[Bug 1604630] [NEW] 16.04 SAMBA missing winbind packages during install

[Markus Lankeit]

Public bug reported:

When installing 16.04 server, checking "samba file server" during
install the following packages are not installed by default:

libnss-winbind
libpam-winbind

The effect is that while samba can join AD domains just fine, it cannot
enumerate domain users, i.e. "sudo getent passwd" will show only local
accounts, not domain accounts; also, an attempt to access a samba share
will result in "access denied".  Specifically, the applicable log in
/var/log/samba will have the lines:

Kerberos ticket principal name is [<user>@<domain>]
[2016/07/12 10:46:23.474798,  3] ../source3/auth/user_krb5.c:164(get_user_from_kerberos_info)
  Username <domain>\<user> is invalid on this system

Once the missing packages are installed and services are restarted
(nmbd, smbd, winbind), the problem is resolved.  Installing these
packages creates /lib/x86_64-linux-gnu/libnss_winbind.so.2, which is
needed for winbind to enumerate the domain users/groups for credentials.

In the distribution, checking "samba file server" should install the
above listed packages or at least the release notes should specify that
if this option is selected and one wishes to join an AD domain, then
installing these packages is necessary.

Thx.

-ml

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: samba 2:4.3.9+dfsg-0ubuntu0.16.04.2
ProcVersionSignature: Ubuntu 4.4.0-28.47-generic 4.4.13
Uname: Linux 4.4.0-28-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
BothFailedConnect: Yes
CurrentDesktop: LXDE
Date: Tue Jul 19 17:35:16 2016
NmbdLog:
 
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SambaServerRegression: No
SmbConfIncluded: Yes
SmbLog:
 
SourcePackage: samba
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug xenial

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1604630

Title:
  16.04 SAMBA missing winbind packages during install

Status in samba package in Ubuntu:
  New

Bug description:
  When installing 16.04 server, checking "samba file server" during
  install the following packages are not installed by default:

  libnss-winbind
  libpam-winbind

  The effect is that while samba can join AD domains just fine, it
  cannot enumerate domain users, i.e. "sudo getent passwd" will show
  only local accounts, not domain accounts; also, an attempt to access a
  samba share will result in "access denied".  Specifically, the
  applicable log in /var/log/samba will have the lines:

  Kerberos ticket principal name is [<user>@<domain>]
  [2016/07/12 10:46:23.474798,  3] ../source3/auth/user_krb5.c:164(get_user_from_kerberos_info)
    Username <domain>\<user> is invalid on this system

  Once the missing packages are installed and services are restarted
  (nmbd, smbd, winbind), the problem is resolved.  Installing these
  packages creates /lib/x86_64-linux-gnu/libnss_winbind.so.2, which is
  needed for winbind to enumerate the domain users/groups for
  credentials.

  In the distribution, checking "samba file server" should install the
  above listed packages or at least the release notes should specify
  that if this option is selected and one wishes to join an AD domain,
  then installing these packages is necessary.

  Thx.

  -ml

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: samba 2:4.3.9+dfsg-0ubuntu0.16.04.2
  ProcVersionSignature: Ubuntu 4.4.0-28.47-generic 4.4.13
  Uname: Linux 4.4.0-28-generic x86_64
  ApportVersion: 2.20.1-0ubuntu2.1
  Architecture: amd64
  BothFailedConnect: Yes
  CurrentDesktop: LXDE
  Date: Tue Jul 19 17:35:16 2016
  NmbdLog:
   
  ProcEnviron:
   TERM=xterm
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SambaServerRegression: No
  SmbConfIncluded: Yes
  SmbLog:
   
  SourcePackage: samba
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1604630/+subscriptions