Bug#841372: Kerberos config update for CS.CMU.EDU

2016-10-26 Thread Sam Hartman 
Jeff, I've just uploaded kerberos configs 2.6.
If you  delete /etc/krb5.conf and then install krb5-config 2.6 and
confirm that the entry there works for you, I'll fill out paperwork to
request an unblock for stretch.
(I don't think this will make it for the auto migration)

Bug#841372: Kerberos config update for CS.CMU.EDU

2016-10-26 Thread Sam Hartman 
control: severity -1 important
justification: As maintainer, I'd like to consider this issue
important.  If not promptly resolved, it will create an operational
inconvenience on an ongoing basis for years.

--Sam

Bug#841372: Kerberos config update for CS.CMU.EDU

2016-10-19 Thread Jeffrey Hutzelman 
On October 19, 2016 10:40:59 PM EDT, Sam Hartman  wrote:
>Your timing is dreadful.:-)

Yes.  Then again, I should have done this years ago.


>I just uploaded a new krb5-config and am not 100% sure I'll have time
>to
>get in another one for stretch before the freeze.
>I considered dropping the kdc lines and depending on SRV records for
>cs.cmu.edu, but decided that you were picky enough that you would have
>sent in an update request if you wanted one:-(

That would work, too.  The SRV records aren't going anywhere.


>I'll see what I can do.
>
>I need to wait for 2.5 to get into testing before uploading a 2.6
>because 2.5 is really needed.

Understood.  If it doesn't get done before the freeze, we'll live.  probably.  
:-)

-- Jeff

Bug#841372: Kerberos config update for CS.CMU.EDU

2016-10-19 Thread Sam Hartman 
Your timing is dreadful.:-)
I just uploaded a new krb5-config and am not 100% sure I'll have time to
get in another one for stretch before the freeze.
I considered dropping the kdc lines and depending on SRV records for
cs.cmu.edu, but decided that you were picky enough that you would have
sent in an update request if you wanted one:-(

I'll see what I can do.

I need to wait for 2.5 to get into testing before uploading a 2.6
because 2.5 is really needed.

Bug#841372: Kerberos config update for CS.CMU.EDU

2016-10-19 Thread Jeffrey Hutzelman 
Package: kerberos-configs
Version: 2.3
Severity: wishlist

The CS.CMU.EDU realm stanza included in krb5-config is a bit out of
date, and actually has been for some time.  We're trying to stamp out
client configuration that uses kerberos.cs.cmu.edu other than for admin
services, and it would help to get the following update applied:

OLD:
        CS.CMU.EDU = {
kdc = kerberos.cs.cmu.edu
kdc = kerberos-2.srv.cs.cmu.edu
admin_server = kerberos.cs.cmu.edu
}


NEW:
        CS.CMU.EDU = {
kdc = kerberos-1.srv.cs.cmu.edu
kdc = kerberos-2.srv.cs.cmu.edu
kdc = kerberos-3.srv.cs.cmu.edu
admin_server = kerberos.cs.cmu.edu
}

Thanks...

-- Jeff