[Bug 1933098] Re: [SRU] krb5-config is not needed for Active Directory support

[Launchpad Bug Tracker]

This bug was fixed in the package ubiquity - 20.04.15.14

---------------
ubiquity (20.04.15.14) focal; urgency=medium

   [ Didier Roche ]
   [ Jean-Baptiste Lallement ]
   * krb5-config can be completely removed from the list of packages to keep or
     remove now that kerberos configuration is not needed anymore.

ubiquity (20.04.15.13) focal; urgency=medium

  [ Didier Roche ]
  [ Jean-Baptiste Lallement ]
  * connectity check: Make a distinction between local and global connection
    availability. For example, AD can be enabled with a working site
    connection but no internet, while package download requires a global
    connection. (LP: #1933095)
  * Configuring Kerberos is not required if DNS is configured properly on
    Windwos controller (LP: #1933098)

 -- Jean-Baptiste Lallement <jean-baptiste.lallement at ubuntu.com>  Wed,
23 Jun 2021 10:29:44 +0200

** Changed in: ubiquity (Ubuntu Focal)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ubiquity in Ubuntu.
https://bugs.launchpad.net/bugs/1933098

Title:
  [SRU] krb5-config is not needed for Active Directory support

Status in ubiquity package in Ubuntu:
  Fix Released
Status in ubiquity source package in Focal:
  Fix Released

Bug description:
  [Impact]

   * We realized that sssd can still download GPO for password security
  rules even without krb5-config set. Also, it doesn’t need it to
  generate krb5 tickets.

  [Test Plan]

   * Install the patch ubiquity version before starting it. Ensure that
  you have a sssd version with the GPO patch to check that GPO are
  downloaded

   * Proceed with the installation,enable Active Directory integration
  and reboot on the installed version.

   * After login in with a user registered on the Active Directory, you
  should have a /var/lib/sss/gpo_cache directory filed up with content.
  Also, /tmp should contain the krb5 user ticket.

  [Where problems could occur]

   * This code impacts the Active Directory only option by reverting an
  isolated commit in it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1933098/+subscriptions