[863] in athena10
Re: pam-config updates for intrepid
daemon@ATHENA.MIT.EDU (Greg Price)
Tue Jan 20 14:34:12 2009
Date: Tue, 20 Jan 2009 14:33:07 -0500
From: Greg Price <price@MIT.EDU>
To: debathena@mit.edu
Message-ID: <20090120193307.GI30239@vinegar-pot.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20081112200940.GR10757@vinegar-pot.mit.edu>
My fix for this bug went into Jaunty this month. I think Intrepid will
stay buggy, so we'll need to keep the workaround until it EOLs.
Greg
On Wed, Nov 12, 2008 at 03:09:41PM -0500, Greg Price wrote:
> The Ubuntu maintainer (who's also the Debian maintainer, though Debian
> doesn't yet have this newfangled, still-buggy pam config system)
> applied my patch, so the workaround will eventually become unnecessary.
> https://bugs.launchpad.net/ubuntu/+source/pam/+bug/294513
>
> Greg
>
>
> On Wed, Nov 05, 2008 at 11:03:06PM -0500, Greg Price wrote:
> > The puzzling bug is diagnosed, patched, and reported.
> > https://bugs.launchpad.net/ubuntu/+source/pam/+bug/294513
> > The workaround is indeed sound for this bug.
> >
> > We'll upload debathena-pam-config and its friends to the live repo,
> > and then Debathena Intrepid should be entirely ready for ordinary users.
> >
> > Greg
> >
> >
> > On Tue, Nov 04, 2008 at 01:31:05AM -0500, Greg Price wrote:
> > > I've uploaded to the beta repo another new version, that works around
> > > a puzzling bug in pam-auth-update by forcing it to consider our config
> > > files afresh and notice their "Default: Yes" lines. This bug
> > > manifested when upgrading a Debathena hardy machine to intrepid
> > > and then restoring the sources.list and upgrading.
> > >
> > > It may be time to push this package to the live repo.
> > >
> > > Greg
> > >
> > >
> > > On Sun, Nov 02, 2008 at 01:49:48AM -0400, Greg Price wrote:
> > > > opus is now a working Debathena Intrepid system, with these packages.
> > > >
> > > > The beta repo has a new version of debathena-pam-config that handles
> > > > more upgrade cases. I believe it will now work in all cases not
> > > > involving me installing previous unreleased versions on the machine
> > > > for testing. Please test.
> > > >
> > > > Greg
> > > >
> > > >
> > > > On Sat, Nov 01, 2008 at 08:30:03AM -0400, Greg Price wrote:
> > > > > Last night I updated our pam config packages to take advantage of
> > > > > pam-auth-update, the new package-friendly style of PAM configuration
> > > > > introduced in intrepid.
> > > > >
> > > > > The changes occurred in r23225 through r23230. Now
> > > > > - libpam-krb524, libpam-debathena-home-type, libpam-athena-locker
> > > > > enable themselves when pam-auth-update is available
> > > > > - a new package libpam-krb5-config enables libpam-krb5
> > > > > - debathena-pam-config depends on the self-configuring packages
> > > > > and adds a new-style config file of its own for mktemp
> > > > > so it no longer touches /etc/pam.d/common-* directly
> > > > > - on upgrade, debathena-pam-config converts /etc/pam.d/common-*
> > > > > just if all four of those files match the old debathena versions
> > > > >
> > > > > When pam-auth-update is absent, all packages have their previous
> > > > > behavior.
> > > > >
> > > > > The only other PAM module we provide other than the three that now
> > > > > enable themselves is libpam-mktemp. This one requires an operand and
> > > > > therefore doesn't make much sense to "enable" outside of a specific
> > > > > purpose.
> > > > >
> > > > >
> > > > > These packages should be tested, particularly the upgrade logic. I've
> > > > > built new versions of each of them and uploaded them to the beta repo.
> > > > > They appear to do the right thing on etch, hardy, and intrepid, but I
> > > > > have not yet tested an upgrade from hardy to intrepid.
> > > > >
> > > > > Please test and comment.
> > > > >
> > > > > Once these package versions go in the main apt repo, I believe
> > > > > Debathena will be complete for ordinary users on intrepid.
> > > > > The only remaining item in #110 on Trac is debathena-build-depends.
> > > > >
> > > > > Greg
