2010-05-03 12:49:35 |
Georges Martin |
bug |
|
|
added bug |
2010-05-03 16:34:47 |
Gerald Carter |
likewise-open (Ubuntu): assignee |
|
Gerald Carter (coffeedude.jerry) |
|
2010-10-20 16:43:43 |
Scott Salley |
branch linked |
|
lp:~ssalley/ubuntu/maverick/likewise-open/likewise-open.fix627272 |
|
2010-12-01 20:50:45 |
Launchpad Janitor |
branch linked |
|
lp:~ssalley/likewise-open/likewise-open.fix627272 |
|
2010-12-01 21:19:28 |
Launchpad Janitor |
branch linked |
|
lp:~ssalley/ubuntu/lucid/likewise-open/likewise-open.fix627272 |
|
2011-02-08 22:03:53 |
Etienne Goyer |
bug |
|
|
added subscriber Etienne Goyer |
2011-02-15 12:19:43 |
Eric Williams |
description |
Binary package hint: likewise-open
1/ lsb_release -rd:
Description: Ubuntu 10.04 LTS
Release: 10.04
2/ apt-cache policy likewise-open
likewise-open:
Installed: 5.4.0.42111-2ubuntu1
Candidate: 5.4.0.42111-2ubuntu1
Version table:
*** 5.4.0.42111-2ubuntu1 0
500 http://be.archive.ubuntu.com/ubuntu/ lucid/main Packages
100 /var/lib/dpkg/status
3/ After a do-release-upgrade from 9.10 server to 10.04, I expected my ActiveDirectory logins to still work as expected...
4/ ...unfortunately, the upgrade mangled some settings and the ActiveDirectory logins were not possible anymore
I found out that the "require-membership-of" setting of /etc/likewise-open5/lsassd.conf was not correctly transferred to the new "RequireMembershipOf" registry key.
More precisely, the setting:
require-membership-of = DOMAIN\group1,DOMAIN\group2
became:
"RequireMembershipOf" "DOMAINgroup1,DOMAINgroup2"
instead of:
"RequireMembershipOf" "DOMAIN\\group1" "DOMAIN\\group2"
Thus, the following procedure (partially) resolved the issue:
sudo lwregshell
cd HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory
set_value "RequireMembershipOf" "DOMAIN\\group1" "DOMAIN\\group2"
<ctrl-D>
sudo lw-refresh-configuration
(I say "partially" because now I'm forced to use keyboard-interactive authentication when connecting with PuTTY. But I suppose it's another bug I have to track... :-| ) |
Binary package hint: likewise-open
1/ lsb_release -rd:
Description: Ubuntu 10.04 LTS
Release: 10.04
2/ apt-cache policy likewise-open
likewise-open:
Installed: 5.4.0.42111-2ubuntu1
Candidate: 5.4.0.42111-2ubuntu1
Version table:
*** 5.4.0.42111-2ubuntu1 0
500 http://be.archive.ubuntu.com/ubuntu/ lucid/main Packages
100 /var/lib/dpkg/status
3/ After a do-release-upgrade from 9.10 server to 10.04, I expected my ActiveDirectory logins to still work as expected...
4/ ...unfortunately, the upgrade mangled some settings and the ActiveDirectory logins were not possible anymore
I found out that the "require-membership-of" setting of /etc/likewise-open5/lsassd.conf was not correctly transferred to the new "RequireMembershipOf" registry key.
More precisely, the setting:
require-membership-of = DOMAIN\group1,DOMAIN\group2
became:
"RequireMembershipOf" "DOMAINgroup1,DOMAINgroup2"
instead of:
"RequireMembershipOf" "DOMAIN\\group1" "DOMAIN\\group2"
Thus, the following procedure (partially) resolved the issue:
sudo lwregshell
cd HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory
set_value "RequireMembershipOf" "DOMAIN\\group1" "DOMAIN\\group2"
<ctrl-D>
sudo lw-refresh-configuration
(I say "partially" because now I'm forced to use keyboard-interactive authentication when connecting with PuTTY. But I suppose it's another bug I have to track... :-| )
IMPACT STATEMENT
================
Users cannot rely on lwregshell to correctly import values from the .reg files, leading to unpredictable and possibly undesirable results.
TEST CASE
=========
1. set RequireMembershipOf to desired groups in /etc/likewise-open/lsassd.reg
2. import into registry
3. inspect registry values
grep "Membership" /etc/likewise-open/lsassd.reg
"RequireMembershipOf"=sza:"EXAMPLE\\test^users"
# lwregshell import /etc/likewise-open/lsassd.reg
# lw-refresh-configuration
# lwregshell
#
"RequireMembershipOf" REG_MULTI_SZ[0] "EXAMPLEtest^users"
Note improper import of '\\' characters. |
|
2011-02-15 12:19:58 |
Eric Williams |
bug |
|
|
added subscriber Canonical PSE |
2011-02-15 12:20:28 |
Eric Williams |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2011-02-15 12:50:03 |
Jonathan Davies |
nominated for series |
|
Ubuntu Lucid |
|
2011-02-16 07:31:26 |
Martin Pitt |
bug task added |
|
likewise-open (Ubuntu Lucid) |
|
2011-03-03 20:44:27 |
Launchpad Janitor |
branch linked |
|
lp:~zulcss/ubuntu/lucid/likewise-open/likewise-open-sru |
|
2011-09-19 21:18:01 |
Ubuntu Foundations Team Bug Bot |
tags |
|
testcase |
|
2013-12-12 10:24:23 |
James Page |
likewise-open (Ubuntu): status |
New |
Triaged |
|
2013-12-12 10:24:26 |
James Page |
likewise-open (Ubuntu Lucid): status |
New |
Triaged |
|
2013-12-12 10:24:33 |
James Page |
likewise-open (Ubuntu Lucid): importance |
Undecided |
Medium |
|
2013-12-12 10:24:36 |
James Page |
likewise-open (Ubuntu): importance |
Undecided |
Medium |
|
2015-06-17 11:19:00 |
Rolf Leggewie |
likewise-open (Ubuntu Lucid): status |
Triaged |
Won't Fix |
|