Re: Alternative apporach for password re-setup

2019-04-19 Thread Mike Gabriel
Control: close -1 Dear release team, On Fr 19 Apr 2019 00:10:01 CEST, Dominik George wrote: Hi, This is a well tested patch that I can upload tonight (to unstable)? Or is more testing time needed? If the patch really fixes the transition, then we don't need the gosa s-pu. Do all agree? I

Re: Alternative apporach for password re-setup

2019-04-18 Thread Dominik George
Hi, > This is a well tested patch that I can upload tonight (to unstable)? Or is > more testing time needed? If the patch really fixes the transition, then we > don't need the gosa s-pu. Do all agree? I tested: a) on stretch, that the script works, and produces expected results with a known pa

Re: Alternative apporach for password re-setup

2019-04-18 Thread Mike Gabriel
Hi Nik, On Do 18 Apr 2019 21:49:58 CEST, Dominik George wrote: with the attached patch, the conversion works on buster. The script uses php-mcrypt for no reason - the first use always returns an constant 16, the second returns random bytes. With the applied patch, the script works without ph

Re: Alternative apporach for password re-setup

2019-04-18 Thread Dominik George
> with the attached patch, the conversion works on buster. > > The script uses php-mcrypt for no reason - the first use always returns > an constant 16, the second returns random bytes. > > With the applied patch, the script works without php-mcrypt. While focusing on what the two mcrypt library

Re: Alternative apporach for password re-setup

2019-04-18 Thread Wolfgang Schweer
On Thu, Apr 18, 2019 at 05:06:15PM +, Mike Gabriel wrote: > 18:59 < sunweaver> h01ger: unfortunately, I don't have an OTOH solution for > crypto-transition directly in buster. > 18:59 < sunweaver> It is not a packaging issue really, but a configuration > adaptation issue. > 18:59 < sunweaver> n

Re: Alternative apporach for password re-setup

2019-04-18 Thread Dominik George
Hi, with the attached patch, the conversion works on buster. The script uses php-mcrypt for no reason - the first use always returns an constant 16, the second returns random bytes. With the applied patch, the script works without php-mcrypt. -nik --- gosa-mcrypt-to-openssl-passwords.orig 2019-

Alternative apporach for password re-setup

2019-04-18 Thread Mike Gabriel
Holger and I discussed an alternative approach for the crypto transition in Debian buster, if gosa in stretch does not get updated to this s-pu's version: ``` 14:42 < h01ger> sunweaver: i fear your approach wont work / be enough. upgrades from stretch should^wmust work, even if not the late