Bug 26668 - Secure APT für lokales Repository deaktivieren
Secure APT für lokales Repository deaktivieren
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Update - Repository administration
UCS 3.0
Other Linux
: P5 minor (vote)
: UCS 3.0-2
Assigned To: Philipp Hahn
Stefan Gohmann
: interim-2
Depends on:
Blocks: 26669
  Show dependency treegraph
 
Reported: 2012-03-30 09:03 CEST by Tim Petersen
Modified: 2012-07-20 15:25 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tim Petersen univentionstaff 2012-03-30 09:03:52 CEST
Aufgefallen an Ticket #2012032621002016:

python/univention-repository-create:

print "The local repository has been created."
        print
        print
        print "UCS validates the archive integrity through signed Release files (using the secure"
        print "APT mechanism). Secure APT is not yet available for local repositories. As such, it"
        print "should be disabled by setting the Univention Configuration Registry variable"
        print "update/secure_apt to no:"
        print
        print "ucr set update/secure_apt=no"

Es sollte an dieser Stelle darauf hingewiesen werden, dass die Variable dann auch auf allen Systemen gesetzt werden muss, die das Repository verwenden.
Comment 1 Philipp Hahn univentionstaff 2012-06-26 14:44:31 CEST
univention-repository-create gibt nun folgende Meldung aus:
| The local repository has been created.
| 
| UCS validates the archive integrity through signed Release files (using the
| secure APT mechanism). Secure APT is not yet available for local repositories.
| As such, it should be disabled on this and all other hosts using this
| repository by setting the Univention Configuration Registry (UCR) variable
| update/secure_apt to no:
|
|   ucr set update/secure_apt=no
|
| This is best done in a domain by defining an UCR Policy, which sets this variable
| and is applied to all hosts using this repository server.

svn33798, univention-updater_7.0.167-5.1045.201206261436

ChangeLog: svn13635
\item Extend the notice in \ucsCommand{univention-repository-create} that \ucsUCRV{update/secure\_apt} needs to be disabled on all hosts using that local repository (\ucsBug{26668})
Comment 2 Stefan Gohmann univentionstaff 2012-07-02 13:30:37 CEST
OK
Comment 3 Stefan Gohmann univentionstaff 2012-07-20 15:25:13 CEST
UCS 3.0-2 has been released: 
  http://forum.univention.de/viewtopic.php?f=54&t=1905

If this error occurs again, please use "Clone This Bug".