Re: sssd on roaming workstation

[Petter Reinholdtsen <pere@hungry.com>]

[Wolfgang Schweer]
> root@tjener:~# LC_ALL=C aptitude why winbind
> i   cifs-utils Recommends winbind
> 
> Among the Dependencies of winbind: libpam-winbind, libnss-winbind 

Gah.  Perhaps we should change cifs-utils in education-common from
recommends to suggests?

I added code in the test suite to detect winbind and libpam-winbind.
Neither should be enabled in our setup.

A quick workaround for roaming workstations is to add something like
this:

Index: share/debian-edu-config/tools/setup-roaming
===================================================================
--- share/debian-edu-config/tools/setup-roaming (revisjon 79839)
+++ share/debian-edu-config/tools/setup-roaming (arbeidskopi)
@@ -23,6 +23,10 @@
 # Avoid duplicate pam setup, remove the non-caching kerberos version too
 apt-get purge -y libpam-krb5
 
+# Avoid duplicate pam setup, remove the unwanted winbind setup too,
+# it is pulled in by cifs-tools via winbind.
+apt-get purge -y libpam-winbind winbind
+
 # Avoid double caching, as sssd is already caching
 apt-get purge -y nscd
 

But the real fix is to make sure winbind and lib(nss,pam)-winbind
isn't installed in any profile by default.

-- 
Happy hacking
Petter Reinholdtsen