[Bug 1781991] Re: libsss-sudo.postinst clobbers local change to /etc/nsswitch.conf

[Andreas Hasenack]

Xenial verification

First, reproducing the bug with the current package:
ubuntu at xenial-berification-sssd-sudo:~$ apt-cache policy libsss-sudo
libsss-sudo:
  Installed: (none)
  Candidate: 1.13.4-1ubuntu1.14
  Version table:
     1.13.4-1ubuntu1.14 500
        500 http://br.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages

ubuntu at xenial-berification-sssd-sudo:~$ sudo apt install libsss-sudo
...
ubuntu at xenial-berification-sssd-sudo:~$ grep ^sudoers /etc/nsswitch.conf
sudoers:        files sss

Removing sss:
ubuntu at xenial-berification-sssd-sudo:~$ sudo vi /etc/nsswitch.conf 
ubuntu at xenial-berification-sssd-sudo:~$ grep ^sudoers /etc/nsswitch.conf
sudoers:        files

Reinstall puts it back:
ubuntu at xenial-berification-sssd-sudo:~$ sudo apt install --reinstall libsss-sudo
...
ubuntu at xenial-berification-sssd-sudo:~$ grep ^sudoers /etc/nsswitch.conf
sudoers:        files sss

Now enabling proposed:
ubuntu at xenial-berification-sssd-sudo:~$ apt-cache policy libsss-sudo
libsss-sudo:
  Installed: 1.13.4-1ubuntu1.14
  Candidate: 1.13.4-1ubuntu1.15
  Version table:
     1.13.4-1ubuntu1.15 500
        500 http://br.archive.ubuntu.com/ubuntu xenial-proposed/main amd64 Packages
 *** 1.13.4-1ubuntu1.14 500
        500 http://br.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages

Removing sss again from nsswitch.conf:
ubuntu at xenial-berification-sssd-sudo:~$ sudo vi /etc/nsswitch.conf 
ubuntu at xenial-berification-sssd-sudo:~$ grep ^sudoers /etc/nsswitch.conf
sudoers:        files

Doing the upgrade this time doesn't add sss back:
ubuntu at xenial-berification-sssd-sudo:~$ sudo apt install libsss-sudo
Reading package lists... Done
...
ubuntu at xenial-berification-sssd-sudo:~$ grep ^sudoers /etc/nsswitch.conf
sudoers:        files

And I have the new package installed now:
ubuntu at xenial-berification-sssd-sudo:~$ apt-cache policy libsss-sudo
libsss-sudo:
  Installed: 1.13.4-1ubuntu1.15
  Candidate: 1.13.4-1ubuntu1.15
  Version table:
 *** 1.13.4-1ubuntu1.15 500
        500 http://br.archive.ubuntu.com/ubuntu xenial-proposed/main amd64 Packages


A fresh install, though, adds sss back, as expected:
ubuntu at xenial-berification-sssd-sudo:~$ sudo apt purge libsss-sudo
Reading package lists... Done
Building dependency tree       
...
ubuntu at xenial-berification-sssd-sudo:~$ grep ^sudoers /etc/nsswitch.conf
ubuntu at xenial-berification-sssd-sudo:~$ 
ubuntu at xenial-berification-sssd-sudo:~$ sudo apt install libsss-sudo 
Reading package lists... Done
...
ubuntu at xenial-berification-sssd-sudo:~$ grep ^sudoers /etc/nsswitch.conf
sudoers:        files sss


Xenial verification succeeded.

** Tags removed: verification-needed-xenial
** Tags added: verification-done-xenial

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to sssd in Ubuntu.
https://bugs.launchpad.net/bugs/1781991

Title:
  libsss-sudo.postinst clobbers local change to /etc/nsswitch.conf

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1781991/+subscriptions