCfakcq
> Vty0LvxvbUmEVi9rsBg59EU=
> =ePS4
> -----END PGP SIGNATURE-----

[James Kosin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Everyone,

I'm replying to this message; because, I've seen many people trying to
find this file....  I'm sorry to say it isn't their anymore.  But, I
have newer files there.  For FC1.  Samba 3.0.6-1, ClamAV 0.75-1, and
samba-vscan-clamav compiled for this version of samba.

I've even setup as a yum repository.  With signed packages....
http://support.intcomgrp.com/mirror/fedora-core/beta/RPM-GPG-KEY-JAMES
for the public key you need to 'rpm --import'

Then setup yum or up2date to point to:
http://support.intcomgrp.com/mirror/fedora-core/beta/i386

You can also download the packages from that location as well.
Sorry, NO FTP.

James Kosin

James Kosin wrote:
| Everyone,
|
| FYI....
|
| I recently noticed that samba-3.0.4 breaks samba-vscan-clamav-0.3.5-1...
|
| I fixed the problem by downloading the samba source and the
| samba-vscan-clamav source and rebuilding the samba-vscan-clamav package
| against the samba source.  The resulting package works and fixes the
| problems with samba-3.0.4 recently released.
|
| But, now this has broken something in clamd (in the clamav package).
| I've emailed the bugs list for clamav and they informed me that the fix
| will be out in clamav 0.73!  The error reported is "clamd[1007]:
| Command parser: read() failed."
|
| I'm considering this to be a minor issue until resolved.  Which I'm
| expecting soon.
|
| I do have a compiled i386.rpm package built for anyone needing
| samba-vscan-clamav recompiled for version 3.0.4 of samba.
|
| Note: The current version of samba-vscan-clamav package will install,
| but will have problems with samba.  This case it errors out with
| "smbd_vscan-clamav[1298]: ERROR: daemon failed with a minor error -
| access to file ... denied."  As a result, users no longer have access to
| any files on the share.
|
| Thanks,
| James
|
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFBKztQc7lFLjBWKW0RAnHlAJwKaZ7CLmKqAW7mR2VHNFrOx9zYAQCfR75V
> x8stwiT3xUvcRzPpqBfH0Pw=
> =D8gw
> -----END PGP SIGNATURE-----