Package: krb5-admin-server
Version: 1.4.4-7etch5
Severity: normal

I hate to be a pest, and perhaps I'm overlooking something, and if so, please
point me in the correct direction.

This bug has been marked closed as it is fixed in:
krb5/1.6.dfsg.1-1, 1.6.dfsg.1-1

Would it be possible to have a fixed package released for Etch?

This bug results in a denial of service when minimum password life is
enforced. One can of course opt not to utilize minimum password life, but
this essentially makes password history lists and maximum password life
pointless as users can simply rapid password cycle back to their original
passwords.

Making this choice arguably reduces the security of the kerberized network and
its related services.

In networks which rely solely on Kerberos for authentication, such a denial of
service is a critical block.

Alternatively, and here is where I'm hoping you can point me in the correct
direction: Is there a way to use 1.6.dfsg.1-1 on an Etch system while still
tracking/obtaining security patches for this package automatically with apt
without affecting the rest of the system?

Thanks in advance.


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-amd64
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages krb5-admin-server depends on:
ii  deb 1.5.11etch1                          Debian configuration management sy
ii  krb 1.4.4-7etch5                         MIT Kerberos key server (KDC)
ii  lib 2.3.6.ds1-13etch5                    GNU C Library: Shared libraries
ii  lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 common error description library
ii  lib 1.4.4-7etch5                         MIT Kerberos administration runtim
ii  lib 1.4.4-7etch5                         MIT Kerberos runtime libraries
ii  lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 command-line interface parsing lib
ii  lsb 3.1-23.2etch1                        Linux Standard Base 3.1 init scrip

krb5-admin-server recommends no packages.

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to