krb5: ABI Issue--confirm your packages work against 1.4.3 in experimental

2005-11-19 Thread Sam Hartman
Hi folks. I've just uploaded Mit Kerberos 1.4.3-1 to experimental. I'm writing to you because your package links against the main kerberos library (libkrb53) and I'd like you to confirm that the Kerberos support in your package still works against this version. The public ABI and API of MIt

Re: [useless] I am still on the keyring. With my old key.

2005-11-20 Thread Sam Hartman
Chip == Chip Salzenberg [EMAIL PROTECTED] writes: Chip Who does a developer have to fuck around here to get his key Chip deleted? -- Chip Salzenberg [EMAIL PROTECTED] Chip -- To UNSUBSC Hi. As you are no doubt aware by now, getting your key removed is a great mystery and deep

Boxed Penguin Prototype showcases customization of Debian to build infrastructure server

2000-12-30 Thread Sam Hartman
In order to actually get something done in an electronic office, we need a certain amount of infrastructure. In a large environment, the incremental costs are somewhat visible, but you won't see how much work it took to get there. In practice, starting from ground zero means

Re: Boxed Penguin Prototype showcases customization of Debian to build infrastructure server

2001-01-02 Thread Sam Hartman
Bernd == Bernd Eckenfels [EMAIL PROTECTED] writes: Bernd Hello Sam, On Sat, Dec 30, 2000 at 11:27:44PM -0500, Sam Bernd Hartman wrote: In order to actually get something done in an electronic office, we need a certain amount of infrastructure. Bernd Thanks for your work.

Re: kernel-{image,headers} package bloat breaks module builders

2001-04-24 Thread Sam Hartman
[I'm responding to Herbert directly to draw attention to this question and make sure I get a response from him. I have also read the rest of this thread even though I am responding to a fairly early message. ] I'm approaching this as the maintainer of the openafs package, which has a kernel

Re: kernel-{image,headers} package bloat breaks module builders

2001-04-25 Thread Sam Hartman
Herbert == Herbert Xu [EMAIL PROTECTED] writes: Herbert I doubt the increase is going to be that significant. Herbert Since most of these will eventually become part of the Herbert mainstream kernel or get dropped. I hope that is not actually the trend we see. image.

Referring what kernel-images to build to the technical committee?

2001-04-25 Thread Sam Hartman
[cc list is an attempt at stakeholders for this issue. If I missed people, I'm sorry. If I annoyed people by ccing them even though they read the list, well I'm sorry too, but there are a fair number of people who tend to want to be explicitly cc'd when an issue pertains to them.] Summary:

RFC: Thoughts on building modules

2001-04-26 Thread Sam Hartman
One thing that strikes me as excellent about Debian is the build system. The autobuilders and tools make it very likely that package builds are reproducible and a variety of tools like debhelper make it easier to do the right thing in many circumstances than doing something wrong. I've come

Re: RFC: Thoughts on building modules

2001-04-26 Thread Sam Hartman
Herbert == Herbert Xu [EMAIL PROTECTED] writes: Herbert BTW, this is how the kernel images are organised on Herbert alpha/i386/sparc. This is misleading. The kernel-image-*-arch packages are much simpler because they do not depend both on a kernel source package and on a module deb

Formal request for review: [Sam Hartman hartmans@debian.org] Referring what kernel-images to build to the technical committee?

2001-04-26 Thread Sam Hartman
] (kernel-image-i386 maintainer), [EMAIL PROTECTED] (concerned about package size) Subject: Referring what kernel-images to build to the technical committee? Reply-to: debian-devel@lists.debian.org From: Sam Hartman [EMAIL PROTECTED] Resent-Message-ID: [EMAIL PROTECTED] Resent-From: debian-devel

Formal request for review: [Sam Hartman hartmans@debian.org] Referring what kernel-images to build to the technical committee?

2001-04-26 Thread Sam Hartman
] (kernel-image-i386 maintainer), [EMAIL PROTECTED] (concerned about package size) Subject: Referring what kernel-images to build to the technical committee? Reply-to: debian-devel@lists.debian.org From: Sam Hartman [EMAIL PROTECTED] Resent-Message-ID: [EMAIL PROTECTED] Resent-From: debian-devel

Re: RFC: Thoughts on building modules

2001-04-26 Thread Sam Hartman
Herbert == Herbert Xu [EMAIL PROTECTED] writes: Herbert Sam Hartman [EMAIL PROTECTED] wrote: This is misleading. The kernel-image-*-arch packages are much simpler because they do not depend both on a kernel source package and on a module deb package. Also, note

Re: openldap question and possible feature conflict

2001-04-27 Thread Sam Hartman
Brian == Brian May [EMAIL PROTECTED] writes: Brian I have got a bug report #95246 requesting Heimdal be Brian compiled against openldap2. This would enable being able to Brian store the Kerberos database in the openldap database. All Brian data is stored in LDAP encrypted, so

Re: Proposing task-debian

2001-04-30 Thread Sam Hartman
Joey == Joey Hess [EMAIL PROTECTED] writes: Joey If these tools become widly enough accepted that we think Joey everyone should have them available by default, we can make Joey them standard priority. In the new universe (debbootstrap, tasksel, etc) where a user might never run

Re: postgresql and libssl - Bug#95146

2001-05-01 Thread Sam Hartman
Petr == Petr Cech [EMAIL PROTECTED] writes: Since this question is currently being referred to legal advice, do you want me to move postgresql into non-us, which will force any packages depending on it into non-us too, or should I leave it alone pending resolution of the

Re: dm management of wm listings (kdm/gdm/etc..)

2001-05-03 Thread Sam Hartman
Ivan == Ivan E Moore [EMAIL PROTECTED] writes: Ivan Solution?: create a program (update-dm?) that would pull Ivan the current list of window/session-managers installed on the Ivan system and build the appropriate config files for whichever You should probably consider whether this

Re: build depends on kernel-headers

2001-05-06 Thread Sam Hartman
Manoj == Manoj Srivastava [EMAIL PROTECTED] writes: Aaron == Aaron Lehmann [EMAIL PROTECTED] writes: Aaron So you're saying it's better to hardcode syscall numbers Aaron and stuff than using the kernel headers? Sre... Manoj We already have a process for packages that

Re: build depends on kernel-headers

2001-05-06 Thread Sam Hartman
Herbert == Herbert Xu [EMAIL PROTECTED] writes: Herbert Sam Hartman [EMAIL PROTECTED] wrote: We do? please explain what it is. Herbert produces kernel headers packages for all flavors of kernels he produces. I do not believe the other arches do this. Herbert You

Re: build depends on kernel-headers

2001-05-07 Thread Sam Hartman
Herbert == Herbert Xu [EMAIL PROTECTED] writes: Herbert I won't look at all of them as this is really the Herbert upstream maintainer's job. This brings up an interesting point. While we should work with upstream maintainers to fix these problems, we should also try to avoid making

RFC: Potential solution for module building

2001-05-07 Thread Sam Hartman
So, a week or so ago, I asked for comments on some problems I've been having with the Debian kernel modules build system for modules not in the Linux source tree. I'm only dealing with modules for upload to Debian. The make-kpkg solution seems to work for individuals building modules for their

Re: RFC: Potential solution for module building

2001-05-07 Thread Sam Hartman
Herbert == Herbert Xu [EMAIL PROTECTED] writes: Herbert Sam Hartman [EMAIL PROTECTED] wrote: for needs to be determined by the architecture maintainers. For Sparc, modversions are not used so you can probably build one sparc and one sparc64 module. For i386, you need to build

Re: build depends on kernel-headers

2001-05-08 Thread Sam Hartman
Herbert == Herbert Xu [EMAIL PROTECTED] writes: Herbert Sam Hartman [EMAIL PROTECTED] wrote: This brings up an interesting point. While we should work with upstream maintainers to fix these problems, we should also try to avoid making these programs harder to build on Debian

Re: build depends on kernel-headers

2001-05-08 Thread Sam Hartman
Manoj == Manoj Srivastava [EMAIL PROTECTED] writes: Sam == Sam Hartman [EMAIL PROTECTED] writes: Manoj == Manoj Srivastava [EMAIL PROTECTED] writes: Aaron == Aaron Lehmann [EMAIL PROTECTED] writes: Aaron So you're saying it's better to hardcode syscall numbers Aaron and stuff

Re: Questions to testing/unstable

2001-05-08 Thread Sam Hartman
Henrique == Henrique de Moraes Holschuh [EMAIL PROTECTED] writes: Henrique AFAIK, I cannot do that. If I build against testing, I Henrique help the breakage by adding yet another package that Henrique depends on the outdated libraries that are in testing, Henrique therefore

Re: moving a package from non-US/main to main?

2001-09-02 Thread Sam Hartman
Marc == Marc Haber [EMAIL PROTECTED] writes: Marc On Sun, 2 Sep 2001 22:49:00 +0200 (CEST), Santiago Vila Marc [EMAIL PROTECTED] wrote: However, you can repackage the .orig.tar.gz source and remove the non-US bits from it. Then you could upload both source and binaries to

Re: Which versions of libraries are developers supposed to compile against?

2001-09-03 Thread Sam Hartman
Jules == Jules Bean [EMAIL PROTECTED] writes: Jules This seems a step back from the old freeze procedure, where Jules you could upload to frozen (and, I assume, auto-builders Jules were building against frozen) Well, once your library and all dependencies are frozen you can act as

Re: moving a package from non-US/main to main?

2001-09-03 Thread Sam Hartman
Marc == Marc Haber [EMAIL PROTECTED] writes: Marc On 02 Sep 2001 23:18:56 -0400, Sam Hartman Marc [EMAIL PROTECTED] Marc wrote: Marc == Marc Haber [EMAIL PROTECTED] writes: Marc On Sun, 2 Sep 2001 22:49:00 +0200 (CEST), Santiago Vila Marc [EMAIL PROTECTED] wrote

Re: Kernel update for Debian 3.0/i386

2002-12-09 Thread Sam Hartman
Won't removing kernel-source-2.4.18 create a problem for other arches?

Re: debian-kerberos mailing list down?

2002-12-10 Thread Sam Hartman
Yes, the machine had a bad disk crash and I restored the other services but failed to get debian-kerberos working. IT is up now.

Re: /run/, resolvconf and read-only root

2003-04-27 Thread Sam Hartman
Hi. I noticed that in order to implement your read-only root proposal, you propose to modify the pam package. I'm not really sure I see the justification for read-only /. I can see several possible justifications and some of the possible goals conflict. Until you get general consensus on a

Re: Bug#191037: /run/, resolvconf and read-only root

2003-04-28 Thread Sam Hartman
Jamie == Jamie Wilkinson [EMAIL PROTECTED] writes: Jamie This one time, at band camp, Sam Hartman wrote: Until you get general consensus on a specific goal, I'm unlikely to accept such changes if they are submitted to me. As a maintainer I want to be able to look at some

Re: /run/, resolvconf and read-only root

2003-04-28 Thread Sam Hartman
OK, I think my worst fears are realized. You do actually want to solve all the goals I could have imagined you possibly wanting to try try and solve. I think I am very likely to wait until there is a policy change or at least text that would be good guidelines as a policy change before

Re: security in testing

2003-05-26 Thread Sam Hartman
Gerfried == Gerfried Fuchs [EMAIL PROTECTED] writes: Gerfried * Sven Luther [EMAIL PROTECTED] [2003-05-16 Gerfried 13:33]: Such a package should be as close to possible to the version actually in testing, and not depend on packages and/or versions that are not yet in

[Stefano =)] Bug#198619: Could not perform configuration on libpam0g

2003-06-25 Thread Sam Hartman
[Please cc me; I'm very behind on -devel] I'm very confused by this bug and am sufficiently busy this week that I'm not going to be able to diagnose it right now. Could anyone who has a chance to do so please look at exactly what is failing from a dependency standpoint? I get the feeling I'm

Re: Transition: new PAM config file handling in unstable

2003-08-25 Thread Sam Hartman
Joey == Joey Hess [EMAIL PROTECTED] writes: Joey Steve Langasek wrote: - It will now be possible to choose md5 vs. crypt passwords at install time without violating policy. (Currently, a number of conffiles are being modified by maintainer scripts in order to enable md5

Re: Bug#155583: radiusd-freeradius history and future

2003-11-13 Thread Sam Hartman
Matt == Matt Zimmerman [EMAIL PROTECTED] writes: Matt I think a single Will you be using NIS? question would be Matt justified; this could provide defaults for md5 vs. crypt Matt passwords and setuid-ness of unix_chkpwd, and so those Matt questions could be suppressed by default.

Re: Bug#155583: radiusd-freeradius history and future

2003-11-14 Thread Sam Hartman
Andreas == Andreas Metzler [EMAIL PROTECTED] writes: Andreas Steve Langasek [EMAIL PROTECTED] wrote: On Fri, Nov 14, 2003 at 11:37:45AM -0500, Matt Zimmerman wrote: Andreas [...] I'd rather see a solution where we have some nis support package that makes unix_chkpwd

Re: Bits from the RM

2003-12-02 Thread Sam Hartman
aj == Anthony Towns aj@azure.humbug.org.au writes: aj or overloaded with work, or, for that matter, fixing compromised Debian aj servers -- do you think it's desirable and possible to: aj * for confirmed bugs with a known fix, upload a fixed package aj within a

Re: build daemon architectures

2001-09-10 Thread Sam Hartman
Randolph == Randolph Chung [EMAIL PROTECTED] writes: The Automatic Package Building System page[1] lists the build daemons with web pages. It does not list those without, however. Since my latest libcdaudio packages are considered out of date on i386, I was wondering if a

Bug#128888: ITP: ssh-krb5 - A version of OpenSSH patched to support Kerberos Authentication

2002-01-12 Thread Sam Hartman
package: wnpp severity: wishlist Hi. AS discussed below, I intend to package OpenSSH using the current Debian sources with patches to allow krb5 authentication. I will use the patches available at http://www.sxw.org.uk/computing/patches/openssh.html. These patches attempt to comply with

Bug#142065: ITP: cyrus2-sasl-mit - MIT Kerberos modules for sasl2

2002-04-09 Thread Sam Hartman
package: wnpp severity: wishlist I'm planning on packaging libsasl2-gssapi-mit, a version of the GSSAPI plugin for libsasl2 compiled against MIT Kerberos. This package has the same source as cyrus-sasl2, but different build environment and options. It's not really possible to avoid having two

Re: New maintainer behaviour with NMU and LogJam's hijacking

2002-11-29 Thread Sam Hartman
Christian == Christian Surchi [EMAIL PROTECTED] writes: Christian Ari wrote to me in the end of october to ask me about Christian my intention about logjam packaging. I had an enormous Christian backlog and I could not be able to reply. Then he filed Christian a wishlist bug

Re: reliable streams over UDP

2002-11-29 Thread Sam Hartman
Russell == Russell Coker [EMAIL PROTECTED] writes: Russell Do we have a library in Debian that provides reliable Russell stream based communication over UDP? librx from openafs provides this functionality; it may be somewhat more complexity than you are looking for.

Re: New maintainer behaviour with NMU and LogJam's hijacking

2002-11-30 Thread Sam Hartman
Ari == Ari Pollak [EMAIL PROTECTED] writes: IIRC Ari has caused upset with NMUs before; xscreensaver, I believe. (I express no opinion about whether that upload was a good idea or not.) Ari Didn't you sponsor the upload? Um, so? While yes the sponsor is at fault, it seems

Re: New maintainer behaviour with NMU and LogJam's hijacking

2002-11-30 Thread Sam Hartman
Ari == Ari Pollak [EMAIL PROTECTED] writes: Ari I had been taking the full brunt of the responsibility for Ari the xscreensaver NMU, but since I was a pre-NM at the time Ari and sponsors of uploads are supposed to follow Debian policy Ari as well, he ended up taking most of the

Re: Drop KRB4 support from HEIMDAL

2005-10-23 Thread Sam Hartman
Does the krb524 functionality disappear from the KDC if you turn off krb4? If so, that will be a problem for current openafs, although probably not for future openafs. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Please test krb5-config in experimental

2009-07-22 Thread Sam Hartman
Last night I uploaded a more or less rewrite of krb5-config to experimental. The goal of this rewrite is to significantly reduce the number of cases where users are asked questions or where the resulting configuration is completely wrong. krb5-config is responsible for generating

Re: Please test krb5-config in experimental

2009-07-22 Thread Sam Hartman
I'd recommend coordinating any such model with the upstream Kerberos implementations and with distributions. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Switching /bin/sh to dash without dash essential

2009-07-23 Thread Sam Hartman
Folks, there was a longish discussion on IRC starting about an hour ago about dash and bash. I agree we want to move the default /bin/sh to /bin/dash. However I'm failing to understand why we want dash to be essential. If I'm not using dash as my /bin/sh why do I need it? If the answer is

Re: Switching /bin/sh to dash without dash essential

2009-07-23 Thread Sam Hartman
Luk == Luk Claes l...@debian.org writes: Luk We want everyone to use dash by default. If someone does not Luk want to use the default, they are free to do so, but the Luk default system shell is supposed to always be on the system. Why? I agree something should always provide /bin/sh.

Re: Switching /bin/sh to dash without dash essential

2009-07-23 Thread Sam Hartman
Siggy == Siggy Brentrup deb...@psycho.i21k.de writes: 8 I agree we want to move the default /bin/sh to /bin/dash. However I'm failing to understand why we want dash to be essential. If I'm not using dash as my /bin/sh why do I need it? Siggy So you are complaining about

Re: Switching /bin/sh to dash without dash essential

2009-07-24 Thread Sam Hartman
Steve, let's take a step back and calm down. Are you saying that your objection to engineering a solution where dash doesn't need to be essential is that it's not worth the effort? I *think* that was the point of your message but am not entirely sure. -- To UNSUBSCRIBE, email to

Re: Switching /bin/sh to dash without dash essential

2009-07-24 Thread Sam Hartman
Steve == Steve Langasek vor...@debian.org writes: Steve On Fri, Jul 24, 2009 at 04:33:21AM -0400, Sam Hartman wrote: Steve, let's take a step back and calm down. Are you saying that your objection to engineering a solution where dash doesn't need to be essential is that it's

krb5 transition: upgrading to krb5 1.6.1

2007-04-29 Thread Sam Hartman
Hi, folks. I've just uploaded krb5 1.6.1 to experimental. This is a new version with enhanced plugin support, support for realm referrals, support for storing Kerberos credentials in the Linux keyring rather than on disk, and generally improvements all around. The one big feature that is

Re: krb5 transition: upgrading to krb5 1.6.1

2007-04-29 Thread Sam Hartman
Marcus == Marcus Better [EMAIL PROTECTED] writes: Marcus Russ Allbery wrote: Correct. In general, you never want to have Kerberos keys in your KDC for a service principal for enctypes that that service doesn't support. Marcus Is there an easy way to find out which

Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-22 Thread Sam Hartman
[There are some questions at the end; comments would be greatly appreciated on the questions if you have ever been involved in the release process or library transitions before. This is my first big transition.] The libkrb53 package (providing the MIT Kerberos shared libraries) has been stable

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-23 Thread Sam Hartman
Julien == Julien BLACHE jbla...@debian.org writes: Julien Sam Hartman hartm...@debian.org wrote: Hi, That is, if I made the dependency in libkrb5-3.symbols look like libkrb5-3|libkrb53 (and similar changes for other symbols files), then both the packages in unstable

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-23 Thread Sam Hartman
Sam == Sam Hartman hartm...@debian.org writes: Julien == Julien BLACHE jbla...@debian.org writes: Julien Sam Hartman hartm...@debian.org wrote: Hi, That is, if I made the dependency in libkrb5-3.symbols look like libkrb5-3|libkrb53 (and similar changes for other symbols

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-23 Thread Sam Hartman
Julien == Julien BLACHE jbla...@debian.org writes: I really appreciate your help here! Julien As you note in your second reply, the goal is to decouple Julien the packaging change from the krb4 dismissal: 1 introduce Julien libkrb5-3 (Replaces: libkrb53), with libkrb53 depending on

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-23 Thread Sam Hartman
OK, so I think we're all set. The plan now is to 1) Build twice, once into build and once into build-krb4. We only pull libkrb4.so out of build-krb4. 2) Move all the libraries out of libkrb53 and libkadm55 (sorry, in my previous mails I was simplifying a bit) except for libkrb4.so.2. 3)

Re: Refactoring the Debtags web interface

2009-02-23 Thread Sam Hartman
Brian == Brian May br...@microcomaustralia.com.au writes: Brian Ben Finney wrote: I invite anyone interested in knowing how the distinct areas of identity, trust, and security intersect with the OpenID system, to research the available documentation. Brian ...except

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-26 Thread Sam Hartman
Sam == Sam Hartman hartm...@debian.org writes: Sam OK, so I think we're all set. The plan now is to Sam 1) Build twice, once into build and once into build-krb4. We Sam only pull libkrb4.so out of build-krb4. 2) This works at least. Sam 3) Make libkrb53 depend on all

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-27 Thread Sam Hartman
Steve == Steve Langasek vor...@debian.org writes: Steve Actually, I was meaning to comment on this. Why would you Steve not simply point the shlibs at the component library Steve packages at this stage? The only side effect is that the Steve version of krb5 that includes the

Re: Transition: krb5 to drop Kerberos IV (libkrb53 restructuring)

2009-02-28 Thread Sam Hartman
Julien == Julien BLACHE jbla...@debian.org writes: Julien Sam Hartman hartm...@debian.org wrote: Hi, It turns out this fails impressively. The problem is that the library packages depend on each other. So, for example, libk5crypto3 is needed by libkrb5-3. If I make

Please test krb5 from experimental--even if you don't use Kerberos

2009-02-28 Thread Sam Hartman
Folks, I'd appreciate it if people could try and test version 1.6.dfsg.4~beta1-8 from experimental of the krb5 package. The biggest change is a packaging reorganization. So, while I'm certainly interested in Kerberos users testing the packages, I'm most interested in people other than me

Re: group nvram

2009-03-18 Thread Sam Hartman
I'd like to chime in with the general concern that the proposal to remove a bunch of groups from udev seems under-baked and that the current groups have value. I definitely would like to see the tss (tpm) group remain along with the kvm and fuse groups. I think scanner is important as well. I

Re: Bug#482528: heimdal-clients,krb5-user

2008-07-08 Thread Sam Hartman
Yeah, I'm reasonably sure that alternatives are wrong for kadmin. Editor is intended to be used by a user. Kadmin is often used by users but is also quite often used by scripts. Editors also can all work with text files. It's basically not true that you can use a heimdal kadmin against an MIT

Bug#566346: ITP: krb5-appl - Kerberos applications and clients

2010-01-22 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org name: krb5-appl URL: http://web.mit.edu/kerberos/dist/krb5-appl License: MIT Kerberos license (roughly MIT license plus a requirement that if you modify the software you must mark it as modified) description: Contains fairly

Bug#647740: ITP: libvertfo - library abstracting event loop interfaces

2011-11-05 Thread Sam Hartman
package: wnpp severity: wishlist URL: https://fedorahosted.org/libverto/ Description: libverto provides a common interface on top of libev, libevent, glib, tevent. The goal is to allow development of asynchronous libraries that will work with whatever event loop an application happens to be

Bug#647742: ITP: libradsec - RADIUS over TLS/DTLS/UDP/TCP library

2011-11-05 Thread Sam Hartman
package: wnpp severity: wishlist URL: libradsec branch of http://www.project-moonshot.org/gitweb/radsecproxy.git URL2: http://software.uninett.no/radsecproxy/ Description: libradsec is a library for RADIUS clients and servers This library features support for RADSEC (RADIUS over TLS/DTLS) as

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-11 Thread Sam Hartman
For myself, I'd feel a lot more comfortable with DDs seconding than DMs seconding. In my mind, when you sign up to be a DM, you're signing up to do a good job of maintaining one or more packages. In my mind a part of the additional commitment in agreeing to be a DD is to think about the broader

Proposal: remove krb5-appl (rlogin, rsh, telnet, ftp with krb5 support)

2014-01-23 Thread Sam Hartman
hi. A few months ago, Russ Allberry stepped down from co-maintaining krb5-appl. I'm reasonably happy to keep maintaining it, although when we thought about it, we cannot think of anyone using the package. It provides krb5 versions of rlogin, rsh, ftp and telnet. The telnet is insecure and should

Re: Proposal: remove krb5-appl (rlogin, rsh, telnet, ftp with krb5 support)

2014-01-28 Thread Sam Hartman
FWIW, I'm not seeing enough demand that I'm interested in maintaining krb5-appl. I plan to request removal. If there's a debian developer who thinks I'm making the wrong call they should feel free to turn my removal request into a request to adopt the package. --Sam -- To UNSUBSCRIBE, email

Re: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
control: subscribe -1 Charles == Charles Plessy ple...@debian.org writes: Charles The 3.0 (native) format is useful when packaging a work Charles that is developped and distributed in a Git repository. Charles Please leave us this possibility. Let me describe the use case I have

Re: Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Andreas == Andreas Beckmann a...@debian.org writes: Andreas On 2014-02-05 10:57, Sam Hartman wrote: tarballs useful; anyone who is likely to want to build this from source probably has a copy of git and can checkout a tag. Andreas Such a tag corresponds to an upstrema version

Re: debconf managed configuration files

2014-02-05 Thread Sam Hartman
I've tried to do a reasonable job with the krb5-config package of updating a user-managed krb5.conf and keeping it in sync with debconf data. It's quite old and I doubt it's best practice any more but it is an example of how to approach a non-shell-script package. The debconf-managed comment is

Re: Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Neil == Neil Williams codeh...@debian.org writes: That makes sense and I do something similar as appropriate. Even so, I do not wish to maintain the upstream tarball as a maintained artifact. There are cases where packaging release releases are made. Maintaining pristine-tar commits for daily

Re: Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
Bernhard == Bernhard R Link brl...@debian.org writes: As I mentioned I have a packaging branch and an upstream branch. I wish to use debian revisions to reflect packaging changes. It's slightly more complex than changes to debian directory involve a debian revision change; changes to other

Re: dpkg: is_native version checks in dpkg 3.0 Native

2014-02-05 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Russ Ian Jackson ijack...@chiark.greenend.org.uk writes: Secondly, there doesn't appear to be any support in policy for this restriction. Russ Policy definitely supports this restriction, as Guillem Russ pointed out. I want to

Re: dpkg: is_native version checks in dpkg 3.0 Native

2014-02-05 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: Citation requested. I looked for this today and couldn't find it. Russ Policy lacks a section that clearly defines native and Russ non-native packages, which is a long-standing bug in Policy. Russ Currently, that information is

Re: Call to fork

2014-02-10 Thread Sam Hartman
debianfan == debianfan debian...@hushmail.com writes: debianfanI would like to propose forking Debian if the ctte debianfan committee selects systemd It's with great hesitation that I jump in here, and I know what I'm doing is wrong. I hope I've earned enough credibility over the

Re: Call to fork

2014-02-11 Thread Sam Hartman
Thanks for sharing this. So, you're frustrated and very disappointed because Ddebian, something you cared about deeply has drifted so far away from what you want that you can no longer support it? I hope that if you decide to fork, you succeed in creating something that meets your needs. I hope

Pulseaudio and alsa and accessibility

2014-02-13 Thread Sam Hartman
Mario == Mario Lang ml...@delysid.org writes: Mario That is what I was thinking as well, but just recently I had Mario to killall pulseaudio to be able to access my ALSA device Mario again. Pulseaudio explicitly bypasses the dmix plugin and opens the alsa hardware directly.

Re: when will we finally throw away binary uploads (Re: Please upgrade your build environment when you are affected by transition

2014-02-13 Thread Sam Hartman
Colin == Colin Watson cjwat...@debian.org writes: Colin On Thu, Feb 13, 2014 at 07:46:53PM +0100, Jakub Wilk wrote: *shrug* It's not like it's difficult to hide malicious code in source packages. How many configure scripts that we never rebuild from source contains

Re: when will we finally throw away binary uploads (Re: Please upgrade your build environment when you are affected by transition

2014-02-13 Thread Sam Hartman
All rants aside, I believe there's a fairly wide agreement that we should throw away binaries from builds. I seem to recall ftp-master sending out mail to debian-devel-announce describing the steps along that process a while ago. I think it's fine to ask where that project is, and to volunteer

Bug#759398: ITP: trust-router - Dynamically configure Trust Between RADIUS Realms

2014-08-26 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: git://git.project-moonshot.org/trust_router.git http://www.project-moonshot.org/ license: bsd-3-clause Description: The trust router establishes a DH key between two RADIUS servers to protect a RADIUS over TLS session. GSS-API

Bug#759159: ITP: shibboleth-resolver - Library to access the Shibboleth Attribute Resolver from Third-Party Applications

2014-08-26 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: http://www.shibboleth.org/ Source: svn https://svn.shibboleth.net/extensions/cpp-sp-resolver/trunk Description: Shibboleth library to access Attribute Resolver The Shibboleth Service provider consumes information about an

Bug#759511: ITP: moonshot-ui -Project Moonshot's Identity Selector

2014-08-27 Thread Sam Hartman
package: wnpp owner: hartm...@debian.org severity: wishlist URL: http://www.project-moonshot.org/ source: git://git.project-moonshot.org/moonshot-ui.git License: BSD-three-clause Description: Project Moonshot provides federated access to services combining the best of EAP, RADIUS (over TLS),

Bug#760411: ITP: moonshot-ui -- Project Moonshot Identity Manager

2014-09-03 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org URL: http://www.project-moonshot.org/ source: git://git.project-moonshot.org/moonshot-ui.git license: BSD-3-Clause Description: This package manages the Moonshot identity store, permitting users to add and remove identities as well as

Bug#761868: ITP: moonshot-gss-eap -- A GSS-API Mechanism for the Extensible Authentication Protocol

2014-09-16 Thread Sam Hartman
package: wnpp severity: wishlist owner: hartm...@debian.org x-debbugs-cc: debian-devel@lists.debian.org source: git://git.project-moonshot.org/mech_eap.git license: BSD-3-Clause Description: Project moonshot provides federated access to a wide range of applications. This package adds a GSS-API

Thanks Ftpmaster for all your hard work with the Moonshot Suite

2014-10-23 Thread Sam Hartman
Hi. back in 2011, I gave a talk at Debconf about the value of Debian to people hoping to put together changes across an operating system. I was using my work in Project moonshot as an example; we've been looking at integrating new security services throughout an operating system. Debian has

Time for compassion and the Init GR

2014-11-06 Thread Sam Hartman
Early morning, Wednesday, November 19, the results of the GR on init system coupling will be announced. No result will make everyone happy. In fact, that morning, some of our developers, users and contributors will be really unhappy. I would be dishonest if I said I didn't hope to be happy and

Re: RFC: DEP-14: Recommended layout for Git packaging repositories

2014-11-12 Thread Sam Hartman
Hi. I've read the original proposal and believe it is generally going in the right direction. things I liked: * didn't pick between dgit/git-dpm/git-pq; documented the common parts * Seemed to really focus on one clear scope. * Discouraged overlay packaging. I've tried to read the arguments,

Re: Being part of a community and behaving

2014-11-13 Thread Sam Hartman
Patrick == Patrick Ouellette poue...@debian.org writes: Patrick On Thu, Nov 13, 2014 at 11:06:08PM +0100, Matthias Klumpp wrote: Patrick I did not ask for evangelization about how wonderful binary Patrick logs are, nor for a lesson on how to get the info out of Patrick systemd

Re: Being part of a community and behaving

2014-11-13 Thread Sam Hartman
Patrick == Patrick Ouellette poue...@debian.org writes: I think this is a bug. On my system things get logged both to the journal and to /var/log/syslog. My understanding talking to systemd folks is that the behavior I'm seeing is intended and that unless you went out of your way to configure

Bug#769499: syslog-ng-core fails to enable systemd service unit

2014-11-13 Thread Sam Hartman
package: syslog-ng-core severity: important version:3.3.5-4 justification: does not enable systemd unit. syslog-ng-core's postinst does not enable its syslog unit. I'm guessing that including systemd in the dh sequence is not quite doing enough to actually turn it on. Unfortunately dh-systemd

Re: init system policy

2014-11-18 Thread Sam Hartman
Russ == Russ Allbery r...@debian.org writes: A second option is to migrate on upgrade the uid/gid information into an override in /etc/systemd/system. Requires dealing with a dynamically generated config file in preinst/postinst, though, which means the tools that help

Bug#769907: general: non-sysvinit init systems are made of fail

2014-11-20 Thread Sam Hartman
Didier == Didier 'OdyX' Raboud o...@debian.org writes: Didier Systems cross-craded from Ubuntu to Debian are absolutely Didier not supported, and I wouldn't be surprised if some of the Didier issues you're seeing are in some way related to this. I've seen both these issues on pure

Bug#769907: general: non-sysvinit init systems are made of fail

2014-11-20 Thread Sam Hartman
Didier == Didier 'OdyX' Raboud o...@debian.org writes: Didier Steve's suggestions stands though: separated and actionable Didier bugs for these two issues filed on the corresponding Didier packages are way more helpful than a general non-sysvinit Didier init systems are made of

Re: Architectures where unaligned access is (not) OK?

2014-11-21 Thread Sam Hartman
I thought there was a flag bit you could set on x86 that causes unaligned access to trap there too. --Sam -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive:

  1   2   3   4   5   6   7   8   >