[Touch-packages] [Bug 1968305] Re: sshd_config.d overrides not working

2022-04-11 Thread James Paton-Smith
I've since tested by placing the Include option at the top of the config, and it works. I had assumed positioning was irrelevant, or that it should check /etc/ssh/sshd_config.d by default as described in the man pages: ``` Note that the Debian openssh-server package sets several options as

[Touch-packages] [Bug 1968305] Re: sshd_config.d overrides not working

2022-04-11 Thread James Paton-Smith
According to man pages, this is set by default (at least on debian-based systems) so I tried both with and without specifying 'Include /etc/ssh/sshd_config.d/*.conf' in the main sshd_config file. But neither seem to work. I've attached the sshd_config file used when testing previously. I

[Touch-packages] [Bug 1968305] Re: sshd_config.d overrides not working

2022-04-08 Thread James Paton-Smith
** Attachment added: "Contents of override file" https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1968305/+attachment/5578185/+files/sshd_config_override -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in

[Touch-packages] [Bug 1968305] Re: sshd_config.d overrides not working

2022-04-08 Thread James Paton-Smith
** Attachment added: "sshd debug output" https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1968305/+attachment/5578186/+files/sshd_debug -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu.

[Touch-packages] [Bug 1968305] [NEW] sshd_config.d overrides not working

2022-04-08 Thread James Paton-Smith
Public bug reported: Creating an sshd_config override file under /etc/ssh/sshd_config.d/ does not override settings from /etc/ssh/sshd_config >From debugging sshd, I can see the override file is indeed being read, and the option is supposedly set. But after testing, the options are not taking

[Touch-packages] [Bug 1991545] [NEW] Domain groups not accepted as 'AdminIdentities'

2022-10-03 Thread James Paton-Smith
Public bug reported: Domain groups cannot be configured as 'AdminIdentities' under /etc/polkit-1/localauthority.conf.d EXAMPLE CONFIG # /etc/polkit-1/localauthority.conf.d/90-test.conf [Configuration] AdminIdentities=unix-group:sysapp With the above config, 'sysapp' is a group in LDAP. SSSD

[Touch-packages] [Bug 1853115] Re: localauthority.conf - AdminIdentities: unix-group is ignored

2022-08-03 Thread James Paton-Smith
I am experiencing the same issue on Ubuntu 20.04.4 with the below polkit config, where sysapp is an LDAP group, and we are using SSSD for LDAP login to our machines. # This file is managed by Puppet. DO NOT EDIT. [Configuration] AdminIdentities=unix-group:sysapp;unix-group:sudo;unix-group:admin

[Touch-packages] [Bug 2053228] Re: software-properties-gtk does not start

2024-03-22 Thread James Paton-Smith
Can confirm that the version in noble-proposed fixes this issue. Although I noticed another bug, possibly related to deb822 sources in general rather than this specific change: #2058715 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 2058715] [NEW] ubuntu.sources can become broken via GUI

2024-03-22 Thread James Paton-Smith
Public bug reported: With the latest proposed versions of software-properties-gtk, software- properties-common, and python3-software-properties (0.99.44), it is possible to break the default ubuntu.sources list. How to replicate 1. Open software-properties-gtk 2. Uncheck all of the repository

[Touch-packages] [Bug 2058720] [NEW] 'Other Software' section displays verbose ubuntu.sources comment

2024-03-22 Thread James Paton-Smith
Public bug reported: With software-properties-gtk (0.99.44), the 'Other Software' section displays the full multi-line comment from the new ubuntu.sources file. This creates an unpleasant looking entry in the list. ** Affects: software-properties (Ubuntu) Importance: Undecided

[Touch-packages] [Bug 2058733] [NEW] polkitd does not create default config files on noble

2024-03-22 Thread James Paton-Smith
Public bug reported: With a fresh install of the daily Ubuntu 24.04, polkitd does not create the default config files under /etc/polkit-1/localauthority.conf.d/ This folder should contain some default config files which specify which users can perform GUI admin authorization. In fact, even if I

[Touch-packages] [Bug 1991545] Re: Domain groups not accepted as 'AdminIdentities'

2024-03-28 Thread James Paton-Smith
After revisiting this, I found the issue was on my side. Our LDAP wasn't returning the members list for groups when queried so polkit wasn't able to authorise those users. I fixed this in our sssd.conf using the 'ignore_group_members = false' option. -- You received this bug notification

[Touch-packages] [Bug 2064096] Re: rsyslog service timeout on noble numbat

2024-04-30 Thread James Paton-Smith
I've just found that the cups.service is also experiencing the same behaviour. Again it has the service type 'notify'. I suspect other services using this type will have the same problem. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 2064096] [NEW] rsyslog service timeout on noble numbat

2024-04-29 Thread James Paton-Smith
Public bug reported: This might be related to #2064088 The rsyslog service is continually timing out and restarting. If I use a service drop-in file and change the 'Type' from 'notify' to 'simple', the service starts and appears to work normally. In the journal, I can see the attached apparmor

[Touch-packages] [Bug 2064096] Re: rsyslog service timeout on noble numbat

2024-05-01 Thread James Paton-Smith
Do you think we should mark #2064088 as a duplicate of this (or vice- versa), if we're confident this is the same underlying issue? There are some outstanding questions for me on that bug, but it might make sense to focus our comments in one place going forward. -- You received this bug

[Touch-packages] [Bug 2064096] Re: Services fail to start in noble deployed with TPM+FDE

2024-05-02 Thread James Paton-Smith
Answering questions from #2064088 Q: Did you install this fde/tpm setup using the ubuntu desktop noble installer? Or was hit some manual setup? A: The install was performed using autoinstall with the desktop ISO. Attached is a copy of the autoinstall yaml ** Attachment added: "autoinstall

[Touch-packages] [Bug 2064096] Re: Services fail to start in noble deployed with TPM+FDE

2024-05-02 Thread James Paton-Smith
Answering questions from #2064088 Q: Can you also show the output of: ps fauxwZ A: See attached ** Attachment added: "ps" https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/2064096/+attachment/5774011/+files/ps -- You received this bug notification because you are a member of Ubuntu