Bug#767470: unblock: freeipa/4.0.4-2

[Timo Aaltonen <tjaalton@debian.org>]

Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock

Please unblock package freeipa

So I forgot to check that the packages install on a fresh sid install,
added three missing python module deps.

Current default apache2 install enables mod_authz_user and mod_deflat,
but old installations might not have them, so enable them on postinst
but don't disable on prerm.

Also bump the libapache2-mod-nss dependency to match the version which
doesn't enable the module by default.

diff --git a/debian/changelog b/debian/changelog
index ac68a28..dabda80 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,15 @@
+freeipa (4.0.4-2) unstable; urgency=medium
+
+  * control: Add python-qrcode, python-selinux, python-yubico
+    to freeipa-server dependencies. (Closes: #767427)
+  * freeipa-server.postinst: Enable mod_authz_user and mod_deflate too,
+    but since they should be part of the default apache2 install, don't
+    disable them on uninstall like the other modules. (Closes: #767425)
+  * control: Bump server dependency on -mod-nss to 1.0.10-2 which
+    doesn't enable the module by default.
+
+ -- Timo Aaltonen <tjaalton@debian.org>  Fri, 31 Oct 2014 11:36:51 +0200
+
 freeipa (4.0.4-1) unstable; urgency=medium
 
   * Initial release (Closes: #734703)
diff --git a/debian/control b/debian/control
index 30b57d1..4b5aa92 100644
--- a/debian/control
+++ b/debian/control
@@ -78,7 +78,7 @@ Depends:
  krb5-pkinit,
  ldap-utils,
  libapache2-mod-auth-kerb (>= 5.4-2.2~),
- libapache2-mod-nss,
+ libapache2-mod-nss (>= 1.0.10-2~),
  libapache2-mod-wsgi,
  libjs-dojo-core,
  libjs-jquery,
@@ -91,6 +91,9 @@ Depends:
  python-krbv,
  python-ldap,
  python-pyasn1,
+ python-qrcode (>= 5.0.0),
+ python-selinux,
+ python-yubico,
  slapi-nis (>= 0.54),
  ${misc:Depends},
  ${python:Depends},
diff --git a/debian/freeipa-server.postinst b/debian/freeipa-server.postinst
index a7b485f..7c4aab4 100644
--- a/debian/freeipa-server.postinst
+++ b/debian/freeipa-server.postinst
@@ -7,6 +7,12 @@ if [ "$1" = configure ]; then
        if [ ! -e /etc/apache2/mods-enabled/auth_kerb.load ]; then
             apache2_invoke enmod auth_kerb || exit $?
         fi
+       if [ ! -e /etc/apache2/mods-enabled/authz_user.load ]; then
+            apache2_invoke enmod authz_user || exit $?
+        fi
+       if [ ! -e /etc/apache2/mods-enabled/deflate.load ]; then
+            apache2_invoke enmod deflate || exit $?
+        fi
        if [ ! -e /etc/apache2/mods-enabled/expires.load ]; then
             apache2_invoke enmod expires || exit $?
         fi


unblock freeipa/4.0.4-2