Bug#1034899: marked as done (unblock: sssd/2.8.2-4)

[Debian Bug Tracking System]

Your message dated Thu, 27 Apr 2023 19:25:36 +0200
with message-id <2263393c-aff8-6392-6722-dd6fbb615...@debian.org>
and subject line Re: Bug#1034899: unblock: sssd/2.8.2-4
has caused the Debian Bug report #1034899,
regarding unblock: sssd/2.8.2-4
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1034899: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034899
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

--- Begin Message ---

Package: release.debian.org
Control: affects -1 + src:sssd
X-Debbugs-Cc: s...@packages.debian.org
User: release.debian....@packages.debian.org
Usertags: unblock
Severity: normal

Please unblock package sssd.

[ Reason ]


[ Impact ]
Prevents sssd from getting dropped from bookworm.

[ Risks ]


[ Checklist ]
    [x] all changes are documented in the d/changelog
    [x] I reviewed all changes and I approve them
    [x] attach debdiff against the package in testing

unblock sssd/2.8.2-4

--
t
diff -Nru sssd-2.8.2/debian/changelog sssd-2.8.2/debian/changelog
--- sssd-2.8.2/debian/changelog 2023-02-26 16:35:48.000000000 +0200
+++ sssd-2.8.2/debian/changelog 2023-04-11 15:19:36.000000000 +0300
@@ -1,3 +1,10 @@
+sssd (2.8.2-4) unstable; urgency=medium
+
+  [ Sam Morris ]
+  * Don't add subid to /etc/nsswitch.conf (Closes: #1032990)
+
+ -- Timo Aaltonen <tjaal...@debian.org>  Tue, 11 Apr 2023 15:19:36 +0300
+
 sssd (2.8.2-3) unstable; urgency=medium
 
   [ Gioele Barabucci ]
diff -Nru sssd-2.8.2/debian/sssd-common.nss sssd-2.8.2/debian/sssd-common.nss
--- sssd-2.8.2/debian/sssd-common.nss   2023-02-26 16:33:13.000000000 +0200
+++ sssd-2.8.2/debian/sssd-common.nss   1970-01-01 02:00:00.000000000 +0200
@@ -1,5 +0,0 @@
-# The 'subid' database supports only a sigle data source:
-# <https://github.com/shadow-maint/shadow/issues/351>
-subid  database-add
-
-subid  last    sss
diff -Nru sssd-2.8.2/debian/sssd-common.preinst 
sssd-2.8.2/debian/sssd-common.preinst
--- sssd-2.8.2/debian/sssd-common.preinst       2023-01-10 16:39:57.000000000 
+0200
+++ sssd-2.8.2/debian/sssd-common.preinst       2023-04-11 15:14:22.000000000 
+0300
@@ -17,6 +17,14 @@
     # Force the AppArmor profile to complain mode on install
     inst_complain_profile
     ;;
+upgrade)
+    if dpkg --compare-versions "$2" le 2.8.2-3; then
+       # 2.8.2-2 added a line for subid which was premature given that
+       # libsubid supports only a single database. Let's remove it to avoid
+       # breaking systems where the user expects /etc/sub[ug]id to continue to
+       # work.
+       sed -E -i "${DPKG_ROOT}/etc/nsswitch.conf" -e '/^subid:\s*sss\s*$/d'
+    fi
 esac
 
 #DEBHELPER#

This drops a change that added a line for subid to /etc/nsswitch.conf, but subuid only supports a single database, so this addition needs to be dropped so that /etc/sub[ug]id still works. Minimal, subuid support was a fairly recent addition, so people upgrading from earlier Debian don't see sssd changing behaviour (due to this).
--- End Message ---

--- Begin Message ---

Hi Timo,

On 27-04-2023 08:14, Timo Aaltonen wrote:

unblock sssd/2.8.2-4

"""
Issues preventing migration:
∙ ∙ Too young, only 16 of 20 days old
Additional info:
∙ ∙ Updating sssd will fix bugs in testing: #1032990
∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/s/sssd.html

∙ ∙ not blocked: has successful autopkgtest
"""

sssd isn't blocked, so nothing to do.

Paul

∙ ∙ autopkgtest for sssd/2.8.2-4: amd64: Pass, arm64: Pass, armel: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, s390x: Pass

OpenPGP_signature
Description: OpenPGP digital signature

--- End Message ---