sts-sponsors team mailing list archive

[Matthew Ruffell <matthew.ruffell@xxxxxxxxxxxxx>]

Hello Eric and Lukasz,

I have created new debdiffs for adcli. Please review and also sponsor one
of them to -proposed.

Since there are multiple versions of adcli floating around I made two debdiffs.

Please choose the one most convenient / cleanest to apply.

The first simply builds ontop of 0.8.2-1ubuntu1 currently in -proposed, and is
the version pull-lp-source pulls down. It simply adds the dependency
to the fixed
libsasl2-modules-gssapi-mit package with a greater than or equal to
relationship.

Use of this debdiff requires 0.8.2-1ubuntu2 to be deleted from the upload queue,
and treated as 0.8.2-1ubuntu2 never existed.

https://bugs.launchpad.net/ubuntu/+source/adcli/+bug/1906627/+attachment/5441872/+files/lp1906627_adcli_option_one.debdiff

Option two builds upon 0.8.2-1ubuntu2, and re-applies all of the --use-ldaps
patches from the previous SRU which 0.8.2-1ubuntu2 reverts. It also adds the
dependency to the fixed libsasl2-modules-gssapi-mit package with a
greater than
or equal to relationship.

https://bugs.launchpad.net/ubuntu/+source/adcli/+bug/1906627/+attachment/5441873/+files/lp1906627_adcli_option_two.debdiff

My preference is for option one, but use whatever is required. I only made both
of these to lower round trip time due to timezones if you don't like the option
one idea.

Thanks,
Matthew

On Mon, Dec 7, 2020 at 3:25 PM Matthew Ruffell
<matthew.ruffell@xxxxxxxxxxxxx> wrote:
>
> Hi Eric, Lukasz,
>
> Please review and potentially sponsor the cyrus-sasl2 debdff attached
> to LP1906627.
>
> [1] https://bugs.launchpad.net/ubuntu/+source/adcli/+bug/1906627
>
> It fixes the root cause of the GSS-SPNEGO implementation being incompatible with
> Microsoft's implementation in Active Directory.
>
> If you are still planning to re-release adcli and sssd to -security, then you
> should also build cyrus-sasl2 in the same way:
>
> https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/4336/+packages
>
> Again, I am sorry for causing the regression and these patches should fix the
> underlying cause.
>
> Thanks,
> Matthew