[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#192659: O: libpam-smb -- Pluggable Authentication Module allowing Samba interface



reassign 192659 ftp.debian.org
retitle 192659 Please remove obsolete libpam-smb package from unstable,testing
thanks

On Sat, May 10, 2003 at 02:05:36AM +1000, Martin Michlmayr wrote:

> The current maintainer of libpam-smb, Johnie Ingram <johnie@debian.org>,
> is apparently not active anymore.  Therefore, I orphan this package
> now.  If you want to be the new maintainer, please take it -- see
> http://www.debian.org/devel/wnpp/index.html#howto-o for detailed
> instructions how to adopt a package properly.

> Package: libpam-smb
> Priority: extra
> Section: admin
> Installed-Size: 120
> Maintainer: Johnie Ingram <johnie@debian.org>
> Architecture: i386
> Version: 1.1.6-1.1
> Depends: libc6 (>= 2.2.4-4)
> Filename: pool/main/libp/libpam-smb/libpam-smb_1.1.6-1.1_i386.deb
> Size: 24270
> MD5sum: 7296d9512dd98c8a4523a5e54da8183b
> Description: Pluggable Authentication Module allowing Samba interface
>  This module allows user passwords to be authenticated via local or
>  remote Samba daemons, or by NT or Windows 95/98 machines.

This package should be regarded as obsoleted by either the winbind or
the libpam-krb5 package.  It is a developmental dead-end, with an
inactive upstream, and its attempt to provide NT domain-style
authentication without the cooperation of the NT domain admins (to say
nothing of permitting the user to make his security dependent on a
Win9x machine) results in a fragile model that's vulnerable to MITM
attacks.  I see no reason why anyone should still be using this PAM
module, nor why anyone should be given an opportunity to adopt it.
Please remove it from the archive.

-- 
Steve Langasek
postmodern programmer

Attachment: pgp2SH18bOe3j.pgp
Description: PGP signature


Reply to: