Comment 19 for bug 369575

Revision history for this message
Daniel Richard G. (skunk) wrote :

> But I suppose that's what NEWS.Debian is for.

You could also stick in a debconf notice, like what x11-common had for a while ("Major possible upgrade issues").

> Right -- if you're already distributing a krb5.conf with this setting, surely the same mechanism could be used to override the PAM configuration as well.

At the moment, my PAM-profile override *is* put into place by the same script that adds the minimum_uid bit to krb5.conf. But that's just a workaround. I don't need a workaround; I need a fix for this, so that I can toss the workaround :-)

(Incidentally, Russ, Steve... what would you think of asking minimum_uid as a debconf question, when initially creating krb5.conf? Other sites may want to frob this setting as well.)