PS: Also have tested new package and winbind now does work by itself for getgroups(3) and initgroups(3), ie kerberos logins over ssh work again!
On Mon, 13 Jun 2022 at 21:12, Matt Grant <m...@mattgrant.net.nz> wrote: > Hi Michael! > > For the libraries to move from the samba package, just used the following > command on each rpcd binary in /usr/libexec/samba: > > dpkg -S `ldd rpcd_epmapper | grep samba | cut -f 1 -d ' '` > > You could put the contents of this new package ( ie > debian/samba-libexec-dcerpc.install) into the samba-libs package, or > samba-common-bin... Samba-libs was my first thought if not creating a new > package. > > Adding the new samba-libexec-dcerpc package to the archive in my > experience is not much of a problem actually. When I have had to create a > fresh package as part of an already in archive source (no licensing > evaluation needed), the FTP Master team only took a few days to add the new > package. You can email ftpmas...@debian.org ahead of the upload to check > how long it will take them to get on to it, or you can put it through > experimental? Sid is 'unstable' for a reason. > > Here is a good reason for the new package: samba-dcerpcd and rpcd_* are > needed for support binaries for in-kernel ksmbd, though what that will need > exactly will require more fleshing out no doubt. The new package is a > start. Check the samba-dcerpcd man page, it helped me work out what to put > in the new package, as samba-dcerpcd can call any of the > /usr/libexec/samba/rpcd_* binaries > > Hope that all helps. > > Matt Grant > Debian Developer > > > > Best Regards, > > Matt Grant > Debian Developer > > > On Mon, 13 Jun 2022 at 20:18, Michael Tokarev <m...@tls.msk.ru> wrote: > >> 13.06.2022 10:46, Matt Grant wrote: >> > Hi! >> > >> > Please find attached the patch I made to fix this issue. >> > >> > It moves the DCE RPC binaries in /usr/libexec/samba into their own >> package along with required libs from the samba package creating the >> > samba-libexec-dcerpc package, and makes samba and winbind depend on it, >> thus solving all the issues. >> >> Matt, how did you find out the 2 libs -- libRPC-SERVER-LOOP-samba4.so.0 & >> libREG-FULL-samba4.so.0 - which can be moved to the new package too, out >> of many other libraries in there? >> >> Thanks! >> >> /mjt >> >