Bug 2010528 (tcb)
| Summary: | Review Request: tcb - The alternative scheme to /etc/shadow | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Björn Esser (besser82) <besser82> |
| Component: | Package Review | Assignee: | Nobody's working on this, feel free to take it <nobody> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | besser82, ipedrosa, package-review |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-11-07 00:45:24 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 201449 | ||
|
Description
Björn Esser (besser82)
2021-10-04 22:06:56 UTC
=== Updated package === Changelog: * Mon Oct 04 2021 Björn Esser <besser82> - 1.2-0.2 - Remove archful requirements in noarch packages Koji Builds: https://koji.fedoraproject.org/koji/taskinfo?taskID=76707012 Urls: Spec URL: https://pagure.io/besser82/package-review/raw/master/f/tcb.spec SRPM URL: https://pagure.io/besser82/package-review/raw/master/f/tcb-1.2-0.2.fc36.src.rpm I don't know if I understood it correctly so I'm asking. What do you intend to do with "replace_pam_unix"? (In reply to Iker Pedrosa from comment #2) > I don't know if I understood it correctly so I'm asking. What do you intend > to do with "replace_pam_unix"? I have some plans to propose a SWC to replace the pam_unix module with the pam_tcb at some time in the future. For that reason I have added this %bcond, so I can do local package builds (rpmbuild -ba tcb.spec --with replace_pam_unix) reflecting that change for use in a VM for testing purposes, without the needed for major edits to the spec file. Basically that conditional just adds compatibility symlinks for pam_unix_*.so -> pam_tcb.so to the list of packaged files. If you are only planning to use it for your testing that's fine, but I think it's dangerous to do that in production environments. By the way, what are your plans for replacing pam_tcb in pam stack files? I think that authconfig should be aware of it and have some configuration to change between one and the other. And at some point in the future we could change the default in authconfig from pam_unix to pam_tcb. Just a little gossip, there's an authconfig SWC in draft to change pam stack files ownership to this package. === Updated package === Changelog: * Tue Oct 05 2021 Björn Esser <besser82> - 1.2-0.3 - Add soft-static group allocation preferring the gids as assigned by FPC - Merge the filesystem and sysusers sub-packages into common sub-package Koji Builds: https://koji.fedoraproject.org/koji/taskinfo?taskID=76877498 Urls: Spec URL: https://pagure.io/besser82/package-review/raw/master/f/tcb.spec SRPM URL: https://pagure.io/besser82/package-review/raw/master/f/tcb-1.2-0.3.fc36.src.rpm (In reply to Iker Pedrosa from comment #4) > If you are only planning to use it for your testing that's fine, but I think > it's dangerous to do that in production environments. There can't be any harm, but the pam-tcb package intentionally not being installable when replace_pam_unix is enabled without forcing rpm manually to explictly ignore several arising conflicts. > By the way, what are your plans for replacing pam_tcb in pam stack files? I > think that authconfig should be aware of it and have some configuration to > change between one and the other. And at some point in the future we could > change the default in authconfig from pam_unix to pam_tcb. Just a little > gossip, there's an authconfig SWC in draft to change pam stack files > ownership to this package. Using pam_tcb in the stack files is one part of the change as I have it in mind. I know there are changes needed to authconfig as well, and I think, it's a good idea to coordinate between the different changes and discuss their extends to be as little disruptive as possible. For a better understanding: pam_tcb is a leightweight, yet fully mature - well tested for over 20 years - replacement for pam_unix, offerring all its capabilities, but support for NIS(+). This is an automatic check from review-stats script. This review request ticket hasn't been updated for some time. We're sorry it is taking so long. If you're still interested in packaging this software into Fedora repositories, please respond to this comment clearing the NEEDINFO flag. You may want to update the specfile and the src.rpm to the latest version available and to propose a review swap on Fedora devel mailing list to increase chances to have your package reviewed. If this is your first package and you need a sponsor, you may want to post some informal reviews. Read more at https://fedoraproject.org/wiki/How_to_get_sponsored_into_the_packager_group. Without any reply, this request will shortly be considered abandoned and will be closed. Thank you for your patience. This is an automatic action taken by review-stats script. The ticket submitter failed to clear the NEEDINFO flag in a month. As per https://fedoraproject.org/wiki/Policy_for_stalled_package_reviews we consider this ticket as DEADREVIEW and proceed to close it. |