[Pkg-samba-maint] Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

[Matt Grant]

After thinking about it, Puting everything which s
in debian/samba-libexec-dcerpc.install into samba-common-bin would work.

Regards,

Matt Grant
Debian Developer

On Mon, 13 Jun 2022 at 21:14, Matt Grant <matt at mattgrant.net.nz> wrote:

> PS: Also have tested new package and winbind now does work by itself for
> getgroups(3) and initgroups(3), ie kerberos logins over ssh work again!
>
> On Mon, 13 Jun 2022 at 21:12, Matt Grant <matt at mattgrant.net.nz> wrote:
>
>> Hi Michael!
>>
>> For the libraries to move from the samba package, just used the following
>> command on each rpcd binary in /usr/libexec/samba:
>>
>> dpkg -S `ldd rpcd_epmapper | grep samba | cut -f 1 -d ' '`
>>
>> You could put the contents of this new package ( ie
>> debian/samba-libexec-dcerpc.install) into the  samba-libs package, or
>> samba-common-bin...  Samba-libs was my first thought if not creating a new
>> package.
>>
>> Adding the new samba-libexec-dcerpc package to the archive in my
>> experience is not much of a problem actually. When I have had to create a
>> fresh package as part of an already in archive source (no licensing
>> evaluation needed), the FTP Master team only took a few days to add the new
>> package.  You can email ftpmaster at debian.org ahead of the upload to
>> check how long it will take them to get on to it, or you can put it through
>> experimental?  Sid is 'unstable' for a reason.
>>
>> Here is a good reason for the new package:  samba-dcerpcd and rpcd_* are
>> needed for support binaries for in-kernel ksmbd, though what that will need
>> exactly will require more fleshing out no doubt.  The new package is a
>> start. Check the samba-dcerpcd man page, it helped me work out what to put
>> in the new package, as samba-dcerpcd can call any of the
>> /usr/libexec/samba/rpcd_* binaries
>>
>> Hope that all helps.
>>
>> Matt Grant
>> Debian Developer
>>
>>
>>
>> Best Regards,
>>
>> Matt Grant
>> Debian Developer
>>
>>
>> On Mon, 13 Jun 2022 at 20:18, Michael Tokarev <mjt at tls.msk.ru> wrote:
>>
>>> 13.06.2022 10:46, Matt Grant wrote:
>>> > Hi!
>>> >
>>> > Please find attached the patch I made to fix this issue.
>>> >
>>> > It moves the DCE RPC binaries in /usr/libexec/samba into their own
>>> package along with required libs from the samba package creating the
>>> > samba-libexec-dcerpc package, and makes samba and winbind depend on
>>> it, thus solving all the issues.
>>>
>>> Matt, how did you find out the 2 libs -- libRPC-SERVER-LOOP-samba4.so.0 &
>>> libREG-FULL-samba4.so.0 - which can be moved to the new package too, out
>>> of many other libraries in there?
>>>
>>> Thanks!
>>>
>>> /mjt
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20220613/d16b2b54/attachment.htm>