Package: sssd
Version: 1.11.7.3-3~bpo70+1
Severity: important
User: contact@itopie.ch
Usertags: debian-packaging
Hi there,
please Cc: me on replies.
sss_ssh_authorizedkeys from wheezy reports a "not enough memory"
error, despite the log showing the correct retrival of the SSH key
from LDAP. Since the error is not present with sssd from
wheezy-backports, please let me know if this is anyway worth a bug
report.
However, libpam-sss from wheezy-backports is not installable because
libpam-pwquality is not in the archive. This seems a known problem,
at least on Ubuntu:
<https://lists.fedorahosted.org/pipermail/sssd-users/2014-January/001268.html>
Luckily, libpam-sssd from wheezy still works with sssd from
wheezy-backports. FYI, one should first install sssd from wheezy,
then manually install libnl-route-3-200 (a new dependency for
sssd-common in wheezy) and finally install sssd from wheezy-backports:
=====
# dpkg-query -W \*sss\*
libnss-sss:amd64 1.8.4-2
libpam-sss:amd64 1.8.4-2
python-sss 1.8.4-2
python2.7-sss
sssd 1.8.4-2
sssd-tools
# apt-get install -t wheezy-backports sssd libpam-sss libnss-sss ldap-utils
[...]
The following packages have unmet dependencies:
libpam-sss : Depends: libpam-pwquality (>= 1.2.2-1) but it is not installable
sssd : Depends: sssd-common (= 1.11.7.3-3~bpo70+1) but it is not going to be installed
Depends: sssd-krb5 (= 1.11.7.3-3~bpo70+1) but it is not going to be installed
Depends: sssd-ldap (= 1.11.7.3-3~bpo70+1) but it is not going to be installed
Depends: sssd-proxy (= 1.11.7.3-3~bpo70+1) but it is not going to be installed
E: Unable to correct problems, you have held broken packages.
# apt-get install -t wheezy-backports sssd-common
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:
The following packages have unmet dependencies:
sssd-common : Depends: libnl-route-3-200 but it is not going to be installed
E: Unable to correct problems, you have held broken packages.
# apt-get install -t wheezy-backports sssd sssd-common libnl-route-3-200
[...]
The following packages have unmet dependencies:
libnl-route-3-200 : Depends: libnl-3-200 (= 3.2.24-2~bpo70+1) but 3.2.7-4 is to be installed
Depends: libc6 (>= 2.14) but 2.13-38+deb7u8 is to be installed
E: Unable to correct problems, you have held broken packages.
# apt-get install libnl-route-3-200
[...]
The following NEW packages will be installed:
libnl-route-3-200
# apt-get install -t wheezy-backports sssd
[...]
The following NEW packages will be installed:
libsss-idmap0 sssd-common sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy
The following packages will be upgraded:
python-sss sssd
[...]
root@bolivie:/etc#
=====
Thx, bye,
Gismo / Luca
-- System Information:
Debian Release: 7.8
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-0.bpo.4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages sssd depends on:
ii python-sss 1.11.7.3-3~bpo70+1
ii sssd-common 1.11.7.3-3~bpo70+1
ii sssd-krb5 1.11.7.3-3~bpo70+1
ii sssd-ldap 1.11.7.3-3~bpo70+1
ii sssd-proxy 1.11.7.3-3~bpo70+1
sssd recommends no packages.
sssd suggests no packages.
-- Configuration Files:
/etc/apparmor.d/usr.sbin.sssd changed:
/usr/sbin/sssd {
#include <abstractions/base>
#include <abstractions/kerberosclient>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
capability dac_override,
capability dac_read_search,
capability setgid,
capability setuid,
capability sys_nice,
@{PROC} r,
@{PROC}/[0-9]*/status r,
/etc/krb5.keytab k,
/etc/ldap/ldap.conf r,
/etc/localtime r,
/etc/shells r,
/etc/sssd/sssd.conf r,
/usr/sbin/sssd rmix,
/usr/lib/@{multiarch}/ldb/modules/ldb/* m,
/usr/lib/@{multiarch}/sssd/* rix,
/tmp/{,.}krb5cc_* rwk,
/var/lib/sss/* rw,
/var/lib/sss/db/* rwk,
/var/lib/sss/pipes/* rw,
/var/lib/sss/pipes/private/* rw,
/var/lib/sss/pubconf/* rw,
/var/log/sssd/* rw,
/var/tmp/host_* rw,
/{,var/}run/sssd.pid rw,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.sssd>
}
-- no debconf information
Attachment:
signature.asc
Description: Digital signature