Your message dated Mon, 05 Nov 2012 21:48:01 +0000
with message-id <[email protected]>
and subject line Bug#691878: fixed in webauth 4.3.3-1
has caused the Debian Bug report #691878,
regarding libwebauth-perl 4.1+ breaks libwebkdc-perl 3.7.x
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
691878: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691878
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libwebauth-perl
Version: 4.1.0-1~bpo60+1
Severity: important
Dear Maintainer,
We have four WebAuth WebKDC nodes in a DNS round-robin pool. We are
testing upgrading each from 3.6 (on etch) to squeeze, using the
backport versions of webauth packages (4.1.0-1~bpo60+1).
Additionally, we use a custom local login CGI package instead of
webauth-weblogin, and due to an oversight when installing packages the
stable version of libwebkdc-perl was installed, rather than the
matching backport version.
Apache error log entries like the following alerted us to the version
mis-match issue (please forgive the line wrapping):
#---8<-----------------------------------------------------------------
[Fri Oct 26 23:39:46 2012] [error] [client XX.XX.XX.XX] FastCGI:
server "/usr/share/webkdc/cgi/login.fcgi"
stderr: Use of inherited AUTOLOAD for non-method
WebAuth::keyring_read_file() is deprecated at
/usr/share/perl5/WebKDC.pm line 72., referer: ...
[Fri Oct 26 23:39:46 2012] [error] [client XX.XX.XX.XX] FastCGI:
server "/usr/share/webkdc/cgi/login.fcgi"
stderr: WebKDC::make_request_token_request failed with unrecoverable
error occured. Try again later.: Can't locate
auto/WebAuth/keyring_rea.al in @INC (@INC contains: /etc/perl
/usr/local/lib/perl/5.10.1 /usr/local/share/perl/5.10.1
/usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.10
/usr/share/perl/5.10 /usr/local/lib/site_perl .) at
/usr/share/perl5/WebKDC.pm line 72, referer: ...
#---8<-----------------------------------------------------------------
We addressed this locally using an explicit version dependency in our
custom login CGI package.
Would it be possible to add something like
"Breaks: libwebkdc-perl (<< 4.0.0~)" to the libwebauth-perl package
control file just in case someone else is also testing the waters of
4.1+ in squeeze?
Cheers.
Dameon.
-- System Information:
Debian Release: 6.0.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--
><> ><> ><> ><> ><> ><> ooOoo <>< <>< <>< <>< <>< <><
Dameon Wagner, Systems Development and Support Team
IT Services, University of Oxford
><> ><> ><> ><> ><> ><> ooOoo <>< <>< <>< <>< <>< <><
--- End Message ---
--- Begin Message ---
Source: webauth
Source-Version: 4.3.3-1
We believe that the bug you reported is fixed in the latest version of
webauth, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Russ Allbery <[email protected]> (supplier of updated webauth package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 05 Nov 2012 12:43:48 -0800
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webkdc libapache2-webauth
libapache2-webkdc libwebauth-perl libwebauth8 libwebauth-dev libwebkdc-perl
webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.3.3-1
Distribution: experimental
Urgency: low
Maintainer: Russ Allbery <[email protected]>
Changed-By: Russ Allbery <[email protected]>
Description:
libapache2-mod-webauth - Apache modules for WebAuth authentication
libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
libapache2-webauth - Transitional package for WebAuth Apache modules
libapache2-webkdc - Transitional package for WebAuth authentication KDC
libwebauth-dev - Development files for WebAuth authentication
libwebauth-perl - Perl library for WebAuth authentication
libwebauth8 - Shared libraries for WebAuth authentication
libwebkdc-perl - Perl libraries for WebAuth central login server
webauth-tests - Tests for the WebAuth authentication modules
webauth-utils - Command-line utilities for WebAuth authentication
webauth-weblogin - Central login server for WebAuth authentication
Closes: 691878
Changes:
webauth (4.3.3-1) experimental; urgency=low
.
* New upstream release.
- Fix memory initialization error in the WebKDC that could cause
incorrect handling of random multifactor verification.
- Fix memory allocation error in the WebAuth Perl module that could
cause memory corruption in the WebLogin server.
* Add Breaks of libwebkdc-perl and webauth-weblogin << 4.3.0 to
libwebauth-perl and of webauth-weblogin << 4.3.0 to libwebkdc-perl.
The API of the Perl modules changed in 4.3.0. (Closes: #691878)
* Remove ~ on 4.3.0 dependencies. There were no pre-release versions,
so this is just visual clutter.
* Drop Replaces and Breaks on libwebauth1-dev, not required since the
squeeze release.
Checksums-Sha1:
6b26924cb4b7226ef5bb84356ae6556bf814ad21 2648 webauth_4.3.3-1.dsc
3cbd34b3772055c3ed0cf52e8902f1f30dd68e91 773828 webauth_4.3.3.orig.tar.xz
713d676680d1f129226d1a236ef29dd642f95ee0 23184 webauth_4.3.3-1.debian.tar.xz
dadc987c2961227de459a94737b59762e0605d07 216588
libapache2-mod-webauth_4.3.3-1_i386.deb
90bb6e45a55fa13f9116cd80e09aea8454f18987 93872
libapache2-mod-webkdc_4.3.3-1_i386.deb
39d6fe50d5dfc788e9b289ef0abad0a9be91e53f 38830
libapache2-webauth_4.3.3-1_all.deb
560fe9767a9b4396293334790603f202f476e475 38172
libapache2-webkdc_4.3.3-1_all.deb
3521ab94174b3e0f91f8dda10ec9d6716b121a2c 122420
libwebauth-perl_4.3.3-1_i386.deb
ad661ff4e08673eaf23453c300a3397419ad5406 71254 libwebauth8_4.3.3-1_i386.deb
6221f34b6cb878e09b9a03238ff8946f3eb7cad2 85728 libwebauth-dev_4.3.3-1_i386.deb
32ce343b8488aa1d16d67f0462eeb4821963c2d3 92376 libwebkdc-perl_4.3.3-1_all.deb
d31f3ec49f82258ea7e2cec38cd5c1af3f7177a3 48048 webauth-tests_4.3.3-1_all.deb
bacc19dd1891ab50b162dda9fe5c14dd8b664d7d 47564 webauth-utils_4.3.3-1_i386.deb
3a73d0974650806962c7483738ae88ceeeebc39a 100374
webauth-weblogin_4.3.3-1_all.deb
Checksums-Sha256:
27ad3d895e9e8dfe48746f648e12018de20ea88ef399e1a53613d0942aba2e53 2648
webauth_4.3.3-1.dsc
d1f0b021ea2208cdd307e7cea97e76b7fc2a89c9caca49f0cbfdabe86c0e1659 773828
webauth_4.3.3.orig.tar.xz
403ba24f2080acc013fea1d4eef35c56883d135a7681fc1d13da3daa590e82f0 23184
webauth_4.3.3-1.debian.tar.xz
cab7325fe0bd49aec22f83b4a45b4aa59a931ab141fee80de5f8ee04cbac182d 216588
libapache2-mod-webauth_4.3.3-1_i386.deb
5aaf54285593cd62d87b8ab08344f79fd3cb62d327b0a186bb881c1c57d76230 93872
libapache2-mod-webkdc_4.3.3-1_i386.deb
63583f1bb431f9f9bfcd9e71732a4113a3fd33715fafffb2d9b1ea6ce44368d5 38830
libapache2-webauth_4.3.3-1_all.deb
0ec3051334f31025f38fd11b262535779760c9a9ed70cb8a2773ae6d21a5d243 38172
libapache2-webkdc_4.3.3-1_all.deb
41453dedef917c317ea624fdaef42bcfd155eb66124255d095556ea76495e250 122420
libwebauth-perl_4.3.3-1_i386.deb
42de096ca69ddce09e90bba824210231c69c3b7c36d4c5c8f9c075c8fb84a96c 71254
libwebauth8_4.3.3-1_i386.deb
d9272743902528d92d1712eebd606b8d87893a9367b94ad9bd1815b8928174fc 85728
libwebauth-dev_4.3.3-1_i386.deb
dfc2037c7adc290ed1b184c7a8c3755bd0040bddd3c1c3a5af5938281045d3b4 92376
libwebkdc-perl_4.3.3-1_all.deb
d35d1e38d1344bfa280cd260b26bf2886656c2e1b19188ef9ae198e8404fcb9f 48048
webauth-tests_4.3.3-1_all.deb
5016fc69cca6471cd15a7bab28d2dbc4b37b566ccf790e751cdbc9a0489805ed 47564
webauth-utils_4.3.3-1_i386.deb
a2adc670bfe0c5afbf5d8e7f08bb8785cd896c57e018c70b4363c2e68880e22b 100374
webauth-weblogin_4.3.3-1_all.deb
Files:
bee386ba0292364f846eafe8204c9b3f 2648 web optional webauth_4.3.3-1.dsc
74657d4fc8bf0008fb4f053867700817 773828 web optional webauth_4.3.3.orig.tar.xz
a79ed4b3da335f97625b75ed465e5b65 23184 web optional
webauth_4.3.3-1.debian.tar.xz
f38d8ccc87447d2cf9a5e5c7d68e6f19 216588 httpd optional
libapache2-mod-webauth_4.3.3-1_i386.deb
ee5d854717995e8372735ad71303aaab 93872 httpd optional
libapache2-mod-webkdc_4.3.3-1_i386.deb
d15948d1d693b0e24a5dd3e49170e7e7 38830 oldlibs extra
libapache2-webauth_4.3.3-1_all.deb
ceab34e222459d3e57b62aac7971c6bc 38172 oldlibs extra
libapache2-webkdc_4.3.3-1_all.deb
b365f6600e3476da587d7752336cb63e 122420 perl optional
libwebauth-perl_4.3.3-1_i386.deb
5d466a582874526408c5717263f524fc 71254 libs optional
libwebauth8_4.3.3-1_i386.deb
35da13e07286d65097956c04208b333e 85728 libdevel extra
libwebauth-dev_4.3.3-1_i386.deb
b915b9416a25cd9f09b40030cf602dca 92376 perl optional
libwebkdc-perl_4.3.3-1_all.deb
543ee7e146e7235bc4ca0b1f31ac1741 48048 web optional
webauth-tests_4.3.3-1_all.deb
ba5e1bb492c13254e2392478a632b865 47564 web optional
webauth-utils_4.3.3-1_i386.deb
2e5ade80c22e8a0cf25b267d837d2bee 100374 web optional
webauth-weblogin_4.3.3-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQEcBAEBCAAGBQJQmDEXAAoJEH2AMVxXNt51ogQH/1e9LdES9fQ1PPuVTNMEfLn1
/E/AF8MOLN+SOqZPp6YZhw5h9wLPrLQTqtbr1n33oFlo9RbennD3o2sMzON8t7cM
BNXypODityjnNPYm6BwGT1eaHhJ+s3X9gCokYakSOmVn7qlVeXMv8W0b3feMmq/t
mtrooP8yj68R2qLUpppIZyJ/qWgytPL676W4yIK6Ahfnw4x9XTKulYEB6C+2Amml
0jd5ggkoAMqJdkVQHUuWwHuwydAPV4nqmy9bMkmBAFjLTZcfpf0Hf1EbrQU1S+Ff
GRYWZuCh2ZKI2YcvyAoEabn08kKMhW9LDqEZW3FY+PgmnuUbf+BwGnyqck2+F4g=
=jL8c
-----END PGP SIGNATURE-----
--- End Message ---
