Package: apache2
Version: 2.4.55-1
Severity: important

It seems db5.3 will go away sooner or later [1], probably after the
bookworm release. Apache httpd supports using auth/authz data from DBM
files with mod_authn_dbm/mod_authz_dbm [2,3] and in a bunch of other
places, at least mod_authn_socache and mod_rewrite.html [4,5].  The
default db format seems to be berkeley db (that's what htdbm/httxt2dbm
create if no dbm type is specified).

The location and use of dbm files are user specific. Therefore an
automatic conversion seems unfeasible. The users will have to convert
their files manually. To make this easier for the users, one should
probably 

- change the default format to something else
- log a big fat deprecation warning whenever berkeley db is used
- provide a conversion tool
- mention the deprecation in README.Debian and the release notes

in bookworm.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987013
[2] https://httpd.apache.org/docs/2.4/en/mod/mod_authn_dbm.html
[3] https://httpd.apache.org/docs/2.4/en/mod/mod_authz_dbm.html
[4] https://httpd.apache.org/docs/2.4/en/mod/mod_authn_socache.html
[5] https://httpd.apache.org/docs/2.4/en/mod/mod_rewrite.html#rewritemap

Reply via email to