I would like to add my observations on this bug after upgrading from
stretch to 10.1.
The apparmor fixes seem OK so far.
My samba system was originally created by moving a samba-3 system from
CentOS 6 to Debian 9 and then using the samba tools to migrate to an
ad-dc system. I mention this,
On Wed, May 08, 2019 at 10:02:46PM +0200, Mathieu Parent wrote:
> Downgrading the severity as the AppArmor side is already fixed it seems in
> sid.
serious and grave are of equal severity; serious is for Policy violations
(e.g. package doesn't install), grave is for functionality issues
(e.g.
severity 927747 serious
thanks
Le mar. 23 avr. 2019 à 23:12, Steinar H. Gunderson a écrit :
>
> On Tue, Apr 23, 2019 at 10:24:54PM +0200, Mathieu Parent wrote:
> > There are several issues here. Trying a summary.
> > 1. We need to patch bind9 apparmor profile (this is the cloned bug)
>
> Yes.
>
Processing commands for cont...@bugs.debian.org:
> severity 927747 serious
Bug #927747 [samba] bind9_dlz backend is entirely broken in Debian
Severity set to 'serious' from 'grave'
> thanks
Stopping processing here.
Please contact me if you need assistance.
--
927747:
Control: found -1 1:9.11.5.P4+dfsg-1
Control: tags -1 + pending
On Tue, Apr 23, 2019 at 10:24:54PM +0200, Mathieu Parent wrote:
> +/var/lib/samba/bind-dns/** rwk,
>
> But we may do better with something like this (to be tested and improved):
>
>/var/lib/samba/private/dns.keytab r,
>
Processing control commands:
> found -1 1:9.11.5.P4+dfsg-1
Bug #927827 [bind9] bind9: Please add "/var/lib/samba/bind-dns/** rwk," to
Marked as found in versions bind9/1:9.11.5.P4+dfsg-1.
> tags -1 + pending
Bug #927827 [bind9] bind9: Please add "/var/lib/samba/bind-dns/** rwk," to
Added tag(s)
Hai,
> > 3.Patching "named.conf" template to load the correct bind9 module (i.e 9.11)
> I _think_ samba_dnsupgradedns writes a new config fragment.
No you need adjustments in bind as shown below.
after the 4 points, im missing the following.
Addding point 5.
The end result should look
On Tue, Apr 23, 2019 at 10:24:54PM +0200, Mathieu Parent wrote:
> There are several issues here. Trying a summary.
> 1. We need to patch bind9 apparmor profile (this is the cloned bug)
Yes.
> 2. The /var/lib/samba/bind-dns directory is created on domain
> provision. Nothing to do here?
It's not
clone 927747 -1
reassign -1 bind9
severity -1 serious
retitle -1 bind9: Please add "/var/lib/samba/bind-dns/** rwk," to
apparmor profile
thanks
Le lun. 22 avr. 2019 à 17:30, Steinar H. Gunderson a écrit :
>
> Package: samba
> Version: 2:4.9.5+dfsg-3
> Severity: grave
>
> Hi,
Hi,
Thanks for
9 matches
Mail list logo
