Bug#304862: migrationtools: migrate_passwd.pl create a wrong kerberosSecurityObject objectClass line in output

[Luca Villani]

Package: migrationtools
Version: 46-1
Severity: grave
Tags: patch
Justification: renders package unusable

Debian Woody's schema files for openldap do not provide the objectClass
"kerberosSecurityObject", but migrationtool's migrate_passwd.pl script
create an ldif file containing

        objectClass: kerberosSecurityObject
        krbName: ...

This at all prevents ldif import:

fidokaos:/usr/share/migrationtools# slapadd -v -d 10 -l users.ldif
bdb_back_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December
3, 2003)
bdb_db_init: Initializing BDB database
str2entry: invalid value for attributeType objectClass #5 (syntax
1.3.6.1.4.1.1466.115.121.1.38)
slapadd: could not parse entry (line=24)
fidokaos:/usr/share/migrationtools#



-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-k7
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages migrationtools depends on:
ii  ldap-utils [openldap-utils]   2.2.23-1   OpenLDAP utilities
ii  perl                          5.8.4-8    Larry Wall's Practical Extraction 

-- no debconf information

--- migrate_passwd.pl   2004-11-03 22:43:15.000000000 +0100
+++ my_migrate_passwd.pl        2005-04-16 01:48:31.719587732 +0200
@@ -121,9 +121,9 @@
        print $HANDLE "objectClass: posixAccount\n";
        print $HANDLE "objectClass: top\n";
 
-       if ($DEFAULT_REALM) {
-               print $HANDLE "objectClass: kerberosSecurityObject\n";
-       }
+#      if ($DEFAULT_REALM) {
+#              print $HANDLE "objectClass: kerberosSecurityObject\n";
+#      }
 
        if ($shadowUsers{$user} ne "") {
                &dump_shadow_attributes($HANDLE, split(/:/, 
$shadowUsers{$user}));
@@ -131,9 +131,9 @@
                print $HANDLE "userPassword: {crypt}$pwd\n";
        }
 
-       if ($DEFAULT_REALM) {
-               print $HANDLE "krbName: [EMAIL PROTECTED]";
-       }
+#      if ($DEFAULT_REALM) {
+#              print $HANDLE "krbName: [EMAIL PROTECTED]";
+#      }
 
        if ($shell) {
                print $HANDLE "loginShell: $shell\n";