Debian Bug report logs - #419420
cyrus-sasl2: provide GSSAPI modules for Heimdal implementation (libsasl2-modules-gssapi-heimdal)

Package: cyrus-sasl2; Maintainer for cyrus-sasl2 is Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>;

Reported by: Fabian Fagerholm <fabbe@paniq.net>

Date: Sun, 15 Apr 2007 16:30:02 UTC

Severity: wishlist

Fixed in version cyrus-sasl2-heimdal/2.1.22.dfsg1-9

Done: Fabian Fagerholm <fabbe@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>:
Bug#419420; Package cyrus-sasl2. (full text, mbox, link).

Acknowledgement sent to Fabian Fagerholm <fabbe@paniq.net>:
New Bug report received and forwarded. Copy sent to Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>. (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

Package: cyrus-sasl2
Version: 2.1.22.dfsg1-8
Severity: wishlist

Some users would like to have a GSSAPI module for the Heimdal
implementation. A dummy package already exists:
libsasl2-modules-gssapi-heimdal

The Heimdal modules cannot be built out of the same source package as
the MIT modules. However, it should be possible to make the source
package general enough to require very minimal changes to build this
module.

-- 
Fabian Fagerholm <fabbe@paniq.net>

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>:
Bug#419420; Package cyrus-sasl2. (full text, mbox, link).

Acknowledgement sent to Fabian Fagerholm <fabbe@paniq.net>:
Extra info received and forwarded to list. Copy sent to Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>. (full text, mbox, link).

Message #10 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Fri, 2007-04-13 at 09:21 -0700, Russ Allbery wrote:
> It would be nice to have a Heimdal Kerberos modules package.  Heimdal has
> much better performance for some applications, such as OpenLDAP.
> Unfortunately, generating one is a pain because the Heimdal and MIT
> Kerberos development packages can't be installed at the same time, and
> therefore you can't build both sets of modules from the same source
> package.

What would be a convenient way to produce and maintain this additional
source package along with the "main" source package, using our current
SVN repository?

An svn branch seems to be the logical choice. Does anyone foresee
problems with that approach? Another option would be to create a new
top-level directory in svn.

Also, what should the name of the new source package be?
cyrus-sasl2-heimdal?

-- 
Fabian Fagerholm <fabbe@paniq.net>

[signature.asc (application/pgp-signature, inline)]

Acknowledgement sent to Russ Allbery <rra@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>. (full text, mbox, link).

Message #15 received at 419420@bugs.debian.org (full text, mbox, reply):

Fabian Fagerholm <fabbe@paniq.net> writes:

> What would be a convenient way to produce and maintain this additional
> source package along with the "main" source package, using our current
> SVN repository?

> An svn branch seems to be the logical choice. Does anyone foresee
> problems with that approach? Another option would be to create a new
> top-level directory in svn.

A branch with the minimal changes that could be merged with the main
branch periodically seems like the right approach to me.

> Also, what should the name of the new source package be?
> cyrus-sasl2-heimdal?

Yup.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Acknowledgement sent to Roberto C. Sánchez <roberto@connexer.com>:
Extra info received and forwarded to list. Copy sent to Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>. (full text, mbox, link).

Message #20 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Sun, Apr 15, 2007 at 02:39:24PM -0700, Russ Allbery wrote:
> Fabian Fagerholm <fabbe@paniq.net> writes:
> 
> > What would be a convenient way to produce and maintain this additional
> > source package along with the "main" source package, using our current
> > SVN repository?
> 
> > An svn branch seems to be the logical choice. Does anyone foresee
> > problems with that approach? Another option would be to create a new
> > top-level directory in svn.
> 
> A branch with the minimal changes that could be merged with the main
> branch periodically seems like the right approach to me.
> 
> > Also, what should the name of the new source package be?
> > cyrus-sasl2-heimdal?
> 
> Yup.
> 
I think I am not getting something here.  Why must there be a separate
source package?

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Message #25 received at 419420@bugs.debian.org (full text, mbox, reply):

Roberto C Sánchez <roberto@connexer.com> writes:

> I think I am not getting something here.  Why must there be a separate
> source package?

Because you can't install the Heimdal and MIT Kerberos development
packages at the same time.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Message #30 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Sun, Apr 15, 2007 at 05:23:42PM -0700, Russ Allbery wrote:
> Roberto C Sánchez <roberto@connexer.com> writes:
> 
> > I think I am not getting something here.  Why must there be a separate
> > source package?
> 
> Because you can't install the Heimdal and MIT Kerberos development
> packages at the same time.
> 

Thanks for the clarification.

Regards,

-Roberto
-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Message #35 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Sun, 2007-04-15 at 14:39 -0700, Russ Allbery wrote:
> A branch with the minimal changes that could be merged with the main
> branch periodically seems like the right approach to me.

I just committed a very rough initial version in branches/heimdal. The
build log ain't pretty, it has a lot of debhelper complaints, and I'm
thinking about how to make debian/rules general enough to require no or
only a few lines of changes to cope with both the main package and the
heimdal version.

Anyone is welcome to submit improvements, of course.

-- 
Fabian Fagerholm <fabbe@paniq.net>

[signature.asc (application/pgp-signature, inline)]

Message #40 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Mon, 2007-04-16 at 23:18 +0300, Fabian Fagerholm wrote:
> I just committed a very rough initial version in branches/heimdal.

And I just uploaded a slightly more polished version to the archive. It
builds and the final result should work despite the ugliness in the
build log, so I wanted to get it into NEW right away.

> Anyone is welcome to submit improvements, of course.

And that still applies ;)

-- 
Fabian Fagerholm <fabbe@paniq.net>

[signature.asc (application/pgp-signature, inline)]

Message #45 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Fri, Apr 20, 2007 at 07:37:44PM +0300, Fabian Fagerholm wrote:
> On Mon, 2007-04-16 at 23:18 +0300, Fabian Fagerholm wrote:
> > I just committed a very rough initial version in branches/heimdal.
> 
> And I just uploaded a slightly more polished version to the archive. It
> builds and the final result should work despite the ugliness in the
> build log, so I wanted to get it into NEW right away.
> 
> > Anyone is welcome to submit improvements, of course.
> 
> And that still applies ;)
> 
This semester will be over for me (one way or another) by the end of
next week.  After that I will have Lots More Time(TM) :-)

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Tags added: pending Request was from Anibal Monsalve Salazar <anibal@debian.org> to control@bugs.debian.org. (Sat, 21 Apr 2007 00:06:10 GMT) (full text, mbox, link).

Message #52 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Fri, Apr 20, 2007 at 07:37:44PM +0300, Fabian Fagerholm wrote:
> On Mon, 2007-04-16 at 23:18 +0300, Fabian Fagerholm wrote:
> > I just committed a very rough initial version in branches/heimdal.
> 
> And I just uploaded a slightly more polished version to the archive. It
> builds and the final result should work despite the ugliness in the
> build log, so I wanted to get it into NEW right away.
> 
> > Anyone is welcome to submit improvements, of course.
> 
> And that still applies ;)
> 
How close is this package to being in a state where it can be uploaded?

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Message #57 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Sun, Apr 15, 2007 at 01:21:42PM -0500, Dan White wrote:
> 
> The following modifications give me a functioning heimdal module 
> (inside of libsasl2-modules-gssapi-mit), which I'm using 
> successfully so far on a test server:
> 
> Modified debian/control
>   Replaced build-depends on libkrb5-dev with heimdal-dev
>   Removed dependency on libpq-dev
> 
> Modified debian/rules
>   Removed configure option --with-pgsql=/usr/include/postgresql
> 
Out of curiosity, why the removal of postgres support?  I would think
that we want the packages to be as identical as possible with the
exception of the kerberos implementation used.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Acknowledgement sent to Dan White <dwhite@olp.net>:
Extra info received and forwarded to list. Copy sent to Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org>. (full text, mbox, link).

Message #62 received at 419420@bugs.debian.org (full text, mbox, reply):

Roberto C. Sánchez wrote:
> On Sun, Apr 15, 2007 at 01:21:42PM -0500, Dan White wrote:
>> The following modifications give me a functioning heimdal module 
>> (inside of libsasl2-modules-gssapi-mit), which I'm using 
>> successfully so far on a test server:
>>
>> Modified debian/control
>>   Replaced build-depends on libkrb5-dev with heimdal-dev
>>   Removed dependency on libpq-dev
>>
>> Modified debian/rules
>>   Removed configure option --with-pgsql=/usr/include/postgresql
>>
> Out of curiosity, why the removal of postgres support?  I would think
> that we want the packages to be as identical as possible with the
> exception of the kerberos implementation used.

libpq-dev depends on libkrb5-dev, which conflicts with heimdal-dev.

Message #67 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Tue, Apr 24, 2007 at 08:37:41PM -0500, Dan White wrote:
> Roberto C. Sánchez wrote:
> >>
> >Out of curiosity, why the removal of postgres support?  I would think
> >that we want the packages to be as identical as possible with the
> >exception of the kerberos implementation used.
> 
> libpq-dev depends on libkrb5-dev, which conflicts with heimdal-dev.

Ahh.  I am running Etch on my main workstation, and so it was not
immediately apparent to me.  I wonder if the postgres maintainers would
consider making theirs MIT | Heimdal?

Regards,

-Roberto
-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Message #72 received at 419420@bugs.debian.org (full text, mbox, reply):

Roberto C Sánchez <roberto@connexer.com> writes:
> On Tue, Apr 24, 2007 at 08:37:41PM -0500, Dan White wrote:

>> libpq-dev depends on libkrb5-dev, which conflicts with heimdal-dev.

> Ahh.  I am running Etch on my main workstation, and so it was not
> immediately apparent to me.  I wonder if the postgres maintainers would
> consider making theirs MIT | Heimdal?

You can't really do that.  If the PostgreSQL libraries expose any of the
underlying Kerberos libraries, you can't just replace MIT Kerberos with
Heimdal after the fact.  Things won't compile.

(Although a more basic question is why the libpq-dev package depends on
libkrb5-dev, and if it's just libtool transitive dependencies or static
library dependencies or something more useful.)

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Message #77 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Tue, Apr 24, 2007 at 06:56:38PM -0700, Russ Allbery wrote:
> Roberto C Sánchez <roberto@connexer.com> writes:
> > On Tue, Apr 24, 2007 at 08:37:41PM -0500, Dan White wrote:
> 
> >> libpq-dev depends on libkrb5-dev, which conflicts with heimdal-dev.
> 
> > Ahh.  I am running Etch on my main workstation, and so it was not
> > immediately apparent to me.  I wonder if the postgres maintainers would
> > consider making theirs MIT | Heimdal?
> 
> You can't really do that.  If the PostgreSQL libraries expose any of the
> underlying Kerberos libraries, you can't just replace MIT Kerberos with
> Heimdal after the fact.  Things won't compile.
> 
I guess I wasn't clear.  I meant to see if it was possible for them to
do something similar to what we are doing (with a second minimal source
package for the Heimdal implementation).

> (Although a more basic question is why the libpq-dev package depends on
> libkrb5-dev, and if it's just libtool transitive dependencies or static
> library dependencies or something more useful.)
> 
It is probably best to find this out first.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Message #82 received at 419420@bugs.debian.org (full text, mbox, reply):

Roberto C Sánchez <roberto@connexer.com> writes:
> On Tue, Apr 24, 2007 at 06:56:38PM -0700, Russ Allbery wrote:

>> You can't really do that.  If the PostgreSQL libraries expose any of
>> the underlying Kerberos libraries, you can't just replace MIT Kerberos
>> with Heimdal after the fact.  Things won't compile.

> I guess I wasn't clear.  I meant to see if it was possible for them to
> do something similar to what we are doing (with a second minimal source
> package for the Heimdal implementation).

I guess I'm not sure why they'd want to.  Heimdal has different
performance characteristics in Cyrus SASL that are specifically useful for
running OpenLDAP servers, but it's usually not useful to build every
package in Debian against all Kerberos implementations.  If PostgreSQL is
working well with MIT Kerberos, it's probably more hassle than it's worth
to maintain alternate libraries.

Is the PostgreSQL support used by the GSSAPI module in Cyrus SASL?  I'm
not sure why that would be the case, and if it isn't, why would we want to
build with PostgreSQL in the Heimdal build?  The only package produced by
that source package is a Heimdal GSSAPI module package, so I'd do a
minimal build that produces that module.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Message #87 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Tue, 2007-04-24 at 20:28 -0700, Russ Allbery wrote:
> Is the PostgreSQL support used by the GSSAPI module in Cyrus SASL?  I'm
> not sure why that would be the case, and if it isn't, why would we want to
> build with PostgreSQL in the Heimdal build?  The only package produced by
> that source package is a Heimdal GSSAPI module package, so I'd do a
> minimal build that produces that module.

Exactly. The PostgreSQL code is used in the -modules-sql package. The
-modules-gssapi-* packages don't include any PostgreSQL stuff. (At least
I can't imagine why they would, and if they do, the dependencies are
wrong.)

The build can be further optimised by not building lots of other
unnecessary modules. My plan is to make a single debian/rules file with
all the relevant configure flags moved to the top of the file. That way,
the diff between the heimdal source package and the main source package
is trivial, and any enhancements should be easy to merge.

(The reason for uploading this version of -modules-gssapi-heimdal was to
get it into NEW immediately, so it would pass through NEW in a
reasonable time. Work continues, of course.)

-- 
Fabian Fagerholm <fabbe@paniq.net>

[signature.asc (application/pgp-signature, inline)]

Message #92 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Wed, Apr 25, 2007 at 09:54:13AM +0300, Fabian Fagerholm wrote:
> 
> Exactly. The PostgreSQL code is used in the -modules-sql package. The
> -modules-gssapi-* packages don't include any PostgreSQL stuff. (At least
> I can't imagine why they would, and if they do, the dependencies are
> wrong.)
> 
Doh. I had not noticed that.

> The build can be further optimised by not building lots of other
> unnecessary modules. My plan is to make a single debian/rules file with
> all the relevant configure flags moved to the top of the file. That way,
> the diff between the heimdal source package and the main source package
> is trivial, and any enhancements should be easy to merge.
> 
Good plan.

> (The reason for uploading this version of -modules-gssapi-heimdal was to
> get it into NEW immediately, so it would pass through NEW in a
> reasonable time. Work continues, of course.)
> 
Ah.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Message #97 received at 419420@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Tue, Apr 24, 2007 at 08:28:48PM -0700, Russ Allbery wrote:
> 
> I guess I'm not sure why they'd want to.  Heimdal has different
> performance characteristics in Cyrus SASL that are specifically useful for
> running OpenLDAP servers, but it's usually not useful to build every
> package in Debian against all Kerberos implementations.  If PostgreSQL is
> working well with MIT Kerberos, it's probably more hassle than it's worth
> to maintain alternate libraries.
> 
Oh OK.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[signature.asc (application/pgp-signature, inline)]

Reply sent to Fabian Fagerholm <fabbe@debian.org>:
You have taken responsibility. (full text, mbox, link).

Notification sent to Fabian Fagerholm <fabbe@paniq.net>:
Bug acknowledged by developer. (full text, mbox, link).

Message #102 received at 419420-close@bugs.debian.org (full text, mbox, reply):

Source: cyrus-sasl2-heimdal
Source-Version: 2.1.22.dfsg1-9

We believe that the bug you reported is fixed in the latest version of
cyrus-sasl2-heimdal, which is due to be installed in the Debian FTP archive:

cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-9_i386.deb
  to pool/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-9_i386.deb
cyrus-sasl2-heimdal_2.1.22.dfsg1-9.diff.gz
  to pool/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal_2.1.22.dfsg1-9.diff.gz
cyrus-sasl2-heimdal_2.1.22.dfsg1-9.dsc
  to pool/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal_2.1.22.dfsg1-9.dsc
cyrus-sasl2-heimdal_2.1.22.dfsg1.orig.tar.gz
  to pool/main/c/cyrus-sasl2-heimdal/cyrus-sasl2-heimdal_2.1.22.dfsg1.orig.tar.gz
libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-9_i386.deb
  to pool/main/c/cyrus-sasl2-heimdal/libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-9_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 419420@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Fabian Fagerholm <fabbe@debian.org> (supplier of updated cyrus-sasl2-heimdal package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri, 20 Apr 2007 18:01:48 +0300
Source: cyrus-sasl2-heimdal
Binary: cyrus-sasl2-heimdal-dbg libsasl2-modules-gssapi-heimdal
Architecture: source i386
Version: 2.1.22.dfsg1-9
Distribution: unstable
Urgency: low
Maintainer: Fabian Fagerholm <fabbe@debian.org>
Changed-By: Fabian Fagerholm <fabbe@debian.org>
Description: 
 cyrus-sasl2-heimdal-dbg - Debugging symbols for Cyrus SASL
 libsasl2-modules-gssapi-heimdal - Pluggable Authentication Modules for SASL (GSSAPI)
Closes: 419420
Changes: 
 cyrus-sasl2-heimdal (2.1.22.dfsg1-9) unstable; urgency=low
 .
   [ Fabian Fagerholm ]
   * Introduce new source package to build Heimdal version of GSSAPI
     module (Closes: #419420).
Files: 
 0a3a519584fb53f346eef77fb12ee2a2 1123 libs optional cyrus-sasl2-heimdal_2.1.22.dfsg1-9.dsc
 f196299b2c07f822c8c56db71b7dc7db 1370731 libs optional cyrus-sasl2-heimdal_2.1.22.dfsg1.orig.tar.gz
 f3d08482d5a548487d46b4dd52ae3d9e 22521 libs optional cyrus-sasl2-heimdal_2.1.22.dfsg1-9.diff.gz
 ff184dfcef3f4f905d3e0d6b6e519683 64382 libs optional libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-9_i386.deb
 66bd0496b545cb3acc79b2ad629da863 66314 libdevel extra cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-9_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGKOmx76VUNpZBmeIRArrmAJ4ubTCdpaPwHZ2d/9l/hLyEPej4xwCeL5bl
t937PCIkR7NniiAl2kn2qBs=
=DvxV
-----END PGP SIGNATURE-----

No longer marked as found in versions 2.1.22.dfsg1-8. Request was from Andreas Beckmann <anbe@debian.org> to control@bugs.debian.org. (Sat, 02 Nov 2013 15:57:22 GMT) (full text, mbox, link).

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 01 Dec 2013 07:30:31 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Oct 11 23:38:52 2017; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Debian Bug report logs - #419420 cyrus-sasl2: provide GSSAPI modules for Heimdal implementation (libsasl2-modules-gssapi-heimdal)

Debian Bug report logs - #419420
cyrus-sasl2: provide GSSAPI modules for Heimdal implementation (libsasl2-modules-gssapi-heimdal)