According to document: https://wiki.debian.org/MaintainerScripts
I added constrains on letting upgrade to happen for: libnss-winbind libpam-winbind libwbclient0 samba-dsdb-modules samba-libs samba winbind When winbind is enabled in either /etc/nsswitch.conf or in /etc/pam.d/* files. So, whenever trying to upgrade samba you will get something like: ---- Do you want to continue? [Y/n] y (Reading database ... 115473 files and directories currently installed.) Preparing to unpack .../libnss-winbind_2%3a4.3.9+dfsg-0ubuntu0.14.04.2~lp1584485~4_amd64.deb ... Warning: You have winbind configured in either NSS (/etc/nsswitch.conf) or in PAM (/etc/pam.d/*). Before proceeding with the installation, or upgrade, make sure to disable winbind! dpkg: error processing archive /var/cache/apt/archives/libnss-winbind_2%3a4.3.9+dfsg-0ubuntu0.14.04.2~lp1584485~4_amd64.deb (--unpack): subprocess new pre-installation script returned error exit status 1 dpkg: error while cleaning up: subprocess new post-removal script returned error exit status 1 ---- That will save you from crashing your system because of NSS being broken. Attaching debdiffs... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1584485 Title: Upgrading samba to latest security fixes together with winbind in nsswitch.conf can harm entire OS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1584485/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs