[Bug 496922] Re: Ubuntu snmpd package doesn't include all net-snmpd modules

[Adam Stokes]

Hi,

Could the people affected please explain what is not working? Using
'exec' is deprecated and should be replaced with 'extend'. Was this
option tried and you still failed to see results?

Also attaching some example configurations using the 'extend' feature
would be helpful in pinpointing this issue.

Thanks,
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to net-snmp in Ubuntu.
https://bugs.launchpad.net/bugs/496922

Title:
  Ubuntu snmpd package doesn't include all net-snmpd modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/496922/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

** Description changed:

- On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd'
- field to anything with 'ldap' as the first item breaks the ability to
- become root using 'su' and 'sudo' as anyone but root.
+ SRU Request:
+ 
+ [Impact]
+ As heavily outlined in the amount of comments in this bug the impact is 
detrimental to both community and enterprise users alike.
+ 
+ [Development Fix]
+ Howard Chu released a patch in #73 which was later confirmed in #106 & #108 
as a resolution. The patch has since then made its way into the latest 
development tree.
+ 
+ [Stable Fix]
+ Patch from #73 can be applied cleanly to Lucid and new distributions.
+ 
+ [Test Case]
+ On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field 
to anything with 'ldap' as the first item breaks the ability to become root 
using 'su' and 'sudo' as anyone but root.
  
  Default nsswitch.conf:
  
  passwd: compat
  group:  compat
  shadow: compat
  
  matt@box:~$ sudo uname -a
  [sudo] password for matt:
  Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 
GNU/Linux
  
  matt@box:~$ su -
  Password:
  root@box:~#
  
  Modified nsswitch.conf with 'ldap' before 'compat':
  
  passwd: ldap compat
  group:  ldap compat
  shadow: ldap compat
  
  matt@box:~$ sudo uname -a
  sudo: setreuid(ROOT_UID, user_uid): Operation not permitted
  
  matt@box:~$ su -
  Password:
  setgid: Operation not permitted
  
  Modified nsswitch.conf with 'ldap' after 'compat':
  
  passwd: compat ldap
  group:  compat ldap
  shadow: compat ldap
  
  matt@box:~$ sudo uname -a
  [sudo] password for matt:
  Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 
GNU/Linux
  
  matt@box:~$ su -
  Password:
  root@box:~#
  
  The same arrangements in nsswitch.conf work as expected in Jaunty and
  earlier releases.
  
+ [Regression Potential]
+ This should be minimal as the code change only addresses the duplicating 
global_init during thread callbacks.
+ 
+ 
  Lucid Release Note:
  
  == NSS via LDAP+SSL breaks setuid applications like sudo ==
  
  Upgrading systems configured to use ldap over ssl as the first service
  in the nss stack (in nsswitch.conf) leads to a broken nss resolution for
  setuid applications after the upgrade to Lucid (for example sudo would
  stop working). There isn't any simple workaround for now. One option is
  to switch to libnss-ldapd in place of libnss-ldap before the upgrade.
  Another one consists in using nscd before the upgrade.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

** Description changed:

  SRU Request:
  
  [Impact]
  As heavily outlined in the amount of comments in this bug the impact is 
detrimental to both community and enterprise users alike.
  
  [Development Fix]
- Howard Chu released a patch in #73 which was later confirmed in #106 & #108 
as a resolution. The patch has since then made its way into the latest 
development tree.
+ Howard Chu released a patch in #73 which was later confirmed in #106 & #108 
as a resolution.
  
  [Stable Fix]
  Patch from #73 can be applied cleanly to Lucid and new distributions.
  
  [Test Case]
  On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field 
to anything with 'ldap' as the first item breaks the ability to become root 
using 'su' and 'sudo' as anyone but root.
  
  Default nsswitch.conf:
  
  passwd: compat
  group:  compat
  shadow: compat
  
  matt@box:~$ sudo uname -a
  [sudo] password for matt:
  Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 
GNU/Linux
  
  matt@box:~$ su -
  Password:
  root@box:~#
  
  Modified nsswitch.conf with 'ldap' before 'compat':
  
  passwd: ldap compat
  group:  ldap compat
  shadow: ldap compat
  
  matt@box:~$ sudo uname -a
  sudo: setreuid(ROOT_UID, user_uid): Operation not permitted
  
  matt@box:~$ su -
  Password:
  setgid: Operation not permitted
  
  Modified nsswitch.conf with 'ldap' after 'compat':
  
  passwd: compat ldap
  group:  compat ldap
  shadow: compat ldap
  
  matt@box:~$ sudo uname -a
  [sudo] password for matt:
  Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 
GNU/Linux
  
  matt@box:~$ su -
  Password:
  root@box:~#
  
  The same arrangements in nsswitch.conf work as expected in Jaunty and
  earlier releases.
  
  [Regression Potential]
  This should be minimal as the code change only addresses the duplicating 
global_init during thread callbacks.
  
- 
  Lucid Release Note:
  
  == NSS via LDAP+SSL breaks setuid applications like sudo ==
  
  Upgrading systems configured to use ldap over ssl as the first service
  in the nss stack (in nsswitch.conf) leads to a broken nss resolution for
  setuid applications after the upgrade to Lucid (for example sudo would
  stop working). There isn't any simple workaround for now. One option is
  to switch to libnss-ldapd in place of libnss-ldap before the upgrade.
  Another one consists in using nscd before the upgrade.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

** Branch linked: lp:~adam-stokes/ubuntu/quantal/libgcrypt11/libgcrypt-
fix-423252

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

Precise debdiff for SRU

** Patch added: "libgcrypt11_1.5.0-3ubuntu1.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/423252/+attachment/3149496/+files/libgcrypt11_1.5.0-3ubuntu1.precise.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

** Patch added: "Oneiric-proposed debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/libgcrypt11/+bug/423252/+attachment/3150693/+files/libgcrypt11_1.5.0-1ubuntu0.1.oneiric.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

natty-proposed debdiff

** Patch added: "libgcrypt11_1.4.6-4ubuntu2.1.natty.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/libgcrypt11/+bug/423252/+attachment/3150719/+files/libgcrypt11_1.4.6-4ubuntu2.1.natty.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

Lucid-proposed debiff

** Patch added: "libgcrypt11_1.4.4-5ubuntu2.1.lucid.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/423252/+attachment/3161716/+files/libgcrypt11_1.4.4-5ubuntu2.1.lucid.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 496922] Re: Ubuntu snmpd package doesn't include all net-snmpd modules

[Adam Stokes]

I'm not able to reproduce your issue exactly, but here is information
which shows that the snmp extend functionality is available in latest
lucid.


zef@lucid:/tmp$ ps -ef |grep nfsd
root  1152 2  0 13:29 ?00:00:00 [nfsd4]
root  1156 2  0 13:29 ?00:00:00 [nfsd]
root  1157 2  0 13:29 ?00:00:00 [nfsd]
root  1158 2  0 13:29 ?00:00:00 [nfsd]
root  1159 2  0 13:29 ?00:00:00 [nfsd]
root  1160 2  0 13:29 ?00:00:00 [nfsd]
root  1161 2  0 13:29 ?00:00:00 [nfsd]
root  1162 2  0 13:29 ?00:00:00 [nfsd]
root  1163 2  0 13:29 ?00:00:00 [nfsd]
zef   2194  1647  0 13:47 pts/000:00:00 grep --color=auto nfsd


zef@lucid:/tmp$ snmpwalk -v 2c -c stokescanonical localhost 
NET-SNMP-EXTEND-MIB::nsExtendObjects
NET-SNMP-EXTEND-MIB::nsExtendNumEntries.0 = INTEGER: 1
NET-SNMP-EXTEND-MIB::nsExtendCommand."top_lists" = STRING: /bin/sh
NET-SNMP-EXTEND-MIB::nsExtendArgs."top_lists" = STRING: /usr/local/bin/blah.sh
NET-SNMP-EXTEND-MIB::nsExtendInput."top_lists" = STRING: 
NET-SNMP-EXTEND-MIB::nsExtendCacheTime."top_lists" = INTEGER: 5
NET-SNMP-EXTEND-MIB::nsExtendExecType."top_lists" = INTEGER: exec(1)
NET-SNMP-EXTEND-MIB::nsExtendRunType."top_lists" = INTEGER: run-on-read(1)
NET-SNMP-EXTEND-MIB::nsExtendStorage."top_lists" = INTEGER: permanent(4)
NET-SNMP-EXTEND-MIB::nsExtendStatus."top_lists" = INTEGER: active(1)
NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."top_lists" = STRING: 
NET-SNMP-EXTEND-MIB::nsExtendOutputFull."top_lists" = STRING: 
NET-SNMP-EXTEND-MIB::nsExtendOutNumLines."top_lists" = INTEGER: 1
NET-SNMP-EXTEND-MIB::nsExtendResult."top_lists" = INTEGER: 9
NET-SNMP-EXTEND-MIB::nsExtendOutLine."top_lists".1 = STRING: 

zef@lucid:/tmp$ sudo cat /etc/snmp/snmpd.conf
###
#
# snmpd.conf
#
###
rocommunity stokescanonical

extend top_lists /bin/sh /usr/local/bin/blah.sh

zef@lucid:/tmp$ cat /usr/local/bin/blah.sh 
#!/bin/bash

NUMPIDS=`pgrep nfsd | wc -l`

exit $NUMPIDS

zef@lucid:/tmp$ uname -a
Linux lucid 2.6.32-41-generic #89-Ubuntu SMP Fri Apr 27 22:18:56 UTC 2012 
x86_64 GNU/Linux


zef@lucid:/tmp$ dpkg -l snmp snmpd
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ NameVersion Description
+++-===-===-==
ii  snmp5.4.2.1~dfsg0ubuntu SNMP (Simple Network Management 
Protocol) applications
ii  snmpd   5.4.2.1~dfsg0ubuntu SNMP (Simple Network Management 
Protocol) agents

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to net-snmp in Ubuntu.
https://bugs.launchpad.net/bugs/496922

Title:
  Ubuntu snmpd package doesn't include all net-snmpd modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/496922/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 496922] Re: Ubuntu snmpd package doesn't include all net-snmpd modules

[Adam Stokes]

Michael,

Let me do some more investigating on this and I'll get back to you.

Thanks for testing
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to net-snmp in Ubuntu.
https://bugs.launchpad.net/bugs/496922

Title:
  Ubuntu snmpd package doesn't include all net-snmpd modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/496922/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 496922] Re: Ubuntu snmpd package doesn't include all net-snmpd modules

[Adam Stokes]

Michael,

You could alter your previous query to resemble something like the
following:

zef@lucid:/tmp$ snmpget -v1 -c  stokescanonical localhost 
'NET-SNMP-EXTEND-MIB::nsExtendResult."top_lists"'
NET-SNMP-EXTEND-MIB::nsExtendResult."top_lists" = INTEGER: 9

Thanks,
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to net-snmp in Ubuntu.
https://bugs.launchpad.net/bugs/496922

Title:
  Ubuntu snmpd package doesn't include all net-snmpd modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/496922/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** Changed in: lsb (Ubuntu)
Milestone: None => ubuntu-12.04.1

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: bind9 (Ubuntu Lucid)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: dovecot (Ubuntu Lucid)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: bind9 (Ubuntu Natty)

** No longer affects: bind9 (Ubuntu Oneiric)

** No longer affects: bind9 (Ubuntu Precise)

** No longer affects: bind9 (Ubuntu Quantal)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: dovecot (Ubuntu Natty)

** No longer affects: dovecot (Ubuntu Oneiric)

** No longer affects: dovecot (Ubuntu Precise)

** No longer affects: dovecot (Ubuntu Quantal)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: openbsd-inetd (Ubuntu Oneiric)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: openbsd-inetd (Ubuntu Lucid)

** No longer affects: openbsd-inetd (Ubuntu Natty)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: openbsd-inetd (Ubuntu Precise)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: openbsd-inetd (Ubuntu Quantal)

** No longer affects: openvpn (Ubuntu Lucid)

** No longer affects: openvpn (Ubuntu Natty)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 683640] Re: status_of_proc is returning incorrect error code

[Adam Stokes]

** No longer affects: spamassassin (Ubuntu Precise)

** No longer affects: openvpn (Ubuntu Oneiric)

** No longer affects: openvpn (Ubuntu Precise)

** No longer affects: openvpn (Ubuntu Quantal)

** No longer affects: rsync (Ubuntu Lucid)

** No longer affects: rsync (Ubuntu Natty)

** No longer affects: rsync (Ubuntu Oneiric)

** No longer affects: rsync (Ubuntu Precise)

** No longer affects: rsync (Ubuntu Quantal)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in Ubuntu.
https://bugs.launchpad.net/bugs/683640

Title:
  status_of_proc is returning incorrect error code

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/683640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 578536] Re: when stopped, automount orphans some mounts

[Adam Stokes]

This problem needs additional patches that can be found in my related
branch. My understanding is that testing with that patched autofs5 is
proven positive. I will have an SRU written up once I receive a final
confirmation today.

** Branch linked: lp:~adam-stokes/ubuntu/lucid/autofs5/null-cache-remap-
fix-578536

** Tags added: verification-failed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is a bug assignee.
https://bugs.launchpad.net/bugs/578536

Title:
  when stopped, automount orphans some mounts

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/578536/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 578536] Re: when stopped, automount orphans some mounts

[Adam Stokes]

The merge proposal has been confirmed and verified on lucid.

** Description changed:

  Binary package hint: autofs5
+ 
+ [Impact]
+ Running reload autofs on a release with this issue creates automount maps and 
can cause the automounter to hang. This will prevent logins via ssh for users 
(due to NFS mounted home directories).
  
  I have an automount setup containing a large number of NIS-provided
  maps, all derived from an NIS-provided master map (yp:auto.master). When
  I stop automount using "stop autofs", I noticed that some mounts have
  been unmounted while a non-deterministic number of mounts have been
  orphaned and need to be cleaned up using "umount":
+ 
+ [Test]
  
  adar@adar-lx:~$ sudo start autofs && sudo stop autofs && grep autofs 
/proc/mounts
  autofs start/running, process 13152
  autofs stop/waiting
  auto.home /exit14 autofs 
rw,relatime,fd=19,pgrp=13152,timeout=60,minproto=5,maxproto=5,indirect 0 0
  /etc/auto.build /build autofs 
rw,relatime,fd=6,pgrp=13152,timeout=300,minproto=5,maxproto=5,indirect 0 0
  auto.exit15 /exit15 autofs 
rw,relatime,fd=31,pgrp=13152,timeout=60,minproto=5,maxproto=5,indirect 0 0
  auto.scripts /scripts autofs 
rw,relatime,fd=73,pgrp=13152,timeout=60,minproto=5,maxproto=5,indirect 0 0
  
  adar@adar-lx:~$ sudo start autofs && sudo stop autofs && grep autofs 
/proc/mounts
  autofs start/running, process 13198
  autofs stop/waiting
  /etc/auto.build /build autofs 
rw,relatime,fd=6,pgrp=13198,timeout=300,minproto=5,maxproto=5,indirect 0 0
  auto.scripts /scripts autofs 
rw,relatime,fd=73,pgrp=13198,timeout=60,minproto=5,maxproto=5,indirect 0 0
  auto.mts-tlv /mts-tlv autofs 
rw,relatime,fd=67,pgrp=13198,timeout=60,minproto=5,maxproto=5,indirect 0 0
  auto.mts-sof /mts-sof autofs 
rw,relatime,fd=79,pgrp=13198,timeout=60,minproto=5,maxproto=5,indirect 0 0
  auto.mts-cm /mts-cm autofs 
rw,relatime,fd=85,pgrp=13198,timeout=60,minproto=5,maxproto=5,indirect 0 0
  
  adar@adar-lx:~$ sudo start autofs && sudo stop autofs && grep autofs 
/proc/mounts
  autofs start/running, process 13244
  autofs stop/waiting
  auto.mts-sof /mts-sof autofs 
rw,relatime,fd=79,pgrp=13244,timeout=60,minproto=5,maxproto=5,indirect 0 0
  auto.buildmap /bldmnt autofs 
rw,relatime,fd=49,pgrp=13244,timeout=60,minproto=5,maxproto=5,indirect 0 0
  auto.exit26home /exit26 autofs 
rw,relatime,fd=55,pgrp=13244,timeout=60,minproto=5,maxproto=5,indirect 0 0
  
  I suspect this is due to the transition to upstart but I'm not 100%
  sure.
  
- ## SRU JUSTIFICATION ##
- IMPACT: Running reload autofs on a release with this issue creates automount 
maps and can cause the automounter to hang. This will prevent logins via ssh 
for users (due to NFS mounted home directories).
- 
- FIX: Patch cherry picked from upstream,
- https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/578536/comments/6
- 
- PATCH: see diff in unapproved queue.
- 
- REPRODUCE: See this bug description
- 
- DISCUSSION: Issue was known and resolved upstream, and has been carried
- in later releases of Ubuntu.  The patch coming untouched from upstream
- indicates that the regression potential is low.
+ [Regression Potential]
+ Issue was known and resolved upstream, and has been carried in later releases 
of Ubuntu.  The patch coming untouched from upstream indicates that the 
regression potential is low.

** Patch removed: "autofs5-lp578536-natty2.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/578536/+attachment/2870165/+files/autofs5-lp578536-natty2.debdiff

** Patch removed: "autofs5-lp578536-natty.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/578536/+attachment/2865540/+files/autofs5-lp578536-natty.debdiff

** Changed in: autofs5 (Ubuntu Lucid)
   Status: Fix Committed => Confirmed

** Changed in: autofs5 (Ubuntu Lucid)
Milestone: None => ubuntu-10.04.4

** Changed in: autofs5 (Ubuntu Lucid)
Milestone: ubuntu-10.04.4 => lucid-updates

** Tags removed: verification-failed
** Tags added: verification-done-lucid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is a bug assignee.
https://bugs.launchpad.net/bugs/578536

Title:
  when stopped, automount orphans some mounts

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/578536/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 496922] Re: Ubuntu snmpd package doesn't include all net-snmpd modules

[Adam Stokes]

It doesn't look like your OID is correct, below is the one used for NET-
SNMP-EXTEND-MIB:

zef@lucid:~$ snmpwalk -v1 -c stokescanonical localhost .1.3.6.1.4.1.8072.1.3.2
NET-SNMP-EXTEND-MIB::nsExtendNumEntries.0 = INTEGER: 1
NET-SNMP-EXTEND-MIB::nsExtendCommand."top_lists" = STRING: /bin/sh
NET-SNMP-EXTEND-MIB::nsExtendArgs."top_lists" = STRING: /usr/local/bin/blah.sh
NET-SNMP-EXTEND-MIB::nsExtendInput."top_lists" = STRING: 
NET-SNMP-EXTEND-MIB::nsExtendCacheTime."top_lists" = INTEGER: 5
NET-SNMP-EXTEND-MIB::nsExtendExecType."top_lists" = INTEGER: exec(1)
NET-SNMP-EXTEND-MIB::nsExtendRunType."top_lists" = INTEGER: run-on-read(1)
NET-SNMP-EXTEND-MIB::nsExtendStorage."top_lists" = INTEGER: permanent(4)
NET-SNMP-EXTEND-MIB::nsExtendStatus."top_lists" = INTEGER: active(1)
NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."top_lists" = STRING: 
NET-SNMP-EXTEND-MIB::nsExtendOutputFull."top_lists" = STRING: 
NET-SNMP-EXTEND-MIB::nsExtendOutNumLines."top_lists" = INTEGER: 1
NET-SNMP-EXTEND-MIB::nsExtendResult."top_lists" = INTEGER: 9
NET-SNMP-EXTEND-MIB::nsExtendOutLine."top_lists".1 = STRING: 

Nothing else has changed as far as configuration goes.

Thanks,
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to net-snmp in Ubuntu.
https://bugs.launchpad.net/bugs/496922

Title:
  Ubuntu snmpd package doesn't include all net-snmpd modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/496922/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 496922] Re: Ubuntu snmpd package doesn't include all net-snmpd modules

[Adam Stokes]

For now I'll set this to invalid as I've had no issues getting external
scripts to execute through NET-SNMP-EXTEND-MIB

** Changed in: net-snmp (Ubuntu)
   Status: Confirmed => Fix Released

** Tags added: verification-done-lucid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to net-snmp in Ubuntu.
https://bugs.launchpad.net/bugs/496922

Title:
  Ubuntu snmpd package doesn't include all net-snmpd modules

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/496922/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

[Adam Stokes]

We are using juju-core package name now so there is no need for this
packaging request :)

** Changed in: juju-core (Ubuntu)
   Status: Fix Committed => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1560315

Title:
  [needs packaging] juju2 beta is not in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1560315/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1545913] Re: [FFe] juju-core 2.0

[Adam Stokes]

xnox, there is this bug: https://bugs.launchpad.net/juju-
core/+bug/1547665

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1545913

Title:
  [FFe] juju-core 2.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1545913/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1545913] Re: [FFe] juju-core 2.0

[Adam Stokes]

** Description changed:

  The juju team is requesting an FFE for juju-core. Juju2 represents API
  changes and new features and bugfixes for juju.  We are NOT requesting a
  place on any image for xenial. This FFE is intended to cover the
  acceptance of the updated juju-core package, as well as the new package
  juju-core-1.25, which is a new version of the existing juju-core package
  allowing the existing juju1 binary to be installed.
  
  Related FFes
  
  
  Required for Juju 2.0:
  
  juju-mongodb3.2: bug 1557852
  juju-mongodb2.6: bug 1557830
  juju-mongo-tools3.2: bug 1558336
  
  Required consumers:
  
  conjure: bug 1561037
  bigdata: bug 1561043
- openstack: ?TBC
+ openstack: Already in universe, dep wait on conjure -> juju 2.0
  charm-tools: bug 1546776
  
  User-Facing Features / Changes
  --
  * New Terminology
  * Command Name Changes
  * New Juju home directory
  * Multi-Model Support Active by Default
  * New Bootstrap and Cloud Management Experience
  * Native Support for Charm Bundles
  * Multi Series Charms
  * Improved Local Charm Deployment
  * LXC Local Provider No Longer Available
  * LXD Provider
  * LXD Containers
  * Microsoft Azure Resource Manager Provider
  * Bootstrap Constraints, Series
  * Juju Logging Improvements
  * Unit Agent Improvements
  * API Login with Macaroons
  * MAAS Spaces
  * Resources
  * Juju Status Improvements
  * Relation Get and Set Compatibility
  * Support for new AWS M4 Instance Types
  * Support for win10 and win2016
  
  The full list of changes can be found here: 
https://lists.ubuntu.com/archives/juju/2016-March/006922.html
  and in the final release notes.
  
  Timeline
  
  We have released 2 alphas, and 3 betas for juju2 so far, in addition 3 alpha 
builds of 1.26 which became 2.0.  All targeted 2.0 features are now 
implemented, and we anticipate releasing one release candidate before a final 
stable build. Juju missed uploading any versions of 2.0 to the archive itself,  
as well as the initial projected date of having beta1 in xenial before feature 
freeze. However, juju has been released regularly during the development cycle 
inside the juju ppa. You can see the details on the delivered features and 
milestones on https://launchpad.net/juju-core/2.0. The final stable build will 
be ready in time for the xenial release.
  
  Upgrades
  
  Users upgrading from trusty will find their juju version updated. The current 
juju-core package will be provided as juju-1.25. Update-alternatives will 
provide support for toggling /usr/bin/juju between juju-1.25 and juju-2.0 
binaries.
  
  We have tested to ensure the intended behavior occurs for the following
  scenarios:
  
  New Xenial:
  No juju, apt-get install juju, juju version will be 2.0.
  Example using ppa: 
  
  Upgrading Trusty/Wily/old Xenial:
  Already installed juju 1.X, upgraded to latest 1.25.4, 2.0 also installed and 
is the default juju, update-alternatives used to switch between the two.
  Example using ppa: 
  
  Risks
  -
  Although juju itself is now feature complete for 2.0, the MAAS 2.0 support 
will require additional work to be fully supported. MAAS 2.0 is currently under 
development as well, and is an alpha3 at the time of this writing. Juju will 
need to add support for the final version of MAAS 2.0, and this is a risk of 
occurring after xenial is released. If so, we expect to release an sru for 
juju-core soon after xenial releases to provide this support.
  
  Quality / Testing
  -
  As this version breaks API with 1.0, testing for features regressions as well 
as fixing old bugs and avoiding new bugs has been important. The juju team and 
the greater juju community has been testing 2.0 to ensure it’s stable and ready 
to support all of the 1.0 workloads in addition to making use of the new 2.0 
features.
  
  In comparison to juju-1.25:
  
  * Tests improvements including
  * MAAS testing improved
  * Container networking
  * 9 non-voting tests are now voting
  * New tests for all 2.0 features
  * Powerpc toolchain is vastly improved
  * No test regressions!
  * S390 builds reliably, is fully tested and is treated the same as other 
supported architectures
  * 114 bugs has been fixed
  
  Juju practices continuous integration and testing of the juju source
  tree. All voting tests must pass for ubuntu before release. For example,
  for beta3, you can see all tests are passing on ubuntu. The full details
  are here: http://reports.vapour.ws/releases/3815.
  
  The community has also been actively involved with testing, providing
  feedback, and adopting 2.0 throughout the development cycle.
  
  * 250 bugs and wishlist items filed
  * 4 bugs fixed by community members
  * ~100-125 downloads for each ppa release
  
  Community Adoption
  --
  The community has already begun adopting 2.0, and is dependent upon

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

After reviewing this bug again I've outlined a possible course of
action:

a) Revert global_init patch in all supported distro's
b) Lucid users continue to use the nscd workaround.
c) Precise,  Quantal, etc - rebuild gnutls without --with-libgcrypt in order to 
make use of nettle.

Unfortunately, the version of gnutls in Lucid is older than the required
gnutls version for nettle support. So I do not believe there will be
much that we can do as far as a supportable option is concerned.

I will need to speak with some other engineers about getting option c
pushed through[1].

[1] http://pad.lv/926350

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] [NEW] Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

Public bug reported:

1. Description of the problem:

On 12.04, for package 'puppet', the fix (contained in version
2.7.11-1ubuntu2.1) for CVE-2012-3867 [1] involves validating TLS
certificate CSR field (Common Name) for “weird” characters. However, the
check is too restrictive and is causing negotiation failure with
legitimately-configured certificates:

===
warning: peer certificate won't be verified in this SSL session
err: Could not request certificate: Certname "/c=mlkambi root certificate 
authority" must not contain unprintable or non-ASCII characters
Exiting; failed to retrieve certificate and waitforcert is disabled
===

Here, puppet is choking on the '/' and maybe the '=' character.

The issue has been confirmed in an upstream bug [2].

[1]: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3867
[2]: http://projects.puppetlabs.com/issues/15561

2. Ubuntu release, software version, Release Number and Architecture of
the selected components.

Ubuntu 12.04
puppet-2.7.11-1ubuntu2.1
amd64

3. How reproducible is the problem?

100%

5. Known Workaround:

downgrade to puppet-2.7.11-1ubuntu2

** Affects: puppet (Ubuntu)
 Importance: High
 Status: New

** Changed in: puppet (Ubuntu)
Milestone: ubuntu-12.04.2 => None

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-3867

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

Thanks Howard,

I'll get this reviewed and tested this week.

Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

** No longer affects: eglibc (Ubuntu)

** No longer affects: libnss-ldap (Ubuntu)

** No longer affects: sudo (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1101371] Re: [SRU] Integrate v1.3 of Windows Azure Linux Agent

[Adam Stokes]

** Patch added: "walinuxagent_1.2-0ubuntu1~12.04.2.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/1101371/+attachment/3507905/+files/walinuxagent_1.2-0ubuntu1%7E12.04.2.precise.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to walinuxagent in Ubuntu.
https://bugs.launchpad.net/bugs/1101371

Title:
  [SRU] Integrate v1.3 of Windows Azure Linux Agent

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/1101371/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1101371] Re: [SRU] Integrate v1.3 of Windows Azure Linux Agent

[Adam Stokes]

** Patch added: "walinuxagent_1.2-0ubuntu1~12.10.2.quantal.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/1101371/+attachment/3507909/+files/walinuxagent_1.2-0ubuntu1%7E12.10.2.quantal.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to walinuxagent in Ubuntu.
https://bugs.launchpad.net/bugs/1101371

Title:
  [SRU] Integrate v1.3 of Windows Azure Linux Agent

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/1101371/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1101371] Re: [SRU] Integrate v1.3 of Windows Azure Linux Agent

[Adam Stokes]

** Patch added: "walinuxagent_1.3-0ubuntu1.raring.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/1101371/+attachment/3507912/+files/walinuxagent_1.3-0ubuntu1.raring.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to walinuxagent in Ubuntu.
https://bugs.launchpad.net/bugs/1101371

Title:
  [SRU] Integrate v1.3 of Windows Azure Linux Agent

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/1101371/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Description changed:

  Guys,
  
-  During my new tests, I tried to create two nodes simultaneously (both
+  During my new tests, I tried to create two nodes simultaneously (both
  via DHCP + PXE, not by clicking "+Add node") and I hit this problem:
  
-  Same MAC Address, two different IPs:
+  Same MAC Address, two different IPs:
  
-  http://pastebin.com/8RYjGe5D
+ # The format of this file is documented in the dhcpd.leases(5) manual page.
+ # This lease file was written by isc-dhcp-4.2.4
+  
+ server-duid "\000\001\000\001\030\023\243\007RT\000\360\236\231";
+  
+ lease 192.168.50.1 {
+   starts 5 2012/10/19 06:31:21;
+   ends 5 2012/10/19 18:31:21;
+   cltt 5 2012/10/19 06:31:21;
+   binding state active;
+   next binding state free;
+   rewind binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   uid "\001RT\000\315k\242";
+ }
+ lease 192.168.50.2 {
+   starts 5 2012/10/19 06:31:43;
+   ends 5 2012/10/19 18:31:43;
+   cltt 5 2012/10/19 06:31:43;
+   binding state active;
+   next binding state free;
+   rewind binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   client-hostname "maas-enlist";
+ }
+ lease 192.168.50.2 {
+   starts 5 2012/10/19 06:31:43;
+   ends 5 2012/10/19 18:31:43;
+   cltt 5 2012/10/19 06:31:43;
+   binding state active;
+   next binding state free;
+   rewind binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   client-hostname "maas-enlist";
+ }
+ host 192.168.50.1 {
+   dynamic;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   fixed-address 192.168.50.1;
+ }
+ lease 192.168.50.1 {
+   starts 5 2012/10/19 06:31:21;
+   ends 5 2012/10/19 06:34:48;
+   tstp 5 2012/10/19 06:34:48;
+   cltt 5 2012/10/19 06:31:21;
+   binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   uid "\001RT\000\315k\242";
+ }
  
-  The brief is:
+  The brief is:
  
-  1- DHCP gives address 192.168.50.1 to my machine on its first boot;
+  1- DHCP gives address 192.168.50.1 to my machine on its first boot;
  
-  2- After some time, I think that after some "reboots / elist / don'know
+  2- After some time, I think that after some "reboots / elist / don'know
  for sure or even after commissioning" it; the IP have changed to
  192.168.50.2 and got registered at DNS (192-168-50-2.test.com) that way;
  
-  3- In the end of the day, after allocate it to root and start using it
+  3- In the end of the day, after allocate it to root and start using it
  (the nodes), the DHCP gives again the IP 192.168.50.1 to my node, but
  DNS still remains with 192.158.50.2...
  
-  ---
+  ---
  
-  My second node, first starts with 192.168.50.3, got registered with
+  My second node, first starts with 192.168.50.3, got registered with
  192.168.50.4 at DNS (and at MaaS Web GUI) but the DHCP finish with
  192.168.50.3...
  
-  I'll not try maas-dns again... Too many bugs...   =(
+  I'll not try maas-dns again... Too many bugs...   =(
  
-  I think that MaaS needs some kind of "glue" between DHCP and DNS to
+  I think that MaaS needs some kind of "glue" between DHCP and DNS to
  keep it in sync.
  
  Tks!
  Thiago

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Patch added: "isc-dhcp_4.1.ESV-R4-0ubuntu5.6.1.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3631196/+files/isc-dhcp_4.1.ESV-R4-0ubuntu5.6.1.precise.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Description changed:

- Guys,
- 
-  During my new tests, I tried to create two nodes simultaneously (both
- via DHCP + PXE, not by clicking "+Add node") and I hit this problem:
+ [Impact] 
+  During my new tests, I tried to create two nodes simultaneously (both via 
DHCP + PXE, not by clicking "+Add node") and I hit this problem:
  
   Same MAC Address, two different IPs:
  
  # The format of this file is documented in the dhcpd.leases(5) manual page.
  # This lease file was written by isc-dhcp-4.2.4
-  
+ 
  server-duid "\000\001\000\001\030\023\243\007RT\000\360\236\231";
-  
+ 
  lease 192.168.50.1 {
-   starts 5 2012/10/19 06:31:21;
-   ends 5 2012/10/19 18:31:21;
-   cltt 5 2012/10/19 06:31:21;
-   binding state active;
-   next binding state free;
-   rewind binding state free;
-   hardware ethernet 52:54:00:cd:6b:a2;
-   uid "\001RT\000\315k\242";
+   starts 5 2012/10/19 06:31:21;
+   ends 5 2012/10/19 18:31:21;
+   cltt 5 2012/10/19 06:31:21;
+   binding state active;
+   next binding state free;
+   rewind binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   uid "\001RT\000\315k\242";
  }
  lease 192.168.50.2 {
-   starts 5 2012/10/19 06:31:43;
-   ends 5 2012/10/19 18:31:43;
-   cltt 5 2012/10/19 06:31:43;
-   binding state active;
-   next binding state free;
-   rewind binding state free;
-   hardware ethernet 52:54:00:cd:6b:a2;
-   client-hostname "maas-enlist";
+   starts 5 2012/10/19 06:31:43;
+   ends 5 2012/10/19 18:31:43;
+   cltt 5 2012/10/19 06:31:43;
+   binding state active;
+   next binding state free;
+   rewind binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   client-hostname "maas-enlist";
  }
  lease 192.168.50.2 {
-   starts 5 2012/10/19 06:31:43;
-   ends 5 2012/10/19 18:31:43;
-   cltt 5 2012/10/19 06:31:43;
-   binding state active;
-   next binding state free;
-   rewind binding state free;
-   hardware ethernet 52:54:00:cd:6b:a2;
-   client-hostname "maas-enlist";
+   starts 5 2012/10/19 06:31:43;
+   ends 5 2012/10/19 18:31:43;
+   cltt 5 2012/10/19 06:31:43;
+   binding state active;
+   next binding state free;
+   rewind binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   client-hostname "maas-enlist";
  }
  host 192.168.50.1 {
-   dynamic;
-   hardware ethernet 52:54:00:cd:6b:a2;
-   fixed-address 192.168.50.1;
+   dynamic;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   fixed-address 192.168.50.1;
  }
  lease 192.168.50.1 {
-   starts 5 2012/10/19 06:31:21;
-   ends 5 2012/10/19 06:34:48;
-   tstp 5 2012/10/19 06:34:48;
-   cltt 5 2012/10/19 06:31:21;
-   binding state free;
-   hardware ethernet 52:54:00:cd:6b:a2;
-   uid "\001RT\000\315k\242";
+   starts 5 2012/10/19 06:31:21;
+   ends 5 2012/10/19 06:34:48;
+   tstp 5 2012/10/19 06:34:48;
+   cltt 5 2012/10/19 06:31:21;
+   binding state free;
+   hardware ethernet 52:54:00:cd:6b:a2;
+   uid "\001RT\000\315k\242";
  }
- 
-  The brief is:
  
   1- DHCP gives address 192.168.50.1 to my machine on its first boot;
  
   2- After some time, I think that after some "reboots / elist / don'know
  for sure or even after commissioning" it; the IP have changed to
  192.168.50.2 and got registered at DNS (192-168-50-2.test.com) that way;
  
   3- In the end of the day, after allocate it to root and start using it
  (the nodes), the DHCP gives again the IP 192.168.50.1 to my node, but
  DNS still remains with 192.158.50.2...
  
   ---
  
   My second node, first starts with 192.168.50.3, got registered with
  192.168.50.4 at DNS (and at MaaS Web GUI) but the DHCP finish with
  192.168.50.3...
  
+ [Test Case]
+ In a virtual environment: 
+ - Add 2 nodes 
+ - PXE boot the instances
+ - verify dhcp leases have 1 mac address for 2 different IPs
+ 
+ After applying latest debdiff alter the following:
+ 
+* modify /etc/maas/dhcpd.conf to include 'ignore-client-uids true'
+ 
+ re-test by adding 2 additional nodes to verify the mac address is unique
+ between both nodes.
+ 
+ [Regression Potential]
+ Low, as it adds another optional arguement to disable checking client-uids
+ 
+ -- snip --
+ 
   I'll not try maas-dns again... Too many bugs...   =(
  
   I think that MaaS needs some kind of "glue" between DHCP and DNS to
  keep it in sync.
  
  Tks!
  Thiago

** Patch added: "isc-dhcp_4.2.4-1ubuntu10.1.quantal.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3631255/+files/isc-dhcp_4.2.4-1ubuntu10.1.quantal.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] Re: Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

Looks like upstream has a pending release to fix this issue positive
testing results from community.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Patch removed: "isc-dhcp_4.1.ESV-R4-0ubuntu5.6.1.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3631196/+files/isc-dhcp_4.1.ESV-R4-0ubuntu5.6.1.precise.debdiff

** Patch removed: "isc-dhcp_4.2.4-1ubuntu10.1.quantal.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3631255/+files/isc-dhcp_4.2.4-1ubuntu10.1.quantal.debdiff

** Patch added: "isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3631784/+files/isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Patch added: "isc-dhcp_4.2.4-1ubuntu10.3.quantal.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3631785/+files/isc-dhcp_4.2.4-1ubuntu10.3.quantal.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1158465] Re: [SRU] update Windows Azure WALinuxAgent to 1.3.2 (12.04.2, 12.10 and 13.04)

[Adam Stokes]

Re: #6, what is the context of 'Resolved'? Anything you need from me to
make sure this issue is actively reviewed?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to walinuxagent in Ubuntu.
https://bugs.launchpad.net/bugs/1158465

Title:
  [SRU] update Windows Azure WALinuxAgent to 1.3.2 (12.04.2, 12.10 and
  13.04)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/1158465/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Changed in: maas (Ubuntu)
   Status: Incomplete => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

This also contains a small change to 00List to fix previous changelog
entry and not have its patch reverted.

** Patch removed: "isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3631784/+files/isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff

** Patch added: "isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3638900/+files/isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Patch removed: "isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3638900/+files/isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

This also contains a fix from the previous changelog to modify an
apparmor profile. Patch was removed and applied directly to debian
/apparmor-profile.dhcpd

** Patch added: "isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3638941/+files/isc-dhcp_4.1.ESV-R4-0ubuntu5.8.precise.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] Re: Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

Jeff,

I've been searching through the documentation on puppet labs wiki but I
am unable to find a tentative release date for 3.2.0. Do you have that
information and if the date is set do you mind sharing that with me?

Thank you,
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] Re: Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

Jeff,

Thanks for the quick response. I'll make sure to monitor the mailing
list.

Thanks again,
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] Re: Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

3.2.1 is out, once it makes it way into Debian and then Ubuntu archive
I'll work on getting a possible backport accepted for Precise, Quantal
and Raring.

Thanks
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 962046] Re: EC2 metadata retrieval fails with spaces in a resource name

[Adam Stokes]

** Description changed:

+ [Impact]
+ 
  Example when using a key name 'my key':
  
  Caught exception reading instance data:
  http://169.254.169.254/2009-04-04/meta-data/mpi/my key
  
  Is a boto issue, see https://github.com/boto/boto/issues/659
+ 
+ 
+ [Test Case]
+ 
+ #!/usr/bin/env python
+ from boto import utils
+ utils.get_instance_metadata()
+ 
+ [Regression Potential]
+  This is a very low risk change. It has been tested on Precise. A quantal 
patch is also provided.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-boto in Ubuntu.
https://bugs.launchpad.net/bugs/962046

Title:
  EC2 metadata retrieval fails with spaces in a resource name

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/962046/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 962046] Re: EC2 metadata retrieval fails with spaces in a resource name

[Adam Stokes]

** Description changed:

  [Impact]
  
  Example when using a key name 'my key':
  
  Caught exception reading instance data:
  http://169.254.169.254/2009-04-04/meta-data/mpi/my key
  
  Is a boto issue, see https://github.com/boto/boto/issues/659
  
  Patches provided for Precise, Quantal and Raring. Fix already exists in
  Saucy.
  
  [Test Case]
  
  There are two ways to test this. The first provides that the change will 
affect
  the url in the required manner but does not test the package. The second will
  test the package but needs to be run within an Openstack instance against an
  API that has calls with spaces on their name.
  
  
  #!/usr/bin/env python
  import urllib
  
  resource = "http://169.254.169.254/2009-04-04/meta-data/i love spaces"
  print "unsafe: %s" % resource
  
  resource = urllib.quote(resource, safe="/:")
  print "safe: %s" % resource
  
  ===
  #!/usr/bin/env python
  from boto import utils
  utils.get_instance_metadata()
  
  [Regression Potential]
  
  This is a very low risk change which makes any non-alphnumeric
  characters in a meta api call name safe for urlib. It is unlikely that
  an api call name would have anything other than alphanumeric chars,
  whitespace and perhaps '_' but even if they did they would be safe here
- so there is no know regression potential.
+ so there is no known regression potential.

** Changed in: python-boto (Ubuntu Raring)
   Importance: Undecided => Medium

** Changed in: python-boto (Ubuntu Precise)
 Assignee: Chris J Arges (arges) => Edward Hope-Morley (hopem)

** Changed in: python-boto (Ubuntu Quantal)
 Assignee: Chris J Arges (arges) => Edward Hope-Morley (hopem)

** Changed in: python-boto (Ubuntu Raring)
 Assignee: Chris J Arges (arges) => Edward Hope-Morley (hopem)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-boto in Ubuntu.
https://bugs.launchpad.net/bugs/962046

Title:
  EC2 metadata retrieval fails with spaces in a resource name

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/962046/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] Re: Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

Puppet 3.2.2 is in Saucy now. Will see how feasible it is to just do a
full backport into Precise.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] Re: Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

I've started the backport process here: https://bugs.launchpad.net
/precise-backports/+bug/1194901

If anyone is interested in testing out the packages on either Precise,
Quantal, or Raring and provide feedback on that backport request it
would be greatly appreciated! This will also help speed up the backport
approval process.

Thank you
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1004775] Re: NetworkManager restarts dnsmasq and adds host route on every IPv6 route lookup

[Adam Stokes]

Friendly ping to see what the status is on this issue wrt comment #23

Thanks!
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dnsmasq in Ubuntu.
https://bugs.launchpad.net/bugs/1004775

Title:
  NetworkManager restarts dnsmasq and adds host route on every IPv6
  route lookup

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1004775/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1004775] Re: NetworkManager restarts dnsmasq and adds host route on every IPv6 route lookup

[Adam Stokes]

Thanks Mathieu for the upload!

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dnsmasq in Ubuntu.
https://bugs.launchpad.net/bugs/1004775

Title:
  NetworkManager restarts dnsmasq and adds host route on every IPv6
  route lookup

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/1004775/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1068145] Re: Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates now break

[Adam Stokes]

Agreed, however, from previous discussions with the maintainers I was
under the impression this wouldn't be a trivial fix for 2.7.x.

Jeff,

Could you comment on that?

Thanks
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to puppet in Ubuntu.
https://bugs.launchpad.net/bugs/1068145

Title:
  Fix for CVE-2012-3867 (puppet) is too restrictive - TLS certificates
  now break

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/puppet/+bug/1068145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1003296] Re: lightdm crashed with SIGSEGV in _pam_winbind_change_pwd() when password is expiring

[Adam Stokes]

** Patch removed: "samba_3.6.3-2ubuntu2.7.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1003296/+attachment/3729222/+files/samba_3.6.3-2ubuntu2.7.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1003296

Title:
  lightdm crashed with SIGSEGV in _pam_winbind_change_pwd() when
  password is expiring

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1003296/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1199037] Re: backport eventlet exception context fix

[Adam Stokes]

** Changed in: python-eventlet (Ubuntu Raring)
   Status: In Progress => Fix Committed

** Changed in: python-eventlet (Ubuntu Raring)
   Status: Fix Committed => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-eventlet in Ubuntu.
https://bugs.launchpad.net/bugs/1199037

Title:
  backport eventlet exception context fix

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-eventlet/+bug/1199037/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Changed in: maas (Ubuntu)
   Status: Invalid => In Progress

** Changed in: maas (Ubuntu)
 Assignee: (unassigned) => Adam Stokes (adam-stokes)

** Changed in: maas (Ubuntu)
   Importance: Undecided => Medium

** Changed in: maas (Ubuntu)
   Importance: Medium => High

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Changed in: maas (Ubuntu)
   Status: In Progress => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

** Patch added: "maas_1.4+bzr1539+dfsg-0ubuntu2.saucy.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1069570/+attachment/3756388/+files/maas_1.4%2Bbzr1539%2Bdfsg-0ubuntu2.saucy.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1207102] Re: Set PXE class lease expiration to 30 seconds

[Adam Stokes]

** Patch added: "maas_1.4+bzr1539+dfsg-0ubuntu2.saucy.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+attachment/3756460/+files/maas_1.4%2Bbzr1539%2Bdfsg-0ubuntu2.saucy.debdiff

** Description changed:

  [impact]
  
  MAAS is failing to add all enlisted machines to DNS.  There seems to be
  a sync issue between dhcp and dns during enlishting.
  
  [test case]
  + Have MaaS 1.3 running
  + Boot machines to be controlled by MaaS and get MaaS to enlist them.
  + Go on MaaS WebUI and change ipmi data and click 'accept and commission'
  
  [regression potential]
  This is not a code change but a configuration modification. It is a 
documented option within the dhcp manual so I assume it's been tested through 
the normal means.
+ 
+ [additional]
+ Expected results:
+ 
+ subnet 192.168.134.0 netmask 255.255.255.0 {
+filename "pxelinux.0";
+option subnet-mask 255.255.255.0;
+option broadcast-address 192.168.134.255;
+option domain-name-servers 192.168.134.2;
+option routers 192.168.134.1;
+range dynamic-bootp 192.168.134.10 192.168.134.20;
+ 
+ class "PXE" {
+   match if substring (option vendor-class-identifier, 0, 3) = "PXE";
+   default-lease-time 30;
+   max-lease-time 30;
+ }
+ 
+ }
+ 
+ May 3 15:18:30 maas2 dhcpd: DHCPDISCOVER from 52:54:00:f7:72:fe via eth0
+ May 3 15:18:31 maas2 dhcpd: DHCPOFFER on 192.168.134.11 to 52:54:00:f7:72:fe 
via eth0
+ May 3 15:18:33 maas2 dhcpd: Wrote 0 class decls to leases file.
+ May 3 15:18:33 maas2 dhcpd: Wrote 0 deleted host decls to leases file.
+ May 3 15:18:33 maas2 dhcpd: Wrote 0 new dynamic host decls to leases file.
+ May 3 15:18:33 maas2 dhcpd: Wrote 11 leases to leases file.
+ May 3 15:18:33 maas2 dhcpd: DHCPREQUEST for 192.168.134.11 (192.168.134.2) 
from 52:54:00:f7:72:fe via eth0
+ May 3 15:18:33 maas2 dhcpd: DHCPACK on 192.168.134.11 to 52:54:00:f7:72:fe 
via eth0
+ 
+ lease 192.168.134.11 {
+   starts 5 2013/05/03 19:18:33;
+   ends 5 2013/05/03 19:19:03;
+   tstp 5 2013/05/03 19:19:03;
+   cltt 5 2013/05/03 19:18:33;
+   binding state free;
+   hardware ethernet 52:54:00:f7:72:fe;
+   uid "\001RT\000\367r\376";
+ }

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1207102

Title:
  Set PXE class lease expiration to 30 seconds

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1207102] [NEW] Set PXE class lease expiration to 30 seconds

[Adam Stokes]

Public bug reported:

[impact]

MAAS is failing to add all enlisted machines to DNS.  There seems to be
a sync issue between dhcp and dns during enlishting.

[test case]
+ Have MaaS 1.3 running
+ Boot machines to be controlled by MaaS and get MaaS to enlist them.
+ Go on MaaS WebUI and change ipmi data and click 'accept and commission'

[regression potential]
This is not a code change but a configuration modification. It is a documented 
option within the dhcp manual so I assume it's been tested through the normal 
means.

[additional]
Expected results:

subnet 192.168.134.0 netmask 255.255.255.0 {
   filename "pxelinux.0";
   option subnet-mask 255.255.255.0;
   option broadcast-address 192.168.134.255;
   option domain-name-servers 192.168.134.2;
   option routers 192.168.134.1;
   range dynamic-bootp 192.168.134.10 192.168.134.20;

class "PXE" {
  match if substring (option vendor-class-identifier, 0, 3) = "PXE";
  default-lease-time 30;
  max-lease-time 30;
}

}

May 3 15:18:30 maas2 dhcpd: DHCPDISCOVER from 52:54:00:f7:72:fe via eth0
May 3 15:18:31 maas2 dhcpd: DHCPOFFER on 192.168.134.11 to 52:54:00:f7:72:fe 
via eth0
May 3 15:18:33 maas2 dhcpd: Wrote 0 class decls to leases file.
May 3 15:18:33 maas2 dhcpd: Wrote 0 deleted host decls to leases file.
May 3 15:18:33 maas2 dhcpd: Wrote 0 new dynamic host decls to leases file.
May 3 15:18:33 maas2 dhcpd: Wrote 11 leases to leases file.
May 3 15:18:33 maas2 dhcpd: DHCPREQUEST for 192.168.134.11 (192.168.134.2) from 
52:54:00:f7:72:fe via eth0
May 3 15:18:33 maas2 dhcpd: DHCPACK on 192.168.134.11 to 52:54:00:f7:72:fe via 
eth0

lease 192.168.134.11 {
  starts 5 2013/05/03 19:18:33;
  ends 5 2013/05/03 19:19:03;
  tstp 5 2013/05/03 19:19:03;
  cltt 5 2013/05/03 19:18:33;
  binding state free;
  hardware ethernet 52:54:00:f7:72:fe;
  uid "\001RT\000\367r\376";
}

** Affects: maas (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1207102

Title:
  Set PXE class lease expiration to 30 seconds

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1207102] Re: Set PXE class lease expiration to 30 seconds

[Adam Stokes]

** Changed in: maas (Ubuntu)
 Assignee: (unassigned) => Andres Rodriguez (andreserl)

** Changed in: maas (Ubuntu)
   Importance: Undecided => High

** Patch removed: "maas_1.4+bzr1539+dfsg-0ubuntu2.saucy.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+attachment/3756460/+files/maas_1.4%2Bbzr1539%2Bdfsg-0ubuntu2.saucy.debdiff

** Patch added: "maas_1.4+bzr1539+dfsg-0ubuntu2.saucy.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+attachment/3756462/+files/maas_1.4%2Bbzr1539%2Bdfsg-0ubuntu2.saucy.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1207102

Title:
  Set PXE class lease expiration to 30 seconds

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1207102] Re: Set PXE class lease expiration to 30 seconds

[Adam Stokes]

So the debdiff was uploaded and referenced bug 1069570 after I marked
that one invalid. So I guess we can dis-regard this one?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1207102

Title:
  Set PXE class lease expiration to 30 seconds

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1069570] Re: 1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases databases, I think...

[Adam Stokes]

Hmm, so I marked this bug invalid b/c I created a new bug 1207102 with
the same changes. This got uploaded anyway and referenced this bug.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1069570

Title:
  1 MAC Address, two IPs - DNS is "out of sync" with DHCP leases
  databases, I think...

To manage notifications about this bug go to:
https://bugs.launchpad.net/juju-core/+bug/1069570/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1119248] Re: [SRU] nova does not set container_format when snapshotting instance with ref image deleted

[Adam Stokes]

** Changed in: nova (Ubuntu)
   Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/1119248

Title:
  [SRU] nova does not set container_format when snapshotting instance
  with ref image deleted

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1119248/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1199037] Re: backport eventlet exception context fix

[Adam Stokes]

Thanks Brian,

Ed this should be good to go now and in process of being reviewed by SRU
team.

Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-eventlet in Ubuntu.
https://bugs.launchpad.net/bugs/1199037

Title:
  backport eventlet exception context fix

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-eventlet/+bug/1199037/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1183300] Re: Please upgrade keepalived to the latest upstream version

[Adam Stokes]

** Patch added: "keepalived_1.2.7-1_keepalived_1.2.7-1ubuntu1.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+attachment/3770114/+files/keepalived_1.2.7-1_keepalived_1.2.7-1ubuntu1.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1183300

Title:
  Please upgrade keepalived to the latest upstream version

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1183300] Re: Please upgrade keepalived to the latest upstream version

[Adam Stokes]

** Patch added: "keepalived_1.2.7-1ubuntu1.merge.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+attachment/3770115/+files/keepalived_1.2.7-1ubuntu1.merge.debdiff

** Changed in: keepalived (Ubuntu)
   Status: Triaged => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1183300

Title:
  Please upgrade keepalived to the latest upstream version

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1183300] Re: Please upgrade keepalived to the latest upstream version

[Adam Stokes]

** Changed in: keepalived (Ubuntu)
   Importance: Wishlist => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1183300

Title:
  Please upgrade keepalived to the latest upstream version

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1183300] Re: Please upgrade keepalived to the latest upstream version

[Adam Stokes]

Ah i was trying to research where those DEB* variables were used thanks
for clearing that up. I'll update the debdiffs today to fix the
indentation in the changelog

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1183300

Title:
  Please upgrade keepalived to the latest upstream version

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1183300] Re: Please upgrade keepalived to the latest upstream version

[Adam Stokes]

Updated from suggestions in reviewer's comments

** Patch removed: "keepalived_1.2.7-1_keepalived_1.2.7-1ubuntu1.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+attachment/3770114/+files/keepalived_1.2.7-1_keepalived_1.2.7-1ubuntu1.debdiff

** Patch removed: "keepalived_1.2.7-1ubuntu1.merge.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+attachment/3770115/+files/keepalived_1.2.7-1ubuntu1.merge.debdiff

** Patch added: "keepalived_1.2.7-1_keepalived_1.2.7-1ubuntu1.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+attachment/3771189/+files/keepalived_1.2.7-1_keepalived_1.2.7-1ubuntu1.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1183300

Title:
  Please upgrade keepalived to the latest upstream version

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1183300] Re: Please upgrade keepalived to the latest upstream version

[Adam Stokes]

Updated from suggestions in reviewer's comments

** Patch added: "keepalived_1.2.7-1ubuntu1.merge.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+attachment/3771190/+files/keepalived_1.2.7-1ubuntu1.merge.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1183300

Title:
  Please upgrade keepalived to the latest upstream version

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1183300/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1211876] Re: keepalived reload buggy

[Adam Stokes]

** Summary changed:

- [Precise] keepalived reload buggy
+ keepalived reload buggy

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1211876

Title:
  keepalived reload buggy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1211876/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1211876] Re: keepalived reload buggy

[Adam Stokes]

** Changed in: keepalived (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1211876

Title:
  keepalived reload buggy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1211876/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1207102] Re: Set PXE class lease expiration to 30 seconds

[Adam Stokes]

The precise version should contain this fix as well, could I get an eta
when the next maas releases are going to be done?

Thanks!
Adam

** Also affects: maas (Ubuntu Precise)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to maas in Ubuntu.
https://bugs.launchpad.net/bugs/1207102

Title:
  Set PXE class lease expiration to 30 seconds

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/maas/+bug/1207102/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 924002] Re: [Lucid] dbg package symbols are not provided for latest autofs packages

[Adam Stokes]

Martin,

Subscribed you to this bug in hopes you may have a better understanding
of why the dbg package isn't being built? This is an ongoing issue with
several packages and probably needs to be brought up at the next UDS.

Thanks
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to autofs5 in Ubuntu.
https://bugs.launchpad.net/bugs/924002

Title:
  [Lucid] dbg package symbols are not provided for latest autofs
  packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/924002/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 924002] Re: build system strips binaries, so no debug symbol packages available

[Adam Stokes]

This patch puts all stripped executables and shared libraries into their
relevant -dbg packages.

** Patch added: "autofs5_5.0.6-0ubuntu3.unstable.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/924002/+attachment/2728194/+files/autofs5_5.0.6-0ubuntu3.unstable.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to autofs5 in Ubuntu.
https://bugs.launchpad.net/bugs/924002

Title:
  build system strips binaries, so no debug symbol packages available

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/924002/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 924002] Re: build system strips binaries, so no debug symbol packages available

[Adam Stokes]

Output of autofs5-dbgsym

dpkg -L autofs5-dbgsym 
/.
/usr
/usr/lib
/usr/lib/debug
/usr/lib/debug/usr
/usr/lib/debug/usr/sbin

>> /usr/lib/debug/usr/sbin/automount

/usr/lib/debug/usr/lib
/usr/lib/debug/usr/lib/autofs
/usr/lib/debug/usr/lib/autofs/mount_ext2.so
/usr/lib/debug/usr/lib/autofs/lookup_file.so
/usr/lib/debug/usr/lib/autofs/lookup_program.so
/usr/lib/debug/usr/lib/autofs/mount_bind.so
/usr/lib/debug/usr/lib/autofs/lookup_userhome.so
/usr/lib/debug/usr/lib/autofs/lookup_multi.so
/usr/lib/debug/usr/lib/autofs/lookup_hosts.so
/usr/lib/debug/usr/lib/autofs/lookup_yp.so
/usr/lib/debug/usr/lib/autofs/mount_changer.so
/usr/lib/debug/usr/lib/autofs/mount_afs.so
/usr/lib/debug/usr/lib/autofs/lookup_nisplus.so
/usr/lib/debug/usr/lib/autofs/mount_autofs.so
/usr/lib/debug/usr/lib/autofs/mount_generic.so
/usr/lib/debug/usr/lib/autofs/mount_nfs.so
/usr/lib/debug/usr/lib/autofs/parse_sun.so

What is it you are missing exactly?

Thanks
Adam

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to autofs5 in Ubuntu.
https://bugs.launchpad.net/bugs/924002

Title:
  build system strips binaries, so no debug symbol packages available

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/autofs5/+bug/924002/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[Adam Stokes]

re #108 (cdmiller)

Is this fix still a workable solution for you and have you run into any
issues not yet experienced on this bug?

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1481337] Re: please update keepalived to version 1.2.17 or higher

[Adam Stokes]

** Also affects: keepalived (Ubuntu Wily)
   Importance: Undecided
   Status: New

** Also affects: keepalived (Ubuntu Trusty)
   Importance: Undecided
   Status: New

** Also affects: keepalived (Ubuntu Vivid)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to keepalived in Ubuntu.
https://bugs.launchpad.net/bugs/1481337

Title:
  please update keepalived to version 1.2.17 or higher

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1481337/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1486296] [NEW] Unable to start VMs under a lxc container

[Adam Stokes]

Public bug reported:

Our installer attempts to load VM's within an lxc container. This worked
on trusty, however, with the latest releases from vivid and wily those
VM's are unable to start. This affects running juju-local within a
container as well.

We think it has something to do with cgmanager/cgproxy, however, we can
manually run and launch qemu just fine within the container. This could
potentially be an issue with libvirt attempt to set cgroup values for
the qemu processes.

The current workaround to get a VM to start within a vivid and wily
container running LXC 1.1.2+ is to disable cgroups in
/etc/libvirt/qemu.conf

I'm starting this bug and will ask Ryan Harper to provide a more in-
depth result of his debugging, but, wanted to have this on the radar.

Specs:

Host:
Vivid, kernel: 3.19.0-15-generic, lxc: 1.1.3+stable~20150815-0227-0ubuntu1~vivid

Container:
Vivid, kernel: 3.19.0-15-generic, lxc: 1.1.2-0ubuntu3.1, libvirt 
1.2.12-0ubuntu14.1

** Affects: libvirt (Ubuntu)
 Importance: Undecided
 Status: New

** Affects: libvirt (Ubuntu Vivid)
 Importance: Undecided
 Status: New

** Affects: libvirt (Ubuntu Wily)
 Importance: Undecided
 Status: New


** Tags: cloud-installer

** Also affects: libvirt (Ubuntu Wily)
   Importance: Undecided
   Status: New

** Also affects: libvirt (Ubuntu Vivid)
   Importance: Undecided
   Status: New

** Tags added: cloud-installer

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in Ubuntu.
https://bugs.launchpad.net/bugs/1486296

Title:
  Unable to start VMs under a lxc container

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1486296/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1508744] Re: Upgrade to Ubuntu 15.10 Broken: lxc-net.service fails on upgrade

[Adam Stokes]

I hit this too, I actually just had to run:

/usr/lib/x86_64-linux-gnu/lxc/lxc-net stop

And it seemed to put itself back into a state that systemd could work
with

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1508744

Title:
  Upgrade to Ubuntu 15.10 Broken: lxc-net.service fails on upgrade

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/1508744/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1509414] Re: lxc postinst script checks available interfaces, can choose

[Adam Stokes]

** Tags added: cloud-installer

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1509414

Title:
  lxc postinst script checks available interfaces, can choose

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1509414] Re: lxc postinst script checks available interfaces, can choose

[Adam Stokes]

** Changed in: lxc (Ubuntu)
   Importance: Undecided => Critical

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1509414

Title:
  lxc postinst script checks available interfaces, can choose

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1509414] Re: lxc postinst script checks available interfaces, can choose

[Adam Stokes]

** Description changed:

- The released wily image preinstalls lxc, which breaks the assumption
- that lxc's preinst packaging script makes:
+ [Problem]
+ The released wily image preinstalls lxc, which breaks the assumption that 
lxc's preinst packaging script makes:
  
  It inspects the network to try to pick a 10.0.N.0 network that isn't
  being used, with N starting at 3, so this appears to have picked
  10.0.3.0 when it was installed on whatever system was generating the
  image. This conflicts with the network that eth0 gets attached to when
  the image is brought up in a container, because it gets attached to the
  host's lxcbr0, which is using 10.0.3.x.
  
  This affects LXC, and should affect LXD but doesn't currently. (see #2)
  The easiest way to reproduce this is to use the ubuntu-cloud lxc template on 
a wily host:
  
+ [Test Case]
+ 
  sudo lxc-create -t ubuntu-cloud -n wily
  sudo lxc-start -n wily
  sudo lxc-attach -n wily
  # inside container, test connectivity, eg:
  apt-get update
+ 
+ [Regression Potentional]
+ Currently none as networking didn't work initially.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1509414

Title:
  lxc postinst script checks available interfaces, can choose

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1509414] Re: lxc postinst script checks available interfaces, can choose

[Adam Stokes]

** Description changed:

  [Problem]
  The released wily image preinstalls lxc, which breaks the assumption that 
lxc's preinst packaging script makes:
  
  It inspects the network to try to pick a 10.0.N.0 network that isn't
  being used, with N starting at 3, so this appears to have picked
  10.0.3.0 when it was installed on whatever system was generating the
  image. This conflicts with the network that eth0 gets attached to when
  the image is brought up in a container, because it gets attached to the
  host's lxcbr0, which is using 10.0.3.x.
  
- This affects LXC, and should affect LXD but doesn't currently. (see #2)
+ This affects LXC, and should affect LXD but doesn't currently, as the 
metadata used for lxd images is still pointing to a beta2 release.
  The easiest way to reproduce this is to use the ubuntu-cloud lxc template on 
a wily host:
  
  [Test Case]
  
  sudo lxc-create -t ubuntu-cloud -n wily
  sudo lxc-start -n wily
  sudo lxc-attach -n wily
  # inside container, test connectivity, eg:
  apt-get update
  
  [Regression Potentional]
  Currently none as networking didn't work initially.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1509414

Title:
  lxc postinst script checks available interfaces, can choose

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1509414] Re: pre-installed lxc in cloud image produces broken lxc (and later lxd) containers

[Adam Stokes]

I've also tested manually and via our OpenStack installer and lxcbr0 is
assigned (10.0.4.1) and the network is able to reach out to the internet
as before.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1509414

Title:
  pre-installed lxc in cloud image produces broken lxc (and later lxd)
  containers

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1509414/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1547640] Re: proxy tries ipv6 and gets 503 when no ipv6 routes

[Adam Stokes]

** Tags added: cloud-installer

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to squid in Ubuntu.
https://bugs.launchpad.net/bugs/1547640

Title:
  proxy tries ipv6 and gets 503 when no ipv6 routes

To manage notifications about this bug go to:
https://bugs.launchpad.net/maas/+bug/1547640/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

[Adam Stokes]

For completeness this is the lintian output in all its glory:

E: juju2 changes: bad-distribution-in-changes-file xenial-amd64
N: 
N:You've specified an unknown target distribution for your upload in the
N:debian/changelog file. It is possible that you are uploading for a
N:different distribution than the one Lintian is checking for. In that
N:case, passing --profile $VENDOR may fix this warning.
N:
N:Note that the distributions non-free and contrib are no longer valid.
N:You'll have to use distribution unstable and Section: non-free/xxx or
N:Section: contrib/xxx instead.
N:
N:Refer to Debian Policy Manual section 5.6.14 (Distribution) for details.
N:
N:Severity: important, Certainty: certain
N:
N:Check: changes-file, Type: changes
N: 
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju ang and
N: 
N:Lintian found a spelling error in the given binary. Lintian has a list
N:of common misspellings that it looks for. It does not have a dictionary
N:like a spelling checker does.
N:
N:If the string containing the spelling error is translated with the help
N:of gettext or a similar tool, please fix the error in the translations
N:as well as the English text to avoid making the translations fuzzy. With
N:gettext, for example, this means you should also fix the spelling
N:mistake in the corresponding msgids in the *.po files.
N:
N:You can often find the word in the source code by running:
N:
N: grep -rw  
N:
N:This tag may produce false positives for words that contain non-ASCII
N:characters due to limitations in strings.
N:
N:Severity: minor, Certainty: wild-guess
N:
N:Check: binaries, Type: binary, udeb
N: 
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju Succesfully 
Successfully
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju enviroment 
environment
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju specifed 
specified
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju transfered 
transferred
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju reenabled 
re-enabled
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju intial 
initial
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju reenable 
re-enable
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju ommitted 
omitted
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju precendence 
precedence
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju allows to 
allows one to
E: juju2: embedded-library usr/lib/juju-2.0-beta2/bin/juju: libyaml
N: 
N:The given ELF object appears to have been statically linked to a
N:library. Doing this is strongly discouraged due to the extra work needed
N:by the security team to fix all the extra embedded copies or trigger the
N:package rebuilds, as appropriate.
N:
N:If the package uses a modified version of the given library it is highly
N:recommended to coordinate with the library's maintainer to include the
N:changes on the system version of the library.
N:
N:Refer to Debian Policy Manual section 4.13 (Convenience copies of code)
N:for details.
N:
N:Severity: serious, Certainty: possible
N:
N:Check: binaries, Type: binary, udeb
N: 
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata ang 
and
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
enviroment environment
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
specifed specified
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
arbitary arbitrary
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
precendence precedence
E: juju2: embedded-library usr/lib/juju-2.0-beta2/bin/juju-metadata: libyaml
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-restore ang 
and
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-restore 
specifed specified
E: juju2: embedded-library usr/lib/juju-2.0-beta2/bin/juju-restore: libyaml
W: juju2: hardening-no-relro usr/lib/juju-2.0-beta2/bin/juju-restore
N: 
N:This package provides an ELF binary that lacks the "read-only
N:relocation" link flag. This package was likely not built with the
N:default Debian compiler flags defined by dpkg-buildflags. If built using
N:dpkg-buildflags directly, be sure to import LDFLAGS.
N:
N:Refer to https://wiki.debian.org/Hardening for details.
N:
N:Severity: normal, Certainty: certain
N:
N:Check: binaries, Type: binary, udeb
N: 
I: juju2: spelling-error-in-binary 
usr/lib/juju-2.0-beta2/bin/juju-upgrade-mongo ang and
I: juju2: spelling-error-in-binary 
usr/lib/juju-2.0-beta2/bin/juju-upgrade-mongo specifed specified
E: juju2: unstripped-binary-or-object 
usr/

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

[Adam Stokes]

With my latest changes here is the lintian report:

I: juju2 source: wildcard-matches-nothing-in-dep5-copyright 
src/github.com/chai2010/gettext-go (paragraph at line 58)
N: 
N:The wildcard that was specified matches no file in the source tree. This
N:either indicates that you should fix the wildcard so that it matches the
N:intended file or that you can remove the wildcard. Notice that in
N:contrast to shell globs, the "*" (star or asterisk) matches slashes and
N:leading dots.
N:
N:Refer to
N:https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ for
N:details.
N:
N:Severity: minor, Certainty: possible
N:
N:Check: source-copyright, Type: source
N: 
I: juju2 source: wildcard-matches-nothing-in-dep5-copyright 
src/github.com/chai2010/gettext-go (paragraph at line 65)
I: juju2 source: wildcard-matches-nothing-in-dep5-copyright 
src/golang.org/x/net/html/charset/testdata/* (paragraph at line 455)
W: juju2 source: dep5-copyright-license-name-not-unique (paragraph at line 1328)
N: 
N:This paragraph defines an already defined license.
N:
N:According to the specification, short license names are required to be
N:unique within a single copyright file.
N:
N:Refer to
N:https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ for
N:details.
N:
N:Severity: normal, Certainty: possible
N:
N:Check: source-copyright, Type: source
N: 
W: juju2 source: dep5-copyright-license-name-not-unique (paragraph at line 1615)
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/LICENSE
N: 
N:The source tree contains a file which was not matched by any of the
N:Files paragraphs in debian/copyright. Either adjust existing wildcards
N:to match that file or add a new Files paragraph.
N:
N:Refer to
N:https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ for
N:details.
N:
N:Severity: normal, Certainty: possible
N:
N:Check: source-copyright, Type: source
N: 
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/README.md
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/Makefile
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/hello.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/hi/hi.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local.zip
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/default/LC_MESSAGES/hello.mo
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/default/LC_MESSAGES/hello.po
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/default/LC_RESOURCE/hello/favicon.ico
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/default/LC_RESOURCE/hello/poems.txt
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/zh_CN/LC_MESSAGES/hello.mo
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/zh_CN/LC_MESSAGES/hello.po
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/zh_CN/LC_RESOURCE/hello/poems.txt
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/zh_TW/LC_MESSAGES/hello.mo
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/zh_TW/LC_MESSAGES/hello.po
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/examples/local/zh_TW/LC_RESOURCE/hello/poems.txt
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/caller.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/caller_test.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/doc.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/domain.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/domain_helper.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/fs.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/gettext.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/gettext_test.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/hello.go
W: juju2 source: file-without-copyright-information 
src/github.com/chai2010/gettext-go/gettext/local.go

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

[Adam Stokes]

Ok I've gotten it down to some minor packaging issues:

I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju ang and
N: 
N:Lintian found a spelling error in the given binary. Lintian has a list
N:of common misspellings that it looks for. It does not have a dictionary
N:like a spelling checker does.
N:
N:If the string containing the spelling error is translated with the help
N:of gettext or a similar tool, please fix the error in the translations
N:as well as the English text to avoid making the translations fuzzy. With
N:gettext, for example, this means you should also fix the spelling
N:mistake in the corresponding msgids in the *.po files.
N:
N:You can often find the word in the source code by running:
N:
N: grep -rw  
N:
N:This tag may produce false positives for words that contain non-ASCII
N:characters due to limitations in strings.
N:
N:Severity: minor, Certainty: wild-guess
N:
N:Check: binaries, Type: binary, udeb
N: 
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju Succesfully 
Successfully
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju enviroment 
environment
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju specifed 
specified
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju transfered 
transferred
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju reenabled 
re-enabled
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju intial 
initial
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju reenable 
re-enable
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju ommitted 
omitted
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju precendence 
precedence
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju allows to 
allows one to
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata ang 
and
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
enviroment environment
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
specifed specified
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
arbitary arbitrary
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-metadata 
precendence precedence
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-restore ang 
and
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/juju-restore 
specifed specified
I: juju2: spelling-error-in-binary 
usr/lib/juju-2.0-beta2/bin/juju-upgrade-mongo ang and
I: juju2: spelling-error-in-binary 
usr/lib/juju-2.0-beta2/bin/juju-upgrade-mongo specifed specified
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/jujud ang and
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/jujud Succesfully 
Successfully
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/jujud enviroment 
environment
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/jujud specifed 
specified
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/jujud addreses 
addresses
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/jujud overriden 
overridden
I: juju2: spelling-error-in-binary usr/lib/juju-2.0-beta2/bin/jujud precendence 
precedence


But i don't think this should hold up the upload.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1560315

Title:
  [needs packaging] juju2 beta is not in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1560315/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

[Adam Stokes]

** Description changed:

  Juju 2.0 will be in xenial. We want to place juju 2.0-beta2 (or possibly
  beta3) in xenial for Ubuntu users to test.
  
  This branch introduces the juju2 package.
  
  lp:~juju-qa/ubuntu/xenial/juju2/xenial-2.0-beta2
  
  The juju team propose a new juju2 packages that is co-installable with
  the juju-core package. This allows users to have juju 2.x and 1.x
  installed on the xenial host. Users can maintain their 1.x envs
  while creating new Juju 2.x deployments.
  
  This branch is based on
  lp:~sinzui/ubuntu/xenial/juju-core/xenial-1.25.4
  Which is stalled. We are waiting for a 1.25.5 released. We want to
  use this as the base because it minimises the changes in the debian
  dir.
  
    * New upstream release (Lp: 1560315).
    * d/control:
  - Renamed the package juju-core to juju2.
  - Dropped unneeded juju-local* and juju packages.
    * d/rules:
  - Renamed the package to juju2.
  - Updated rules to 2.x.
  - Additional path/name changes to support co-installability with
    the 1.x juju-core package.
    * d/copyright: Updated per changes to embedded dependencies.
    * d/tests/*
  - Updated tests to use juju2 command line.
  - Replaced local-provider tests with lxd tests.
  
  [Devel Fix]
  
  [sinzui] Prepare source package and diffs: DONE
- [stokachu] Review package: TODO
+ [stokachu] Review package: DONE
  [stokachu] Upload to the development release (xenial-proposed): TODO
  
  [sinzui] Upstream QA test against xenial: TODO
  [sinzui] Test streams with xenial-proposed: TODO

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1560315

Title:
  [needs packaging] juju2 beta is not in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1560315/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

[Adam Stokes]

** Description changed:

  Juju 2.0 will be in xenial. We want to place juju 2.0-beta2 (or possibly
  beta3) in xenial for Ubuntu users to test.
  
  This branch introduces the juju2 package.
  
  lp:~juju-qa/ubuntu/xenial/juju2/xenial-2.0-beta2
  
  The juju team propose a new juju2 packages that is co-installable with
  the juju-core package. This allows users to have juju 2.x and 1.x
  installed on the xenial host. Users can maintain their 1.x envs
  while creating new Juju 2.x deployments.
  
  This branch is based on
  lp:~sinzui/ubuntu/xenial/juju-core/xenial-1.25.4
  Which is stalled. We are waiting for a 1.25.5 released. We want to
  use this as the base because it minimises the changes in the debian
  dir.
  
    * New upstream release (Lp: 1560315).
    * d/control:
  - Renamed the package juju-core to juju2.
  - Dropped unneeded juju-local* and juju packages.
    * d/rules:
  - Renamed the package to juju2.
  - Updated rules to 2.x.
  - Additional path/name changes to support co-installability with
    the 1.x juju-core package.
    * d/copyright: Updated per changes to embedded dependencies.
    * d/tests/*
  - Updated tests to use juju2 command line.
  - Replaced local-provider tests with lxd tests.
  
  [Devel Fix]
  
  [sinzui] Prepare source package and diffs: DONE
  [stokachu] Review package: DONE
- [stokachu] Upload to the development release (xenial-proposed): TODO
+ [stokachu] Upload to the development release (xenial-proposed): DONE
  
  [sinzui] Upstream QA test against xenial: TODO
  [sinzui] Test streams with xenial-proposed: TODO

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1560315

Title:
  [needs packaging] juju2 beta is not in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1560315/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

[Adam Stokes]

** Changed in: juju-core (Ubuntu)
   Status: Triaged => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1560315

Title:
  [needs packaging] juju2 beta is not in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1560315/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1545913] Re: [FFe] juju-core 2.0

[Adam Stokes]

Also want to mention the openstack package as well.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1545913

Title:
  [FFe] juju-core 2.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1545913/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1545913] Re: [FFe] juju-core 2.0

[Adam Stokes]

** Tags added: conjure

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to juju-core in Ubuntu.
https://bugs.launchpad.net/bugs/1545913

Title:
  [FFe] juju-core 2.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1545913/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1307733] Re: python3-netaddr 0.7.10 with poor python3 support

[Adam Stokes]

James,

I looked into using this module in our cloud installer, one bug in
particular that exists in 0.7.10 but not in 0.7.13 is the use of
sys.maxint:


Traceback (most recent call last):
  File "", line 1, in 
  File "/usr/share/openstack/cloudinstall/netutils.py", line 78, in get_ip_set
ips = list(IPSet([cidr]))
  File "/usr/lib/python3/dist-packages/netaddr/ip/sets.py", line 518, in __len__
if size > _sys.maxint:
AttributeError: 'module' object has no attribute 'maxint'

Code to reproduce:
from netaddr import IPSet
def get_ip_set(cidr):
""" Returns a list of ip's in cidr for use in juju's no-proxy setting
"""
ips = list(IPSet([cidr]))
return ",".join(str(x) for x in ips)

get_ip_set('10.0.4.0/24')

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-netaddr in Ubuntu.
https://bugs.launchpad.net/bugs/1307733

Title:
  python3-netaddr 0.7.10 with poor python3 support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-netaddr/+bug/1307733/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1307733] Re: python3-netaddr 0.7.10 with poor python3 support

[Adam Stokes]

Looks like a small typo

if size > _sys.maxint should be if size > _sys_maxint

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-netaddr in Ubuntu.
https://bugs.launchpad.net/bugs/1307733

Title:
  python3-netaddr 0.7.10 with poor python3 support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-netaddr/+bug/1307733/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs