Your message dated Mon, 31 Jan 2022 11:35:41 +0000
with message-id <[email protected]>
and subject line Bug#991914: fixed in shadow 1:4.11.1+dfsg1-1
has caused the Debian Bug report #991914,
regarding YESCRYPT support information missing in config and man pages
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
991914: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991914
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: login
Version: 1:4.8.1-1
The YESCRYPT method not listed in man pages of
login.defs, YESCRYPT_COST_FACTOR option should be listed in login.defs too
(same for man page).
~# grep -B10 "ENCRYPT_METHOD " /etc/login.defs
#
# If set to MD5 , MD5-based algorithm will be used for encrypting password
# If set to SHA256, SHA256-based algorithm will be used for encrypting
password
# If set to SHA512, SHA512-based algorithm will be used for encrypting
password
# If set to DES, DES-based algorithm will be used for encrypting password
(default)
# Overrides the MD5_CRYPT_ENAB option
#
# Note: It is recommended to use a value consistent with
# the PAM modules configuration.
#
ENCRYPT_METHOD SHA512
Which is inconsistent with PAM common-password configuration
~# cat /etc/pam.d/common-password |grep pam_unix.so
password [success=1 default=ignore] pam_unix.so obscure yescrypt
--- End Message ---
--- Begin Message ---
Source: shadow
Source-Version: 1:4.11.1+dfsg1-1
Done: Balint Reczey <[email protected]>
We believe that the bug you reported is fixed in the latest version of
shadow, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Balint Reczey <[email protected]> (supplier of updated shadow package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 31 Jan 2022 10:33:28 +0100
Source: shadow
Built-For-Profiles: noudeb
Architecture: source
Version: 1:4.11.1+dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: Shadow package maintainers
<[email protected]>
Changed-By: Balint Reczey <[email protected]>
Closes: 960318 960637 991914
Changes:
shadow (1:4.11.1+dfsg1-1) unstable; urgency=medium
.
* debian/NEWS: Fix version and release of latest entry
.
shadow (1:4.11.1+dfsg1-0exp1) experimental; urgency=medium
.
* login: Don't list su command as shipped (Closes: #960637)
* Install nologin /usr/sbin without patching makefiles
* debian/copyright: Fully rewrite the file based on upstream license update
and exclude contrib/atudel from upstream tarball
* debian/watch: Repack upstream tarball with +dfsg1 suffix
* debian/upstream/signing-key.asc: Update upstream signing key
* New upstream version 4.11.1+dfsg1
* Refresh patches
* Set NONEXISTENT to /nonexistent in shipped login.defs (Closes: #960318)
* Enable newly added yescrypt support
* Include YESCRYPT options in shipped login.defs (Closes: #991914)
* debian/rules: Stop using --disable-shared to build shared libraries
* Ship the libsubid4 and libsubid-dev packages and ship getsubids in uidmap
* debian/rules: Drop obsolete variable setting
* debian/login.lintian-overrides: Drop unused override
* debian/control: Make the Vcs-Browser URL canonical
* debian/login.defs: List new GRANT_AUX_GROUP_SUBIDS option in shipped
login.defs
* debian/NEWS: Mention new login behaviour regarding empty password field.
Also set PREVENT_NO_AUTH in shipped login.defs accordingly.
* debian/tests: Cherry-pick part of autopkgtest from Ubuntu.
Thanks to Michael Vogt for the more extensive suite in Ubuntu
* debian/login.defs: Set default subuid and subgid ranges
Checksums-Sha1:
623d3dfc92b5969b67df8b5ae660982dff8101da 2416 shadow_4.11.1+dfsg1-1.dsc
18a7289398e0e668a99f2144f5bb3fa83234aa12 77032
shadow_4.11.1+dfsg1-1.debian.tar.xz
5be6bcc81d762e2d087a50fa5072774cc5d22a39 9882
shadow_4.11.1+dfsg1-1_source.buildinfo
Checksums-Sha256:
f6a8d87656c7b6d51a4988846714c46179f7ffe9fd32bf1d2eabcd49b5365338 2416
shadow_4.11.1+dfsg1-1.dsc
fd87c76f31ee41a03b0faf9916ce606069de8f7ec5c54fde487a525b3f12850b 77032
shadow_4.11.1+dfsg1-1.debian.tar.xz
035a1a6a7d61902d4c795495f1962ffa8e6fc6ca4798fde962ef72dfb7fd1679 9882
shadow_4.11.1+dfsg1-1_source.buildinfo
Files:
3321c1b9ec6a6fa19cf8fda985081aa8 2416 admin required shadow_4.11.1+dfsg1-1.dsc
e7d41763c2e43ed7f69393ec98a4a7ac 77032 admin required
shadow_4.11.1+dfsg1-1.debian.tar.xz
8f2bfd0785318fa988d69421b410b475 9882 admin required
shadow_4.11.1+dfsg1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEI/PvTgXX55rLQUfDg6KBkWslS0UFAmH3w4sACgkQg6KBkWsl
S0X1+hAAw+K1Vse6lJoecFC3I+gTvNu7x5Cg2p8WGYyQWAEf0hNgBzSQ03F2cBME
XAQDepv0ojWbrNLQlUkwcnQyZ0TO+GI5Y3E8Xf9IMRUMgoWaeNqZslVdkhjXBaEz
tEDKAIljwfWlwnnhstMfBcEkq94RKMe/Vfi8WbR94ZUliwqnKe2W2NAgSRzMjPPP
2mQE1IUaYFHcHrx6cqJRZtQMETnmH4V5lkyTxNATFK/4DBSnprDpW+01SCH4gqhC
MdUQPtAgbCF+tQSh7WQJDVDpj+ZSb8S7ix9zX1q9MmZ/WMgouperD+tgk2j1ghUR
hud14w7Tyb+PBU9mt2YbePH6tZMtd8RGRrCYnDZCigeYBY3yVyRrw0bv3PMSYl7c
/YLLMYgcMgzPta37Q351jGWRXbDHL62oZTAs66dNF7UtnYX2o0qJGfIeCrgb2fQ8
ORlvPbqjcm9R1p+Qw5Fg5LcawMW9Wp7f+hrFBE9IGKko+Y2OfDeBGwZkS0XTuj2g
vRKCI5aVcRkdK8bxi+Ob45f4fuCdTlskNiAOYYHIZnhGhGYdcnaafLef/E/D6VSx
PVgMi5nq7aw3S385S/jE8loTfIDBlciXCLBXGYgLjVj6pAvX0UiiHcSlqOJqE0GW
kzDGkWaN8s7oK/Uh7PsXxVP9lleiy/UqiWXQj++7Z99/cX4daGs=
=6Yn+
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-shadow-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-shadow-devel
