[Bug 1821085] Re: Documentation: SSSD server guide recommends pam_mkhomedir.so, latest aptitude patch to sssd removes it

2020-04-20 Thread Andreas Hasenack
The sssd chapter in the server guide has been rewritten and the pam- auth-update command was incorporated. ** Changed in: serverguide Status: New => Fix Released ** Changed in: serverguide Assignee: (unassigned) => Andreas Hasenack (ahasenack) -- You received this bug notification b

[Bug 1821085] Re: Documentation: SSSD server guide recommends pam_mkhomedir.so, latest aptitude patch to sssd removes it

2020-04-20 Thread Andreas Hasenack
Sorry, forgot the url: https://discourse.ubuntu.com/t/service-sssd/11579 -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to sssd in Ubuntu. https://bugs.launchpad.net/bugs/1821085 Title: Documentation: SSSD server guide recommends pam_mkhome

[Bug 1777776] Re: Ubuntu documentation for sssd/kerberos does not authenticate authentication server

2020-04-20 Thread Andreas Hasenack
I updated the guide at https://discourse.ubuntu.com/t/service- sssd/11579/ with a section on KDC spoofing, please take a look. -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to sssd in Ubuntu. https://bugs.launchpad.net/bugs/176 Title:

[Bug 1873046] Re: DNS rebinding protection is ineffective when BIND is configured as a forwarding DNS server

2020-04-20 Thread Andreas Hasenack
The original gitlab issue opened to track this is still private it seems[1]. All other details I have are in the MP diff[2]. 1. https://gitlab.isc.org/isc-projects/bind9/-/issues/1574 2. https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/3343/diffs ** Bug watch added: gitlab.isc.org/isc-

[Bug 1777776] Re: Ubuntu documentation for sssd/kerberos does not authenticate authentication server

2020-04-20 Thread Andreas Hasenack
Hi Andrew, I'm back on this bug since I'm updating the server guide for the 20.04 release. Again I didn't add krb5_validate to the guide, mostly because I had forgotten about this bug here. The new guide is at https://discourse.ubuntu.com/t/service-sssd/11579 Let me see if I got the attack scenar

[Bug 1777776] Re: Ubuntu documentation for sssd/kerberos does not authenticate authentication server

2020-04-20 Thread Andreas Hasenack
** Changed in: serverguide Assignee: (unassigned) => Andreas Hasenack (ahasenack) ** Changed in: serverguide Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to sssd in Ubuntu. https://bugs.launchpad

[Bug 1873561] Re: smbclient //192.168.178.1/share1 fails on SMB1 resource

2020-04-20 Thread Andreas Hasenack
Closing as invalid as this is the expected behavior with the current version. ** Changed in: samba (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/18735