package: libauthen-krb5-admin-perl Version: 0.11-1 Severity: important Tags: patch
Hi. Kerberos 1.7 just entered unstable. Kerberos 1.7 makes the admin.h interface public, so it should be possible to use the actual upstream interface rather than an internal header taken from the upstream sources. I attach a patch to do this. The krb5_config_params structure in the 1.7 libraries is different than the one in this package's admin.h. In theory that could cause random segfaults or security problems, although I'm un able to come up with situations where that's the case with this code. So, if you choose not to take this patch, things *might* be OK, but I'd feel a lot safer if you actually did this patch. Either way, you should rebuild and re-upload with or without this patch in order to link against the right shared libraries. Please build-depend on libkrb5-dev (>= 1.7~beta1) to make sure that you get the right dependencies. If you don't rebuild and re-upload, your package will become uninstallable in unstable when libkadm55 is removed in a day or two. At that point I'll open a grave bug and propose an delayed NMU. I have run the regression tests with this patch applied.
use_1_7_admin_interface
Description: Binary data
