Bug 41767 – winbind related options missing in univention-samba4 smb.conf template

Bug 41767 - winbind related options missing in univention-samba4 smb.conf template


Summary:	winbind related options missing in univention-samba4 smb.conf template

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Samba4
Version:	UCS 4.1
Hardware:	Other Linux

Importance:	P3 normal (vote)
Target Milestone:	UCS 4.1-3-errata
Assigned To:	Stefan Gohmann
QA Contact:	Arvid Requate

URL:
Keywords:

Depends on:
Blocks:	42705
	Show dependency tree / graph

Reported:	2016-07-11 19:07 CEST by Arvid Requate
Modified:	2016-10-20 12:40 CEST (History)
CC List:	1 user (show)

See Also:	40665
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.046
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2016-07-11 19:07:51 CEST

Some Winbind related Samba options which are useful e.g. for forest or domain trust setups are still missing in univention-samba4. For example

        winbind enum users = yes
        winbind enum groups = yes

and "winbind nested groups". See

univention-samba/conffiles/etc/samba/smb.conf.d/21univention-samba_winbind

Comment 1 Arvid Requate

2016-07-11 19:08:31 CEST

See also Bug 35319#c6

Comment 2 Stefan Gohmann

2016-10-14 07:14:38 CEST

* Added the following UCR variables to configure the winbind settings:
    samba/winbind/nested/groups
    samba/winbind/rpc/only,
    samba/winbind/max/clients
    samba/winbind/enum/users
    samba/winbind/enum/groups

By default none of them is set.

4.1-3: r73191
4.2: r73192
YAML: r73193

Comment 3 Arvid Requate

2016-10-17 17:25:49 CEST

samba/winbind/rpc/only is not evaluated anywhere in univention-samba4 and I don't know if it has any positive effect for Samba4. IIRC this has been added for Samba3 on memberservers as a workaround for winbind issues, so we might not needed in in univention-samba4?

Comment 4 Arvid Requate

2016-10-17 18:20:16 CEST

I've split this off as Bug 42705.

Otherwise verified.

Comment 5 Janek Walkenhorst

2016-10-20 12:40:21 CEST

<http://errata.software-univention.de/ucs/4.1/309.html>