[Pkg-samba-maint] Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

[Matt Grant]

PS: Also have tested new package and winbind now does work by itself for
getgroups(3) and initgroups(3), ie kerberos logins over ssh work again!

On Mon, 13 Jun 2022 at 21:12, Matt Grant <matt at mattgrant.net.nz> wrote:

> Hi Michael!
>
> For the libraries to move from the samba package, just used the following
> command on each rpcd binary in /usr/libexec/samba:
>
> dpkg -S `ldd rpcd_epmapper | grep samba | cut -f 1 -d ' '`
>
> You could put the contents of this new package ( ie
> debian/samba-libexec-dcerpc.install) into the  samba-libs package, or
> samba-common-bin...  Samba-libs was my first thought if not creating a new
> package.
>
> Adding the new samba-libexec-dcerpc package to the archive in my
> experience is not much of a problem actually. When I have had to create a
> fresh package as part of an already in archive source (no licensing
> evaluation needed), the FTP Master team only took a few days to add the new
> package.  You can email ftpmaster at debian.org ahead of the upload to check
> how long it will take them to get on to it, or you can put it through
> experimental?  Sid is 'unstable' for a reason.
>
> Here is a good reason for the new package:  samba-dcerpcd and rpcd_* are
> needed for support binaries for in-kernel ksmbd, though what that will need
> exactly will require more fleshing out no doubt.  The new package is a
> start. Check the samba-dcerpcd man page, it helped me work out what to put
> in the new package, as samba-dcerpcd can call any of the
> /usr/libexec/samba/rpcd_* binaries
>
> Hope that all helps.
>
> Matt Grant
> Debian Developer
>
>
>
> Best Regards,
>
> Matt Grant
> Debian Developer
>
>
> On Mon, 13 Jun 2022 at 20:18, Michael Tokarev <mjt at tls.msk.ru> wrote:
>
>> 13.06.2022 10:46, Matt Grant wrote:
>> > Hi!
>> >
>> > Please find attached the patch I made to fix this issue.
>> >
>> > It moves the DCE RPC binaries in /usr/libexec/samba into their own
>> package along with required libs from the samba package creating the
>> > samba-libexec-dcerpc package, and makes samba and winbind depend on it,
>> thus solving all the issues.
>>
>> Matt, how did you find out the 2 libs -- libRPC-SERVER-LOOP-samba4.so.0 &
>> libREG-FULL-samba4.so.0 - which can be moved to the new package too, out
>> of many other libraries in there?
>>
>> Thanks!
>>
>> /mjt
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20220613/5611266d/attachment-0001.htm>