[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#600458: unblock: nss-pam-ldapd/0.7.11

On Sun, Oct 17, 2010 at 12:54:05PM +0200, Arthur de Jong wrote:
> Please unblock version 0.7.11 of nss-pam-ldapd. It has the following
> changes:
>   * updated Vietnamese debconf translation by Clytie Siddall (closes: #598500)
>   * grow the buffer for the PAM ruser to not reject logins for users with
>     a ruser including a domain part (closes: #600065)
> It is debatable whether the second one is really RC but it prevents
> certain users from logging in and is a very minor change (one line in
> nslcd/pam.c).


> I have another pending change that fixes a problem when nslcd would hang
> under certain  circumstances (using TLS and seeing a certain type of
> network problem during a search). This change is a little larger and was
> the result of missing a last part of #596983.
> It involves setting a timeout on the socket when closing the connection
> and ensuring that in all places that the connection is closed the same
> function is executed. It is a workaround for a bug in OpenLDAP when used
> with GnuTLS. The relevant change can be seen here:
>   http://arthurdejong.org/viewvc/nss-pam-ldapd/nss-pam-ldapd/nslcd/myldap.c?r1=1276&r2=1275&pathrev=1276
> (except the changes from line 690 onwards because they are specific to
> changes in the trunk)
> Do you want me to prepare an upload to unstable with the above change?

Two issues in one bug report is a bit annoying.  Please let the above
version migrate first.

Workarounds like these are really hard to judge IMHO.  But as the line 690+
changes are irrelevant you can go ahead.

Kind regards,
Philipp Kern

Attachment: signature.asc
Description: Digital signature

Reply to: