Bug#698534: krb5-user: usage of keytabs gives Generic preauthentication failure while getting initial credentials

2013-05-28 Thread Sam Hartman
Well, is there any reason you're not using the full name for the principal in the keytab? in AD, i'd expect that to work too. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#698534: krb5-user: usage of keytabs gives Generic preauthentication failure while getting initial credentials

2013-05-28 Thread Sam Hartman
i think you need to reclose the bug not simply mark it as fixed again. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#647742: libradsec: changing back from ITP to RFP

2013-05-27 Thread Sam Hartman
retitle 647742 ITP: libradsec -- RADIUS over TLS/DTLS/UDP/TCP library owner 647742 ! thanks Lucas, thanks for the prod. my apologies for not keeping the bug updated. The current packaging status of libradsec can be found at git://git.project-moonshot.org/libradsec.git in the debian and

Bug#708267: cve-2002-2443: kpasswd udp ping-pong

2013-05-22 Thread Sam Hartman
so, i'll be uploading to oldstable-security shortly. i have tested those patches. i have a package ready to build at the wheezy branch of the debian krb5 git (debcheckout krb5) I have not built that. I apparently don't have a wheezy environment and am not going to have chance to set up chroot

Bug#708711: src:krb5: 1.10.1+dfsg-6 builds on 0 architectures

2013-05-22 Thread Sam Hartman
Raphael == Raphael Hertzog hert...@debian.org writes: Raphael On Fri, 17 May 2013, Russ Allbery wrote: See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707195 for the discussion. Raphael Looks like neither upstream nor the Debian maintainers want Raphael to revert this

Bug#708711: src:krb5: 1.10.1+dfsg-6 builds on 0 architectures

2013-05-22 Thread Sam Hartman
Actually, it's probably easier if I make the updates. rationale: You have your repo mixed in with something else. It makes a bit harder to construct the initial dpm state. but I can take what you have and the 1.11.2 tarball and prepsource myself and then rsync the repo into place on alioth. It

Bug#708711: src:krb5: 1.10.1+dfsg-6 builds on 0 architectures

2013-05-22 Thread Sam Hartman
As I recall 1.11 includes a verto update. how critical is that? do I need to update debian libverto befor krb5? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#708267: cve-2002-2443: kpasswd udp ping-pong

2013-05-21 Thread Sam Hartman
I'll try to get it done by tomorrow morning east coast time. If it doesn't happen by then it will be a while and it would be great if someone else would step forward. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#708973: krb5: Dependency between arch-dep and arch-indep targets in debian/rules

2013-05-20 Thread Sam Hartman
This was intentional at the time it was introduced because the policy and build maintainers were in a pissing match and i lost a lot of respect for everyone involved. however I suppose at this point going and enabling build-arch support for real is in the best interest of the project. --Sam --

Bug#708267: cve-2002-2443: kpasswd udp ping-pong

2013-05-20 Thread Sam Hartman
Florian == Florian Weimer f...@deneb.enyo.de writes: Florian Yes, packet loops can be annoying. I think we should issue Florian a DSA for this. OK, do you want me to prepare patches and builds for squeeze and wheezy? -- To UNSUBSCRIBE, email to

Bug#439039: Bug#495163: useless static library due to libkrb5

2013-05-18 Thread Sam Hartman
Alessandro == Alessandro Ghedini gh...@debian.org writes: 3) A static aide with libcurl and somewhat crippled Kerberos meaning that aide needs to get libcurl and krb5 updates. In addition libcurl might potentially need to get rebuilt on Kerberos security updates.

Bug#708175: Converting libkrb53 into transitional package instead of conflicting with libkrb5-3

2013-05-16 Thread Sam Hartman
Well, krb5 really isn't that hard to rebuild. Other than rebuilding for security I wouldn't feel very uncomfortable about building a local krb5. And note that if you have a php 5.2 that you haven't touched since lenny, well, clearly you're willing to deal with not rebuilding some things for

Bug#707195: Also breaks krb5 build

2013-05-15 Thread Sam Hartman
control: affects -1 krb5 Hi. I'm trying to get a security update of krb5 into sid, and this issue is breaking that build. I'm not thrilled at the concept of making significant documentation changes to the upstream docs in order to get this to build. --Sam -- To UNSUBSCRIBE, email to

Bug#439039: Bug#495163: useless static library due to libkrb5

2013-05-15 Thread Sam Hartman
My recommendation is that we talk to the security team. The biggest disadvantage of all these static libs running around is the number of packages they need to do security updates for. We could ask them about whether it's better to have: 1) no static aide 2) a static libcurl with less

Bug#707195: Also breaks krb5 build

2013-05-15 Thread Sam Hartman
I'd strongly recommend making this bug sevirity serious. I don't think we want to be unable to build a bunch of stuff in testing. --Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#707195: Also breaks krb5 build

2013-05-15 Thread Sam Hartman
The concern I have is that I'd like to upload a very small patch that fixes a security issue to the krb5 package in sid and get it into testing quickly. I am nervous when I think about including that patch along with a bunch of doc changes. In general, when we're going to break a bunch of

Bug#708267: cve-2002-2443: kpasswd udp ping-pong

2013-05-14 Thread Sam Hartman
I assume this goes back to squeeze as well. Shouldn't the severity be higher? This seems probably worth a DSA because such ping-pong attacks can really be bad for a network/server. Or am I missing mittigations? I'd be happy to work on packages. -- To UNSUBSCRIBE, email to

Bug#708267: cve-2002-2443: kpasswd udp ping-pong

2013-05-14 Thread Sam Hartman
severity 708267 serious tags 708267 security found 708267 krb5-admin-server/1.8.3+dfsg-4 thanks Yeah, sounds like an advisory to me. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#708267: cve-2002-2443: kpasswd udp ping-pong

2013-05-14 Thread Sam Hartman
Benjamin == Benjamin Kaduk ka...@mit.edu writes: Benjamin I have a patch staged in my local checkout of the Benjamin packaging, but need to settle out some (apparent) Benjamin multiarch issues on my jessie machine before I can install Benjamin the resulting binaries for testing.

Bug#708175: Converting libkrb53 into transitional package instead of conflicting with libkrb5-3

2013-05-14 Thread Sam Hartman
I don't think there's a way to make any changes for this issue in wheezy. I understand that you are disappointed because you'd like to use your local packages. Debian's policy is to support transitions for one release. That's why libkrb53 is a dummy package in squeeze; it does nothing there.

Bug#439039: Bug#495163: useless static library due to libkrb5

2013-05-10 Thread Sam Hartman
There are reasons that the krb5 upstream build does not include static libs. The main problem is that more and more krb5 depends on plugins for various things. As an example, preauthentication, KDC location,' GSS-API mechanisms all support plugins. In the krb5 in wheezy, you cannot request FAST

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-25 Thread Sam Hartman
OK. Why don't you run that patch by debian-rele...@lists.debian.org with a SRM tag in the subject. If you get an ack, then I'm happy to to sign and upload. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#701492: libatk-wrapper-java: Hangs starting applications

2013-04-15 Thread Sam Hartman
I'm unaware of any particularly interesting configuration of my gnome session. What would be a good way to test with as much configuration as possible removed other than enabling orca? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-15 Thread Sam Hartman
My recommendation is that this is not worth a DSA or stable fix for squeeze unless some Debian user comes forward and says that they're seeing crashes in the wild related to this. --Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe.

Bug#704775: Processed: found 704775 in 1.8.3+dfsg-4squeeze6

2013-04-15 Thread Sam Hartman
Tom == Tom Yu t...@mit.edu writes: Tom Sam Hartman hartm...@debian.org writes: My recommendation is that this is not worth a DSA or stable fix for squeeze unless some Debian user comes forward and says that they're seeing crashes in the wild related to this. --Sam

Bug#704647: krb5: rdns=false does not work

2013-04-07 Thread Sam Hartman
It looks like this patch is redundant with what's actually pending. I think all I need to do is upload the tip of master. If I missed anything let me know. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#637442: debmirror cannot mirror for live-build

2013-03-04 Thread Sam hartman
I find it desirable to build live images from a local mirror. Recently, live-build moved to the new conntents file location for distributions newer than squeeze. Unfortunately, I cannot easily get debmirror to mirror these new contents file locations. As a result, I need to hack up live-build

Bug#701492: libatk-wrapper-java: Hangs starting applications

2013-02-23 Thread Sam Hartman
Package: libatk-wrapper-java Version: 0.30.4-2 Severity: important Hi. I am using openjdk-6 (6b27-1.12.3-1) In uncommented libatk-wrapper which has been commented out of accessibility.properties in the openjdk packages because of startup problems. When I do that policytool works fine with orca.

Bug#700759: Shared library policy on private libs

2013-02-21 Thread Sam Hartman
Phillip == Phillip Susi ps...@ubuntu.com writes: Phillip Not having the .pc file and headers etc in the -dev package Phillip would prevent the build of anything with a decent Phillip pkg-config enabled build system, so that could work with a Phillip tweak to the policy to allow

Bug#700759: Shared library policy on private libs

2013-02-20 Thread Sam Hartman
Guillem == Guillem Jover guil...@debian.org writes: Guillem On Tue, 2013-02-19 at 20:30:48 -0500, Sam Hartman wrote: with the current packaging tools, you tend to end up producing the .shlibs files in order to manage cross-package dependencies within a single source package

Bug#700759: Shared library policy on private libs

2013-02-19 Thread Sam Hartman
Phillip == Phillip Susi ps...@ubuntu.com writes: Phillip On 2/18/2013 1:21 PM, Sam Hartman wrote: 2) don't install a .so in a -dev package. Phillip That might be a signal a human can understand, but the Phillip build system won't catch it. The goal is to make sure

Bug#700759: Shared library policy on private libs

2013-02-18 Thread Sam Hartman
Hi. I'd like to speak a bit to what tthe right answer here is rather than what the policy currently says. It's sometimes fairly annoying to move a library out of the default path and to adjust the build system accordingly. Russ did that for one of krb5's private libraries, and in retrospect, I

Bug#698534: krb5-user: usage of keytabs gives Generic preauthentication failure while getting initial credentials

2013-01-22 Thread Sam Hartman
So, if you type kinit foo@REALM then run kvno foo@REALM My suspicion is that to what extent kvno matters for tgts has changed recently. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#698534: krb5-user: usage of keytabs gives Generic preauthentication failure while getting initial credentials

2013-01-20 Thread Sam Hartman
My guess is that you have the wrong kvno. Can you try runnig the kvno command on the principal in question immediately after a successful kinit? It's possible that your KDC won't let you find out the kvno that way in which case things are more difficult to diagnose. --Sam -- To UNSUBSCRIBE,

Bug#694988: libkrb5-3: select on set of invalid fds, leads to infinite loop in sshd

2012-12-04 Thread Sam Hartman
Hi. I'm happy to apply the upstream patch to sid. It's a bit more tricky to get this into wheezy. In evaluating whether that's justified, can I get any information you have on how often this bug is going to trigger both in a theoretical sense and a practical sense? --Sam -- To UNSUBSCRIBE,

Bug#693931: Please unblock krb5 1.10.1+dfsg-3

2012-11-21 Thread Sam Hartman
, Closes: #693741 -- Sam Hartman hartm...@debian.org Mon, 19 Nov 2012 17:35:04 -0500 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#693741: gss-api plugin unloading crashes unrelated programs

2012-11-19 Thread Sam Hartman
package: libgssapi-krb5-2 severity: grave version: 1.7 justification: breaks unrelated packages During process exit, the gss-api library dlcloses each plugin it has loaded. Unfortunately, many of those plugins have a link-time dependency on the gss-api library. This means there is a cycle in the

Bug#687647: CVE-2012-1013

2012-11-19 Thread Sam Hartman
severity 687647 serious thanks justification: In my opinion as maintainer it would be strongly desirable to release with this security fix in place -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#688772: gnome Depends network-manager-gnome

2012-10-23 Thread Sam Hartman
Don, in your option 4B, I wonder if it would be a good idea to have the depend be something like g-n-m|wicd|no-network-manager ANd have an empty extra package that users can install if they really want neither n-m or wicd? While I don't get a vote, I think that would be a reasonable option if

Bug#688772: gnome Depends network-manager-gnome

2012-10-12 Thread Sam Hartman
I'm still confused why recommends doesn't work for everyone. I understand that the Gnome maintainers want N-M installed by default. Except I think recommends gets you that. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#685069: Fwd: End of Life date for Shibboleth SP V2.4.3

2012-10-05 Thread Sam Hartman
Hi. I've minimally packaged a pre-release of 2.5 as part of Project Moonshot. The work required to get packages that build was fairly minimal. I have not looked at adding 2.5 specific features other than GSS-API, so for example new files etc are not installed. I don't anticipate moving from

Bug#688772: gnome Depends network-manager-gnome

2012-09-28 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: Ian Ian Jackson writes (Bug#688772: gnome Depends Ian network-manager-gnome): 6. We specifically forbid anyone from introducing in wheezy, or in sid until wheezy is released: a. Any new or enhanced dependencies, or

Bug#688772: gnome Depends network-manager-gnome

2012-09-26 Thread Sam Hartman
Ian == Ian Jackson ijack...@chiark.greenend.org.uk writes: Hi. I'm very pleased that you took the time to write a thoughtful response to my message. I appreciate that you're trying to work with me even though the situation is frustrating and you feel under pressure to work towards the solution

Bug#688772: gnome Depends network-manager-gnome

2012-09-25 Thread Sam Hartman
Ian, I consider myself an uninvolved party in this matter; I don't really want network-manager installed on my systems, but I'm not particularly keyed up about it. I'm not on the TC. I have been following the issue enough to have an opinion. I'm reasonably good at process issues, and think I

Bug#684597: krb5-user - kadmin segfaults

2012-08-12 Thread Sam Hartman
tags 684597 moreinfo severity 684597 importantthanks I don't see this and don't know how to reproduce. It would be valuable to understand where it's failing creating the TCP endpoint. So, for example seeing the last thing it's doing from strace or alternatively doing a noopt nostrip build and

Bug#684597: krb5-user - kadmin segfaults

2012-08-12 Thread Sam Hartman
OK. Can you check whether upgrading libgssrpc4 fixes your problem? If so, then the fix for wheezy is probably to have a more strict dependency. We'll obviously want to talk to upstream about what's going on here. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#683435: [SPAM] Bug#683429: CVE-2012-1014/CVE-2012-1015: KDC heap corruption and crash vulnerabilities

2012-07-31 Thread Sam Hartman
source: krb5 source-version: 1.8.3+dfsg-4squeeze6 I expect the security team will be issuing a DSA within a couple of days. Also, for unstable, fixed in 1.10.1+dfsg-2 The uploads happened before you opened the bug so they are not reflected in the changelog. Note that squeeze is vulnerable only

Bug#646367: krb5: MITKRB5-SA-2011-006 (multiple denial-of-service issues)

2012-07-13 Thread Sam Hartman
Honestly, the conditions involved are rare enough I don't think this is worth fixing for squeeze. If you want to prepare a fix it's a fairly easy patch linked from the MIT advisory. However I'd suggest that we wait until a single user running squeeze comes forward and confirms they are running

Bug#669127: Trying KRB5_TRACE

2012-05-20 Thread Sam Hartman
OK. This is a bit of a long-shot and I apologize if the descriptino is insufficient. There's a package krb5-gss-samples which includes a gss-client and gss-server program. you start gss-server like KRB5_KTNAME=/etc/krb5.keytab gss-server service@hostname where service is something like host

Bug#673680: No support for package installed gss-api mechanism

2012-05-20 Thread Sam Hartman
package: libgssapi-krb5-2 severity: important version: 1.8 There's no useful way to package up GSS-API mechanisms. The mechglue reads a config file /usr/etc/gss/mech. This is bogus on the face because it's not FHS-compatible. (This is non-RC because the file is not shipped with the package)

Bug#673327: live-build incorrectly handles binary package lists and live-installer

2012-05-17 Thread Sam Hartman
package: live-build severity: normal version: 3.0~a47-1 I'm building an image with --debian-installer=live If my d-i distribution is daily and my main distribution is wheezy then it fails to have a package list in config/package-lists/*.lists{.binary}. elHere's what seems to happen

Bug#673328: live-installer does not preserve /var/log; breaks freeradius

2012-05-17 Thread Sam Hartman
package: live-installer severity: normal If the live system includes the freeradius package, it fails to start freeradius because /var/log/freeradius fails to exist. As best I can tell something in the installer is clobbering /var/log because it's missing a lot of directories and files present

Bug#672483: libdnet should not recommend dnet-common

2012-05-11 Thread Sam Hartman
package: libdnet severity: important version: 2.59 justification: libraries should not impact global system state. It's entirely reasonable for a random program that supports decnet to link against the libdnet library. To my shock, there are programs that support decnet, but apparently it's not

Bug#669127: Possibly related to keytab contents

2012-05-09 Thread Sam Hartman
This is in response to a bug where after an upgrade libpam-krb5 failed to authenticate giving an unsupported encryption type. Around march of 2011, MIT changed how they pick the principal to use for krb5_verify_init_creds, a function used internally by libpam-krb5. If that's the case, then

Bug#670918: CVE-2012-1012

2012-05-08 Thread Sam Hartman
severity 670918 normal thanks Moritz == Moritz Muehlenhoff muehlenh...@univention.de writes: Moritz Package: krb5 Severity: grave Tags: security Moritz Please see Moritz https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1012 Moritz for details I agree that Debian has the

Bug#653506: Please enable hardened build flags

2012-04-09 Thread Sam Hartman
Moritz == Moritz Mühlenhoff j...@inutil.org writes: Moritz On Thu, Dec 29, 2011 at 01:03:51AM +0100, Moritz Muehlenhoff wrote: Package: barnowl Version: 1.6.2-1.1 Severity: important Tags: patch Please enable hardened build flags for barnowl. dh does inject them

Bug#658514: libgssapi-krb5-2: krb5_gss_get_name_attribute() fails to set *display_value on success

2012-03-28 Thread Sam Hartman
Sorry, I'm a bit swamped at the moment; will attempt to deal with this next week. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#494381: gnome-orca: gnome-terminal script has no way to move focus to cursor

2012-03-21 Thread Sam Hartman
Yes, sounds like a doc issue to me. Thanks for the tip! -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#664775: Inaccurate manual page for kadmin, or what is 'time'...

2012-03-21 Thread Sam Hartman
So, things like -maxlife take input like 3 hours; you specify the units. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#664775: Inaccurate manual page for kadmin, or what is 'time'...

2012-03-20 Thread Sam Hartman
tags 664775 confirmed upstream retitle 664775 kadmin prints lifetime in seconds not something useful thanks I suspect it is seconds and I actually like the output in the documentation more than the code. So, it might be a better fix to update the code to be consistent with the docs. I've

Bug#658514: libgssapi-krb5-2: krb5_gss_get_name_attribute() fails to set *display_value on success

2012-02-03 Thread Sam Hartman
tags 658514 confirmed thanks OK. This change appears to have been introduced in 1.10. Obviously we'll fix. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#655248: Hardened build flags not fully enabled

2012-01-13 Thread Sam Hartman
Hi. I believe the next upload fixes this. I do have a question though. Is there a way to change hardening config with dpkg-buildflags style rules files? Say I want to enable pie for some of the krb5 executables. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a

Bug#655248: Hardened build flags not fully enabled

2012-01-09 Thread Sam Hartman
Hi. I'll fix the bug. I'll be taking a different approach. The debian/rules is intended to work with or without a new dpkg-buildflags. Your patch removes that support (which is actually broken in the current debian/rules) -D_Reentrant is no longer needed. But thanks for letting me know I broke

Bug#652414: dpkg-dev: dpkg-source --commit with three arguments still requires .orig.tar.gz

2011-12-23 Thread Sam Hartman
Sure. After looking at this more, it appears to be a doc bug. 1) I had assumed that the third argument to dpkg-source --comit was relative to the current directory. It seems not to be and unless I give an absolute path it doesn't work 2) If the patch is not found rather than giving an error

Bug#652414: dpkg-dev: dpkg-source --commit with three arguments still requires .orig.tar.gz

2011-12-16 Thread Sam Hartman
Package: dpkg-dev Version: 1.16.1.2 Severity: normal based on the man page if I run dpkg-source --commit . patch_name foo.patch I'd expect that the original tarball would not be needed. As far as I can tell the program seems to actually ignore the third argument and tries to build the diff

Bug#650958: Is this really RC

2011-12-14 Thread Sam Hartman
So far it sounds like this affects one user and is hard for others to reproduce. I'm wondering if this is really RC? (I'd like to see the new krb5 get into testing and samba has to migrate first. I'm not sure what besides this bug is holding it back, possibly it's moot because of transition

Bug#651619: curl: dependencies insufficient, application fails to load

2011-12-10 Thread Sam Hartman
package: curl severity: grave version: 7.23.1-2 curl: relocation error: curl: symbol curl_dostrdup, version CURL_OPENSSL_3 not d efined in file libcurl.so.4 with link time reference I have libcurl3 Version: 7.21.3-1 Upgrading libcurl3 fixes things, but the shlibs

Bug#607228: Responses to suggestions

2011-12-09 Thread Sam Hartman
1) As you guess sessions schroots don't work because you always try to begin a session. 2) --add-depends is great if I want to add a dependency. In my case though I'm building a set of related packages triggered by buildbot and I want to make previous build results available to other sbuild

Bug#651081: doxygen endless loop

2011-12-07 Thread Sam Hartman
Add to the list xmltooling. Strace looks like access(/build/hartmans-xmltooling_1.5+dfsg~moonshot1-2-amd64-ZxBtbA/xmltooling- 1.5+dfsg~moonshot1/typeinfo, F_OK) = -1 ENOENT (No such file or directory) access(., F_OK) = 0 lstat(., {st_mode=S_IFDIR|0755, st_size=4096,

Bug#631018: [RFC] libevent 2.0 transition

2011-12-07 Thread Sam Hartman
Well, I've taken a bit of a look at python-event. Unfortunately, it looks like it simply doesn't support libevent2. It seems to dig into the bufferevent structs a lot in ways that have changed between libevent 1.x and 2.x. There was a release this year after a several year gap, but as far as I

Bug#651226: MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530]

2011-12-06 Thread Sam Hartman
package: krb5-kdc severity: important version: 1.9.1+dfsg-1 tags: security ---BeginMessage--- -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 MITKRB5-SA-2011-007 MIT krb5 Security Advisory 2011-007 Original release: 2011-12-06 Last update: 2011-12-06 Topic: KDC null pointer dereference in TGS

Bug#650603: libkrb5-3 breaks mplayer

2011-12-01 Thread Sam Hartman
Hi. It looks like a simple rebuild of samba will fix this; see the ongoing discussion on http://bugs.debian.org/650541 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#650541: [Pkg-samba-maint] krb5_locate_kdc is an internal symbol

2011-12-01 Thread Sam Hartman
It looks like there is already a configure test. So, if we up the dependency on libkrb5-dev to make sure that we get a version that will not contain the symbol and rebuild, it looks like it will all be fine. Assuming that when I try that it works, shall I NMU? If so, do you want it to delayed or

Bug#650671: libgssapi-krb5-2: breaks ssh connection through netcat bounce

2011-12-01 Thread Sam Hartman
Please install libkrb5-dbg and gdb. Then, run something like gdb --args ssh hostname at the gdb prompt type run when it segfaults run bt full and include all the output that produces in this bug. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of

Bug#650541: krb5_locate_kdc is an internal symbol

2011-11-30 Thread Sam Hartman
reassign 650541 libsmbclient retitle 650541 libsmbclient uses internal symbol krb5_locate_kdc found 650541 libsmbclient/2:3.6.1-2 thanks Hi. krb5_locate_kdc was not a public symbol. It was not available in krb5.h without defining KRB5_PRIVATE. I'm not sure whether it was available with

Bug#650364: libverto1 has circular Depends on libverto-glib1|libverto-libev1

2011-11-29 Thread Sam Hartman
Hi. Your pointer wasn't very useful. It was a pointer to examples of circular dependencies, not what breaks on upgrades, so it was not useful for me in trying to balance problems potentially created by the circular dependency against potential solutions. Do you have any suggestions on how to

Bug#650364: libverto1 has circular Depends on libverto-glib1|libverto-libev1

2011-11-29 Thread Sam Hartman
Bill == Bill Allombert bill.allomb...@math.u-bordeaux1.fr writes: Bill On Tue, Nov 29, 2011 at 10:42:13AM -0500, Sam Hartman wrote: Do you have any suggestions on how to deal with it in this case? libverto-glib1 and libverto-libev1 are basically plugins into libverto

Bug#647740: ITP: libvertfo - library abstracting event loop interfaces

2011-11-06 Thread Sam Hartman
OK, so I had not looked at what this does on win32. I think any criticism you have of the libverto win32 interface is probably valid. Fortunately I don't think that's being used. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Bug#647740: ITP: libvertfo - library abstracting event loop interfaces

2011-11-05 Thread Sam Hartman
package: wnpp severity: wishlist URL: https://fedorahosted.org/libverto/ Description: libverto provides a common interface on top of libev, libevent, glib, tevent. The goal is to allow development of asynchronous libraries that will work with whatever event loop an application happens to be

Bug#647742: ITP: libradsec - RADIUS over TLS/DTLS/UDP/TCP library

2011-11-05 Thread Sam Hartman
package: wnpp severity: wishlist URL: libradsec branch of http://www.project-moonshot.org/gitweb/radsecproxy.git URL2: http://software.uninett.no/radsecproxy/ Description: libradsec is a library for RADIUS clients and servers This library features support for RADSEC (RADIUS over TLS/DTLS) as

Bug#647742: ITP: libradsec - RADIUS over TLS/DTLS/UDP/TCP library

2011-11-05 Thread Sam Hartman
Faidon == Faidon Liambotis parav...@debian.org writes: Faidon Hi Sam, Hope you're well. Faidon Are you planning on putting the packaging efforts for this Faidon on git somewhere (e.g. collab-maint?). If so, I'd be happy Faidon to contribute, if help is needed, either now or when

Bug#622146: This is broken for me.

2011-10-23 Thread Sam Hartman
Rob == Rob Naccarato r...@naccy.org writes: Rob This doesn't appear to be fixed to me. I get the same Rob problems. I have even installed backported kernel Rob (2.6.39-bpo.2-amd64) and nfs-utils (1:1.2.4-1~bpo60+1) and I Rob still get these: This requires fixes in krb5 and

Bug#646021: krb5-user: kinit ignores appdefaults section in krb5.conf

2011-10-20 Thread Sam Hartman
Joao == Joao Ricardo Sares Teles de Matos joao.ma...@rnl.ist.utl.pt writes: Joao Package: krb5-user Version: 1.8.3+dfsg-4squeeze1 Severity: Joao normal Tags: upstream Joao kinit seems to completely ignore the appdefaults section in Joao krb5.conf None of the following

Bug#622146: nfs-common: compatibility between squeeze and sid broken

2011-10-05 Thread Sam Hartman
It should be fixed in unstable by actually supporting the new enctypes. While ncice, that rather misses the point. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#643917: krb5-user: unable to get tickets longer than 10 hours

2011-10-02 Thread Sam Hartman
What's the ticket lifetime on krbtgt/REALM@REALM? I think that may also limit things. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#643027: krb5-config includes unnecessary multiarch -L options in output

2011-09-26 Thread Sam Hartman
force-merge 643027 642229 thanks Steve, I noticed this the other day too. Will fix. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#642229: krb5-config exposes multiarch lib paths

2011-09-20 Thread Sam Hartman
package: krb5 source-version: 1.9+dfsg-2 The multiarch patch causes krb5-config to omit -L/usr/lib/x86_64-linux-gnu etc. That's wrong. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#625903: Increase severity: libdigest-sha1-perl going to disappear

2011-09-10 Thread Sam Hartman
Hi. I'm sorry. I've been busier than expected. As mentioned, a 0-day NMU would be fine with me. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#622146: nfs-common: compatibility between squeeze and sid broken

2011-09-05 Thread Sam Hartman
Adam == Adam D Barratt a...@adam-barratt.org.uk writes: Adam The krb5 package was uploaded and I've (somewhat belatedly) Adam marked it for acceptance at the next dinstall. What's the Adam status of the nfs-utils upload? My guess is they were waiting for krb5. Remember they have

Bug#628729: Uploaded NMU to delayed/4

2011-08-23 Thread Sam Hartman
I uploaded Geoff's patch to delayed/4 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#619031: marked as done (fails tu upgrade: patch rejects)

2011-08-21 Thread Sam Hartman
Hi. I'm reallly sorry for uploading this directly. I attempted and apparently failed to upload to delayed. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#632673: Attempts to analyze kdm pam interactions

2011-08-21 Thread Sam Hartman
Hi. I was at a bug squashing party this week and Geoff and I spent some time with this bug. As best we can tell pam_authenticate is called by /usr/bin/kdm not some slave as in gdm3. kdm does support a reload target. However we were not able to get kdm to work correctly when we logged out of

Bug#624065: Bug#625903: Increase severity: libdigest-sha1-perl going to disappear

2011-08-18 Thread Sam Hartman
Hi. I'm planning on getting to this issue Sunday. If someone wants to NMU before then they are welcome. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#637662: please include krb5-config in krb5-multidev

2011-08-13 Thread Sam Hartman
Jelmer == Jelmer Vernooij jel...@debian.org writes: Jelmer Package: krb5-multidev Version: 1.9.1+dfsg-1ubuntu1 Jelmer Severity: wishlist Jelmer Please include krb5-config in krb5-multidev (with a Jelmer different name to prevent conflicts, perhaps Jelmer

Bug#622146: nfs-common: compatibility between squeeze and sid broken

2011-08-08 Thread Sam Hartman
I expect to get to the krb5 package in a day or so. I expect nfs-utils will want to up its build-depends on krb5 to 1.8.3+dfsg-4squeeze2 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#622146: nfs-common: compatibility between squeeze and sid broken

2011-08-03 Thread Sam Hartman
Philipp == Philipp Kern pk...@debian.org writes: Philipp On Mon, Aug 01, 2011 at 01:34:34AM -0700, Steve Langasek wrote: On Tue, Jul 19, 2011 at 05:42:34PM -0400, Sam Hartman wrote: I don't have checkouts handy, but my strong suspicion is that if someone is now passing

Bug#622146: nfs-common: compatibility between squeeze and sid broken

2011-08-01 Thread Sam Hartman
If I get an ack from SRM i'll do the krb5 upload. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#622146: nfs-common: compatibility between squeeze and sid broken

2011-07-19 Thread Sam Hartman
Steve == Steve Langasek vor...@debian.org writes: Steve Hi Sam, I've also run into this bug, in the context of Steve preparing to update nfs-utils in Ubuntu for IPv6 support. My Steve NFS server is running squeeze, and updating causes the client Steve and server to fail to

Bug#622146: nfs-common: compatibility between squeeze and sid broken

2011-07-19 Thread Sam Hartman
I don't have checkouts handy, but my strong suspicion is that if someone is now passing in GSS_C_NT_HOSTBASED_SERVICE into gssd_acquire_cred and there isn't an argument slot, you can leave it off. gss_c_nt_hostbased_service has always been the default for gssd. -- To UNSUBSCRIBE, email to

Bug#634311: krb5: debian/control uses hardcoded list of non-Linux architectures

2011-07-18 Thread Sam Hartman
Yes! When that build-depends was added, I don't think linux-any was an option. I'm definitely happy to move to a saner model and will bring this along. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

<    5   6   7   8   9   10   11   12   13   14   >