=== haggertk_ is now known as haggertk
=== falcojr9 is now known as falcojr
=== Kilroy- is now known as Kilroy
=== cpaelzer_ is now known as cpaelzer
[08:26] <alocer> Hello, Can i ask questions regarding Landscape?
[08:30] <frickler> !ask
[08:31] <ubottu> Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience
[08:33] <alocer> Oh yeah. sorry. Landscape is really Slow. Is somehting going on RN?
=== michele- is now known as michele
=== nihe_ is now known as nihe
[13:32] <lucasmoura> Hi rbasak, thanks for the review on UA 27.9. The packages are already in the proposed queue. Let us know if you can approve then and we will start the testing on our side here
[13:39] <rbasak> ack
[18:05] <ahasenack> sergiodj: I'm feeling dumb, but for some reason apt on my jammy vm doesn't see the new sssd packages at https://launchpad.net/~sergiodj/+archive/ubuntu/sssd-bugfix/+packages
[18:05] <ahasenack> I triple-checked the versions, it should, but even apt-cache policy won't list the debs from the ppa
[18:05] <sergiodj> lemme check
[18:06] <ahasenack>  d41d8cd98f00b204e9800998ecf8427e                0 main/binary-amd64/Packages
[18:06] <ahasenack> from the InRelease fie
[18:06] <ahasenack> file*
[18:06] <ahasenack> maybe the LP publication failed due to recent outages?
[18:06] <sergiodj> ahasenack: hm, probably
[18:07] <sergiodj> I remember I had trouble uploading this package (and samba too)
[18:07] <sergiodj> let me upload ~ppa2
[18:08] <sergiodj> OK, ~ppa2 uploaded
[18:09] <sergiodj> LP was *really* messed up this weekend
[18:10] <ahasenack> yeah
[18:10] <ahasenack> maybe do the same for the focal one? Just in case? Unless you can check its InRelease file
[18:27] <sergiodj> ahasenack: I was able to install the Focal one, but I will upload another version just in case
[18:28] <ahasenack> sergiodj: I'm trying to create the  GptTpml.inf file by hand 
[18:28] <ahasenack> from one of your bug comments
[18:28] <ahasenack> the "permissive" trick worked
[18:29] <sergiodj> yeah
[18:29] <ahasenack> but I'm trying this one now, also so I can later add some non-ascii chars to the file and see what happens
[18:29] <ahasenack> but that is not working
[18:29] <ahasenack> the path the file is supposed to reside in is a bit confusing
[18:29] <ahasenack> in the bug comment you have mkdir -p Microsoft/Windows\ NT/SecEdit/
[18:29] <ahasenack> but you don't cd into it, is that it? The directory must exist, but the inf file is in the parent?
[18:29] <sergiodj> let me see
[18:30] <ahasenack> I'm snooping the open() call, I don't see anything trying to open a file in sysvol
[18:30] <sergiodj> it was a mistake on my part, apparently.  you do need to cd into the directory
[18:31] <sergiodj> let me try to reproduce it here
[18:31] <ahasenack> and does it need to be 0640, 0600, or 0644, or something else?
[18:31] <ahasenack> I got 0640 by default
[18:31] <ahasenack> but posix acls are in play, ls lists the "+" character
[18:32] <sergiodj> I didn't have to fiddle with permissions, but I'd try 0644
[18:33] <sergiodj> did you remember to set ad_gpo_access_control to enforcing, just in case?
[18:34] <ahasenack> I removed it
[18:34] <ahasenack> but I think I found it, typo in the name of the inf file
[18:34] <ahasenack> mv GptTpml.inf GptTmpl.inf
[18:34] <ahasenack> now I have it inside the SecEdit dir, let's see
[18:34] <sergiodj> :)
[18:35] <ahasenack> 985    smbd               46   0 GptTmpl.inf
[18:35] <ahasenack> worked
[18:35] <ahasenack> login takes several seconds, something with dns probably
[18:36] <sergiodj> ahasenack: I've updated the comment and added the "cd" there
[18:42] <ahasenack> ok, got a file for the second bug
[18:42] <ahasenack> # cat ../../../../GPT.INI 
[18:42] <ahasenack> [General]
[18:42] <ahasenack> Version=0
[18:42] <ahasenack> displayName=Cr�sher
[18:42] <ahasenack> added displayName
[18:43] <ahasenack> I can try with your 2.7.1 merge ppa
[18:43] <ahasenack> on k
[18:53] <sergiodj> ahasenack: did you send any messages?  for some reason my IRC client disconnected
[18:54] <ahasenack> some
[18:54] <sergiodj> last one I got was "now I have it inside the SecEdit dir, let's see"
[18:54] <ahasenack> got a gpt.ini file for the second bug, the one about non-ascii characters
[18:54] <sergiodj> ah, great
[18:55] <sergiodj> did the initial GptTmpl.inf work?
[18:55] <sergiodj> were you able to login with it?
[18:56] <ahasenack> the initial one worked
[18:56] <sergiodj> ah, great
[18:56] <ahasenack> the second one failed in kinetic, where I was expecting it to work
[18:57] <ahasenack> the GPT.INI with non-ascii
[18:57] <ahasenack>    *  (2022-06-20 18:55:40): [gpo_child[4380]] [copy_smb_file_to_gpo_cache] (0x0400): [RID#11] smb_uri: smb://sambadc.test.lan/sysvol/test.lan/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/GPT.INI
[18:57] <ahasenack>    *  (2022-06-20 18:55:49): [gpo_child[4380]] [copy_smb_file_to_gpo_cache] (0x0020): [RID#11] smbc_getFunctionOpen failed [13][Permission denied]
[18:57] <ahasenack> weird that it got permission denied
[18:57] <sergiodj> yep, I'm getting the same error here on Jammy
[18:57] <ahasenack> kinetic has that second fix
[18:57] <sergiodj> that's what I was telling when my IRC dropped
[18:57] <sergiodj> I can't make the GptTmpl.inf trick work on Jammy
[18:57] <ahasenack> that file is full of posix acls
[18:58] <sergiodj> yeah
[18:58] <ahasenack> NT Authority, enterprise admins, etc
[18:58] <ahasenack> let me remove the á
[18:58] <sergiodj> ok
[18:58] <sergiodj> btw, I will reboot my server here, brb
[18:59] <ahasenack> sill failed
[18:59] <ahasenack> when you come back, what's your GPT.INI? Mine is
[18:59] <ahasenack> -rwxrwx---+ 1 TEST\domain admins TEST\domain admins       22 Jun 20 18:58 GPT.INI*
[18:59] <sergiodj> done
[19:04] <ahasenack> ah, forgot to update sssd to 2.7.1
[19:04] <ahasenack> in k
[19:06] <sergiodj> well
[19:06] <sergiodj> ahasenack: would you like to file a new bug for the non-ansi problem or should I?
[19:06] <ahasenack> let me get a test case
[19:06] <sergiodj> ok
[19:07] <sergiodj> I'm working on that samba bug now
[19:11] <ahasenack> 2.7.1 from kinetic supposedly has all patches
[19:12] <sergiodj> yes, the one I uploaded today
[19:13] <ahasenack> I'm getting this weird permission denied
[19:13] <ahasenack> on the GPT.INI file
[19:13] <ahasenack> maybe it s best if I start from scratch
[19:13] <sergiodj> OK, let me just finish something here and I'll take a look at this
[19:13] <ahasenack> these samba/sssd bugs take so long to troubleshoot
[19:14] <sergiodj> yes :)
[19:17] <sergiodj> I was able to reduce the test plan for https://bugs.launchpad.net/ubuntu/jammy/+source/samba/+bug/1977491 by quite a bit
[19:17] <ubottu> Launchpad bug 1977491 in samba (Ubuntu Jammy) "Update Samba in 22.04LTS to 4.15.7 so macOS clients can connect and transfer." [Medium, Triaged]
[19:17] <sergiodj> ok, back to sssd now
=== admin09 is now known as admin0
[20:25] <kanashiro> ahasenack, I updated the haproxy MP addressing your comments
[20:25] <ahasenack> k