Bug#698534: krb5-user: usage of keytabs gives Generic preauthentication failure while getting initial credentials

2013-05-28 Thread Sam Hartman
i think you need to reclose the bug not simply mark it as fixed again. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#664775: Inaccurate manual page for kadmin, or what is 'time'...

2012-03-20 Thread Sam Hartman
tags 664775 confirmed upstream retitle 664775 kadmin prints lifetime in seconds not something useful thanks I suspect it is seconds and I actually like the output in the documentation more than the code. So, it might be a better fix to update the code to be consistent with the docs. I've

Bug#494381: gnome-orca: gnome-terminal script has no way to move focus to cursor

2012-03-21 Thread Sam Hartman
Yes, sounds like a doc issue to me. Thanks for the tip! -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#664775: Inaccurate manual page for kadmin, or what is 'time'...

2012-03-21 Thread Sam Hartman
So, things like -maxlife take input like 3 hours; you specify the units. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#658514: libgssapi-krb5-2: krb5_gss_get_name_attribute() fails to set *display_value on success

2012-03-28 Thread Sam Hartman
Sorry, I'm a bit swamped at the moment; will attempt to deal with this next week. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#712629: Acknowledgement (espeak: fails to speak final chunk)

2013-06-23 Thread Sam Hartman
Hi. Upgraded. It's definitely using pulse now. I expect to be closing this bug as fixed in the new version within a day unless something unexpected comes up. Now,' I'm seeing some kind of impressive latency starting a chunk of speech; cursoring around is kind of painful. Will also looking into

Bug#712629: Acknowledgement (espeak: fails to speak final chunk)

2013-06-23 Thread Sam Hartman
Ah, I see you already included the patch:-) sorry. Well, it does look like the bug is fixed. I'm likely to recommend you remove the patch as I don't think it does anytihng but will get back to you. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of

Bug#712629: Info received (Bug#712629: Acknowledgement (espeak: fails to speak final chunk))

2013-06-25 Thread Sam Hartman
Hi. The pulse trigger patch is bogus and doesn't seem to make any difference. I'm sorry about that. I thought it did make a difference when I submitted it; apparently though the affects of the final bit of speech trimming were not as pronounced as I had previously thought. I actually managed to

Bug#688772: gnome Depends network-manager-gnome

2012-09-28 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: Ian Ian Jackson writes (Bug#688772: gnome Depends Ian network-manager-gnome): 6. We specifically forbid anyone from introducing in wheezy, or in sid until wheezy is released: a. Any new or enhanced dependencies, or

Bug#685069: Fwd: End of Life date for Shibboleth SP V2.4.3

2012-10-05 Thread Sam Hartman
Hi. I've minimally packaged a pre-release of 2.5 as part of Project Moonshot. The work required to get packages that build was fairly minimal. I have not looked at adding 2.5 specific features other than GSS-API, so for example new files etc are not installed. I don't anticipate moving from

Bug#704647: krb5: rdns=false does not work

2013-04-07 Thread Sam Hartman
It looks like this patch is redundant with what's actually pending. I think all I need to do is upload the tip of master. If I missed anything let me know. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#701492: libatk-wrapper-java: Hangs starting applications

2013-04-15 Thread Sam Hartman
I'm unaware of any particularly interesting configuration of my gnome session. What would be a good way to test with as much configuration as possible removed other than enabling orca? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-15 Thread Sam Hartman
My recommendation is that this is not worth a DSA or stable fix for squeeze unless some Debian user comes forward and says that they're seeing crashes in the wild related to this. --Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-15 Thread Sam Hartman
Tom == Tom Yu t...@mit.edu writes: Tom Sam Hartman hartm...@debian.org writes: My recommendation is that this is not worth a DSA or stable fix for squeeze unless some Debian user comes forward and says that they're seeing crashes in the wild related to this. --Sam

Bug#698534: krb5-user: usage of keytabs gives Generic preauthentication failure while getting initial credentials

2013-01-20 Thread Sam Hartman
My guess is that you have the wrong kvno. Can you try runnig the kvno command on the principal in question immediately after a successful kinit? It's possible that your KDC won't let you find out the kvno that way in which case things are more difficult to diagnose. --Sam -- To UNSUBSCRIBE,

Bug#698534: krb5-user: usage of keytabs gives Generic preauthentication failure while getting initial credentials

2013-01-22 Thread Sam Hartman
So, if you type kinit foo@REALM then run kvno foo@REALM My suspicion is that to what extent kvno matters for tgts has changed recently. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#637442: debmirror cannot mirror for live-build

2013-03-04 Thread Sam hartman
I find it desirable to build live images from a local mirror. Recently, live-build moved to the new conntents file location for distributions newer than squeeze. Unfortunately, I cannot easily get debmirror to mirror these new contents file locations. As a result, I need to hack up live-build

Bug#700759: Shared library policy on private libs

2013-02-18 Thread Sam Hartman
Hi. I'd like to speak a bit to what tthe right answer here is rather than what the policy currently says. It's sometimes fairly annoying to move a library out of the default path and to adjust the build system accordingly. Russ did that for one of krb5's private libraries, and in retrospect, I

Bug#700759: Shared library policy on private libs

2013-02-19 Thread Sam Hartman
Phillip == Phillip Susi ps...@ubuntu.com writes: Phillip On 2/18/2013 1:21 PM, Sam Hartman wrote: 2) don't install a .so in a -dev package. Phillip That might be a signal a human can understand, but the Phillip build system won't catch it. The goal is to make sure

Bug#700759: Shared library policy on private libs

2013-02-20 Thread Sam Hartman
Guillem == Guillem Jover guil...@debian.org writes: Guillem On Tue, 2013-02-19 at 20:30:48 -0500, Sam Hartman wrote: with the current packaging tools, you tend to end up producing the .shlibs files in order to manage cross-package dependencies within a single source package

Bug#700759: Shared library policy on private libs

2013-02-21 Thread Sam Hartman
Phillip == Phillip Susi ps...@ubuntu.com writes: Phillip Not having the .pc file and headers etc in the -dev package Phillip would prevent the build of anything with a decent Phillip pkg-config enabled build system, so that could work with a Phillip tweak to the policy to allow

Bug#701492: libatk-wrapper-java: Hangs starting applications

2013-02-23 Thread Sam Hartman
Package: libatk-wrapper-java Version: 0.30.4-2 Severity: important Hi. I am using openjdk-6 (6b27-1.12.3-1) In uncommented libatk-wrapper which has been commented out of accessibility.properties in the openjdk packages because of startup problems. When I do that policytool works fine with orca.

Bug#670918: CVE-2012-1012

2012-05-08 Thread Sam Hartman
severity 670918 normal thanks Moritz == Moritz Muehlenhoff muehlenh...@univention.de writes: Moritz Package: krb5 Severity: grave Tags: security Moritz Please see Moritz https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1012 Moritz for details I agree that Debian has the

Bug#669127: Possibly related to keytab contents

2012-05-09 Thread Sam Hartman
This is in response to a bug where after an upgrade libpam-krb5 failed to authenticate giving an unsupported encryption type. Around march of 2011, MIT changed how they pick the principal to use for krb5_verify_init_creds, a function used internally by libpam-krb5. If that's the case, then

Bug#672483: libdnet should not recommend dnet-common

2012-05-11 Thread Sam Hartman
package: libdnet severity: important version: 2.59 justification: libraries should not impact global system state. It's entirely reasonable for a random program that supports decnet to link against the libdnet library. To my shock, there are programs that support decnet, but apparently it's not

Bug#694988: libkrb5-3: select on set of invalid fds, leads to infinite loop in sshd

2012-12-04 Thread Sam Hartman
Hi. I'm happy to apply the upstream patch to sid. It's a bit more tricky to get this into wheezy. In evaluating whether that's justified, can I get any information you have on how often this bug is going to trigger both in a theoretical sense and a practical sense? --Sam -- To UNSUBSCRIBE,

Bug#439039: Bug#495163: useless static library due to libkrb5

2013-07-18 Thread Sam Hartman
For myself I'm unconvinced that it makes sense to have static libraries used for aid. I was really hoping the security team would comment on this one way or another. I can certainly create libkrb5-static. But I'd rather have a broader consensus of the project than just the aid maintainer agreeing

Bug#725596: Bug#728845: nmu fixing two issues

2013-11-30 Thread Sam Hartman
It was not me or been feel free to resubmit without using the delayed Q Michael Gilbert mgilb...@debian.org wrote: On Sat, Nov 30, 2013 at 1:14 AM, Salvatore Bonaccorso wrote: Hey Mike, On Sat, Nov 16, 2013 at 07:15:49PM -0500, Michael Gilbert wrote: control: tag -1 patch control: tag -1

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-25 Thread Sam Hartman
OK. Why don't you run that patch by debian-rele...@lists.debian.org with a SRM tag in the subject. If you get an ack, then I'm happy to to sign and upload. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#652699: libverto problem

2013-08-25 Thread Sam Hartman
control: tags -1 confirmed control: reassign -1 libverto1 control: found -1 libverto1/0.2.2-1 Yeah, I can reproduce. The way this issupposed to work is that libverto1 should work with any of the plugins. However, it appears the glib plugin is broken. -- To UNSUBSCRIBE, email to

Bug#711527: libkrb5-3: Multiarch incompatibility with assorted kerberos packages

2013-06-07 Thread Sam Hartman
Unfortunately, it will be a while before 1.11 migrates from experimental to sid to fix this. It's a new upstream version and it seems to be getting a fair bit of churn at the moment. I expect this to be fixed in a week or two. Also, when you say firefox is not installable, you presumably mean

Bug#725596: Bug#728845: nmu fixing two issues

2013-11-18 Thread Sam Hartman
Hi. I've merged your changes into the 1.12 packages we're working on. Those are targeted to experimental and will require a trip through new. Your NMU should hit unstable in a couple of days; thanks. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of

Bug#730267: libkrb5-dev: file conflict with heimdal-multidev: /usr/lib/x86_64-linux-gnu/pkgconfig/k{adm, rb5}*.pc

2013-11-24 Thread Sam Hartman
I assume we're agreed that the -multidev packages should not conflict with the libkrb5-dev or heimdal-dev packages. That is, you can have both multidevv packages and one of the lib*-dev packages installed? So it's fine to have some mit-specific .*pc files in krb5-multidev, and some

Bug#608583: Bug#640206: barnowl: please stop using libnet-irc-perl

2013-11-24 Thread Sam Hartman
OK. I had updated the barnowl packaging, but upstream asked me to hold off and update to a new release. I'll cycle back with them and upload something fixed in a coupled of days. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Bug#737133: rm: krb5-appl -- ROM obsolete by kerberos ssh

2014-01-30 Thread Sam Hartman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 package: ftp.debian.org Hi. After discussion on debian-devel, I've decided to remove krb5-appl. One of the comaintainers dropped out, and after discussion we realized that we weren't using the package, there are better alternatives in the

Bug#723144: sasl2-bin: saslauthd infinite loop inside sendto_kdc.c at function service_fds

2014-01-31 Thread Sam Hartman
control: reassign 723144 libkrb5-3 control: found 723144 krb5/1.10.1+dfsg-5 control: forcemerge 694988 723144 Yep, that's a krb5 bug all right. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
control: subscribe -1 Charles == Charles Plessy ple...@debian.org writes: Charles The 3.0 (native) format is useful when packaging a work Charles that is developped and distributed in a Git repository. Charles Please leave us this possibility. Let me describe the use case I have

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Andreas == Andreas Beckmann a...@debian.org writes: Andreas On 2014-02-05 10:57, Sam Hartman wrote: tarballs useful; anyone who is likely to want to build this from source probably has a copy of git and can checkout a tag. Andreas Such a tag corresponds to an upstrema version

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Neil == Neil Williams codeh...@debian.org writes: That makes sense and I do something similar as appropriate. Even so, I do not wish to maintain the upstream tarball as a maintained artifact. There are cases where packaging release releases are made. Maintaining pristine-tar commits for daily

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Bernhard == Bernhard R Link brl...@debian.org writes: As I mentioned I have a packaging branch and an upstream branch. I wish to use debian revisions to reflect packaging changes. It's slightly more complex than changes to debian directory involve a debian revision change; changes to other

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
Hi. There seems to be a significant conflict within the TC about what the L options mean. Speaking as a maintainer who could be affected by this and as someone who would sponsor a GR to override one interpretation butnot another, I'd request that the TC clarify what it means with the next

Bug#727708: Call for votes on init system resolution

2014-02-07 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: Ian Anthony Towns writes (Re: Bug#727708: Call for votes on init Ian system resolution): It's really pretty terrible to actively use FD to try to block options that aren't your favourite. Honestly, I would have

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
Colin == Colin Watson cjwat...@debian.org writes: Colin I think Ian and I are agreed that L excludes 1), and permits Colin 3). On reflection I think I agree that L has to exclude 2) Colin as well. Hmm, I am reading Ian as against 3. I request that TC members work with Ian on the

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
Sam == Sam Hartman hartm...@debian.org writes: Colin == Colin Watson cjwat...@debian.org writes: Colin I think Ian and I are agreed that L excludes 1), and permits Colin 3). On reflection I think I agree that L has to exclude 2) Colin as well. Sam Hmm, I am reading Ian

Bug#727708: Please clarify L options with regard to interfaces [and 1 more messages]

2014-02-07 Thread Sam Hartman
Yeah, I now understand what you mean by L. I'll be writing more in the form of a blog post and probably GR text. I will send a pointer to the TC as I think I may be hitting close to something that Russ may find useful. I'll refrain from trying to convince the TC because you have enough voices

Bug#402164: it isn't about ldap, just Cyrus 2.1/2.2 and GSSAPI

2014-02-08 Thread Sam Hartman
I agree with russ. Unless someone can get a backtrace with libkrb5-dbg installed, there's not much we can do. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#738340: Please rebuild krb5-sync and libauthen-krb5-admin-perl on all arches

2014-02-09 Thread Sam Hartman
package: release.debian.org I'd like to request binary NMUs for krb5-sync and libauthen-krb5-admin-perl on all architectures in order to build against new krb5. The soname for the krb5 admin libraries changed. Thanks, --Sam -- To UNSUBSCRIBE, email to

Bug#738364: krb5-sync FTBFS on armel armhf ia64mips mipsel sparc

2014-02-09 Thread Sam Hartman
package: krb5-sync version: 3.0-1 severity: serious justification: FTBFS I'm surprised this is not already filed, but it seems like it should be. krb5-sync is failing tests (and thus builds) on the above listed architectures. -- To UNSUBSCRIBE, email to

Bug#735323: krb5-multidev needs to depend on libverto-dev

2014-01-15 Thread Sam Hartman
I wonder if introducing a libkrad-dev package isn't the right solution here. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#735323: krb5-multidev needs to depend on libverto-dev

2014-01-15 Thread Sam Hartman
I'm going to have krb5-multidev recommend libverto-dev. I don't really consider krad.h to be a major part of the Kerberos infrastructure. If you need krad, I think it is fair for you to need to build-depend on libverto-dev yourself. I believe that recommends expresses the right relationship here,

Bug#731812: krb5-kdc: KDC with db2 backend cannot create a new database

2013-12-16 Thread Sam Hartman
control: tags -1 moreinfo Hi. I'm not able to reproduce this. One step you performed that I would recommend against is creating a kdam5.keytab. That's not needed and may be harmful. However, I created a wheezy vm, created a database, created a default policy and tried to use it to create

Bug#727708: systemd jessie - jessie+1 upgrade problems

2013-12-17 Thread Sam Hartman
Adrian == Adrian Bunk b...@stusta.de writes: Adrian Yes, it is speculation that other new features (or even Adrian bugfixes) might appear in the kernel and might become Adrian mandatory in systemd between jessie and jessie+1. Adrian But that is a risk, and it is a risk that is

Bug#727708: systemd jessie - jessie+1 upgrade problems

2013-12-18 Thread Sam Hartman
Adrian, I'm frustrated when I read your message because you put words in my mouth that I did not speak. I never said that Debian should allow systemd to dictate policy for multiple distributions nor did I say that Debian should allow one upstream systemd maintainer to dictate decisions for Debian.

Bug#727708: call for votes on default Linux init system for jessie

2014-02-11 Thread Sam Hartman
Bdale == Bdale Garbee bd...@gag.com writes: Bdale Steve Langasek vor...@debian.org writes: FWIW I have always assumed that the casting vote is implicit in the chair's ballot. To require the chair to explicitly exercise their casting vote, as opposed to the chair's preferences

Bug#727708: init system coupling etc.

2014-02-12 Thread Sam Hartman
When I've found myself trying to avoid normative language in situations like this I end up with statements like: It is important that all packages support smoothe upgrades from Wheezy to Jessie , even when the system is booted with sysvinit. -- To UNSUBSCRIBE, email to

Bug#738850: ITP: iniparser -- a stand-alone INI file reading/writing library

2014-02-13 Thread Sam Hartman
The krb5 libraries include read and write support for the krb5.conf format, which is very similar but not identical to ini. I would be entirely happy with the response that: 1) the krb5 profile library should be used only for modifying Kerberos configs 2) supporting the ABI that your

Bug#740603: /etc/shibboleth not created when not using libapache2-mod-shib2

2014-03-03 Thread Sam Hartman
Russ, I'm happy to implement whatever solution is decided for this. However it would be good to get discussion on how to approach separating the aspects from /etc/shibboleth that are apache-specific from those that are not. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

Bug#647742: update

2014-03-06 Thread Sam Hartman
libradsec 0.0.5 seems stable enough to include in Debian. I have packaging available at git://git.project-moonshot.org/libradsec.git on the debian branch. I want to get a review of a few things and will upload. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#741573: Two menu systems

2014-04-09 Thread Sam Hartman
, then focusing on the technical details of the policy seems reasonable. In my opinion, not respecting the project as a whole enough to make a determination about consensus does significant harm. Respectfully, Sam Hartman -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

Bug#744137: Please upgrade to m2crypto 0.22.3

2014-04-10 Thread Sam Hartman
package: m2crypto version: 0.21.1-3 severity: wishlist It would be really nice to get a more recent version of m2crypto. I am hoping that it will help with some of the segfaults. --Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#741573: Two menu systems

2014-04-11 Thread Sam Hartman
Steve == Steve Langasek vor...@debian.org writes: Steve On Wed, Apr 09, 2014 at 01:27:46PM -0400, Sam Hartman wrote: Thanks for bringing this issue back to the question that was brought to the TC. The discussion so far on this bug has focused on discussing what the right

Bug#741573: Two menu systems

2014-04-11 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: So, if you've reviewed this enough to support Bill's claim that there isn't a consensus because there are substantial objections raised in the discussions and not addressed, then please say that. If you have not

Bug#745322: Please ship krb5-config in krb5-multidev

2014-04-21 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer Package: krb5-multidev Jelmer Version: 1.12.1+dfsg-1.1 Jelmer Severity: wishlist Jelmer Tags: patch Jelmer Please ship the krb5-config binary with krb5-multidev. This should make Jelmer it possible for those

Bug#730837: Patch to add -L and -I flags

2014-04-21 Thread Sam Hartman
control: tags -1 -patch Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer The attached patch fixes krb5-config to always spit out -L and -I Jelmer flags. We actually go to a lot of trouble to *not* do that because we've run into cases where including -L and -I can change

Bug#673680: Missing --sysconfdir

2014-04-21 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@samba.org writes: Jelmer The attached patch sets --sysconfdir explicitly to /etc rather than Jelmer /usr/etc and fixes the issue (verified by grepping through 'strings Jelmer /usr/lib/x86_64-linux-gnu/libgssapi*). Hi. For the record, including this

Bug#730837: Patch to add -L and -I flags

2014-04-21 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer On Mon, Apr 21, 2014 at 09:22:46AM -0400, Sam Hartman wrote: control: tags -1 -patch Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer The attached patch fixes krb5-config to always spit out -L

Bug#742820: freeradius: CVE-2014-2015

2014-03-27 Thread Sam Hartman
Salvatore == Salvatore Bonaccorso car...@debian.org writes: Salvatore Hi, Salvatore the following vulnerability was published for freeradius. Salvatore CVE-2014-2015[0]: denial of service in rlm_pap hash Salvatore processing thanks. I don't think this is worth a DSA for

Bug#732562: Do you need any help getting prpltwtr into debian?

2014-03-27 Thread Sam Hartman
Hi. I'd kind of like to be using this plugin, but it's not in Debian. It looks like it has packaging. Anything I can do to help? --sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#740603: /etc/shibboleth not created when not using libapache2-mod-shib2

2014-04-01 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ This is what I did for now. I created a libshibsp-plugins Russ package and a shibboleth-sp2-utils package and made the Russ dependencies from libapache2-mod-shib2 and from -utils to Russ -plugins strict (to require exactly the

Bug#740603: /etc/shibboleth not created when not using libapache2-mod-shib2

2014-04-01 Thread Sam Hartman
Makes sense to me. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#746395: FTBFS for binary-indep builds (missing python build dependency)

2014-04-29 Thread Sam Hartman
I'm kind of surprised that python-lxml doesn't pull in python. Will confirm that sbuild -A dtrt though before marking closed. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#741051: Dropping Heimdal Kerberos 4 support

2014-04-29 Thread Sam Hartman
I'll attempt to get to your recent set of bugs against krb5 and krb5-config after returning to Boston next week. If Ben or Russ gets to them first, that's fine with me. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#745322: Please ship krb5-config in krb5-multidev

2014-04-29 Thread Sam Hartman
OK. I'll withdraw my objection to krb5-config moving to krb5-multidev. Shouldh we use alternatives for managing krb5-config from Heimdal vs MIT? For what it's worth, I don't support asking package maintainers to update build-depends. The reason I thought introducing krb5-multidev made sense was

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
Russ, thoughts on what is the right way to manage the dependency between krb5-kdc-ldap and slapd in systemd? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
control: clone -1 -2 control: retitle -2 Systemd needs to respect /etc/innserv/overrides control: reassign -2 systemd control: severity -2 important control: found -2 systemd/208-6 justification: Breaks unrelated packages at boot. That should be RC except that I think innserv overrides are

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ Failing that, could krb5-kdc-ldap introduce a somewhat Russ artificial service that exists solely to be Before krb5-kdc Russ and After slapd, thus forcing the ordering constraint? I Russ think that would be the native systemd

Bug#758992: Bug#759001: Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
Well, I'll definitely be fixing the krb5-kdc-ldap issue by including units. I had no idea that innserv-overrides were quite that unused. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-24 Thread Sam Hartman
Michael == Michael Biebl bi...@debian.org writes: Michael b/ make krb5-kdc-ship a drop-in snippet as Michael /lib/systemd/system/krb5-kcd.service.d/foo.conf which Michael augments the krb5-kcd.service with the necessary Michael dependencies/orderings. Hmm. How will this work if

Bug#759159: ITP: shibboleth-resolver - Library to access the Shibboleth Attribute Resolver from Third-Party Applications

2014-08-24 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: http://www.shibboleth.org/ Source: svn https://svn.shibboleth.net/extensions/cpp-sp-resolver/trunk Description: Shibboleth library to access Attribute Resolver The Shibboleth Service provider consumes information about an

Bug#759398: ITP: trust-router - Dynamically configure Trust Between RADIUS Realms

2014-08-26 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: git://git.project-moonshot.org/trust_router.git http://www.project-moonshot.org/ license: bsd-3-clause Description: The trust router establishes a DH key between two RADIUS servers to protect a RADIUS over TLS session. GSS-API

Bug#759511: ITP: moonshot-ui -Project Moonshot's Identity Selector

2014-08-27 Thread Sam Hartman
package: wnpp owner: hartm...@debian.org severity: wishlist URL: http://www.project-moonshot.org/ source: git://git.project-moonshot.org/moonshot-ui.git License: BSD-three-clause Description: Project Moonshot provides federated access to services combining the best of EAP, RADIUS (over TLS),

Bug#635847: libkrb5support0: library initialization errors in Perl module context

2014-08-27 Thread Sam Hartman
Benjamin == Benjamin Kaduk ka...@mit.edu writes: Benjamin We added a debian-local change to never unload GSS Benjamin mechanisms back in krb5-1.10.1+dfsg-3; I am curious if Benjamin this is issue is worked around by that patch. I would be surprised because I don't think the issue

Bug#750041: Patch to update pkg-config files

2014-06-04 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer tags 750041 +patch thanks Jelmer The attached patch update the pkg-config files to use the Jelmer krb5-multidev paths. thanks, and a real oops on this one. Sorry we shipped useless pkgconfig files. -- To UNSUBSCRIBE,

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
I don't really support the split because it seems like kadmin is something you want if you are going to be dealing with keytabs, so it seems like it belongs in krb5-user. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ Sam Hartman hartm...@debian.org writes: I don't really support the split because it seems like kadmin is something you want if you are going to be dealing with keytabs, so it seems like it belongs in krb5-user. Russ No one

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
Yeah, my preference here would be alternatives for kadmin and ktutil and even though alternatives is not a perfect fit. I guess renaming is another option. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
OK. I'm not going to have time to generate patches for alternatives any time soon, but I'd be happy to make time to review them. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#751054: krb5-multidev: use #ifdef rather than #if in gssapi.h

2014-06-16 Thread Sam Hartman
control: clone -1 -2 control: retitle -2 krb5-config breaks high-warning builds control: severity -2 serious I think what I'd like to do here is quickly revert moving krb5-config into krb5-multidev and revert the patch to spit out -I/usr/include/mit-kerberos. We can then work on this on a

Bug#751060: It turns out building -Wundef should be fine after all

2014-06-16 Thread Sam Hartman
Hi. It turns out that a bug in a change in krb5-config introduced in krb5 1.12.1+dfsg-2 caused krb5.h to be treated differently and to be subject to -Wundef. This is fixed in krb5 1.12.1+dfsg-3. I've just uploaded that and confirmed that a pidgin-sipe version that does build -Wundef works

Bug#755520: CVE-2014-4343 in krb5: double-free in SPNEGO initiators

2014-07-21 Thread Sam Hartman
I'm not at ietf this week. If you corner me on Jabber I'm happy to coordinate on an unstable upload. If you get a go ahead from security for any of this I'm happy to help with a stable upload -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#741051: krb5-config's krb5.conf template is crufty

2014-03-10 Thread Sam Hartman
1) please make sure you're right for domain_realms both for MIT and Heimdal; the leading dot used to not be implied by not leading dot. 2) I think mentioning the enctypes entries in comments is valuable but I think having uncommenting entries is undesirable. Besides that decrufting is good. I

Bug#741495: freeradius: diff for NMU version 2.1.12+dfsg-1.3

2014-03-12 Thread Sam Hartman
+into globals so as to administer an authentication server is more +scary than I choose to contemplate. + * Add IODBC include directories, Thanks Maximiliano Curia +, Closes: #740060 + + + -- Sam Hartman hartm...@debian.org Wed, 12 Mar 2014 20:36:19 -0400 + freeradius (2.1.12+dfsg-1.2) unstable

Bug#681419: Alternative dependencies on non-free packages in main: counterargument

2014-07-31 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: Ian And from a practical point of view, I would prefer to make a Ian choice that significantly eases collaboration with the GNU Ian Project to one that slightly eases collaboration with Ian proprietary software vendors.

Bug#760411: ITP: moonshot-ui -- Project Moonshot Identity Manager

2014-09-03 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: http://www.project-moonshot.org/ source: git://git.project-moonshot.org/moonshot-ui.git license: BSD-3-Clause Description: This package manages the Moonshot identity store, permitting users to add and remove identities as well as

Bug#757953: libverto: autoreconf to update config.{sub, guess} and libtool.m4 to fix FTBFS for ppc64el port

2014-09-10 Thread Sam Hartman
Andreas == Andreas Barth a...@ayous.org writes: Andreas * ravi (r...@linux.vnet.ibm.com) [140910 13:56]: We have also successfully verified building libverto source package on ppc64el build machine after applying attached patch. Andreas As ppc64el is now in Debian, I'd be

Bug#761868: ITP: moonshot-gss-eap -- A GSS-API Mechanism for the Extensible Authentication Protocol

2014-09-16 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org x-debbugs-cc: debian-de...@lists.debian.org source: git://git.project-moonshot.org/mech_eap.git license: BSD-3-Clause Description: Project moonshot provides federated access to a wide range of applications. This package adds a GSS-API

Bug#766194: debhelper: dh_installinit should gain option to ignore start failures

2014-10-21 Thread Sam Hartman
package: debhelper version: 9.20141003 severity: wishlist I suspect a lot of folks will be writing systemd service units in the future. While writing units for krb5-kdc, I ran across an issue. On first install, until you set up your database, it's kind of expected that krb5-kdc will fail to

Bug#766298: ROM: Not Suitable for Inclusion in Jessie

2014-10-21 Thread Sam Hartman
package: moonshot-trust-router severity: serious justification: ROM version: 1.4.1-1 Based on upstream discussion, the trust router without FreeRADIUS integration does not provide sufficient value to expend the effort for supporting for the length of the Jessie release. Since we're not willing to

Bug#762906: Bug#764669: Bug#762906: krb5-auth-dialog debug output

2014-10-22 Thread Sam Hartman
Perhaps, although I'll note that the krb5 maintainers are unaware of what's exactly going on in 764669. So, feel free to merge, but if you actually have an idea of the problem, please enlighten us, as we don't see that behavior at all. --Sam -- To UNSUBSCRIBE, email to

Bug#766476: ROM: Security Review Required before inclusion in Jessie

2014-10-23 Thread Sam Hartman
package: moonshot-gss-eap version: 0.9.2-1 severity: serious From the TODO.debian: * Give the security team a change to comment on the included code from wpa_supplicant. There's really no other way; their ABI is not stable enough that it would make sense to build eap shared libraries out

<    1   2   3   4   5   6   7   8   9   10   >