Trying to build statically linked nss-winbind & pam-winbind
Stefan Metzmacher
metze at samba.org
Tue Oct 11 13:16:58 UTC 2016
Am 11.10.2016 um 15:04 schrieb Louis Bouchard:
> Hello,
>
> Le 11/10/2016 14:04, L.P.H. van Belle a écrit :
>> Hai,
>>
>>
>>
>> Saw you message on samba-technical.
>>
>> Have you tried to change you nsswitch.conf to this setup.
>>
>>
>> winbind [success=return notfound=continue unavail=continue tryagain=continue] compat
>>
>> which seems more logical to me.
>>
>>
>>
>>
>>
>
> Thank you for the suggestion, but it will still leads to failure to upgrade. The
> winbind statement still being the first, it will trigger SEGV since it will
> still try to dlopen() to an inexistant library.
>
> The problem is fairly trivial to test :
> 1) Start an ubuntu Trusty container
> 2) Disable the trusty-updates and trusty-security archives in /etc/apt/sources.list
> 3) sudo apt-get update
> 4) sudo apt-get install samba winbind libnss-winbind libpam-winbind
> 5) Set /etc/nsswitch.conf to : passwd: winbind compat
> 6) Enable trusty-updates & trusty-security in /etc/apt/sources.list
> 7) sudo apt-get install samba winbind libnss-winbind libpam-winbind
>
> While installing, you will see things similar to this :
>
>> Unpacking libnss-winbind:amd64 (2:4.3.11+dfsg-0ubuntu0.14.04.1) over (2:4.1.6+dfsg-1ubuntu2) ...
>> dpkg-deb: error: subprocess tar was killed by signal (Segmentation fault), core dumped
>> dpkg: error processing archive /var/cache/apt/archives/libpam-winbind_2%3a4.3.11+dfsg-0ubuntu0.14.04.1_amd64.deb (-
>> -unpack):
>> subprocess dpkg-deb --control returned error exit status 2
>> dpkg-deb: error: subprocess tar was killed by signal (Segmentation fault), core dumped
>
> Inverting the winbind & compat statements and running "sudo apt-get -f install"
> will fix the situation.
>
> I agree that this is not a samba issue, but a possible solution is to have those
> libraries statically linked so they don't need to dlopen().
For the above and other reasons we let sernet-samba-libs provide
libpam-winbind and libnss-winbind instad of having them as extra packages.
I'd propose to do the same for samba-libs native packages, the packages
itself could also be provided as empty glue packages depending on
samba-libs.
metze
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20161011/29a6fb7b/signature.sig>
More information about the samba-technical
mailing list