Hello Ondřej,

On Mon, Jan 21, 2019 at 05:54:39PM +0100, OndÅ?ej Surý wrote:
I spent a half-day hacking cyrus-sasl2 and I uploaded 2.1.27 to experimental. I would appreciate if more people can test the package (I won’t have time until tomorrow or next week). I didn’t even had a chance to test it myself, so even the basic it installs and nothing breaks horribly would help.

Thank you for spending some time working on the package! I have spent some time looking at it this evening.

I noticed in debian/control that the Build-Depends lines for libpod-pom-view-restructured-perl and python3-sphinx are indented with mixed spaces and tabs.

I confirm that these bugs are fixed:
#880393 (MIT modules installed in heimdal pkg)
#919639 (man pages were empty -- please close this one in changelog)

These bugs still exist:
#917140 (changes from old NMUs silently dropped)
#917129 (unnecessary GSSAPI linking breaks slapd-smbk5pwd)

I already opened merge requests on salsa for these last two and am rebasing them now; would you mind taking a look? #917129 in particular would be great to have in buster as slapd-smbk5pwd is currently unusable with heimdal.

I tested the following use cases:

* testsaslauthd with saslauthd using sasldb backend
* testsaslauthd with saslauthd using pam backend
* testsaslauthd with saslauthd using ldap backend
* testsaslauthd with saslauthd using kerberos5 backend
* EXTERNAL authentication to slapd
* GSSAPI authentication to slapd (heimdal module)
* GSSAPI authentication to slapd (MIT module)
* DIGEST-MD5 authentication to slapd (password stored in slapd)
* PLAIN authentication to slapd (password stored in slapd)
* PLAIN authentication to slapd with pass-through to saslauthd
* LOGIN authentication to slapd with pass-through to saslauthd

and all of those are working fine. I have not looked at the sql or otp modules.

I also checked some man pages and the html docs (-doc package) briefly and everything looked ok.

Thank you for working on cyrus-sasl2, and please consider adding the patch for #917129 if you can. :)

cheers,
Ryan

Reply via email to