[Samba] pam_winbind fails to authenticate domain users on my debian wheezy domain member servers

[Rowland Penny]

On 08/01/14 21:51, Peter Schaefer wrote:
> Am 1/8/2014 9:00 PM, Rowland Penny wrote:
>> I fail to see how you got sssd to install on wheezy, I installed the 
>> sernet packages, these removed the standard samba packages and then 
>> once the sernet packages were installed and I couldn't get winbind to 
>> work correctly I tried to install sssd. I found that sssd would not 
>> install because it depends on the samba packages that the sernet 
>> packages removed.
>
> Well, sssd does not depend on any samba-package directly (see below). 
> You might been hit by some indirect dependency that i don't have. I 
> used the MIT kerberos packages, maybe you used the "Heimdal" versions, 
> but i'm not sure if this would cause collisions.

I never said that 'you' couldn't install sssd, I said that I couldn't, 
the reason given being something to do with the packages that sernet 
removes, but as you said that could just be my problem.

>
> And i'm not installing the "Suggest"-packages.
>
> ~# dpkg -s sssd
>
> Package: sssd
> Status: install ok installed
> Priority: extra
> Section: utils
> Installed-Size: 7727
> Maintainer: Debian SSSD Team <pkg-sssd-devel at lists.alioth.debian.org>
> Architecture: amd64
> Version: 1.8.4-2
> Depends: libc-ares2 (>= 1.7.0), libc6 (>= 2.4), libcollection2, 
> libcomerr2 (>= 1.01), libdbus-1-3 (>= 1.1.1), libdhash1, 
> libini-config2, libipa-hbac0 (= 1.8.4-2), libk5crypto3 (>= 
> 1.6.dfsg.2), libkeyutils1, libkrb5-3 (>= 1.9+dfsg~beta1), 
> libldap-2.4-2 (>= 2.4.7), libldb1 (>= 0.9.21), libnl1 (>= 1.1), 
> libnspr4 (>= 2:4.9-2~) | libnspr4-0d (>= 1.8.0.10), libnss3 (>= 
> 2:3.13.4-2~) | libnss3-1d (>= 3.12.0~1.9b1), libpam0g (>= 0.99.7.1), 
> libpcre3 (>= 8.10), libpopt0 (>= 1.14), libtalloc2 (>= 
> 2.0.4~git20101213), libtdb1 (>= 1.2.7+git20101214), libtevent0 (>= 
> 0.9.9), libunistring0, python, python-sss
> Pre-Depends: multiarch-support
> Recommends: ldap-utils, bind9-host, libnss-sss, libpam-sss, 
> libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal, 
> libsasl2-modules-ldap
> Suggests: apparmor, sssd-tools
>

1.8.4.2 is an old release and a lot has been done to sssd since this 
version was released.

>> You can hold your breath if you like, sssd 1.11.3 is in Ubuntu 14.04 
>> beta (there is also an active ppa) and 14.04 has not yet been frozen.
>
> I'm not saying that it's not in Trusty. All i'm saying is (according 
> to the list at 
> http://packages.ubuntu.com/trusty/allpackages?format=txt.gz) it's in 
> "Universe" and the LTS 5-year-update-guarantee does not cover "Universe".
>

And as I said, there is a ppa for sssd, this is maintained by the sssd 
team themselves, so I do not see a problem there.

Rowland
> Regards,
>   Peter