Bug#709086: freeradius: logrotate causes mschap module to fail
Hello all,
We have the same problem, not only on mschap, but also with ttls+pap and
peap+pap. The problem was seen from the wheezy version of freeradius
[1], but when upgraded to wheezy-backports [2] (freeradius 2.2.5) the
issue was not seen anymore, even with logrotate doing a daemon reload
(20 times, for now).
So, a workaround to this issue is to upgrade freeradius to
wheezy-backports. Pay attention to openssl Heartbleed check, because
from 2014.04.08 [3], freeradius refuse to start when find a supposedly
vulnerable version (actually it is not, because was fixed on
1.0.1e-2+deb7u17). Then you need to change radiusd.conf and include:
diff --git a/freeradius/radiusd.conf b/freeradius/radiusd.conf
index 8feb3e2..cd5d18d 100644
--- a/freeradius/radiusd.conf
+++ b/freeradius/radiusd.conf
@@ -524,6 +524,9 @@ security {
# See also raddb/sites-available/status
#
status_server = yes
+
+
+ allow_vulnerable_openssl = yes
}
# PROXY CONFIGURATION
Regards, Italo
[1] versions of freeradius before update (with problem)
ii freeradius 2.1.12+dfsg-1.2
amd64high-performance and highly configurable RADIUS server
ii freeradius-common 2.1.12+dfsg-1.2 all
FreeRADIUS common files
ii freeradius-ldap2.1.12+dfsg-1.2
amd64LDAP module for FreeRADIUS server
ii freeradius-utils 2.1.12+dfsg-1.2
amd64FreeRADIUS client utilities
ii libfreeradius2 2.1.12+dfsg-1.2
amd64FreeRADIUS shared library
[2] upgraded freeradius to wheezy-backports
ii freeradius 2.2.5+dfsg-0.1~bpo70+1
amd64high-performance and highly configurable RADIUS server
ii freeradius-common 2.2.5+dfsg-0.1~bpo70+1all
FreeRADIUS common files
ii freeradius-ldap2.2.5+dfsg-0.1~bpo70+1
amd64LDAP module for FreeRADIUS server
ii freeradius-utils 2.2.5+dfsg-0.1~bpo70+1
amd64FreeRADIUS client utilities
ii libfreeradius2 2.2.5+dfsg-0.1~bpo70+1
amd64FreeRADIUS shared library
[3] http://freeradius.org/security.html
Bug#757698: network-manager: Not authorized to control networking
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello guys, I have the same error in my debian jessie amd64 up to date. Both network-manager fails to do any connection management and removable media also gives permission errors. Furthermore I used to have GDM3 as session manager but now it don't list any user on login screen. Using systemd as init on boot (init=/bin/systemd) fix the above problems. Kind regards, - -- Italo Valcy http://wiki.dcc.ufba.br/Main/ItaloValcy -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAlQmmNkACgkQfidLqjN6RNFMtACfYMMyRk3bmommqTR/gmCkcWSn KIEAniI0QJIrbKqWQDQstPNDbnLXpl98 =B3lv -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#737214: 389-admin: setup-ds-admin fails with: error while loading shared libraries: libsoftokn3.so: ... not found!
Package: 389-admin Version: 1.1.30-1+b1 Severity: normal Dear Maintainer, I found the following error when trying to setup DS with setup-ds-admin: root@debian:~# /usr/sbin/setup-ds-admin [...] Error updating console.conf: /usr/lib/i386-linux-gnu/dirsrv/cgi-bin/config: error while loading shared libraries: libsoftokn3.so: cannot open shared object file: No such file or directory Could not update the httpd engine configuration. Failed to create and configure the admin server Exiting . . . Log file is '/tmp/setuphiidhp.log' But the lib libsoftokn3 seems to be installed: root@debian:~# apt-file search libsoftokn3.so libnss3: /usr/lib/i386-linux-gnu/nss/libsoftokn3.so root@debian:~# dpkg -l libnss3 Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Nome Versão Arquitectura Descrição +++-=-=-=- ii libnss3:i386 2:3.15.3.1-1.1i386 Network Security Service libraries Then, when looking at dependencies of /usr/lib/i386-linux-gnu/dirsrv/cgi-bin/config: root@debian:~# ldd /usr/lib/i386-linux-gnu/dirsrv/cgi-bin/config linux-gate.so.1 (0xb771d000) libds-admin-serv.so.0 = /usr/lib/i386-linux-gnu/libds-admin-serv.so.0 (0xb76ef000) libadmsslutil.so.0 = /usr/lib/i386-linux-gnu/libadmsslutil.so.0 (0xb76e4000) libadminutil.so.0 = /usr/lib/i386-linux-gnu/libadminutil.so.0 (0xb76ca000) libicui18n.so.52 = /usr/lib/i386-linux-gnu/libicui18n.so.52 (0xb74b6000) libicuuc.so.52 = /usr/lib/i386-linux-gnu/libicuuc.so.52 (0xb7343000) libicudata.so.52 = /usr/lib/i386-linux-gnu/libicudata.so.52 (0xb5cd6000) libldap_r-2.4.so.2 = /usr/lib/i386-linux-gnu/libldap_r-2.4.so.2 (0xb5c85000) libsasl2.so.2 = /usr/lib/i386-linux-gnu/libsasl2.so.2 (0xb5c68000) libsmime3.so = /usr/lib/i386-linux-gnu/libsmime3.so (0xb5c3d000) libssl3.so = /usr/lib/i386-linux-gnu/libssl3.so (0xb5bf6000) libnss3.so = /usr/lib/i386-linux-gnu/libnss3.so (0xb5ab1000) libsoftokn3.so = not found [...] As a poor workaround I did: root@debian:~# cd /usr/lib/i386-linux-gnu/ root@debian:/usr/lib/i386-linux-gnu# ln -s /usr/lib/i386-linux-gnu/nss/libsoftokn3.so . root@debian:/usr/lib/i386-linux-gnu# ldd /usr/lib/i386-linux-gnu/dirsrv/cgi-bin/config [...] libsoftokn3.so = /usr/lib/i386-linux-gnu/libsoftokn3.so (0xb5a66000) [...] And it works as expected. -- System Information: Debian Release: jessie/sid APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.12-1-686-pae (SMP w/1 CPU core) Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages 389-admin depends on: ii 389-ds-base1.3.0.3-1+b2 ii apache22.4.7-1 ii debconf [debconf-2.0] 1.5.52 ii libadminutil0 1.1.15-1+b1 ii libapache2-mod-nss 1.0.8-3 ii libc6 2.17-97 ii libds-admin-serv0 1.1.30-1+b1 ii libicu52 52.1-3 ii libldap-2.4-2 2.4.31-1+nmu2+b1 ii libmozilla-ldap-perl 1.5.3-1+b1 ii libnspr4 2:4.10.2-1 ii libnss32:3.15.3.1-1.1 ii libnss3-1d 2:3.15.3.1-1.1 ii libnss3-tools 2:3.15.3.1-1.1 ii libsasl2-2 2.1.25.dfsg1-17 ii multiarch-support 2.17-97 389-admin recommends no packages. 389-admin suggests no packages. -- Configuration Files: /etc/dirsrv/admin-serv/console.conf changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#575732: ITP: php-http-webdav-client -- WebDAV stream wrapper class
Package: wnpp Severity: wishlist Owner: Italo Valcy it...@dcc.ufba.br Owner: Italo Valcy it...@dcc.ufba.br * Package name: php-http-webdav-client Version : 1.0.0 Upstream Author : Hartmut Holzgraefe hholz...@php.net * URL : http://pear.php.net/package/HTTP_WebDAV_Client/ * License : PHP Programming Lang: PHP Description : WebDAV stream wrapper class RFC2518 compliant stream wrapper that allows to use WebDAV server resources like a regular file system from within PHP. Web-based Distributed Authoring and Versioning, or WebDAV, is a set of extensions to the Hypertext Transfer Protocol (HTTP) that allows computer-users to edit and manage files collaboratively on remote World Wide Web servers. This package contains helper classes for WebDAV client implementation. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#554165: gnome-applets: sticky notes applet does not start any more
Hi, This is an upstream's bug already fixed: https://bugzilla.gnome.org/show_bug.cgi?id=594797#c5 The patch to fix this bug: http://git.gnome.org/cgit/gnome-applets/commit/?id=51fd777236b9755bdeeef7e821db6e63653b8f28 it works fine to me. -- Saudações, Italo Valcy :: http://wiki.dcc.ufba.br/~ItaloValcy -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#535528: ITP: libhtml-calendarmonthsimple-perl -- perl module for generating html calendars
Package: wnpp Severity: wishlist Owner: Italo Valcy it...@dcc.ufba.br * Package name: libhtml-calendarmonthsimple-perl Version : 1.25 Upstream Author : Matthew P. Sisk s...@mojotoad.com * URL : * http://search.cpan.org/~stigmata/HTML-CalendarMonthSimple-1.25/ * License : Unknown Programming Lang: Perl Description : perl module for generating html calendars HTML::CalendarMonthSimple is a Perl module for generating, manipulating, and printing a HTML calendar grid for a specified month. It is intended as a faster and easier-to-use alternative to HTML::CalendarMonth. -- System Information: Debian Release: 5.0.2 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
