[arch-dev-public] [signoff] tcp_wrappers rebuild bonanza

[Allan McRae]

On 22/07/11 01:58, Dan McGee wrote:
> On Wed, Jul 20, 2011 at 11:37 PM, Eric Bélanger<snowmaniscool at gmail.com>  wrote:
>> On Tue, Jul 19, 2011 at 4:30 PM, Eric Bélanger<snowmaniscool at gmail.com>  wrote:
>>> On Tue, Jul 19, 2011 at 2:13 AM, Tobias Powalowski
>>> <tobias.powalowski at googlemail.com>  wrote:
>>>> Am 19.07.2011 08:01, schrieb Eric Bélanger:
>>>>> On Mon, Jul 18, 2011 at 7:28 PM, Dave Reisner<d at falconindy.com>  wrote:
>>>>>> 5 packages in core were affected by this:
>>>>>>
>>>>>> inetutils
>>>>>> nfs-utils
>>>>>> syslog-ng
>>>>>> openssh
>>>>>> xinetd
>>>>>>
>>>>>> Note that we still have 2 packages in extra to get this rebuild
>>>>>> completed -- archboot and openldap, before we can do the viking funeral
>>>>>> for tcp_wrappers.
>>>>>
>>>>> I checked out archboot for the rebuild but the archboot scripts
>>>>> themselves refers to tcp_wrappers. Ultimately, I decided to let Tobias
>>>>> or someone else handle it. Anyway, I don't think that many people use
>>>>> archboot on a regular basis.
>>>>>
>>>>> The split libldap/openldap package is finally done and in testing. :)
>>>>> Because, in addition to the tcp_wrapper support removal, it also has
>>>>> an upstream update (of 2 minor versions) and important changes and
>>>>> improvements, I would like specific signoffs for libldap/openldap to
>>>>> make sure everything works fine.
>>>>>
>>>>> BTW, when you'll move it to core, it might be better to do a db-remove
>>>>> on the libldap in core and openldap in extra before moving the package
>>>>> out of testing. I'm not sure how well the dbscripts will handle a
>>>>> combined split-PKGBUILD and repo-switch combination.
>>>>>
>>>>> List of changes to libldap/openldap package:
>>>>>
>>>>> - Upstream update
>>>>> - Combine libldap and openldap in a splitted PKGBUILD
>>>>> - Update ntlm.patch so it applies
>>>>> - Remove tcp_wrappers support
>>>>> - Fix permissions on libldap libraries
>>>>> - Change run directory from /var/lib/openldap/run to /run
>>>>> - Move unix ldapi socket to /run (close FS#21051)
>>>>> - Change libexecdir to /usr/lib
>>>>> - Enable slapd overlays (close FS#14598)
>>>>> - PKGBUILD cleanup
>>>>>
>>>>> Eric
>>>>>>
>>>>>> Signoff both arches,
>>>>>> dave
>>>>>>
>>>> I would just push a rebuild without tcp_wrappers in depends.
>>>> The rest I fix on next archboot release.
>>>> greetings
>>>> tpowa
>>>>
>>>
>>> I just pushed a rebuilt archboot in testing.
>>>
>>> BTW, there seem to be a permission issues for openldap when slapd is
>>> run as non-root: https://bugs.archlinux.org/task/25168
>>>
>>> I'm not sure if slapd is even meant to be run as non-root (you need to
>>> be root to read its config file) or if the one in the old package was
>>> working as non-root. So the rebuild will need to stay in testing until
>>> I figure it out.
>>>
>>
>> I've put a libldap/openldap 2.4.26-2 in testing. With that version,
>> the slapd daemon is run as a ldap user instead of root.  Please test
>> this new version and signoff.
>
> A bit of a trial by fire, but this all has been moved from *testing
> and into the relevant repositories.

Are you going to remove the tcp_wrappers package too or hold off for a bit?

Allan