Bug#914959: [Pkg-utopia-maintainers] Bug#914959: network-manager: Unable to use machine account for 802.1x authorization

[Michael Biebl]

Hello

Am 29.11.18 um 06:29 schrieb kpp:
> Package: network-manager
> Version: 1.6.2-3+deb9u2
> Severity: normal
> 
> Dear maintainer.
> 
> If a machine is a member of AD domain and security policy assumes 802.1x
> authorization it is impossible to use machine's account for authorization.
> It is possible to manually extract machine's credentials from
> secrets.tdb file, but it is not very good.
> Password of machine's AD account is changed frequently and transparently
> so this method is not suitable.
> Could you add some option, helper or someone else for integration
> network manager's 802.1x authorization with samba client and/or forward
> this proposal to upstream?

This is way out of scope for a downstream bug report and should be
raised upstream instead. Upstream is most likely in a position to
evaluate if such a feature is feasible to implement in NetworkManager.

And since I don't have a setup like yours, I'm not in a position to
properly file such an upstream bug report.
I would thus like you to do that instead at
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/
and report back with the bug number.

Regards,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature

Bug#914959: network-manager: Unable to use machine account for 802.1x authorization

[kpp]

Package: network-manager
Version: 1.6.2-3+deb9u2
Severity: normal

Dear maintainer.

If a machine is a member of AD domain and security policy assumes 802.1x 
authorization it is impossible to use machine's account for authorization.
It is possible to manually extract machine's credentials from 
secrets.tdb file, but it is not very good.
Password of machine's AD account is changed frequently and transparently 
so this method is not suitable.
Could you add some option, helper or someone else for integration 
network manager's 802.1x authorization with samba client and/or forward 
this proposal to upstream?


-- System Information:
Debian Release: 9.6
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-8-amd64 (SMP w/4 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), 
LANGUAGE=ru (charmap=UTF-8)

Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages network-manager depends on:
ii  adduser3.115
ii  dbus   1.10.26-0+deb9u1
ii  init-system-helpers1.48
ii  libaudit1  1:2.6.7-2
ii  libbluetooth3  5.43-2+deb9u1
ii  libc6  2.24-11+deb9u3
ii  libglib2.0-0   2.50.3-2
ii  libgnutls303.5.8-5+deb9u4
ii  libgudev-1.0-0 230-3
ii  libjansson42.9-1
ii  libmm-glib01.6.4-1
ii  libndp01.6-1+b1
ii  libnewt0.520.52.19-1+b1
ii  libnl-3-2003.2.27-2
ii  libnm0 1.6.2-3+deb9u2
ii  libpam-systemd 232-25+deb9u6
ii  libpolkit-agent-1-00.105-18
ii  libpolkit-gobject-1-0  0.105-18
ii  libreadline7   7.0-3
ii  libselinux12.6-3+b3
ii  libsoup2.4-1   2.56.0-2+deb9u2
ii  libsystemd0232-25+deb9u6
ii  libteamdctl0   1.26-1+b1
ii  libuuid1   2.29.2-1+deb9u1
ii  lsb-base   9.20161125
ii  policykit-10.105-18
ii  udev   232-25+deb9u6
ii  wpasupplicant  2:2.4-1+deb9u2

Versions of packages network-manager recommends:
ii  crda 3.18-1
ii  dnsmasq-base 2.76-5+deb9u2
ii  iptables 1.6.0+snapshot20161117-6
ii  iputils-arping   3:20161105-1
ii  isc-dhcp-client  4.3.5-3+deb9u1
ii  modemmanager 1.6.4-1
ii  ppp  2.4.7-1+4

Versions of packages network-manager suggests:
pn  libteam-utils  

-- debconf-show failed