Accepted nis 4.0 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 24 Jan 2021 12:16:28 +0100
Source: nis
Architecture: source
Version: 4.0
Distribution: unstable
Urgency: medium
Maintainer: Francesco Paolo Lovergine <frankie@debian.org>
Changed-By: Francesco Paolo Lovergine <frankie@debian.org>
Closes: 118023 126177 213733 231808 256979 329382 437639 545723 558456 589821 631628 703667 798339 800002 878625 886331 890994 979371
Changes:
nis (4.0) unstable; urgency=medium
.
== The 'Welcome in 21th century' edition ==
.
* Package split in three different new source packages. This package is now
an arch-indep native meta-package that depends on ypserv, ypbind-mt and
yp-tools. This has also the advantage of being the same structure used by
other distributions. Added a pair of Provides - nis-client and nis-server
- to be more explicit for new users.
* All upstream software is now up-to-date.
(closes: #800002)
* All packages use new d-helper and policy ATM, that solve a few different
historical issues.
(closes: #631628, #437639, #545723)
* The purpose of this package is helping the transition to the new
organization of the NIS stuff. Existing configurations should be upgraded
smoothly via postinst, or almost.
* All debconf stuff now removed. Now administrator has to set
/etc/defaultdomain and accurately follow the nis.debian.howto document
provided in order to setup servers and clients for all possible cases.
(closes: #558456, #231808)
* All packages now use systemd units and timer, when available.
The traditional /etc/default/nis configuration file is still
optionally used if the admin needed to change options. This also
solves improper start/stop in chroot.
(closes: #589821, #256979, #890994)
* The traditional init scripts are still provided and can be used with sysvrc
init for flavors/administrators that prefer so.
* The original init script is now split in yserv and ypbind-mt and removed here
to avoid to cope with annoying warnings about missing systemd services for nis.
The new scripts are a lot more simple and mimic the behavior of systemd
services, i.e. start/stop daemon and nothing more. They are still controlled
by NIS(MASTER|CLIENT) vars in /etc/default/nis.
* All historical patches, scripts and stuff here and there have been now
removed.
* Now nscd | unscd is a recommendation of ypbind-mt. That implies that
restarting those services is totally an admin's duty when maps change.
(closes: #878625)
* Thanks to use of systemd units, now postinst/prerm scripts in general do not
start/stop/restart anything, but for the one time upgrade from 3.17 -> 4.0.
All that is left to systemd. Even, in that case the scripts don't fail.
That implies that in general ypbind shouldn't simply block an upgrade
or remove, because they are totally controlled by admin who should
undestand in what cases stopping ypserv could hang ypbind and PAM for
minutes. Maintain a resilient configuration (i.e. setup multiple servers)
in NIS is mandatory!
Also, the admin can restart services at her/his will, and specifically
ypbind should be stopped before a ypserv restart and then started again
after, when servers are not redundant. That should hopefully fix the RPC
timeouts that happen in some corner cases.
(closes: #118023, #703667, #886331, #213733, #798339)
* Current ypserv binds on all available interfaces. Also, ypbind honors
loopback address in /etc/yp.conf and has eventually also a -local-only to
bind only to localhost. No more denied messages on multi-homed hosts.
(closes: #126177, #329382)
* preinst/postinst should take care of a smooth upgrade from 3.17 and stop
NIS services, then reactivate them via systemd, iff sysvrc is not in use.
* Introduced Pre-Depends to depend on init-systems-helper >= 1.58. That's
to use deb-systemd-invoke and do The Right Thing.
* Systems that need to enable NIS auth via ypbind should also install
libnss-nis, which is now separated from glibc and only recommended.
So introduced a Recommends also in ypbind-mt.
(closes: #979371)
* The broadcast mode is not more the defaut for ypbind at start and should
be deprecated, because it creates more problems than it solves.
Checksums-Sha1:
d36a51c2e91fa95018761204c2d26f9b9e99b6a3 1518 nis_4.0.dsc
0eefb542d2be49b93f4fbe664462e9d2c29bcaea 21420 nis_4.0.tar.xz
6da16a772c42d2330d5a5f5ab645bedc23fae09d 5625 nis_4.0_amd64.buildinfo
Checksums-Sha256:
b1277d8a8d7d2aec04506663b3b6619217e7ea87bdde9bf16d12b2ea03e88e3b 1518 nis_4.0.dsc
782633e8242c1a7c4841ae39d1b95e554b9e31890c9d738f0cf31a990e256657 21420 nis_4.0.tar.xz
7c9e784135a49658d2f052792e320f1a2817bc532e5261b40b096fc871e538b9 5625 nis_4.0_amd64.buildinfo
Files:
05c97be150f500816ac98e557b8879ed 1518 net optional nis_4.0.dsc
322a1d9cfbe6e913824d4a6ab072ff8b 21420 net optional nis_4.0.tar.xz
63d876f9bd17e804dc55541038b3ac93 5625 net optional nis_4.0_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJHBAEBCgAxFiEEBXmpeiI46/m+Ye0CDwKl4RY2hqQFAmANV2QTHGZyYW5raWVA
ZGViaWFuLm9yZwAKCRAPAqXhFjaGpI5xD/9YoTRdOGRNNboKqlZAdKrcQ6cVXzSS
ZnwRPg83qC/uWau/9oAzy98XkxM3G1FCJNYzqVn2n/5knK7wA4QaxTUM91BLaruK
TaWKBmgd+EMn+AlFXsQARoT2kcklOvwsv97FY4x2J5o7mTewCddDIzaWbD0aEaDr
V7Jh5LMUWQ7AhcwlXeyr9uc1MXoq9ObR84XdVa2XvI0cpDw4wSn3ni+ptOVvIGRQ
pbLg9Uhd5CMtHPF0cL8jh4iTP/AYF5JjXlddSwW9AffQTCsOaSftjspIy6X9n6H9
V96ljT3Zv7H0sgGM4Zd73ny+/eJ/WvG/WuWZlkuOQA4W/h8f8BaopAb0t07CM4pN
1pSeW6MAKBlu7hOgdEgUcj/vhhDoh0Y5yKHIoikNYvAfbrLRSv7BAYXdyQ3uX7Mb
o4SxiomDQA6yeN6wiI21fnEv4S4rtMRQQZCHmEdsQEChcM7qYj0ZhlK7o055pGce
0PYwtLhZqGOy8lSzefxx2tNlpQlcxvtJFLrt9jzE7O6yjfAlPccfsMmGroaqofvG
Qwiwr59EoklLV/ZlfEcW4g8PkpxOF6Pk1ryZ99O4PBoOn+SOP1AxtOYfrrFtOkTS
QwLocnpypinrz7PyJUUuGGxcnXgW0iJJYJ19gov+Sw84tJzAwP6Kl7B2iJ8Uy5wg
DzV2x88INepxJA==
=uxjr
-----END PGP SIGNATURE-----