[opensuse-factory] Re: commit mozilla-nss
Hi, I just got this one and would have a few questions on that. h_root wrote:
here is the log from the commit of package mozilla-nss checked in at Fri Sep 14 00:46:19 CEST 2007.
-------- --- GNOME/mozilla-nss/mozilla-nss.changes 2007-07-27 17:59:00.000000000 +0200 +++ /mounts/work_src_done/STABLE/mozilla-nss/mozilla-nss.changes 2007-09-13 22:28:02.782983000 +0200 @@ -1,0 +2,7 @@ +Thu Sep 13 22:26:57 CEST 2007 - jberkman@novell.com + +- merge -tools package into main package +- create system-wide nssdb for system configuration of smart cards, + as used by pam_pkcs11, krb5 pkinit, and others + +-------------------------------------------------------------------
So where is the bug number in that changelog entry? We are after beta3 so I'd expect a bugnumber here. What's the reason to merge the tools subpackage to the base package? That looks like a move in the wrong direction given the shared library convention having libraries in an extra package. Wolfgang --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On 9/14/07, Wolfgang Rosenauer
So where is the bug number in that changelog entry? We are after beta3 so I'd expect a bugnumber here.
There is no bug number because nobody has used the functionality that this supports. The second someone would try to use it there would be one! There are plenty of relevant fate #s, such as 301351 and then a really vague one or two. I could certainly open a new bug.
What's the reason to merge the tools subpackage to the base package?
The packages that perform system-wide certificate authentication (pam_pkcs11, krb5-preauth-plugin-pkinit or something) use a system-wide nss database for configuration of pkcs11 packages. The postinst scripts for pkcs11 packages should probably add themselves to this system db, but someone needs to create this database in the first place. It may as well be the nss package itself. So, that means that the tools package is always needed; I asked on one of the opensuse lists (-gnome?) last week about this, but I guess you're not on that? Anyway I don't really care either way what the package layout is; we just need to make sure that both the libs and tools are both installed by anyone who needs nss. -- jacob --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
jacob berkman wrote:
On 9/14/07, Wolfgang Rosenauer
wrote: So where is the bug number in that changelog entry? We are after beta3 so I'd expect a bugnumber here.
There is no bug number because nobody has used the functionality that this supports. The second someone would try to use it there would be one! There are plenty of relevant fate #s, such as 301351 and then a really vague one or two. I could certainly open a new bug.
What's the reason to merge the tools subpackage to the base package?
The packages that perform system-wide certificate authentication (pam_pkcs11, krb5-preauth-plugin-pkinit or something) use a system-wide nss database for configuration of pkcs11 packages. The postinst scripts for pkcs11 packages should probably add themselves to this system db, but someone needs to create this database in the first place. It may as well be the nss package itself.
That might be all true and actually a thing like that was planned when I still was there. I don't argue against the fact that the -tools package is needed anyway in these cases.
So, that means that the tools package is always needed;
No, it isn't. mozilla-nss (the libs) are used by the mozilla applications (and a few others) which don't need the tools. So it's not _always_ needed to have a working NSS environment. It's _always_ needed if "(pam_pkcs11, krb5-preauth-plugin-pkinit or something)" is used. That's the difference.
I asked on one of the opensuse lists (-gnome?) last week about this, but I guess you're not on that?
No, I'm not. I don't have anything to do with Gnome but I have much to do with mozilla and NSS isn't Gnome related at all.
Anyway I don't really care either way what the package layout is; we just need to make sure that both the libs and tools are both installed by anyone who needs nss.
OK, that's a valid point but the solution IMHO is not to add the tools to the library package but having correct dependencies or patterns reflecting the requirement. Thanks for your feedback, Wolfgang --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (2)
-
jacob berkman
-
Wolfgang Rosenauer