On Sun, Oct 17, 2010 at 12:54:05PM +0200, Arthur de Jong wrote: > Please unblock version 0.7.11 of nss-pam-ldapd. It has the following > changes: > > * updated Vietnamese debconf translation by Clytie Siddall (closes: #598500) > * grow the buffer for the PAM ruser to not reject logins for users with > a ruser including a domain part (closes: #600065) > > It is debatable whether the second one is really RC but it prevents > certain users from logging in and is a very minor change (one line in > nslcd/pam.c). Unblocked. > I have another pending change that fixes a problem when nslcd would hang > under certain circumstances (using TLS and seeing a certain type of > network problem during a search). This change is a little larger and was > the result of missing a last part of #596983. > > It involves setting a timeout on the socket when closing the connection > and ensuring that in all places that the connection is closed the same > function is executed. It is a workaround for a bug in OpenLDAP when used > with GnuTLS. The relevant change can be seen here: > http://arthurdejong.org/viewvc/nss-pam-ldapd/nss-pam-ldapd/nslcd/myldap.c?r1=1276&r2=1275&pathrev=1276 > (except the changes from line 690 onwards because they are specific to > changes in the trunk) > > Do you want me to prepare an upload to unstable with the above change? Two issues in one bug report is a bit annoying. Please let the above version migrate first. Workarounds like these are really hard to judge IMHO. But as the line 690+ changes are irrelevant you can go ahead. Kind regards, Philipp Kern
Attachment:
signature.asc
Description: Digital signature