[Touch-packages] [Bug 1847902] Re: pam_nologin should optionally exclude users of the "wheel" group from its access restrictions

2020-03-10 Thread Graham Leggett
Just locked out of an AWS machine again due to this bug. Any news on a fix? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to pam in Ubuntu. https://bugs.launchpad.net/bugs/1847902 Title: pam_nologin should optionally exclude

[Touch-packages] [Bug 1668944] Re: The _apt user ignores group membership.

2020-02-25 Thread Graham Leggett
Dictating to people what their PKI policy should be is outside the scope of apt. Apt must behave properly as per standard unix behaviour, with a proper working user and a proper working group. Trying to dictate directory permissions to people breaks automation, breaks orchestration, and makes it re

[Touch-packages] [Bug 815562] Re: Difficult to know why we can't find signing_key_fingerprint for a PPA

2020-01-14 Thread Graham Leggett
9 years later and this bug is still unfixed when building from Bionic. The error Error: signing key fingerprint does not exist Failed to add key. might be a statement of fact, but it doesn't tell me what I must do, or whether my system is broken or not, or what action I must take. -- You recei

[Touch-packages] [Bug 1650634] Re: when installing systemd, it creates /run/nologin preventing all users from logging in.

2019-07-08 Thread Graham Leggett
Deploy Ubuntu Bionic machine from AWS, try and log in: "System is booting up. See pam_nologin(8)" Given it is impossible to log in, it's impossible to see what's wrong, or fix it. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed

[Touch-packages] [Bug 1762766] Re: apt-get update hangs when apt-transport-https is not installed

2018-04-11 Thread Graham Leggett
In our case it burned a number of days of dev time, so this is definitely causing pain. We've never seen this before because until docker, we have not encountered a system where apt-transport-https wasn't installed by default. -- You received this bug notification because you are a member of Ubu

[Touch-packages] [Bug 1762766] Re: apt-get update hangs when apt-transport-https is not installed

2018-04-11 Thread Graham Leggett
Is it possible to backport this to trusty too? This bit us hard, and there are a lot of people out there posting this problem but with no solution. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apt in Ubuntu. https://bugs.la

[Touch-packages] [Bug 1762766] [NEW] apt-get update hangs when apt-transport-https is not installed

2018-04-10 Thread Graham Leggett
Public bug reported: When "apt-get update" is run on a docker container running Ubuntu v16.04 and containing an additional apt source repository hosted on an https webserver, the "apt-get update" command hangs. The hang happens after connections to http ubuntu hosts are complete, and apt-get rema

[Touch-packages] [Bug 1612711] Re: TLS negation fails

2017-11-09 Thread Graham Leggett
More details. The ClientHello packet in this case is larger than 255 bytes, and is triggering the handshake failure in one of two ways. When psql linked to openssl v1.0.1f attempts to connect to postgresql linked to openssl v1.0.1f, the client side sends 8 bytes, then 1 byte, then 305 bytes in my

[Touch-packages] [Bug 1305175] Re: openssl 1.0.1f 'ssl handshake failure' connection failure

2017-11-09 Thread Graham Leggett
I've also slammed headlong into this one. The clue is "SSL handshake has read 0 bytes and written 317 bytes" What the openssl v1.0.1f client side is doing is sending a clienthello packet larger than 255 bytes to a broken SSL implementation, which slams the phone down on you, thus "read 0 bytes".

[Touch-packages] [Bug 1612711] Re: TLS negation fails

2017-11-08 Thread Graham Leggett
Using openssl s_client on a MacOS Sierra machine connecting to the same postgresql server, the failure is identical. Looks like whatever is triggering this is caused by the server, but is being failed by the client. -- You received this bug notification because you are a member of Ubuntu Touch s

[Touch-packages] [Bug 1612711] Re: TLS negation fails

2017-11-08 Thread Graham Leggett
ssldump looks like the below. >From ssldump, we can see that the server sent three separate certificates. Openssl s_client however claims that no certificates were detected. New TCP connection #42: 172.29.231.43(33116) <-> 172.29.228.240(5432) 42 1 0.0038 (0.0038) C>SV3.1(300) Handshake C

[Touch-packages] [Bug 1612711] Re: TLS negation fails

2017-11-08 Thread Graham Leggett
Despite printing "no peer certificate available" below, the postgresql server serves three certificates (two intermediates and a leaf) as picked up by ssldump. In this case it is the client side that is triggering the handshake failure, not the server. The client side refuses to add the cause of t

[Touch-packages] [Bug 1612711] Re: TLS negation fails

2017-11-08 Thread Graham Leggett
I am seeing the exact same bug, only with the server being postgresql instead of openldap. The same setup and certificates works fine on Trusty, but have regressed on Xenial. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to op

[Touch-packages] [Bug 613022] Re: ssh daemon hangs after publickey packet sent

2017-05-07 Thread Graham Leggett
I am seeing this bug in Ubuntu v14.04. No obvious cause. When it's happened we've physically replaced the instances, as there is no console access at AWS. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. http

[Touch-packages] [Bug 1675118] [NEW] Setting locale breaks sss_ssh_authorizedkeys: set_locale() failed (5): Input/output error

2017-03-22 Thread Graham Leggett
Public bug reported: Configure an Ubuntu Trusty machine with sssd against an LDAP domain. This fails as follows: ubuntu@bastion01:~$ /usr/bin/sss_ssh_authorizedkeys [username] (Wed Mar 22 17:46:15:940434 2017) [/usr/bin/sss_ssh_authorizedkeys] [main] (0x0020): set_locale() failed (5): Input/outp

[Touch-packages] [Bug 1564179] Re: 389-ds-base linked to NSS and GnuTLS, replication fails

2016-04-09 Thread Graham Leggett
We are currently on a deadline and were forced to switch to CentOS7 to move our project forward, which worked fine out the box. Once our deadline is over I will run tests on the above packages to see what difference they make. -- You received this bug notification because you are a member of Ubu