Bug#291498: ssh-krb5: package description has a spurious 'p' character

2005-01-21 Thread Sam Hartman
tags 291498 pending thanks Thanks much. Fixed in my svn and in the next upload. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#327233: Any movement on this?

2005-11-27 Thread Sam Hartman
> "Micah" == Micah Anderson <[EMAIL PROTECTED]> writes: Micah> Hi, Micah> I'm just sending a ping to find out if there has been any Micah> movement on this issue. I continue to believe that this is not a security issue and that openssh is wrong to have applied the patch. That do

Bug#341608: krb5: FTBFS on hurd-i386: Does not link with -lpthread

2005-12-01 Thread Sam Hartman
does your platform support weak symbols? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#341608: krb5: FTBFS on hurd-i386: Does not link with -lpthread

2005-12-01 Thread Sam Hartman
> "Michael" == Michael Banck <[EMAIL PROTECTED]> writes: Michael> On Thu, Dec 01, 2005 at 05:51:16PM +0100, Michael Banck Michael> wrote: >> I am not sure whether all the Makefile.in's should be modified >> to have $PTHREAD_LIBS added to the link lines in case the >> librar

Bug#341608: krb5: FTBFS on hurd-i386: Does not link with -lpthread

2005-12-01 Thread Sam Hartman
>>>>> "Michael" == Michael Banck <[EMAIL PROTECTED]> writes: Michael> On Thu, Dec 01, 2005 at 01:02:29PM -0500, Sam Hartman Michael> wrote: >> does your platform support weak symbols? Michael> Yes, it does. OK. those references sho

Bug#341898: krb5: block migration to testing for now

2005-12-14 Thread Sam Hartman
Russ, how do you feel about the thread on c.p.kerberos about the mutex lock on debian? That seems rather bothersome. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#200342: Ideas about #200342? (krb5_locate_kdc is an internal symbol with a incompatible prototype)

2005-12-16 Thread Sam Hartman
> "Christian" == Christian Perrier <[EMAIL PROTECTED]> writes: Christian> Has anyone around an idea about bug #200342. Given its Christian> age, it may be over for a very long time. Christian> However, I'm completely lacking the required skills to Christian> investigate it.

Bug#341836: openafs-modules-source: Bug#245015 still valid: Build fails with KSRC defined on commandline

2005-12-20 Thread Sam Hartman
KSRC is not a environment variable, it is a make variable. So, I'd expect debian/rules KSRC=foo kdist_image to work but not KSRC=foo debian/rules kdist_image. There's really no harm in making it be an environment variable; I can replace $(KSRC) with ${KSRC} in debian/rules. Please confirm that fi

Bug#344190: Please enable gssapi support

2005-12-20 Thread Sam Hartman
package: cvs severity: wishlist Hi. The kerberos libraries are at priority standard and are in a lot of dependency chains. I don't think there is any good reason not to enable gssapi support in cvs. It would be very convenient for some of us. All that needs to happen is: * add libkrb-dev to

Bug#276189: OpenAFS and user-mode-linux

2006-01-07 Thread Sam Hartman
>>>>> "Russ" == Russ Allbery <[EMAIL PROTECTED]> writes: Russ> Sam Hartman <[EMAIL PROTECTED]> writes: >> So, I agree that we definitely need to support building >> targeted at /usr/lib/uml. I also believe you need to set up &g

Bug#276189: OpenAFS and user-mode-linux

2005-12-22 Thread Sam Hartman
The part that really does not seem reasonable to me is installing the modules in /usr/lib/uml. It seems that for different configurations you want a module to be installed in the hosted os vs the hosting OS. It seems that you need to support both and the default is unclear to me. -- To UNSUBS

Bug#344543: libkrb53: double free + cache corruption if krb5_get_credentials fails

2005-12-24 Thread Sam Hartman
Can you reproduce with kvno? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#276189: OpenAFS and user-mode-linux

2005-12-24 Thread Sam Hartman
That's certainly where uml puts the modules for the uml kernel in Debian. It's not in general where the modules would end up if you build your own kernel. Also, ultimately, the modules end up needing to be accessed within the uml image. I don't see why you wouldn't often want to install a module

Bug#344543: libkrb53: double free + cache corruption if krb5_get_credentials fails

2005-12-25 Thread Sam Hartman
OK. I think we've linked this to an upstream bug. I think we already have a patch. Let me confirm that. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#340360: libapache2-mod-auth-kerb: GSSAPI fails with "Request is a replay" under krb5 1.4.3

2005-11-22 Thread Sam Hartman
Be aware that there is special code to try and disable the replay cache in mod-auth-kerb; it may interact badly with changes in krb5. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#340360: libapache2-mod-auth-kerb: GSSAPI fails with "Request is a replay" under krb5 1.4.3

2005-11-22 Thread Sam Hartman
>>>>> "Russ" == Russ Allbery <[EMAIL PROTECTED]> writes: Russ> Sam Hartman <[EMAIL PROTECTED]> writes: >> Be aware that there is special code to try and disable the >> replay cache in mod-auth-kerb; it may interact badly with

Bug#311689: ssh-krb5: protocol error talking to Solaris 10 sshd

2005-06-02 Thread Sam Hartman
I'm not really sure either side is at fault here. It seems like you're failing to get credentials for host/[EMAIL PROTECTED] for some reason. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#311574: krb5-config: package config script chokes on hyphens in krb5.conf keys

2005-06-02 Thread Sam Hartman
I will do this. Thanks for the report. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#311772: pam_unix.so: logs unknown usernames, thus possibly logging passwords typed too early

2005-06-03 Thread Sam Hartman
That's certainly not how it should work Are you sure you are not using the audit option to pam_unix? Without that option I see: Jun 3 13:59:06 cz login[4777]: (pam_unix) check pass; user unknown Jun 3 13:59:06 cz login[4777]: (pam_unix) authentication failure; logname=hartmans uid=0 euid=0 tt

Bug#305389: bad argument to modprobe for SMP kernel in /etc/init.d/openafs-client script

2005-04-19 Thread Sam Hartman
> "Jason" == Jason Rennie <[EMAIL PROTECTED]> writes: Jason> On 4/19/05, Russ Allbery <[EMAIL PROTECTED]> wrote: >> If you use the modules that are built with the package in >> Debian, the module will be named correctly. Making this change >> would break interoperability betwe

Bug#305298: ssh-krb5: password authentication does not use pam

2005-04-19 Thread Sam Hartman
I'd certainly expect pam to be used for all password validation. If that's not true please give me info on how to reproduce. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#305389: Fwd: Bug#305389: bad argument to modprobe for SMP kernel in /etc/init.d/openafs-client script

2005-04-23 Thread Sam Hartman
I'm thinking this may be a csail-specific lossage. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#244754: Should we arrange the move of limits.conf(5) to libpam-modules?

2005-04-24 Thread Sam Hartman
No, there is not a limits.conf manpage in pam upstream; there is a readme that could become a manpage. If that happened, dropping limits.conf from shadow would be useful. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#203222: libpam-modules: Can't change expired password with NIS

2005-04-24 Thread Sam Hartman
Understood. I am sorry that NIS is so broken. I just don't have time to support NIS. I do believe upgrading to 0.78 post-sarge is important. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#304933: openafs-krb5: FTBFS: asetkey.c:80: error: too few arguments to function `afsconf_AddKey'

2005-04-24 Thread Sam Hartman
> "Andreas" == Andreas Jochens <[EMAIL PROTECTED]> writes: Andreas> This bug can now be reproduced in a current i386/testing Andreas> environment (openafs version 1.3.81-3 is now in sarge). Oops yeah. This is not so good. I will need to deal with this post haste. I should get to it

Bug#305389: Fwd: Bug#305389: bad argument to modprobe for SMP kernel in /etc/init.d/openafs-client script

2005-04-24 Thread Sam Hartman
I'm expecting Karl to deal with this bug. He has a strong interest in making this work. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#249315: XFS warning should be displayed more prominently

2005-05-16 Thread Sam Hartman
> "xsdg" == xsdg <[EMAIL PROTECTED]> writes: xsdg> First, I would appreciate if a warning of some sort showed xsdg> up in debconf -- I tend not to look under /usr/share/doc/ xsdg> unless I feel I need information in the first place. I believe this would be against debconf policy

Bug#309448: OpenAFS 1.3.81, SMP kernel, make-kpkg

2005-05-19 Thread Sam Hartman
Hi. I have not been paying attention to this issue as much as I would like. Just as an FYI, I'm running 1.3.81 on an SMP powermac g5 with no build or run problems. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#309439: ssh-krb5: .k5login breaks password login

2005-05-20 Thread Sam Hartman
Are you using pam_krb5 for password logins? If so, pam_krb5 also respects .k5login, so it is a feature not a bug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#293077: krb5-admin-server: new upstream version (1.4)

2005-02-02 Thread Sam Hartman
Are you going to be the maintainer of the nfsv4 utilities? Has Citi actually released something that will work with stock krb5 1.4 yet? --Sam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#292837: pam: Please use a newer version of Berkeley DB

2005-02-06 Thread Sam Hartman
I'm happy to move to db4 post-sarge if the upgrade issues are dealt with. The problem is that if you are using userdb (which I don't think is used often), logins will fail until your database is converted. Your database will not be in a particularly standard place so postinst will not be able to

Bug#88906: /afs goes ENOTDIR eventually, on first client+server install before reboot

2005-05-02 Thread Sam Hartman
Russ, I'm fairly sure this hasn't been fixed. It was discussed recently on zephyr. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#307555: krb5-config: need default_keytab_name in libdefaults section

2005-05-04 Thread Sam Hartman
I don't understand why this is needed. That's fairly clearly the default keytab that sshd will use. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#307908: openafs-modules: taints kernel

2005-05-08 Thread Sam Hartman
> "Brian" == Brian May <[EMAIL PROTECTED]> writes: Brian> My understanding is this should only happen for closed Brian> source modules, and I believe openafs-modules-source is Brian> open source. This happens for any non-GPL module. OpenAFS is definitely not GPL although it is o

Bug#225907: Build failure on Alpha with 2.4.23

2005-05-08 Thread Sam Hartman
So, there are local changes having to do with that test. I forget why, but the sitution is annoying. I'd recommend buinging the alpha kernel with modversions. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#297781: openafs: OpenAFS 1.3.79 release, supposedly fixes many Linux 2.6 bugs, 1.3.75 doesn't compile under 2.6.11

2005-03-14 Thread Sam Hartman
I have 1.3.79 packages at svn://ia.mit.edu/openafs/branches/experimental I need to work out some last details and upload. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#297585: openafs-modules-source: fails to build with bison grammar error

2005-03-14 Thread Sam Hartman
tags 297585 woody -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#314699: pam: pam_unix's pam_sm_acct_mgmt return values don't jive w/ what the pam docs say

2005-06-22 Thread Sam Hartman
Thanks for the report. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#300775: Pam: newer upstream version (0.78) available fixing security bugs

2005-03-24 Thread Sam Hartman
severity 300775 wishlist tags 300775 -security thanks Hi. I've explicitly decided not to upgrade PAM for sarge. I had also decided when 0.77 came out that I didn't see a good reason to take it. Taking a new pam release is a painful process. That said, I'm looking for people to help with PAM. W

Bug#300904: ssh-krb5: writes an error messgae: free(): invalid pointer 0x80688ab!

2005-03-24 Thread Sam Hartman
Interesting. I don't see this at all. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#300823: libpam-modules: pam_mail module prevents login with blocked NFS

2005-03-26 Thread Sam Hartman
> "Matt" == Matt Johnston <[EMAIL PROTECTED]> writes: Matt> The pam_mail module attempts to perform stat() of the mail Matt> location. If the mail location is NFS mounted and that Matt> server is unavailable, logins as any user (root included) Matt> will hang indefinitely (ham

Bug#300823: libpam-modules: pam_mail module prevents login with blocked NFS

2005-03-28 Thread Sam Hartman
>>>>> "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes: Steve> On Sat, Mar 26, 2005 at 08:34:59PM -0500, Sam Hartman Steve> wrote: >> >>>>> "Matt" == Matt Johnston <[EMAIL PROTECTED]> writes: Steve&g

Bug#315622: same thing happens if kdc cannot be reached

2005-07-07 Thread Sam Hartman
I'm not at all sure what to do about this bug. I understand the problem but have no idea where it can be fixed. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#298920: please make libkrb53 priority 'standard', since nfs-utils depends on it

2005-04-04 Thread Sam Hartman
> "Jeroen" == Jeroen van Wolffelaar <[EMAIL PROTECTED]> writes: Jeroen> On Thu, Mar 10, 2005 at 12:50:35PM -0500, Chip Salzenberg Jeroen> wrote: >> Package: ftp.debian.org Severity: normal >> >> The current unstable nfs-utils (1.0.7-1) builds nfs-common to >> depend on

Bug#289358: Delete principal file upon purge

2005-04-04 Thread Sam Hartman
> "Jan-Benedict" == Jan-Benedict Glaw <[EMAIL PROTECTED]> writes: Jan-Benedict> If you're not keen with that, maybe doing it like Jan-Benedict> postgres would do: debconf there asks if you want to Jan-Benedict> keep the database files even at real purge time... That works for me.

Bug#300775: Pam: newer upstream version (0.78) available fixing security bugs

2005-04-04 Thread Sam Hartman
>>>>> "Javier" == Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> writes: Javier> On Thu, Mar 24, 2005 at 08:49:01PM -0500, Sam Hartman Javier> wrote: >> severity 300775 wishlist tags 300775 -security Javier> ^^^

Bug#300823: libpam-modules: pam_mail module prevents login with blocked NFS

2005-04-04 Thread Sam Hartman
>>>>> "Matt" == Matt Johnston <[EMAIL PROTECTED]> writes: Matt> On Mon, Mar 28, 2005 at 06:30:28PM -0500, Sam Hartman wrote: >> >>>>> "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes: Steve> It seems to me t

Bug#298920: please make libkrb53 priority 'standard', since nfs-utils depends on it

2005-04-05 Thread Sam Hartman
>>>>> "Chip" == Chip Salzenberg <[EMAIL PROTECTED]> writes: Chip> According to Sam Hartman: >> However I think it is generally a good idea to talk to a >> maintainer before depending on unpublished internal interfaces >> of the

Bug#300775: Pam: newer upstream version (0.78) available fixing security bugs

2005-04-08 Thread Sam Hartman
I hate to be a pain in the ass, but it is going to be very difficult for me to take a huge .diff.gz that applies all the debian patches. That's hard to audit, hard to understand and not well documented. I'm happy to give you access to the repository so you can work on a branch and try to get th

Bug#303944: openafs-client: please mention configuring chunksize

2005-04-09 Thread Sam Hartman
The upstream rc file and config file actually auto-detect a reasonable configuration. It would be neat if someone merged those changes back to the debian packages. I can't just use the upstream rc script because it tries to load the kernel module manually rather than using modprobe and found that

Bug#304040: openafs-client: fails to stop afs-client

2005-04-10 Thread Sam Hartman
Hi. I cannot reproduce this. unmounting afs seems to work OK for me. Information on when it works vs when it does not is appreciated. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#304040: openafs-client: fails to stop afs-client

2005-04-10 Thread Sam Hartman
Hi. Again, it works for me. Hopefully we'll find some more people that have this problem and we can start to understand why it works on some machines and not others. My machine is a ppc64 box; I see you are running i686. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubs

Bug#315059: Drop KRB4 support from HEIMDAL

2005-10-23 Thread Sam Hartman
Does the krb524 functionality disappear from the KDC if you turn off krb4? If so, that will be a problem for current openafs, although probably not for future openafs. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#331172: Please add support for specifying dsp device

2005-10-01 Thread Sam Hartman
package: libflite1, eflite severity: wishlist I notice that both eflite and flite open /dev/dsp directly (as a hard-coded string in the sources). That makes it challenging to use eflite as a speech server for screen reading with one sound card and to use /dev/dsp for music or other sound effects.

Bug#327272: libpam-modules: pam_issue.so causes "double free or corruption" error in glibc

2005-09-14 Thread Sam Hartman
Thanks for reporting this. I will try and reproduce and debug but would love it if someone else gets to this before I do. I'm definitely busy this evening and will try to get to this tomorrow. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMA

Bug#327233: CAN-2005-2798: GSSAPI credentials inadvertantly exposed through improper delegation

2005-09-14 Thread Sam Hartman
> "Micah" == Micah Anderson <[EMAIL PROTECTED]> writes: Micah> Package: openssh-krb5 Severity: important Tags: security Micah> CAN-2005-2798[1] reads: Micah> sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials Micah> is enabled, allows GSSAPI credentials to be delegate

Bug#332479: ssh-krb5: 15-second delay connecting to non-kerberos host

2005-10-09 Thread Sam Hartman
Sounds like your system thinks it can get tickets for the non-kerberos host, but some kdc is hanging somewhere. You could edit your krb5.conf either to add a domain realm mapping so the non-kerberos machine is in some obviouly bogus realm. Alternatively you could make sure that the kdc information

Bug#329686: Processed: Re: Bug#329686: FTBFS: fails to detect libkrb5

2005-10-09 Thread Sam Hartman
Hi. I cannot reproduce this. My desktop is a powerpc machine and I build all my packages (including ones that depend on krb5) on it just fine. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#329686: Processed: Re: Bug#329686: FTBFS: fails to detect libkrb5

2005-10-11 Thread Sam Hartman
>>>>> "Martin" == Martin Pitt <[EMAIL PROTECTED]> writes: Martin> Hi Sam! Sam Hartman [2005-10-09 16:56 -0400]: >> Hi. I cannot reproduce this. My desktop is a powerpc machine >> and I build all my packages (including ones that depen

Bug#404365: RFC 4380 advice to improve reliability of Teredo relays breaks clients behind Linux NATs in common configurations

2006-12-23 Thread Sam Hartman
package: miredo severity: important version: 1.0.4-1 Tags: upstream justification: Debian's Teredo implementation does not particularly work with Debian's NAT implementation [I've copied the Miredo author because this really seems more an upstream issue than an Debian issue. I've copied Chris

Bug#402844: libsasl2-modules-gssapi-mit: sasl-sample-client/sasl-sample-server authentication fails with GSSAPI mechanism

2006-12-17 Thread Sam Hartman
Interesting. Do you end up getting tickets for the host service or just a tgt? Is any error logged on the Kerberos KDC? Does the sasl sample pass the hostname into the sasl library? Many mechanisms such as digest-md5 and cram-md5 will mostly work without a hostname passed in, but gssapi requires

Bug#400955: base64 problems authenticating using gssapi

2006-11-29 Thread Sam Hartman
package: libsasl2-modules-gssapi-mit severity: grave justification: package seems not to work at all I get a base64 error authenticating to a system that works fine with a previous version of sasl. To reproduce: apt-get install krb5-user kinit [EMAIL PROTECTED] password: foobarbaz apt-get ins

Bug#400955: base64 problems authenticating using gssapi

2006-11-30 Thread Sam Hartman
>>>>> "Fabian" == Fabian Fagerholm <[EMAIL PROTECTED]> writes: Fabian> On Wed, 2006-11-29 at 15:08 -0500, Sam Hartman wrote: >> I get a base64 error authenticating to a system that works fine >> with a previous version of sasl. >>

Bug#275472: Support for kerberos in ssh

2005-01-11 Thread Sam Hartman
I'd like to ask that you not enable gssapi support for the ssh package. The problem is that there is a key exchange method that has not yet been accepted upstream that you probably want if you want Kerberos support. Having the ssh package do some but not all of the desired Kerberos support would

Bug#264231: libapache2-mod-auth-kerb patch proposal

2005-01-11 Thread Sam Hartman
Hi. I've been fairly busy and while I've had time to mostly keep up with my packages I have not had time to look at enhancements. I'll try to get a chance to look at your patch within a week. --Sam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contac

Bug#290405: confusing error message in log when ssh as root with no passwd

2005-01-15 Thread Sam Hartman
> "Brian" == Brian Sammon <[EMAIL PROTECTED]> writes: Brian> The bug reported in #248133 appears to have resurfaced, and Brian> since I'm too late to reopen it, here goes: When I try to Brian> ssh into the machine as root when root has no password (and Brian> shadow passwords a

Bug#290807: Please conflict with old perl libs

2005-01-16 Thread Sam Hartman
package: libsvn0 severity: serious justification: breaks other software version: 1.1.1-2 Please conflict with the 1.0.9 libsvn-core-perl. In practice it does not work with this version of the library. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Cont

Bug#296331: openafs-modules-source: I made the modules_image but when installing it complains:

2005-02-22 Thread Sam Hartman
Typically this means your kernel sources do not match the kernel you are actually running. OTher possible problems include a mismatch in module utilities, compilers etc. --Sam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#295887: openafs-client: minor bug in init.d startup script

2005-02-22 Thread Sam Hartman
This patch looks broken. Are you sure you actually have the openafs client enabled on your system? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#296835: openafs-modules-source: Fails to build with kernel-source-2.6.10

2005-02-26 Thread Sam Hartman
svn://ia.mit.edu/svn-debian/openafs/branches/experimental contains packages that work against 2.6.10. I'm not happy with the server packages; there is a horrible bug that tends to take out windows clients in sufficiently large cells. I'm not sure whether I'm going to upload these packages. - --

Bug#409977: keyutils-lib: violates policy by not including soname in package

2007-02-06 Thread Sam Hartman
package: keyutils-lib severity: serious version: 1.2-1 justification: policy 8.1 Policy 8.1 requires that the shared library soname be in the package. keyutils-lib should be renamed libkeyutils1 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EM

Bug#410314: aklog regression in behavior with Kerberos 1.6

2007-02-09 Thread Sam Hartman
package: openafs-krb5 Version: 1.4.2-3 Kerberos in experimental will return null realm names for krb5_get_realm_of_host when no domain_realm mapping exists. That's fine but aklog assumes that it knows the realm. You actually want to try afs/cell@ (null realm) because if your kdc has referrals th

Bug#413926: wordpress: Should not ship with Etch

2007-03-29 Thread Sam Hartman
> "Anthony" == Anthony Towns writes: Anthony> Dividing by years gives: Anthony> CVEs Earliest Years CVEs/Year Anthony> 43 2004 3 14.3 wordpress 63 2002 5 12.6 phpbb2 37 2004 Anthony> 3 12.3 moodle 46 2002 5 9.2 bugzilla 45 2001 6 7.5 Anthony> phpmyadmin >> Viewed

Bug#413838: Probably a bug in setting the allowable enctypes

2007-04-22 Thread Sam Hartman
Based on the bug report, what seems to be happening is that the client is managing to negotiate an AES context even though the code calls set_allowable_enctypes to limit the context to only supporting des. So you get a CFX context on the server, which doesn't actually support CFX, so things lose.

Bug#385259: quoted_chars support seems broken

2006-08-29 Thread Sam Hartman
package: rdiff-backup I tried backing up my home directory onta a vfat filesystem. rdiff-backup seems like it has quoted chararacter support that should have dealt with this. However there was a file in my home directory with multiple * characters in the name. Only one of these was quoted. So r

Bug#385039: doesn't restart on upgrade (uses --exec with --stop)

2006-09-02 Thread Sam Hartman
> "Russ" == Russ Allbery <[EMAIL PROTECTED]> writes: Russ> Ryan Murray <[EMAIL PROTECTED]> writes: Russ> I'm working on this for unstable right now by converting the Russ> init scripts to use LSB. Russ> Once I finish that, I'll look at producing a new version for Russ> sta

Bug#385039: doesn't restart on upgrade (uses --exec with --stop)

2006-09-05 Thread Sam Hartman
If this patch works at all, it should be fine. I'd recommend a minor fix to the security patch if you are doing a stable update: r18438 | tlyu | 2006-08-15 15:27:08 -0400 (Tue, 15 Aug 2006) | 6 lines ticket: 4137

Bug#394519: openafs-modules-source: Cannot authenticate to my cell - "pioctl failed"

2006-10-21 Thread Sam Hartman
tags 394519 moreinfo severity 394519 normal thanks Hi. Can I get you to try upgrading your openafs-client? Also, can I see the messages displayed in dmesg when openafs loads? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#395015: openafs-krb5: kinit + aklog succeeds but the /afs access does not work (works with afslog from heimdal-clients)

2006-10-25 Thread Sam Hartman
severity 395015 normal thanks Other people are not seeing this; I seriously doubt it is grave. Make sure your openafs kernel module and openafs-client package are both upgraded to 1.4.2-2 Try that. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contac

Bug#604925: "No such file or directory": /usr/lib/krb5/plugins/authdata

2010-11-25 Thread Sam Hartman
> "Helmut" == Helmut Grohne writes: Helmut> On Thu, Nov 25, 2010 at 02:56:46PM +0100, Helmut Grohne wrote: >> Running strace on ssh revealed the almost immediately before >> emiting the "Unspecified GSS failure. Minor code may provide >> more information\nNo such file or dire

Bug#604925: /usr/lib/libgssapi_krb5.so.2: cannot login to ssh after upgrade from lenny to squeeze

2010-11-25 Thread Sam Hartman
tags 604925 moreinfo severity 604925 normal thanks I'm guessing the no such file or directory is probably spurious. What's probably happening is that something in libkrb5 or libgssapi_krb5 is returning -1 in a context where the library belives it is a system call that sets errno. However that's

Bug#604925: /usr/lib/libgssapi_krb5.so.2: cannot login to ssh after upgrade from lenny to squeeze

2010-11-25 Thread Sam Hartman
OK. I have no idea what's going on here. If I were approaching this I'd step through things in the client and server until I found the problem. So, I'm kind of shooting in the dark here. Kerberos 1.9 includes a tracing facility that could help with issues like this, but Kerberos 1.9 is not even

Bug#604925: /usr/lib/libgssapi_krb5.so.2: cannot login to ssh after upgrade from lenny to squeeze

2010-11-25 Thread Sam Hartman
OK. The way in which the principal is determined changed between krb5 1.8 and 1.6. In 1.8 the system searches through all the keys in the keytab looking for a key that successfully decrypts a ticket. The server name sent in the ticket over the network is ignored (at least by sshd) and only the k

Bug#604925: /usr/lib/libgssapi_krb5.so.2: cannot login to ssh after upgrade from lenny to squeeze

2010-11-30 Thread Sam Hartman
The 1.9 packages just made their way into experimental. I'd expect that I'd expect aptitude -t experimental install libkrb5-3 libgssapi-krb5-2 would work and not bring any scary dependencies in. If it does look scary, rebuild the experimental packages for squeeze. Then you need to set KRB5_TRACE

Bug#727708: init system coupling etc.

2014-02-12 Thread Sam Hartman
When I've found myself trying to avoid normative language in situations like this I end up with statements like: It is important that all packages support smoothe upgrades from Wheezy to Jessie , even when the system is booted with sysvinit. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...

Bug#738850: ITP: iniparser -- a stand-alone INI file reading/writing library

2014-02-13 Thread Sam Hartman
The krb5 libraries include read and write support for the krb5.conf format, which is very similar but not identical to ini. I would be entirely happy with the response that: 1) the krb5 profile library should be used only for modifying Kerberos configs 2) supporting the ABI that your application

Bug#737133: rm: krb5-appl -- ROM obsolete by kerberos ssh

2014-01-30 Thread Sam Hartman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 package: ftp.debian.org Hi. After discussion on debian-devel, I've decided to remove krb5-appl. One of the comaintainers dropped out, and after discussion we realized that we weren't using the package, there are better alternatives in the community,

Bug#723144: sasl2-bin: saslauthd infinite loop inside sendto_kdc.c at function service_fds

2014-01-31 Thread Sam Hartman
control: reassign 723144 libkrb5-3 control: found 723144 krb5/1.10.1+dfsg-5 control: forcemerge 694988 723144 Yep, that's a krb5 bug all right. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
control: subscribe -1 > "Charles" == Charles Plessy writes: Charles> The 3.0 (native) format is useful when packaging a work Charles> that is developped and distributed in a Git repository. Charles> Please leave us this possibility. Let me describe the use case I have which is

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
>>>>> "Andreas" == Andreas Beckmann writes: Andreas> On 2014-02-05 10:57, Sam Hartman wrote: >> tarballs useful; anyone who is likely to want to build this from >> source probably has a copy of git and can checkout a tag. Andreas> Su

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
> "Neil" == Neil Williams writes: That makes sense and I do something similar as appropriate. Even so, I do not wish to maintain the upstream tarball as a maintained artifact. There are cases where packaging release releases are made. Maintaining pristine-tar commits for daily builds is a

Bug#737634: dpkg-dev: please reject native/non-native version when building native/non-native source packages

2014-02-05 Thread Sam Hartman
> "Bernhard" == Bernhard R Link writes: As I mentioned I have a packaging branch and an upstream branch. I wish to use debian revisions to reflect packaging changes. It's slightly more complex than changes to debian directory involve a debian revision change; changes to other things involve

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
Hi. There seems to be a significant conflict within the TC about what the L options mean. Speaking as a maintainer who could be affected by this and as someone who would sponsor a GR to override one interpretation butnot another, I'd request that the TC clarify what it means with the next ballo

Bug#727708: Call for votes on init system resolution

2014-02-07 Thread Sam Hartman
> "Ian" == Ian Jackson writes: Ian> Anthony Towns writes ("Re: Bug#727708: Call for votes on init Ian> system resolution"): >> It's really pretty terrible to actively use FD to try to block >> options that aren't your favourite. Honestly, I would have >> expected the tech

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
> "Colin" == Colin Watson writes: Colin> I think Ian and I are agreed that L excludes 1), and permits Colin> 3). On reflection I think I agree that L has to exclude 2) Colin> as well. Hmm, I am reading Ian as against 3. I request that TC members work with Ian on the wording of

Bug#727708: Please clarify L options with regard to interfaces

2014-02-07 Thread Sam Hartman
>>>>> "Sam" == Sam Hartman writes: >>>>> "Colin" == Colin Watson writes: Colin> I think Ian and I are agreed that L excludes 1), and permits Colin> 3). On reflection I think I agree that L has to exclude 2) Colin> as well.

Bug#727708: Please clarify L options with regard to interfaces [and 1 more messages]

2014-02-07 Thread Sam Hartman
Yeah, I now understand what you mean by L. I'll be writing more in the form of a blog post and probably GR text. I will send a pointer to the TC as I think I may be hitting close to something that Russ may find useful. I'll refrain from trying to convince the TC because you have enough voices t

Bug#402164: it isn't about ldap, just Cyrus 2.1/2.2 and GSSAPI

2014-02-08 Thread Sam Hartman
I agree with russ. Unless someone can get a backtrace with libkrb5-dbg installed, there's not much we can do. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#738340: Please rebuild krb5-sync and libauthen-krb5-admin-perl on all arches

2014-02-09 Thread Sam Hartman
package: release.debian.org I'd like to request binary NMUs for krb5-sync and libauthen-krb5-admin-perl on all architectures in order to build against new krb5. The soname for the krb5 admin libraries changed. Thanks, --Sam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.or

Bug#738364: krb5-sync FTBFS on armel armhf ia64mips mipsel sparc

2014-02-09 Thread Sam Hartman
package: krb5-sync version: 3.0-1 severity: serious justification: FTBFS I'm surprised this is not already filed, but it seems like it should be. krb5-sync is failing tests (and thus builds) on the above listed architectures. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org

  1   2   3   4   5   6   7   8   9   10   >