Bug#433095: DDPO: does not show all my sponsored packages
reopen 433095 thanks On Wednesday 18 July 2007 00:29, Raphael Hertzog wrote: The last run happened 6 weeks ago: https://rt.debian.org/Ticket/Display.html?id=102 Thijs, did you create your subkey recently ? No, but my (current) key was only added to the Debian keyring on the 18th of June. The fact that the upload is accepted even if the key is not associated to a uid proves either that projectb doesn't properly identify subkeys or that you can't rely on projectb to do this for you. I don't know what interpretation is the right one. :-) I'm taking the liberty to reopen this bug because from what I read in the buglog, these issues are not entirely resolved. Christoph wrote: problen doesn't resolve itself with then next import-ldap-fingerprints run (which happens every few weeks). I'm not sure what every few weeks means, but it's definately more than 5 weeks ago that my key was added. BTW, isn't this an automated or automatable process? Thijs pgpcVbLvgFfKs.pgp Description: PGP signature
Bug#433095: DDPO: does not show all my sponsored packages
Re: Raphael Hertzog 2007-07-17 [EMAIL PROTECTED] id | uid | name --++- 1319 | thijs | Thijs Kinkhorst id | fingerprint| uid --+--+-- 5823 | F7867D1E8EEB8DE7EBBE05BF25D28CC5957D58CF | 1319 5900 | 86CB46D209591D06AE9C2A666CF485B3DCBA43DF | You will have to wait for (or poke) the ftp-masters to do a dak import-ldap-fingerprints run. Is this true? Fingerprints of subkeys are never imported in the LDAP. In userdir-ldap at least, authentication with subkeys is always first resolved to the main key with the the help of the keyring and then the fingerprint of the main key is looked for in the LDAP database. Maybe you could do something similar. You need a recent copy of the keyring (that you can get by public rsync on keyring.debian.org). I don't know how that's handled in LDAP, but the above is what the projectb knows about that keyid. The uid column will have to be filled for ddpo to be able to know that 86CB46D209591D06AE9C2A666CF485B3DCBA43DF is actually thijs. You can try reopening the bug and reassigning it to ftp.debian.org if there is a general problem with subkeys and the problen doesn't resolve itself with then next import-ldap-fingerprints run (which happens every few weeks). PS 1: I know that the mail gateway at [EMAIL PROTECTED] does not support subkeys, but dak apparently does. PS 2: Note that the projectb doesn't correlate a (source) packages's maintainer and the uid/key used to sign it in any way, that's two different text fields. Christoph signature.asc Description: Digital signature
Bug#433095: DDPO: does not show all my sponsored packages
On Tue, 17 Jul 2007, Christoph Berg wrote: id | fingerprint| uid --+--+-- 5823 | F7867D1E8EEB8DE7EBBE05BF25D28CC5957D58CF | 1319 5900 | 86CB46D209591D06AE9C2A666CF485B3DCBA43DF | You will have to wait for (or poke) the ftp-masters to do a dak import-ldap-fingerprints run. Is this true? Fingerprints of subkeys are never imported in the LDAP. In userdir-ldap at least, authentication with subkeys is always first resolved to the main key with the the help of the keyring and then the fingerprint of the main key is looked for in the LDAP database. Maybe you could do something similar. You need a recent copy of the keyring (that you can get by public rsync on keyring.debian.org). I don't know how that's handled in LDAP, but the above is what the projectb knows about that keyid. The uid column will have to be filled for ddpo to be able to know that 86CB46D209591D06AE9C2A666CF485B3DCBA43DF is actually thijs. You can try reopening the bug and reassigning it to ftp.debian.org if there is a general problem with subkeys and the problen doesn't resolve itself with then next import-ldap-fingerprints run (which happens every few weeks). The last run happened 6 weeks ago: https://rt.debian.org/Ticket/Display.html?id=102 Thijs, did you create your subkey recently ? PS 1: I know that the mail gateway at [EMAIL PROTECTED] does not support subkeys, but dak apparently does. It does support subkeys since 2 months. https://rt.debian.org/Ticket/Display.html?id=70 PS 2: Note that the projectb doesn't correlate a (source) packages's maintainer and the uid/key used to sign it in any way, that's two different text fields. The fact that the upload is accepted even if the key is not associated to a uid proves either that projectb doesn't properly identify subkeys or that you can't rely on projectb to do this for you. I don't know what interpretation is the right one. :-) Cheers, -- Raphaël Hertzog Premier livre français sur Debian GNU/Linux : http://www.ouaza.com/livre/admin-debian/
Bug#433095: DDPO: does not show all my sponsored packages
On Mon, 16 Jul 2007, Christoph Berg wrote: The Uploader: tooltip shows only a key ID, but that key id is in fact (a subkey of) my key. Maybe it doesn't handle subkeys correctly? Hi, this is another instance of the projectb doesn't know your keyid yet that happens to every new maintainer (key): id | uid | name --++- 1319 | thijs | Thijs Kinkhorst id | fingerprint| uid --+--+-- 5823 | F7867D1E8EEB8DE7EBBE05BF25D28CC5957D58CF | 1319 5900 | 86CB46D209591D06AE9C2A666CF485B3DCBA43DF | You will have to wait for (or poke) the ftp-masters to do a dak import-ldap-fingerprints run. Is this true? Fingerprints of subkeys are never imported in the LDAP. In userdir-ldap at least, authentication with subkeys is always first resolved to the main key with the the help of the keyring and then the fingerprint of the main key is looked for in the LDAP database. Maybe you could do something similar. You need a recent copy of the keyring (that you can get by public rsync on keyring.debian.org). Cheers, -- Raphaël Hertzog Premier livre français sur Debian GNU/Linux : http://www.ouaza.com/livre/admin-debian/
Bug#433095: DDPO: does not show all my sponsored packages
Package: qa.debian.org User: [EMAIL PROTECTED] Usertags: ddpo Hi, My DDPO does not show all packages I sponsored. Last week I sponsored the following packages: http://qa.debian.org/developer.php?packages=bcm5700-source http://qa.debian.org/developer.php?packages=ampache http://qa.debian.org/developer.php?packages=scuttle But these do not show up on my DDPO: http://qa.debian.org/developer.php?login=thijs The Uploader: tooltip shows only a key ID, but that key id is in fact (a subkey of) my key. Maybe it doesn't handle subkeys correctly? Thijs pgpFVvdcMFY3X.pgp Description: PGP signature
