Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Matt Grant
Hi Michael! OK, see what you are thinking. Was planning to do just what you did. Bins into samba-common-bin, libs into samba-libs. My bad about samba-dcerpcd.8 man page. Maybe ksmbd support should be started with all needed bins in samba-common-bin, and systemctl disabled ksmbd/samba-dcercpd

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Michael Tokarev
13.06.2022 12:12, Matt Grant wrote: Hi Michael! For the libraries to move from the samba package, just used the following command on each rpcd binary in /usr/libexec/samba: dpkg -S `ldd rpcd_epmapper | grep samba | cut -f 1 -d ' '` I suspected it was something like that. The problem here

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Matt Grant
After thinking about it, Puting everything which s in debian/samba-libexec-dcerpc.install into samba-common-bin would work. Regards, Matt Grant Debian Developer On Mon, 13 Jun 2022 at 21:14, Matt Grant wrote: > PS: Also have tested new package and winbind now does work by itself for >

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Matt Grant
Hi Michael! For the libraries to move from the samba package, just used the following command on each rpcd binary in /usr/libexec/samba: dpkg -S `ldd rpcd_epmapper | grep samba | cut -f 1 -d ' '` You could put the contents of this new package ( ie debian/samba-libexec-dcerpc.install) into the

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Matt Grant
PS: Also have tested new package and winbind now does work by itself for getgroups(3) and initgroups(3), ie kerberos logins over ssh work again! On Mon, 13 Jun 2022 at 21:12, Matt Grant wrote: > Hi Michael! > > For the libraries to move from the samba package, just used the following > command

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Michael Tokarev
13.06.2022 10:46, Matt Grant wrote: Hi! Please find attached the patch I made to fix this issue. It moves the DCE RPC binaries in /usr/libexec/samba into their own package along with required libs from the samba package creating the samba-libexec-dcerpc package, and makes samba and winbind

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Michael Tokarev
13.06.2022 10:46, Matt Grant wrote: Hi! Please find attached the patch I made to fix this issue. It moves the DCE RPC binaries in /usr/libexec/samba into their own package along with required libs from the samba package creating the samba-libexec-dcerpc package, and makes samba and winbind

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Matt Grant
FYI, Tested patch after merging Samba 2:4.16.1+dfsg-8 source build with my work, so should apply directly to your current source Michael. On Mon, 13 Jun 2022 at 19:46, Matt Grant wrote: > Hi! > > Please find attached the patch I made to fix this issue. > > It moves the DCE RPC binaries in

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-13 Thread Matt Grant
Hi! Please find attached the patch I made to fix this issue. It moves the DCE RPC binaries in /usr/libexec/samba into their own package along with required libs from the samba package creating the samba-libexec-dcerpc package, and makes samba and winbind depend on it, thus solving all the

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-03 Thread Michael Tokarev
03.06.2022 04:00, Matt Grant wrote: Hi! May be best to move the contents of /usr/libexec/samba to samba-libs. No, definitely not. A library is a library, it is multiarch and different arch must be co-installable. It might be more appropriate to move these executables to samba-common-bin as I

Bug#1012240: [Pkg-samba-maint] Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-03 Thread Michael Tokarev
03.06.2022 05:31, Andrew Bartlett wrote: On Fri, 2022-06-03 at 13:08 +1200, Matt Grant wrote: Otherwise, libwbclient0 ends up being installed when samba-lbs is installed due to depending on samba-libs? I read this like samba-libs uses libwbclient, not like libwbclient uses samba-libs (would

Bug#1012240: [Pkg-samba-maint] Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Andrew Bartlett
On Fri, 2022-06-03 at 13:08 +1200, Matt Grant wrote: > > Otherwise, libwbclient0 ends up being installed when samba-lbs is > installed due to depending on samba-libs? libwbclient0 should not depend on anything else in Samba (due to licence requirements) so if there is a linking reason for this

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Matt Grant
Or maybe even a new package to untangle dependencies on libwbclient0, named 'samba-libexec', moving the contents of /usr/libexec/samba to samba-libexec? Otherwise, libwbclient0 ends up being installed when samba-lbs is installed due to depending on samba-libs? Or far simpler, combine

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Matt Grant
Hi! May be best to move the contents of /usr/libexec/samba to samba-libs. shalom: -admin- [/usr/libexec/samba] $ dpkg -S `ldd samba-dcerpcd | grep samba |cut -f 1 -d ' '` |cut -f 1 -d ':' | sort |uniq libwbclient0 samba-libs If you remove the uniq: shalom: -admin- [/usr/libexec/samba] $ dpkg

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Michael Tokarev
02.06.2022 19:06, Andrew Bartlett wrote: On Thu, 2022-06-02 at 18:37 +0300, Michael Tokarev wrote: .. Where does one can find some information about these new binaries, how they're being used and by what? Ask us really, particularly if there isn't a manpage. This new DCE/RPC Andrew,

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Andrew Bartlett
On Thu, 2022-06-02 at 18:37 +0300, Michael Tokarev wrote: > 02.06.2022 10:38, Andrew Bartlett wrote: > > > Just make sure we don't get the opposite problem if smbd is > > installed > > without winbindd. > > (I've not checked the deps, but upstream you can still run smbd > > that > > without

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Michael Tokarev
02.06.2022 10:38, Andrew Bartlett wrote: Just make sure we don't get the opposite problem if smbd is installed without winbindd. (I've not checked the deps, but upstream you can still run smbd that without winbindd for a standalone fileserver) Where does one can find some information about

Bug#1012240: [Pkg-samba-maint] Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-02 Thread Andrew Bartlett
Just make sure we don't get the opposite problem if smbd is installed without winbindd. (I've not checked the deps, but upstream you can still run smbd that without winbindd for a standalone fileserver)

Bug#1012240: winbind does not return AD groups a user is a member of AT ALL, or only one

2022-06-01 Thread Matthew Grant
Package: winbind Version: 2:4.16.1+mag-1 Severity: important Dear Maintainer, I have rebuilt samba 4.16.1 packages as I am including a samba INTERNAL DNS patch, bt I have not altered the packaging significantly other than this, and have not touched winbind I have been finding that when I login