Control: tags -1 + wontfix
Op 25-01-2026 om 10:33 schreef Andreas Tille:
Source: lcas-lcmaps-gt4-interface
Version: 0.3.1-1
Severity: important
X-Debbugs-Cc: Dennis van Dok <[email protected]>, [email protected], Debian Science Team
<[email protected]>, Debian HPC Team
<[email protected]>, Package Salvaging Team <[email protected]>
Dear maintainer,
I included Debian Science team and Debian HPC team into this question
since here should be the experts whether this package might have some
remaining use inside Debian.
I suggest removing lcas-lcmaps-gt4-interface from Debian for the
following reasons:
* relies on the Globus Toolkit (GT4), which has reached "End of Life"
and is no longer maintained.
While that may be true, there are still people who monitor the software
for security reasons.
* orphaned upstream so does not receive security patches, posing
a risk to authentication workflows.
How was this conclusion reached? I know upstream maintainer and I know
that security patches *will* be provided if issues come up.
* uses old X.509 GSI standards that are often incompatible with modern
OpenSSL versions and have been replaced by OAuth2/OIDC tokens.
This is indeed legacy software, but for the moment still used in some
scientific communities while a transition to tokens is underway.
Removing it from Debian is fine, but then we will still have to provide
those communities with Debian compatible packages through other channels.
* no function outside of legacy scientific grid computing. For standard
servers or desktops, it is useless
I was not aware that this was a requirement for inclusion ;-)
* removal would reduces technical debt and prevents potential
dependency conflicts during future Debian upgrades.
That is highly unlikely, unless the entirity of the Globus Toolkit is
also on the block. I think the fate of this package is tied to the GT.
* there are no (build-)dependencies to other packages
* There are no votes in popcon
Which I can understand as most site admins do not enable this for their
servers.
https://qa.debian.org/popcon-graph.php?packages=lcas-lcmaps-gt4-interface&show_installed=on&show_vote=on&want_legend=on&want_ticks=on&from_date=&to_date=&hlght_date=&date_fmt=%25Y-%25m&beenhere=1
* There seems to be no active maintainer
Not true ;-)
This package was highlighted in the Bug of the Day[1] initiative, which
aims to introduce newcomers to manageable tasks and guide them through
the workflow to solve them. The focus of this initiative is on migrating
packages to Salsa, as it's a great way to help newcomers become familiar
with a consistent Git-based workflow.
I'll check it out, thanks.
Kind regards
Andreas.
[1] https://salsa.debian.org/qa/tiny_qa_tools/-/wikis/Tiny-QA-tasks
-- System Information:
Debian Release: forky/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (50, 'buildd-unstable'),
(1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.18.5+deb14-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
