Bug 41767

Summary: winbind related options missing in univention-samba4 smb.conf template
Product: UCS Reporter: Arvid Requate <requate>
Component: Samba4Assignee: Stefan Gohmann <gohmann>
Status: CLOSED FIXED QA Contact: Arvid Requate <requate>
Severity: normal    
Priority: P3 CC: gohmann
Version: UCS 4.1   
Target Milestone: UCS 4.1-3-errata   
Hardware: Other   
OS: Linux   
See Also: https://forge.univention.org/bugzilla/show_bug.cgi?id=40665
What kind of report is it?: Bug Report What type of bug is this?: 2: Improvement: Would be a product improvement
Who will be affected by this bug?: 2: Will only affect a few installed domains How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.046 Enterprise Customer affected?: Yes
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:
Bug Depends on:    
Bug Blocks: 42705    

Description Arvid Requate univentionstaff 2016-07-11 19:07:51 CEST
Some Winbind related Samba options which are useful e.g. for forest or domain trust setups are still missing in univention-samba4. For example

        winbind enum users = yes
        winbind enum groups = yes

and "winbind nested groups". See

univention-samba/conffiles/etc/samba/smb.conf.d/21univention-samba_winbind
Comment 1 Arvid Requate univentionstaff 2016-07-11 19:08:31 CEST
See also Bug 35319#c6
Comment 2 Stefan Gohmann univentionstaff 2016-10-14 07:14:38 CEST
* Added the following UCR variables to configure the winbind settings:
    samba/winbind/nested/groups
    samba/winbind/rpc/only,
    samba/winbind/max/clients
    samba/winbind/enum/users
    samba/winbind/enum/groups

By default none of them is set.

4.1-3: r73191
4.2: r73192
YAML: r73193
Comment 3 Arvid Requate univentionstaff 2016-10-17 17:25:49 CEST
samba/winbind/rpc/only is not evaluated anywhere in univention-samba4 and I don't know if it has any positive effect for Samba4. IIRC this has been added for Samba3 on memberservers as a workaround for winbind issues, so we might not needed in in univention-samba4?
Comment 4 Arvid Requate univentionstaff 2016-10-17 18:20:16 CEST
I've split this off as Bug 42705.

Otherwise verified.
Comment 5 Janek Walkenhorst univentionstaff 2016-10-20 12:40:21 CEST
<http://errata.software-univention.de/ucs/4.1/309.html>