[Bug 1939306] Re: latest shim-signed fails on Lenovo T480 with Secure boot

2021-08-21 Thread Valtteri Vuorikoski
Not clear if it's the same issue, but on a Thinkpad T14s, new shim fails to boot anything except the Canonical-signed grub. Both hash and key MOKs seem to be ignored (blue screeen with Security Violation 0x1A for signed executables). Downgrading to the version of shim-signed specified in the initia

[Bug 1934997] Re: Authentication fails after upgrading sssd to 2.2.3-3ubuntu0.6

2021-07-14 Thread Valtteri Vuorikoski
I just got hit by this. While 'ad_gpo_access_control = permissive' lets users log in again, it is not ideal. It appears that Samba AD does not create GptTmpl.inf except for policies which actually set something in "Security Settings". Hence a policy with nothing no security settings will not have

[Bug 1815036] Re: uri defined for connectivity check does not have IPv6 address

2020-08-07 Thread Valtteri Vuorikoski
1.5 years on this is still broken: connectivity-check.ubuntu.com has no record. Workaround: remove network-manager-config-connectivity-ubuntu and install network-manager-config-connectivity-debian instead. -- You received this bug notification because you are a member of Ubuntu Bugs, which

[Bug 1870955] Re: MokManager - Only DER encoded certificate (*.cer/der/crt) is supported

2020-07-24 Thread Valtteri Vuorikoski
Seeing the same issue on a Hyper-V VM running 20.04. Workaround is to enroll the MOK with mokutil. Seems related to this bug: https://github.com/rhboot/shim/issues/143 . While it was closed in 2018, maybe no one has recompiled shim-signed with the fixed gnuefi? ** Bug watch added: github.com/rhbo