[Bug 1817376] Re: krb5-admin-server postinst has broken debconf if RUN_KADMIND set in /etc/default/krb5-admin-server

[Sam Hartman]

Robie any chance I could get you to sync krb5 1.17-2 from Debian
unstable to disco?
It's probably not a big deal but there's no reason not to take the fix
into Disco.

>>>>> "Robie" == Robie Basak <1817376 at bugs.launchpad.net> writes:

    Robie> Thanks Clark and Sam.  Ubuntu doesn't support upgrade paths
    Robie> that skip LTS releases. So, ignoring EOL releases, we only
    Robie> need to consider Trusty->Xenial,
    Xenial-> Bionic, Bionic->Cosmic and Cosmic->Disco. If only upgrading from 1.12 is affected,
    Robie> then from Ubuntu is Trusty->Xenial the only upgrade path
    Robie> affected?

yes.

    Robie> If so, is it just Xenial that we need to fix?


I was working with this a bit testing the upgrade from wheezy to buster
on the Debian side.  Wheezy is the only Debian release that is vaguely
extant where this could come up.
In my testing, Debconf didn't actually remove the template on an
upgrade.
So, The two cases where I found that I could reproduce the situation
Were:

* remove krb5-admin-server on the old release and install it on the new
  release (without doing an upgrade)

* Copy in a /etc/default/krb5-admin-server from another system.

Neither of those seems serious enough to backport a fix for.  I'd rather
wait until we get a better understanding of how this gets triggered
before doing any changes to xenial.  I agree though that if we need to
change any old release xenial is the only target.

--Sam

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/1817376

Title:
  krb5-admin-server postinst has broken debconf if RUN_KADMIND set in
  /etc/default/krb5-admin-server

Status in krb5 package in Ubuntu:
  Triaged

Bug description:
  Package installation fails on postinst due to broken debconf when
  /etc/default/krb5-admin-server sets RUN_KADMIND to a value.

  This happens because the .config script [0] sets debconf question krb5
  -admin-server/kadmind to the defaults file value when set to a value.
  But the .templates file [1] has no entry for this question resulting
  in a lookup failure.

  [0] https://git.launchpad.net/ubuntu/+source/krb5/tree/debian/krb5-admin-server.config#n16
  [1] https://git.launchpad.net/ubuntu/+source/krb5/tree/debian/krb5-admin-server.templates

  This bug seems to go back to at least Xenial (and also affects debian
  packaging too). We worked around this locally by removing RUN_KADMIND
  from our local defaults file, but this was an annoying bug to sort out
  and should probably be fixed. That said I'm not sure if it would be
  more appropraite to remove the db_set from [0] or add the question
  back to [1].

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1817376/+subscriptions