Requesting 2.4.44 build which includes fix for ITS#8185

[Kartik Subbarao]

I reported ITS#8185 to OpenLDAP which was fixed in the 2.4.43 release. There have been no OpenLDAP releases since 2.4.44 in February 2016, so it looks like things have been stable for a while. I'd like to request a refreshed slapd package for 2.4.44 (the most recent slapd package available on Ubuntu is 2.4.42 which dates back to August 2015). This would help me remove a manual workaround for the ITS#8185 issue, and users would also benefit from the number of fixes in 2.4.43 and 2.4.44.

http://www.openldap.org/software/release/changes.html

purging stale pwdFailureTime attributes:
http://www.openldap.org/its/index.cgi/Software%20Enhancements?id=8185;selectid=8185

[Hans Joachim Desserud (hjd)]

Thanks for reporting.

I see that Debian has packaged openldap 2.4.44+dfsg-2 (https://tracker.debian.org/pkg/openldap). Normally it would be possible to sync this package, but since the package includes some Ubuntu-specific patches, someone will likely need to manually merge it.

[Ryan Tandy (rtandy)]

Hi Kartik and Hans,

I don't recommend merging the current unstable version as support for
Heimdal was temporarily dropped. 2.4.44+dfsg-3 with Heimdal re-enabled
will be uploaded soon on the Debian side and that should be a better
candidate.

As usual, I will propose a merge once I'm happy with the state of the
package in Debian, unless someone beats me to it. I can't make any
promises with regards to the Zesty timeline, sorry.

[Kartik Subbarao (subbarao)]

Understood, thanks for the responses Ryan and Hans.

[Nish Aravamudan (nacc)]

I'm merging openldap 2.4.44+dfsg-3 today, I hope. Any concerns you have, Ryan?

[Ryan Tandy (rtandy)]

On Fri, Feb 10, 2017 at 06:12:22PM -0000, Nish Aravamudan wrote:
>I'm merging openldap 2.4.44+dfsg-3 today, I hope. Any concerns you have,
>Ryan?

Thanks for working on it. I thought zesty would have frozen by now,
actually.

FWIW, there is an ubuntu branch in the packaging repository on alioth.
My usual workflow is to merge release tags into that branch.

I'm expecting to do a -4 with translation updates and bug fixes in the
next while. Should be minor update compared to the merge.

[Nish Aravamudan (nacc)]

On 10.02.2017 [18:27:24 -0000], Ryan Tandy wrote:
> On Fri, Feb 10, 2017 at 06:12:22PM -0000, Nish Aravamudan wrote:
> >I'm merging openldap 2.4.44+dfsg-3 today, I hope. Any concerns you have,
> >Ryan?
>
> Thanks for working on it. I thought zesty would have frozen by now,
> actually.

I think FF is next week :)

> FWIW, there is an ubuntu branch in the packaging repository on alioth.
> My usual workflow is to merge release tags into that branch.

Ah ok, do you want me to send the patches via git to you there? The
Server Team has adopted
(https://wiki.ubuntu.com/UbuntuDevelopment/Merging/GitWorkflow) for
Ubuntu merges so we have our own tree (that's tracking the archive(s)
for Ubuntu & Debian). But I am happy to send a patch or pull request
anywhere as you would like.

> I'm expecting to do a -4 with translation updates and bug fixes in the
> next while. Should be minor update compared to the merge.

Good to know!

Note that in the process of doing the merge, I think I found a bit of
delta that is actually missing. The last several merges have mentioned
d/rules installing the apport hook (added in 2.4.23-0ubuntu1), but I
believe that it got accidentally dropped on the next merge to Debian
(2.4.23-6ubuntu1) and no one has noticed since -- note that this is a
good reason to use the above workflow, as the d/changelog mentioned
delta that I couldn't find! Can you confirm that you see the same. I'll
fix this in the new merge (but does mean, I think apport for openldap
has been broken for a long time).

[Ryan Tandy (rtandy)]

On Fri, Feb 10, 2017 at 07:03:14PM -0000, Nish Aravamudan wrote:
>Ah ok, do you want me to send the patches via git to you there? The
>Server Team has adopted
>(https://wiki.ubuntu.com/UbuntuDevelopment/Merging/GitWorkflow) for
>Ubuntu merges so we have our own tree (that's tracking the archive(s)
>for Ubuntu & Debian). But I am happy to send a patch or pull request
>anywhere as you would like.

Not sure. I'll have a look when you're done. I'll probably pull it in as
a patch, to avoid dragging in the entire second copy of the history.

>Note that in the process of doing the merge, I think I found a bit of
>delta that is actually missing. The last several merges have mentioned
>d/rules installing the apport hook (added in 2.4.23-0ubuntu1), but I
>believe that it got accidentally dropped on the next merge to Debian
>(2.4.23-6ubuntu1) and no one has noticed since -- note that this is a
>good reason to use the above workflow, as the d/changelog mentioned
>delta that I couldn't find! Can you confirm that you see the same. I'll
>fix this in the new merge (but does mean, I think apport for openldap
>has been broken for a long time).

My branch only has ubuntu history starting from when I got involved
(around 2.4.40) - made one attempt at importing the bzr history into git
but it didn't go well.

From the bzr history, it looks to me like it got lost in
2.4.25-4ubuntu1, when the conversion to dh was merged:

http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/wily/openldap/wily/revision/46#debian/rules

But yes, a long time.

[Launchpad Janitor (janitor)]

This bug was fixed in the package openldap - 2.4.44+dfsg-3ubuntu2

---------------
openldap (2.4.44+dfsg-3ubuntu2) zesty; urgency=medium

  * d/rules: Fix typo in previous upload.

 -- Nishanth Aravamudan <email address hidden> Fri, 10 Feb 2017 12:17:02 -0800

[Kartik Subbarao (subbarao)]

Thanks!