Is this going to also be fixed in Jammy Jellyfish where it was actually reported? It does no good to fix in Noble when I'm bound to 22.04
On Wed, Nov 22, 2023, 7:15 PM Launchpad Bug Tracker < 2024...@bugs.launchpad.net> wrote: > This bug was fixed in the package adsys - 0.13.2 > > --------------- > adsys (0.13.2) noble; urgency=medium > > [ Denison Barbosa ] > [ Didier Roche ] > [ Gabriel Nagy ] > [ Jean-Baptiste Lallement ] > * Ensure GPO URLs contain the FQDN of the domain controller (LP: > #2024377) > * Add runtime dependency on nfs-common (LP: #2044112) > * Documentation changes: > - Switch to Read the Docs for project documentation > - Generate documentation from policy definitions > - Fix installation path of adwatchd > * CI and quality of life changes not impacting package functionality: > - Bump go version to 1.21.4 > - Fix docker stop behavior on integration tests > - Add e2e tests provisioning workflow > - Reduce the amount of workflows to be run > - Remove scopes from dependabot config > * Update dependencies to latest: > - github.com/charmbracelet/lipgloss > - github.com/fatih/color > - github.com/fsnotify/fsnotify > - github.com/golangci/golangci-lint > - github.com/google/uuid > - github.com/maruel/natural > - github.com/pkg/sftp > - github.com/spf13/cobra > - github.com/spf13/viper > - golang.org/x/crypto > - golang.org/x/net > - golang.org/x/sync > - golang.org/x/sys > - golang.org/x/text > - google.golang.org/grpc > > -- Gabriel Nagy <gabriel.n...@canonical.com> Tue, 21 Nov 2023 12:53:10 > +0200 > > ** Changed in: adsys (Ubuntu) > Status: Triaged => Fix Released > > -- > You received this bug notification because you are subscribed to the bug > report. > https://bugs.launchpad.net/bugs/2024377 > > Title: > Adsys can't fetch GPOs > > Status in adsys package in Ubuntu: > Fix Released > > Bug description: > Bad, maybe no understandable english ahead. > > Can't find anything related to this on Github, Canonical Forums, > Reddit or StackOverflow. > > On Ubuntu 22.04, I've followed the Wiki tutorial and verified all > steps on Integration Ubuntu Desktop whitepaper. Currently using SSSD > backend, I can log with Active Directory users however when adsys is > installed I can't fetch GPOs. In this version the error is: > > ERROR Error from server: error while updating policy: can't get > policies for "ubuntu": can't download all gpos and assets: one or more > error while fetching GPOs and assets: can't download "ubuntuRoot": > can't check if ubuntuRoot needs refreshing: no GPT.INI file: cannot > open > smb:// > addc01.domain.com.br/SysVol/domain.com.br/Policies/{DF072E7E-6F2F-46D1-A90F-699415F72F2E}/GPT.INI > <http://addc01.domain.com.br/SysVol/domain.com.br/Policies/%7BDF072E7E-6F2F-46D1-A90F-699415F72F2E%7D/GPT.INI> > : > invalid argument > > It happens when using "adsysctl update -m" or "adsysctl update > usern...@domain.com.br /tmp/krb5c_getentId_randomdnumber" and just > "adsysctl update" too. > > I've upgrade the machine to 22.10 and the error changed to: > > ERROR Error from server: error while updating policy: can't get policies > for "ubuntu": failed to retrieve the list of GPO (exited with 1): exit > status 1 > Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER > Failed to connect to 'ldap://addc01.domain.com.br' with backend 'ldap': > LDAP client internal error: NT_STATUS_INVALID_PARAMETER > Failed to open session: (1, 'LDAP client internal error: > NT_STATUS_INVALID_PARAMETER'). > > After upgrade to 23.04 the error persist same as the above. > > Full info 22.04 (-vvvv verbose): > > INFO No configuration file: Config File "adsys" Not Found in > "[/home/jzprates /root /etc /usr/sbin]". > We will only use the defaults, env variables or flags. > DEBUG Connecting as [[2504:109556]] > DEBUG New request /service/UpdatePolicy > DEBUG Requesting with parameters: IsComputer: true, All: false, Target: > ubuntu, Krb5Cc: > DEBUG NormalizeTargetName for "ubuntu", type "computer" > DEBUG Check if grpc request peer is authorized > DEBUG Authorized as being administrator > DEBUG GetPolicies for "ubuntu", type "computer" > DEBUG Getting gpo list with arguments: "--objectclass computer ldap:// > addc01.domain.com.br ubuntu" > DEBUG GPO "ubuntuRoot" for "ubuntu" available at "smb:// > addc01.domain.com.br/SysVol/domain.com.br/Policies/{DF072E7E-6F2F-46D1-A90F-699415F72F2E} > <http://addc01.domain.com.br/SysVol/domain.com.br/Policies/%7BDF072E7E-6F2F-46D1-A90F-699415F72F2E%7D> > " > DEBUG Analyzing "assets" > DEBUG Analyzing "ubuntuRoot" > INFO No assets directory with GPT.INI file found on AD, skipping assets > download > ERROR Error from server: error while updating policy: can't get policies > for "ubuntu": can't download all gpos and assets: one or more error while > fetching GPOs and assets: can't download "ubuntuRoot": can't check if > ubuntuRoot needs refreshing: no GPT.INI file: cannot open smb:// > addc01.domain.com.br/SysVol/domain.com.br/Policies/{DF072E7E-6F2F-46D1-A90F-699415F72F2E}/GPT.INI > <http://addc01.domain.com.br/SysVol/domain.com.br/Policies/%7BDF072E7E-6F2F-46D1-A90F-699415F72F2E%7D/GPT.INI>: > invalid argument > > Full info 23.04 (-vvvv verbose): > > INFO No configuration file: Config File "adsys" Not Found in > "[/home/jzprates /root /etc /usr/sbin]". > DEBUG Connecting as [[58811:006019]] > DEBUG New request /service/UpdatePolicy > DEBUG Requesting with parameters: IsComputer: true, All: false, Target: > ubuntu, Krb5Cc: > DEBUG NormalizeTargetName for "ubuntu", type "computer" > DEBUG Check if grpc request peer is authorized > DEBUG Authorized as being administrator > DEBUG GetPolicies for "ubuntu", type "computer" > DEBUG Getting gpo list with arguments: "--objectclass computer ldap:// > addc01.domain.com.br ubuntu" > ERROR Error from server: error while updating policy: can't get policies > for "ubuntu": failed to retrieve the list of GPO (exited with 1): exit > status 1 > Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER > Failed to connect to 'ldap://addc01.domain.com.br' with backend 'ldap': > LDAP client internal error: NT_STATUS_INVALID_PARAMETER > Failed to open session: (1, 'LDAP client internal error: > NT_STATUS_INVALID_PARAMETER') > > Additional info: > > Domain Controller and machine are on the same subnet without firewall on > any level; > Domain Controller is a Windows Server 2019 updated to the last security > version; > Both machine and user are on the same OU with "no heritage" enabled and > just one policy added to permit usern...@domain.com.br to become root; > The info header directory is "/home/jzprates" on both logs because I've > collected them using the local account using "sudo adsysctl update -m > -vvvv"; > If I disable Adsys login on pam-auth-update, Ubuntu creates a homedir > and enter correctly with domain users. > > ProblemType: Bug > DistroRelease: Ubuntu 23.04 > Package: adsys 0.11.0 > ProcVersionSignature: Ubuntu 6.2.0-23.23-generic 6.2.12 > Uname: Linux 6.2.0-23-generic x86_64 > ApportVersion: 2.26.1-0ubuntu2 > Architecture: amd64 > CasperMD5CheckResult: pass > CurrentDesktop: ubuntu:GNOME > Date: Mon Jun 19 11:22:10 2023 > InstallationDate: Installed on 2023-06-13 (5 days ago) > InstallationMedia: Ubuntu 22.04.2 LTS "Jammy Jellyfish" - Release amd64 > (20230223) > RelatedPackageVersions: > sssd 2.8.1-1ubuntu1 > python3-samba 2:4.17.7+dfsg-1ubuntu1 > SourcePackage: adsys > UpgradeStatus: Upgraded to lunar on 2023-06-16 (2 days ago) > > modified.conffile..etc.polkit-1.localauthority.conf.d.99-adsys-privilege-enforcement.conf: > [deleted] > modified.conffile..etc.sudoers.d.99-adsys-privilege-enforcement: > [deleted] > > To manage notifications about this bug go to: > https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2024377/+subscriptions > > -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to adsys in Ubuntu. https://bugs.launchpad.net/bugs/2024377 Title: Adsys can't fetch GPOs Status in adsys package in Ubuntu: Fix Released Bug description: Bad, maybe no understandable english ahead. Can't find anything related to this on Github, Canonical Forums, Reddit or StackOverflow. On Ubuntu 22.04, I've followed the Wiki tutorial and verified all steps on Integration Ubuntu Desktop whitepaper. Currently using SSSD backend, I can log with Active Directory users however when adsys is installed I can't fetch GPOs. In this version the error is: ERROR Error from server: error while updating policy: can't get policies for "ubuntu": can't download all gpos and assets: one or more error while fetching GPOs and assets: can't download "ubuntuRoot": can't check if ubuntuRoot needs refreshing: no GPT.INI file: cannot open smb://addc01.domain.com.br/SysVol/domain.com.br/Policies/{DF072E7E-6F2F-46D1-A90F-699415F72F2E}/GPT.INI: invalid argument It happens when using "adsysctl update -m" or "adsysctl update usern...@domain.com.br /tmp/krb5c_getentId_randomdnumber" and just "adsysctl update" too. I've upgrade the machine to 22.10 and the error changed to: ERROR Error from server: error while updating policy: can't get policies for "ubuntu": failed to retrieve the list of GPO (exited with 1): exit status 1 Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER Failed to connect to 'ldap://addc01.domain.com.br' with backend 'ldap': LDAP client internal error: NT_STATUS_INVALID_PARAMETER Failed to open session: (1, 'LDAP client internal error: NT_STATUS_INVALID_PARAMETER'). After upgrade to 23.04 the error persist same as the above. Full info 22.04 (-vvvv verbose): INFO No configuration file: Config File "adsys" Not Found in "[/home/jzprates /root /etc /usr/sbin]". We will only use the defaults, env variables or flags. DEBUG Connecting as [[2504:109556]] DEBUG New request /service/UpdatePolicy DEBUG Requesting with parameters: IsComputer: true, All: false, Target: ubuntu, Krb5Cc: DEBUG NormalizeTargetName for "ubuntu", type "computer" DEBUG Check if grpc request peer is authorized DEBUG Authorized as being administrator DEBUG GetPolicies for "ubuntu", type "computer" DEBUG Getting gpo list with arguments: "--objectclass computer ldap://addc01.domain.com.br ubuntu" DEBUG GPO "ubuntuRoot" for "ubuntu" available at "smb://addc01.domain.com.br/SysVol/domain.com.br/Policies/{DF072E7E-6F2F-46D1-A90F-699415F72F2E}" DEBUG Analyzing "assets" DEBUG Analyzing "ubuntuRoot" INFO No assets directory with GPT.INI file found on AD, skipping assets download ERROR Error from server: error while updating policy: can't get policies for "ubuntu": can't download all gpos and assets: one or more error while fetching GPOs and assets: can't download "ubuntuRoot": can't check if ubuntuRoot needs refreshing: no GPT.INI file: cannot open smb://addc01.domain.com.br/SysVol/domain.com.br/Policies/{DF072E7E-6F2F-46D1-A90F-699415F72F2E}/GPT.INI: invalid argument Full info 23.04 (-vvvv verbose): INFO No configuration file: Config File "adsys" Not Found in "[/home/jzprates /root /etc /usr/sbin]". DEBUG Connecting as [[58811:006019]] DEBUG New request /service/UpdatePolicy DEBUG Requesting with parameters: IsComputer: true, All: false, Target: ubuntu, Krb5Cc: DEBUG NormalizeTargetName for "ubuntu", type "computer" DEBUG Check if grpc request peer is authorized DEBUG Authorized as being administrator DEBUG GetPolicies for "ubuntu", type "computer" DEBUG Getting gpo list with arguments: "--objectclass computer ldap://addc01.domain.com.br ubuntu" ERROR Error from server: error while updating policy: can't get policies for "ubuntu": failed to retrieve the list of GPO (exited with 1): exit status 1 Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER Failed to connect to 'ldap://addc01.domain.com.br' with backend 'ldap': LDAP client internal error: NT_STATUS_INVALID_PARAMETER Failed to open session: (1, 'LDAP client internal error: NT_STATUS_INVALID_PARAMETER') Additional info: Domain Controller and machine are on the same subnet without firewall on any level; Domain Controller is a Windows Server 2019 updated to the last security version; Both machine and user are on the same OU with "no heritage" enabled and just one policy added to permit usern...@domain.com.br to become root; The info header directory is "/home/jzprates" on both logs because I've collected them using the local account using "sudo adsysctl update -m -vvvv"; If I disable Adsys login on pam-auth-update, Ubuntu creates a homedir and enter correctly with domain users. ProblemType: Bug DistroRelease: Ubuntu 23.04 Package: adsys 0.11.0 ProcVersionSignature: Ubuntu 6.2.0-23.23-generic 6.2.12 Uname: Linux 6.2.0-23-generic x86_64 ApportVersion: 2.26.1-0ubuntu2 Architecture: amd64 CasperMD5CheckResult: pass CurrentDesktop: ubuntu:GNOME Date: Mon Jun 19 11:22:10 2023 InstallationDate: Installed on 2023-06-13 (5 days ago) InstallationMedia: Ubuntu 22.04.2 LTS "Jammy Jellyfish" - Release amd64 (20230223) RelatedPackageVersions: sssd 2.8.1-1ubuntu1 python3-samba 2:4.17.7+dfsg-1ubuntu1 SourcePackage: adsys UpgradeStatus: Upgraded to lunar on 2023-06-16 (2 days ago) modified.conffile..etc.polkit-1.localauthority.conf.d.99-adsys-privilege-enforcement.conf: [deleted] modified.conffile..etc.sudoers.d.99-adsys-privilege-enforcement: [deleted] To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2024377/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
