--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package krb5
systemd does not respect inserv overrides (see #759001) and does
not plan to do so, since they appear to be used by only two packages
in the archive, one of which is debian-edu-config.
The ordering override is needed for krb5-kdc-ldap because in that
configuration, LDAP is needed for the operation of the KDC, whereas
otherwise LDAP would tend to full under the heading of a "normal service"
(which might use krb5 for authentication), which would come after
the KDC startup.
The ordering issue was fixed by providing systemd unit files and
an ordering snippet in krb5-kdc-ldap for the krb5-kdc.service
(#758992) in krb5 1.12.1+dfsg-11, but that fix was incomplete,
since it did not force the same ordering for krb5-admin-server,
which has the same LDAP dependency.
The krb5 1.12.1+dfsg-15 package adds the same ordering snippet
to the krb5-admin-server unit, closing #769710.
The attached debdiff is the unfiltered output of
debdiff ../krb5_1.12.1+dfsg-14.dsc ../krb5_1.12.1+dfsg-15.dsc
unblock krb5/1.12.1+dfsg-15
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.14-2-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
diff -Nru krb5-1.12.1+dfsg/debian/changelog krb5-1.12.1+dfsg/debian/changelog
--- krb5-1.12.1+dfsg/debian/changelog 2014-11-07 13:17:43.000000000 -0500
+++ krb5-1.12.1+dfsg/debian/changelog 2014-11-21 12:36:17.000000000 -0500
@@ -1,3 +1,10 @@
+krb5 (1.12.1+dfsg-15) unstable; urgency=medium
+
+ * Also apply slapd-before-kdc.conf to krb5-admin-server.service.d,
+ Closes: #769710
+
+ -- Benjamin Kaduk <kaduk@mit.edu> Fri, 21 Nov 2014 12:36:08 -0500
+
krb5 (1.12.1+dfsg-14) unstable; urgency=medium
* The upstream patch in 1.12.1+dfsg-13 was incomplete; pull in
diff -Nru krb5-1.12.1+dfsg/debian/krb5-kdc-ldap.install krb5-1.12.1+dfsg/debian/krb5-kdc-ldap.install
--- krb5-1.12.1+dfsg/debian/krb5-kdc-ldap.install 2014-11-07 13:15:18.000000000 -0500
+++ krb5-1.12.1+dfsg/debian/krb5-kdc-ldap.install 2014-11-20 12:37:25.000000000 -0500
@@ -3,4 +3,5 @@
usr/lib/*/krb5/*.so*
usr/lib/*/krb5/plugins/kdb/kldap.so
etc/insserv/overrides
-debian/slapd-before-kdc.conf lib/systemd/system/krb5-kdc.service.d
\ No newline at end of file
+debian/slapd-before-kdc.conf lib/systemd/system/krb5-kdc.service.d
+debian/slapd-before-kdc.conf lib/systemd/system/krb5-admin-server.service.d
--- End Message ---
--- Begin Message ---
On Wed, 2014-11-26 at 15:03 -0500, Benjamin Kaduk wrote:
> Please unblock package krb5
>
> systemd does not respect inserv overrides (see #759001) and does
> not plan to do so, since they appear to be used by only two packages
> in the archive, one of which is debian-edu-config.
>
> The ordering override is needed for krb5-kdc-ldap because in that
> configuration, LDAP is needed for the operation of the KDC, whereas
> otherwise LDAP would tend to full under the heading of a "normal service"
> (which might use krb5 for authentication), which would come after
> the KDC startup.
Unblocked, thanks.
Regards,
Adam
--- End Message ---