Bug#758600: shibboleth-sp2-utils: postinst fails on initial installation

2014-11-10 Thread Sam Hartman
I'd like to better understand the severity issue. Are you saying that there's no order I can install shibboleth and apache in wheezy that will work? I.E. even if I manually install the module first? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of

Bug#763569: git-dpm generates incorrect patches with the ident gitattribute

2014-11-09 Thread Sam Hartman
I've been working with this a bit more. One possibility would be to add an export option or some git dpm option to generate a dsc or a tree that could be used to generate a dsc. At that point you could either add the changes as a final patch or unapply them. What I'm doing now is running

Bug#763569: git-dpm generates incorrect patches with the ident gitattribute

2014-11-09 Thread Sam Hartman
Bernhard == Bernhard R Link brl...@debian.org writes: Bernhard * Sam Hartman hartm...@debian.org [141109 19:15]: I've been working with this a bit more. One possibility would be to add an export option or some git dpm option to generate a dsc or a tree that could be used

Bug#746578: libpam-systemd to flip dependencies - proposal

2014-11-05 Thread Sam Hartman
I don't think this matters for the vote, and apologies because there's probably a better place to send this advice. I was thinking last night about the apt and debootstrap resolver issues and was wondering whether the following solution might help. I realize the issue is minor and is more about

Bug#746578: libpam-systemd to flip dependencies - proposal

2014-11-04 Thread Sam Hartman
josh == josh j...@joshtriplett.org writes: josh I wouldn't necessarily suggest using this as an argument josh against the proposed resolution. Instead, I'd recommend josh making sure that cgmanager is just as harmless under systemd josh as systemd-shim 8-4 currently is, by

Bug#494381: (no subject)

2014-10-25 Thread Sam Hartman
source: gnome-orca source-version: 3.14 Yeah, I agree this no longer seems to be an issue. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#766569: Please reduce time for freeradius 2.2.5+dfsg-0.2

2014-10-24 Thread Sam Hartman
control: tags -1 -moreinfo Adam == Adam D Barratt a...@adam-barratt.org.uk writes: Adam Control: tags -1 + moreinfo freeradius (2.2.5+dfsg-0.2) unstable; urgency=high * Disable OpenSSL version check; Debian will maintain ABI stability or change the soname, Closes:

Bug#766476: ROM: Security Review Required before inclusion in Jessie

2014-10-23 Thread Sam Hartman
package: moonshot-gss-eap version: 0.9.2-1 severity: serious From the TODO.debian: * Give the security team a change to comment on the included code from wpa_supplicant. There's really no other way; their ABI is not stable enough that it would make sense to build eap shared libraries out

Bug#765871: does not start with new openssl version

2014-10-23 Thread Sam Hartman
control: owner -1 ! Aaaargh. I am going to disable the openssl version check entirely because freeradius has no business getting in the way of Debian security updates. Thanks for the heads up and I hope to have an upload tonight. -- To UNSUBSCRIBE, email to

Bug#760804: serf: FTBFS: Directory /usr/include/mit-krb5 found where file expected.

2014-10-23 Thread Sam Hartman
Hi. I seem to have missed this somehow. I don't think the -config interface is well defined. In particular, I don't think it's clear what flags can be included in foo-config output and what cannot. When including the -isystem patch, we evaluated and made sure all the compilers in Debian could

Bug#766569: Please reduce time for freeradius 2.2.5+dfsg-0.2

2014-10-23 Thread Sam Hartman
: #765871 * Non-Maintainer Upload -- Sam Hartman hartm...@debian.org Thu, 23 Oct 2014 21:45:36 -0400 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#765803: Status of prompting / notification on upgrade for init system switch?

2014-10-23 Thread Sam Hartman
Josh == Josh Triplett j...@joshtriplett.org writes: Josh - It can't check for generated lines for serial consoles or Josh similar; finish-install can generate various additional Josh inittab lines, which the check should include. Since when did systemd actually handle these

Bug#762906: Bug#764669: Bug#762906: krb5-auth-dialog debug output

2014-10-22 Thread Sam Hartman
Perhaps, although I'll note that the krb5 maintainers are unaware of what's exactly going on in 764669. So, feel free to merge, but if you actually have an idea of the problem, please enlighten us, as we don't see that behavior at all. --Sam -- To UNSUBSCRIBE, email to

Bug#766194: debhelper: dh_installinit should gain option to ignore start failures

2014-10-21 Thread Sam Hartman
package: debhelper version: 9.20141003 severity: wishlist I suspect a lot of folks will be writing systemd service units in the future. While writing units for krb5-kdc, I ran across an issue. On first install, until you set up your database, it's kind of expected that krb5-kdc will fail to

Bug#766298: ROM: Not Suitable for Inclusion in Jessie

2014-10-21 Thread Sam Hartman
package: moonshot-trust-router severity: serious justification: ROM version: 1.4.1-1 Based on upstream discussion, the trust router without FreeRADIUS integration does not provide sufficient value to expend the effort for supporting for the length of the Jessie release. Since we're not willing to

Bug#764669: kinit without username, behaviour changes betweek wheezy and jessie

2014-10-10 Thread Sam Hartman
I'm sort of horrified if krb5-auth-dialogue actually calls kinit rather than using APIs directly. But that's not really related to this bug. just kinit seems to work fine for me with 1.12.1+dfsg-9 so I'd like more detail on what goes wrong. -- To UNSUBSCRIBE, email to

Bug#752409: krb5: Modify the control file for bootstrapping without LDAP

2014-10-07 Thread Sam Hartman
These still aren't in a state wwhere both patches can be applied right? I wonder whether it would be better to close these bugs and open new bugs when you're actually in a position that applying a complete patch would be useful to you and would not break the package working with dak, debhelper or

Bug#763806: krb5-kdc: initscript should dependency towards slapd

2014-10-02 Thread Sam Hartman
Are you using systemd or sysvinit? If you have krb5-kdc-ldap installed, I'd expect that we already have a dependency on slapd set up with an innserv-override in krb5-kdc-ldap. If you are using systemd this is a known problem. -- To UNSUBSCRIBE, email to

Bug#763806: krb5-kdc: initscript should dependency towards slapd

2014-10-02 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ The real long-term solution is to convert both services to use Russ systemd socket activation. Josh Tripplet (SP?) and I had a long conversation about socket activation at Debconf. my position is that socket activation is a bad choice

Bug#763806: krb5-kdc: initscript should dependency towards slapd

2014-10-02 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ Sam Hartman hartm...@debian.org writes: my position is that socket activation is a bad choice for network services where the primary user of the socket is non-local. The issue is that inherently socket-activation requires

Bug#763806: krb5-kdc: initscript should dependency towards slapd

2014-10-02 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ Sam Hartman hartm...@debian.org writes: Are you using systemd or sysvinit? If you have krb5-kdc-ldap installed, I'd expect that we already have a dependency on slapd set up with an innserv-override in krb5-kdc-ldap

Bug#763569: git-dpm generates incorrect patches with the ident gitattribute

2014-09-30 Thread Sam Hartman
version 3.9.5, no changes * New upstream version, Closes: #740857, #691770 - Include dictionary.mikrotik, Closes: #672200 Author: Sam Hartman hartm...@debian.org Bug-Debian: http://bugs.debian.org/661915 Bug-Debian: http://bugs.debian.org/669741 Bug-Debian: http://bugs.debian.org/672200 Bug

Bug#745322: Using -isystem for krb5 headers breaks mixed MIT/heimdal applications

2014-09-22 Thread Sam Hartman
Convince heimdal to emit -Isystem as well? Just to play nice? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#761868: ITP: moonshot-gss-eap -- A GSS-API Mechanism for the Extensible Authentication Protocol

2014-09-16 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org x-debbugs-cc: debian-de...@lists.debian.org source: git://git.project-moonshot.org/mech_eap.git license: BSD-3-Clause Description: Project moonshot provides federated access to a wide range of applications. This package adds a GSS-API

Bug#757953: libverto: autoreconf to update config.{sub, guess} and libtool.m4 to fix FTBFS for ppc64el port

2014-09-10 Thread Sam Hartman
Andreas == Andreas Barth a...@ayous.org writes: Andreas * ravi (r...@linux.vnet.ibm.com) [140910 13:56]: We have also successfully verified building libverto source package on ppc64el build machine after applying attached patch. Andreas As ppc64el is now in Debian, I'd be

Bug#760411: ITP: moonshot-ui -- Project Moonshot Identity Manager

2014-09-03 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: http://www.project-moonshot.org/ source: git://git.project-moonshot.org/moonshot-ui.git license: BSD-3-Clause Description: This package manages the Moonshot identity store, permitting users to add and remove identities as well as

Bug#759511: ITP: moonshot-ui -Project Moonshot's Identity Selector

2014-08-27 Thread Sam Hartman
package: wnpp owner: hartm...@debian.org severity: wishlist URL: http://www.project-moonshot.org/ source: git://git.project-moonshot.org/moonshot-ui.git License: BSD-three-clause Description: Project Moonshot provides federated access to services combining the best of EAP, RADIUS (over TLS),

Bug#635847: libkrb5support0: library initialization errors in Perl module context

2014-08-27 Thread Sam Hartman
Benjamin == Benjamin Kaduk ka...@mit.edu writes: Benjamin We added a debian-local change to never unload GSS Benjamin mechanisms back in krb5-1.10.1+dfsg-3; I am curious if Benjamin this is issue is worked around by that patch. I would be surprised because I don't think the issue

Bug#759398: ITP: trust-router - Dynamically configure Trust Between RADIUS Realms

2014-08-26 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: git://git.project-moonshot.org/trust_router.git http://www.project-moonshot.org/ license: bsd-3-clause Description: The trust router establishes a DH key between two RADIUS servers to protect a RADIUS over TLS session. GSS-API

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-24 Thread Sam Hartman
Michael == Michael Biebl bi...@debian.org writes: Michael b/ make krb5-kdc-ship a drop-in snippet as Michael /lib/systemd/system/krb5-kcd.service.d/foo.conf which Michael augments the krb5-kcd.service with the necessary Michael dependencies/orderings. Hmm. How will this work if

Bug#759159: ITP: shibboleth-resolver - Library to access the Shibboleth Attribute Resolver from Third-Party Applications

2014-08-24 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: http://www.shibboleth.org/ Source: svn https://svn.shibboleth.net/extensions/cpp-sp-resolver/trunk Description: Shibboleth library to access Attribute Resolver The Shibboleth Service provider consumes information about an

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
Russ, thoughts on what is the right way to manage the dependency between krb5-kdc-ldap and slapd in systemd? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
control: clone -1 -2 control: retitle -2 Systemd needs to respect /etc/innserv/overrides control: reassign -2 systemd control: severity -2 important control: found -2 systemd/208-6 justification: Breaks unrelated packages at boot. That should be RC except that I think innserv overrides are

Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ Failing that, could krb5-kdc-ldap introduce a somewhat Russ artificial service that exists solely to be Before krb5-kdc Russ and After slapd, thus forcing the ordering constraint? I Russ think that would be the native systemd

Bug#758992: Bug#759001: Bug#758992: krb5-kdc-ldap: please add systemd integration to ensure reliable startup

2014-08-23 Thread Sam Hartman
Well, I'll definitely be fixing the krb5-kdc-ldap issue by including units. I had no idea that innserv-overrides were quite that unused. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#681419: Alternative dependencies on non-free packages in main: counterargument

2014-07-31 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: Ian And from a practical point of view, I would prefer to make a Ian choice that significantly eases collaboration with the GNU Ian Project to one that slightly eases collaboration with Ian proprietary software vendors.

Bug#755520: CVE-2014-4343 in krb5: double-free in SPNEGO initiators

2014-07-21 Thread Sam Hartman
I'm not at ietf this week. If you corner me on Jabber I'm happy to coordinate on an unstable upload. If you get a go ahead from security for any of this I'm happy to help with a stable upload -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#751054: krb5-multidev: use #ifdef rather than #if in gssapi.h

2014-06-16 Thread Sam Hartman
control: clone -1 -2 control: retitle -2 krb5-config breaks high-warning builds control: severity -2 serious I think what I'd like to do here is quickly revert moving krb5-config into krb5-multidev and revert the patch to spit out -I/usr/include/mit-kerberos. We can then work on this on a

Bug#751060: It turns out building -Wundef should be fine after all

2014-06-16 Thread Sam Hartman
Hi. It turns out that a bug in a change in krb5-config introduced in krb5 1.12.1+dfsg-2 caused krb5.h to be treated differently and to be subject to -Wundef. This is fixed in krb5 1.12.1+dfsg-3. I've just uploaded that and confirmed that a pidgin-sipe version that does build -Wundef works

Bug#750041: Patch to update pkg-config files

2014-06-04 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer tags 750041 +patch thanks Jelmer The attached patch update the pkg-config files to use the Jelmer krb5-multidev paths. thanks, and a real oops on this one. Sorry we shipped useless pkgconfig files. -- To UNSUBSCRIBE,

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
I don't really support the split because it seems like kadmin is something you want if you are going to be dealing with keytabs, so it seems like it belongs in krb5-user. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ Sam Hartman hartm...@debian.org writes: I don't really support the split because it seems like kadmin is something you want if you are going to be dealing with keytabs, so it seems like it belongs in krb5-user. Russ No one

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
Yeah, my preference here would be alternatives for kadmin and ktutil and even though alternatives is not a perfect fit. I guess renaming is another option. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#213316: Alternatives enabled for Heimdal's kinit/klist

2014-06-04 Thread Sam Hartman
OK. I'm not going to have time to generate patches for alternatives any time soon, but I'd be happy to make time to review them. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#746395: FTBFS for binary-indep builds (missing python build dependency)

2014-04-29 Thread Sam Hartman
I'm kind of surprised that python-lxml doesn't pull in python. Will confirm that sbuild -A dtrt though before marking closed. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#741051: Dropping Heimdal Kerberos 4 support

2014-04-29 Thread Sam Hartman
I'll attempt to get to your recent set of bugs against krb5 and krb5-config after returning to Boston next week. If Ben or Russ gets to them first, that's fine with me. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#745322: Please ship krb5-config in krb5-multidev

2014-04-29 Thread Sam Hartman
OK. I'll withdraw my objection to krb5-config moving to krb5-multidev. Shouldh we use alternatives for managing krb5-config from Heimdal vs MIT? For what it's worth, I don't support asking package maintainers to update build-depends. The reason I thought introducing krb5-multidev made sense was

Bug#745322: Please ship krb5-config in krb5-multidev

2014-04-21 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer Package: krb5-multidev Jelmer Version: 1.12.1+dfsg-1.1 Jelmer Severity: wishlist Jelmer Tags: patch Jelmer Please ship the krb5-config binary with krb5-multidev. This should make Jelmer it possible for those

Bug#730837: Patch to add -L and -I flags

2014-04-21 Thread Sam Hartman
control: tags -1 -patch Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer The attached patch fixes krb5-config to always spit out -L and -I Jelmer flags. We actually go to a lot of trouble to *not* do that because we've run into cases where including -L and -I can change

Bug#673680: Missing --sysconfdir

2014-04-21 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@samba.org writes: Jelmer The attached patch sets --sysconfdir explicitly to /etc rather than Jelmer /usr/etc and fixes the issue (verified by grepping through 'strings Jelmer /usr/lib/x86_64-linux-gnu/libgssapi*). Hi. For the record, including this

Bug#730837: Patch to add -L and -I flags

2014-04-21 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer On Mon, Apr 21, 2014 at 09:22:46AM -0400, Sam Hartman wrote: control: tags -1 -patch Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer The attached patch fixes krb5-config to always spit out -L

Bug#741573: Two menu systems

2014-04-11 Thread Sam Hartman
Steve == Steve Langasek vor...@debian.org writes: Steve On Wed, Apr 09, 2014 at 01:27:46PM -0400, Sam Hartman wrote: Thanks for bringing this issue back to the question that was brought to the TC. The discussion so far on this bug has focused on discussing what the right

Bug#741573: Two menu systems

2014-04-11 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: So, if you've reviewed this enough to support Bill's claim that there isn't a consensus because there are substantial objections raised in the discussions and not addressed, then please say that. If you have not

Bug#744137: Please upgrade to m2crypto 0.22.3

2014-04-10 Thread Sam Hartman
package: m2crypto version: 0.21.1-3 severity: wishlist It would be really nice to get a more recent version of m2crypto. I am hoping that it will help with some of the segfaults. --Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#741573: Two menu systems

2014-04-09 Thread Sam Hartman
, then focusing on the technical details of the policy seems reasonable. In my opinion, not respecting the project as a whole enough to make a determination about consensus does significant harm. Respectfully, Sam Hartman -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

Bug#740603: /etc/shibboleth not created when not using libapache2-mod-shib2

2014-04-01 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ This is what I did for now. I created a libshibsp-plugins Russ package and a shibboleth-sp2-utils package and made the Russ dependencies from libapache2-mod-shib2 and from -utils to Russ -plugins strict (to require exactly the

Bug#740603: /etc/shibboleth not created when not using libapache2-mod-shib2

2014-04-01 Thread Sam Hartman
Makes sense to me. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#742820: freeradius: CVE-2014-2015

2014-03-27 Thread Sam Hartman
Salvatore == Salvatore Bonaccorso car...@debian.org writes: Salvatore Hi, Salvatore the following vulnerability was published for freeradius. Salvatore CVE-2014-2015[0]: denial of service in rlm_pap hash Salvatore processing thanks. I don't think this is worth a DSA for

Bug#732562: Do you need any help getting prpltwtr into debian?

2014-03-27 Thread Sam Hartman
Hi. I'd kind of like to be using this plugin, but it's not in Debian. It looks like it has packaging. Anything I can do to help? --sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#741495: freeradius: diff for NMU version 2.1.12+dfsg-1.3

2014-03-12 Thread Sam Hartman
+into globals so as to administer an authentication server is more +scary than I choose to contemplate. + * Add IODBC include directories, Thanks Maximiliano Curia +, Closes: #740060 + + + -- Sam Hartman hartm...@debian.org Wed, 12 Mar 2014 20:36:19 -0400 + freeradius (2.1.12+dfsg-1.2) unstable

Bug#741051: krb5-config's krb5.conf template is crufty

2014-03-10 Thread Sam Hartman
1) please make sure you're right for domain_realms both for MIT and Heimdal; the leading dot used to not be implied by not leading dot. 2) I think mentioning the enctypes entries in comments is valuable but I think having uncommenting entries is undesirable. Besides that decrufting is good. I

Bug#647742: update

2014-03-06 Thread Sam Hartman
libradsec 0.0.5 seems stable enough to include in Debian. I have packaging available at git://git.project-moonshot.org/libradsec.git on the debian branch. I want to get a review of a few things and will upload. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#740603: /etc/shibboleth not created when not using libapache2-mod-shib2

2014-03-03 Thread Sam Hartman
Russ, I'm happy to implement whatever solution is decided for this. However it would be good to get discussion on how to approach separating the aspects from /etc/shibboleth that are apache-specific from those that are not. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

Bug#738850: ITP: iniparser -- a stand-alone INI file reading/writing library

2014-02-13 Thread Sam Hartman
The krb5 libraries include read and write support for the krb5.conf format, which is very similar but not identical to ini. I would be entirely happy with the response that: 1) the krb5 profile library should be used only for modifying Kerberos configs 2) supporting the ABI that your

Bug#727708: init system coupling etc.

2014-02-12 Thread Sam Hartman
When I've found myself trying to avoid normative language in situations like this I end up with statements like: It is important that all packages support smoothe upgrades from Wheezy to Jessie , even when the system is booted with sysvinit. -- To UNSUBSCRIBE, email to

Bug#727708: call for votes on default Linux init system for jessie

2014-02-11 Thread Sam Hartman
Bdale == Bdale Garbee bd...@gag.com writes: Bdale Steve Langasek vor...@debian.org writes: FWIW I have always assumed that the casting vote is implicit in the chair's ballot. To require the chair to explicitly exercise their casting vote, as opposed to the chair's preferences

Bug#738340: Please rebuild krb5-sync and libauthen-krb5-admin-perl on all arches

2014-02-09 Thread Sam Hartman
package: release.debian.org I'd like to request binary NMUs for krb5-sync and libauthen-krb5-admin-perl on all architectures in order to build against new krb5. The soname for the krb5 admin libraries changed. Thanks, --Sam -- To UNSUBSCRIBE, email to

Bug#738364: krb5-sync FTBFS on armel armhf ia64mips mipsel sparc

2014-02-09 Thread Sam Hartman
package: krb5-sync version: 3.0-1 severity: serious justification: FTBFS I'm surprised this is not already filed, but it seems like it should be. krb5-sync is failing tests (and thus builds) on the above listed architectures. -- To UNSUBSCRIBE, email to

Bug#402164: it isn't about ldap, just Cyrus 2.1/2.2 and GSSAPI

2014-02-08 Thread Sam Hartman
I agree with russ. Unless someone can get a backtrace with libkrb5-dbg installed, there's not much we can do. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
Hi. There seems to be a significant conflict within the TC about what the L options mean. Speaking as a maintainer who could be affected by this and as someone who would sponsor a GR to override one interpretation butnot another, I'd request that the TC clarify what it means with the next

Bug#727708: Call for votes on init system resolution

2014-02-07 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: Ian Anthony Towns writes (Re: Bug#727708: Call for votes on init Ian system resolution): It's really pretty terrible to actively use FD to try to block options that aren't your favourite. Honestly, I would have

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
Colin == Colin Watson cjwat...@debian.org writes: Colin I think Ian and I are agreed that L excludes 1), and permits Colin 3). On reflection I think I agree that L has to exclude 2) Colin as well. Hmm, I am reading Ian as against 3. I request that TC members work with Ian on the

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
Sam == Sam Hartman hartm...@debian.org writes: Colin == Colin Watson cjwat...@debian.org writes: Colin I think Ian and I are agreed that L excludes 1), and permits Colin 3). On reflection I think I agree that L has to exclude 2) Colin as well. Sam Hmm, I am reading Ian

Bug#727708: Please clarify L options with regard to interfaces [and 1 more messages]

2014-02-07 Thread Sam Hartman
Yeah, I now understand what you mean by L. I'll be writing more in the form of a blog post and probably GR text. I will send a pointer to the TC as I think I may be hitting close to something that Russ may find useful. I'll refrain from trying to convince the TC because you have enough voices

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
control: subscribe -1 Charles == Charles Plessy ple...@debian.org writes: Charles The 3.0 (native) format is useful when packaging a work Charles that is developped and distributed in a Git repository. Charles Please leave us this possibility. Let me describe the use case I have

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Andreas == Andreas Beckmann a...@debian.org writes: Andreas On 2014-02-05 10:57, Sam Hartman wrote: tarballs useful; anyone who is likely to want to build this from source probably has a copy of git and can checkout a tag. Andreas Such a tag corresponds to an upstrema version

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Neil == Neil Williams codeh...@debian.org writes: That makes sense and I do something similar as appropriate. Even so, I do not wish to maintain the upstream tarball as a maintained artifact. There are cases where packaging release releases are made. Maintaining pristine-tar commits for daily

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Bernhard == Bernhard R Link brl...@debian.org writes: As I mentioned I have a packaging branch and an upstream branch. I wish to use debian revisions to reflect packaging changes. It's slightly more complex than changes to debian directory involve a debian revision change; changes to other

Bug#723144: sasl2-bin: saslauthd infinite loop inside sendto_kdc.c at function service_fds

2014-01-31 Thread Sam Hartman
control: reassign 723144 libkrb5-3 control: found 723144 krb5/1.10.1+dfsg-5 control: forcemerge 694988 723144 Yep, that's a krb5 bug all right. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#737133: rm: krb5-appl -- ROM obsolete by kerberos ssh

2014-01-30 Thread Sam Hartman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 package: ftp.debian.org Hi. After discussion on debian-devel, I've decided to remove krb5-appl. One of the comaintainers dropped out, and after discussion we realized that we weren't using the package, there are better alternatives in the

Bug#735323: krb5-multidev needs to depend on libverto-dev

2014-01-15 Thread Sam Hartman
I wonder if introducing a libkrad-dev package isn't the right solution here. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#735323: krb5-multidev needs to depend on libverto-dev

2014-01-15 Thread Sam Hartman
I'm going to have krb5-multidev recommend libverto-dev. I don't really consider krad.h to be a major part of the Kerberos infrastructure. If you need krad, I think it is fair for you to need to build-depend on libverto-dev yourself. I believe that recommends expresses the right relationship here,

Bug#727708: systemd jessie - jessie+1 upgrade problems

2013-12-18 Thread Sam Hartman
Adrian, I'm frustrated when I read your message because you put words in my mouth that I did not speak. I never said that Debian should allow systemd to dictate policy for multiple distributions nor did I say that Debian should allow one upstream systemd maintainer to dictate decisions for Debian.

Bug#727708: systemd jessie - jessie+1 upgrade problems

2013-12-17 Thread Sam Hartman
Adrian == Adrian Bunk b...@stusta.de writes: Adrian Yes, it is speculation that other new features (or even Adrian bugfixes) might appear in the kernel and might become Adrian mandatory in systemd between jessie and jessie+1. Adrian But that is a risk, and it is a risk that is

Bug#731812: krb5-kdc: KDC with db2 backend cannot create a new database

2013-12-16 Thread Sam Hartman
control: tags -1 moreinfo Hi. I'm not able to reproduce this. One step you performed that I would recommend against is creating a kdam5.keytab. That's not needed and may be harmful. However, I created a wheezy vm, created a database, created a default policy and tried to use it to create

Bug#725596: Bug#728845: nmu fixing two issues

2013-11-30 Thread Sam Hartman
It was not me or been feel free to resubmit without using the delayed Q Michael Gilbert mgilb...@debian.org wrote: On Sat, Nov 30, 2013 at 1:14 AM, Salvatore Bonaccorso wrote: Hey Mike, On Sat, Nov 16, 2013 at 07:15:49PM -0500, Michael Gilbert wrote: control: tag -1 patch control: tag -1

Bug#730267: libkrb5-dev: file conflict with heimdal-multidev: /usr/lib/x86_64-linux-gnu/pkgconfig/k{adm, rb5}*.pc

2013-11-24 Thread Sam Hartman
I assume we're agreed that the -multidev packages should not conflict with the libkrb5-dev or heimdal-dev packages. That is, you can have both multidevv packages and one of the lib*-dev packages installed? So it's fine to have some mit-specific .*pc files in krb5-multidev, and some

Bug#608583: Bug#640206: barnowl: please stop using libnet-irc-perl

2013-11-24 Thread Sam Hartman
OK. I had updated the barnowl packaging, but upstream asked me to hold off and update to a new release. I'll cycle back with them and upload something fixed in a coupled of days. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Bug#725596: Bug#728845: nmu fixing two issues

2013-11-18 Thread Sam Hartman
Hi. I've merged your changes into the 1.12 packages we're working on. Those are targeted to experimental and will require a trip through new. Your NMU should hit unstable in a couple of days; thanks. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of

Bug#652699: libverto problem

2013-08-25 Thread Sam Hartman
control: tags -1 confirmed control: reassign -1 libverto1 control: found -1 libverto1/0.2.2-1 Yeah, I can reproduce. The way this issupposed to work is that libverto1 should work with any of the plugins. However, it appears the glib plugin is broken. -- To UNSUBSCRIBE, email to

Bug#439039: Bug#495163: useless static library due to libkrb5

2013-07-18 Thread Sam Hartman
For myself I'm unconvinced that it makes sense to have static libraries used for aid. I was really hoping the security team would comment on this one way or another. I can certainly create libkrb5-static. But I'd rather have a broader consensus of the project than just the aid maintainer agreeing

Bug#712629: Info received (Bug#712629: Acknowledgement (espeak: fails to speak final chunk))

2013-06-25 Thread Sam Hartman
Hi. The pulse trigger patch is bogus and doesn't seem to make any difference. I'm sorry about that. I thought it did make a difference when I submitted it; apparently though the affects of the final bit of speech trimming were not as pronounced as I had previously thought. I actually managed to

Bug#712629: Acknowledgement (espeak: fails to speak final chunk)

2013-06-23 Thread Sam Hartman
Hi. Upgraded. It's definitely using pulse now. I expect to be closing this bug as fixed in the new version within a day unless something unexpected comes up. Now,' I'm seeing some kind of impressive latency starting a chunk of speech; cursoring around is kind of painful. Will also looking into

Bug#712629: Acknowledgement (espeak: fails to speak final chunk)

2013-06-23 Thread Sam Hartman
Ah, I see you already included the patch:-) sorry. Well, it does look like the bug is fixed. I'm likely to recommend you remove the patch as I don't think it does anytihng but will get back to you. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of

Bug#712629: Acknowledgement (espeak: fails to speak final chunk)

2013-06-19 Thread Sam Hartman
Hi. I'm no longer convinced my patch helps things, nor that I understood the root cause of the problem. I'm quite convinced that under pulseaudio, speech is getting chopped. But, I'm noticing that it's actually using alsa (presumably via portaudio) and pulse via that, rather than the direct pulse

Bug#712660: speech-dispatcher espeak: holds audio open for lifetime of module

2013-06-18 Thread Sam Hartman
package: speech-dispatcher version: 0.7.1-6.2 severity: important tags: upstream The espeak module of speech-dispatcher leaves the audio open the entire time the module is running. This has amazingly bad consequences for accessibility situations especially with gnome and gdm, although I suspect

Bug#708711: src:krb5: 1.10.1+dfsg-6 builds on 0 architectures

2013-06-17 Thread Sam Hartman
If you or someone else wants to NMU a solution to this, be my guest. I'd recommend uploading without delay. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#712629: espeak: fails to speak final chunk

2013-06-17 Thread Sam Hartman
package: libespeak1 version: 1.43.03-2 tags: patch, upstream severity: important Hi. I noticed that espeak as an emacspeak speech server is basically unusable if you're using pulse, which is kind of the default configuration in wheezy. This made my accessibility experience quite difficult. You

Bug#625235: speech-dispatcher ordering with ALSA at system start

2013-06-17 Thread Sam Hartman
Here's what is going on here. 1) if pulseaudio is started as a given user then only that user will be able to access the audio device. 2) by default if an application tries to use pulse and it's not running, then pulse will start as that user. 3) If something starts speech-dispatcher at

Bug#711527: libkrb5-3: Multiarch incompatibility with assorted kerberos packages

2013-06-07 Thread Sam Hartman
Unfortunately, it will be a while before 1.11 migrates from experimental to sid to fix this. It's a new upstream version and it seems to be getting a fair bit of churn at the moment. I expect this to be fixed in a week or two. Also, when you say firefox is not installable, you presumably mean

<    4   5   6   7   8   9   10   11   12   13   >