"Adam D. Barratt" <a...@adam-barratt.org.uk> writes: > On Thu, 2009-01-01 at 09:29 -0800, Russ Allbery wrote:
>> However, I don't know how to distinguish between the dpkg-reconfigure >> case and the reinstall case, where I presume the user's local changes >> should always be maintained. > The config script will be called with the argument "reconfigure"; the > prerm and postinst are called with "upgrade" and "configure" as usual, > but with $DPKG_RECONFIGURE set to 1. > This doesn't appear to be documented anywhere that I can find at the > moment, so the above is based on my reading of dpkg-reconfigure itself > (thankfully it's quite small and easy to follow). A quick look through > /var/lib/dpkg/info/ on this system suggests that a number of other > packages have other expectations. Oh, excellent. Hm. *ponder*. I'm not sure I have a good mental model of how this should work so that both manual edits or exclusive use of debconf could be supported. The postinst script, when running under dpkg-reconfigure, needs to know if the krb5.conf file has been manually edited or not. It sounds like it needs to have a checksum of the version that it previously wrote out and only edit the file if it still matches that checksum. Ah, I see, this is exactly the problem that ucf solves. I think this means that to be Policy-compliant, kerberos-configs either needs to start using ucf now (which really makes me nervous right before a release) or needs to break changing the krb5.conf file with dpkg-reconfigure once it's been generated (and then plan on using ucf for squeeze). Sam, do you have an opinion on this? The basic problem right now is that if you install krb5-config, edit /etc/krb5.conf to change the default realm without telling debconf, and then upgrade krb5-config, it will revert your change, which is in violation of Policy 10.7.3. Also, if you intentionally don't list your local realm KDCs in krb5.conf but don't tell debconf that you're using DNS, you'll keep getting prompted for your local KDCs. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
