Package: fusiondirectory
Version: 1.0.19-1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

after upgrading my fusiondirectory installation from jessie (1.0.8.2-5)
to stretch (1.0.19-1) the package has become practically unusable.
(that's after adding workarounds for #854398 and ).

e.g. trying to edit anything, i get the following on saving:
> LDAP operation failed!
>
> Object: cn=config,ou=fusiondirectory,dc=example,dc=com
>
> Error: Undefined attribute type - attribute: fdHttpHeaderAuthHeaderName
> (fdHttpHeaderAuthHeaderName: attribute type undefined, while operating
> on 'cn=config,ou=fusiondirectory,dc=iem,dc=at' using LDAP server
> 'ldaps://ldap.example.com:636')o

followed by:
> Error when saving:
> The entry cn=config,ou=fusiondirectory,dc=example,dc=com is not existing 

OR trying to manage my users (by clicking on the "Users" menu), i get
two pages of PHP code thrown in my face:
> ip) { logging::log('security', 'login', '', array(), 'main.php called
> with session which has a changed IP address.'); header ('Location:
> index.php?signout=1&message=newip'); exit; } $config =
> session::global_get('config'); /* If SSL is forced, just forward to the
> SSL enabled site */ if (($config->get_cfg_value('forcessl') == 'TRUE')
> && ($ssl != '')) { header ("Location: $ssl"); exit; }
> timezone::setDefaultTimezoneFromConfig(); /* Check for invalid sessions
> */ if (session::global_get('_LAST_PAGE_REQUEST') != '') { /* check
> FusionDirectory.conf for defined session lifetime */ $max_life =
> $config->get_cfg_value('sessionLifetime', 60 * 60 * 2); if ($max_life >
> 0) { /* get time difference between last page reload */ $request_time =
> (time() - session::global_get('_LAST_PAGE_REQUEST')); /* If page wasn't
> reloaded for more than max_life seconds * kill session */ if
> ($request_time > $max_life) { session::destroy();
> logging::log('security', 'login', '', array(), 'main.php called with
> expired session - logging out'); header ('Location:
> index.php?signout=1&message=expired'); exit; } } }
> session::global_set('_LAST_PAGE_REQUEST', time()); @DEBUG (DEBUG_CONFIG,
> __LINE__, __FUNCTION__, __FILE__, $config->data, "config"); /* Set
> template compile directory */ $smarty->compile_dir =
> $config->get_cfg_value("templateCompileDirectory", SPOOL_DIR); /* Preset
> current main base */ if (!session::global_is_set('CurrentMainBase')) {
> session::global_set('CurrentMainBase', get_base_from_people($ui->dn)); }
> initLanguage(); /* Prepare plugin list */ $plist = load_plist(); /*
> Check for register globals */ if (isset($global_check) && 

no warning has been emitted when I upgraded from jessie to stretch.
esp. no NEWS have indicated that anything could possibly go wrong.

there are some upstream notes in /usr/share/doc/fusiondirectory/docs/ about
upgrading, indicating that this will require quite a lot of
schema-changes and similar.
however, the upstream notes are very incremental (e.g. 1.0.8.1 ->
1.0.8.2) and do not make it easy to upgrade from jessie to stretch.

since fusiondirectory is a package to manage core infrastructure (like
user databases and networking devices), extra should be taken to allow
smooth upgrades between releases.

please fix this for the next point release (and please provide some
instructions for the 9.0-users on how to handle their broken
installations)

PS: thanks for packaging fusiondirectory!


-- System Information:
Debian Release: 9.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-3-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=C 
(charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages fusiondirectory depends on:
ii  apache2 [httpd]                     2.4.25-3+deb9u1
ii  fusiondirectory-smarty3-acl-render  1.0.19-1
ii  gettext                             0.19.8.1-2
ii  javascript-common                   11
ii  libarchive-extract-perl             0.80-1
ii  libcrypt-cbc-perl                   2.33-1
ii  libfile-copy-recursive-perl         0.38-1
ii  libjs-prototype                     1.7.1-3
ii  libjs-scriptaculous                 1.9.0-2
ii  libnet-ldap-perl                    1:0.6500+dfsg-1
ii  libpath-class-perl                  0.37-1
ii  libperl5.24 [libdigest-sha-perl]    5.24.1-3
ii  libterm-readkey-perl                2.37-1
ii  libxml-twig-perl                    1:3.50-1
ii  openssl                             1.1.0f-3
ii  php                                 1:7.0+49
ii  php-cas                             1.3.3-4
ii  php-curl                            1:7.0+49
ii  php-fpdf                            3:1.8.1.dfsg-2
ii  php-gd                              1:7.0+49
ii  php-imagick                         3.4.3~rc2-2
ii  php-imap                            1:7.0+49
ii  php-ldap                            1:7.0+49
ii  php-recode                          1:7.0+49
ii  php7.0 [php]                        7.0.19-1
ii  php7.0-cli [php-cli]                7.0.19-1
ii  php7.0-curl [php-curl]              7.0.19-1
ii  php7.0-gd [php-gd]                  7.0.19-1
ii  php7.0-imap [php-imap]              7.0.19-1
ii  php7.0-ldap [php-ldap]              7.0.19-1
ii  php7.0-recode [php-recode]          7.0.19-1
ii  schema2ldif                         1.2-1
ii  smarty-gettext                      1.5.0-2
ii  smarty3                             3.1.31+20161214.1.c7d42e4+selfpack1-2

fusiondirectory recommends no packages.

Versions of packages fusiondirectory suggests:
pn  argonaut-server         <none>
ii  fusiondirectory-schema  1.0.19-1
ii  slapd                   2.4.44+dfsg-5

-- Configuration Files:
/etc/fusiondirectory/fusiondirectory-apache.conf changed [not included]

-- no debconf information

Reply via email to