[Freeipa] [Bug 1746947] [NEW] failing autopkgtest due to password issue by nss

2018-02-02 Thread ChristianEhrhardt
Public bug reported: Hi, I was failed by autopkgtests of freeipa, but not the old "ip route output changed" case. Like: https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-bionic/bionic/amd64/f/freeipa/20180201_161632_c9091@/log.gz It essentiall

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-02 Thread ChristianEhrhardt
Subscribing tjaalton to get his opinion on this. -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1746947 Title: failing autopkgtest due to password issue by nss Status in freeipa package in Ub

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-02 Thread ChristianEhrhardt
It also seems to have effect on bug 1746948 with corosync postinst. I only thought "hey nss minor update, why not pull it in", but without help to understand and resolve this I might be forced to go to a 3.35+really3.34 update to go back as I'm not enough of an nss expert to resolve :-/ -- You r

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-04 Thread ChristianEhrhardt
Hi Timo, according to my sniff tests it will fail later on in 4.6.2 as well. It seems the new nss makes the crypto/passwords no more behave the way as expected. Of course the autopkgtest for 4.6.2 won't fail (as there is no old cert8.db, so the call is skipped), but if there would be one (e.g. on

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-04 Thread ChristianEhrhardt
I want to decouple things a bit to make this bug less blocking, so I will: 1. prep a nss upload 2:3.35-2ubuntu1+really3.34.1-1ubuntu1 That will (for now) skip the nss merge that I meant to do to help while coming by, but seems to cause issues. 2. test that in a ppa if it would test correctl

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-05 Thread ChristianEhrhardt
** Also affects: nss (Ubuntu) Importance: Undecided Status: New ** Changed in: nss (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1746947 Title:

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-05 Thread ChristianEhrhardt
For a better overview and to make a decision (as a +really version always sucks to some extend) I did some tests: - built nss 3.34 with the freebl3 change in ppa [1] as 2:3.35-2ubuntu1+really3.34-1ubuntu2 - set up some containers to test - ran the sequence of installs/commands that freeipa tests

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-05 Thread ChristianEhrhardt
I was discussing this with Timo and he correctly pointed out that reverting [1] might be enough. This would allow to get all fixes of 3.35, but at the same time not run into this bug here all over the place. Building with that for some test runs. [1]: https://github.com/nss- dev/nss/commit/33b1

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-05 Thread ChristianEhrhardt
Built with said change - and now testing against the nss in the ppa (should all work): - install 4.4 (ppa) -> OK - install 4.6 (proposed + ppa) -> OK - old python call against 4.4 (ppa) -> OK - new python call against 4.6 (proposed + ppa) -> OK I dupped Corosync on here, so lets verify it fixes t

[Freeipa] [Bug 1747411] [NEW] Change of default database file format to SQL

2018-02-05 Thread ChristianEhrhardt
Public bug reported: nss in version 3.35 in upstream changed [2] the default file format [1] (if no explicit one is specified). For now we reverted that change in bug 1746947 until all packages depending on it are ready to work with that correctly. This bug here is about to track when the rever

[Freeipa] [Bug 1746947] Re: failing autopkgtest due to password issue by nss

2018-02-06 Thread ChristianEhrhardt
** Changed in: freeipa (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of FreeIPA, which is subscribed to freeipa in Ubuntu. https://bugs.launchpad.net/bugs/1746947 Title: failing autopkgtest due to password issue by nss Status in freeip

[Freeipa] [Bug 1747411] Re: Change of default database file format to SQL

2018-05-07 Thread ChristianEhrhardt
For corosync the affected components are corosync-qnetd. I checked and without adaption on install they would be fine as they initialize a new DB and nowhere does anyone specify the type. But as with some other tools on an upgrade we have to assume that the old DBM format will be tried to be read

[Freeipa] [Bug 1747411] Re: Change of default database file format to SQL

2018-05-07 Thread ChristianEhrhardt
Corosync is actually a sync for Cosmic, with all Delta dropped: * Merge with Debian unstable (LP: #1747411). Remaining changes: * Dropped Changes: - Properly restart corosync and pacemaker together (LP: #1740892) d/rules: pass --restart-after-upgrade to dh_installinit. (th

[Freeipa] [Bug 1747411] Re: Change of default database file format to SQL

2018-05-08 Thread ChristianEhrhardt
** Merge proposal linked: https://code.launchpad.net/~paelzer/ubuntu/+source/nss/+git/nss/+merge/345213 -- You received this bug notification because you are a member of FreeIPA, which is subscribed to dogtag-pki in Ubuntu. https://bugs.launchpad.net/bugs/1747411 Title: Change of default da