[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: sssd on roaming workstation

[Wolfgang Schweer]
> root@tjener:~# LC_ALL=C aptitude why winbind
> i   cifs-utils Recommends winbind
> Among the Dependencies of winbind: libpam-winbind, libnss-winbind 

Gah.  Perhaps we should change cifs-utils in education-common from
recommends to suggests?

I added code in the test suite to detect winbind and libpam-winbind.
Neither should be enabled in our setup.

A quick workaround for roaming workstations is to add something like

Index: share/debian-edu-config/tools/setup-roaming
--- share/debian-edu-config/tools/setup-roaming (revisjon 79839)
+++ share/debian-edu-config/tools/setup-roaming (arbeidskopi)
@@ -23,6 +23,10 @@
 # Avoid duplicate pam setup, remove the non-caching kerberos version too
 apt-get purge -y libpam-krb5
+# Avoid duplicate pam setup, remove the unwanted winbind setup too,
+# it is pulled in by cifs-tools via winbind.
+apt-get purge -y libpam-winbind winbind
 # Avoid double caching, as sssd is already caching
 apt-get purge -y nscd

But the real fix is to make sure winbind and lib(nss,pam)-winbind
isn't installed in any profile by default.

Happy hacking
Petter Reinholdtsen

Reply to: