Hello Eric and Lukasz, I have created new debdiffs for adcli. Please review and also sponsor one of them to -proposed.
Since there are multiple versions of adcli floating around I made two debdiffs. Please choose the one most convenient / cleanest to apply. The first simply builds ontop of 0.8.2-1ubuntu1 currently in -proposed, and is the version pull-lp-source pulls down. It simply adds the dependency to the fixed libsasl2-modules-gssapi-mit package with a greater than or equal to relationship. Use of this debdiff requires 0.8.2-1ubuntu2 to be deleted from the upload queue, and treated as 0.8.2-1ubuntu2 never existed. https://bugs.launchpad.net/ubuntu/+source/adcli/+bug/1906627/+attachment/5441872/+files/lp1906627_adcli_option_one.debdiff Option two builds upon 0.8.2-1ubuntu2, and re-applies all of the --use-ldaps patches from the previous SRU which 0.8.2-1ubuntu2 reverts. It also adds the dependency to the fixed libsasl2-modules-gssapi-mit package with a greater than or equal to relationship. https://bugs.launchpad.net/ubuntu/+source/adcli/+bug/1906627/+attachment/5441873/+files/lp1906627_adcli_option_two.debdiff My preference is for option one, but use whatever is required. I only made both of these to lower round trip time due to timezones if you don't like the option one idea. Thanks, Matthew On Mon, Dec 7, 2020 at 3:25 PM Matthew Ruffell <[email protected]> wrote: > > Hi Eric, Lukasz, > > Please review and potentially sponsor the cyrus-sasl2 debdff attached > to LP1906627. > > [1] https://bugs.launchpad.net/ubuntu/+source/adcli/+bug/1906627 > > It fixes the root cause of the GSS-SPNEGO implementation being incompatible > with > Microsoft's implementation in Active Directory. > > If you are still planning to re-release adcli and sssd to -security, then you > should also build cyrus-sasl2 in the same way: > > https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/4336/+packages > > Again, I am sorry for causing the regression and these patches should fix the > underlying cause. > > Thanks, > Matthew -- Mailing list: https://launchpad.net/~sts-sponsors Post to : [email protected] Unsubscribe : https://launchpad.net/~sts-sponsors More help : https://help.launchpad.net/ListHelp
