Stefan G. Weichinger
2020-May-12 07:59 UTC
[Samba] upgraded DC shows IDs instead of usernames
(resent)>> On 11/05/2020 15:24, L. van Belle via samba wrote: >>> For all Debian 10 people and strange things after upgrade of debian. >>> apt remove apparmor> I already replied that it isn't installed at all.Any other ideas? Am I the only one with Debian 10.4 and samba seeing this behavior? thx
El 12/5/20 a les 9:59, Stefan G. Weichinger via samba ha escrit:> (resent) > >>> On 11/05/2020 15:24, L. van Belle via samba wrote: >>>> For all Debian 10 people and strange things after upgrade of debian. >>>> apt remove apparmor > >> I already replied that it isn't installed at all. > > Any other ideas? > > Am I the only one with Debian 10.4 and samba seeing this behavior? > > thx >FWIW I upgraded my dcs to debian 10 a while ago with no such problems. I have apparmor installed. The difference is that I use the distro provided samba: $ LC_ALL=C dpkg -l samba Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++-==============-======================-============-==============================================ii samba 2:4.9.5+dfsg-5+deb10u1 amd64 SMB/CIFS file, print, and login server for Unix Bye -- Luca Olivetti Wetron Automation Technology http://www.wetron.es/ Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007
Have you checked to make sure the winbind nss symlinks are present and correct? (https://wiki.samba.org/index.php/Configuring_Winbindd_on_a_Samba_AD_DC#Libnss_winbind_Links) On 12/05/2020 08:59, Stefan G. Weichinger via samba wrote:> (resent) > >>> On 11/05/2020 15:24, L. van Belle via samba wrote: >>>> For all Debian 10 people and strange things after upgrade of debian. >>>> apt remove apparmor >> I already replied that it isn't installed at all. > Any other ideas? > > Am I the only one with Debian 10.4 and samba seeing this behavior? > > thx > > >
Stefan G. Weichinger
2020-May-12 09:38 UTC
[Samba] upgraded DC shows IDs instead of usernames
(resent ...) Am 12.05.20 um 11:22 schrieb Alex MacCuish via samba:> Have you checked to make sure the winbind nss symlinks are present and > correct? > (https://wiki.samba.org/index.php/Configuring_Winbindd_on_a_Samba_AD_DC#Libnss_winbind_Links)I think I did that years ago ;-) ... but the links were missing again, thanks for the reminder. Created them, and restarted samba-ad-dc.service but so far the output of smbstatus still displays IDs: # smbstatus Samba version 4.10.15-Debian PID Username Group Machine Protocol Version Encryption Signing ---------------------------------------------------------------------------------------------------------------------------------------- 16148 3000032 3000022 192.168.16.202 (ipv4:192.168.16.202:36328) SMB3_11 - AES-128-CMAC - btw: The wiki says "If you compiled Samba, add symbolic links from the libnss_winbind library to the operating system's library path. For details, see libnss_winbind Links. If you used packages to install Samba, the link is usually created automatically." If I use Louis's repo ... the links aren't created ... ? - thanks, regards
I didnt have problems also after the upgrades, with apparmor, because i have setup the correct thing for it. But i think its really anoying its installed even after i removed it. Its in my optionion just not needed, or, like Rowland and systemd.. ;-) thats me with AppArmor.. I HATE it. ;-) and especially when its "sudden" installed.. That should never happen in my option only with "dist-upgrade" .. ;-) Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Luca > >..> >> I already replied that it isn't installed at all. > > > > Any other ideas? > > > > Am I the only one with Debian 10.4 and samba seeing this behavior? > > > > thx > > > > > FWIW I upgraded my dcs to debian 10 a while ago with no such > problems. I > have apparmor installed. The difference is that I use the distro > provided samba:There are only 2 differences between my packages and debian official. 1) i enabled spotlight. 2) i use higher version for samba and depends. 3) optional when needed, i add patched from bugzilla. Besides that, i use or re-use all debian official its settings. Greetz, Louis> > > $ LC_ALL=C dpkg -l samba > Desired=Unknown/Install/Remove/Purge/Hold > | > Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend> |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) > ||/ Name Version Architecture Description > +++-==============-======================-============-======> =======================================> ii samba 2:4.9.5+dfsg-5+deb10u1 amd64 SMB/CIFS file, > print, and login server for Unix > > Bye > -- > Luca Olivetti > Wetron Automation Technology http://www.wetron.es/ > Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007 > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Am 12.05.20 um 14:38 schrieb L.P.H. van Belle via samba:> I didnt have problems also after the upgrades, with apparmor, because i have setup the correct thing for it. > But i think its really anoying its installed even after i removed it. > Its in my optionion just not needed, or, like Rowland and systemd.. ;-) > thats me with AppArmor.. I HATE it. ;-) and especially when its "sudden" installed.. > That should never happen in my option only with "dist-upgrade"and you can't disable that like SELinux one and for all with a kernel param: "selinux=0"?
On 12/05/2020 13:38, L.P.H. van Belle via samba wrote:> I didnt have problems also after the upgrades, with apparmor, because i have setup the correct thing for it. > But i think its really anoying its installed even after i removed it. > Its in my optionion just not needed, or, like Rowland and systemd.. ;-) > thats me with AppArmor.. I HATE it. ;-) and especially when its "sudden" installed.. > That should never happen in my option only with "dist-upgrade"It is not that I hate systemd, it is that I do not see the point in it as is. If it had been just a replacement for sysvinit, then that would probably have been okay, but like topsy, it has just grown and it seems to be very badly written at that. It has 1246 open bugs with 4910 closed bugs (and a lot of those are 'wont fix' even if they are valid bugs). Something similar about Apparmor, it is a good idea in theory, but if it isn't easy to configure, then people will not use it and I wouldn't blame them. Rowland