Control: severity -1 important

Re: Matthew Gabeler-Lee 2013-12-18 
<[email protected]>
> On 2013-12-18 04:49, Christoph Berg wrote:
> >a late followup here: which kind of authentication do you have
> >configured there? I'd assume the problem only affects "pam".
> 
> Actually I'm only using md5 and ident with a username map.

I've just tried the upgrade, and it is also there with "peer"
authentication because that also goes through nss, so it has the same
problem as the usual "pam upgrade needs to restart services":

Preparing to replace libc6-dev:amd64 2.13-38 (using 
.../libc6-dev_2.17-97_amd64.deb) ...
Unpacking replacement libc6-dev:amd64 ...
Preparing to replace libc-dev-bin 2.13-38 (using 
.../libc-dev-bin_2.17-97_amd64.deb) ...
Unpacking replacement libc-dev-bin ...
Preparing to replace locales 2.13-38 (using .../locales_2.17-97_all.deb) ...
Unpacking replacement locales ...
Preparing to replace libc6:amd64 2.13-38 (using .../libc6_2.17-97_amd64.deb) ...
Checking for services that may need to be restarted...
Checking init scripts...
Unpacking replacement libc6:amd64 ...
Processing triggers for man-db ...
Setting up libc6:amd64 (2.17-97) ...
Checking for services that may need to be restarted...
Checking init scripts...
Nothing to restart.
Setting up libc-dev-bin (2.17-97) ...
Setting up libc6-dev:amd64 (2.17-97) ...
Setting up locales (2.17-97) ...
Installing new version of config file /etc/locale.alias ...
Generating locales (this might take a while)...
  en_US.UTF-8... done
  ru_RU.ISO-8859-5... done
  ru_RU.UTF-8... done
Generation complete.
(base-wheezy-amd64.cow)root@pgdgbuild:/# psql -h localhost -p 5433 -U postgres
Password for user postgres: 
psql (9.1.11)
SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
Type "help" for help.

postgres=# \q
(base-wheezy-amd64.cow)root@pgdgbuild:/# sudo -u postgres psql
psql: FATAL:  Peer authentication failed for user "postgres"

(base-wheezy-amd64.cow)root@pgdgbuild:/# cat 
/var/log/postgresql/postgresql-9.1-main.log
...
2013-12-18 16:42:47 UTC LOG:  local user with ID 101 does not exist
2013-12-18 16:42:47 UTC FATAL:  Peer authentication failed for user "postgres"

> >(I'm downgrading the bug to normal because "pam" is not the default
> >configuration.)
> 
> No problem.  I'm also no longer using 9.1, and there hasn't been
> another big libc upgrade to see if the issue still affects 9.3.

That's a libc/nss/pam problem, so 9.3 will have it likewise.

We'll see if we can hook into the existing needs-restart logic in libc/etc.

Thanks for spotting this,
Christoph
-- 
[email protected] | http://www.df7cb.de/

_______________________________________________
Pkg-postgresql-public mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-postgresql-public

Reply via email to