** Tags added: regression-update
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to cyrus-sasl2 in Ubuntu.
https://bugs.launchpad.net/bugs/1906627
Title:
GSS-SPNEGO implementation in cyrus-sasl2 is incompatible with Active
This bug was fixed in the package cyrus-sasl2 - 2.1.27~101-g0780600
+dfsg-3ubuntu2.3
---
cyrus-sasl2 (2.1.27~101-g0780600+dfsg-3ubuntu2.3) bionic; urgency=medium
* d/p/lp-1906627-01-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch:
This bug was fixed in the package adcli - 0.8.2-1ubuntu1.2
---
adcli (0.8.2-1ubuntu1.2) bionic; urgency=medium
* d/control: Adding specific dependency of libsasl2-modules-gssapi-mit
2.1.27~101-g0780600+dfsg-3ubuntu2.2 to ensure adcli uses fixed
GSS-SPNEGO implementation to
The proposed solution fixes the bug I filed when joining against older
Windows Active Directory servers.
(https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1906673) i.e. The
domain join works without the --use-ldaps.
We do not currently have the correct certificate set up to use --use-
ldaps,
To anyone following this bug:
As we get ready to re-release the new adcli package which implements the
--use-ldaps flag, if you are happy to spend a few moments testing the
new package, I would really appreciate it. I really don't want to cause
another regression again.
You can install the new
Performing verification for Bionic
Firstly, I installed adcli and libsasl2-modules-gssapi-mit from
-updates:
adcli 0.8.2-1
libsasl2-modules-gssapi-mit 2.1.27~101-g0780600+dfsg-3ubuntu2.1
>From there, I joined a Active Directory realm:
https://paste.ubuntu.com/p/zJhvpRzktk/
Next, I enabled
All regression failures, PASSED after a retry. There is no autopkgtest
regression (failures) anymore.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to cyrus-sasl2 in Ubuntu.
https://bugs.launchpad.net/bugs/1906627
Title:
I have retried all the FAILED tests.
* postfix/3.3.0-1ubuntu0.3 (amd64) PASSED the 2nd time:
http://autopkgtest.ubuntu.com/packages/p/postfix/bionic/amd64
* kimap/17.12.3-0ubuntu1 (armhf, ppc64el, arm64) are queued and waiting to
retry.
Stay tune ...
- Eric
--
You received this bug
have tested using libsasl2-modules=2.1.27~101-g0780600+dfsg-3ubuntu2.2,
libsasl2-modules-db=2.1.27~101-g0780600+dfsg-3ubuntu2.2, libsasl2
-modules-gssapi-mit=2.1.27~101-g0780600+dfsg-3ubuntu2.2 and
adcli=0.8.2-1ubuntu1.1
Join to AD without specifying --use-ldaps seemed to run without error.
Hello Rolf, or anyone else affected,
Accepted adcli into bionic-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/adcli/0.8.2-1ubuntu1.1
in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
Hello Rolf, or anyone else affected,
Accepted cyrus-sasl2 into bionic-proposed. The package will build now
and be available at https://launchpad.net/ubuntu/+source/cyrus-
sasl2/2.1.27~101-g0780600+dfsg-3ubuntu2.2 in a few hours, and then in
the -proposed repository.
Please help us by testing
[sts-sponsors]
cyrus-sasl2 has been sponsored in Bionic.
I have already pinged sil2100 for its SRU verification.
- Eric
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to cyrus-sasl2 in Ubuntu.
[sts-sponsors]
adcli option #1 has been sponsored in Bionic with the following
nitpicking:
* Changed version from "0.8.2-1ubuntu2.1" to "0.8.2-1ubuntu1.1"
* Changed debian/control to d/control.
- Eric
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
Unsubscribing ~ubuntu-sponsors as I believe there is no longer anything
to sponsor.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to cyrus-sasl2 in Ubuntu.
https://bugs.launchpad.net/bugs/1906627
Title:
GSS-SPNEGO
Thank you for preparing this revert.
Since Bionic 0.8.2-1ubuntu1 was previously in bionic-security, I think
this revert needs to go into the security pocket, and therefore cannot
be built in the bionic-updates pocket and needs handling via the
security team PPA.
However I'm not sure, so to avoid
Attached is option two: a debdiff for adcli, which builds on
0.8.2-1ubuntu2, which re-introduces all of the --use-ldaps patches, and
also adds a depends to the fixed libsasl2-modules-gssapi-mit at greater
or equal to relationship. Use this if option 1 is a no go.
** Patch added: "debdiff for
Attached is option one: a debdiff for adcli, which builds on
0.8.2-1ubuntu1 and simply adds a depends to the fixed libsasl2-modules-
gssapi-mit at greater or equal to relationship. This will require the
0.8.2-1ubuntu2 package in -unapproved queue to be deleted.
** Patch added: "debdiff for adcli
Matthew,
I was thinking about possibly to declare some package relationships to
not allow the offending packages' combination to occur, when I came
across the exact same thought from cpaelzer.
I don't know if you notice it, here it goes[0]:
"
One suggestion for the coming related uploads.
Do
Matthew,
I was thinking about possibly to declare some package relationships to
not allow the offending packages' combination to occur, when I came
across the exact same thought from cpaelzer.
I don't know if you notice it, here it goes:
"
One suggestion for the coming related uploads.
Do you
** Tags added: sts-sponsor
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to cyrus-sasl2 in Ubuntu.
https://bugs.launchpad.net/bugs/1906627
Title:
GSS-SPNEGO implementation in cyrus-sasl2 is incompatible with Active
Attached is a debdiff for cyrus-sasl2 on Bionic, which resolves the
incompatibilities of the GSS-SPNEGO implementation with the one in
Active Directory.
** Patch added: "cyrus-sasl2 debdiff for Bionic"
** Summary changed:
- adcli fails, can't contact LDAP server
+ GSS-SPNEGO implementation in cyrus-sasl2 is incompatible with Active
Directory, causing recent adcli regression
** Description changed:
- Package: adcli
- Version: 0.8.2-1ubuntu1
- Release: Ubuntu 18.04 LTS
+ [Impact]
- When
22 matches
Mail list logo
