Bug#886749: Password Sync to Kerberos fails for user DNs that have a blank in the DN

[Mike Gabriel <mike.gabriel@das-netzwerkteam.de>]

Package: debian-edu-config
Version: 1.944

We experienced an issue where the password sync from GOsa (via  
gosa-sync hook script) to Kerberos on a stretch TJENER fails for user  
DNs that have a blank in the DN.

Here we have DN OUs containing blanks, unfortunately.

The patch needs to be applied in our gosa.conf template (typical case  
of underquoting, see '%dn' bits):

```
diff --git a/etc/gosa/gosa.conf b/etc/gosa/gosa.conf
index 7c3a7df1..ba624d71 100644
--- a/etc/gosa/gosa.conf
+++ b/etc/gosa/gosa.conf
@@ -76,9 +76,9 @@
   <pathMenu>
       <plugin  
acl="users/netatalk:self,users/environment:self,users/posixAccount:self,users/kolabAccount:self,users/phpscheduleitAccount:self,users/oxchangeAccount:self,users/proxyAccount:self,users/connectivity:self,users/pureftpdAccount:self,users/phpgwAccount:self,users/opengwAccount:self,users/pptpAccount:self,users/intranetAccount:self, users/webdavAccount:self,users/nagiosAccount:self,users/sambaAccount:self,users/mailAccount:self,users/groupware, users/user:self,users/scalixAccount:self,users/gofaxAccount:self,users/phoneAccount:self,users/Groupware:self" class="MyAccount"  
/>
       <plugin acl="users/password:self" class="password"
-              postmodify="USERPASSWORD=%new_password /usr/bin/sudo  
/usr/share/debian-edu-config/tools/gosa-sync %dn"
-              postlock="/usr/bin/sudo  
/usr/share/debian-edu-config/tools/gosa-lock-user %dn"
-              postunlock="/usr/bin/sudo  
/usr/share/debian-edu-config/tools/gosa-unlock-user %dn" />
+              postmodify="USERPASSWORD=%new_password /usr/bin/sudo  
/usr/share/debian-edu-config/tools/gosa-sync '%dn'"
+              postlock="/usr/bin/sudo  
/usr/share/debian-edu-config/tools/gosa-lock-user '%dn'"
+              postunlock="/usr/bin/sudo  
/usr/share/debian-edu-config/tools/gosa-unlock-user '%dn'" />
   </pathMenu>

```


Mike
--

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

Attachment: pgppoNpUlPPh7.pgp
Description: Digitale PGP-Signatur