Skip to content
Snippets Groups Projects
Commit f3a04d81 authored by Recolic's avatar Recolic :house_with_garden:
Browse files

upgrade identity broker

parent af9c9b1d
No related branches found
No related tags found
No related merge requests found
...@@ -7,7 +7,7 @@ After installing level-2, you can actually enroll the machine and get a certific ...@@ -7,7 +7,7 @@ After installing level-2, you can actually enroll the machine and get a certific
## Install Level-1 ## Install Level-1
1. Install `libsdbus-c++0 msalsdk-dbusclient msft-identity-broker` packages in this repo. Note that they depends on `jre11-openjdk`. 1. Install `libsdbus-c++0 msalsdk-dbusclient microsoft-identity-broker` packages in this repo. Note that they depends on `jre11-openjdk`.
2. Install `microsoft-edge-stable-bin` from AUR. 2. Install `microsoft-edge-stable-bin` from AUR.
3. `[Temporary Fix]` Downgrade `tpm2-tss` to `3.2.0-1`, and add it to `IgnorePkg` in `/etc/pacman.conf`. 3. `[Temporary Fix]` Downgrade `tpm2-tss` to `3.2.0-1`, and add it to `IgnorePkg` in `/etc/pacman.conf`.
...@@ -30,12 +30,12 @@ It's suggested to keep the Ubuntu VM powered-on forever, to keep the certificate ...@@ -30,12 +30,12 @@ It's suggested to keep the Ubuntu VM powered-on forever, to keep the certificate
Copy the following files from enrolled Level-2 machine to unenrolled Level-1 machine: Copy the following files from enrolled Level-2 machine to unenrolled Level-1 machine:
``` ```
/var/lib/msft-identity-device-broker/1000.db /var/lib/microsoft-identity-device-broker/1000.db
/etc/machine-id /etc/machine-id
/etc/os-release # Note: this is a symbol-link in ubuntu /etc/os-release # Note: this is a symbol-link in ubuntu
/home/YourName/.config/msft-identity-broker/account-data.db /home/YourName/.config/microsoft-identity-broker/account-data.db
/home/YourName/.config/msft-identity-broker/broker-data.db /home/YourName/.config/microsoft-identity-broker/broker-data.db
/home/YourName/.config/msft-identity-broker/cookies.db /home/YourName/.config/microsoft-identity-broker/cookies.db
/home/YourName/.local/share/keyrings/login.keyring /home/YourName/.local/share/keyrings/login.keyring
``` ```
...@@ -51,8 +51,8 @@ You are all set! ...@@ -51,8 +51,8 @@ You are all set!
If your edge browser is not allowing you to login, check the following logs: If your edge browser is not allowing you to login, check the following logs:
1. Any error message in `journalctl --user -u msft-identity-broker.service`? 1. Any error message in `journalctl --user -u microsoft-identity-broker.service`?
2. Any error message in `sudo journalctl -u msft-identity-device-broker.service`? 2. Any error message in `sudo journalctl -u microsoft-identity-device-broker.service`?
3. Run `seahorse` and is there Intune entries in your `login` keyring? Is it `set as default`? 3. Run `seahorse` and is there Intune entries in your `login` keyring? Is it `set as default`?
4. Run `ldd /usr/lib/libmsal_dbus_client.so`. Is there undefined reference? 4. Run `ldd /usr/lib/libmsal_dbus_client.so`. Is there undefined reference?
...@@ -60,11 +60,11 @@ If your edge browser is not allowing you to login, check the following logs: ...@@ -60,11 +60,11 @@ If your edge browser is not allowing you to login, check the following logs:
#### ArchLinux side #### ArchLinux side
- msft-identity-broker.service: Failed at step STATE_DIRECTORY spawning /opt/msft/identitybroker/bin/msft-identity-broker: Operation not permitted - microsoft-identity-broker.service: Failed at step STATE_DIRECTORY spawning /opt/microsoft/identitybroker/bin/microsoft-identity-broker: Operation not permitted
This is a permission issue. Please run `chmod 777 -R /opt/msft` as root, **and** run `chown -R YourName /home/YourName/.config`, and restart the service. This is a permission issue. Please run `chmod 777 -R /opt/microsoft` as root, **and** run `chown -R YourName /home/YourName/.config`, and restart the service.
- msft-identity-broker.service: Failed to set up special execution directory in /home/YourName/.config: Operation not permitted - microsoft-identity-broker.service: Failed to set up special execution directory in /home/YourName/.config: Operation not permitted
This is also a permission issue while overwritting user config with root account manually. Please run `chown -R YourName /home/YourName/.config` and restart the service. This is also a permission issue while overwritting user config with root account manually. Please run `chown -R YourName /home/YourName/.config` and restart the service.
...@@ -84,7 +84,7 @@ Sign out and sign in again. ...@@ -84,7 +84,7 @@ Sign out and sign in again.
- Cannot find directory `.../msft-identity-broker/...` - Cannot find directory `.../msft-identity-broker/...`
This directory was renamed from `msft-identity-broker` to `microsoft-identity-broker` in latest intune. Remember to rename it while copy files around. This directory was renamed from `msft-identity-broker` to `microsoft-identity-broker` in latest intune. Either upgrade your identity broker, or rename things manually (might be error-prone).
#### Ubuntu side (officially supported) #### Ubuntu side (officially supported)
......
...@@ -7,6 +7,6 @@ function i () { ...@@ -7,6 +7,6 @@ function i () {
sudo pacman -Sy --noconfirm jre11-openjdk sudo pacman -Sy --noconfirm jre11-openjdk
( i libsdbus-c++0 ) ( i libsdbus-c++0 )
( i msft-identity-broker ) ( i microsoft-identity-broker )
( i msalsdk-dbusclient ) ( i msalsdk-dbusclient )
# Maintainer: Recolic K <root@recolic.net> # Maintainer: Recolic K <root@recolic.net>
pkgname=msft-identity-broker pkgname=microsoft-identity-broker
pkgver=1.0.6 pkgver=1.5.1
pkgrel=1 pkgrel=1
pkgdesc="msft-identity-broker" pkgdesc="microsoft-identity-broker"
url="https://packages.microsoft.com/ubuntu/20.04/prod/pool/main/m/msft-identity-broker" url="https://packages.microsoft.com/ubuntu/20.04/prod/pool/main/m/microsoft-identity-broker"
license=("GPL2") license=("GPL2")
arch=("x86_64") arch=("x86_64")
depends=("dbus" "gnome-keyring" "systemd" "jre11-openjdk") depends=("dbus" "gnome-keyring" "systemd" "jre11-openjdk")
makedepends=() makedepends=()
conflicts=() conflicts=("msft-identity-broker")
replaces=() replaces=("msft-identity-broker")
backup=() backup=()
source=("source.deb::$url/${pkgname}_${pkgver}_amd64.deb") source=("source.deb::$url/${pkgname}_${pkgver}_amd64.deb")
validpgpkeys=("") validpgpkeys=("")
sha256sums=("5523be2d7b0a502b34268f94b1c95d4a892500b1ab69a1ab0e9c9cafb7c62bbb") sha256sums=("2438b186365c527f546c59e0e3a5c660c431739a12026ad89c2e0acad56ce443")
install=x.install install=x.install
package() { package() {
cd "$srcdir" cd "$srcdir"
ar x source.deb ar x source.deb
tar xvzf data.tar.gz tar xvzf data.tar.gz
echo "Patching... (Hardcode archlinux java11 JAVA_HOME into xxx.service)" echo ">>> Patching... (Hardcode archlinux java11 JAVA_HOME into xxx.service)"
echo 'Environment="JAVA_HOME=/usr/lib/jvm/java-11-openjdk"' >> "$srcdir/usr/lib/systemd/system/msft-identity-device-broker.service" echo 'Environment="JAVA_HOME=/usr/lib/jvm/java-11-openjdk"' >> "$srcdir/usr/lib/systemd/system/microsoft-identity-device-broker.service"
echo 'Environment="JAVA_HOME=/usr/lib/jvm/java-11-openjdk"' >> "$srcdir/usr/lib/systemd/user/msft-identity-broker.service" echo 'Environment="JAVA_HOME=/usr/lib/jvm/java-11-openjdk"' >> "$srcdir/usr/lib/systemd/user/microsoft-identity-broker.service"
cp -r "$srcdir/usr" "$srcdir/opt" "$pkgdir/" cp -r "$srcdir/usr" "$srcdir/opt" "$pkgdir/"
} }
......
...@@ -3,7 +3,7 @@ post_install() { ...@@ -3,7 +3,7 @@ post_install() {
# I don't know why they are doing this. just leave them there. # I don't know why they are doing this. just leave them there.
if [ -d /run/systemd/system ]; then if [ -d /run/systemd/system ]; then
systemctl --system daemon-reload || true systemctl --system daemon-reload || true
# systemctl restart msft-identity-device-broker.service || true # systemctl restart microsoft-identity-device-broker.service || true
fi fi
} }
...@@ -13,7 +13,7 @@ post_upgrade() { ...@@ -13,7 +13,7 @@ post_upgrade() {
pre_remove() { pre_remove() {
if [ -d /run/systemd/system ]; then if [ -d /run/systemd/system ]; then
systemctl stop msft-identity-device-broker.service || true systemctl stop microsoft-identity-device-broker.service || true
fi fi
} }
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment