Re: dm upload permissions

2012-09-28 Thread Arno Töll
Hi, On 28.09.2012 10:53, Bart Martens wrote: > For your information, here are a few reports about DM upload permissions : > http://qa.debian.org/~bartm/dm-permissions/ just for the records, before people start writing more tools: I've written one myself and asked for inclusi

dm upload permissions

2012-09-28 Thread Bart Martens
Hello, For your information, here are a few reports about DM upload permissions : http://qa.debian.org/~bartm/dm-permissions/ The reports are made using these information sources : - the old DMUA=yes flags in the debian/control files - the new DM upload permissions in http://ftp

Re: DM upload permissions in detail

2011-04-27 Thread Torsten Werner
Am -10.01.-28163 20:59, schrieb brian m. carlson: > This isn't very clear. The OpenPGP standard doesn't specify a fixed > ordering for user IDs, so the order in which the user IDs for a given > key are written is undefined. If they're written from a hash/map whose > ordering changes every time it

Re: DM upload permissions in detail

2011-04-27 Thread brian m. carlson
On Wed, Apr 27, 2011 at 10:28:35AM +0200, Torsten Werner wrote: > Am -10.01.-28163 20:59, schrieb Philipp Kern: > > On 2011-04-26, Torsten Werner wrote: > >> the first UID with an email address is used by dak. > > > > The "first" being the one with the newest self-sig? > > No, just the 'first' o

Re: DM upload permissions in detail

2011-04-27 Thread Ben Hutchings
On Wed, 2011-04-27 at 13:21 +0200, Arno Töll wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi Simon, > > On 27.04.2011 11:09, Simon McVittie wrote: > > Since the code snippet you quoted will accept a match for either the > > "real name" part or the email part, you could just add a

Re: DM upload permissions in detail

2011-04-27 Thread Arno Töll
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Simon, On 27.04.2011 11:09, Simon McVittie wrote: > Since the code snippet you quoted will accept a match for either the > "real name" part or the email part, you could just add a secondary UID > with the same (spelling of your) name but a Debian-s

Re: DM upload permissions in detail

2011-04-27 Thread Thomas Hochstein
Ben Finney schrieb: >> the first UID with an email address is used by dak. It can be changed >> manually if there is a good reason for such a change. Please file a >> bug report against ftp.debian.org if you need such a change. > > Why is an additional reason needed? Why isn't it sufficient that t

Re: DM upload permissions in detail

2011-04-27 Thread Simon McVittie
On Tue, 26 Apr 2011 at 22:34:23 +0200, Arno Töll wrote: > Thanks for your answer. Good to hear there is at least the possibility > to come around this issue. Now I am curious what such a good reason > would be. Let's say would "I don't want to be spammed on my primary UID, > hence I use for Debian

Re: DM upload permissions in detail

2011-04-27 Thread Torsten Werner
Am -10.01.-28163 20:59, schrieb Arno Töll: > I am no DM (yet), I just wanted to make things clear in advance as I > want to approach DD signings soon. You could create a new key for your Debian work but you would lose existing signatures. Torsten -- To UNSUBSCRIBE, email to debian-devel-requ..

Re: DM upload permissions in detail

2011-04-27 Thread Torsten Werner
Am -10.01.-28163 20:59, schrieb Philipp Kern: > On 2011-04-26, Torsten Werner wrote: >> the first UID with an email address is used by dak. > > The "first" being the one with the newest self-sig? No, just the 'first' one. Torsten -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.

Re: DM upload permissions in detail

2011-04-26 Thread Ben Finney
Torsten Werner writes: > Hi Arno, > > Am -10.01.-28163 20:59, schrieb Arno Töll: > > Now, what's exactly meant by primary UID? The primary GPG UID? If > > yes, am I right when I assume signing a package with a non-primary > > GPG UID or even more with a sub key won't work to fulfill DM upload > >

Re: DM upload permissions in detail

2011-04-26 Thread Arno Töll
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Torsten, On 26.04.2011 16:06, Torsten Werner wrote: > the first UID with an email address is used by dak. It can be changed > manually if there is a good reason for such a change. Please file a bug > report against ftp.debian.org if you need such a

Re: DM upload permissions in detail

2011-04-26 Thread Philipp Kern
On 2011-04-26, Torsten Werner wrote: > Am -10.01.-28163 20:59, schrieb Arno Töll: >> Now, what's exactly meant by primary UID? The primary GPG UID? If yes, >> am I right when I assume signing a package with a non-primary GPG UID >> or even more with a sub key won't work to fulfill DM upload rights

Re: DM upload permissions in detail

2011-04-26 Thread Torsten Werner
Hi Arno, Am -10.01.-28163 20:59, schrieb Arno Töll: > Now, what's exactly meant by primary UID? The primary GPG UID? If yes, > am I right when I assume signing a package with a non-primary GPG UID > or even more with a sub key won't work to fulfill DM upload rights? the first UID with an email ad

DM upload permissions in detail

2011-04-26 Thread Arno Töll
the same name in Debian if email == fpr.uid.uid or name == fpr.uid.name: accept = True break This seems to support my assumption as only a single, i.e. the first UID of the fingerprint is verified for DM upload permissions. Given that the followin