[Pkg-utopia-maintainers] Bug#914959: network-manager: Unable to use machine account for 802.1x authorization

[kpp]

Package: network-manager
Version: 1.6.2-3+deb9u2
Severity: normal

Dear maintainer.

If a machine is a member of AD domain and security policy assumes 802.1x 
authorization it is impossible to use machine's account for authorization.
It is possible to manually extract machine's credentials from 
secrets.tdb file, but it is not very good.
Password of machine's AD account is changed frequently and transparently 
so this method is not suitable.
Could you add some option, helper or someone else for integration 
network manager's 802.1x authorization with samba client and/or forward 
this proposal to upstream?

-- System Information:
Debian Release: 9.6
   APT prefers stable
   APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-8-amd64 (SMP w/4 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), 
LANGUAGE=ru (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager depends on:
ii  adduser                3.115
ii  dbus                   1.10.26-0+deb9u1
ii  init-system-helpers    1.48
ii  libaudit1              1:2.6.7-2
ii  libbluetooth3          5.43-2+deb9u1
ii  libc6                  2.24-11+deb9u3
ii  libglib2.0-0           2.50.3-2
ii  libgnutls30            3.5.8-5+deb9u4
ii  libgudev-1.0-0         230-3
ii  libjansson4            2.9-1
ii  libmm-glib0            1.6.4-1
ii  libndp0                1.6-1+b1
ii  libnewt0.52            0.52.19-1+b1
ii  libnl-3-200            3.2.27-2
ii  libnm0                 1.6.2-3+deb9u2
ii  libpam-systemd         232-25+deb9u6
ii  libpolkit-agent-1-0    0.105-18
ii  libpolkit-gobject-1-0  0.105-18
ii  libreadline7           7.0-3
ii  libselinux1            2.6-3+b3
ii  libsoup2.4-1           2.56.0-2+deb9u2
ii  libsystemd0            232-25+deb9u6
ii  libteamdctl0           1.26-1+b1
ii  libuuid1               2.29.2-1+deb9u1
ii  lsb-base               9.20161125
ii  policykit-1            0.105-18
ii  udev                   232-25+deb9u6
ii  wpasupplicant          2:2.4-1+deb9u2

Versions of packages network-manager recommends:
ii  crda             3.18-1
ii  dnsmasq-base     2.76-5+deb9u2
ii  iptables         1.6.0+snapshot20161117-6
ii  iputils-arping   3:20161105-1
ii  isc-dhcp-client  4.3.5-3+deb9u1
ii  modemmanager     1.6.4-1
ii  ppp              2.4.7-1+4

Versions of packages network-manager suggests:
pn  libteam-utils  <none>

-- debconf-show failed