Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian....@packages.debian.org
Usertags: pu
Dear stable release team,
This version of GOsa² drops obsoleted dependency on php-mcrypt (removed
from PHP 7.2).
The php-mcrypt functionality has been replaced by code that utilizes
the openssl support in PHP.
For new installations of GOsa², there is nothing to do.
People upgrading from a previous GOsa² version, please follow these
steps:
* check if /etc/gosa/gosa.conf contains hashed values for passwords
* if so, run the script (exactly once!):gosa-mcrypt-to-openssl-passwords
People using GOsa² on Debian stretch who plan to upgrade to GOsa² from
Debian buster, must make sure that they do the above explained
crypto-transition while still on Debian stretch (which ships php7.0 that
still has php-mcrypt). (See #925138).
The crypto-transition won't be technically possible on Debian buster
due to missing php-mcrypt.
Other than the crypto-transition, this version of GOsa drops support
for gosa-plugin-fai, gosa-plugin-opsi and gosa-plugin-heimdal (not maintained
upstream anymore, not functional anymore).
Instead of extracting the crypto-transition changes from buster's GOsa²
version, the preferred approach of handling this is getting all benefits
of buster's GOsa into Debian stretch (which basically matches GOsa² in
stretch-backports). Note, that the GOsa² from stretch-backports has been
well tested over months on production servers running Debian Edu at
schools in Schleswig-Holstein, Germany.
light+love
Mike
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-2-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
