[Pkg-freeipa-devel] Bug#1012592: freeipa-client-samba: Cannot map BUILTIN\Guests to a group "nobody"

[Jochen Kellner]

Package: freeipa-client-samba
Version: 4.9.8-1~bpo11+1
Severity: normal

Dear Maintainer,

I'm trying to get a samba server connected to the freeipa servers I have.
The documentation I found is:
https://freeipa.readthedocs.io/en/latest/designs/adtrust/samba-domain-member.html

When running "ipa-client-samba" I get:

Cannot map BUILTIN\Guests to a group "nobody". Error: CalledProcessError(Command ['/usr/bin/net', 'groupmap', 'add', 'sid=S-1-5-32-546', 'unix
group=nobody', 'type=builtin'] returned non-zero exit status 255: "Can't lookup UNIX group nobody\n")
Traceback (most recent call last):
  File "/usr/sbin/ipa-client-samba", line 15, in <module>
    sys.exit(ipa_client_samba.run())
  File "/usr/lib/python3/dist-packages/ipaclient/install/ipa_client_samba.py", line 745, in run
    configure_default_groupmap(fstore, statestore, options, domains[0])
  File "/usr/lib/python3/dist-packages/ipaclient/install/ipa_client_samba.py", line 386, in configure_default_groupmap
    ipautil.run(args)
  File "/usr/lib/python3/dist-packages/ipapython/ipautil.py", line 598, in run
    raise CalledProcessError(
ipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/usr/bin/net', 'groupmap', 'add', 'sid=S-1-5-32-546', 'unixgroup=nobody', '
type=builtin'] returned non-zero exit status 255: "Can't lookup UNIX group nobody\n")

The expected output is to get a working samba configuration that uses freeipa
as it's user backend.

I've created a group "nobody" locally (Debian uses nogroup by default).
With that group created, ipa-client-samba finishes ok and leaves a smb.conf
that looks plausible (but until now not working ok - will investigate).
Let's focus on the missing group for now.

-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-14-amd64 (SMP w/4 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages freeipa-client-samba depends on:
ii  cifs-utils        2:6.11-3.1+deb11u1
ii  freeipa-client    4.9.8-1~bpo11+1
ii  python3           3.9.2-3
ii  python3-samba     2:4.13.13+dfsg-1~deb11u3
ii  samba-common-bin  2:4.13.13+dfsg-1~deb11u3
ii  smbclient         2:4.13.13+dfsg-1~deb11u3
ii  tdb-tools         1.4.3-1+b1
ii  winbind           2:4.13.13+dfsg-1~deb11u3

freeipa-client-samba recommends no packages.

freeipa-client-samba suggests no packages.

-- no debconf information