First Last Prev Next    This bug is not in your last search results.
Bug 56885 - UCS samba errata 890 activates winbind in nsswitch.conf, changing usernames to DOM+username
UCS samba errata 890 activates winbind in nsswitch.conf, changing usernames t...
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-5-errata
Assigned To: Arvid Requate
Felix Botner
https://git.knut.univention.de/univen...
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2023-11-30 11:57 CET by Arvid Requate
Modified: 2023-11-30 14:37 CET (History)
1 user (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.286
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2023113021000055
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2023-11-30 11:57:33 CET 
UCS samba errata 891 silently activates winbind in /etc/nsswitch.conf. updater.log:

libnss-winbind:amd64 (2:4.18.3-1A~5.0.0.202311271227) wird eingerichtet ...
First installation detected, adding winbind to /etc/nsswitch.conf...

Looks like an additional package that gets installed as dependency from samba-ad-dc
and it takes the freedom to adjust the nsswitch.conf.


As a workaround at least do this:

ucr commit /etc/nsswitch.conf
nscd -i passwd
Comment 1 Arvid Requate univentionstaff 2023-11-30 12:08:19 CET 
The nsswitch.conf adjustment is caused by

https://salsa.debian.org/samba-team/samba/-/commit/32b93eda5f9d879d8c0a0390414987eb906b8fec
Comment 2 Arvid Requate univentionstaff 2023-11-30 13:04:14 CET 
As a workaround at least do this:

ucr commit /etc/nsswitch.conf
service restart nscd
net cache flush
/etc/init.d/samba restart  ## maybe required
Comment 3 Arvid Requate univentionstaff 2023-11-30 13:34:39 CET 
ucs-patches repo:
3006d7800 | fix nsswitch.conf modification

Version: 2:4.18.3-1A~5.0.0.202311301306
Branch: ucs_5.0-0
Scope: errata5.0-5

ucs repo:
70efa5a632 | Advisory
Comment 4 Felix Botner univentionstaff 2023-11-30 13:39:31 CET 
OK - libnss-winbind no longer adds "winbind" to nsswitch.conf
OK - "winbind" is removed from nsswitch.conf in this update
OK - YAML
First Last Prev Next    This bug is not in your last search results.