** Description changed: [ Rationale ] The proprietary C++ Entra broker from Microsoft now expects a version being set in the IPC request that linux-entra-sso sends, but the current build does not set one as the build process takes it from git, which is not available at package build time. The older/deprecated proprietary java-based MSFT Entra broker, and the open source Himmelblau Entra broker, are not affected. [ Impact / Scope ] The solution is a change to debian/rules to set an environment variable override that fixes the version to the source package version, bypassing the build system git tag parsing logic. The only runtime difference is that an actual version is included in the IPC, and the only package difference is that the version is stamped in the Python script instead of being an empty string. root@stonking:~# seeded-in-ubuntu linux-entra-sso linux-entra-sso's binaries are not seeded for stonking. [ Test Plan ] Package builds correctly and sends version via IPC. Diffoscope output for Stonking: - root@stonking:/tmp# diffoscope --exclude-directory-metadata=recursive /var/cache/apt/archives/linux-entra-sso_1.8.1-1_all.deb ./linux-entra-sso_1.8.1-1ubuntu1_all.deb + root@stonking:/tmp# diffoscope --exclude-directory-metadata=recursive /var/cache/apt/archives/linux-entra-sso_1.8.1-1_all.deb ./linux-entra-sso_1.8.1-1ubuntu1_all.deb --- /var/cache/apt/archives/linux-entra-sso_1.8.1-1_all.deb +++ ./linux-entra-sso_1.8.1-1ubuntu1_all.deb ├── control.tar.zst │ ├── control.tar │ │ ├── ./control │ │ │ @@ -1,16 +1,16 @@ │ │ │ Package: linux-entra-sso │ │ │ -Version: 1.8.1-1 │ │ │ +Version: 1.8.1-1ubuntu1 │ │ │ Architecture: all │ │ │ Maintainer: Ubuntu Developers <[email protected]> │ │ │ -Original-Maintainer: Luca Boccassi <[email protected]> │ │ │ Installed-Size: 40 │ │ │ Depends: python3, python3-gi, python3-pydbus │ │ │ Suggests: chromium | chromium-browser, firefox | firefox-esr │ │ │ Enhances: chromium, chromium-browser, firefox, firefox-esr │ │ │ Section: contrib/web │ │ │ Priority: optional │ │ │ Homepage: https://github.com/siemens/linux-entra-sso │ │ │ Description: Entra ID SSO via Himmelblau or Microsoft Identity Broker on Linux │ │ │ Local native host messaging connector for Firefox/Chromium/Chrome extension to │ │ │ implement Entra ID SSO Conditional Access, connecting to the Identity Broker │ │ │ via D-Bus. Supports the open source Himmelblau stack or the Microsoft stack. │ │ │ +Original-Maintainer: Luca Boccassi <[email protected]> │ │ ├── ./md5sums │ │ │ ├── ./md5sums │ │ │ │┄ Files differ ├── data.tar.zst │ ├── data.tar │ │ ├── ./usr/libexec/linux-entra-sso/linux-entra-sso.py │ │ │ @@ -18,15 +18,15 @@ │ │ │ from xml.etree import ElementTree as ET - │ │ │ + │ │ │ │ │ │ from gi.repository import GLib │ │ │ from pydbus import SessionBus │ │ │ from pydbus.proxy import CompositeInterface - │ │ │ + │ │ │ │ │ │ # version is replaced on installation │ │ │ -LINUX_ENTRA_SSO_VERSION = "" │ │ │ +LINUX_ENTRA_SSO_VERSION = "1.8.1" - │ │ │ + │ │ │ │ │ │ # the ssoUrl is a mandatory parameter when requesting a PRT SSO │ │ │ # Cookie, but the correct value is not checked as of 30.05.2024 │ │ │ # by the authorization backend. By that, a static (fallback) │ │ │ # value can be used, if no real value is provided. │ │ │ SSO_URL_DEFAULT = "https://login.microsoftonline.com/"; │ │ │ EDGE_BROWSER_CLIENT_ID = "d7b530a4-7680-4c23-a8bf-c52c121d2e87" │ │ ├── ./usr/share/doc/linux-entra-sso/changelog.Debian.gz │ │ │ ├── changelog.Debian │ │ │ │ @@ -1,7 +1,14 @@ │ │ │ │ +linux-entra-sso (1.8.1-1ubuntu1) stonking; urgency=medium │ │ │ │ + │ │ │ │ + * d/rules: set RELEASE_TAG with upstream version │ │ │ │ + (LP: #2167899) │ │ │ │ + │ │ │ │ + -- Luca Boccassi <[email protected]> Tue, 22 Sep 2026 13:03:45 +0200 │ │ │ │ + │ │ │ │ linux-entra-sso (1.8.1-1) unstable; urgency=medium - │ │ │ │ + │ │ │ │ │ │ │ │ * Update upstream source from tag 'upstream/1.8.1' │ │ │ │ * Bump Standards-version to 4.7.4, no changes + │ │ │ │ + │ │ │ │ -- Luca Boccassi <[email protected]> Mon, 27 Apr 2026 11:49:03 +0100 + + + Diffoscope output for Resolute: + + root@resolute:/tmp# diffoscope --exclude-directory-metadata=recursive /var/cache/apt/archives/linux-entra-sso_1.8.0-1_all.deb ./linux-entra-sso_1.8.0-1ubuntu26.04.1_all.deb + --- /var/cache/apt/archives/linux-entra-sso_1.8.0-1_all.deb + +++ ./linux-entra-sso_1.8.0-1ubuntu26.04.1_all.deb + ├── control.tar.zst + │ ├── control.tar + │ │ ├── ./control + │ │ │ @@ -1,16 +1,16 @@ + │ │ │ Package: linux-entra-sso + │ │ │ -Version: 1.8.0-1 + │ │ │ +Version: 1.8.0-1ubuntu26.04.1 + │ │ │ Architecture: all + │ │ │ Maintainer: Ubuntu Developers <[email protected]> + │ │ │ -Original-Maintainer: Luca Boccassi <[email protected]> + │ │ │ Installed-Size: 40 + │ │ │ Depends: python3, python3-gi, python3-pydbus + │ │ │ Suggests: chromium | chromium-browser, firefox | firefox-esr + │ │ │ Enhances: chromium, chromium-browser, firefox, firefox-esr + │ │ │ Section: contrib/web + │ │ │ Priority: optional + │ │ │ Homepage: https://github.com/siemens/linux-entra-sso + │ │ │ Description: Entra ID SSO via Himmelblau or Microsoft Identity Broker on Linux + │ │ │ Local native host messaging connector for Firefox/Chromium/Chrome extension to + │ │ │ implement Entra ID SSO Conditional Access, connecting to the Identity Broker + │ │ │ via D-Bus. Supports the open source Himmelblau stack or the Microsoft stack. + │ │ │ +Original-Maintainer: Luca Boccassi <[email protected]> + │ │ ├── ./md5sums + │ │ │ ├── ./md5sums + │ │ │ │┄ Files differ + ├── data.tar.zst + │ ├── data.tar + │ │ ├── ./usr/libexec/linux-entra-sso/linux-entra-sso.py + │ │ │ @@ -19,15 +19,15 @@ + │ │ │ from xml.etree import ElementTree as ET + │ │ │ + │ │ │ from gi.repository import GLib + │ │ │ from pydbus import SessionBus + │ │ │ from pydbus.proxy import CompositeInterface + │ │ │ + │ │ │ # version is replaced on installation + │ │ │ -LINUX_ENTRA_SSO_VERSION = "" + │ │ │ +LINUX_ENTRA_SSO_VERSION = "1.8.0" + │ │ │ + │ │ │ # the ssoUrl is a mandatory parameter when requesting a PRT SSO + │ │ │ # Cookie, but the correct value is not checked as of 30.05.2024 + │ │ │ # by the authorization backend. By that, a static (fallback) + │ │ │ # value can be used, if no real value is provided. + │ │ │ SSO_URL_DEFAULT = "https://login.microsoftonline.com/"; + │ │ │ EDGE_BROWSER_CLIENT_ID = "d7b530a4-7680-4c23-a8bf-c52c121d2e87" + │ │ ├── ./usr/share/doc/linux-entra-sso/changelog.Debian.gz + │ │ │ ├── changelog.Debian + │ │ │ │ @@ -1,7 +1,14 @@ + │ │ │ │ +linux-entra-sso (1.8.0-1ubuntu26.04.1) resolute; urgency=medium + │ │ │ │ + + │ │ │ │ + * d/rules: set RELEASE_TAG with upstream version + │ │ │ │ + (LP: #2167899) + │ │ │ │ + + │ │ │ │ + -- Luca Boccassi <[email protected]> Tue, 22 Sep 2026 13:45:24 +0200 + │ │ │ │ + + │ │ │ │ linux-entra-sso (1.8.0-1) unstable; urgency=medium │ │ │ │ - │ │ │ │ -- Luca Boccassi <[email protected]> Mon, 27 Apr 2026 11:49:03 +0100 + │ │ │ │ * Update upstream source from tag 'upstream/1.8.0' + │ │ │ │ + │ │ │ │ -- Luca Boccassi <[email protected]> Tue, 17 Feb 2026 09:52:47 +0000 + │ │ │ │ + │ │ │ │ linux-entra-sso (1.7.2-1) unstable; urgency=medium [ Where problems could occur / Regression Potential ] <WIP> [ Other Info ] Original bug report text follows: Mirroring Debian bug: https://bugs.debian.org/cgi- bin/bugreport.cgi?bug=1148245 The version currently in resolute multiverse doesn't seem to work at all. Luca fixed it in Debian sid following my bug report (version 1.11.0-1 has the fix). Please either update multiverse with the new version or backport the actual build system fix. (See the debian bug for all the details).
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2167899 Title: [FFE/SRU] linux-entra-sso: broken compatibility with new MSFT msalcpp broker To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-entra-sso/+bug/2167899/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
