Bug#877002: nslcd installation broken: missing ca-certificates.crt

2019-01-19 Thread Arthur de Jong 
On Wed, 2019-01-16 at 15:43 -0800, Sunil Mohan Adapa wrote:
> It would be nice to have fix for this in time for buster. Please
> consider uploading the proposed fix.

I've comitted a fix and will upload soon. Thanks for the patch and
chasing me (I've been quite busy recently).

Thanks,

-- 
-- arthur - adej...@debian.org - https://people.debian.org/~adejong --



signature.asc
Description: This is a digitally signed message part

Bug#877002: nslcd installation broken: missing ca-certificates.crt

2019-01-16 Thread Sunil Mohan Adapa 
On Tue, 8 Jan 2019 17:08:16 -0800 Sunil Mohan Adapa 
wrote:
> severity 877002 important
> tags 877002 + patch
> thanks
> 
> This bug is causing issues with autopkgtests for FreedomBox package.
> Bumping severity as simple install on a minimal machine fails.
> 
> On Wed, 27 Sep 2017 17:32:22 +0200 (CEST) Robert Wolf wrote:
> [...]
> > 
> > 
> > Either must nslcd depends on ca-certificates or nslcd.conf should not 
> > contain 
> > configuration:
> 
> It seems reasonable to add ca-certificates as dependency as the initial
> configuration for nslcd uses the certificates from the package.
> 
> The attached patch adds ca-certificates as dependency. I have tested
> that bug is indeed resolved after building nslcd package with change in
> dependency.
> 
> Please consider uploading a fix for the issue.
> 

It would be nice to have fix for this in time for buster. Please
consider uploading the proposed fix.

Thanks,

-- 
Sunil

Bug#877002: nslcd installation broken: missing ca-certificates.crt

2019-01-08 Thread Sunil Mohan Adapa 
severity 877002 important
tags 877002 + patch
thanks

This bug is causing issues with autopkgtests for FreedomBox package.
Bumping severity as simple install on a minimal machine fails.

On Wed, 27 Sep 2017 17:32:22 +0200 (CEST) Robert Wolf wrote:
[...]
> 
> 
> Either must nslcd depends on ca-certificates or nslcd.conf should not contain 
> configuration:

It seems reasonable to add ca-certificates as dependency as the initial
configuration for nslcd uses the certificates from the package.

The attached patch adds ca-certificates as dependency. I have tested
that bug is indeed resolved after building nslcd package with change in
dependency.

Please consider uploading a fix for the issue.

Thanks,

-- 
Sunil
From e813e8c1a9c5e1653b7dc88eaf59f2e6b0c2e8c6 Mon Sep 17 00:00:00 2001
From: Sunil Mohan Adapa 
Date: Tue, 8 Jan 2019 16:45:47 -0800
Subject: [PATCH] Change ca-certificates as dependency

Change ca-certificates as dependency instead of recommends since initial
configuration uses certificates.

Closes #877002.

Signed-off-by: Sunil Mohan Adapa 
---
 debian/changelog | 5 +
 debian/control   | 5 +++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 7d551c7..94025e7 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,7 +1,12 @@
 nss-pam-ldapd (0.9.10-2) UNRELEASED; urgency=medium
 
+  [ Arthur de Jong ]
   * Fix crash in chsh.ldap (closes: 908319)
 
+  [ Sunil Mohan Adapa ]
+  * Change ca-certificates as dependency instead of recommends since
+initial configuration uses certificates (closes: #877002).
+
  -- Arthur de Jong   Sat, 08 Sep 2018 17:43:56 +0200
 
 nss-pam-ldapd (0.9.10-1) unstable; urgency=medium
diff --git a/debian/control b/debian/control
index 76734d7..3abef55 100644
--- a/debian/control
+++ b/debian/control
@@ -16,8 +16,9 @@ Architecture: any
 Multi-Arch: foreign
 Provides: nslcd-2
 Pre-Depends: ${misc:Pre-Depends}, debconf (>= 0.5) | debconf-2.0
-Depends: ${misc:Depends}, ${shlibs:Depends}, adduser, lsb-base (>= 3.0-6)
-Recommends: nscd, ca-certificates,
+Depends: ${misc:Depends}, ${shlibs:Depends}, adduser, lsb-base (>= 3.0-6),
+ ca-certificates
+Recommends: nscd,
 libnss-ldapd | libnss-ldap,
 libpam-ldapd | libpam-ldap | libpam-krb5 | libpam-heimdal | libpam-sss,
 nslcd-utils, ldap-utils, bind9-host | host
-- 
2.20.1



signature.asc
Description: OpenPGP digital signature

Bug#877002: nslcd installation broken: missing ca-certificates.crt

2017-09-27 Thread Robert Wolf 


Package: nslcd
Version: 0.9.7-2


On clean system, if I try to install nslcd, the recommended package 
ca-certificates is installed together, but first the nslcd package installed 
and want to be started from systemd.

The postinst script of nslcd generates default /etc/nslcd.conf with option

tls_cacertfile /etc/ssl/certs/ca-certificates.crt

Because the ca-certificates package is installed *after* nslcd, the nslcd fails 
to start with message:

==
# apt-get -y install nslcd  


   
Reading package lists... Done   



Building dependency tree



Reading state information... Done   



The following additional packages will be installed:



  ca-certificates libnss-ldapd libpam-ldapd nscd nslcd-utils



Suggested packages: 



  kstart



The following NEW packages will be installed:   



  ca-certificates libnss-ldapd libpam-ldapd nscd nslcd nslcd-utils  



0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.  



Need to get 437 kB/838 kB of archives.  



After this operation, 1,705 kB of additional disk space will be used.   



Get:1 http://apt.abacus.ch/debian stretch/main amd64 nscd amd64 2.24-11+deb9u1 
[267 kB]

 
Get:2 http://apt.abacus.ch/debian stretch/main amd64 libnss-ldapd amd64 0.9.7-2 
[66.2 kB]   


Get:3 http://apt.abacus.ch/debian stretch/main amd64 libpam-ldapd amd64 0.9.7-2 
[53.6 kB]   


Get:4 http://apt.abacus.ch/debian stretch/main amd64 nslcd-utils all 0.9.7-2 
[50.7 kB]