headers
Simon Josefsson | 26 Apr 11:02
Favicon
Gravatar

Bug#670316: shishi: FTBFS on s390x: testsuite failure

Philipp Kern <pkern <at> debian.org> writes:

> Hi Simon,
>
> thanks for the followup.
>
> On Wed, Apr 25, 2012 at 02:54:15PM +0200, Simon Josefsson wrote:
>> Philipp Kern <pkern <at> debian.org> writes:
>> > your package FTBFSes on s390x because of a crash / failures in the
>> > testsuite:
>> >
>> > make[3]: Leaving directory
>> > /build/buildd-shishi_1.0.1-1-s390x-luumdM/shishi-1.0.1/tests'
>> > /usr/bin/make  check-TESTS
>> > make[3]: Entering directory
>> > /build/buildd-shishi_1.0.1-1-s390x-luumdM/shishi-1.0.1/tests'
>> > shishi_authenticator_seqnumber_get() failed
>> > shishi_authenticator_seqnumber_get() failed
>> > shishi_authenticator_client() failed
>> > shishi_authenticator_client() failed
>> > shishi_authenticator_clientrealm() failed
>> > shishi_authenticator_authorizationdata() failed
>> > shishi_authenticator_cusec_get() failed
>> > shishi_authenticator_ctime() failed
>> > FAIL: authenticator
>> 
>> Hi.  Thanks for the report.  I would either need a shell account on this
>> architecture, or your help in tracking this down.  Could you get a gdb
>> backtrace of the self-test that crashes?  Do you have any ideas on what
>> makes this architecture different from all the others, where it builds
(Continue reading)

Permalink | Reply | 0 comments |
headers
Simon Josefsson | 25 Apr 14:54
Favicon
Gravatar

Bug#670316: shishi: FTBFS on s390x: testsuite failure

Philipp Kern <pkern <at> debian.org> writes:

> Package: shishi
> Version: 1.0.1-1
> Severity: important
> User: debian-s390 <at> lists.debian.org
> Usertags: s390x
>
> Hi,
>
> your package FTBFSes on s390x because of a crash / failures in the testsuite:
>
> make[3]: Leaving directory
> /build/buildd-shishi_1.0.1-1-s390x-luumdM/shishi-1.0.1/tests'
> /usr/bin/make  check-TESTS
> make[3]: Entering directory
> /build/buildd-shishi_1.0.1-1-s390x-luumdM/shishi-1.0.1/tests'
> shishi_authenticator_seqnumber_get() failed
> shishi_authenticator_seqnumber_get() failed
> shishi_authenticator_client() failed
> shishi_authenticator_client() failed
> shishi_authenticator_clientrealm() failed
> shishi_authenticator_authorizationdata() failed
> shishi_authenticator_cusec_get() failed
> shishi_authenticator_ctime() failed
> FAIL: authenticator

Hi.  Thanks for the report.  I would either need a shell account on this
architecture, or your help in tracking this down.  Could you get a gdb
backtrace of the self-test that crashes?  Do you have any ideas on what
(Continue reading)

Permalink | Reply | 0 comments |
headers
Philipp Kern | 24 Apr 22:13
Picon
Favicon

Bug#670316: shishi: FTBFS on s390x: testsuite failure

Package: shishi
Version: 1.0.1-1
Severity: important
User: debian-s390 <at> lists.debian.org
Usertags: s390x

Hi,

your package FTBFSes on s390x because of a crash / failures in the testsuite:

make[3]: Leaving directory `/build/buildd-shishi_1.0.1-1-s390x-luumdM/shishi-1.0.1/tests'
/usr/bin/make  check-TESTS
make[3]: Entering directory `/build/buildd-shishi_1.0.1-1-s390x-luumdM/shishi-1.0.1/tests'
shishi_authenticator_seqnumber_get() failed
shishi_authenticator_seqnumber_get() failed
shishi_authenticator_client() failed
shishi_authenticator_client() failed
shishi_authenticator_clientrealm() failed
shishi_authenticator_authorizationdata() failed
shishi_authenticator_cusec_get() failed
shishi_authenticator_ctime() failed
FAIL: authenticator
PASS: crypto
PASS: gztime
shishi_encprivpart_user_data() failed (1)
shishi_priv_enc_part_etype() failed (1)
shishi_priv_process() failed (1)
FAIL: priv
shishi_safe_user_data() failed (1)
shishi_safe_cksum() failed (1)
(Continue reading)

Permalink | Reply | 0 comments |
headers
Debian testing watch | 27 Mar 18:39
Picon
Favicon

shishi 1.0.1-1 MIGRATED to testing

FYI: The status of the shishi source package
in Debian's testing distribution has changed.

  Previous version: 1.0.0-2
  Current version:  1.0.1-1

--

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.
Permalink | Reply | 0 comments |
headers
Debian FTP Masters | 12 Mar 22:00
Picon
Favicon

shishi_1.0.1-1_amd64.changes ACCEPTED into unstable


Accepted:
libpam-shishi_1.0.1-1_amd64.deb
  to main/s/shishi/libpam-shishi_1.0.1-1_amd64.deb
libshisa-dev_1.0.1-1_amd64.deb
  to main/s/shishi/libshisa-dev_1.0.1-1_amd64.deb
libshisa0_1.0.1-1_amd64.deb
  to main/s/shishi/libshisa0_1.0.1-1_amd64.deb
libshishi-dev_1.0.1-1_amd64.deb
  to main/s/shishi/libshishi-dev_1.0.1-1_amd64.deb
libshishi0_1.0.1-1_amd64.deb
  to main/s/shishi/libshishi0_1.0.1-1_amd64.deb
shisa_1.0.1-1_amd64.deb
  to main/s/shishi/shisa_1.0.1-1_amd64.deb
shishi-common_1.0.1-1_all.deb
  to main/s/shishi/shishi-common_1.0.1-1_all.deb
shishi-dbg_1.0.1-1_amd64.deb
  to main/s/shishi/shishi-dbg_1.0.1-1_amd64.deb
shishi-doc_1.0.1-1_all.deb
  to main/s/shishi/shishi-doc_1.0.1-1_all.deb
shishi-kdc_1.0.1-1_amd64.deb
  to main/s/shishi/shishi-kdc_1.0.1-1_amd64.deb
shishi_1.0.1-1.debian.tar.gz
  to main/s/shishi/shishi_1.0.1-1.debian.tar.gz
shishi_1.0.1-1.dsc
  to main/s/shishi/shishi_1.0.1-1.dsc
shishi_1.0.1-1_amd64.deb
  to main/s/shishi/shishi_1.0.1-1_amd64.deb
shishi_1.0.1.orig.tar.gz
  to main/s/shishi/shishi_1.0.1.orig.tar.gz
(Continue reading)

Permalink | Reply | 0 comments |
headers
Debian FTP Masters | 12 Mar 20:50
Picon
Favicon

Processing of shishi_1.0.1-1_amd64.changes

shishi_1.0.1-1_amd64.changes uploaded successfully to localhost
along with the files:
  shishi_1.0.1-1.dsc
  shishi_1.0.1.orig.tar.gz
  shishi_1.0.1-1.debian.tar.gz
  shishi-common_1.0.1-1_all.deb
  shishi-doc_1.0.1-1_all.deb
  libshishi0_1.0.1-1_amd64.deb
  libshisa0_1.0.1-1_amd64.deb
  shishi_1.0.1-1_amd64.deb
  shishi-dbg_1.0.1-1_amd64.deb
  libshishi-dev_1.0.1-1_amd64.deb
  shisa_1.0.1-1_amd64.deb
  libshisa-dev_1.0.1-1_amd64.deb
  shishi-kdc_1.0.1-1_amd64.deb
  libpam-shishi_1.0.1-1_amd64.deb

Greetings,

	Your Debian queue daemon (running on host franck.debian.org)
Permalink | Reply | 0 comments |
headers
Simon Josefsson | 12 Mar 20:22
Favicon
Gravatar

Shishi 1.0.1 released

Shishi is an implementation of the Kerberos 5 network authentication
system.  Shishi can be used to authenticate users in distributed
systems.  Shishi is part of a GNU system.

* Version 1.0.1 (released 2012-03-12)

** Builds with GnuTLS 3.x.

** minitasn1: Internal copy upgraded to GNU Libtasn1 v2.11.

** Translation updates.
Added Finnish translation, thanks to Jorma Karvonen.

** Update gnulib files.  Many internal cleanups and improvements.

** API and ABI modifications:
No changes since last version.

Shishi contains a library ('libshishi') that can be used by application
developers to add support for Kerberos 5.  Shishi contains a command
line utility ('shishi') that is used by users to acquire and manage
tickets (and more).  The server side, a Key Distribution Center (KDC),
is implemented by 'shishid', and support X.509 authenticated TLS via
GnuTLS.  Of course, a manual documenting usage aspects as well as the
programming API is included.

Shishi currently supports AS/TGS exchanges for acquiring tickets,
pre-authentication, the AP exchange for performing client and server
authentication, and SAFE/PRIV for integrity/privacy protected
application data exchanges.  The DES, 3DES, ARCFOUR, and AES
(Continue reading)

Permalink | Reply | 1 comment |
headers
Ludovic Courtès | 22 Aug 22:35
Picon

Build failure with GnuTLS 3.0

Hello!

Shishi 1.0.0 fails to build with GnuTLS 3.0.1:

--8<---------------cut here---------------start------------->8---
gcc -std=gnu99 -DHAVE_CONFIG_H
-DLOCALEDIR=\"/nix/store/zcic9bq58a33ml4fipxr2d5lybwfxnrb-shishi-1.0.0/share/locale\"
-DSYSTEMCFGFILE=\"/nix/store/zcic9bq58a33ml4fipxr2d5lybwfxnrb-shishi-1.0.0/etc/shishi/shishi.conf\"
-DHOSTKEYSFILE=\"/nix/store/zcic9bq58a33ml4fipxr2d5lybwfxnrb-shishi-1.0.0/etc/shishi/shishi.keys\"
-I. -I..  -I./gl -I./gl -I../gl -I../gl -I../lib -I../lib -I../db  -Wall  -g -O2 -c starttls.c
starttls.c: In function 'logcertinfo':
starttls.c:198:3: warning: implicit declaration of function 'gnutls_certificate_verify_peers'
starttls.c: In function 'kdc_extension':
starttls.c:302:3: warning: 'gnutls_kx_set_priority' is deprecated (declared at /nix/store/01qi6pq9c7h8xklncbvxsc3mjdszpahs-gnutls-3.0.1/include/gnutls/compat.h:286)
[q[pbuilding resume.o
[3s[agcc -std=gnu99 -DHAVE_CONFIG_H
-DLOCALEDIR=\"/nix/store/zcic9bq58a33ml4fipxr2d5lybwfxnrb-shishi-1.0.0/share/locale\"
-DSYSTEMCFGFILE=\"/nix/store/zcic9bq58a33ml4fipxr2d5lybwfxnrb-shishi-1.0.0/etc/shishi/shishi.conf\"
-DHOSTKEYSFILE=\"/nix/store/zcic9bq58a33ml4fipxr2d5lybwfxnrb-shishi-1.0.0/etc/shishi/shishi.keys\"
-I. -I..  -I./gl -I./gl -I../gl -I../gl -I../lib -I../lib -I../db  -Wall  -g -O2 -c resume.c
[q[pbuilding shishid
[3s[a/bin/sh ../libtool --tag=CC   --mode=link gcc -std=gnu99 -Wall  -g -O2   -o shishid shishid.o server.o
kdc.o starttls.o resume.o ../gl/libgnu.la gl/libgnu.la ../lib/libshishi.la ../db/libshisa.la
-lgnutls  libcmd-shishid.la -lresolv 
libtool: link: gcc -std=gnu99 -Wall -g -O2 -o .libs/shishid shishid.o server.o kdc.o starttls.o
resume.o  ../gl/.libs/libgnu.a gl/.libs/libgnu.a ../lib/.libs/libshishi.so
../db/.libs/libshisa.so -lgnutls ./.libs/libcmd-shishid.a -lgcrypt -lgpg-error -lresolv
-Wl,-rpath -Wl,/nix/store/zcic9bq58a33ml4fipxr2d5lybwfxnrb-shishi-1.0.0/lib
starttls.o: In function
`logcertinfo':
(Continue reading)

Permalink | Reply | 1 comment |
headers
Andreas Metzler | 25 Apr 15:03

Bug#624088: shishi: Uses deprecated gnutls_certificate_verify_peers

Package: shishi
Version: 1.0.0-2
Severity: normal
User: ametzler <at> downhill.at.eu.org
Usertags: deprecated-gnutls-2.12

This package is using gnutls_certificate_verify_peers(), a function marked
deprecated in newer stable versions of GnuTLS (>=2.12.x) and removed in
the GnuTLS development version  2.99.1. GnuTLS 2.12.x is already available
in experimental.

Excerpt from buildlog:
====================================================
starttls.c:198:3: warning: 'gnutls_certificate_verify_peers' is deprecated (declared at /usr/include/gnutls/compat.h:330)
====================================================

Please switch from gnutls_certificate_verify_peers to its successor
gnutls_certificate_verify_peers2 (first included in gnutls stable
release 1.2.0).
cu andreas
Permalink | Reply | 1 comment |
headers
Andreas Metzler | 25 Apr 14:21

Bug#624031: shishi: Uses deprecated _set_priority GnuTLS functions

Package: shishi
Version: 1.0.0-2
Severity: normal
User: ametzler <at> downhill.at.eu.org
Usertags: deprecated-gnutls-2.12

This package is using some functions which are marked deprecated in
newer versions of GnuTLS (>=2.12.x). (They are not yet removed, though.)
These functions will be removed in future releases. GnuTLS 2.12.x is
already available in experimental.

Excerpt from buildlog:
====================================================
starttls.c:333:3: warning: 'gnutls_kx_set_priority' is deprecated (declared at /usr/include/gnutls/compat.h:342)
starttls.c:302:3: warning: 'gnutls_kx_set_priority' is deprecated (declared at /usr/include/gnutls/compat.h:342)
====================================================

The gnutls_*_set_priority family of functions has been marked deprecated
in 2.12.x. These functions have been superceded by 
gnutls_priority_set_direct(). The replacement function was added in gnutls
stable release 2.2.0 (released 2007-12-14).

cu Andreas
Permalink | Reply | 1 comment |
headers
John Mitchell | 20 Apr 21:22
Picon

Credential Store

All,

   Is it possible to somehow use an existing password in LDAP to
authenticate a user requesting a ticket? I have a significant
investment in a large LDAP implementation and I want to allow users to
authenticate to services (like UNIX boxes) via the Kerberos protocol
but I would prefer not to replicate the users and/or their credentials
from LDAP into another store.

--

-- 
John P. Mitchell <jpmitchell <at> alaska.edu>
907.450.8320
http://www.alaska.edu/oit/iam
Permalink | Reply | 0 comments |

Gmane