Ubuntu
cntlm package

[hardy] cntlm gpg error The following signatures were invalid: NODATA 2

Bug #257210 reported by marcobra (Marco Braida)
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
cntlm (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

[SRU] The debdiff attached to LP: #1009436 backports cntlm-0.92.3-1ubuntu1 from Quantal to Precise.

[IMPACT]
When behind a corporate proxy requiring NTLM authentication, users are unable to download and install GPG keys through apt-get and apt-add-repository.

[Test Case]
Cntlm should be correctly configured and network proxy applied system wide as 127.0.0.1 port 3128 for HTTP, HTTPS and FTP, but not Socks.

Run 'sudo add-apt-repository ppa:ginggs/ppa', press Enter to continue when promtped.
0.91 behaviour: the message 'gpg: requesting key 08CC41D2 from hkp server keyserver.ubuntu.com' appears and then stops responding.
0.92 behaviour: the key is downloaded and installed normally.

[Regression Potential]
Minimal: cntlm has no dependants and no dependencies besides libc6.
Please see LP: #1009436 for additional information.

---------------------------------------------------------------------------------------

Binary package hint: cntlm

[hardy] using cntlm: from Intrepid i get gpg error on update

Binary package hint: update-manager

I'm under a corporate proxy.
Using Hardy with cntlm cntlm 0.35.1-1.

I usually get access and to my corporate proxy via this Hardy + cntlm pc, usually it works fine.

But into 2 days i can't download any update/upgrade, i have tried for more than once and at different hours.

With:

sudo apt-get update

from an Ubuntu Intrepid pc i always get the following error:

W: GPG error: http://archive.ubuntu.com intrepid Release: The following signatures were invalid: NODATA 2

i have choose more than one mirror software-source, always i get same error, all works fine with Hardy repositories.

Shutting down cntlm and running my old (previous used) ntlmaps all works fine.

Thank you

See original description
Revision history for this message
marcobra (Marco Braida) (marcobra) wrote :

I'm trying to get more debug infos.

Not related to previous issue but todey i read this error:

sudo cntlm -v -f -c /etc/cntlm.conf

cntlm[13608]: Serious error during accept: Too many open files
Joining thread 3083991952; rc: 0
cntlm[13608]: Connection accepted from 127.0.0.1:52329
Thread processing...
cannot create socket(): Too many open files

If developer needs more or different infos i'm glad to send.

Hope this helps

Revision history for this message
marcobra (Marco Braida) (marcobra) wrote :

Trying to debug cntlm

sudo cntlm -T cntlm_debug.txt -v -f -c /etc/cntlm.conf

i see real response... 407

my /etc/cntlm.conf
....
Auth LM
PassLM secret.....BCA4AEBFB11
Flags 0x06820000
....

Thank you

Revision history for this message
Graham Inggs (ginggs) wrote :

debdiff for Precise attached to LP: #1009436

Graham Inggs (ginggs)
description: updated
Revision history for this message
Chris Halse Rogers (raof) wrote : Please test proposed package

Hello marcobra, or anyone else affected,

Accepted cntlm into precise-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/cntlm/0.92.3-0ubuntu0.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please change the bug tag from verification-needed to verification-done. If it does not, change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags: added: verification-needed
Revision history for this message
Graham Inggs (ginggs) wrote :

This is a simpler test case that only tests retrieving a key with gpg. Tested on both the i386 and amd64 versions of cntlm in precise-proposed.

cntlm 0.91~rc6-0ubuntu2.12.04.1:

$ gpg --keyserver keyserver.ubuntu.com --recv-keys c0b21f32
gpg: requesting key C0B21F32 from hkp server keyserver.ubuntu.com
gpg: no valid OpenPGP data found.
gpg: key C0B21F32: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: Total number processed: 1
gpg: w/o user IDs: 1
gpg: keyserver timed out
gpg: keyserver receive failed: keyserver error

cntlm 0.92.3-0ubuntu0.1:

$ gpg --keyserver keyserver.ubuntu.com --recv-keys c0b21f32
gpg: requesting key C0B21F32 from hkp server keyserver.ubuntu.com
gpg: key C0B21F32: public key "Ubuntu Archive Automatic Signing Key (2012) <email address hidden>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg: imported: 1 (RSA: 1)

tags: added: verification-done
removed: verification-needed
Revision history for this message
Colin Watson (cjwatson) wrote : Update Released

The verification of this Stable Release Update has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regresssions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package cntlm - 0.92.3-0ubuntu0.1

---------------
cntlm (0.92.3-0ubuntu0.1) precise-proposed; urgency=low

  * Backport 0.92.3-1ubuntu1 to Precise as an SRU (LP: #1009436):
    - Properly handle non-HTTP/1.1 keep-alive (LP: #1009436, #257210)
    - Support SHOUTcast (ICY) internet radio protocol (LP: #659809)
    - Fix error when downloading files >2GB (LP: #1031670)
    - Resolve proxy hostname on demand, not at startup (LP: #825593)

cntlm (0.92.3-1ubuntu1) quantal; urgency=low

  * Cherry-pick r306 from 0.93 to properly handle non-HTTP/1.1 keep-alive
    (LP: #1009436)

cntlm (0.92.3-1) unstable; urgency=low

  * New upstream release. Closes: #652725, #588920.
  * Fix Init script error, thanks Martijn. Closes: #588683.
  * Correct spellings in man page.
  * Update Standards Version, no changes needed.
 -- Graham Inggs <email address hidden> Wed, 29 Aug 2012 16:26:00 +0200

Changed in cntlm (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.