From a67885f7935d7b67092dc497d87c5e88fe029c4c Mon Sep 17 00:00:00 2001 From: Veiko Aasa Date: Sat, 5 Apr 2025 14:23:07 +0300 Subject: [PATCH] upgrades: Prevent installation of the Samba Active Directory service samba-ad-dc package depends on winbind, which breaks FreedomBox LDAP PAM configuration. In Debian Trixie, AD server package is required by samba package, but is not required to run Samba file server. See also Debian bug report 1099755. Relates to #2498. Tests performed: - In Debian Bookworm, install samba, do dist-upgrade, check that samba-ad-dc and winbind packages are not insalled and adding new user works. - In Debian Trixie, uninstalling and installing samba app works and after this, adding new user works. Signed-off-by: Veiko Aasa --- plinth/modules/upgrades/__init__.py | 2 +- plinth/modules/upgrades/privileged.py | 9 +++++++++ 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/plinth/modules/upgrades/__init__.py b/plinth/modules/upgrades/__init__.py index f137b8578..e4797d7a3 100644 --- a/plinth/modules/upgrades/__init__.py +++ b/plinth/modules/upgrades/__init__.py @@ -55,7 +55,7 @@ class UpgradesApp(app_module.App): app_id = 'upgrades' - _version = 18 + _version = 19 can_be_disabled = False diff --git a/plinth/modules/upgrades/privileged.py b/plinth/modules/upgrades/privileged.py index cedc432c6..3be661812 100644 --- a/plinth/modules/upgrades/privileged.py +++ b/plinth/modules/upgrades/privileged.py @@ -43,6 +43,15 @@ Explanation: python3-canonicaljson >= 2.0.0~ Package: python3-canonicaljson Pin: release n=bookworm-backports Pin-Priority: 500 + +Explanation: Prevent installation of Samba Active Directory. AD package depends +Explanation: on winbind, which breaks FreedomBox LDAP PAM configuration. +Explanation: In Debian Trixie, AD server package is required by samba package, +Explanation: but is not required to run Samba file server. See also Debian +Explanation: bug report 1099755. +Package: samba-ad-dc +Pin: release * +Pin-Priority: -1 '''