Bug#1057311: bookworm-pu: package debian-edu-config/2.12.41~deb12u1
Mike Gabriel <[email protected]>
| Newsgroups | gmane.linux.skolelinux.devel |
|---|---|
| Message-ID | <170159000614.26832.10500445270309489114.reportbug__37270.2861133561$1701590305$gmane$org@sunobo.fritz.box> |
Package: release.debian.org Severity: normal Tags: bookworm User: [email protected] Usertags: pu X-Debbugs-Cc: [email protected], [email protected] Control: affects -1 + src:debian-edu-config Here comes a last minute fixup for just accepted 2.12.40~deb12u1 of debian-edu-config. We had one last Debian Edu 12 issue related to not being able to change user passwords via GOsa². [ Reason ] Last Friday, it turned out, that the password change hook mechanism in GOsa² would pass on passwords to hook scripts with base64 encoding (instead of plaintext). (Yes, this sounds awful, but it is needed for e.g. updating Kerberos5 passwords and Samba passwords in Debian Edu). This upload honours this change in GOsa² and picks up the passwords as base64 decoded before piping them into kadmin.local and smbpasswd. [ Impact ] Debian Edu 12 users won't be able to change their passwords via GOsa² (IDM of Debian Edu). [ Tests ] Manually. [ Risks ] Only for Debian Edu users. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in (old)stable [x] the issue is verified as fixed in unstable [ Changes ] + [ Guido Berhoerster ] + * gosa-sync: Decode the user password which GOsa substitutes base64 encoded. + This fixes a bug where the user password could not be set or changed. + (related to #1052159). [ Other info ] I attached two .debdiff files: * one against the bookworm-pu 2.12.40~deb12u1 version of d-e-c (already accepted) * one against the bookworm 2.12.32 version of d-e-c
debian-edu-config_2.12.40~deb12u1_2.12.41~deb12u1.debdiff
(text/plain, 2 KB)
diff -Nru debian-edu-config-2.12.40~deb12u1/debian/changelog debian-edu-config-2.12.41~deb12u1/debian/changelog --- debian-edu-config-2.12.40~deb12u1/debian/changelog 2023-11-30 08:36:15.000000000 +0100 +++ debian-edu-config-2.12.41~deb12u1/debian/changelog 2023-12-03 08:45:42.000000000 +0100 @@ -1,3 +1,18 @@ +debian-edu-config (2.12.41~deb12u1) bookworm; urgency=medium + + * Upload to bookworm. + + -- Mike Gabriel <[email protected]> Sun, 03 Dec 2023 08:45:42 +0100 + +debian-edu-config (2.12.41) unstable; urgency=medium + + [ Guido Berhoerster ] + * gosa-sync: Decode the user password which GOsa substitutes base64 encoded. + This fixes a bug where the user password could not be set or changed. + (related to #1052159). + + -- Mike Gabriel <[email protected]> Fri, 01 Dec 2023 21:44:38 +0100 + debian-edu-config (2.12.40~deb12u1) bookworm; urgency=medium * Upload to bookworm. @@ -7,7 +22,7 @@ debian-edu-config (2.12.40) unstable; urgency=medium * share/debian-edu-config/gosa.conf.template: - + Deploy GOsæ² based on its classic theming, the Materialize CSS theme is + + Deploy GOsa² based on its classic theming, the Materialize CSS theme is too immature to be used in production. -- Mike Gabriel <[email protected]> Thu, 30 Nov 2023 08:32:34 +0100 diff -Nru debian-edu-config-2.12.40~deb12u1/share/debian-edu-config/tools/gosa-sync debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/gosa-sync --- debian-edu-config-2.12.40~deb12u1/share/debian-edu-config/tools/gosa-sync 2022-02-11 21:40:55.000000000 +0100 +++ debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/gosa-sync 2023-12-03 08:45:01.000000000 +0100 @@ -33,13 +33,10 @@ TMPFILE=$(mktemp) trap "rm -f $TMPFILE" ERR SIGHUP SIGINT SIGTERM -cat <<EOF | tr -d "\n" > "$TMPFILE" +base64 -d - <<EOF > "$TMPFILE" $USERPASSWORD EOF -# remove escapes from the password added by GOsa²... -sed -i $TMPFILE -e 's/\\//g' - # check the password in $TMPfile against LDAP... IAM=`ldapwhoami -x -Z -y "$TMPFILE" -D "$USERDN" 2>/dev/null || true`
debian-edu-config_2.12.32_2.12.41~deb12u1.debdiff
(text/plain, 143.3 KB) - not displayed