[Pkg-samba-maint] Bug#1034417: samba: Samba can no longer authenticate users via Kerberos from a standalone KDC

[Daniel Lakeland]

On 4/14/23 10:59, Michael Tokarev wrote:
> Control: tag -1 + moreinfo
>
> Hello!
>
> 14.04.2023 20:49, Daniel Lakeland wrote:
>> Package: samba
>> Version: Installed: 2:4.17.7+dfsg-1
>> Severity: important
>> Tags: upstream
>> X-Debbugs-Cc: dlakelan at street-artists.org
>
> ..
>> Please see discussions on the samba mailing list in the thread 
>> starting here:
>>
>> https://lists.samba.org/archive/samba/2023-April/244842.html
>
> Yeah, I've seen this thread, watched it with great interest.
>
> But I have a question for you, as the reporter of this bug:
> What do you expect us the debian samba maintainers to do with it?
> I definitely will not change samba in a way not approved by the
> upstream. Also, I wont try to find out what the problem is and
> how to deal with it as I don't have neither enough experience
> in that area nor time nor motivation. If this bugreport stays
> here for years, what good will it serve? I can immediately
> think about a downside: it will keep my attention constantly
> drawn away when I look for bugs to triage, so I'll have less
> resources for other bugs I can possible fix.
>

Hi Michael, my concern is mainly to document the existence of this 
problem for others who might use this similar config. I'm 100% sure I'm 
not the only one in the world. There are debian bugs going back a while 
where others have this kind of set up and had issues. I'll continue to 
try to figure out the work around, and then document the method I came 
up with here, and then we can close the bug so it's preserved for others 
with similar issues?

Agreed that you won't make changes they don't approve, but it's possible 
they'll realize that they've done something unintended and make some 
changes based on my concerns etc. Or not. Let's not make this bug be a 
thorn in your side for a long time, but let's leave it open for 
documenting the issue and its resolution or non-resolution for a 
sufficiently long time that it's clear whether this is permanently 
unsupported, or only temporarily or requires some specific config. 
Googling debian bugs can be an amazingly helpful way to figure out the 
solutions to problems for others.