Your message dated Thu, 03 Dec 2020 16:19:23 +0000
with message-id <e1kkrkf-0002th...@fasolo.debian.org>
and subject line Bug#975344: fixed in libapache-mod-auth-kerb 5.4-2.5
has caused the Debian Bug report #975344,
regarding FTBFS with krb5 1.18: significant use of internal
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
975344: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975344
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libkrb5-3
Version: 1.18.2-1
Severity: serious
Justification: Policy 8.6.2
Hi,
libkrb5-3 version 1.18.2-1 breaks apache2 when the kerberos authentication
module is enabled. The error message is:
apache2: Syntax error on line 146 of /etc/apache2/apache2.conf: Syntax error
on line 1 of /etc/apache2/mods-enabled/auth_kerb.load: Cannot load
/usr/lib/apache2/modules/mod_auth_kerb.so into server:
/usr/lib/apache2/modules/mod_auth_kerb.so: undefined symbol:
krb5_rc_resolve_full, version krb5_3_MIT
The error is gone when libkrb5-3 (along with dependencies) is downgraded to
1.17-10.
Listing symbols with nm confirms the missing symbol.
1.17-10:
$ nm -D /usr/lib/x86_64-linux-gnu/libkrb5.so.3 | grep krb5_rc_resolve_full
000000000006a410 T krb5_rc_resolve_full@@krb5_3_MIT
$
1.18.2-1:
$ nm -D /usr/lib/x86_64-linux-gnu/libkrb5.so.3 | grep krb5_rc_resolve_full
$
I think this is the reason for the failing CI runs on ppc64el for squid¹ and
bind9². The other architecture strangely don't fail -- probably because the
test sets are different -- there is no 'apache2' in the passing logs.
¹ https://ci.debian.net/data/autopkgtest/testing/ppc64el/s/squid/8297228/log.gz
² https://ci.debian.net/data/autopkgtest/testing/ppc64el/b/bind9/8297196/log.gz
Removing a symbol deserves a soname bump, per Policy 8.6.2, thus the severity.
Looking at 88f4594e6a34c7b88bcd06ab06be2738113c226b in the packaging repository
I see a lot of removed symbols.
krb5_rc_resolve_full disappears upstream with
dcb853ac32779b173f39e19c0f24b0087de85771. I assume dependencies like
libapache2-mod-auth-kerb will need to adapt to the changes.
Cheers,
Damyan
--- End Message ---
--- Begin Message ---
Source: libapache-mod-auth-kerb
Source-Version: 5.4-2.5
Done: Sam Hartman <hartm...@debian.org>
We believe that the bug you reported is fixed in the latest version of
libapache-mod-auth-kerb, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 975...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sam Hartman <hartm...@debian.org> (supplier of updated libapache-mod-auth-kerb
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 23 Nov 2020 09:34:53 -0500
Source: libapache-mod-auth-kerb
Architecture: source
Version: 5.4-2.5
Distribution: unstable
Urgency: medium
Maintainer: Ghe Rivero <g...@debian.org>
Changed-By: Sam Hartman <hartm...@debian.org>
Closes: 975344
Changes:
libapache-mod-auth-kerb (5.4-2.5) unstable; urgency=medium
.
* Non-maintainer upload.
* Always assume none replay cache type is present, Closes: #975344
Checksums-Sha1:
044532a13d91b9853a0090847542a3e602d5a3b9 1504
libapache-mod-auth-kerb_5.4-2.5.dsc
4f000b78972567697ef7c7e1dda4edfd8c510006 52142
libapache-mod-auth-kerb_5.4-2.5.diff.gz
5d684392e1a3430867a4f4ff0de75c3d3fdae486 5166
libapache-mod-auth-kerb_5.4-2.5_source.buildinfo
Checksums-Sha256:
f6e7808443024e8cad0da743a6e934c4d35a6fdd68ce00666764dc48de8509bf 1504
libapache-mod-auth-kerb_5.4-2.5.dsc
bc9b0cb8d84974b16bcc1567e15a8f9db3ebc5bd5d585cf86b47541b270be1b8 52142
libapache-mod-auth-kerb_5.4-2.5.diff.gz
9c3e44b363f676958865ec2e281ec8b87ec49207868cce1245b27b416324b534 5166
libapache-mod-auth-kerb_5.4-2.5_source.buildinfo
Files:
e458e9a23c3f2de9085a386191e3ba2a 1504 net optional
libapache-mod-auth-kerb_5.4-2.5.dsc
c844eaa8c70c17c4a78f1eee8447ca6a 52142 net optional
libapache-mod-auth-kerb_5.4-2.5.diff.gz
3a6435a35c42c74305cff207750497be 5166 net optional
libapache-mod-auth-kerb_5.4-2.5_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE9Li3nMNy++OFgPTCQe7SUh/WssoFAl/FE3wACgkQQe7SUh/W
ssrWpggAqaBkKnVKPOatl9qebSWWo9V8sDobKJUtWbRcBnesWsdd6ahpW1QoeYBd
yGbqBVeibPIzEJD4khSqCapyYueZw5AH5+UEatwZrSuaIt1De5s0MpDit3QBpO/7
HXPfNGBevG/smxEazZZAlka9O3WKiMIZ76NOeTDHqSBDpokcgCrAwx0mt59Q3vjX
pp/GtFfR60QLydc5eH/T8YsqY394Lrw6pCJbIneEzYBtxxI5TJAHAIqKuHDTv2YB
C5i2//j4t0wx7M+i5Rezpk6yIKKRbSj2UGyPFdO2AlimjhisI2g77XeqU6T+225v
bRooqOMCurWgKKG790d9EVL2eSbM1Q==
=pZGe
-----END PGP SIGNATURE-----
--- End Message ---
