Linux Archive

Linux Archive (http://www.linux-archive.org/)
-   Debian Kernel (http://www.linux-archive.org/debian-kernel/)
-   -   Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze (http://www.linux-archive.org/debian-kernel/569822-bug-639691-updating-build-deps-nfs-utils-ease-backporting-squeeze.html)

Daniel Kahn Gillmor 08-30-2011 04:16 AM

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 
I concur with Sean Finney that nfs-utils should Build-Depend on
libnfsidmap-dev >= 0.24 to ease backporting.

I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
it'd be nice to modify the source package as minimally as possible.

I just got the thumbs-up from anibal to backport libnfsidmap-dev 0.24 to
squeeze-backports; i've done it successfully for myself (it works fine),
so i just need to review the build log to submit it to the backports repo.

Once that's done, i'd like to put nfs-utils in the squeeze-backports
repo as well, unless the regular maintainers want to do it (or have
serious reservations about me doing it myself). Any objections or
concerns i should be aware of?

Regards,

--dkg

Luk Claes 08-30-2011 05:25 AM

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 
On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
> I concur with Sean Finney that nfs-utils should Build-Depend on
> libnfsidmap-dev >= 0.24 to ease backporting.
>
> I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
> it'd be nice to modify the source package as minimally as possible.

What features do you need/want from 1.2.4?

Cheers

Luk



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4E5C7466.4070604@debian.org">http://lists.debian.org/4E5C7466.4070604@debian.org

Daniel Kahn Gillmor 08-30-2011 04:30 PM

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 
On 08/30/2011 01:25 AM, Luk Claes wrote:
> On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
>> I concur with Sean Finney that nfs-utils should Build-Depend on
>> libnfsidmap-dev >= 0.24 to ease backporting.
>>
>> I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
>> it'd be nice to modify the source package as minimally as possible.
>
> What features do you need/want from 1.2.4?

the version of nfs-utils in squeeze is only capable of using des-cbc-crc
kerberos tickets. This is a poor choice for network security. No one
setting up a modern system should be using plain DES for anything.

from 1:1.2.3-1:

- Try to use kernel function to determine supported Kerberos
enctypes (258f10f) (Closes: #474037)

Taking advantage of this appears to require the kernel from
squeeze-backports as well, but i don't think that's an unreasonable
tradeoff (and i have verified that it works with 2.6.39-bpo.2, currently
in squeeze-backports).

--dkg

Luk Claes 08-30-2011 04:48 PM

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 
On 08/30/2011 06:30 PM, Daniel Kahn Gillmor wrote:
> On 08/30/2011 01:25 AM, Luk Claes wrote:
>> On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
>>> I concur with Sean Finney that nfs-utils should Build-Depend on
>>> libnfsidmap-dev >= 0.24 to ease backporting.
>>>
>>> I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
>>> it'd be nice to modify the source package as minimally as possible.
>>
>> What features do you need/want from 1.2.4?
>
> the version of nfs-utils in squeeze is only capable of using des-cbc-crc
> kerberos tickets. This is a poor choice for network security. No one
> setting up a modern system should be using plain DES for anything.
>
> from 1:1.2.3-1:
>
> - Try to use kernel function to determine supported Kerberos
> enctypes (258f10f) (Closes: #474037)
>
> Taking advantage of this appears to require the kernel from
> squeeze-backports as well, but i don't think that's an unreasonable
> tradeoff (and i have verified that it works with 2.6.39-bpo.2, currently
> in squeeze-backports).

Fair enough, just was curious what feature(s) made you think about
backporting. Good luck with the backport and please do share your
experiences.

Cheers

Luk



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4E5D1448.4010305@debian.org">http://lists.debian.org/4E5D1448.4010305@debian.org

Sean Finney 08-31-2011 08:53 AM

Bug#639691: updating build-deps for nfs-utils to ease backporting to squeeze
 
On Tue, Aug 30, 2011 at 07:25:58AM +0200, Luk Claes wrote:
> On 08/30/2011 06:16 AM, Daniel Kahn Gillmor wrote:
> > I concur with Sean Finney that nfs-utils should Build-Depend on
> > libnfsidmap-dev >= 0.24 to ease backporting.
> >
> > I'm hoping to prepare nfs-utils 1.2.4 as a backport for squeeze, and
> > it'd be nice to modify the source package as minimally as possible.
>
> What features do you need/want from 1.2.4?

also, for those using kerberos + nvfsv4, it fixes some rather annoying
bugs (like not working at all) for environments where users have a large
list of group memberships (see 5604b35a and to a lesser extent 9274e94d).

i shoudl add that minus the nfsidmap not building (and thus breaking
after the dh additions to install the files), the package would otherwise
build fine with no other needed modifications with the existing build-depends.

so i guess it's a choice between whether you want to substitute uniformity
(i.e. all builds having nfsidmapd by requiring also a backport of
libnfsidmap) vs flexibility (builds are slightly more non-deterministic,
based on what version of libnfsidmap is installed). i don't have a strong
opinion either way :)


sean




--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110831085341.GA31164@cobija.connexer.com">http://lists.debian.org/20110831085341.GA31164@cobija.connexer.com


All times are GMT. The time now is 03:14 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.