Bug#47467: [Pkg-shadow-devel] Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-17 Thread Christian Perrier
tags 47467 wontfix
thanks

(Alexander last comment did not make it yet to the mailing list...it
seems that Alioth mailing lists are incredibly slow these days)

Soo http://bugs.debian.org/46467 for the very last comment by
Alexander.

>From this last comment, my conclusion is that, for a feature that is
perfectly dealt with appropriate NIS database utilities, we're
imagining a complete redesign of NSS functions in the glibc.

IMHO, this is completely overkill and I have actually no time nor
motivation, as shadow maintainer, to deal with this.

Hence marking the bug as wontfix.

Please use the NIS utilities to modify NIS-related information.

Anyone wanting to deal with this bug, please reassign it to glibc and
manage to talk with glibc maintainers to explain the issue.




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#47467: [Pkg-shadow-devel] Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-14 Thread Christian Perrier

> > I don't want to know about the details, I just want to know whether
> > this should still be our problem about the proper PAMification of chsh
> > and chfn.
> 
> No, this is NSS/libc guys' problem in first place, then
> ours (with Tomasz).


Well, now it's time to deal with this.

>From the above, I understand that this bug should be reassigned to
"passwd,glibc".

So, we need to describe to the glibc maintainers what we are talking
about.

Can you please summarize this?





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#47467: [Pkg-shadow-devel] Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-14 Thread Christian Perrier

> > I don't want to know about the details, I just want to know whether
> > this should still be our problem about the proper PAMification of chsh
> > and chfn.
> 
> No, this is NSS/libc guys' problem in first place, then
> ours (with Tomasz).


Well, now it's time to deal with this.

>From the above, I understand that this bug should be reassigned to
"passwd,glibc".

So, we need to describe to the glibc maintainers what we are talking
about.

Can you please summarize this?




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#47467: [Pkg-shadow-devel] Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-07 Thread Alexander Gattin
Hi!

On Fri, Oct 07, 2005 at 07:26:02AM +0200, Christian Perrier wrote:
> Quoting Alexander Gattin ([EMAIL PROTECTED]):
...
> > I can confirm that PAM auth works fine now, but as for
> > changing anything on NIS server, it's IMHO impossible
> > with current libc (I may be wrong) -- for this there
> > are yppasswd, ypchsh and ypchfn tools...
> 
> Well, the bug log seems to say the contraryas long as chsh and
> chfn are properly PAMified, they should be able to act on NIS.

No, this is wrong. Perhaps there are relevant changes
in libc which I'm unaware of, but chsh.c and chfn.c
do not contain any unusual libc code that looks able to
update fullname/shell (using NSS).

> This already seems to be possible for passwd.

Well, this should work with passwd, not through NSS
but through PAM. I think this works somewhere, but not
on my system -- I get PAM_AUTHINFO_UNAVAIL.

When I enable "nis" parameter to pam_unix, I get
prompted for NIS root password, but then anyway receive
PAM_AUTHINFO_UNAVAIL.

> I don't want to know about the details, I just want to know whether
> this should still be our problem about the proper PAMification of chsh
> and chfn.

No, this is NSS/libc guys' problem in first place, then
ours (with Tomasz).

-- 
WBR,
xrgtn


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#47467: [Pkg-shadow-devel] Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-07 Thread Christian Perrier
Quoting Alexander Gattin ([EMAIL PROTECTED]):
> Hi!
> 
> On Thu, Oct 06, 2005 at 07:57:25AM +0200, Christian Perrier wrote:
> > In http://bugs.debian.org/47467, the bug submitter requests that chfn
> > and chsh allow working on NIS accounts.
> > 
> > As far as I understand, this should *now* be possible because these
> > utilities are PAMified. Could you confirm (I know you're using a
> > NIS setup, so this should be easy to test for you) ?
> 
> I can confirm that PAM auth works fine now, but as for
> changing anything on NIS server, it's IMHO impossible
> with current libc (I may be wrong) -- for this there
> are yppasswd, ypchsh and ypchfn tools...


Well, the bug log seems to say the contraryas long as chsh and
chfn are properly PAMified, they should be able to act on NIS. This
already seems to be possible for passwd.

I don't want to know about the details, I just want to know whether
this should still be our problem about the proper PAMification of chsh
and chfn.





Bug#47467: [Pkg-shadow-devel] Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-06 Thread Alexander Gattin
Hi!

On Thu, Oct 06, 2005 at 07:57:25AM +0200, Christian Perrier wrote:
> In http://bugs.debian.org/47467, the bug submitter requests that chfn
> and chsh allow working on NIS accounts.
> 
> As far as I understand, this should *now* be possible because these
> utilities are PAMified. Could you confirm (I know you're using a
> NIS setup, so this should be easy to test for you) ?

I can confirm that PAM auth works fine now, but as for
changing anything on NIS server, it's IMHO impossible
with current libc (I may be wrong) -- for this there
are yppasswd, ypchsh and ypchfn tools...

BTW, NIS is broken in libc6/netgroup handling now --
see bug #328440.

-- 
WBR,
xrgtn



Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-06 Thread Christian Perrier
Quoting Tomasz Kłoczko ([EMAIL PROTECTED]):

> In form distributed in 4.0.12 this can't work because this two tools 
> aren't use pam_start() & co. :>
> (it works for me only because I use pam_make for sync "files" and NIS .db;
> now after review pam_unix soutrce code I know it can be prapared 
> directly by use pam_unix module).
> 
> OK I'll try use chfn/chsh today with currnet version from CVS without 
> using pam_make.

Well, no pressure on you about this which is not a vital feature.

So, you can perfectly release 4.0.13 without the complete
functionality if you prefer. I just need to know whether this bug is
to be closed now, when 4.0.13 will be out...or when another version
will be out.





Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-06 Thread Tomasz Kłoczko
On Thu, 6 Oct 2005, Christian Perrier wrote:

> Tomasz,
> 
> In http://bugs.debian.org/47467, the bug submitter requests that chfn
> and chsh allow working on NIS accounts.
> 
> As far as I understand, this should *now* be possible because these
> utilities are PAMified. Could you confirm (I know you're using a
> NIS setup, so this should be easy to test for you) ?

In form distributed in 4.0.12 this can't work because this two tools 
aren't use pam_start() & co. :>
(it works for me only because I use pam_make for sync "files" and NIS .db;
now after review pam_unix soutrce code I know it can be prapared 
directly by use pam_unix module).

OK I'll try use chfn/chsh today with currnet version from CVS without 
using pam_make.

kloczek
-- 
---
*Ludzie nie mają problemów, tylko sobie sami je stwarzają*
---
Tomasz Kłoczko, sys adm @zie.pg.gda.pl|*e-mail: [EMAIL PROTECTED]

Bug#47467: #47467 to be closed by PAMification of chfn and chsh?

2005-10-05 Thread Christian Perrier
Tomasz,

In http://bugs.debian.org/47467, the bug submitter requests that chfn
and chsh allow working on NIS accounts.

As far as I understand, this should *now* be possible because these
utilities are PAMified. Could you confirm (I know you're using a
NIS setup, so this should be easy to test for you) ?