[1516] in athena10
Re: libpam-krb5-config broken under Jaunty
daemon@ATHENA.MIT.EDU (Greg Price)
Tue Mar 10 23:09:50 2009
Date: Tue, 10 Mar 2009 23:08:51 -0400
From: Greg Price <price@MIT.EDU>
To: Evan Broder <broder@mit.edu>
Cc: Geoffrey Thomas <geoffrey@mit.edu>, debathena@mit.edu
Message-ID: <20090311030851.GL25963@mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <49B53E1F.2020003@mit.edu>
To summarize this possibly more clearly for people without full
context, Intrepid introduced a new order of things for PAM
configuration, with the name pam-auth-update; I adapted our PAM config
to this form, which includes supplying static config files in
/usr/share/pam-configs/ that can be turned on or off by the sysadmin;
then it looks like in Jaunty, libpam-krb5 upstream supplies a krb5
config file with the obvious name, the same one I used.
Evan and I looked at this last night. Among other things, the
/usr/share/pam-configs/krb5 in the new libpam-krb5 only acts for
uid >= 1000. It'd be nice if that worked for us, but right now it
doesn't.
Unfortunately pam-auth-update reads every file in
/usr/share/pam-configs/ other than . and .., so diverting will be a
pain. I can probably get the maintainer to take a patch to use
run-parts semantics, which is the Debian Way for this sort of thing.
Not sure that would happen for jaunty.
Greg
On Mon, Mar 09, 2009 at 12:04:47PM -0400, Evan Broder wrote:
> Hmm...we should have known that would only be needed temporarily.
>
> libpam-krb5-config is currently pulled in if pam-auth-update exists
> (i.e. the new Intrepid PAM management craziness). We could
> conditionalize that particular dependency on the version of libpam-krb5
> being less than 3.11-3ubuntu1 (when this was fixed in Ubuntu).
>
> Actually, can you see what the differences are between libpam-krb5's
> /usr/share/pam-configs/krb5 and ours? If they're non-trivially
> different, we may want to divert theirs.
>
> - Evan
>
> Geoffrey Thomas wrote:
> > Unpacking libpam-krb5-config (from
> > .../libpam-krb5-config_0.0.5~ubuntu9.04~0.1_all.deb) ...
> > dpkg: error processing
> > /var/cache/apt/archives/libpam-krb5-config_0.0.5~ubuntu9.04~0.1_all.deb
> > (--unpack):
> > trying to overwrite `/usr/share/pam-configs/krb5', which is also in
> > package libpam-krb5
> > Errors were encountered while processing:
> > /var/cache/apt/archives/libpam-krb5-config_0.0.5~ubuntu9.04~0.1_all.deb
> > E: Sub-process /usr/bin/dpkg returned an error code (1)
> >
