Bug#927306: stretch-pu: package gosa/2.7.4+reloaded3-7~deb9u2

[Mike Gabriel]

Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian.org at packages.debian.org
Usertags: pu

Dear stable release team,

This version of GOsa² drops obsoleted dependency on php-mcrypt (removed
from PHP 7.2).

The php-mcrypt functionality has been replaced by code that utilizes
the openssl support in PHP.

For new installations of GOsa², there is nothing to do.

People upgrading from a previous GOsa² version, please follow these
steps:

    * check if /etc/gosa/gosa.conf contains hashed values for passwords
    * if so, run the script (exactly once!):gosa-mcrypt-to-openssl-passwords

People using GOsa² on Debian stretch who plan to upgrade to GOsa² from
Debian buster, must make sure that they do the above explained
crypto-transition while still on Debian stretch (which ships php7.0 that
still has php-mcrypt). (See #925138).

The crypto-transition won't be technically possible on Debian buster
due to missing php-mcrypt.

Other than the crypto-transition, this version of GOsa drops support
for gosa-plugin-fai, gosa-plugin-opsi and gosa-plugin-heimdal (not maintained
upstream anymore, not functional anymore).

Instead of extracting the crypto-transition changes from buster's GOsa²
version, the preferred approach of handling this is getting all benefits
of buster's GOsa into Debian stretch (which basically matches GOsa² in
stretch-backports). Note, that the GOsa² from stretch-backports has been
well tested over months on production servers running Debian Edu at
schools in Schleswig-Holstein, Germany.

light+love
Mike

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-2-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled