Switch from gid=800 to supplementaryGid=Debian

Signed-off-by: Joerg Jaspert <joerg@debian.org>

diff --git a/config/debian-security/dak.conf b/config/debian-security/dak.conf
index e1869d3ba0986f2f96bdc589f6d208cc1a94ab75..ad47e337b81946d1d8236b6daca6fb8b1d3b6d1c 100644 (file)
--- a/config/debian-security/dak.conf
+++ b/config/debian-security/dak.conf
@@ -36,7 +36,7 @@ Process-Policy
 
 Import-Users-From-Passwd
 {
-  ValidGID "800";
+  ValidGID "Debian";
   // Comma separated list of users who are in Postgres but not the passwd file
   KnownPostgres "postgres,dak,www-data,udmsearch,repuser,debian-backup";
 };

diff --git a/config/debian/dak.conf b/config/debian/dak.conf
index e5b696accc0874a0ddde2281a894f17ae2451e48..2986c9ea87527b878f41989fd4e95e60f3aabb95 100644 (file)
--- a/config/debian/dak.conf
+++ b/config/debian/dak.conf
@@ -59,7 +59,7 @@ Show-Deferred
 
 Import-Users-From-Passwd
 {
-  ValidGID "800";
+  ValidGID "Debian";
   // Comma separated list of users who are in Postgres but not the passwd file
   KnownPostgres "postgres,dak,dak-unpriv,katie,release,qa,www-data,guest,repuser,debian-backup";
 };

diff --git a/daklib/dbconn.py b/daklib/dbconn.py
old mode 100644 (file)
new mode 100755 (executable)
index e762ef7..c792ff5
--- a/daklib/dbconn.py
+++ b/daklib/dbconn.py
@@ -1031,7 +1031,7 @@ class Keyring(object):
 
         l.simple_bind_s("","")
         Attrs = l.search_s(LDAPDn, ldap.SCOPE_ONELEVEL,
-               "(&(keyfingerprint=*)(gidnumber=%s))" % (cnf["Import-Users-From-Passwd::ValidGID"]),
+               "(&(keyfingerprint=*)(supplementaryGid=%s))" % (cnf["Import-Users-From-Passwd::ValidGID"]),
                ["uid", "keyfingerprint", "cn", "mn", "sn"])
 
         ldap_fin_uid_id = {}