Package: krb5-kdc-ldap
Version: 1.8.3+dfsg-4squeeze5
Severity: normal

kerberos.schema is missing password policy attributes; this breaks creation
of new policies as well as usage of pre-existing policies, as follows:

kadmin.local: addpol test
add_policy: Undefined attribute type while creating policy "test".

/var/log/syslog shows:

Jan 10 20:17:34 vm-krb1 slapd[948]: conn=1022 op=13 RESULT tag=105 err=17
text=krbpwdmaxfailure: attribute type undefined

Creation and authentication of principals without policy still works.

-- System Information:
Debian Release: 6.0.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages krb5-kdc-ldap depends on:
ii  krb5-kdc            1.8.3+dfsg-4squeeze5 MIT Kerberos key server (KDC)
ii  libc6               2.11.2-10            Embedded GNU C Library: Shared lib
ii  libcomerr2          1.41.12-4stable1     common error description library
ii  libgssapi-krb5-2    1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - k
ii  libgssrpc4          1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - G
ii  libk5crypto3        1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - C
ii  libkadm5srv-mit7    1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - K
ii  libkdb5-4           1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - K
ii  libkeyutils1        1.4-1                Linux Key Management Utilities (li
ii  libkrb5-3           1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries
ii  libkrb5support0     1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - S
ii  libldap-2.4-2       2.4.23-7.2           OpenLDAP libraries

krb5-kdc-ldap recommends no packages.

krb5-kdc-ldap suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to