Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
On Tue, Aug 30, 2011 at 07:25:58AM +0200, Luk Claes wrote: On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote: I concur with Sean Finney that nfs-utils should Build-Depend on libnfsidmap-dev = 0.24 to ease backporting. I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and it'd be nice to modify the source package as minimally as possible. What features do you need/want from 1.2.4? also, for those using kerberos + nvfsv4, it fixes some rather annoying bugs (like not working at all) for environments where users have a large list of group memberships (see 5604b35a and to a lesser extent 9274e94d). i shoudl add that minus the nfsidmap not building (and thus breaking after the dh additions to install the files), the package would otherwise build fine with no other needed modifications with the existing build-depends. so i guess it's a choice between whether you want to substitute uniformity (i.e. all builds having nfsidmapd by requiring also a backport of libnfsidmap) vs flexibility (builds are slightly more non-deterministic, based on what version of libnfsidmap is installed). i don't have a strong opinion either way :) sean -- To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110831085341.ga31...@cobija.connexer.com
Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
On 08/30/2011 01:25 AM, Luk Claes wrote: On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote: I concur with Sean Finney that nfs-utils should Build-Depend on libnfsidmap-dev = 0.24 to ease backporting. I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and it'd be nice to modify the source package as minimally as possible. What features do you need/want from 1.2.4? the version of nfs-utils in squeeze is only capable of using des-cbc-crc kerberos tickets. This is a poor choice for network security. No one setting up a modern system should be using plain DES for anything. from 1:1.2.3-1: - Try to use kernel function to determine supported Kerberos enctypes (258f10f) (Closes: #474037) Taking advantage of this appears to require the kernel from squeeze-backports as well, but i don't think that's an unreasonable tradeoff (and i have verified that it works with 2.6.39-bpo.2, currently in squeeze-backports). --dkg signature.asc Description: OpenPGP digital signature
Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
On 08/30/2011 06:30 PM, Daniel Kahn Gillmor wrote: On 08/30/2011 01:25 AM, Luk Claes wrote: On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote: I concur with Sean Finney that nfs-utils should Build-Depend on libnfsidmap-dev = 0.24 to ease backporting. I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and it'd be nice to modify the source package as minimally as possible. What features do you need/want from 1.2.4? the version of nfs-utils in squeeze is only capable of using des-cbc-crc kerberos tickets. This is a poor choice for network security. No one setting up a modern system should be using plain DES for anything. from 1:1.2.3-1: - Try to use kernel function to determine supported Kerberos enctypes (258f10f) (Closes: #474037) Taking advantage of this appears to require the kernel from squeeze-backports as well, but i don't think that's an unreasonable tradeoff (and i have verified that it works with 2.6.39-bpo.2, currently in squeeze-backports). Fair enough, just was curious what feature(s) made you think about backporting. Good luck with the backport and please do share your experiences. Cheers Luk -- To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4e5d1448.4010...@debian.org
Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
I concur with Sean Finney that nfs-utils should Build-Depend on libnfsidmap-dev = 0.24 to ease backporting. I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and it'd be nice to modify the source package as minimally as possible. I just got the thumbs-up from anibal to backport libnfsidmap-dev 0.24 to squeeze-backports; i've done it successfully for myself (it works fine), so i just need to review the build log to submit it to the backports repo. Once that's done, i'd like to put nfs-utils in the squeeze-backports repo as well, unless the regular maintainers want to do it (or have serious reservations about me doing it myself). Any objections or concerns i should be aware of? Regards, --dkg signature.asc Description: OpenPGP digital signature
Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote: I concur with Sean Finney that nfs-utils should Build-Depend on libnfsidmap-dev = 0.24 to ease backporting. I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and it'd be nice to modify the source package as minimally as possible. What features do you need/want from 1.2.4? Cheers Luk -- To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4e5c7466.4070...@debian.org
