Your message dated Sun, 23 Jul 2017 03:05:37 +0000
with message-id <[email protected]>
and subject line Bug#868638: fixed in heimdal 7.4.0.dfsg.1-2
has caused the Debian Bug report #868638,
regarding heimdal-kdc: m-key installed by postinst apparently not used
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
868638: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868638
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: heimdal-kdc
Version: 7.4.0.dfsg.1-1
Severity: normal
Dear maintainer,
heimdal-kdc.postinst runs kstash(8) to generate a master key. This key
is written to /var/lib/heimdal-kdc/m-key. However, kadmin(8) and kdc(8)
try to read the master key from /var/lib/heimdal-kdc/heimdal.mkey
(strace confirms the comment in kdc.conf). I'm not certain but it seems
the result is the database is silently stored unencrypted.
I was about to suggest 'kadmin -c /etc/heimdal-kdc/kdc.conf -l stash',
but it seems this also doesn't use DBNAME.mkey as a default! I think
I'll raise that upstream. Not to mention the lack of even a warning when
the mkey file doesn't exist.
A possible solution would be to install the default mkey with an
explicit 'kstash -k /var/lib/heimdal-kdc/heimdal.mkey' (until the
default changes again, anyway).
thanks,
Ryan
--- End Message ---
--- Begin Message ---
Source: heimdal
Source-Version: 7.4.0.dfsg.1-2
We believe that the bug you reported is fixed in the latest version of
heimdal, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Brian May <[email protected]> (supplier of updated heimdal package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 23 Jul 2017 10:32:34 +1000
Source: heimdal
Binary: heimdal-docs heimdal-kdc heimdal-multidev heimdal-dev heimdal-clients
heimdal-kcm heimdal-servers heimdal-dbg libheimbase1-heimdal libasn1-8-heimdal
libkrb5-26-heimdal libhdb9-heimdal libkadm5srv8-heimdal libkadm5clnt7-heimdal
libgssapi3-heimdal libkafs0-heimdal libroken18-heimdal libotp0-heimdal
libsl0-heimdal libkdc2-heimdal libhx509-5-heimdal libheimntlm0-heimdal
libwind0-heimdal libhcrypto4-heimdal
Architecture: source i386 all
Version: 7.4.0.dfsg.1-2
Distribution: unstable
Urgency: medium
Maintainer: Brian May <[email protected]>
Changed-By: Brian May <[email protected]>
Description:
heimdal-clients - Heimdal Kerberos - clients
heimdal-dbg - Heimdal Kerberos - debugging symbols
heimdal-dev - Heimdal Kerberos - development files
heimdal-docs - Heimdal Kerberos - documentation
heimdal-kcm - Heimdal Kerberos - KCM daemon
heimdal-kdc - Heimdal Kerberos - key distribution center (KDC)
heimdal-multidev - Heimdal Kerberos - Multi-implementation Development
heimdal-servers - Heimdal Kerberos - server programs
libasn1-8-heimdal - Heimdal Kerberos - ASN.1 library
libgssapi3-heimdal - Heimdal Kerberos - GSSAPI support library
libhcrypto4-heimdal - Heimdal Kerberos - crypto library
libhdb9-heimdal - Heimdal Kerberos - kadmin server library
libheimbase1-heimdal - Heimdal Kerberos - Base library
libheimntlm0-heimdal - Heimdal Kerberos - NTLM support library
libhx509-5-heimdal - Heimdal Kerberos - X509 support library
libkadm5clnt7-heimdal - Heimdal Kerberos - kadmin client library
libkadm5srv8-heimdal - Libraries for Heimdal Kerberos
libkafs0-heimdal - Heimdal Kerberos - KAFS support library
libkdc2-heimdal - Heimdal Kerberos - KDC support library
libkrb5-26-heimdal - Heimdal Kerberos - libraries
libotp0-heimdal - Heimdal Kerberos - OTP support library
libroken18-heimdal - Heimdal Kerberos - roken support library
libsl0-heimdal - Heimdal Kerberos - SL support library
libwind0-heimdal - Heimdal Kerberos - stringprep implementation
Closes: 868638 868842
Changes:
heimdal (7.4.0.dfsg.1-2) unstable; urgency=medium
.
[ Jelmer Vernooij ]
* Remove myself from uploaders.
.
[ Brian May ]
* Be explicit with heimdal.mkey filename in postinst. Closes: #868638.
* Tests should respect DEB_BUILD_OPTIONS=nocheck. Closes: #868842.
Checksums-Sha1:
696753802f935d9a50517cd7901e4c8bee70810b 3605 heimdal_7.4.0.dfsg.1-2.dsc
4720bf5d230e6048ecbff56d38eedb6ff640b29c 9960312
heimdal_7.4.0.dfsg.1.orig.tar.gz
da967d1cdebdf94aa3961d19750c2a1ed7816ae6 128348
heimdal_7.4.0.dfsg.1-2.debian.tar.xz
ed18744918085e36e00537268998c655f7c8d6db 183298
heimdal-clients_7.4.0.dfsg.1-2_i386.deb
797735d644486c7eef4efb85abc38ed2a98eb1a9 4747994
heimdal-dbg_7.4.0.dfsg.1-2_i386.deb
115a76007bff425c31747d03f7d83959ab3ef607 241568
heimdal-dev_7.4.0.dfsg.1-2_i386.deb
fed44d69f7e3d2b57bf9c9f896e98bca8117af4c 106028
heimdal-docs_7.4.0.dfsg.1-2_all.deb
28c56528a07c137f3f5ecf7d28ac996dc9c287ce 57712
heimdal-kcm_7.4.0.dfsg.1-2_i386.deb
c9f273574b05b0b9bea0701371f8eb706e096323 132570
heimdal-kdc_7.4.0.dfsg.1-2_i386.deb
784b1a61c84d6481e45ded11b7b2af1f61ac2f4e 1275180
heimdal-multidev_7.4.0.dfsg.1-2_i386.deb
d58441b30b2e847a90cc7b04856115cb79fd01d1 35512
heimdal-servers_7.4.0.dfsg.1-2_i386.deb
18e4c6829df3d02b19f343f22ea1289e33f9ee97 14584
heimdal_7.4.0.dfsg.1-2_i386.buildinfo
2691ea15a2e3e20efa03a696908fba4868a86029 217054
libasn1-8-heimdal_7.4.0.dfsg.1-2_i386.deb
7c65500d5729a4b232c209311e2c2d768e624768 133418
libgssapi3-heimdal_7.4.0.dfsg.1-2_i386.deb
9ed70696fdf4b9fb24e2ad85609d8d5a75171042 119858
libhcrypto4-heimdal_7.4.0.dfsg.1-2_i386.deb
ed41caf53f2ca403dde3d1cd9a55851f98879be5 95672
libhdb9-heimdal_7.4.0.dfsg.1-2_i386.deb
8b451e6e4333982bdb9435d0c1ff79f4d660a152 56690
libheimbase1-heimdal_7.4.0.dfsg.1-2_i386.deb
54625be88074bb55492f78349a1ff6eee107e317 42066
libheimntlm0-heimdal_7.4.0.dfsg.1-2_i386.deb
b94a1a6288b7483794e2a67ac1f6dc54e4a5e57e 143630
libhx509-5-heimdal_7.4.0.dfsg.1-2_i386.deb
cda19a2b322c6550bef52efa9e2e22dc90b93425 45824
libkadm5clnt7-heimdal_7.4.0.dfsg.1-2_i386.deb
6219c80be7bcf39783f53e807c329a7bc8ce60f5 64664
libkadm5srv8-heimdal_7.4.0.dfsg.1-2_i386.deb
39343658d3990c88e26a36f201e9cbc863c2e74d 42444
libkafs0-heimdal_7.4.0.dfsg.1-2_i386.deb
12b698fda14164806082b15d3a74a7af0156263e 85442
libkdc2-heimdal_7.4.0.dfsg.1-2_i386.deb
d7937d9c3042af11e9de8a98ed29f1e9b00c7c6b 260498
libkrb5-26-heimdal_7.4.0.dfsg.1-2_i386.deb
8ff47093b163bf7f5c3372fc37eb56ea45fc9f07 50992
libotp0-heimdal_7.4.0.dfsg.1-2_i386.deb
5aa9088395a5f28ec0e988c1818a55a043c8c0c1 69276
libroken18-heimdal_7.4.0.dfsg.1-2_i386.deb
c5be338a8e7a674a7b00d5fb6771aeb5cfeea25e 38058
libsl0-heimdal_7.4.0.dfsg.1-2_i386.deb
c446d1ee7cbc2e04c9b57cdade8a404517e23651 73910
libwind0-heimdal_7.4.0.dfsg.1-2_i386.deb
Checksums-Sha256:
aa4cf6447fe11169d4fa269a9ff6439d1a8b76ee7cddd0964069e1afb38cf199 3605
heimdal_7.4.0.dfsg.1-2.dsc
47ce052bb03af79d8f71d8e5d18647f12fda190bedd9da0f391697049f1feb14 9960312
heimdal_7.4.0.dfsg.1.orig.tar.gz
ea4359d8aefdda794352d82111866a72bf0b698a3afbc3a55208ef68c8cb47f5 128348
heimdal_7.4.0.dfsg.1-2.debian.tar.xz
fb3472dc0761f63705eaacb0def883d780dc92a8b26628e73090c5044becb56c 183298
heimdal-clients_7.4.0.dfsg.1-2_i386.deb
fd54d3884d271d4c44b063a05c6e2cb1984f1945a4f5705d312e28ac8efc82ce 4747994
heimdal-dbg_7.4.0.dfsg.1-2_i386.deb
965bce75d82be36699d685acee3380eeed502fd419e04a770fa687e3d9f19e07 241568
heimdal-dev_7.4.0.dfsg.1-2_i386.deb
254b7f4725f65d1dc86f1a262cf64b0d0f51872531032b7863f03dc5b370a8b7 106028
heimdal-docs_7.4.0.dfsg.1-2_all.deb
51bdcd31d0d5b3983ca93524fcaf4f64b4c33fc595953a8a25696690a32804ae 57712
heimdal-kcm_7.4.0.dfsg.1-2_i386.deb
ef8e7759c3ae85a86b32c178b83293a46947c1bd5f8e3063aadbaaf62cecd62c 132570
heimdal-kdc_7.4.0.dfsg.1-2_i386.deb
cecda407868d29f9cb22027a33c2e04c823965ebe5fda1e78f208812218cfad8 1275180
heimdal-multidev_7.4.0.dfsg.1-2_i386.deb
e673569faf2e1109a1a5df6476cc40ff8be66c91f683b60b95d43913e900d0c4 35512
heimdal-servers_7.4.0.dfsg.1-2_i386.deb
a3ce01b5754f40a440bcf0b8ab76ab0f7262bf83db8b557972015dcd30420fc9 14584
heimdal_7.4.0.dfsg.1-2_i386.buildinfo
61d404d6d477b9919d6119094157317049f4e1f452af1e7568ae49829b9dedd7 217054
libasn1-8-heimdal_7.4.0.dfsg.1-2_i386.deb
55300a83eb9da5f7ff2991990f9e5b4ef5580298fbea9d08532b0562a36da3f0 133418
libgssapi3-heimdal_7.4.0.dfsg.1-2_i386.deb
d813231117c3f5b7f91dc0782288c66c8f943a40e76993c7454a4d25b84fd4fb 119858
libhcrypto4-heimdal_7.4.0.dfsg.1-2_i386.deb
b6a18ca28184416f9ce21a67d18bdfc0c2826f31cf7ddf4fe2ea4ee0caf464a7 95672
libhdb9-heimdal_7.4.0.dfsg.1-2_i386.deb
8597b992332deff43508ec3ef7c69076d490037cf94c02f03d6b515cb8576753 56690
libheimbase1-heimdal_7.4.0.dfsg.1-2_i386.deb
8c08bcc3a6d86b2e3d1ef5837d5e64f3ab09c2d04bf9074f902be4db56418224 42066
libheimntlm0-heimdal_7.4.0.dfsg.1-2_i386.deb
c7b917f3e06c4a47a1d3907dc84ed91090ac3987a2b87438d045472387d72c05 143630
libhx509-5-heimdal_7.4.0.dfsg.1-2_i386.deb
73835db8d41d04b809a9d97b6535b03fb17b2e2a67d8646e63424792428b2ca2 45824
libkadm5clnt7-heimdal_7.4.0.dfsg.1-2_i386.deb
9e542a090709a1ff183d25a9db34be02c9b4ef144d0ad84a91ac7cc480a78b8b 64664
libkadm5srv8-heimdal_7.4.0.dfsg.1-2_i386.deb
610a213e6e08973c8229a38cd506f447d6b30f68da92ee458449c37822832294 42444
libkafs0-heimdal_7.4.0.dfsg.1-2_i386.deb
eb1207bd482371ebbb7caecbd1b2d11d5246cf745b2e86ba0fd6e1cc8387a3d9 85442
libkdc2-heimdal_7.4.0.dfsg.1-2_i386.deb
3f57c30556c5740a704f81900b33f25a6d92439fb47f84e3a8b0ce88dedf55d7 260498
libkrb5-26-heimdal_7.4.0.dfsg.1-2_i386.deb
e9640d37efcdbf9cb68a16f47db49c5c392e67124507c35b6e5cb741051473c1 50992
libotp0-heimdal_7.4.0.dfsg.1-2_i386.deb
4b7d751c076242e6fadde3e75ec0226d0414da45e8620a38b4712652ef8d994e 69276
libroken18-heimdal_7.4.0.dfsg.1-2_i386.deb
c3b0abfed54283e1b13fe759b14e3798a1cb88615433ab98793ec570589061fb 38058
libsl0-heimdal_7.4.0.dfsg.1-2_i386.deb
f8b57dc36bc47838282bbf457dc88dc8f419d47af02b99a58aa2b8de854c27f6 73910
libwind0-heimdal_7.4.0.dfsg.1-2_i386.deb
Files:
21856b049f327a784569445ba4a64a26 3605 net optional heimdal_7.4.0.dfsg.1-2.dsc
811faa1b41f68f6942e247b668501afb 9960312 net optional
heimdal_7.4.0.dfsg.1.orig.tar.gz
f739e261f0c7e30bfc12c5fd2834ab81 128348 net optional
heimdal_7.4.0.dfsg.1-2.debian.tar.xz
0c93b6ed8a9f8a7e19cc3161f35d4cb9 183298 net extra
heimdal-clients_7.4.0.dfsg.1-2_i386.deb
57d788e6a16e6193b94f59cffefbd845 4747994 debug extra
heimdal-dbg_7.4.0.dfsg.1-2_i386.deb
87ea55771564878bce3bc7480463271f 241568 devel extra
heimdal-dev_7.4.0.dfsg.1-2_i386.deb
4ad2d2a94a5943098580bbb47eae67fc 106028 doc extra
heimdal-docs_7.4.0.dfsg.1-2_all.deb
71fefce48ed8c61260cb0e814403d07d 57712 net extra
heimdal-kcm_7.4.0.dfsg.1-2_i386.deb
232d591635f5bcd498d212d347901f9f 132570 net extra
heimdal-kdc_7.4.0.dfsg.1-2_i386.deb
59a53186adf52bda6d85604b311c0cab 1275180 devel extra
heimdal-multidev_7.4.0.dfsg.1-2_i386.deb
88b0d6210b7323a06dd9b9025b3c8d2c 35512 net extra
heimdal-servers_7.4.0.dfsg.1-2_i386.deb
fbdb7fa7a0555cd18d1939af3df022c3 14584 net optional
heimdal_7.4.0.dfsg.1-2_i386.buildinfo
6fbdde037de40c703e490900bf0c7662 217054 libs optional
libasn1-8-heimdal_7.4.0.dfsg.1-2_i386.deb
f00914b3b34161149fb3ee6958b81a81 133418 libs optional
libgssapi3-heimdal_7.4.0.dfsg.1-2_i386.deb
bf1ca5ad46563840ca6a86d8ad121fd2 119858 libs optional
libhcrypto4-heimdal_7.4.0.dfsg.1-2_i386.deb
713ea8e57a27ebda8847fa02fdc83e26 95672 libs optional
libhdb9-heimdal_7.4.0.dfsg.1-2_i386.deb
51533a8e88092531c33c678d7281d0bb 56690 libs optional
libheimbase1-heimdal_7.4.0.dfsg.1-2_i386.deb
81c129081e12c37c40e3be7d1e183352 42066 libs optional
libheimntlm0-heimdal_7.4.0.dfsg.1-2_i386.deb
3eb43e141ba186b624d1a185f0aafce5 143630 libs optional
libhx509-5-heimdal_7.4.0.dfsg.1-2_i386.deb
46b59ca82a3abf4c1fc93c13d14e4860 45824 libs optional
libkadm5clnt7-heimdal_7.4.0.dfsg.1-2_i386.deb
c20541793656c86d348d8fbc65ee6c48 64664 libs optional
libkadm5srv8-heimdal_7.4.0.dfsg.1-2_i386.deb
abcfa79a499a753f04691e17e20bf983 42444 libs extra
libkafs0-heimdal_7.4.0.dfsg.1-2_i386.deb
d60f008c4f9dce2e34fc321892d7501d 85442 libs extra
libkdc2-heimdal_7.4.0.dfsg.1-2_i386.deb
9ec8dafeab51185147d04ca819621a38 260498 libs optional
libkrb5-26-heimdal_7.4.0.dfsg.1-2_i386.deb
2a69189635305ffda2cfc984686e8456 50992 libs extra
libotp0-heimdal_7.4.0.dfsg.1-2_i386.deb
7cca29c46260fe1419c0851ce87ab789 69276 libs optional
libroken18-heimdal_7.4.0.dfsg.1-2_i386.deb
b21a2eab96b1f7e3f63c0c93bb7efe88 38058 libs extra
libsl0-heimdal_7.4.0.dfsg.1-2_i386.deb
176d6e90524517142aba39e6e497b7e5 73910 libs optional
libwind0-heimdal_7.4.0.dfsg.1-2_i386.deb
-----BEGIN PGP SIGNATURE-----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=8zuR
-----END PGP SIGNATURE-----
--- End Message ---
