Package: fusiondirectory Severity: importantFollow up for https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016029 (this bug is archived, but I think my comments should be recorded somewhere)
On Mon, 25 Jul 2022 16:05:53 +0200 Mike Gabriel <mike.gabr...@das-netzwerkteam.de> wrote:
Package: ftp.debian.org Severity: normal The fusiondirectory src:package has been maintained by myself and upstream in the past. As fusiondirectory does not come with a build system, we implemented the build system in debian/*.install in the past. Upstream has recently chosen to hide their debian/* packaging from the public and chosen to make the DEB packaging an asset. From now on you can only receive latest DEB packages of fusiondirectory via a subscription.
They do provide new versions from their public repositories without subscription, but they don't provide source packages, only binary .deb packages [1].
Actually, they cannot withhold the packaging files, as it would violate the terms of GPL 2.0 - debian packaging is a derivative work of fusion directory, which is under GPL 2.0. They can do that only if they hold copyright to the whole codebase or get permission from every single copyright holder. Since they forked Gosa, it is unlikely they rewrote the code or took permission from all external contributors.
I have asked them to publish the source packages as they are required to do it under GPL as they won't be able distribute the code from external contributors without following GPL [2].
Any copyright holder / contributor can enforce this. Mike, they are violating your copyright for debian/* files at least.I don't think we should let them get away with clear GPL violation this easily (just removing the package).
As Debian maintainer, I consider this a dead end for FusionDirectory in Debian, because I don't have the time to reverse engineer upstream's intentions regarding where to install what file via the DEB. This, I ask for having fusiondirectory removed from Debian unstable (and testing). Thanks, Mike
[1] https://fusiondirectory-user-manual.readthedocs.io/en/latest/repositories/debian.html
[2] https://github.com/fusiondirectory/fusiondirectory/issues/90
OpenPGP_0x8F53E0193B294B75.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
