Package: ldapscripts
Version: 1.9.0-2
Severity: minor
Tags: patch
User: [email protected]
Usertags: origin-ubuntu maverick ubuntu-patch
In Ubuntu, we've applied the attached patch to achieve the following:
* etc/ldapscripts.conf: Changed default password generation for initial
usage. Now uses "pwgen", as there is often not enough entropy to
use the previous default, causing blocking/freezing. (LP: #602540)
* debian/control:
- Depend on pwgen.
We thought you might be interested in doing the same.
-- System Information:
Debian Release: squeeze/sid
APT prefers maverick-updates
APT policy: (500, 'maverick-updates'), (500, 'maverick-security'), (500,
'maverick')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.35-14-generic (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru ldapscripts-1.9.0/debian/control ldapscripts-1.9.0/debian/control
--- ldapscripts-1.9.0/debian/control 2010-05-11 12:53:10.000000000 +0100
+++ ldapscripts-1.9.0/debian/control 2010-08-09 17:15:37.000000000 +0100
@@ -10,7 +11,7 @@
Package: ldapscripts
Architecture: all
-Depends: ${misc:Depends}, ldap-utils
+Depends: ${misc:Depends}, ldap-utils, pwgen
Recommends: sharutils
Suggests: libpam-ldap
Description: Add and remove user and groups (stored in a LDAP directory)
diff -Nru ldapscripts-1.9.0/debian/patches/07_password_generation.patch ldapscripts-1.9.0/debian/patches/07_password_generation.patch
--- ldapscripts-1.9.0/debian/patches/07_password_generation.patch 1970-01-01 01:00:00.000000000 +0100
+++ ldapscripts-1.9.0/debian/patches/07_password_generation.patch 2010-08-09 17:17:23.000000000 +0100
@@ -0,0 +1,22 @@
+Description: The default password generation method relies on having sufficient entropy,
+ and blocks until there is sufficient content in the pool. Changing to "pwgen" util,
+ whilst being slightly less secure; does provide a sane default for an initial password.
+Author: Dave Walker (Daviey) <[email protected]>
+Bug-Debian: http://bugs.debian.org/**TBC**
+Bug-Ubuntu: https://launchpad.net/bugs/602540
+Last-Update: 2010-08-09
+
+--- ldapscripts-1.9.0.orig/etc/ldapscripts.conf
++++ ldapscripts-1.9.0/etc/ldapscripts.conf
+@@ -59,9 +59,9 @@ CREATEHOMES="no" # Create home dire
+ # Command-line used to generate a password for added users (you may use %u for username here)
+ # WARNING !!!! This is evaluated, everything specified here will be run !
+ # Special value "<ask>" will ask for a password interactively
+-PASSWORDGEN="cat /dev/random | LC_ALL=C tr -dc 'a-zA-Z0-9' | head -c8"
++#PASSWORDGEN="cat /dev/random | LC_ALL=C tr -dc 'a-zA-Z0-9' | head -c8"
+ #PASSWORDGEN="head -c8 /dev/random | uuencode -m - | sed -n '2s|=*$||;2p' | sed -e 's|+||g' -e 's|/||g'"
+-#PASSWORDGEN="pwgen"
++PASSWORDGEN="pwgen -s"
+ #PASSWORDGEN="echo changeme"
+ #PASSWORDGEN="echo %u"
+ #PASSWORDGEN="<ask>"
diff -Nru ldapscripts-1.9.0/debian/patches/series ldapscripts-1.9.0/debian/patches/series
--- ldapscripts-1.9.0/debian/patches/series 2009-12-03 15:43:29.000000000 +0000
+++ ldapscripts-1.9.0/debian/patches/series 2010-08-09 17:17:45.000000000 +0100
@@ -2,3 +2,4 @@
02_debian_config.patch
03_fix_manpages.patch
05_mktemp.patch
+07_password_generation.patch
