[Pkg-sssd-devel] Bug#1061130: sssd-common: not using alternatives for idmap-plugin

[Vincent Danjean]

Package: sssd-common
Version: 2.8.2-4
Severity: normal

  Hi,

  sssd-common provides /usr/lib/x86_64-linux-gnu/cifs-utils/cifs_idmap_sss.so
that needs to be manually symlinked from /etc/cifs-utils/idmap-plugin
if we want to use it.
  However, cifs-utils provides /usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
that it installs as /etc/cifs-utils/idmap-plugin with the
Debian alternative system:
# update-alternatives --list idmap-plugin
/usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
# update-alternatives --display idmap-plugin
idmap-plugin - auto mode
  link best version is /usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
  link currently points to /usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
  link idmap-plugin is /etc/cifs-utils/idmap-plugin
  slave idmap-plugin.8.gz is /usr/share/man/man8/idmap-plugin.8.gz
/usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so - priority 40
  slave idmap-plugin.8.gz: /usr/share/man/man8/idmapwb.8.gz


  As sssd-common does not use the alternative system,
each times cifs-utils is upgraded (security, ...),
the /etc/cifs-utils/idmap-plugin is recreated to
/usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
(via /etc/alternatives/idmap-plugin).

  So sssd-common should also use the alternative system,
probably with a priority below 40 (so that cifs-utils
version would still be the defaut as currently),
but allowing an admin sys to permanently change this.

  Regards,
    Vincent


-- System Information:
Debian Release: trixie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armel

Kernel: Linux 6.6.9-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sssd-common depends on:
ii  adduser                      3.137
ii  libc-ares2                   1.25.0-1
ii  libc6                        2.37-13
ii  libdbus-1-3                  1.14.10-4
ii  libdhash1                    0.6.2-2+b1
ii  libglib2.0-0                 2.78.3-1
ii  libgssapi-krb5-2             1.20.1-5
ii  libini-config5               0.6.2-2+b1
ii  libkeyutils1                 1.6.3-2+b2
ii  libkrb5-3                    1.20.1-5
pn  libldap-2.4-2                <none>
ii  libldap-2.5-0                2.5.13+dfsg-5+b2
ii  libldb2                      2:2.8.0+samba4.19.4+dfsg-2
ii  libnfsidmap1 [libnfsidmap2]  1:2.6.4-3
ii  libnl-3-200                  3.7.0-0.2+b1
ii  libnl-route-3-200            3.7.0-0.2+b1
pn  libnss-sss                   <none>
ii  libp11-kit0                  0.25.3-4
pn  libpam-sss                   <none>
ii  libpam0g                     1.5.2-9.1+b1
ii  libpcre2-8-0                 10.42-4
ii  libpcre3                     2:8.39-15
ii  libpopt0                     1.19+dfsg-1
ii  libref-array1                0.6.2-2+b1
ii  libselinux1                  3.5-1+b2
pn  libsemanage1                 <none>
ii  libsemanage2                 3.5-1+b2
ii  libssl1.1                    1.1.1w-0+deb11u1
ii  libssl3                      3.1.4-2
pn  libsss-certmap0              <none>
pn  libsss-idmap0                <none>
pn  libsss-nss-idmap0            <none>
ii  libsystemd0                  255.2-4
ii  libtalloc2                   2.4.1-2
ii  libtdb1                      1.4.9-2
ii  libtevent0                   0.15.0-1
pn  libunistring2                <none>
ii  libunistring5                1.1-2
ii  python3                      3.11.6-1
pn  python3-sss                  <none>

Versions of packages sssd-common recommends:
ii  bind9-dnsutils  1:9.19.19-1
ii  bind9-host      1:9.19.19-1
pn  libnss-sss      <none>
pn  libpam-sss      <none>

Versions of packages sssd-common suggests:
ii  apparmor     3.0.12-1+b2
pn  libsss-sudo  <none>
pn  sssd-tools   <none>