Package: freeipa-client-samba Version: 4.9.8-1~bpo11+1 Severity: normal Dear Maintainer,
I'm trying to get a samba server connected to the freeipa servers I have. The documentation I found is: https://freeipa.readthedocs.io/en/latest/designs/adtrust/samba-domain-member.html When running "ipa-client-samba" I get: Cannot map BUILTIN\Guests to a group "nobody". Error: CalledProcessError(Command ['/usr/bin/net', 'groupmap', 'add', 'sid=S-1-5-32-546', 'unix group=nobody', 'type=builtin'] returned non-zero exit status 255: "Can't lookup UNIX group nobody\n") Traceback (most recent call last): File "/usr/sbin/ipa-client-samba", line 15, in <module> sys.exit(ipa_client_samba.run()) File "/usr/lib/python3/dist-packages/ipaclient/install/ipa_client_samba.py", line 745, in run configure_default_groupmap(fstore, statestore, options, domains[0]) File "/usr/lib/python3/dist-packages/ipaclient/install/ipa_client_samba.py", line 386, in configure_default_groupmap ipautil.run(args) File "/usr/lib/python3/dist-packages/ipapython/ipautil.py", line 598, in run raise CalledProcessError( ipapython.ipautil.CalledProcessError: CalledProcessError(Command ['/usr/bin/net', 'groupmap', 'add', 'sid=S-1-5-32-546', 'unixgroup=nobody', ' type=builtin'] returned non-zero exit status 255: "Can't lookup UNIX group nobody\n") The expected output is to get a working samba configuration that uses freeipa as it's user backend. I've created a group "nobody" locally (Debian uses nogroup by default). With that group created, ipa-client-samba finishes ok and leaves a smb.conf that looks plausible (but until now not working ok - will investigate). Let's focus on the missing group for now. -- System Information: Debian Release: 11.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-14-amd64 (SMP w/4 CPU threads) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages freeipa-client-samba depends on: ii cifs-utils 2:6.11-3.1+deb11u1 ii freeipa-client 4.9.8-1~bpo11+1 ii python3 3.9.2-3 ii python3-samba 2:4.13.13+dfsg-1~deb11u3 ii samba-common-bin 2:4.13.13+dfsg-1~deb11u3 ii smbclient 2:4.13.13+dfsg-1~deb11u3 ii tdb-tools 1.4.3-1+b1 ii winbind 2:4.13.13+dfsg-1~deb11u3 freeipa-client-samba recommends no packages. freeipa-client-samba suggests no packages. -- no debconf information