Debian Bug report logs - #498476
libsmi2-common: libsmi ships MIB files licensed under a restrictive license

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: libsmi2-common: libsmi ships MIB files licensed under a restrictive license

Date: Wed, 10 Sep 2008 11:37:51 +0200

Package: libsmi2-common
Version: 0.4.7+dfsg-0.1
Severity: serious
Justification: Policy 2.1

Hi!

libsmi2-common contains a lot of MIB licensed under a restrictive
license. I did not look at all of them but most of those under ietf
directory are licensed in the same manner as the corresponding RFC.
Those RFC are non-free:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
 http://wiki.debian.org/NonFreeIETFDocuments
 
I will ask an etch-ignore tag for this bug for lenny since it is too
late for any correction.

Possible correction could be (a mix of):
 - wipe comments and description of all MIB
 - rewrite them and ship only essentials one
 - move the non essential MIB to non-free
Non solution includes:
 - don't ship them at all (the package will be unusable)
 - ship the whole package in non-free (a lot of packages will go into
   contrib and no support would be provided)
 
Another similar bug report will be filed against libsnmp-base that has
the same problem.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/1 CPU core)
Locale: LANG=fr_FR@euro, LC_CTYPE=fr_FR@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/dash

-- no debconf information

Message #10 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: debian-release@lists.debian.org

Cc: 498476@bugs.debian.org, 498475@bugs.debian.org

Subject: Lenny-Ignore tag request for SNMP related bugs

Date: Wed, 10 Sep 2008 12:03:01 +0200

[Message part 1 (text/plain, inline)]

Hi!

I have just opened two bugs against libsmi-common and libsnmp-base:
 http://bugs.debian.org/498476
 http://bugs.debian.org/498475

Those packages  ship MIB files that  are non-free (same  license as IETF
RFC).  However, there is  no quick  fix: removing  those files  make the
packages unusable,  moving to non-free  make a lot of  important package
(snmpd) move to contrib, etc.

I think we should fix this issue after Lenny. Therefore, I would like to
tag those bugs with lenny-ignore.

Thanks.
-- 
No fortunes found

[Message part 2 (application/pgp-signature, inline)]

Message #15 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Andreas Barth <aba@not.so.argh.org>

To: debian-release@lists.debian.org, 498476@bugs.debian.org, 498475@bugs.debian.org

Subject: Re: Lenny-Ignore tag request for SNMP related bugs

Date: Sun, 21 Sep 2008 10:45:00 +0200

tag 498475 + lenny-ignore
tag 498476 + lenny-ignore
thanks

* Vincent Bernat (bernat@debian.org) [080910 12:08]:
> Those packages  ship MIB files that  are non-free (same  license as IETF
> RFC).  However, there is  no quick  fix: removing  those files  make the
> packages unusable,  moving to non-free  make a lot of  important package
> (snmpd) move to contrib, etc.

I fear you're right. :(


Cheers,
Andi

Message #24 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Luk Claes <luk@debian.org>

To: 498475@bugs.debian.org, 498476@bugs.debian.org

Subject: MIB files licensed under a restrictive license

Date: Sat, 22 Aug 2009 17:06:25 +0200

Hi

It seems the Net-SNMP Packaging Team has found a solution to this
license problem as #498475 was recently tagged pending.

Can you please share the solution with the libsmi maintainer so we can
have both bugs fixed soon, TIA?

Cheers

Luk

Message #29 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Luk Claes <luk@debian.org>

Cc: 498476@bugs.debian.org, 498475@bugs.debian.org

Subject: Re: Bug#498476: MIB files licensed under a restrictive license

Date: Tue, 25 Aug 2009 18:16:51 +0200

[Message part 1 (text/plain, inline)]

OoO Lors de la soirée naissante  du samedi 22 août 2009, vers 17:06, Luk
Claes <luk@debian.org> disait :

> It seems the Net-SNMP Packaging Team has found a solution to this
> license problem as #498475 was recently tagged pending.

> Can you please share the solution with the libsmi maintainer so we can
> have both bugs fixed soon, TIA?

I have  found the fix in  SVN repository for  net-snmp package. Net-SNMP
comes with a makefile to download  and install MIB. This makefile is now
shipped in place of MIBs.
-- 
BOFH excuse #248:
Too much radiation coming from the soil.

[Message part 2 (application/pgp-signature, inline)]

Message #34 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Jochen Friedrich <jochen@scram.de>

To: Vincent Bernat <bernat@debian.org>, 498475@bugs.debian.org

Cc: Luk Claes <luk@debian.org>, 498476@bugs.debian.org

Subject: Re: [Pkg-net-snmp-devel] Bug#498475: Bug#498476: MIB files licensed under a restrictive license

Date: Tue, 25 Aug 2009 19:27:03 +0200

Hi Vincent,

> I have  found the fix in  SVN repository for  net-snmp package. Net-SNMP
> comes with a makefile to download  and install MIB. This makefile is now
> shipped in place of MIBs.

That's true. Before uploading, I just want to add some installation 
dialog asking the user if the MIBS should be downloaded now or if the 
user wants to do this later or by hand.

The same could be done for SMI, as well. Or both could even be combined 
(making libsnmp-base only ship the NET-SNMP and former UCD MIBS 
integrated into the libsmi MIB tree). This would at least avoid the need 
to store these non-free MIBs twice in case both packages are being used.

Thanks,
Jochen

Message #39 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Jochen Friedrich <jochen@scram.de>

Cc: 498476@bugs.debian.org, 498475@bugs.debian.org, Luk Claes <luk@debian.org>

Subject: Re: Bug#498476: [Pkg-net-snmp-devel] Bug#498475: Bug#498476: MIB files licensed under a restrictive license

Date: Tue, 25 Aug 2009 19:52:03 +0200

[Message part 1 (text/plain, inline)]

Hi Jochen!

OoO Pendant le repas du mardi 25 août 2009, vers 19:27, Jochen Friedrich
<jochen@scram.de> disait :

>> I have  found the fix in  SVN repository for  net-snmp package. Net-SNMP
>> comes with a makefile to download  and install MIB. This makefile is now
>> shipped in place of MIBs.

> That's true. Before uploading, I just want to add some installation
> dialog asking the user if the MIBS should be downloaded now or if the
> user wants to do this later or by hand.

> The same could be done for SMI, as well. Or both could even be
> combined (making libsnmp-base only ship the NET-SNMP and former UCD
> MIBS integrated into the libsmi MIB tree). This would at least avoid
> the need to store these non-free MIBs twice in case both packages are
> being used.

Yes, it would be  nice. libsmi is a bit picky on  MIB names. It does not
like the filename  being prefixed by ".txt" because it  does not seem to
parse the file to get real  MIB name (except if you explicitely load the
file).  On  the  other  hand,  some  people may  rely  on  the  complete
filename. I  need to think  a bit about  this. Maybe a simple  patch for
libsmi would do the trick. Upstream is easy to work with.

I also think we should try to  get a package pulling MIB (maybe the user
could  select  them  too)  that  would  be used  by  both  net-snmp  and
libsmi.  libsmi  seems  to ship  more  MIB  but  there is  no  automated
mechanism to fetch them.  Therefore, it  should be easier to use the one
From NetSNMP.
-- 
Make input easy to proofread.
            - The Elements of Programming Style (Kernighan & Plauger)

[Message part 2 (application/pgp-signature, inline)]

Message #44 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Luk Claes <luk@debian.org>

To: 498476@bugs.debian.org

Subject: Re: libsmi2-common: libsmi ships MIB files licensed under a restrictive license

Date: Fri, 02 Oct 2009 23:58:55 +0200

Hi

What's the status of fixing this bug?

Cheers

Luk

Message #49 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: Luk Claes <luk@debian.org>

Cc: 498476@bugs.debian.org

Subject: Re: Bug#498476: libsmi2-common: libsmi ships MIB files licensed under a restrictive license

Date: Sat, 10 Oct 2009 19:02:03 +0200

[Message part 1 (text/plain, inline)]

OoO La nuit ayant déjà recouvert  d'encre ce jour du vendredi 02 octobre
2009, vers 23:58, Luk Claes <luk@debian.org> disait :

> What's the status of fixing this bug?

Hi Luk!

I prefer  to wait for  the release of  new libsnmp-base package  in case
something goes wrong.
-- 
FUNNY NOISES ARE NOT FUNNY
FUNNY NOISES ARE NOT FUNNY
FUNNY NOISES ARE NOT FUNNY
-+- Bart Simpson on chalkboard in episode 8F20

[Message part 2 (application/pgp-signature, inline)]

Message #56 received at 498476@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@luffy.cx>

To: 498476@bugs.debian.org, control@bugs.debian.org

Subject: Fix pending

Date: Sun, 15 Nov 2009 12:48:13 +0100

tag 498476 + pending
thanks

Hi!

A  fix  for  this  issue  is  pending.  I  will  upload  a  new  package
libsmi-mibs-nonfree     in     non-free     which     should     replace
libsmi2-common. After this upload, I will upload a new version of libsmi
not shipping any MIB. A NEWS.Debian file will explain the change.
-- 
 /* Am I fucking pedantic or what? */
	2.2.16 /usr/src/linux/drivers/scsi/qlogicpti.h

Message #61 received at 498476-close@bugs.debian.org (full text, mbox, reply):

From: Vincent Bernat <bernat@debian.org>

To: 498476-close@bugs.debian.org

Subject: Bug#498476: fixed in libsmi 0.4.8+dfsg2-1

Date: Sat, 28 Nov 2009 22:35:32 +0000

Source: libsmi
Source-Version: 0.4.8+dfsg2-1

We believe that the bug you reported is fixed in the latest version of
libsmi, which is due to be installed in the Debian FTP archive:

libsmi2-common_0.4.8+dfsg2-1_all.deb
  to main/libs/libsmi/libsmi2-common_0.4.8+dfsg2-1_all.deb
libsmi2-dbg_0.4.8+dfsg2-1_amd64.deb
  to main/libs/libsmi/libsmi2-dbg_0.4.8+dfsg2-1_amd64.deb
libsmi2-dev_0.4.8+dfsg2-1_amd64.deb
  to main/libs/libsmi/libsmi2-dev_0.4.8+dfsg2-1_amd64.deb
libsmi2ldbl_0.4.8+dfsg2-1_amd64.deb
  to main/libs/libsmi/libsmi2ldbl_0.4.8+dfsg2-1_amd64.deb
libsmi_0.4.8+dfsg2-1.diff.gz
  to main/libs/libsmi/libsmi_0.4.8+dfsg2-1.diff.gz
libsmi_0.4.8+dfsg2-1.dsc
  to main/libs/libsmi/libsmi_0.4.8+dfsg2-1.dsc
libsmi_0.4.8+dfsg2.orig.tar.gz
  to main/libs/libsmi/libsmi_0.4.8+dfsg2.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 498476@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vincent Bernat <bernat@debian.org> (supplier of updated libsmi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 15 Nov 2009 12:15:07 +0100
Source: libsmi
Binary: libsmi2ldbl libsmi2-dev libsmi2-dbg libsmi2-common
Architecture: source all amd64
Version: 0.4.8+dfsg2-1
Distribution: experimental
Urgency: low
Maintainer: Vincent Bernat <bernat@debian.org>
Changed-By: Vincent Bernat <bernat@debian.org>
Description: 
 libsmi2-common - a library to access SMI MIB information - MIB module files
 libsmi2-dbg - library to access SMI MIB information - debugging symbols
 libsmi2-dev - library to access SMI MIB information - development files
 libsmi2ldbl - library to access SMI MIB information
Closes: 498476 558128
Changes: 
 libsmi (0.4.8+dfsg2-1) experimental; urgency=low
 .
   * Repack the upstream tarball to drop all MIB: those are licensed like
     IETF RFC and therefore will be provided by a non-free/contrib
     package. For the moment, we suggest libsnmp-base for this purpose.
     Closes: #498476.
   * libsmi2-common is now an empty transitional package (which suggests
     libsnmp-base).
   * Ship to experimental until we know the definitive name of the package
     that will download MIB.
   * Add a NEWS.Debian file to explain the change. We will change it later.
   * Bump Standards-Version to 3.8.3.
   * Add a patch from Jochen Friedrich to enhance smistrip. Closes: #558128.
Checksums-Sha1: 
 17175ce58d75cac6103ca26ab2ecd3b4d80a9568 1236 libsmi_0.4.8+dfsg2-1.dsc
 a51044ae2d5f4a045354fa16245f3ae040999c40 1803126 libsmi_0.4.8+dfsg2.orig.tar.gz
 2a26c53200d652684f54c986fe3493304e9c987c 9738 libsmi_0.4.8+dfsg2-1.diff.gz
 85fad1db889f157a21c24695ae2f2e6152a2928b 24818 libsmi2-common_0.4.8+dfsg2-1_all.deb
 18f8fb2f951c2cbc702cc8251405bd0ff618a5b2 360010 libsmi2ldbl_0.4.8+dfsg2-1_amd64.deb
 9535a2810ec82e89a30f8c55004f0a0d761efd7e 169264 libsmi2-dev_0.4.8+dfsg2-1_amd64.deb
 790a805efc4ec80c5d00cf47f5f4923b5fe95c65 409828 libsmi2-dbg_0.4.8+dfsg2-1_amd64.deb
Checksums-Sha256: 
 bf869d8561e9b77dd7c6998030b264a77d693d9f227e236ecf7922f4f31d27a0 1236 libsmi_0.4.8+dfsg2-1.dsc
 1d6894aa4aa73f8949ccb420a57e4e1275f8099c187771a41838e30a703269e8 1803126 libsmi_0.4.8+dfsg2.orig.tar.gz
 1c0bd0b6cb9b2ecef8344ad6847359470108b02c3545f0105d917cf8beb6f81e 9738 libsmi_0.4.8+dfsg2-1.diff.gz
 5c31c27f76fef54e6bca66df8c64af6c905aedb047b2610ffbd6d04ea2e53e30 24818 libsmi2-common_0.4.8+dfsg2-1_all.deb
 5f844738b97627c01d99b89cf9d4fef864a78578c94ad1b7a8a09f126faef33c 360010 libsmi2ldbl_0.4.8+dfsg2-1_amd64.deb
 781af659fe6a834586dc17e3155b5a8fbda525f6bd082486e080e820505d6796 169264 libsmi2-dev_0.4.8+dfsg2-1_amd64.deb
 8c3a0c9f25b71df782bca3abc0e749e1b658f952022732721cb1d00c9999c060 409828 libsmi2-dbg_0.4.8+dfsg2-1_amd64.deb
Files: 
 2d3ec2f90daf13c9c347e9f42d2ae7b9 1236 libs optional libsmi_0.4.8+dfsg2-1.dsc
 bc3c2e63930dfd97e44bd81480f503b6 1803126 libs optional libsmi_0.4.8+dfsg2.orig.tar.gz
 cac9b0b1f6043132fbf9e235e986d6b0 9738 libs optional libsmi_0.4.8+dfsg2-1.diff.gz
 0788f918db04203bbb3cd89b3181f387 24818 misc optional libsmi2-common_0.4.8+dfsg2-1_all.deb
 dada6157404d3ddb5ab635f1592811fc 360010 libs optional libsmi2ldbl_0.4.8+dfsg2-1_amd64.deb
 c7e5309b02322c1f98d6c35a9d5f2e38 169264 libdevel optional libsmi2-dev_0.4.8+dfsg2-1_amd64.deb
 06d74326a4a6196275f71cdee153750c 409828 debug extra libsmi2-dbg_0.4.8+dfsg2-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAksRoloACgkQKFvXofIqeU4kzACdFoHbxZgi+HORJY/TAnfptRzw
yHEAoKSslbO3sSZTvsZiuxvBFJwr3ciT
=K8fp
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.