Bug#1061130: sssd-common: not using alternatives for idmap-plugin

2025-07-01 Thread Daniel Dehennin
Hello.

I managed to get rid of the error messages with

update-alternatives \
--install \
/etc/cifs-utils/idmap-plugin \
idmap-plugin \
/usr/lib/x86_64-linux-gnu/cifs-utils/cifs_idmap_sss.so \
50 \
--slave \
/usr/share/man/man8/idmap-plugin.8.gz \
idmap-plugin.8.gz \
/usr/share/man/man8/idmap_sss.8.gz

Regards
-- 
Daniel Dehennin
Récupérer ma clef GPG: gpg --recv-keys 0xCC1E9E5B7A6FE2DF
Fingerprint: 3E69 014E 5C23 50E8 9ED6  2AAD CC1E 9E5B 7A6F E2DF


signature.asc
Description: PGP signature


Bug#1061130: sssd-common: not using alternatives for idmap-plugin

2024-01-18 Thread Vincent Danjean
Package: sssd-common
Version: 2.8.2-4
Severity: normal

  Hi,

  sssd-common provides /usr/lib/x86_64-linux-gnu/cifs-utils/cifs_idmap_sss.so
that needs to be manually symlinked from /etc/cifs-utils/idmap-plugin
if we want to use it.
  However, cifs-utils provides /usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
that it installs as /etc/cifs-utils/idmap-plugin with the
Debian alternative system:
# update-alternatives --list idmap-plugin
/usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
# update-alternatives --display idmap-plugin
idmap-plugin - auto mode
  link best version is /usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
  link currently points to /usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
  link idmap-plugin is /etc/cifs-utils/idmap-plugin
  slave idmap-plugin.8.gz is /usr/share/man/man8/idmap-plugin.8.gz
/usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so - priority 40
  slave idmap-plugin.8.gz: /usr/share/man/man8/idmapwb.8.gz


  As sssd-common does not use the alternative system,
each times cifs-utils is upgraded (security, ...),
the /etc/cifs-utils/idmap-plugin is recreated to
/usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so
(via /etc/alternatives/idmap-plugin).

  So sssd-common should also use the alternative system,
probably with a priority below 40 (so that cifs-utils
version would still be the defaut as currently),
but allowing an admin sys to permanently change this.

  Regards,
Vincent


-- System Information:
Debian Release: trixie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'oldstable-updates'), (500, 'oldstable-security'), (500, 'unstable'), (500, 
'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, armel

Kernel: Linux 6.6.9-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sssd-common depends on:
ii  adduser  3.137
ii  libc-ares2   1.25.0-1
ii  libc62.37-13
ii  libdbus-1-3  1.14.10-4
ii  libdhash10.6.2-2+b1
ii  libglib2.0-0 2.78.3-1
ii  libgssapi-krb5-2 1.20.1-5
ii  libini-config5   0.6.2-2+b1
ii  libkeyutils1 1.6.3-2+b2
ii  libkrb5-31.20.1-5
pn  libldap-2.4-2
ii  libldap-2.5-02.5.13+dfsg-5+b2
ii  libldb2  2:2.8.0+samba4.19.4+dfsg-2
ii  libnfsidmap1 [libnfsidmap2]  1:2.6.4-3
ii  libnl-3-200  3.7.0-0.2+b1
ii  libnl-route-3-2003.7.0-0.2+b1
pn  libnss-sss   
ii  libp11-kit0  0.25.3-4
pn  libpam-sss   
ii  libpam0g 1.5.2-9.1+b1
ii  libpcre2-8-0 10.42-4
ii  libpcre3 2:8.39-15
ii  libpopt0 1.19+dfsg-1
ii  libref-array10.6.2-2+b1
ii  libselinux1  3.5-1+b2
pn  libsemanage1 
ii  libsemanage2 3.5-1+b2
ii  libssl1.11.1.1w-0+deb11u1
ii  libssl3  3.1.4-2
pn  libsss-certmap0  
pn  libsss-idmap0
pn  libsss-nss-idmap0
ii  libsystemd0  255.2-4
ii  libtalloc2   2.4.1-2
ii  libtdb1  1.4.9-2
ii  libtevent0   0.15.0-1
pn  libunistring2
ii  libunistring51.1-2
ii  python3  3.11.6-1
pn  python3-sss  

Versions of packages sssd-common recommends:
ii  bind9-dnsutils  1:9.19.19-1
ii  bind9-host  1:9.19.19-1
pn  libnss-sss  
pn  libpam-sss  

Versions of packages sssd-common suggests:
ii  apparmor 3.0.12-1+b2
pn  libsss-sudo  
pn  sssd-tools