[Pkg-samba-maint] Bug#649265: winbind: add wins to nsswitch.conf

[Osamu Aoki]

Hi,

Thanks for clarification.

On Sat, Nov 19, 2011 at 11:36:52AM -0800, Steve Langasek wrote:
> On Sat, Nov 19, 2011 at 10:26:02PM +0900, Osamu Aoki wrote:
> > Package: winbind
> > Version: 2:3.5.11~dfsg-4
> > Severity: wishlist
> 
> > As I understand, winbind is a package to help integrate a machine into a
> > Windows network.  Documentation in "Integrating MS Windows Networks with
> > Samba"
> >  http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/integrate-ms-networks.html
> > is a good resource for novice like me.  It seems we need to add wins to
> > nsswitch.conf.
> 
> > Then I realize, libnss-mdns does put its entries into nsswitch.conf via package
> > script.  I thought it may be nice for winbind to do the similar.
> 
> The current mechanism used by libnss-mdns for updating /etc/nsswitch.conf is
> not policy-compliant. 

Is it?

Actually, I initially thought it was not policy-compliant without
looking into facts.  But /etc/nsswitch.conf does not look like conffile.
It is a generated file by base-files.postinst.  So, as long as
base-files and libnss-mdns maintainers cordinate each other, I see
no problem in terms of policy.

> I would be happy to have the winbind package
> (actually the libpam-winbind package, in unstable) integrate with an
> appropriate nsswitch updating mechanism, 

Yes, *appropriate nsswitch updating mechanism* is what is needed.  I am
happy to know Windows system uses the sane host name resolution via DNS
these days.

I will continue discuss this topic with the original bug reporter who
insisted to use NETBIOS for hostname resolution at
http://bugs.debian.org/626736 . It seems even MS has howto for
integrating their DHCP server with their DNS server. 
 http://technet.microsoft.com/en-us/library/cc787034(v=WS.10).aspx
(Certainly, we can do the equivalent on Debian)

> but I won't perpetuate the
> policy-violating modification of another package's config file.

user and group management via libpam-winbind package on windows
dominated world still seems good idea.

Osamu