[Pkg-samba-maint] Bug#538034: Source package contains non-free IETF RFC/I-D

[Simon Josefsson]

Severity: serious
Package: samba
Version: 2:3.4.0-1
User: debian-release at lists.debian.org
Usertags: nonfree-doc rfc

Hi!

This source package contains the following files from the
IETF under non-free license terms:

+  samba-3.4.0/source4/ldap_server/devdocs/rfc4513.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4531.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4520.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4521.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4516.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4523.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc2696.txt
+  samba-3.4.0/source4/ldap_server/devdocs/draft-armijo-ldap-syntax-00.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc2849.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4512.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4532.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4515.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4529.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc2891.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4517.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc2307.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4527.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4510.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4518.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4524.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4533.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc3296.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4511.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4514.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4522.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4519.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4526.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4525.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4528.txt
+  samba-3.4.0/source4/ldap_server/devdocs/rfc4530.txt
+  samba-3.4.0/source4/heimdal/lib/wind/rfc4013.txt
+  samba-3.4.0/source4/heimdal/lib/wind/rfc4518.txt
+  samba-3.4.0/source4/heimdal/lib/wind/rfc3492.txt
+  samba-3.4.0/source4/heimdal/lib/wind/rfc3490.txt
+  samba-3.4.0/source4/heimdal/lib/wind/rfc3454.txt
+  samba-3.4.0/source4/heimdal/lib/wind/rfc3491.txt

The license on RFC/I-Ds is not DFSG-free, see:
 * http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=199810
 * http://release.debian.org/removing-non-free-documentation
 * http://wiki.debian.org/NonFreeIETFDocuments

The lenny/squeeze release policy says binary and source packages must each be free:
 * http://release.debian.org/lenny/rc_policy.txt
 * http://release.debian.org/squeeze/rc_policy.txt

The severity is serious, because this violates the Debian policy:
 * http://www.debian.org/doc/debian-policy/ch-archive.html#s-dfsg

There are (at least) three ways to fix this problem.  In order of
preference:

1. Ask the author of the RFC to re-license the RFC under a free
   license.  A template for this e-mail request can be found at
   http://wiki.debian.org/NonFreeIETFDocuments

2. Remove the non-free material from the source, e.g., by re-packaging
   the upstream archive and adding 'dfsg' to the Debian package
   version name.

3. Move the package to non-free.

General discussions are kindly requested to take place on debian-legal
or debian-devel in the thread with Subject: "Non-free IETF RFC/I-Ds in
source packages".

Thanks,
Simon