[FFe] Upgrade to likewise-open 5 for Jaunty

This would be nice for hardy too. Version 5 is supposed to have a nice integration with apache for sso. Been trying to upgrade our server to version 5 but it hasn't been going smoothly.

I'm on it.
It will be a new separate source package though, since there is no way of properly updating from likewise-open 4.1 to likewise-open5 (and the packages are very different).

Feature Freeze Exception request

Please hereby consider granting a feature freeze exception for the inclusion of Likewise Open 5.0 in Jaunty.

This new version brings a new backend architecture and key improvements over the old likewise-open packages (4.1):
* New threaded authentication service (lsassd) results in improved system responsiveness under heavy load, faster online/offline detection for mobile users
* Inclusion of idmap compatibility plugins for Samba 3 file and print servers.
* DCE/RPC support for TCP, UDP, and Named Pipes transports
* New auditing and logging service (eventlogd) utilizing an sqlite3 storage engine
* New domain controller location service (netlogond)
Those features are highly desirable for better integration of Ubuntu systems into enterprise Active Directory environments. Lots of users already run Likewise Open 5 using the Likewise-provided debs, which are not integrated properly with Ubuntu and break various things.

Unfortunately upstream provides no upgrade path from 4.1 to 5.0, short of uninstalling completely the old package and reinstalling the new one. That would result in the necessity to leave the AD domain and rejoin it. This is not acceptable in most cases (where the local Ubuntu admin may not have Domain administration passwords required for that operation, and find himself locked out of the domain at the end of the upgrade). To protect our existing users against this while still delivering the key functionality present in version 5.0, we propose to provide Likewise Open 5 as a separate conflicting package. That way, domain users upgrading to Jaunty will stay in the domain, and may switch manually to 5 if they want to.

This is the main reason why this is proposed as a new source package. We'll work together with upstream to provide a seamless way of upgrading from 4 to 5 in Karmic, in order to phase out usage of Likewise-Open 4 without disrupting existing domain users.

Proposing it as a separate package also reduces the impact of granting this Feature Freeze exception, since existing users won't be affected and nothing depends on the new package.

Proposed packaging is in my PPA (package likewise-open5) and is currently being reviewed by several other Canonical Server Team MOTUs for correctness. There are still a couple known (non-technical) issues with it that will be fixed before upload, should this exception be granted.

I see you are requesting a new package, since you probably want them to co-exist for a while. Is 4.1 compatible with the majority of the related softwares in Jaunty archive? (e.g. you mentioned Samba3, is there any trouble with it?)

We need to do this one as we already have a lot of users installing
unpackaged versions. Because it's a new package and not updating the
existing package the risk should be low.

Fine for me, then.

Approved as long as someone from server team is assigned to watch over bugs and deal with any issues that come up.

I'll do it.
I'm in close contact with upstream so that all bugs get handled quickly.

Proposed package available in my PPA:

https://launchpad.net/~ttx/+archive/ppa
likewise-open5 - 5.0.3991.1-0ubuntu1~ppa1

It's currently being reviewed for last-minute glitches, and I should be uploading it soon.

Will likewise5 be available on hardy or only on jaunty? It would be great for business/enterprise stuff to be able to run likewise5 on hardy for AD connectivity, since hardy is LTS.

New queue item accepted.

lp_archive@cocoplum:~$ queue accept 911641
Initialising connection to queue new
Running: "accept 911641"
Accepting ubuntu/None (NEW) 1/28
---------------------------------------------------------------------------
Accepting likewise-open5
---------------------------------------------------------------------------
                                                               1/28 total

I noticed that the packages provided by Likewise include a package for libapache2-mod-auth-kerb. Is the current version of this package in Ubuntu repositories compatible with the recently uploaded Likewise5 packages, or is there a different way to get SSO with Likewise5?

Tomas: yes, they should be. If they are not, please file a bug.
About likewise-open5 in Hardy, it is unlikely to be backported since it relies on some changes in key libraries. The way of doing AD integration in hardy is to use Likewise 4.