Univention Bugzilla – Bug 56187
Regression: Samba services (smbd, winbind?) not masked properly any longer in UCS 5.0-4
Last modified: 2023-06-28 13:52:10 CEST
After updating a Samba/AD DC from ucs5.0-3 to ucs5.0-4 the service "smbd" is not masked any longer. This causes problems e.g. during later updates, because samba.postinst then attempts to restart the service (which e.g. currently stalls test updates to 5.2): Before update: root@primary20:~# systemctl -p LoadState --value show smbd.service masked After update: root@primary20:~# systemctl -p LoadState --value show smbd.service loaded Looks like this change is one of the issues: https://salsa.debian.org/samba-team/samba/-/commit/49f59ddfbaeb9f53a28b031e432c5e869d4915a0 And subsequently some UCS patches have been adjusted to the removed mask_services too: https://git.knut.univention.de/univention/ucs-patches/-/commit/921c4680978cc7937311ff38b08ed35d86f23cc4#1d03c0b5193249cc0e2c0c23f54289a9d94adad3_70_73
Created attachment 11075 [details] 05_dont_install_systemd_service_files.patch The attached version of `05_dont_install_systemd_service_files.patch` now includes a reversed version of the upstream Debian maintainer change.
e2c7c2ccd | Add service masking dropped upstream 570d4d8df | fixup: adjust context of subsequent patch 0471dd723 | Also add masking for winbind back 2a50017f22 | Advisory
Just some thoughts about the way forward in UCS 5.2 and Bug 44137: * If we would want to follow Debian upstream and not mask the services then we would probably also need to remove that patch fully to install the service files which are generated from packaging/systemd/*.service.in * In the upstream proposed structure the samba.service would only work on Samba AD/DCs (univention-samba4) but not on UCS Managed Nodes, where smbd.service would need to be used. This would at least require adjustment on documentation (and user behavior) and some locations in listener modules etc. * There would not be "one service" to restart all of Samba on UCS Managed Nodes (smbd, winbind, nmbd). I'm unsure how to implement something like that with systemd units.
OK: Old behaviour was restored: smbd is masked while updating samba OK: yaml Verified
<https://errata.software-univention.de/#/?erratum=5.0x719>