enterprise-support team mailing list archive

[Richard Earnshaw <1942195@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

I'm running Ubuntu 20.04 in an enterprise environment.  I recently
installed the samba package on my my machine which is configured to get
most account details from a central ldap server.  I was very surprised,
therefore, to see the install script adding a large number of remote
users who have no local account to the samabashare group in my local
groups file.

It turns out that this is because the postinstall script creates an
initial sambashare group and then tries to populate it from the 'admin'
group.  However, since that is a group that is defined in the ldap
database it ends up copying a large number of remote userids into the
local group file.

This is a bad idea in a centrally managed environment as the contents of
that centrally managed group could change at any time.  Surely the
script should only try to do this if the admin group is local to the
machine?  Perhaps at the very least it should seek confirmation before
performing such a change.

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to samba in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1942195

Title:
  Installing Samba unexpectedly adds many unknown local users to
  sambashare group

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1942195/+subscriptions