Your message dated Sun, 13 Jan 2019 22:38:12 +0000
with message-id <[email protected]>
and subject line Bug#777579: fixed in krb5 1.17-1
has caused the Debian Bug report #777579,
regarding Database ends up in wrong location if krb5.conf an kdc.conf differ
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
777579: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777579
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: krb5-admin-server
Version: 1.12.1+dfsg-16
Severity: important
Tags: patch
The systemd krb5-admin-server.service file is missing the critical
directory /etc/krb5kdc used by kadmind in the ReadWriteDirectories stanza.
The kerberose default database location is created under /etc/krb5kdc.
The location must be writeable. The krb5-admi-server.service file makes
it readonly.
Attempting to use kadmin to add a kerberos principal will receive
the following error at the kadmin prompt:
kadmin: add_principal -randkey host/somehost
...
add_principal: Insufficient access to lock database while creating
"host/[email protected]".
Workaround:
1) Add /etc/krb5kdc to the ReadWriteDirectories stanza.
2) Restart krb5-admin-server systemd service.
-- System Information:
Debian Release: 8.0
APT prefers testing-updates
APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 3.16.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
11c11
< ReadWriteDirectories=/var/tmp /tmp /var/lib/krb5kdc /var/run /run
---
> ReadWriteDirectories=/var/tmp /tmp /var/lib/krb5kdc /var/run /run /etc/krb5kdc
--- End Message ---
--- Begin Message ---
Source: krb5
Source-Version: 1.17-1
We believe that the bug you reported is fixed in the latest version of
krb5, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sam Hartman <[email protected]> (supplier of updated krb5 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 13 Jan 2019 15:59:40 -0500
Source: krb5
Binary: krb5-user krb5-kdc krb5-kdc-ldap krb5-admin-server krb5-kpropd
krb5-multidev libkrb5-dev libkrb5-dbg krb5-pkinit krb5-otp krb5-k5tls krb5-doc
libkrb5-3 libgssapi-krb5-2 libgssrpc4 libkadm5srv-mit11 libkadm5clnt-mit11
libk5crypto3 libkdb5-9 libkrb5support0 libkrad0 krb5-gss-samples krb5-locales
libkrad-dev
Architecture: all amd64 source
Version: 1.17-1
Distribution: unstable
Urgency: low
Maintainer: Sam Hartman <[email protected]>
Changed-By: Sam Hartman <[email protected]>
Closes: 777579 918088
Description:
krb5-admin-server - MIT Kerberos master server (kadmind)
krb5-doc - documentation for MIT Kerberos
krb5-gss-samples - MIT Kerberos GSS Sample applications
krb5-k5tls - TLS plugin for MIT Kerberos
krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
krb5-kdc - MIT Kerberos key server (KDC)
krb5-kpropd - MIT Kerberos key server (Slave KDC Support)
krb5-locales - internationalization support for MIT Kerberos
krb5-multidev - development files for MIT Kerberos without Heimdal conflict
krb5-otp - OTP plugin for MIT Kerberos
krb5-pkinit - PKINIT plugin for MIT Kerberos
krb5-user - basic programs to authenticate using MIT Kerberos
libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
libkadm5clnt-mit11 - MIT Kerberos runtime libraries - Administration Clients
libkadm5srv-mit11 - MIT Kerberos runtime libraries - KDC and Admin Server
libkdb5-9 - MIT Kerberos runtime libraries - Kerberos database
libkrad0 - MIT Kerberos runtime libraries - RADIUS library
libkrad-dev - MIT Kerberos RADIUS Library Development
libkrb5-3 - MIT Kerberos runtime libraries
libkrb5-dbg - debugging files for MIT Kerberos
libkrb5-dev - headers and development libraries for MIT Kerberos
libkrb5support0 - MIT Kerberos runtime libraries - Support library
Changes:
krb5 (1.17-1) unstable; urgency=low
.
* New Upstream release
* Don't include all memory ccaches in ccache collection, avoids invalid
mutex, Closes: #918088
* The default path for the KDC database even without a config file is
/var/lib/krb5kdc/principal, Closes: #777579
Checksums-Sha1:
50d1ce7875e7c710cceb3b43eb59003f9202194d 3302 krb5_1.17-1.dsc
0c404b081db9c996c581f636ce450ee28778f338 8761763 krb5_1.17.orig.tar.gz
c2aad60d1269650c371aae5edb62fe836708a1d0 97940 krb5_1.17-1.debian.tar.xz
0751d7669099f981bfcf4c49df492cb4a851acc9 235872
krb5-admin-server-dbgsym_1.17-1_amd64.deb
3abf00e1ca8ba840315c13480b68e9f97983c3f1 124732
krb5-admin-server_1.17-1_amd64.deb
f2c9133e114f731fbbb6d69628717002bbb2c67b 2321724 krb5-doc_1.17-1_all.deb
35f6cf1b0102917929cb3372b5bc1d8770a59b53 44836
krb5-gss-samples-dbgsym_1.17-1_amd64.deb
a198d8207885cc704179fd828624182efd277dbe 61044
krb5-gss-samples_1.17-1_amd64.deb
fa1f907094302b21ecfd7c82d6ec156cb9e530c1 23516
krb5-k5tls-dbgsym_1.17-1_amd64.deb
ee6380cb2fc7abe36d6ec06247e4fbc8cd845247 51420 krb5-k5tls_1.17-1_amd64.deb
7da6c28105d8872ba6f35fc83b015f36f5fa11d2 569644
krb5-kdc-dbgsym_1.17-1_amd64.deb
175d1b66e507bfd8fb9bc0af436e27243c268832 289552
krb5-kdc-ldap-dbgsym_1.17-1_amd64.deb
dcfbcefd0e0f04f47d5bd87281d072420fa3de3a 120372 krb5-kdc-ldap_1.17-1_amd64.deb
a4c5d3203387bc211404be719345768482f6ff80 210100 krb5-kdc_1.17-1_amd64.deb
15c18f6fcdf757f585bc2e228d59a3f2197ad10c 48308
krb5-kpropd-dbgsym_1.17-1_amd64.deb
0e3a8e64cd6b34b69f9566da83b6d56bf0b279ac 63576 krb5-kpropd_1.17-1_amd64.deb
eefad3560c879276f09c498c0f0d01efa5339780 95324 krb5-locales_1.17-1_all.deb
9f7375d0e8dbdc89f24f6ea93c01e44750f9f6f0 155504 krb5-multidev_1.17-1_amd64.deb
642de4394f26e59be0934fc001764a19d2d99da6 32316 krb5-otp-dbgsym_1.17-1_amd64.deb
ec8fb918d9e59d4b7a2bcd8950390ef0780925d9 52600 krb5-otp_1.17-1_amd64.deb
6eb22bf71481918840facbd4c3f1e4df0e98d865 190592
krb5-pkinit-dbgsym_1.17-1_amd64.deb
2d4e97442798fa81fdf597bb232409a9efa2c8f3 90900 krb5-pkinit_1.17-1_amd64.deb
0b7ec7185ce188e50473d69e8480d911470e65c9 228524
krb5-user-dbgsym_1.17-1_amd64.deb
f025fd606a2b33759626d9d25f59eec7515c2936 149280 krb5-user_1.17-1_amd64.deb
184f444a39b010700771e0eb7ad1ff8f095a4c17 18708 krb5_1.17-1_amd64.buildinfo
0cddf4f9098e16e19b9e9b0bce4f8766b3b4477f 158680
libgssapi-krb5-2_1.17-1_amd64.deb
2a4332e4877c23cb922f74e56f0cae949aaa6660 91140 libgssrpc4_1.17-1_amd64.deb
50e9a09012754af3639061b12d115e340773eaee 121492 libk5crypto3_1.17-1_amd64.deb
06f08ba9340a4438d06d490ef4802810ef2d3000 73360
libkadm5clnt-mit11_1.17-1_amd64.deb
bef9dba3eec510e20ad30137f6410bdc11578bf3 85672
libkadm5srv-mit11_1.17-1_amd64.deb
5ca01f972db0c5234022ec54eca484ff1c4d63c8 73180 libkdb5-9_1.17-1_amd64.deb
ba532d5953c359e0e31604501b0f5fb4995600a8 47744 libkrad-dev_1.17-1_amd64.deb
c66d0a143fab4a74567dd57c0e54bb4b090e9479 57168 libkrad0_1.17-1_amd64.deb
b8dc722aaeb535d56d732d28c4fc946624f6c66e 367812 libkrb5-3_1.17-1_amd64.deb
c763886990dde106ace7780d3707e745679e9a43 3127316 libkrb5-dbg_1.17-1_amd64.deb
2296aaba8f745c8766cebbb8ef1e10ed2cf15f47 47248 libkrb5-dev_1.17-1_amd64.deb
b196afd73bac7a4ecb1f729d084a490a26338967 65540 libkrb5support0_1.17-1_amd64.deb
Checksums-Sha256:
8a343ce256e6b80f11566c4e73ade9a221c5025ae3f54bb916c3957128cebb61 3302
krb5_1.17-1.dsc
5a6e2284a53de5702d3dc2be3b9339c963f9b5397d3fbbc53beb249380a781f5 8761763
krb5_1.17.orig.tar.gz
95ca4f93a1fbf98138ee3fa2046a45e3a5a86da2fd987de0178da78c03002af5 97940
krb5_1.17-1.debian.tar.xz
021a7e3bf303806f91dbfa481bee4e813f423ab8d83c9ba629d69dd5fb0bb1af 235872
krb5-admin-server-dbgsym_1.17-1_amd64.deb
2662a32c783632f540acdf7ade112ece70347c2db6c036d12e1373f82fd8877c 124732
krb5-admin-server_1.17-1_amd64.deb
d5761dcb1c1ea1461e743ce1f97eb9f7d92dae9e326d7c99168ce3b29e02a847 2321724
krb5-doc_1.17-1_all.deb
5ae757f7f15ace9ddcf2cf75d3e300e05eea21a97570f33cee17030af4f93a27 44836
krb5-gss-samples-dbgsym_1.17-1_amd64.deb
7ebb4e3512da71f294dbbf614880777618e9f2314234b82b01edbbb9cdcd002f 61044
krb5-gss-samples_1.17-1_amd64.deb
db4ba9859c7c65bfba913e24a6859f9b0b5f96aa83791aef1433665b950abfb3 23516
krb5-k5tls-dbgsym_1.17-1_amd64.deb
542b075831f1dc5ec4274019c1a78a81e95443ce47dbe826841e8bd88e74c4b9 51420
krb5-k5tls_1.17-1_amd64.deb
4c19789a40f830791cfc7f83cc73766508e176b47798a811d1b7dee5862cb5a9 569644
krb5-kdc-dbgsym_1.17-1_amd64.deb
ba0d016107a36c0410cd4404fafed50a0d22ec1c4817464726ce46f9b7d29690 289552
krb5-kdc-ldap-dbgsym_1.17-1_amd64.deb
d55368fe977f7ae6b7c3f9acccb97a7188dbd864ecfeb213dc959bf8bf241540 120372
krb5-kdc-ldap_1.17-1_amd64.deb
d9a1c84755c1829e945895fa4d54362ac6c1736f05c6e6aa720b4557992384cf 210100
krb5-kdc_1.17-1_amd64.deb
29a5aa5c568463c3d06e24e62b1ebe1a65a0051680f973167ea021864dfa0c63 48308
krb5-kpropd-dbgsym_1.17-1_amd64.deb
d5a00d3e9340cd4d5bc6aa955ba58fc09b6c43495f97aa6e3d3ba1dc9fce20d8 63576
krb5-kpropd_1.17-1_amd64.deb
ec9c6b5016f78db05486ca5f92fcd1e0c651cdc7b623fd7e0b2486bf49543665 95324
krb5-locales_1.17-1_all.deb
e8dfa5a505da2553c2b5b1e36a772906189e117ab716a083c0e5d421467f2dd3 155504
krb5-multidev_1.17-1_amd64.deb
162003424a3f625196eb952dd0e885a652d08af03f9648befa8234a2612dc848 32316
krb5-otp-dbgsym_1.17-1_amd64.deb
9a473ce85ecd70ee5e0b38171ad2ea263ff9ba6c0faec937df65799686ccde01 52600
krb5-otp_1.17-1_amd64.deb
93b535eaec0c371e26fed4a0441fa74fe33715a05a58902c80ce7e2720017714 190592
krb5-pkinit-dbgsym_1.17-1_amd64.deb
4c0af1191f5bf70c93e6955a4096edacee53d724cea26a7d8275f68dfda9d5da 90900
krb5-pkinit_1.17-1_amd64.deb
a951d39ea75cf889086af4892137202858ac4be96636e6f232a02ce17fa73348 228524
krb5-user-dbgsym_1.17-1_amd64.deb
4cd3d57dfcda81157597fd8593d025f714d6a5ae7027bbbe867ea0451bbca0d3 149280
krb5-user_1.17-1_amd64.deb
757325e44ff4afacf59f02d291119208e137c5496f0b174970389ccdf76f4273 18708
krb5_1.17-1_amd64.buildinfo
8064ab457b6b625f2563852164c261c33858d044630873a39eff6b5bcefb1120 158680
libgssapi-krb5-2_1.17-1_amd64.deb
aab65452f687857b5d341da712c19cfa04edb818854700652ac510dd7efa5d08 91140
libgssrpc4_1.17-1_amd64.deb
e8f3e7ce3c3211171fb98a1d9ca542790426d0a49e59d2b4dbed5e42a837ec2a 121492
libk5crypto3_1.17-1_amd64.deb
77dbb01553061541d2ba1db7154a2898640baa3641a688b85abedbc5cdc13124 73360
libkadm5clnt-mit11_1.17-1_amd64.deb
59b8af9dbe4c93060ea477c2677bc86c51f38ce5b166505a778f141d9c2216b1 85672
libkadm5srv-mit11_1.17-1_amd64.deb
fca9368e4fa346e3001a93b569750700b0576c46e2583a55538f315329330d02 73180
libkdb5-9_1.17-1_amd64.deb
afa0891515f300e991bc74537d4e536763a32d2500301da5167ae30f8e737c31 47744
libkrad-dev_1.17-1_amd64.deb
f989960762258511eaf62033ec9527385d0e061d8f90a01698f8785c813cee21 57168
libkrad0_1.17-1_amd64.deb
ae172f3969a0b0c1aceb1b4a4c3bc0711df332176183634a5b737007d5bb6e04 367812
libkrb5-3_1.17-1_amd64.deb
06c64a288fa9ed021473502940653471ad40bad968c985ad98fe1886a5a348b4 3127316
libkrb5-dbg_1.17-1_amd64.deb
28b0d2182e7a6923cfcb26216d971e3396d0379e06bd1202e8ca42defed1a17c 47248
libkrb5-dev_1.17-1_amd64.deb
8402cc6b8aa5f7b7f264f7369a4c85bcbf75286011fbb3c443b78bd3671ded62 65540
libkrb5support0_1.17-1_amd64.deb
Files:
4148de935908222cd31520578e2f1160 3302 net optional krb5_1.17-1.dsc
3b729d89eb441150e146780c4138481b 8761763 net optional krb5_1.17.orig.tar.gz
86f2f456a735473240398a474f1ba17f 97940 net optional krb5_1.17-1.debian.tar.xz
2e91cffe2ceda97ff1720ee0a43b503b 235872 debug optional
krb5-admin-server-dbgsym_1.17-1_amd64.deb
60fa81620c99f8d1f20083714a17f13e 124732 net optional
krb5-admin-server_1.17-1_amd64.deb
df5efb94b37f0f0bbea88a09f3850529 2321724 doc optional krb5-doc_1.17-1_all.deb
aa13c90f074fe544e07567a005f20f6f 44836 debug optional
krb5-gss-samples-dbgsym_1.17-1_amd64.deb
526b0634e8a22fbb24d10356536d632c 61044 net optional
krb5-gss-samples_1.17-1_amd64.deb
48fd639859cf82b1a55d2fcf916bee62 23516 debug optional
krb5-k5tls-dbgsym_1.17-1_amd64.deb
59a5362d7504e5e9dfc99541a2bc1d8a 51420 net optional krb5-k5tls_1.17-1_amd64.deb
98fd7f0f3bcb9c2c1fd38b415282fdf7 569644 debug optional
krb5-kdc-dbgsym_1.17-1_amd64.deb
f8bf7f2629c7546d60e4af7e04959a28 289552 debug optional
krb5-kdc-ldap-dbgsym_1.17-1_amd64.deb
bca6d2236316f9afb0098a0338ff1bf6 120372 net optional
krb5-kdc-ldap_1.17-1_amd64.deb
24fc404f1f5293da24ba4ee2864b7876 210100 net optional krb5-kdc_1.17-1_amd64.deb
5ff3dba0321a0c2de810e4b4f5b6f742 48308 debug optional
krb5-kpropd-dbgsym_1.17-1_amd64.deb
9acd2938058270202e706d61c454f14e 63576 net optional
krb5-kpropd_1.17-1_amd64.deb
5e4df8b0744938196dc9501d62b436f0 95324 localization optional
krb5-locales_1.17-1_all.deb
f0e340a6eb22a18388520e79012c9cef 155504 libdevel optional
krb5-multidev_1.17-1_amd64.deb
88c1631707d4b429b4d666535337b80a 32316 debug optional
krb5-otp-dbgsym_1.17-1_amd64.deb
cb537ff2a68d567dec338d6c018b7ebb 52600 net optional krb5-otp_1.17-1_amd64.deb
e531d2b980a1317eacf2ec7e747bb189 190592 debug optional
krb5-pkinit-dbgsym_1.17-1_amd64.deb
ae10730ce9667954a271f570dca7cd4d 90900 net optional
krb5-pkinit_1.17-1_amd64.deb
8a34717d6fe5bc444fbc4829c0f3ae49 228524 debug optional
krb5-user-dbgsym_1.17-1_amd64.deb
d3f89884f409350af4929c7cfd0b2dcf 149280 net optional krb5-user_1.17-1_amd64.deb
bff8ef6728cc7385e9894b9e95894fd5 18708 net optional krb5_1.17-1_amd64.buildinfo
e5226b45d909228a869edcddc398aa1c 158680 libs optional
libgssapi-krb5-2_1.17-1_amd64.deb
a3d38f97201a82a09744d5a93c679fab 91140 libs optional
libgssrpc4_1.17-1_amd64.deb
74d2e34961009ace3557131040bb1f9d 121492 libs optional
libk5crypto3_1.17-1_amd64.deb
3997135ef0ef28cd0be7dec679f4188b 73360 libs optional
libkadm5clnt-mit11_1.17-1_amd64.deb
e326951999e8c04b755b2fa0891af331 85672 libs optional
libkadm5srv-mit11_1.17-1_amd64.deb
dc564c7fbd7b0cdbd89e252de81100ef 73180 libs optional libkdb5-9_1.17-1_amd64.deb
654938e425d4a18855d74d92449272e8 47744 libdevel optional
libkrad-dev_1.17-1_amd64.deb
130587648bfa7b8ec0f800dc7ac91152 57168 libs optional libkrad0_1.17-1_amd64.deb
509a53da693d2eabd5195a004c460616 367812 libs optional
libkrb5-3_1.17-1_amd64.deb
db7006606aa30c308eb1e5548dd4f355 3127316 debug optional
libkrb5-dbg_1.17-1_amd64.deb
322552fa4e4bee951fbf162b85c27214 47248 libdevel optional
libkrb5-dev_1.17-1_amd64.deb
c77edd6f943e617ecd68bf278cb255a1 65540 libs optional
libkrb5support0_1.17-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE9Li3nMNy++OFgPTCQe7SUh/WssoFAlw7tIAACgkQQe7SUh/W
sspoUgf/aKjnY9CKHZZvK/fMfKH/P/HVyk4PBqe8tIWwnGTlZLnT3ZMO3FVd37oN
9Xvoo4iZR6Tzp/AxhqK2qBtyZG//vUEngjcv73j9xksclKTVL3OoVf3aF8PLUmXD
ney5N9tS1CMeDiNIg6QdZAUDhc6MVP29m+q3oTvTItIGUG4V6xijdwcT9uprM3jc
9eibRxiV/gHBIWinc91VwA0DOsN8UUBefPGtYgKFp3thmsTIb+d5jcPsaXSbVkN/
H2rDWmKDCTka6hFcjdVEX08X0bTIkgKnnYvuJf1gywptSc8yrgiO7BtEewWlWzRt
D0nZtpZN+Uvu1KGjfoFMllYI5UnO3A==
=qHHT
-----END PGP SIGNATURE-----
--- End Message ---
