Subject: nis: map values containing non-ascii characters vanish
Package: nis
Version: 3.17-6
Severity: critical
Justification: breaks the whole system


Solaris 10 and Debian nis package 3.13-2 both accept non-ascii
characters in maps:

  sol-10$ ypcat passwd|grep Mark|awk -F: '{print $5}'|od -c
  0000000   K   .       M   a   r   k   s   t   r 367   m  \n
  0000015

  nis_3.13-2$ ypcat passwd|grep Mark|awk -F: '{print $5}'|od -c
  0000000   K   .       M   a   r   k   s   t   r 367   m  \n
  0000015

However, 3.17-6 does not:

  nis_3.17-6$ ypcat passwd|grep Mark|awk -F: '{print $5}'|od -c
  0000000

This breaks login access to the system.

Custom maps may also not behave as expected, which leads to
silent corruption of other data on the system. For example,
I build my apache htpasswd files using NIS password data and
users with non-ascii in their gecos are silently excluded.



-- Package-specific info:
nm-tool is not installed

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-amd64
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages nis depends on:
hi  debconf [debconf-2.0]  1.5.11etch1       Debian configuration management sy
hi  libc6                  2.3.6.ds1-13etch5 GNU C Library: Shared libraries
ii  libdbus-1-3            1.0.2-1           simple interprocess messaging syst
ii  libdbus-glib-1-2       0.71-3            simple interprocess messaging syst
hi  libgdbm3               1.8.3-3           GNU dbm database routines (runtime
ii  libglib2.0-0           2.12.4-2          The GLib library of C routines
ii  libslp1                1.2.1-6.2         OpenSLP libraries
hi  lsb-base               3.1-23.2etch1     Linux Standard Base 3.1 init scrip
hi  make                   3.81-2            The GNU version of the "make" util
hi  netbase                4.29              Basic TCP/IP networking system
hi  portmap                5-26              The RPC portmapper

nis recommends no packages.

-- debconf information excluded




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to