Your message dated Tue, 25 Aug 2026 19:34:25 +0000
with message-id <[email protected]>
and subject line Bug#939717: fixed in debian-edu-config 2.13.1
has caused the Debian Bug report #939717,
regarding Failure to install tjener if the first username is not full ASCII
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
939717: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939717
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: debian-edu-config
Version: 2.10.65
Severity: normal
Hi,
Providing non-ASCII characters in the first user name during d-i makes
the installation fail to set up correctly ldap and thus breaks all
usability of tjener (krb5, isc-dhcp and samba fail to start after the
installation, GOsa is not set up, one can’t login with the initial
credentials…).
Looking at /var/log/installer/syslog, it looks like the
ldap-debian-edu-install fails:
> cf-agent[…]: CFEngine(agent) Executing 'no timeout' ...
> '/usr/bin/ldap-debian-edu-install'
> cf-agent[…]: CFEngine(agent) Finished command related to promiser
> '/usr/bin/ldap-debian-edu-install' -- an error occurred, returned 1
> cf-agent[…]: CFEngine(agent) Q: "...du-install": iconv: illegal input
> sequence at position 1
> cf-agent[…]: CFEngine(agent) Last 1 quoted lines were generated by promiser
> '/usr/bin/ldap-debian-edu-install'
> cf-agent[…]: CFEngine(agent) Completed execution of
> '/usr/bin/ldap-debian-edu-install'
(the not failing log split more than two hundred lines, the first ones
starting with slapadd:).
Reproducing is easy, just using e.g., “tété” as user full name (the
preseed-like passwd/user-fullname string) makes a broken system.
Regards
David
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: debian-edu-config
Source-Version: 2.13.1
Done: Mike Gabriel <[email protected]>
We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mike Gabriel <[email protected]> (supplier of updated debian-edu-config
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 25 Aug 2026 21:18:07 +0200
Source: debian-edu-config
Architecture: source
Version: 2.13.1
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <[email protected]>
Changed-By: Mike Gabriel <[email protected]>
Closes: 893394 939717 1008597 1055648 1065564 1136493
Changes:
debian-edu-config (2.13.1) unstable; urgency=medium
.
[ Daniel Teichmann ]
* testsuite/ldap-server: Check /var/lib/ldap exists and is owned by
openldap:openldap. Regression check for Debian bug #1144741.
* debian/debian-edu-config.lintian-overrides: Fix stale reference. (Fixes
commit: 63575146)
* Drop unused wicd preconnect hook.
wicd is no longer in Debian. The hook was the only remaining wicd
integration and is not referenced anywhere else in the package.
* testsuite/hostname: escape regex dot and exit non-zero on failure.
The unescaped dot in the 'tjener.intern' grep matched any character.
Escape it so the FQDN check is exact. Both error paths now exit 1 so a
broken hostname fails the test instead of silently passing.
* share/debian-edu-config/d-i/pre-pkgsel: resolve leftover merge conflict.
* debian/control: Depend on iproute2
* testsuite/network: Stop using net-tools, use ip from iproute2 instead
* ldap-tools/ldap-debian-edu-install: Get MAC addresses via ip link instead
of ifconfig
* share/debian-edu-config/testsuite-lib.sh: Use ss instead of netstat
* testsuite/ldap-server: Use ss instead of netstat
* debian/control: Drop Depends: net-tools
* share/debian-edu-config/d-i/pre-pkgsel: Tighten hostname= parsing and
sanitization from /proc/cmdline.
Handle hostname= as first cmdline token, ignore empty values and
strip characters invalid in hostnames.
* share/debian-edu-config/d-i/pre-pkgsel: strip hyphens only when present.
Use 's/^-+//' / 's/-+$//' instead of '-*' so the substitution only
fires when there actually is a leading/trailing hyphen to remove.
* tools/create-debian-edu-certs: Switch root CA and server key generation
to ECDSA prime256v1.
RSA with 2048 bits is the bare minimum with OpenSSL 3. Replace
'openssl genrsa' with 'openssl genpkey -algorithm EC' using the
prime256v1 (secp256r1 / NIST P-256) curve.
* tools/create-server-cert: Switch key generation to ECDSA prime256v1 and
drop keyEncipherment key usage
keyEncipherment is only meaningful for RSA keys. For ECDSA server
certificates only the digitalSignature key usage is applicable
(RFC 5480).
* v3.cnf: Drop keyEncipherment from server cert key usage
keyEncipherment is not applicable to ECDSA keys (RFC 5480), only
digitalSignature is required for TLS server certificates.
.
[ Mike Gabriel ]
* debian/control: Add to D: (debian-edu-config): procps. (Closes: #1136493).
* ldap-tools/ldap-debian-edu-install: Make sure interactions with debconf
are UTF-8 based.
This resolves GECOS field transliteration after having retrieved
debian-edu-config/first-user-fullname from the debconf db.
(Closes: #939717).
* share/debian-edu-config/d-i/pre-pkgsel: white-space cleanup
* share/debian-edu-config/d-i/pre-pkgsel: Use 'tjener' in /etc/hostname
and derive FQDN from /etc/hosts. (Closes: #893394).
* testsuite/hostname: Test that /etc/hostname on installation profile
Main-Server is set correctly
* cf3/cf.cfengine3: Stop cfengine3 service on all Debian Edu machines.
Esp. cf-execd (calling cf-agent command) clobbers the log on all Debian
Edu clients (Debian Edu 12 and onwards) and thus on syslog.intern (aka
tjener).
In Debian Edu, we use cfengine3 for managing configuration adjustments
via manual invocation of the cf-agent command, but we don't support
(yet?) to use cfengine3 for constant system management.
Partially addresses #1051834.
* sbin/debian-edu-ltsp-install: Use KERNEL_PARAMETERS variable, if we
define it
* sbin/debian-edu-ltsp-install: Fix variable interpretation in sed commands
... by using double quotes, not single quotes.
* sbin/update-hostname-from-ip: white-space cleanup
* sbin/update-hostname-from-ip: Stop using net-tools, use ip command from
iproute2 instead
* share/debian-edu-config/d-i/pre-pkgsel: Support hostname override via
/proc/cmdline. (Closes: #1008597).
.
[ Wolfgang Schweer ]
* share/debian-edu-config/d-i/pre-pkgsel: Cleanup pre-pkgsel from cruft.
(Closes: #1055648).
.
[ Serhii Horichenko ]
* ltsp: Add 'quiet splash' to hide boot details on clients.
(Closes: #1065564).
* etc/nagios3/debian-edu/commands.cfg: Add key -l for check_apt to list
packages available for upgrade.
Checksums-Sha1:
fe70b7587cc98fe326ff354208dcaf1fa5c309a7 1978 debian-edu-config_2.13.1.dsc
7b9bce2c8fb1933265f3e4faaebacca526f4b101 365232 debian-edu-config_2.13.1.tar.xz
c503d773c0ac0cf14ff0aeeae63c746d0279ad5c 6689
debian-edu-config_2.13.1_source.buildinfo
Checksums-Sha256:
16fb9c0e2b784f8f7f5367a6187d96d99a461e68dcef18d5a481832afd83c609 1978
debian-edu-config_2.13.1.dsc
d652a233635ff9b55533692aa26194b397b215f1cce42545ddf33dd660332fdc 365232
debian-edu-config_2.13.1.tar.xz
ed8fc89632bd4d9c1a6376b18d785199ab0abeff5acf98e52561dd18c1a317ee 6689
debian-edu-config_2.13.1_source.buildinfo
Files:
2523fe7a0cc1260e8f98261aeebc5969 1978 misc optional
debian-edu-config_2.13.1.dsc
72f2c0838313ada04d7c748088370614 365232 misc optional
debian-edu-config_2.13.1.tar.xz
e5cd2ea9457dc485e2b7a501dcc9a466 6689 misc optional
debian-edu-config_2.13.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=oFlx
-----END PGP SIGNATURE-----
pgpJ_xhPOg4Hf.pgp
Description: PGP signature
--- End Message ---
