Bug#1023593: dkms 3.0.6-4 signs modules without secure boot enabled

2022-11-07 Thread Thomas Luzat
Package: dkms
Version: 3.0.6-4
Severity: important

Dear Maintainer,

after upgrading to dkms 3.0.6-4 and installing a new custom-built kernel dkms
generates a signing key:

Setting up linux-image-6.0.7-wopr (6.0.7-wopr-1) ...
dkms: running auto installation service for kernel 6.0.7-wopr:Sign command:
/usr/lib/linux-kbuild-6.0/scripts/sign-file
Signing key: /var/lib/dkms/mok.key
Public certificate (MOK): /var/lib/dkms/mok.pub
Certificate or key are missing, generating self signed certificate for MOK...

... and signs modules (NVIDIA's driver in this case). This seems to break the
boot
process on my system (x86_64, UEFI, secure boot disabled, cryptoroot):

  * Acquiring an IP using DHCP for unlocking remotely early in the boot process
does not seem to work (no NIC/network info shown).
  * When unlocking locally, the system hangs within init-bottom (probably
related
to failure to load module(s) given that I include the NVIDIA drivers in the
initramfs).

Downgrading to 3.0.6-3 and reinstalling the linux-image fixes the issue: NVIDIA
modules are no longer signed, boot works as expected (brings up NIC, unlock
works,
NVIDIA driver loads).

Patching 3.0.6-4's /usr/sbin/dkms to not invoke prepare_signing and
reinstalling
the image also works.

I did not find another way to disable signing the modules (do_signing=1 seems
to
be true for all possible code paths) or boot with the signed NVIDIA modules.

I feel that there should be a way to disable signing the modules; or should
this
work without secure boot, too?

Cheers,

Thomas


-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.0.7-wopr (SMP w/32 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dkms depends on:
ii  build-essential12.9
ii  clang-13 [c-compiler]  1:13.0.1-9
ii  clang-14 [c-compiler]  1:14.0.6-7
ii  dctrl-tools2.24-3+b1
ii  dh-dkms3.0.6-4
ii  dpkg-dev   1.21.9
ii  gcc [c-compiler]   4:12.2.0-1
ii  gcc-10 [c-compiler]10.4.0-5
ii  gcc-11 [c-compiler]11.3.0-8
ii  gcc-12 [c-compiler]12.2.0-9
ii  kmod   30+20220905-1
ii  lsb-release12.0-1
ii  make   4.3-4.1
ii  patch  2.7.6-7

Versions of packages dkms recommends:
ii  fakeroot 1.30.1-1
ii  linux-headers-amd64 [linux-headers-generic]  6.0.6-2
ii  sudo 1.9.11p3-2

Versions of packages dkms suggests:
ii  e2fsprogs  1.46.6~rc1-1+b1
pn  menu   

-- no debconf information



Bug#967853: cryptsetup: does not support bitlk type in crypttab

2020-08-04 Thread Thomas Luzat
Package: cryptsetup
Version: 2:2.3.3-1+b1
Severity: minor

systemd 246 (Debian version 246-2 here) added support for Windows BitLocker
volumes. It requires a bitlk type specified in /etc/crypttab for systemd-
cryptsetup, like so:

foo PARTUUID=12345678-abcd-abcd-abcd-1234567890ab /etc/cryptsetup/foo.key
bitlk,discard

Debian's cryptdisks_start does not require the bitlk option in that case, but
also does not support the option. This results in a warning when Debian's
scripts are used:

# cryptdisks_start foo
Starting crypto disk...cryptsetup: WARNING: foo: ignoring unknown option
'bitlk'
foo (starting)...foo (started)...done.

It would be nice if bitlk was either required (for consistency with systemd) or
at least allowed to avoid that warning.



-- Package-specific info:

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (501, 'unstable'), (500, 'unstable-debug'), (500, 
'testing-debug'), (400, 'testing'), (101, 'experimental'), (1, 
'experimental-debug')
Architecture: amd64 (x86_64)

Kernel: Linux 5.8.0-wopr (SMP w/32 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages cryptsetup depends on:
ii  cryptsetup-bin 2:2.3.3-1+b1
ii  debconf [debconf-2.0]  1.5.74
ii  dmsetup2:1.02.171-2
ii  libc6  2.31-2

Versions of packages cryptsetup recommends:
ii  cryptsetup-initramfs  2:2.3.3-1
pn  cryptsetup-run

Versions of packages cryptsetup suggests:
ii  dosfstools  4.1-2
ii  keyutils1.6.1-2
ii  liblocale-gettext-perl  1.07-4

-- debconf information excluded



Bug#694832: Another proposed fix

2019-10-26 Thread Thomas Luzat

Version: 1:7.7+19


I stumbled across this one today when trying to use i3 with Plasma as 
documented at user.base.kde.org, that is with:


Exec=env KDEWM=/usr/bin/i3 /usr/bin/startkde

Some proposed fixes were:

1. Not quoting "$1". Not a good idea: In this case /usr/bin/which tries 
to locate each argument:


$ which env KDEWM=/usr/bin/i3 /usr/bin/startkde
/usr/bin/env
KDEWM=/usr/bin/i3 not found
/usr/bin/startkde

2. Removing the arguments with "${1%% *}". Simple, but there are 
possibly two problems:


a) Does this work with all shells? /etc/X11/Xsession may be sourced by 
various shells. At least bash, dash and zsh seem to be fine, though.


b) It handles only space, but I think it should handle all white-space 
(there may actually be more complications for full .desktop file 
handling, because the desktop entry spec allows \s for space and such; I 
will ignore those) and possibly escaped/quoted spaces (foo\ bar or "foo 
bar").


My proposal is to add a function to 20x11-common_process-args:

which_first() {
  /usr/bin/which $1
}

... and replace

$(/usr/bin/which "$1" || true)

with:

$(which_first $1 || true)

This leaves more accurate argument handling to the shell. A 
corresponding patch is attached.


(OT: While I do appreciate all the work that goes into the project, it's
a pity that this bug and its related bugs are still open after 8+ years, 
even with Severity: important and some ways to fix. I would love to be 
able to just submit a PR and have it fixed within hours.)




--- 20x11-common_process-args.orig	2019-10-27 02:33:33.170572511 +0200
+++ 20x11-common_process-args	2019-10-27 02:34:08.222958960 +0200
@@ -14,6 +14,10 @@
   fi
 }
 
+which_first() {
+  /usr/bin/which $1
+}
+
 # Determine how many arguments were provided.
 case $# in
   0)
@@ -45,7 +49,7 @@
 ;;
   *)
 # Specific program was requested.
-STARTUP_FULL_PATH=$(/usr/bin/which "$1" || true)
+STARTUP_FULL_PATH=$(which_first $1 || true)
 if [ -n "$STARTUP_FULL_PATH" ] && [ -e "$STARTUP_FULL_PATH" ]; then
   if [ -x "$STARTUP_FULL_PATH" ]; then
 STARTUP="$1"


Bug#934474: libnss-libvirt: fails to work with apt when seccomp is enabled

2019-08-11 Thread Thomas Luzat
Package: libnss-libvirt
Version: 5.2.0-2
Severity: normal

Dear Maintainer,

when:

- libnss-libvirt (5.0.0-4 or 5.2.0-2) is active in /etc/nsswitch.conf (libvirt
or libvirt_guest)
- being on x86-64 (not sure about other platforms, but may be relevant)
- apt has seccomp enabled (APT::Sandbox::Seccomp "true";)

apt fails when trying to contact hosts (see log below), because syscall 217
(getdents64) can't be executed. /etc/apt/apt.conf.d/90libnss-libvirt specifies
that getdents is allowed:

// the nss module (once enabled) will make apt call getdents (LP: #1732030)
apt::sandbox::seccomp::allow { "getdents" };

Changing getdents to getdents64 makes it work, but I suppose some systems may
use getdents while others may use getdents64. It would probably be best to
allow only the one that is required on that architecture, but allowing both is
probably not too bad:

apt::sandbox::seccomp::allow { "getdents", "getdents64" };

Cheers,

Thomas Luzat


apt-get source libnss-libvirt
Reading package lists... Done
Picking 'libvirt' as source package instead of 'libnss-libvirt'
NOTICE: 'libvirt' packaging is maintained in the 'Git' version control system
at:
https://salsa.debian.org/libvirt-team/libvirt.git
Please use:
git clone https://salsa.debian.org/libvirt-team/libvirt.git
to retrieve the latest (possibly unreleased) updates to the package.
Need to get 15.1 MB of source archives.
0% [Working]
  Seccomp prevented execution of syscall 000217 on architecture amd64

E: Method http has died unexpectedly!
E: Sub-process http returned an error code (31)
E: Failed to fetch some archives.



-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (501, 'unstable'), (500, 'unstable-debug'), (500, 
'testing-debug'), (400, 'testing'), (101, 'experimental'), (1, 
'experimental-debug')
Architecture: amd64 (x86_64)

Kernel: Linux 5.2.8-wopr (SMP w/8 CPU cores; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US 
(charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libnss-libvirt depends on:
ii  libc6 2.28-10
ii  libgcc1   1:9.1.0-10
ii  libvirt0  5.2.0-2
ii  libyajl2  2.1.0-3

libnss-libvirt recommends no packages.

libnss-libvirt suggests no packages.

-- no debconf information



Bug#912921: libasound2-plugins: Crashes pulseaudio

2018-11-05 Thread Thomas Luzat
Similar experience her, starting with 1.1.7-1. Downgrading to 1.1.6-1 helps.

My device is a Steinberg UR22 mkII. The pulseaudio log ends with:

I: [pulseaudio] alsa-util.c: Device iec958:4 doesn't support sample format
s16le, changed to s32le.
I: [pulseaudio] (alsa-lib)control.c: Invalid CTL iec958:4
I: [pulseaudio] alsa-util.c: Unable to attach to mixer iec958:4: No such
file or directory
I: [pulseaudio] alsa-util.c: Successfully attached to mixer 'hw:4'
I: [pulseaudio] alsa-util.c: Device front:4 doesn't support sample format
s16le, changed to s32le.
I: [pulseaudio] alsa-util.c: Device iec958:4 doesn't support sample format
s16le, changed to s32le.
I: [pulseaudio] (alsa-lib)pcm_a52.c: Cannot get slave hw_params

And a "pulseaudio" backtrace after the segmentation fault gives a
consistent:

#0  0x7076e3b0 in snd_pcm_state () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#1  0x7076e438 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#2  0x7076eb9a in snd_pcm_drop () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#3  0x707707c6 in snd_pcm_close () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#4  0x70782da1 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#5  0x70770795 in snd_pcm_close () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#6  0x70890ca2 in _snd_pcm_a52_open () from
/usr/lib/x86_64-linux-gnu/alsa-lib/libasound_module_pcm_a52.so
#7  0x7076d3c4 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#8  0x7076da58 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#9  0x70770437 in snd_pcm_open () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#10 0x706e19e3 in pa_alsa_open_by_device_string () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#11 0x706e1da2 in pa_alsa_open_by_template () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#12 0x706ebf25 in ?? () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#13 0x706f5c6b in pa_alsa_profile_set_probe () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#14 0x70898c06 in module_alsa_card_LTX_pa__init () from
/usr/lib/pulse-12.2/modules/module-alsa-card.so
#15 0x77e92366 in pa_module_load () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#16 0x708a0dc4 in ?? () from
/usr/lib/pulse-12.2/modules/module-udev-detect.so
#17 0x708a1e6b in module_udev_detect_LTX_pa__init () from
/usr/lib/pulse-12.2/modules/module-udev-detect.so
#18 0x77e92366 in pa_module_load () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#19 0x77e803fe in ?? () from /usr/lib/x86_64-linux-gnu/pulseaudio/
libpulsecore-12.2.so
#20 0x77e86fee in pa_cli_command_execute_line_stateful () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#21 0x77e877a1 in pa_cli_command_execute_file_stream () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#22 0xb4cc in main ()


Bug#912763: Can reproduce

2018-11-03 Thread Thomas Luzat
Same here on Sid/amd64. Downgrading to libasound2/-data/-plugins 1.1.6-1
from testing helps. With 1.1.7-1 pulseaudio crashes in libasounds's
snd_pcm_state:

Thread 1 "pulseaudio" received signal SIGSEGV, Segmentation fault.
0x7076e3b0 in snd_pcm_state () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
(gdb) bt
#0  0x7076e3b0 in snd_pcm_state () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#1  0x7076e438 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#2  0x7076eb9a in snd_pcm_drop () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#3  0x707707c6 in snd_pcm_close () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#4  0x70782da1 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#5  0x70770795 in snd_pcm_close () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#6  0x70890ca2 in _snd_pcm_a52_open () from
/usr/lib/x86_64-linux-gnu/alsa-lib/libasound_module_pcm_a52.so
#7  0x7076d3c4 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#8  0x7076da58 in ?? () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#9  0x70770437 in snd_pcm_open () from
/usr/lib/x86_64-linux-gnu/libasound.so.2
#10 0x706e19e3 in pa_alsa_open_by_device_string () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#11 0x706e1da2 in pa_alsa_open_by_template () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#12 0x706ebf25 in ?? () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#13 0x706f5c6b in pa_alsa_profile_set_probe () from
/usr/lib/pulse-12.2/modules/libalsa-util.so
#14 0x70898c06 in module_alsa_card_LTX_pa__init () from
/usr/lib/pulse-12.2/modules/module-alsa-card.so
#15 0x77e92366 in pa_module_load () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#16 0x708a0dc4 in ?? () from
/usr/lib/pulse-12.2/modules/module-udev-detect.so
#17 0x708a1e6b in module_udev_detect_LTX_pa__init () from
/usr/lib/pulse-12.2/modules/module-udev-detect.so
#18 0x77e92366 in pa_module_load () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#19 0x77e803fe in ?? () from /usr/lib/x86_64-linux-gnu/pulseaudio/
libpulsecore-12.2.so
#20 0x77e86fee in pa_cli_command_execute_line_stateful () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#21 0x77e877a1 in pa_cli_command_execute_file_stream () from
/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecore-12.2.so
#22 0xb4cc in main ()


Bug#779857: xdebug: New upstream version available (at least 2.3.1)

2015-03-05 Thread Thomas Luzat
Source: xdebug
Severity: wishlist

By now 2.3.1 is out, which features quite a number of fixes and new features.
Please consider updating the package.

Cheers,

Thomas Luzat



-- System Information:
Debian Release: 8.0
  APT prefers experimental
  APT policy: (990, 'experimental'), (990, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.19.0-deepthought (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#755462: Same console_lock problem

2014-07-21 Thread Thomas Luzat
I do get a similar build error on 3.16.0-rc5. The previous module version
built fine on the same kernel. It seems that some post of the console_lock
detection is broken. If not resolved within a few days I will try to look
deeper into the problem.


Bug#743441: mysql-workbench should depend on virtual-mysql-client

2014-04-02 Thread Thomas Luzat
Package: mysql-workbench
Version: 6.0.8+dfsg-2+luzat.1
Severity: normal

Hi,

it seems that mysql-client-5.6 is going to stop providing mysql-client. Also,
the current packages of mariadb-client and mysql-client-5.5 in unstable already
do provide virtual-mysql-client. The dependency on mysql-client | mariadb-
client should probably be adjusted to just virtual-mysql-client.

Cheers,

Thomas Luzat



-- System Information:
Debian Release: jessie/sid
  APT prefers experimental
  APT policy: (990, 'experimental'), (990, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14.0-deepthought (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mysql-workbench depends on:
ii  libatkmm-1.6-12.22.7-2
ii  libc6 2.18-4
ii  libcairo2 1.12.16-2
ii  libctemplate2 2.2-4
ii  libgcc1   1:4.9-20140330-1
ii  libgdk-pixbuf2.0-02.30.6-1
ii  libgl1-mesa-glx [libgl1]  10.1.0-5
ii  libglib2.0-0  2.40.0-1
ii  libglibmm-2.4-1c2a2.36.2-1
ii  libgnome-keyring0 3.8.0-2
ii  libgtk2.0-0   2.24.22-1
ii  libgtkmm-2.4-1c2a 1:2.24.4-1
ii  liblua5.1-0   5.1.5-5
ii  libmysqlclient18  5.5.35+dfsg-2
ii  libmysqlcppconn7  1.1.3-5
ii  libodbc1  2.3.1-1
ii  libpango-1.0-01.36.3-1
ii  libpangocairo-1.0-0   1.36.3-1
ii  libpangomm-1.4-1  2.34.0-1
ii  libpcre3  1:8.31-2
ii  libpcrecpp0   1:8.31-2
ii  libpython2.7  2.7.6-8
ii  libsigc++-2.0-0c2a2.2.11-3
ii  libstdc++64.9-20140330-1
ii  libtinyxml2.6.2   2.6.2-2
ii  libuuid1  2.20.1-5.7
ii  libvsqlitepp3 0.3.12-1
ii  libx11-6  2:1.6.2-1
ii  libxml2   2.9.1+dfsg1-3
ii  libzip2   0.11.2-1
ii  mysql-client-5.6  5.6.16-1~exp1
ii  mysql-workbench-data  6.0.8+dfsg-2+luzat.1
ii  python-mysql.connector1.1.6-1
ii  python-paramiko   1.10.1-1
ii  python-pexpect3.1-1
ii  python-pyodbc 3.0.6-2
ii  python-pysqlite2  2.6.3-3
ii  python2.7 2.7.6-8
pn  python:anynone

Versions of packages mysql-workbench recommends:
ii  mysql-utilities 1.3.5-2
ii  ttf-bitstream-vera  1.10-8

Versions of packages mysql-workbench suggests:
ii  gnome-keyring  3.10.1-1

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#710530: php5-xdebug: Provide 2.2.3+ for PHP 5.5 compatibility

2013-05-31 Thread Thomas Luzat
Package: php5-xdebug
Version: 2.2.1-2
Severity: wishlist

With PHP 5.5 RC2 now in unstable, please provide a compatible version of Xdebug
(2.2.3 should work according to upstream's homepage).

The PHP packages seem to require at least 2.2.2, but 2.2.3 received further PHP
5.5 updates.

Cheers,

Thomas Luzat



-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (980, 'experimental'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.9.2-deepthought (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages php5-xdebug depends on:
ii  libc6   2.17-3
ii  php5-cgi [phpapi-20100525]  5.4.15-1
ii  php5-cli [phpapi-20100525]  5.4.15-1
ii  php5-fpm [phpapi-20100525]  5.4.15-1
ii  ucf 3.0027

php5-xdebug recommends no packages.

php5-xdebug suggests no packages.

-- Configuration Files:
/etc/php5/mods-available/xdebug.ini changed [not included]

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#707960: Bug confirmation

2013-05-13 Thread Thomas Luzat
I can confirm this bug on a Debian sid x86-64 machine trying to mount
a kerberized export:

[ 4872.101092] rpc.gssd[26050]: segfault at 1 ip 7f32992e1e95 sp
7fff6a3b8970 error 4 in libgssglue.so.1.0.0[7f32992de000+9000]
[ 4918.920391] rpc.gssd[26179]: segfault at 1 ip 7f4b9e17ae95 sp
7fffe7684470 error 4 in libgssglue.so.1.0.0[7f4b9e177000+9000]

Reverting to 1.2.6-3 helps. Installing nfs-kernel-server and starting
statd both do not help. The machine (client) is running a custom-built
3.9.1 kernel. I'd be happy to provide additional information on
request.

Cheers,

Thomas Luzat

--
Thomas Luzat  SoftwareentwicklungUSt-IdNr.: DE255529066
Schlagbaumstege 4 Fon: +49 281 3361281-2 Web:   http://luzat.com
46485 Wesel   Fax: +49 281 3361281-3 E-Mail:tho...@luzat.com


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#691148: Subscribing to the wish

2013-01-16 Thread Thomas Luzat
Hello,

I would like to see newer VirtualBox versions in Debian, too. Any fork
appears to be very unrealistic given the resources required and
problems this introduces.

If upstream does not opt for a different solution, which would of
course be great, the VirtualBox package will die, though.
Unfortunately I cannot see decent alternative packages, especially
free ones.

The only realistic alternative is to move to contrib. It does not
really matter to the maintainers which do not want to work on a
contrib package: Either they do not work on an outdated version in
main (because it is going to die) or they do not work or a more
up-to-date contrib package.

Cheers,

Thomas Luzat


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#667470: systemd: breaks sudo

2012-04-04 Thread Thomas Luzat
I can reproduce the issue with exit code 143 on an
unstable/experimental system (x86-64 with custom kernels 3.3 and
3.4-rc1). Interestingly it seems that I was able to run

sudo echo Hello

successfully once, so it does not seem to happen everytime (but that
has really been the only time while testing where it worked). Further
sudo invocations always returned with exit code 143. I might spend
some time debugging that another day. If you need further
system/environment information please contact me.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#490199: Patch from #483882 breaks crypttab parser

2008-07-10 Thread Thomas Luzat

Package: cryptsetup
Version: 2:1.0.6-3
Severity: normal

cryptsetup 2:1.0.6-3 fails to start cryptdisks following a noauto (and 
possibly noearly) crypttab entry after the patch from #483882. The 
problem is that in /lib/cryptsetup/cryptdisks.functions' parse_opts 
IGNORE does not get reset for subsequent runs.


A patch to fix that is attached.

Cheers

Thomas Luzat
--- cryptdisks.functions.orig   2008-07-08 04:15:30.0 +0200
+++ cryptdisks.functions2008-07-10 18:53:26.0 +0200
@@ -27,7 +27,6 @@
;;
 esac
 
-
 # Parses the option field from the crypttab file
 parse_opts () {
local opts opt IFS PARAM VALUE
@@ -45,6 +44,7 @@
USELUKS=
TIMEOUT=
KEYSCRIPT=
+   IGNORE=
 
# Parse the options field, convert to cryptsetup parameters
# and construct the command line


Bug#490110: Confirmed

2008-07-10 Thread Thomas Luzat

If you need someone else with the same problem:

scsi-1ATA_IC35L120AVV207-1_VNVD07G4C8ZBRL
scsi-1ATA_IC35L120AVV207-1_VNVD07G4C8ZBRL-part1
...

for all my SATA and PATA disks here on a 2.6.26-rc8 kernel using libata 
and Debian unstable/experimental packages. My scsi_id.config looks similar.


(A workaround that I've been using to have less of a hassle with 
changing device names is to use LVM on many machines: 
/dev/mapper/foo-bar doesn't change as often.  Unluckily not on this one. 
I'll just have to remember to update my crypttab once udev gets updated...)


Cheers

Thomas Luzat




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#490207: AUTHORS.gz is a broken symlink

2008-07-10 Thread Thomas Luzat

Package: clamav
Version: 0.93.1.dfsg-1+b1
Severity: normal

/usr/share/doc/clamav/AUTHORS.gz points to ../libclamav4/AUTHORS.gz, 
which does not exist. There should probably be a symlink from AUTHORS to 
../libclamav4/AUTHORS.


Cheers

Thomas Luzat



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#465902: [pkg-cryptsetup-devel] Bug#465902: Works for me!

2008-07-09 Thread Thomas Luzat

David Härdeman wrote:

On Wed, July 9, 2008 07:28, Thomas Luzat wrote:

I just wanted to tell you that the patches (cryptsetup, initramfs-tools,
dropbear) work for me. It would be nice to see the dropbear patch
applied to the next version and an extended CryptoRoot.HowTo in
cryptsetup once the dropbear patches are in.


For the cryptsetup part it's not a question whether the patches work or
not, because the approach they use should not be necessary anymore.


Right. What I meant was the askpass binary here, which works for me to 
unlock my root after having locked in through dropbear. Given that you 
can now unlock your root by using


cat  /lib/cryptsetup/passfifo

or

echo -n ...  /lib/cryptsetup/passfifo

without having to kill any processes it looks to me as if #465902 can be 
closed, which is my main point relating to this bug report besides 
giving feedback on that askpass works, given that there were no further 
mails in the BTS after your request for testing cryptsetup.


The only reason that I can see not to close the bug report would be if 
you wanted to replace that cat/echo by some script within the 
cryptsetup package. Of course one might argue if such a script 1) is 
necessary and 2) whether it should belong to cryptsetup or dropbear. I 
would tend to say cryptsetup here, because without cryptsetup it 
wouldn't make any sense.



The question is rather if the dropbear initramfs script can be adapted to
use the askpass functionality that we've added to cryptsetup in order to
support this functionality. No changes should be necessary to cryptsetup
anymore.


Right, cryptsetup is ok. dropbear doesn't strictly need adaptation for 
askpass as shown above, even though that might be convenient. It only 
really needs the last patch attached to #465903 to make it into the 
initramfs at all.



Thomas, you need to check with Chris on the status of updated patches.


As far as I can tell there are no open issues with the one for dropbear 
(which is the only one missing), but I might try to get some info from 
Chris and especially Gerrit Pape (dropbear maintainer) why there is no 
progress.


Cheers

Thomas Luzat



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#465902: Works for me!

2008-07-08 Thread Thomas Luzat

Hi,

I just wanted to tell you that the patches (cryptsetup, initramfs-tools, 
dropbear) work for me. It would be nice to see the dropbear patch 
applied to the next version and an extended CryptoRoot.HowTo in 
cryptsetup once the dropbear patches are in.


Apart from that, thanks already!

Cheers

Thomas Luzat



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#436265: Use-Last-Folder Mode is always enabled?

2007-08-06 Thread Thomas Luzat
Package: kget
Version: 3.5.7-3
Severity: normal

I am using kget on Debian unstable/experimental on KDE. Whenever I use it 
through its konqueror integration or the Drop Target as a download manager 
it starts downloading to the last folder used. From what I understand it 
should ask for the folder to save to if Use-Last-Folder Mode is disabled 
and no default folders are specified for this file extension. I can remember 
that the behaviour was once different, but has been broken for a number of 
versions here.

I've attached my ~/.kde/share/config/kgetrc.

Cheers,

Thomas Luzat
[Advanced]
AddQueued=true
AdvancedIndividual=false
ExpertMode=true
FirstRun=false
GetSizes=true
IconifyIndividual=false
KonquerorIntegration=true
RemoveOnSuccess=true
ShowIndividual=false
ShowMain=false

[Automation]
AutoDisconnect=false
AutoPaste=false
AutoSave=true
AutoSaveInterval=10
AutoShutdown=false
DisconnectCommand=kppp -k
DisconnectTimeHour=0
DisconnectTimeMinute=0
TimedDisconnect=false

[Connection]
ConnectionType=0
LinkNumber=0
OfflineMode=false
ReconnectOnBroken=true
ReconnectOnError=true
ReconnectRetries=10
ReconnectTime=1
TimeoutData=5
TimeoutDataNoResume=15

[Directories]
Items=
LastDirectory=$HOME
UseLastDirectory=false

[DropGeometry]
Position=200,200
State=96

[KFileDialog Settings]
Recent Files=$HOME/JBossTools-200708040214-nightly-ALL-win32.zip

[Limits]
MaxSimConnections=5
MaximumBandwidth=1
MinimumBandwidth=1000

[MainGeometry]
Position=400,360
Size=650,241
State=0

[Misc]
Font=Sans Serif,10,-1,5,50,0,0,0,0,0

[Search]
SearchFastest=false
SearchItems=20
SwitchHosts=false
TimeoutSearch=30

[System]
UseAnimation=false


Bug#432489: Downgrading helps

2007-07-10 Thread Thomas Luzat
I encounter exactly the same problem on my unstable/experimental machine
with 2.6.22-rc7-git3 and 2.6.22 (only ones tested). Downgrading all
gcc-4.2 packages to 4.2-20070627-1 helps, so it seems to have been
introduced in between 4.2-20070627-1 and 4.2-20070707-1.

Cheers,

Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#418644: Installs locale dolphin

2007-04-10 Thread Thomas Luzat
Package: dolphin
Version: 0.8.2-1
Severity: minor
Tags: l10n

Installing dolphin creates a new locale dolphin in /usr/share/locale/dolphin 
about which localepurge informs me. That locale doesn't make any sense to me 
(but I'm only guessing that this is a bug in the packaging).

-- System Information:
Debian Release: lenny/sid
  APT prefers experimental
  APT policy: (990, 'experimental'), (990, 'unstable'), (500, 'testing'), 
(500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.21-rc1-deepthought (PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages dolphin depends on:
ii  kdelibs4c2a  4:3.5.6.r1.dfsg.1-2 core libraries and binaries for 
al
ii  libacl1  2.2.42-1Access control list shared 
library
ii  libart-2.0-2 2.3.19-2Library of functions for 2D 
graphi
ii  libattr1 1:2.4.32-1.1Extended attribute shared library
ii  libaudio21.8-4   The Network Audio System (NAS). 
(s
ii  libc62.5-0exp6   GNU C Library: Shared libraries
ii  libfam0  2.7.0-12Client library to control the FAM
ii  libfontconfig1   2.4.2-1.2   generic font configuration 
library
ii  libfreetype6 2.2.1-5 FreeType 2 font engine, shared 
lib
ii  libgcc1  1:4.2-20070405-1GCC support library
ii  libice6  1:1.0.3-1   X11 Inter-Client Exchange library
ii  libidn11 0.6.5-1 GNU libidn library, 
implementation
ii  libjpeg626b-13   The Independent JPEG Group's JPEG
ii  libpng12-0   1.2.15~beta5-1  PNG library - runtime
ii  libqt3-mt3:3.3.7-4   Qt GUI Library (Threaded runtime 
v
ii  libsm6   1:1.0.2-1   X11 Session Management library
ii  libstdc++6   4.2-20070405-1  The GNU Standard C++ Library v3
ii  libx11-6 2:1.1.1-1   X11 client-side library
ii  libxcursor1  1:1.1.8-1   X cursor management library
ii  libxext6 1:1.0.3-1   X11 miscellaneous extension 
librar
ii  libxft2  2.1.12-1FreeType-based font drawing 
librar
ii  libxi6   2:1.1.0-2   X11 Input extension library
ii  libxinerama1 1:1.0.1-4.1 X11 Xinerama extension library
ii  libxrandr2   2:1.2.0-4   X11 RandR extension library
ii  libxrender1  1:0.9.1-3   X Rendering Extension client 
libra
ii  libxt6   1:1.0.5-1   X11 toolkit intrinsics library
ii  zlib1g   1:1.2.3-13  compression library - runtime

Versions of packages dolphin recommends:
ii  amarok  1.4.5-3  versatile and easy to use audio 
pl
ii  ark 4:3.5.6-1graphical archiving tool for KDE
ii  digikam 2:0.9.1-2digital photo management 
applicati
ii  imagemagick 7:6.2.4.5.dfsg1-0.14 Image manipulation programs
ii  k3b 0.12.17-9A sophisticated KDE CD burning 
app
ii  kmail   4:3.5.6.dfsg.1-1 KDE Email client

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#366668: KArm's Start New Session and Reset All Times don't work from within Kontact

2006-05-10 Thread Thomas Luzat
Package: kontact
Version: 4:3.5.2-1+b2

When I use KArm (4:3.5.2-1+b2) from within Kontact File-Start New Session and 
File-Reset All Times don't show any effect. Both work fine in stand-alone 
KArm (session/all times are reset).

Cheers,
Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#364533: postfix-policyd-cleanup doesn't call cleanup correctly

2006-04-23 Thread Thomas Luzat
Package: postfix-policyd
Version: 1.73-1
Tags: patch

The cronjob for cleanup:

[ -x /usr/sbin/postfix-policyd-cleanup ]  /usr/sbin/postfix-policyd-cleanup

is having cron mail me the following errors on my system:

policyd v1.73
usage: /usr/lib/postfix-policyd/cleanup -c /path/to/policyd.conf

It seems that I could specify DAEMON_OPTS=-c /etc/postfix-policyd.conf 
in /etc/default/postfix-policyd, which doesn't seem to be documented. Given 
that DAEMON_CONFIG already specifies the location of the configuration I 
changed postfix-policyd-cleanup to pass -c $DAEMON_CONFIG to cleanup, which 
works fine. Please consider applying my attached patch!

Cheers,
Thomas Luzat
--- postfix-policyd-cleanup~	2006-03-20 11:55:51.0 +0100
+++ postfix-policyd-cleanup	2006-04-24 04:08:31.245102250 +0200
@@ -1,8 +1,13 @@
 #!/bin/sh
 
+# Default config location
+DAEMON_CONFIG=/etc/postfix-policyd.conf
+
 # Include policyd defaults if available
 if [ -f /etc/default/postfix-policyd ] ; then
 	. /etc/default/postfix-policyd
 fi
 
-/usr/lib/postfix-policyd/cleanup $DAEMON_OPTS
+if [ -f $DAEMON_CONFIG ] ; then
+	/usr/lib/postfix-policyd/cleanup -c $DAEMON_CONFIG
+fi


Bug#363332: Should not depend on xlibs

2006-04-18 Thread Thomas Luzat
Package: libxmms-perl
Version: 0.12-5

libxmms-perl depends on xlibs which has become replaced by xkb-data in testing 
and unstable on which it should probably depend instead.

Cheers,
Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#360627: Use new upstream source

2006-04-03 Thread Thomas Luzat
Package: dircproxy
Version: 1.0.5-4

Hi!

While googling I found:

http://dircproxy.securiweb.net

They seem to have taken over dircproxy code and are developing it (slowly). 
It'd be nice to see their sources used instead of the old upstream sources.

Cheers,
Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#358917: Patch for rootflags support

2006-04-01 Thread Thomas Luzat
Hi!

I stumbled across the same problem, but consider the problem way more grave 
than just wishlist. I am using an XFS root with quotas enabled, but XFS 
doesn't support a remount to enable quotas and thus the /-remount with 
usrquota,grpquota fails. This leaves / mounted read-only which breaks lots of 
stuff and didn't even allow me to log in.

Attached is a small patch against 0.59b, very similar to the one proposed in 
#358649 for the NFS root mount options. Please apply!

Cheers,
Thomas Luzat
diff -Naur initramfs-tools-0.59b.orig/init initramfs-tools-0.59b/init
--- initramfs-tools-0.59b.orig/init	2006-03-26 11:52:26.0 +0200
+++ initramfs-tools-0.59b/init	2006-04-01 19:54:23.695540177 +0200
@@ -55,6 +55,9 @@
 			;;
 		esac
 		;;
+	rootflags=*)
+		ROOTFLAGS=-o ${x#rootflags=}
+		;;
 	nfsroot=*)
 		NFSROOT=${x#nfsroot=}
 		;;
diff -Naur initramfs-tools-0.59b.orig/scripts/local initramfs-tools-0.59b/scripts/local
--- initramfs-tools-0.59b.orig/scripts/local	2006-03-26 21:46:26.0 +0200
+++ initramfs-tools-0.59b/scripts/local	2006-04-01 19:53:16.376392069 +0200
@@ -53,7 +53,7 @@
 
 	# FIXME This has no error checking
 	# Mount root
-	mount ${roflag} -t ${FSTYPE} ${ROOT} ${rootmnt}
+	mount ${roflag} -t ${FSTYPE} ${ROOTFLAGS} ${ROOT} ${rootmnt}
 
 	[ $quiet != y ]  log_begin_msg Running /scripts/log-bottom
 	run_scripts /scripts/local-bottom


Bug#254612: ACL patch

2006-03-28 Thread Thomas Luzat
Hi!

While the code for ACLs hasn't been integrated into rsync yet there is a patch 
available with the source in patches/acls.diff. Would it be possible to apply 
that one against the Debian packages and possibly mark it as an experimental 
feature in the documentation?

Cheers,
Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#359004: Broken links in /usr/lib/php5/build

2006-03-25 Thread Thomas Luzat
Package: php5-dev
Version: 5.1.2-1+b1

On my system /usr/lib/php5/build contains these two broken links:

libtool.m4 - ../../../share/libtool/libtool.m4
ltmain.sh - ../../../share/libtool/ltmain.sh

This makes phpize (phpize5) fail:

[EMAIL PROTECTED]:~/tmp/eaccelerator-0.9.5-beta1$ /usr/bin/phpize5
Configuring for:
PHP Api Version: 20041225
Zend Module Api No:  20050922
Zend Extension Api No:   220051025
cp: cannot stat `libtool.m4': No such file or directory
cp: cannot stat `ltmain.sh': No such file or directory
cat: ./build/libtool.m4: No such file or directory
configure.in:8: warning: LT_AC_PROG_SED is m4_require'd but is not m4_defun'd
configure.in:8: LT_AC_PROG_SED is required by...
aclocal.m4:2504: PHP_CONFIG_NICE is expanded from...
configure.in:8: the top level
configure.in:77: error: possibly undefined macro: AC_PROG_LIBTOOL
  If this token and others are legitimate, please use m4_pattern_allow.
  See the Autoconf documentation.
configure:1350: error: possibly undefined macro: LT_AC_PROG_SED

I suppose the links should look like:

libtool.m4 - ../../../share/aclocal/libtool.m4
ltmain.sh - ../../../share/libtool/config/ltmain.sh

The build still doesn't work here, but it fixes the errors that are 
encountered first:

[EMAIL PROTECTED]:~/tmp/eaccelerator-0.9.5-beta1$ /usr/bin/phpize5
Configuring for:
PHP Api Version: 20041225
Zend Module Api No:  20050922
Zend Extension Api No:   220051025
configure.in:8: warning: LT_AC_PROG_SED is m4_require'd but is not m4_defun'd
configure.in:8: LT_AC_PROG_SED is required by...
aclocal.m4:2504: PHP_CONFIG_NICE is expanded from...
configure.in:8: the top level
[...]

But I suppose that's another bug either in the Debian -dev-toolchain or 
eAccelerator that I'll try to further investigate on.

Cheers,
Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#359004: php4-dev

2006-03-25 Thread Thomas Luzat
I haven't checked if the same problem applies to php4-dev, too. Might be worth 
looking at.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#358250: kile should suggest, recommend or even depend kdvi

2006-03-21 Thread Thomas Luzat
Package: kile
Version: 1:1.8.1-3.2

Not having kdvi installed made Kile's System Check (menu: Settings-System 
Check) fail and the default Quick Build configuration (Alt+1) doesn't work 
either in that case. I suggest at least, well, suggesting kdvi but more 
likely even recommending it.

Thanks!

Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#358251: Help-TeTeX Documentation-teTeX Guide fails

2006-03-21 Thread Thomas Luzat
Package: kile
Version: 1:1.8.1-3.2

Help-TeTeX Documentation-teTeX Guide fails with the output of:

[ViewHTML] Sorry, could not find the teTeX documentation 
at /usr/share/texmf/doc/newhelpindex.html; set the correct path in 
Settings-Configure Kile-Help.

... in the log  messages window. newhelpindex.html was only available up to 
sarge as far as I can tell from packages.debian.org. I'm not sure where it's 
supposed to link to now, possibly just index.html?

Thanks!

Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#354910: crypttab.5 refers to /usr/share/cryptsetup instead of /lib/cryptsetup

2006-03-01 Thread Thomas Luzat
Package: cryptsetup
Version: 2:1.0.2+1.0.3-rc2-1

The man page for crypttab(5) refers to /usr/share/cryptsetup/checks in
the description for the precheck and check options instead
of /lib/cryptsetup/checks.

Cheers,
Thomas Luzat



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#352032: Build with krb5_ccname support

2006-02-09 Thread Thomas Luzat
Package: libnss-ldap
Version: 238-1.1
Severity: wishlist
Tags: patch

To be able to use krb5_ccname in /etc/libnss-ldap.conf I'd like to see a
libnss-ldap built with --enable-configurable-krb5-ccname-gssapi. A patch
to enable it and add an unversioned build-dependency on libkrb5-dev is
attached. The resulting package works fine here.

Thanks!

Thomas Luzat

diff -Naur libnss-ldap-238.orig/debian/control libnss-ldap-238/debian/control
--- libnss-ldap-238.orig/debian/control	2006-02-09 10:16:12.373716000 +0100
+++ libnss-ldap-238/debian/control	2006-02-09 10:19:27.304493686 +0100
@@ -3,7 +3,7 @@
 Priority: extra
 Maintainer: Stephen Frost [EMAIL PROTECTED]
 Standards-Version: 3.5.9.0
-Build-Depends: cdbs, debhelper (= 4.1.13), libldap2-dev, libsasl2-dev, autoconf, automake1.6, libdb4.2-dev, po-debconf (= 0.5.0)
+Build-Depends: cdbs, debhelper (= 4.1.13), libkrb5-dev, libldap2-dev, libsasl2-dev, autoconf, automake1.6, libdb4.2-dev, po-debconf (= 0.5.0)
 
 Package: libnss-ldap
 Architecture: any
diff -Naur libnss-ldap-238.orig/debian/rules libnss-ldap-238/debian/rules
--- libnss-ldap-238.orig/debian/rules	2006-02-09 10:16:12.357716000 +0100
+++ libnss-ldap-238/debian/rules	2006-02-09 10:18:57.328681660 +0100
@@ -5,6 +5,6 @@
 include /usr/share/cdbs/1/rules/debhelper.mk
 include /usr/share/cdbs/1/class/autotools.mk
 
-DEB_CONFIGURE_EXTRA_FLAGS += --enable-rfc2307bis --with-ldap-lib=openldap --with-ldap-conf-file=/etc/libnss-ldap.conf --enable-schema-mapping --enable-paged-results
+DEB_CONFIGURE_EXTRA_FLAGS += --enable-rfc2307bis --with-ldap-lib=openldap --with-ldap-conf-file=/etc/libnss-ldap.conf --enable-schema-mapping --enable-paged-results --enable-configurable-krb5-ccname-gssapi
 DEB_DESTDIR = $(CURDIR)/debian/tmp
 DEB_OPT_FLAG += -fPIC


Bug#352040: Build with GSSAPI/Kerberos 5 support

2006-02-09 Thread Thomas Luzat
Package: ipsec-tools
Version: 0.6.5-1
Severity: wishlist
Tags: patch

Please enable support for GSSAPI/Kerberos 5 in racoon. A small patch to
add --enable-gssapi and an unversionend build-dependency (is a versioned
build dep needed?) is attached.

Thanks!

Thomas Luzat

diff -Naur ipsec-tools-0.6.5.orig/debian/control ipsec-tools-0.6.5/debian/control
--- ipsec-tools-0.6.5.orig/debian/control	2006-02-09 10:47:47.369645000 +0100
+++ ipsec-tools-0.6.5/debian/control	2006-02-09 10:48:49.589255143 +0100
@@ -2,7 +2,7 @@
 Section: net
 Priority: extra
 Maintainer: Ganesan Rajagopal [EMAIL PROTECTED]
-Build-Depends: debhelper (= 4.0.0), flex, bison, libssl-dev (= 0.9.6), libreadline5-dev
+Build-Depends: debhelper (= 4.0.0), flex, bison, libkrb5-dev, libssl-dev (= 0.9.6), libreadline5-dev
 Build-Conflicts: bison++
 Standards-Version: 3.6.2
 
diff -Naur ipsec-tools-0.6.5.orig/debian/rules ipsec-tools-0.6.5/debian/rules
--- ipsec-tools-0.6.5.orig/debian/rules	2006-02-09 10:47:47.369645000 +0100
+++ ipsec-tools-0.6.5/debian/rules	2006-02-09 10:48:23.873416343 +0100
@@ -33,7 +33,7 @@
 config.status: configure
 	dh_testdir
 	# Add here commands to configure the package.
-	CFLAGS=$(CFLAGS) ./configure --verbose --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --sysconfdir=/etc/racoon --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info --localstatedir=/var/run --enable-shared --disable-static --enable-frag --enable-hybrid --enable-xauth --enable-dpd --enable-adminport --enable-natt --with-kernel-headers=/usr/include --without-readline
+	CFLAGS=$(CFLAGS) ./configure --verbose --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --sysconfdir=/etc/racoon --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info --localstatedir=/var/run --enable-shared --disable-static --enable-frag --enable-gssapi --enable-hybrid --enable-xauth --enable-dpd --enable-adminport --enable-natt --with-kernel-headers=/usr/include --without-readline
 
 #Architecture 
 build: build-arch build-indep


Bug#350151: unsupported SASL server implementation: cyrus

2006-01-27 Thread Thomas Luzat
Package: postfix
Version: 2.3-20060123-0
Tags: experimental, patch

The postfix 2.3-20060123-0 package produces the following error messages:

postfix/smtpd[31682]: warning: unsupported SASL server implementation: cyrus
postfix/smtpd[31682]: fatal: SASL per-process initialization failed

It needs to be built with -DUSE_CYRUS_SASL in recent snapshots (see 
RELEASE-NOTES) to be built with Cyrus SASL support. Patch is attached.

There might be other reasonable options, like enabling more SASL 
implementations, but this one at least makes it compatible to older versions.

Cheers and thanks for the packages,

Thomas Luzat
diff -Naur postfix-2.3-20060123.orig/debian/rules postfix-2.3-20060123/debian/rules
--- postfix-2.3-20060123.orig/debian/rules	2006-01-27 18:49:23.380928000 +0100
+++ postfix-2.3-20060123/debian/rules	2006-01-27 18:43:17.232492024 +0100
@@ -48,6 +48,7 @@
 	-DHAS_PGSQL -I`pg_config --includedir` \
 	-DHAS_SSL -I/usr/include/openssl \
 	-DUSE_SASL_AUTH -I/usr/include/sasl \
+	-DUSE_CYRUS_SASL \
 	-DUSE_TLS
 
 AUXLIBS =-lssl -lcrypto -lsasl2


Bug#350158: /usr/lib/postfix/lmtp and nqmgr is missing

2006-01-27 Thread Thomas Luzat
Package: postfix
Version: 2.3-20060123-0
Tags: experimental

(At least) on my Debian unstable/experimental the postfix package doesn't seem 
to create the hard links for /usr/lib/postfix/lmtp - smtp 
and /usr/lib/postfix/nqmgr - qmgr (with the latter being unnecessary anyway 
from what I know) anymore even though they are mentioned 
in /etc/postfix/postfix-files:

$daemon_directory/nqmgr:h:$daemon_directory/qmgr
$daemon_directory/lmtp:h:$daemon_directory/smtp

I've very recently upgraded from Postfix in unstable, but can't really trace 
back when. Postfix again fully works after enabling Cyrus SASL and creating 
the lmtp link by myself.

I haven't had more time to check the issue yet, but I HTH already.

Cheers,

Thomas Luzat


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#336980: Completely broken file locations

2005-11-01 Thread Thomas Luzat
Package: tspc
Version: 2.1.1-5

While 2.1.1-4.1 seems to place files in the correct locations 2.1.1-5
puts miscellaneous files in weird places:

/bin/tspc*
/GPL_LICENSE.txt
/man/*
/template/*

Please fix that. Thanks! :-)

Thomas Luzat




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#336744: /usr/share/doc/kernel-package seems to contain broken symlinks

2005-11-01 Thread Thomas Luzat
Package: kernel-package
Version: 10.002
Tags: experimental
Severity: minor

/usr/share/doc/kernel-package contains the following broken symlinks:

README.doc - ../../kernel-package/docs/README.doc
README.headers - ../../kernel-package/docs/README.headers
README.image - ../../kernel-package/docs/README.image
README.source - ../../kernel-package/docs/README.source

They were working in 9.008-4 (where they resided
in /usr/share/kernel-package), but the targets don't seem to exist
in /usr/share/kernel-package{,/docs} anymore. Please fix.

There seems to exist additional documentation
in /usr/share/kernel-package/docs, too (like README.grub) which could be
linkes to /usr/share/doc/kernel-package.

Thanks!

Thomas Luzat

P.S.: Given that this looks very much like work-in-progress, should I
refrain from reporting such bugs against experimental packages?




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#336724: kernel-package creates packages depending on linux-initramfs-tools, should use linux-initramfs-tool

2005-10-31 Thread Thomas Luzat
Package: kernel-package
Version: 10.002
Tags: experimental, patch

Building 2.6.14 with some custom patches on my unstable/experimental
machine results in a package with the following Depends line:

Depends: yaird (= 0.0.11-8) | linux-initramfs-tools, coreutils |
fileutils (= 4.0)

I'd like to use initramfs-tools 0.37 from unstable which uses the
following Provides line:

Provides: linux-initramfs-tool

Note the missing trailing s. I'm not sure if kernel-package or
initramfs-tools is wrong here. If kernel-package is wrong I've attached
a patch against it. Otherwise please forward the bug to initramfs-tools.

Thanks!

Thomas Luzat

diff -urN kernel-package-10.002.orig/kernel/ruleset/local-vars.mk kernel-package-10.002/kernel/ruleset/local-vars.mk
--- kernel-package-10.002.orig/kernel/ruleset/local-vars.mk	2005-11-01 06:57:19.928426000 +0100
+++ kernel-package-10.002/kernel/ruleset/local-vars.mk	2005-11-01 06:57:58.752082477 +0100
@@ -729,10 +729,10 @@
   endif
   # By this time initrddep is not empty, so we can dispense with the emptiness test
   ifneq (,$(findstring yaird,$(initrdcmd)))
-initrddep := $(initrddep) | linux-initramfs-tools
+initrddep := $(initrddep) | linux-initramfs-tool
   else
 ifneq (,$(findstring mkinitramfs,$(initrdcmd)))
-  initrddep := $(initrddep) | linux-initramfs-tools
+  initrddep := $(initrddep) | linux-initramfs-tool
 endif
   endif
   initrddep := $(initrddep), # There is a blank here


Bug#336734: debhelper compatability version =3 should be used

2005-10-31 Thread Thomas Luzat
Package: nvidia-kernel-source
Version: 1.0.7676-1
Tags: experimental
Severity: minor

When building nvidia-kernel-source packages with make-kpkg I notice the
following:

[...]
dh_testdir
dh_testroot
dh_installdocs
dh_installdocs: Compatibility levels before 3 are deprecated.
dh_installinit
dh_installinit: Compatibility levels before 3 are deprecated.
dh_installchangelogs
dh_installchangelogs: Compatibility levels before 3 are deprecated.
dh_link
dh_link: Compatibility levels before 3 are deprecated.
dh_strip
dh_strip: Compatibility levels before 3 are deprecated.
dh_compress
dh_compress: Compatibility levels before 3 are deprecated.
dh_fixperms
dh_fixperms: Compatibility levels before 3 are deprecated.
dh_installdeb
dh_installdeb: Compatibility levels before 3 are deprecated.
dh_gencontrol -- -v1.0.7676-1+1.0
dh_gencontrol: Compatibility levels before 3 are deprecated.
dh_md5sums
dh_md5sums: Compatibility levels before 3 are deprecated.
dh_builddeb
--destdir=/home/tom/admin/kernel/linux-2.6.14-tom1-mojo-jojo/..
dh_builddeb: Compatibility levels before 3 are deprecated.
[...]

While the build works fine, please bump up the compatability level to
avoid the warnings and future problems.

Thanks!

Thomas Luzat




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#336738: Broken symlink /usr/share/doc/kde/HTML/en/kaffeine/common

2005-10-31 Thread Thomas Luzat
Package: kaffeine
Version: 0.7.1-1.2
Severity: minor

The symlink /usr/share/doc/kde/HTML/en/kaffeine/common points to:

../../../kde/HTML/en/common

but should point to:

../../../../kde/HTML/en/common

or like in most - if not all - other KDE packages just to:

../common

Thanks!

Thomas Luzat




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#336740: /usr/share/doc/enigma/enigma-data is broken and useless (?) symlink

2005-10-31 Thread Thomas Luzat
Package: enigma
Version: 0.92.1-1
Severity: minor

/usr/share/doc/enigma/enigma-data points to enigma-data, which seems to
be a useless recursive link. I'd suggest removal.

Thanks!

Thomas Luzat




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#307587: make-kpkg fails on kernel 2.6.12-rc3

2005-05-03 Thread Thomas Luzat
Package: kernel-package
Version: 8.134

make-kpkg fails on my unstable/experimental system when trying to
compile a vanilla 2.6.12-rc3 on x86:

[EMAIL PROTECTED]:~/admin/kernel/mojo-jojo/linux-2.6.12-rc3$ make-kpkg
--initrd --rootcmd fakeroot --us --uc kernel-image
Warning: You are using the initrd option, that may not
work, depending on your kernel version and architecture,
unless you have applied the initrd cramfs patch to
the kernel, or modified mkinitrd not to use cramfs by
default. The  cramfs initrd patch, is included in the
Debian supplied kernel sources. New kernels on most
architectures do work fine.
By default, I assume you know what you are doing, and I
apologize for being so annoying. Should I abort[Ny]?

/usr/share/kernel-package/rules:1623: *** Error. I do not know where the
kernel image goes to [kimagedest undefined] The usual case for this is
that I could not determine which arch or subarch tihs machine belongs
to. Please specify a subarch, and try again..  Stop.


The same worked fine up to 2.6.12-rc2 here. Do you need any further
information?

(Also note the small typo: subarch tihs vs. subarch this in the
error message)




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#290874: Patches for NFSv4 support

2005-01-17 Thread Thomas Luzat
Package: acl
Version: 2.2.26-1
Severity: wishlist

nfs-utils 1.0.7-1 supports NFSv4 now. To make the support more useful
please consider applying the acl patch(es) from

http://www.citi.umich.edu/projects/nfsv4/linux/

Thanks!



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]