Epoptes does not use samba/winbind groups

Bug #1054665 reported by smooth
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Epoptes
Fix Released
Low
Alkis Georgopoulos

Bug Description

Thanks for Epoptes !
We are using Edubuntu 12.04 with the Epoptes installed by defualt. While there was no issue in using Epoptes as any user declared in the /etc/group file within the epoptes group, we have experienced issues in using alternative group and in particular groups obtained though a samba server. The following describe the context :

The /etc/default/epoptes file has been modified to include the statement SOCKET_GROUP=net_remoteview
The net_remoteview group does not exist on the local machine but is coming from a samba server on the newtork mounted as a PDC. The group can be seen by the getent groups command.

A user which belongs to the group net_remoteview is looged on the Edubuntu station and launch epoptes either from the GUI or from a command line. epoptes does not launch and comes out with the following error : 'An error occured while connecting: 13: Permission non accordée.'

In order to test if it was not only a samba issue, a local group called epoptes_test has been created and the /etc/default/epoptes file has been modified to include the statement SOCKET_GROUP=epoptes_test. After logging again a user belonging to that new group, launching epoptes leads to 'An error occured while connecting: 13: Permission non accordée.'

We would be very grateful if you could help us to locate and solve the issue.

Best regards,

SmoothFroggy

Revision history for this message
Alkis Georgopoulos (alkisg) wrote :

> After logging again a user belonging to that new group, launching epoptes
> leads to 'An error occured while connecting: 13: Permission non accordée.'

After every group change, you need to restart the epoptes service, which uses the group to create its listening socket in /var/run/epoptes/epoptes.socket:
  sudo service epoptes restart

So, first, check if the epoptes service is running when your computer starts (using a samba SOCKET_GROUP for epoptes):
  sudo service epoptes status
Then, try restarting epoptes:
  sudo service epoptes restart
And finally, try running epoptes:
  epoptes

If that way you're able to start epoptes, this means that the epoptes service starts before samba starts.
In that case, check for the workaround mentioned in comment #12 of this similar bug report with epoptes and Likewise Open (LDAP):
https://answers.launchpad.net/epoptes/+question/208472

Changed in epoptes:
assignee: nobody → Alkis Georgopoulos (alkisg)
status: New → Incomplete
Revision history for this message
smooth (smoothfroggy) wrote :

Dear Mr Georgopoulos,

Thank you for the heads up on restarting the epoptes service ; it solved the concern allowing normal operation. Please, let me apologize for not checking that one before submitting the bug report.
I'll update the rc.d to ensure epoptes start after samba.

Best regards,

SmoothFroggy.

Revision history for this message
Alkis Georgopoulos (alkisg) wrote :

Hmmm... normally, I'd say this is a bug in samba, in likewise open etc, that they need to start sooner in order for the groups to be available when other services start.

But until it's fixed there, we might as well change the epoptes rc.d to start after samba/likewise, and we can revert it if/when it's fixed in the other packages.

So, marking as confirmed, will be fixed in the next epoptes version.

Changed in epoptes:
importance: Undecided → Low
status: Incomplete → In Progress
Revision history for this message
Alkis Georgopoulos (alkisg) wrote :

Fix committed in http://bazaar.launchpad.net/~epoptes/epoptes/trunk/revision/340, although it only affects new epoptes installations, or one can purge the old version before installing the new one in order for dh_installinit to update the rc.d symlinks.

Changed in epoptes:
status: In Progress → Fix Committed
Revision history for this message
Alkis Georgopoulos (alkisg) wrote :

Fix released in epoptes 0.5.7-1.

Changed in epoptes:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.