Good morning all,
I've been working with 389-ds RPMs from EPEL on CentOS 7.6, looking to replicate in a testing environment the capabilities of RH directory server. First off, thanks for your work on all this great 389 project!
I'm also doing some cross-testing with Windows clients for administrative purposes. I noticed that the SHA1SUMS for the Windows Console MSI files on the download page are incorrect.
https://directory.fedoraproject.org/docs/389ds/download.htm
Specifically, the following downloads do not match the listed SHA1SUM (the text in these two lists was cut and pasted from the actual web page).
Windows 2008/2012 32-bit 389-Console-1.1.15-i386.msi 772e4691daea66dcdef97cb220d9ae77ab9fbe78
Windows 2008/2012 64-bit 389-Console-1.1.15-x86_64.msi 35ec5bad0d309c334ba8c5e8ac0ab183f004d7fd
I also note that there are 1.1.18 binaries in the following directory, but they do not match the posted SHA1SUMs. I also note the double // in the link - which was copied directly from the link for 389-Console-1.1.15-i386.msi on the Download page.
https://fedorapeople.org/groups/389ds//binaries/
My hope is that this is an administrative error - the web page needs to be updated with the confirmed binary SHA1SUMs. Of more concern, there is a possibility that the binaries have been replaced with modified MSI files.
If someone could look at this, it would be much appreciated. My guess is the download web page needs to be updated for the 1.1.18 MSI binaries and SHA1SUM entries.
Steve Kuervers
On 2/19/19 11:56 AM, Steve Kuervers wrote:
Good morning all,
I've been working with 389-ds RPMs from EPEL on CentOS 7.6, looking to replicate in a testing environment the capabilities of RH directory server. First off, thanks for your work on all this great 389 project!
Thanks ;-)
I'm also doing some cross-testing with Windows clients for administrative purposes. I noticed that the SHA1SUMS for the Windows Console MSI files on the download page are incorrect.
https://directory.fedoraproject.org/docs/389ds/download.htm
Specifically, the following downloads do not match the listed SHA1SUM (the text in these two lists was cut and pasted from the actual web page).
Windows 2008/2012 32-bit 389-Console-1.1.15-i386.msi 772e4691daea66dcdef97cb220d9ae77ab9fbe78
Windows 2008/2012 64-bit 389-Console-1.1.15-x86_64.msi 35ec5bad0d309c334ba8c5e8ac0ab183f004d7fd
I also note that there are 1.1.18 binaries in the following directory, but they do not match the posted SHA1SUMs. I also note the double // in the link - which was copied directly from the link for 389-Console-1.1.15-i386.msi on the Download page.
https://fedorapeople.org/groups/389ds//binaries/
My hope is that this is an administrative error - the web page needs to be updated with the confirmed binary SHA1SUMs. Of more concern, there is a possibility that the binaries have been replaced with modified MSI files.
If someone could look at this, it would be much appreciated. My guess is the download web page needs to be updated for the 1.1.18 MSI binaries and SHA1SUM entries.
Sorry this is admin error on our part, and we are aware of it. It's on our list to correct, hopefully we can get to it soon...
I will report back to this list once we get it addressed.
Regards,
Mark
Steve Kuervers
389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject....
389-users@lists.fedoraproject.org
-
Mark Reynolds -
Steve Kuervers