Bug#927747: [Pkg-samba-maint] Bug#927747: bind9_dlz backend is entirely broken in Debian

2019-10-24 Thread Cameron Davidson
I would like to add my observations on this bug after upgrading from stretch to 10.1. The apparmor fixes seem OK so far. My samba system was originally created by moving a samba-3 system from CentOS 6 to Debian 9 and then using the samba tools to migrate to an ad-dc system. I mention this,

Bug#927747: [Pkg-samba-maint] Bug#927747: bind9_dlz backend is entirely broken in Debian

2019-05-08 Thread Steinar H. Gunderson
On Wed, May 08, 2019 at 10:02:46PM +0200, Mathieu Parent wrote: > Downgrading the severity as the AppArmor side is already fixed it seems in > sid. serious and grave are of equal severity; serious is for Policy violations (e.g. package doesn't install), grave is for functionality issues (e.g.

Bug#927747: [Pkg-samba-maint] Bug#927747: bind9_dlz backend is entirely broken in Debian

2019-05-08 Thread Mathieu Parent
severity 927747 serious thanks Le mar. 23 avr. 2019 à 23:12, Steinar H. Gunderson a écrit : > > On Tue, Apr 23, 2019 at 10:24:54PM +0200, Mathieu Parent wrote: > > There are several issues here. Trying a summary. > > 1. We need to patch bind9 apparmor profile (this is the cloned bug) > > Yes. >

Bug#927827: Bug#927747: [Pkg-samba-maint] Bug#927747: bind9_dlz backend is entirely broken in Debian

2019-04-24 Thread Bernhard Schmidt
Control: found -1 1:9.11.5.P4+dfsg-1 Control: tags -1 + pending On Tue, Apr 23, 2019 at 10:24:54PM +0200, Mathieu Parent wrote: > +/var/lib/samba/bind-dns/** rwk, > > But we may do better with something like this (to be tested and improved): > >/var/lib/samba/private/dns.keytab r, >

Bug#927747: [Pkg-samba-maint] Bug#927747: bind9_dlz backend is entirely broken in Debian

2019-04-24 Thread L . P . H . van Belle
Hai,   > > 3.Patching "named.conf" template to load the correct bind9 module (i.e 9.11) > I _think_ samba_dnsupgradedns writes a new config fragment. No you need adjustments in bind as shown below.   after the 4 points, im missing the following.   Addding point 5.   The end result should look

Bug#927747: [Pkg-samba-maint] Bug#927747: bind9_dlz backend is entirely broken in Debian

2019-04-23 Thread Steinar H. Gunderson
On Tue, Apr 23, 2019 at 10:24:54PM +0200, Mathieu Parent wrote: > There are several issues here. Trying a summary. > 1. We need to patch bind9 apparmor profile (this is the cloned bug) Yes. > 2. The /var/lib/samba/bind-dns directory is created on domain > provision. Nothing to do here? It's not

Bug#927747: [Pkg-samba-maint] Bug#927747: bind9_dlz backend is entirely broken in Debian

2019-04-23 Thread Mathieu Parent
clone 927747 -1 reassign -1 bind9 severity -1 serious retitle -1 bind9: Please add "/var/lib/samba/bind-dns/** rwk," to apparmor profile thanks Le lun. 22 avr. 2019 à 17:30, Steinar H. Gunderson a écrit : > > Package: samba > Version: 2:4.9.5+dfsg-3 > Severity: grave > > Hi, Hi, Thanks for