Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 

I concur with Sean Finney that nfs-utils should Build-Depend on
libnfsidmap-dev >= 0.24 to ease backporting.

I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
it'd be nice to modify the source package as minimally as possible.

I just got the thumbs-up from anibal to backport libnfsidmap-dev 0.24 to
squeeze-backports; i've done it successfully for myself (it works fine),
so i just need to review the build log to submit it to the backports repo.

Once that's done, i'd like to put nfs-utils in the squeeze-backports
repo as well, unless the regular maintainers want to do it (or have
serious reservations about me doing it myself). Any objections or
concerns i should be aware of?

Regards,

--dkg

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 

On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
> I concur with Sean Finney that nfs-utils should Build-Depend on
> libnfsidmap-dev >= 0.24 to ease backporting.
>
> I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
> it'd be nice to modify the source package as minimally as possible.

What features do you need/want from 1.2.4?

Cheers

Luk



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4E5C7466.4070604@debian.org">http://lists.debian.org/4E5C7466.4070604@debian.org

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 

On 08/30/2011 01:25 AM, Luk Claes wrote:
> On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
>> I concur with Sean Finney that nfs-utils should Build-Depend on
>> libnfsidmap-dev >= 0.24 to ease backporting.
>>
>> I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
>> it'd be nice to modify the source package as minimally as possible.
>
> What features do you need/want from 1.2.4?

the version of nfs-utils in squeeze is only capable of using des-cbc-crc
kerberos tickets. This is a poor choice for network security. No one
setting up a modern system should be using plain DES for anything.

from 1:1.2.3-1:

- Try to use kernel function to determine supported Kerberos
enctypes (258f10f) (Closes: #474037)

Taking advantage of this appears to require the kernel from
squeeze-backports as well, but i don't think that's an unreasonable
tradeoff (and i have verified that it works with 2.6.39-bpo.2, currently
in squeeze-backports).

--dkg

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 

On 08/30/2011 06:30 PM, Daniel Kahn Gillmor wrote:
> On 08/30/2011 01:25 AM, Luk Claes wrote:
>> On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
>>> I concur with Sean Finney that nfs-utils should Build-Depend on
>>> libnfsidmap-dev >= 0.24 to ease backporting.
>>>
>>> I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
>>> it'd be nice to modify the source package as minimally as possible.
>>
>> What features do you need/want from 1.2.4?
>
> the version of nfs-utils in squeeze is only capable of using des-cbc-crc
> kerberos tickets. This is a poor choice for network security. No one
> setting up a modern system should be using plain DES for anything.
>
> from 1:1.2.3-1:
>
> - Try to use kernel function to determine supported Kerberos
> enctypes (258f10f) (Closes: #474037)
>
> Taking advantage of this appears to require the kernel from
> squeeze-backports as well, but i don't think that's an unreasonable
> tradeoff (and i have verified that it works with 2.6.39-bpo.2, currently
> in squeeze-backports).

Fair enough, just was curious what feature(s) made you think about
backporting. Good luck with the backport and please do share your
experiences.

Cheers

Luk



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4E5D1448.4010305@debian.org">http://lists.debian.org/4E5D1448.4010305@debian.org

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 

On Tue, Aug 30, 2011 at 07:25:58AM +0200, Luk Claes wrote:
> On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
> > I concur with Sean Finney that nfs-utils should Build-Depend on
> > libnfsidmap-dev >= 0.24 to ease backporting.
> >
> > I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
> > it'd be nice to modify the source package as minimally as possible.
>
> What features do you need/want from 1.2.4?

also, for those using kerberos + nvfsv4, it fixes some rather annoying
bugs (like not working at all) for environments where users have a large
list of group memberships (see 5604b35a and to a lesser extent 9274e94d).

i shoudl add that minus the nfsidmap not building (and thus breaking
after the dh additions to install the files), the package would otherwise
build fine with no other needed modifications with the existing build-depends.

so i guess it's a choice between whether you want to substitute uniformity
(i.e. all builds having nfsidmapd by requiring also a backport of
libnfsidmap) vs flexibility (builds are slightly more non-deterministic,
based on what version of libnfsidmap is installed). i don't have a strong
opinion either way :)


sean




--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110831085341.GA31164@cobija.connexer.com">http://lists.debian.org/20110831085341.GA31164@cobija.connexer.com