Please raise Suggests for lib{pam,nss}-winbind to Recommends in trusty

[Geoffrey Thomas]

Test Case
---------
In a precise system install samba and libpam-winbind
Upgrade to trusty
Observe that libnss-winbind is not installed

With the version of the package from -proposed, after the upgrade libnss-winbind will be install on the system.

-----------------------------------------------------------------------------

The Debian packaging of Samba demoted the Recommends relationships to libpam-winbind and libnss-winbind to Suggests after one Debian release:

samba (2:3.6.15-1) unstable; urgency=high

  * Team upload.
  * New upstream bugfix release. Closes: #707042
  * Update VCS URL's for new git repo.
  * The recommends for the separate libnss-winbind and libpam-winbind
    packages needed for the upgrade of winbind from squeeze to wheezy are no
    longer needed. Lowering them to suggests.
    Closes: #706434, #674853

 -- Ivo De Decker <email address hidden> Thu, 09 May 2013 11:55:03 +0200

Unfortunately this isn't enough for the Ubuntu LTS cycle. libpam-winbind was a separate package in Precise, but libnss-winbind wasn't, and the release-upgrader therefore doesn't know to install it. Can those relationships be restored to Recommends in trusty-updates? (This delta doesn't need to be kept past Trusty.)

We upgraded a server from Precise to Trusty this weekend and it was really confusing to track down why nobody could log in any more. I know it's been a while since the Trusty release, but given that Precise is around for two more years, I strongly suspect we're not the last people to upgrade a winbind-using Precise machine, and configuring samba correctly is confusing enough as it is. :)

[James Page (james-page)]

Confirmed; the timings of the releases make sense that this is a problem for precise->trusty upgraders.

[Brian Murray (brian-murray)]

I've uploaded this to the Trusty -proposed queue for review by the SRU team.

[Brian Murray (brian-murray)]

Could you add a test to the bug report to aid in SRU verification? Thanks!

[Steve Langasek (vorlon)]

Hello Geoffrey, or anyone else affected,

Accepted samba into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/samba/2:4.1.6+dfsg-1ubuntu2.14.04.5 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Brian Murray (brian-murray)]

Here's a portion of the output of an upgrade from Precise to Trusty where libnss-winbind wasn't installed.

Setting up samba (2:4.1.6+dfsg-1ubuntu2.14.04.4) ...
Installing new version of config file /etc/logrotate.d/samba ...
update-alternatives: warning: alternative /usr/bin/smbstatus.samba3 (part of link group smbstatus) doesn't exist; removing from list of alternatives
update-alternatives: warning: /etc/alternatives/smbstatus is dangling; it will be updated with best choice
invoke-rc.d: policy-rc.d denied execution of start.
initctl: Unknown job: smbd
invoke-rc.d: policy-rc.d denied execution of start.
initctl: Unknown job: nmbd
invoke-rc.d: policy-rc.d denied execution of start.
initctl: Unknown job: samba-ad-dc
Removing obsolete conffile /etc/network/if-up.d/samba ...
Setting up winbind (2:4.1.6+dfsg-1ubuntu2.14.04.4) ...
Installing new version of config file /etc/init.d/winbind ...
invoke-rc.d: policy-rc.d denied execution of start.
initctl: Unknown job: winbind
Setting up libpam-winbind:amd64 (2:4.1.6+dfsg-1ubuntu2.14.04.4) ...
Setting up libstdc++6-4.6-dev (4.6.4-6ubuntu2) ...
Setting up perl (5.18.2-2ubuntu1) ...
Setting up libalgorithm-diff-perl (1.19.02-3) ...
Setting up libalgorithm-diff-xs-perl (0.04-2build4) ...
Setting up libarchive-extract-perl (0.70-1) ...
Setting up liblog-message-simple-perl (0.10-1) ...
Setting up libmodule-pluggable-perl (5.1-1) ...
Setting up libpod-latex-perl (0.61-1) ...
Setting up libterm-ui-perl (0.42-1) ...
Setting up libtext-soundex-perl (3.4-1build1) ...
Setting up libtimedate-perl (2.3000-1) ...
Setting up libdpkg-perl (1.17.5ubuntu5.3) ...
Setting up dpkg-dev (1.17.5ubuntu5.3) ...
Setting up build-essential (11.6ubuntu6) ...
Setting up libfile-fcntllock-perl (0.14-2build1) ...
Processing triggers for libc-bin (2.19-0ubuntu6.5) ...
(precise-amd64)root@impulse:/home/bdmurray# ap-tcache policy libnss-winbind
-bash: ap-tcache: command not found
(precise-amd64)root@impulse:/home/bdmurray# apt-cache policy libnss-winbind
libnss-winbind:
  Installed: (none)
  Candidate: 2:4.1.6+dfsg-1ubuntu2.14.04.4
  Version table:
     2:4.1.6+dfsg-1ubuntu2.14.04.4 0
        500 http://192.168.10.7/ubuntu/ trusty-updates/universe amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ trusty-security/universe amd64 Packages
     2:4.1.6+dfsg-1ubuntu2 0
        500 http://192.168.10.7/ubuntu/ trusty/universe amd64 Packages

[Dave Chiluk (chiluk)]

I just went through the exercise of attempting to validate this issue.

from an ubuntu-cloud-image, I enabled proposed. I installed samba and libpam-winbind. Then ran do-release-upgrade.

Unfortunately even though samba 2:4.1.6+dfsg-1ubuntu2.14.04.5 was installed on the other side of the upgrade, libnss-winbind was still not installed.

@bdmurray if you think I did my test correctly please feel free to reject the verification. You might have to go back to the drawing board.

[Brian Murray (brian-murray)]

Here's a portion of the calculated upgrade from precise to trusty with -proposed enabled.

Ign http://192.168.10.7 trusty/main Translation-en
Ign http://192.168.10.7 trusty/multiverse Translation-en
Ign http://192.168.10.7 trusty/restricted Translation-en
Ign http://192.168.10.7 trusty/universe Translation-en
Fetched 26.2 MB in 3s (7102 kB/s)
Reading package lists... Done
(precise-amd64)root@impulse:/tmp/bug-839378# apt-get dist-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
  attr cpp-4.8 g++-4.8 gcc-4.8 gcc-4.8-base gcc-4.9-base iproute2 isc-dhcp-client isc-dhcp-common kmod libaio1 libapt-inst1.5
  libarchive-extract-perl libasan0 libatm1 libatomic1 libaudit-common libaudit1 libbsd0 libcgmanager0 libcloog-isl4 libdb5.3 libdebconfclient0
  libfakeroot libfile-fcntllock-perl libgcc-4.8-dev libhdb9-heimdal libisl10 libitm1 libjson-c2 libjson0 libkdc2-heimdal libkmod2 libldb1
  liblog-message-simple-perl libmodule-pluggable-perl libmpc3 libnss-winbind libntdb1 libpod-latex-perl libprocps3 libpython-stdlib
  libpython2.7-minimal libpython2.7-stdlib libsasl2-modules-db libsemanage-common libsemanage1 libsepol1 libstdc++-4.8-dev libtasn1-6
  libterm-ui-perl libtevent0 libtext-soundex-perl libtsan0 libudev1 libustr-1.0-1 libxtables10 python python-crypto python-dnspython python-ldb
  python-ntdb python-samba python-talloc python-tdb samba-dsdb-modules samba-libs samba-vfs-modules
The following packages will be upgraded:
  adduser advancecomp apt apt-utils base-files base-passwd bash binutils bsdutils build-essential busybox-initramfs bzip2 coreutils cpio cpp
  cpp-4.6 cron dash debconf debianutils diffutils dpkg dpkg-dev e2fslibs e2fsprogs fakeroot findutils g++ g++-4.6 gcc gcc-4.6 gcc-4.6-base gnupg
  gpgv grep gzip hostname ifupdown initramfs-tools initramfs-tools-bin initscripts insserv iproute klibc-utils krb5-locales libacl1
  libalgorithm-diff-perl libalgorithm-diff-xs-perl libapt-pkg4.12 libasn1-8-heimdal libattr1 libavahi-client3 libavahi-common-data
  libavahi-common3 libblkid1 libbz2-1.0 libc-bin libc-dev-bin libc6 libc6-dev libcap2 libclass-isa-perl libcomerr2 libcups2 libdb5.1 libdbus-1-3
  libdpkg-perl libdrm-intel1 libdrm-radeon1 libdrm2 libelf1 libexpat1 libffi6 libgcc1 libgcrypt11 libgdbm3 libglib2.0-0 libgmp10 libgnutls26
  libgomp1 libgpg-error0 libgpm2 libgssapi-krb5-2 libgssapi3-heimdal libhcrypto4-heimdal libheimbase1-heimdal libheimntlm0-heimdal
  libhx509-5-heimdal libk5crypto3 libkeyutils1 libklibc libkrb5-26-heimdal libkrb5-3 libkrb5support0 libldap-2.4-2 liblockfile-bin liblockfile1
  liblzma5 libmount1 libmpfr4 libncurses5 libncursesw5 libnih-dbus1 libnih1 libp11-kit0 libpam-modules libpam-modules-bin libpam-runtime
  libpam-winbind libpam0g libpciaccess0 libpcre3 libplymouth2 libpng12-0 libpopt0 libpython2.7 libquadmath0 libreadline6 libroken18-heimdal
  libsasl2-2 libsasl2-modules libselinux1 libslang2 libsqlite3-0 libss2 libssl1.0.0 libstdc++6 libstdc++6-4.6-dev libtalloc2 libtdb1
  libtimedate-perl libtinfo5 libusb-0.1-4 libuuid1 libwbclient0 libwind0-heimdal linux-libc-de...

[Dave Chiluk (chiluk)]

I did the test one more time, and it worked. I'm not sure what I did wrong the first time. Anyhow, consider this verified.

[Dave Chiluk (chiluk)]

Here's the relavant part of /var/log/dist-upgrade/apt.log

 MarkInstall libpam-winbind [ amd64 ] < 2:3.6.3-2ubuntu2.11 -> 2:4.1.6+dfsg-1ubuntu2.14.04.5 > ( universe/net ) FU=0
  Installing samba-libs as Depends of libpam-winbind
    MarkInstall samba-libs [ amd64 ] < none -> 2:4.1.6+dfsg-1ubuntu2.14.04.5 > ( libs ) FU=0
    Installing libldb1 as Depends of samba-libs
      MarkInstall libldb1 [ amd64 ] < none -> 1:1.1.16-1 > ( libs ) FU=0
      Installing libtevent0 as Depends of libldb1
        MarkInstall libtevent0 [ amd64 ] < none -> 0.9.19-1 > ( libs ) FU=0
    Installing libntdb1 as Depends of samba-libs
      MarkInstall libntdb1 [ amd64 ] < none -> 1.0-2ubuntu1 > ( libs ) FU=0
    Installing python-talloc as Depends of samba-libs
      MarkInstall python-talloc [ amd64 ] < none -> 2.1.0-1 > ( python ) FU=0
  new important dependency: libnss-winbind:amd64
  Installing libnss-winbind as Recommends of libpam-winbind
    MarkInstall libnss-winbind [ amd64 ] < none -> 2:4.1.6+dfsg-1ubuntu2.14.04.5 > ( universe/net ) FU=0

[Launchpad Janitor (janitor)]

This bug was fixed in the package samba - 2:4.1.6+dfsg-1ubuntu2.14.04.5

---------------
samba (2:4.1.6+dfsg-1ubuntu2.14.04.5) trusty; urgency=medium

  * Restore recommends for the separate libnss-winbind and libpam-winbind
    packages needed for upgrades of winbind from Precise to Trusty.
    (LP: #1412909)
 -- Brian Murray <email address hidden> Wed, 28 Jan 2015 15:24:47 -0800

[Adam Conrad (adconrad)]

The verification of the Stable Release Update for samba has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Arno Versfeld (arno-versfeld)]

I've been trying to install samba and I get the following in my terminal:

root@arno-home:/usr/share/samba# apt-get install samba
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
  bind9 bind9utils ldb-tools ntp smbldap-tools winbind
The following NEW packages will be installed:
  samba
0 upgraded, 1 newly installed, 0 to remove and 13 not upgraded.
Need to get 0 B/837 kB of archives.
After this operation, 11.4 MB of additional disk space will be used.
Selecting previously unselected package samba.
(Reading database ... 456184 files and directories currently installed.)
Preparing to unpack .../samba_2%3a4.1.6+dfsg-1ubuntu2.14.04.7_amd64.deb ...
Unpacking samba (2:4.1.6+dfsg-1ubuntu2.14.04.7) ...
Processing triggers for man-db (2.6.7.1-1ubuntu1) ...
Processing triggers for ufw (0.34~rc-0ubuntu2) ...
Processing triggers for ureadahead (0.100.0-16) ...
Setting up samba (2:4.1.6+dfsg-1ubuntu2.14.04.7) ...
initctl: Unknown job: smbd
initctl: Unknown job: nmbd
initctl: Unknown job: samba-ad-dc
Processing triggers for libc-bin (2.19-0ubuntu6.6) ...
root@arno-home:/usr/share/samba#
Under /usr/share/samba there is only a setup folder created which has the following in it:

root@arno-home:/usr/share/samba/setup# ls -la
total 440
drwxr-xr-x 4 root root 4096 Apr 28 21:56 .
drwxr-xr-x 3 root root 4096 Apr 28 21:56 ..
drwxr-xr-x 2 root root 4096 Apr 28 21:56 ad-schema
-rw-r--r-- 1 root root 122 Jun 13 2013 aggregate_schema.ldif
-rw-r--r-- 1 root root 292 Jun 13 2013 cn=replicator.ldif
-rw-r--r-- 1 root root 295 Jun 13 2013 cn=samba-admin.ldif
-rw-r--r-- 1 root root 290 Jun 13 2013 cn=samba.ldif
-rw-r--r-- 1 root root 423 Jun 13 2013 DB_CONFIG
drwxr-xr-x 2 root root 4096 Apr 28 21:56 display-specifiers
-rw-r--r-- 1 root root 2270 Jun 13 2013 dns_update_list
-rw-r--r-- 1 root root 491 Jun 13 2013 fedorads-dna.ldif
-rw-r--r-- 1 root root 170 Jun 13 2013 fedorads-index.ldif
-rw-r--r-- 1 root root 1206 Jun 13 2013 fedorads.inf
-rw-r--r-- 1 root root 1004 Jun 13 2013 fedora-ds-init.ldif
-rw-r--r-- 1 root root 251 Jun 13 2013 fedorads-linked-attributes.ldif
-rw-r--r-- 1 root root 69 Jun 13 2013 fedorads-pam.ldif
-rw-r--r-- 1 root root 1095 Jun 13 2013 fedorads-partitions.ldif
-rw-r--r-- 1 root root 167 Jun 13 2013 fedorads-refint-add.ldif
-rw-r--r-- 1 root root 452 Jun 13 2013 fedorads-refint-delete.ldif
-rw-r--r-- 1 root root 386 Jun 13 2013 fedorads-samba.ldif
-rw-r--r-- 1 root root 593 Jun 13 2013 fedorads-sasl.ldif
-rw-r--r-- 1 root root 121 Jun 13 2013 idmap_init.ldif
-rw-r--r-- 1 root root 89 Jun 13 2013 krb5.conf
-rw-r--r-- 1 root root 220 Jun 13 2013 memberof.conf
-rw-r--r-- 1 root root 37 Jun 13 2013 mmr_serverids.conf
-rw-r--r-- 1 root root 246 Jun 13 2013 mmr_syncrepl.conf
-rw-r--r-- 1 root root 50 Jun 13 2013 modules.conf
-rw-r--r-- 1 root root 1156 Jun 13 2013 named.conf
-rw-r--r-- 1 root root 519 Jun 13 2013 named.conf.dlz
-rw-r--r-- 1 root root 100 Jun 13 2013 named.conf.update
-rw-r--r-- 1 root root 2152 Jun 13 2013 named.txt
-rw-r--r-- 1 root root 33 Jun 13 2013 olc_mmr.conf
-rw-r--r-- 1 root r...