[Pkg-openldap-devel] r920 - openldap/trunk/debian

[Steve Langasek]

Author: vorlon
Date: 2007-12-16 12:40:38 +0000 (Sun, 16 Dec 2007)
New Revision: 920

Modified:
   openldap/trunk/debian/changelog
   openldap/trunk/debian/configure.options
Log:
Don't build with LAN Manager password support; these passwords are more
insecure than traditional Unix crypt, and only relevant when talking to
Windows 98.

If someone really needs lanman passwords, then the patch from bug #245341
will also need to be updated and applied, since the existing code doesn't
build with gcrypt; but I strongly advise against re-enabling these password
hashes, as even Samba isn't going to be using them by default anymore in
hardy/lenny and beyond.



Modified: openldap/trunk/debian/changelog
===================================================================
--- openldap/trunk/debian/changelog	2007-12-16 12:30:23 UTC (rev 919)
+++ openldap/trunk/debian/changelog	2007-12-16 12:40:38 UTC (rev 920)
@@ -38,8 +38,11 @@
     phase.
   * Don't stop slapd in the preinst by hand, the prerm already stops the
     old slapd using the standard interfaces.
+  * Don't build with LAN Manager password support; these passwords are more
+    insecure than traditional Unix crypt, and only relevant when talking to
+    Windows 98.
 
- -- Steve Langasek <vorlon at debian.org>  Sun, 16 Dec 2007 03:35:25 -0800
+ -- Steve Langasek <vorlon at debian.org>  Sun, 16 Dec 2007 04:33:49 -0800
 
 openldap2.3 (2.3.39-1) unstable; urgency=medium
 

Modified: openldap/trunk/debian/configure.options
===================================================================
--- openldap/trunk/debian/configure.options	2007-12-16 12:30:23 UTC (rev 919)
+++ openldap/trunk/debian/configure.options	2007-12-16 12:40:38 UTC (rev 920)
@@ -86,7 +86,7 @@
 #--enable-crypt	  enable crypt(3) passwords [no]
 --enable-crypt
 #--enable-lmpasswd	  enable LAN Manager passwords [no]
---enable-lmpasswd
+--disable-lmpasswd
 #--enable-spasswd	  enable (Cyrus) SASL password verification [no]
 --enable-spasswd
 #--enable-modules	  enable dynamic module support [no]