proposed-migration for libgssglue 0.7-2

[Nick Rosbrook]

libgssglue 0.7-2 is stuck in -proposed.

The autopkgtests are failing:

650s autopkgtest [19:07:45]: test bad-configs: [-----------------------
650s + export LC_ALL=C
650s + : /usr/bin/gsasl
650s + CMD=/usr/bin/gsasl --service imap --hostname foobar --client -m GSSAPI
650s + /usr/bin/gsasl --service imap --hostname foobar --client -m GSSAPI
650s + grep gss_init_sec_context
650s /usr/bin/gsasl: mechanism error: GSSAPI error in client while negotiating security context in gss_init_sec_context() in SASL library. This is most likely due insufficient credentials or malicious interactions.
650s + + grep -e ^warning -e ^can't open
650s /usr/bin/gsasl --service imap --hostname foobar --client -m GSSAPI
650s + echo libfoobarbaz.so.3 mechglue_internal_krb5_init
650s + + grep ^can't open libfoobarbaz.so.3
650s GSSAPI_MECH_CONF=my_gssapi_mech.conf /usr/bin/gsasl --service imap --hostname foobar --client -m GSSAPI
650s autopkgtest [19:07:45]: test bad-configs: -----------------------]

...

656s autopkgtest [19:07:51]: test bad-configs-root: [-----------------------
656s + export LC_ALL=C
656s + : /usr/bin/gsasl
656s + CMD=/usr/bin/gsasl --service imap --hostname foobar --client -m GSSAPI
656s + /usr/bin/gsasl --service imap --hostname foobar --client -m GSSAPI
656s + grep gss_init_sec_context
656s /usr/bin/gsasl: mechanism error: GSSAPI error in client while negotiating security context in gss_init_sec_context() in SASL library. This is most likely due insufficient credentials or malicious interactions.
656s + + grep -e ^warning -e ^can't open
656s /usr/bin/gsasl --service imap --hostname foobar --client -m GSSAPI
656s + cp /etc/gssapi_mech.conf /etc/gssapi_mech.conf-backup
656s cp: cannot stat '/etc/gssapi_mech.conf': No such file or directory
657s autopkgtest [19:07:52]: test bad-configs-root: -----------------------]

[Nick Rosbrook (enr0n)]

The failing tests are new in this upload. I noticed this comment in debian/tests/bad-configs:

 # Test that some bad libgssglue configurations are rejected properly.
 # This also test that the binary is actually linked to libgssglue and
 # not directly to the GSS-API library.

Meaning, in order for these to work, the gsasl binary needs to be linked against libgssglue.so.1. This is the case on Debian, but not on Ubuntu:

$ git diff pkg/debian/sid..pkg/ubuntu/devel -- debian/control
diff --git a/debian/control b/debian/control
index e6b6606..cb74cc3 100644
--- a/debian/control
+++ b/debian/control
@@ -1,7 +1,8 @@
 Source: gsasl
 Section: devel
 Priority: optional
-Maintainer: Debian XMPP Maintainers <email address hidden>
+Maintainer: Ubuntu Developers <email address hidden>
+XSBC-Original-Maintainer: Debian XMPP Maintainers <email address hidden>
 Uploaders: Thadeu Lima de Souza Cascardo <email address hidden>,
            Jorge Salamero Sanz <email address hidden>,
            Simon Josefsson <email address hidden>
@@ -9,8 +10,8 @@ Build-Depends: debhelper-compat (= 13),
                gettext,
                help2man,
                libgnutls28-dev,
- libgssglue-dev,
                libidn-dev,
+ libkrb5-dev,
                libntlm0-dev,
                pkgconf,
                texinfo,
@@ -88,8 +89,8 @@ Multi-Arch: same
 Breaks: libgsasl7-dev (<< 1.10.0-2)
 Replaces: libgsasl1-dev, libgsasl7-dev (<< 1.10.0-2)
 Provides: libgsasl7-dev
-Depends: libgsasl18 (= ${binary:Version}),
- libgssglue-dev,
+Depends: krb5-multidev,
+ libgsasl18 (= ${binary:Version}),
          libidn-dev,
          libntlm0-dev,
          pkg-config,

This delta was introduced during the MIR for gsasl to avoid an additional component-mismatch for libgssglue[1].

[1] https://bugs.launchpad.net/ubuntu/+source/gsasl/+bug/1972866/comments/17

[Nick Rosbrook (enr0n)]

I think that since these tests currently assume gsasl is linked against libgssglue, it would be reasonable to skip them if that is not the case. I have sent such a patch to Debian[1], and I will upload this change to Ubuntu.

[1] https://salsa.debian.org/debian/libgssglue/-/merge_requests/2

[Launchpad Janitor (janitor)]

This bug was fixed in the package libgssglue - 0.7-2ubuntu1

---------------
libgssglue (0.7-2ubuntu1) mantic; urgency=medium

  * debian/test: skip bad-configs{,-root} if gsasl is not linked
    against libgssglue (LP: #2034709)

 -- Nick Rosbrook <email address hidden> Fri, 08 Sep 2023 12:05:27 -0400