Leaving a domain breaks NetworkManager DHCP

[Thierry Carrez]

Binary package hint: likewise-open5

As reported in bug 352934:

After the uninstall, and reboot, when I login (with a local account) my network no longer works. I just see the animated connecting icon. This never stops and I never get an address. If I reconfigure to use a static address, then networking is OK. If I change back to DHCP (good for home and work), then no address again. Not good.

[Thierry Carrez (ttx)]

Leaving the domain fails to correctly restore various modified files, including /etc/apparmor.d/abstractions/nameservice.
It removes everything at the end of the original file:
  # likewise
  #include <abstractions/likewise>

  # mdnsd
  #include <abstractions/mdns>

  # kerberos
  #include <abstractions/kerberosclient>

  # TCP/UDP network access
  network inet stream,
  network inet6 stream,
  network inet dgram,
  network inet6 dgram,

This triggers various apparmor rules resulting in applicative breakage, of which DHCP failure in NetworkManager is probably just the visible tip of the iceberg.

Workaround is to run:
sudo cp /etc/apparmor.d/abstractions/nameservice.lwidentity.orig /etc/apparmor.d/abstractions/nameservice
Then reboot the machine

[Buddha (lord-buddha)]

After these issues with likewise-5, I tried likewise 4....

I get the same network issue when leaving a domain when using likewise-4. I did manage to get around it this time by restoring some of the files under /etc which had not been restored upon domain leave. One of which was the file in previous post. Also not restored (I think) was my hosts file.

I will try again on likewise 5 again as per your instructions on Sunday. Will also check leaving the domain (with reboot just in case) to check networking and that all .orig files are correctly restored.

[Buddha (lord-buddha)]

Files not restored on leaving domain

/etc/hosts
/etc/nsswitch.conf
/etc/apparmor.d/abstractions/nameservice
And /etc/ssh/ssh_config or was it /etc/ssh/sshd_config

[Launchpad Janitor (janitor)]

This bug was fixed in the package likewise-open5 - 5.0.3991.1-0ubuntu2

---------------
likewise-open5 (5.0.3991.1-0ubuntu2) jaunty; urgency=low

  * debian/patches/ask-for-reboot.diff: Ask for a reboot after domain join
    since it is necessary before domain graphical logins (LP: #352934)
  * Removed debian/patches/graceful_dbus_restart.diff since it is not
    sufficient and we now ask for a reboot
  * debian/patches/abstractions-cleanup.diff: Use a more precise mark to
    delimitate likewise mods, to avoid destructive cleanup of the appamor.d
    abstractions/nameservice file (LP: #354498)
  * debian/likewise-open5-lsass.prerm: Fix typo preventing pam-auth-update
    profile from being unregistered (LP: #354568)
  * debian/likewise-open5.NEWS: Added note about upgrading/replacing an
    existing likewise-open (4.1) install (LP: #347250)

 -- Thierry Carrez <email address hidden> Mon, 06 Apr 2009 13:51:17 +0200

[Thierry Carrez (ttx)]

Proposed debdiff for likewise-open

likewise-open (4.1.2982-0ubuntu2) jaunty; urgency=low

  * debian/patches/ask-for-reboot.diff: Ask for a reboot after domain join
    since it is necessary before domain graphical logins (LP: #352934)
  * Removed debian/patches/graceful_dbus_restart.diff since it is not
    sufficient and we now ask for a reboot
  * debian/patches/abstractions-cleanup.diff: Use more precision when removing
    likewise mods from appamor.d/abstractions/nameservice file, to avoid
    very destructive cleanup (LP: #354498)
  * Added debian/patches/autoconf-ftbfs-fix.diff to fix FTBFS

[Launchpad Janitor (janitor)]

This bug was fixed in the package likewise-open - 4.1.2982-0ubuntu2

---------------
likewise-open (4.1.2982-0ubuntu2) jaunty; urgency=low

  * debian/patches/ask-for-reboot.diff: Ask for a reboot after domain join
    since it is necessary before domain graphical logins (LP: #352934)
  * Removed debian/patches/graceful_dbus_restart.diff since it is not
    sufficient and we now ask for a reboot
  * debian/patches/abstractions-cleanup.diff: Use more precision when removing
    likewise mods from appamor.d/abstractions/nameservice file, to avoid
    very destructive cleanup (LP: #354498)
  * Added debian/patches/autoconf-ftbfs-fix.diff to fix FTBFS

 -- Thierry Carrez <email address hidden> Wed, 08 Apr 2009 17:32:39 +0200