libldb1: wheezy backport breaks stock wheezy sssd

[Rolf Schirmacher <rolf_schirmacher@web.de>]

Dear list,

I hope I will find the right point of contact this way...

The issue I have:

Package: libldb1
Version: 1:1.1.17-1~bpo70+1
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,

originally looking for a Sogo update, I installed samba from wheezy backports,
which includes the current libldb1 (i.e. 1.1.17).

Unfortunately, the version handling of libldb1 is critical and there are packages
in stock wheezy that also depend on libldb1 and require 1.1.6 instead of 1.1.17 to work
properly.

In my case, the package affected is sssd (not sure about other packages). sssd does not start up
with the libldb1 backport being installed and there is also no sssd (back)port available working with
the libldb1 1.1.17. As a result, regular users cannot log into the system any more (as that is managed
through sssd).

I am not sure about how to resolve this best. One idea would be to offer backports / recompiled versions of
the affected packages (sssd, not sure about others) through backports and the dependency system?

Thanks for any support on this issue.


-- System Information:
Debian Release: 7.6
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libldb1 depends on:
ii  libc6              2.13-38+deb7u4
ii  libldap-2.4-2      2.4.31-1+nmu2
ii  libtalloc2         2.1.1-1~bpo70+1
ii  libtdb1            1.3.0-1.1~bpo70+1
ii  libtevent0         0.9.21-1~bpo70+1
ii  multiarch-support  2.13-38+deb7u4

libldb1 recommends no packages.

libldb1 suggests no packages.

-- no debconf information

and how it was closed as a bug:

This is an automatic notification regarding your Bug report
which was filed against the libldb1 package:

#763923: libldb1: wheezy backport breaks stock wheezy sssd

It has been closed by Jelmer Vernooij<jelmer@samba.org>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Jelmer Vernooij<jelmer@samba.org>  by
replying to this email.


which goes:

sssd is not "unrelated software": it depends on ldb. The ldb plugin ABI is
brittle and does not have any guarantees so downstream packages tend to
depend on specific ldb upstream versions, and thus need to be rebuilt
(binNMU) whenever a new ldb is uploaded.

As per the FAQ, please report backport bugs to the backports mailing list.
Seehttp://backports.debian.org/FAQ/


Please keep me cc'ed on this topic as I don not regularily follow this list.

Thanks in advance for any support.

Rolf