Re: sssd on roaming workstation
> root@tjener:~# LC_ALL=C aptitude why winbind
> i cifs-utils Recommends winbind
> Among the Dependencies of winbind: libpam-winbind, libnss-winbind
Gah. Perhaps we should change cifs-utils in education-common from
recommends to suggests?
I added code in the test suite to detect winbind and libpam-winbind.
Neither should be enabled in our setup.
A quick workaround for roaming workstations is to add something like
--- share/debian-edu-config/tools/setup-roaming (revisjon 79839)
+++ share/debian-edu-config/tools/setup-roaming (arbeidskopi)
@@ -23,6 +23,10 @@
# Avoid duplicate pam setup, remove the non-caching kerberos version too
apt-get purge -y libpam-krb5
+# Avoid duplicate pam setup, remove the unwanted winbind setup too,
+# it is pulled in by cifs-tools via winbind.
+apt-get purge -y libpam-winbind winbind
# Avoid double caching, as sssd is already caching
apt-get purge -y nscd
But the real fix is to make sure winbind and lib(nss,pam)-winbind
isn't installed in any profile by default.