[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#5514: xdm doesn't support shadow passwords



Brian C. White:
> I'm afraid that the shadow password packages are still in experimental.
> It's too late now to move them into rex.  They'll have to wait until
> Debian 1.3.

How did it happen?  From debian.changelog:  (cc'ing the maintainer)

 shadow (960530-1) experimental; urgency=LOW
 shadow (960810-1) base; urgency=LOW

It has been experimental for a long time.  These packages are optional
(so you don't have to install them) and have no security holes that
I know of (I spent a lot of time reviewing the sources), so I don't
see why they can't be moved into rex or at least contrib (so that
they appear on Debian CDs).  I admit they are still under development
- but so are many other "stable" packages.  Especially since it has
been decided earlier that shadow passwords will be in 1.2 - and there
are people who need them.

Even if they are in experimental: it would still be nice to be able
to install them on the released system.  X and ssh (non-US - is this
officially part of Debian?) are probably the only remaining packages
that don't yet support shadow passwords.

It is possible that the release will be delayed due to the security
hole in X (see the Ian's posting) - so maybe it's not too late yet?

Marek


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com


Reply to: