Bug#527260: Patch to use krb5 1.7 interface

[Sam Hartman]

package: libauthen-krb5-admin-perl
Version: 0.11-1
Severity: important
Tags: patch

Hi.  Kerberos 1.7 just entered unstable.  Kerberos 1.7 makes the
admin.h interface public, so it should be possible to use the actual
upstream interface rather than an internal header taken from the
upstream sources.  I attach a patch to do this.  The
krb5_config_params structure in the 1.7 libraries is different than
the one in this package's admin.h.  In theory that could cause random
segfaults or security problems, although I'm un able to come up with
situations where that's the case with this code.  So, if you choose
not to take this patch, things *might* be OK, but I'd feel a lot safer
if you actually did this patch.

Either way, you should rebuild and re-upload with or without this
patch in order to link against the right shared libraries.  Please
build-depend on libkrb5-dev (>= 1.7~beta1) to make sure that you get
the right dependencies.  If you don't rebuild and re-upload, your
package will become uninstallable in unstable when libkadm55 is
removed in a day or two.  At that point I'll open a grave bug and
propose an delayed NMU.

I have run the regression tests with this patch applied.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: use_1_7_admin_interface
Type: application/octet-stream
Size: 13486 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20090506/e84d9299/attachment.obj>