From 24de3e2babebeef7aad4affc6094ab116a9203b521652412d1ac4ab1cab244ba Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Mon, 11 May 2015 11:41:14 +0000 Subject: [PATCH 1/7] Accepting request 305915 from home:guohouzuo:freeipa OBS-URL: https://build.opensuse.org/request/show/305915 OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=138 --- krb5-mini.spec | 2 +- krb5.changes | 5 +++++ krb5.spec | 12 +++++++----- 3 files changed, 13 insertions(+), 6 deletions(-) diff --git a/krb5-mini.spec b/krb5-mini.spec index a20eff2..5b2a482 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -1,7 +1,7 @@ # # spec file for package krb5-mini # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed diff --git a/krb5.changes b/krb5.changes index ce99d09..19a67b6 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Thu Apr 23 14:13:03 UTC 2015 - hguo@suse.com + +- Use externally built libverto + ------------------------------------------------------------------- Wed Feb 18 11:48:46 UTC 2015 - michael@stroeder.com diff --git a/krb5.spec b/krb5.spec index f7180e0..2b728d8 100644 --- a/krb5.spec +++ b/krb5.spec @@ -1,7 +1,7 @@ # # spec file for package krb5 # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -39,6 +39,7 @@ Obsoletes: krb5-plugin-preauth-pkinit-nss %if ! 0%{?build_mini} BuildRequires: doxygen BuildRequires: libopenssl-devel +BuildRequires: libverto-devel BuildRequires: openldap2-devel BuildRequires: pam-devel BuildRequires: python-Cheetah @@ -105,6 +106,8 @@ client programs, like kinit, kadmin, ... Summary: MIT Kerberos5 implementation - server Group: Productivity/Networking/Security Requires: cron +Requires: libverto +Requires: libverto-libev Requires: logrotate Requires: perl-Date-Calc %{?systemd_requires} @@ -163,6 +166,7 @@ Group: Development/Libraries/C and C++ PreReq: %{name} = %{version} Requires: keyutils-devel Requires: libcom_err-devel +Requires: libverto-devel # bug437293 %ifarch ppc64 Obsoletes: krb5-devel-64bit @@ -231,7 +235,8 @@ DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME %endif --with-selinux \ --with-system-et \ - --with-system-ss + --with-system-ss \ + --with-system-verto %{__make} %{?_smp_mflags} %if ! 0%{?build_mini} cd doc @@ -451,7 +456,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so %{_libdir}/libkrb5.so %{_libdir}/libkrb5support.so -%{_libdir}/libverto.so %{_libdir}/libkrad.so %{_libdir}/pkgconfig/gssrpc.pc %{_libdir}/pkgconfig/kadm-client.pc @@ -511,7 +515,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %{_libdir}/krb5/plugins/kdb/* %{_libdir}/krb5/plugins/tls/* @@ -585,7 +588,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %files server From 71a09ab03533e9831ab14e3e2bf427b41282384b82240e8c57bd702ae50caebd Mon Sep 17 00:00:00 2001 From: Andrey Karepin Date: Wed, 13 May 2015 19:25:01 +0000 Subject: [PATCH 2/7] Accepting request 306592 from home:stroeder:branches:network update to 1.13.2 OBS-URL: https://build.opensuse.org/request/show/306592 OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=139 --- krb5-1.13.1.tar.gz | 3 --- krb5-1.13.2.tar.gz | 3 +++ krb5-mini.changes | 35 +++++++++++++++++++++++++++++++++++ krb5.changes | 35 +++++++++++++++++++++++++++++++++++ krb5.spec | 4 ++-- 5 files changed, 75 insertions(+), 5 deletions(-) delete mode 100644 krb5-1.13.1.tar.gz create mode 100644 krb5-1.13.2.tar.gz diff --git a/krb5-1.13.1.tar.gz b/krb5-1.13.1.tar.gz deleted file mode 100644 index 3b41f12..0000000 --- a/krb5-1.13.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3516e89a884de2a2c7a38374f286c0e7244e4763b18ee04b986d3dbd1638460d -size 12087522 diff --git a/krb5-1.13.2.tar.gz b/krb5-1.13.2.tar.gz new file mode 100644 index 0000000..ceaf953 --- /dev/null +++ b/krb5-1.13.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0221413cd170aaf144668c00805004fc2809823dbdbd1d9f27f95e23b79a259e +size 12104946 diff --git a/krb5-mini.changes b/krb5-mini.changes index c7dc0ea..586d321 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,3 +1,38 @@ +------------------------------------------------------------------- +Tue May 12 07:48:18 UTC 2015 - michael@stroeder.com + +- update to krb5 1.13.2 + +- DES transition +============== + +The Data Encryption Standard (DES) is widely recognized as weak. The +krb5-1.7 release contains measures to encourage sites to migrate away +- From using single-DES cryptosystems. Among these is a configuration +variable that enables "weak" enctypes, which defaults to "false" +beginning with krb5-1.8. + + +Major changes in 1.13.2 (2015-05-08) +==================================== + +This is a bug fix release. + +* Fix a minor vulnerability in krb5_read_message, which is primarily + used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] + +* Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. + [CVE-2015-2694] + +* Fix some issues with the LDAP KDC database back end. + +* Fix an iteration-related memory leak in the DB2 KDC database back + end. + +* Fix issues with some less-used kadm5.acl functionality. + +* Improve documentation. + ------------------------------------------------------------------- Wed Feb 18 11:48:46 UTC 2015 - michael@stroeder.com diff --git a/krb5.changes b/krb5.changes index 19a67b6..ad77a25 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,38 @@ +------------------------------------------------------------------- +Tue May 12 07:48:18 UTC 2015 - michael@stroeder.com + +- update to krb5 1.13.2 + +- DES transition +============== + +The Data Encryption Standard (DES) is widely recognized as weak. The +krb5-1.7 release contains measures to encourage sites to migrate away +- From using single-DES cryptosystems. Among these is a configuration +variable that enables "weak" enctypes, which defaults to "false" +beginning with krb5-1.8. + + +Major changes in 1.13.2 (2015-05-08) +==================================== + +This is a bug fix release. + +* Fix a minor vulnerability in krb5_read_message, which is primarily + used in the BSD-derived kcmd suite of applications. [CVE-2014-5355] + +* Fix a bypass of requires_preauth in KDCs that have PKINIT enabled. + [CVE-2015-2694] + +* Fix some issues with the LDAP KDC database back end. + +* Fix an iteration-related memory leak in the DB2 KDC database back + end. + +* Fix issues with some less-used kadm5.acl functionality. + +* Improve documentation. + ------------------------------------------------------------------- Thu Apr 23 14:13:03 UTC 2015 - hguo@suse.com diff --git a/krb5.spec b/krb5.spec index 2b728d8..dc2156c 100644 --- a/krb5.spec +++ b/krb5.spec @@ -17,7 +17,7 @@ %define build_mini 0 -%define srcRoot krb5-1.13.1 +%define srcRoot krb5-1.13.2 %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/ %define krb5docdir %{_defaultdocdir}/krb5 @@ -30,7 +30,7 @@ BuildRequires: keyutils-devel BuildRequires: libcom_err-devel BuildRequires: libselinux-devel BuildRequires: ncurses-devel -Version: 1.13.1 +Version: 1.13.2 Release: 0 Summary: MIT Kerberos5 Implementation--Libraries License: MIT From cdaf49db88758439019906616dfc2536a9c88ee463d33d2142685d651e8ad18e Mon Sep 17 00:00:00 2001 From: Andrey Karepin Date: Wed, 13 May 2015 19:33:48 +0000 Subject: [PATCH 3/7] OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=140 --- krb5-mini.spec | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/krb5-mini.spec b/krb5-mini.spec index 5b2a482..1f13afd 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -17,7 +17,7 @@ %define build_mini 1 -%define srcRoot krb5-1.13.1 +%define srcRoot krb5-1.13.2 %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/ %define krb5docdir %{_defaultdocdir}/krb5 @@ -30,7 +30,7 @@ BuildRequires: keyutils-devel BuildRequires: libcom_err-devel BuildRequires: libselinux-devel BuildRequires: ncurses-devel -Version: 1.13.1 +Version: 1.13.2 Release: 0 Summary: MIT Kerberos5 Implementation--Libraries License: MIT From 8103840325f4d8cb56abc478965c5cf60df24d8a2e56fe4c2c700bdf47d88f9c Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Fri, 22 May 2015 09:22:57 +0000 Subject: [PATCH 4/7] * Add client support for the Kerberos Cache Manager protocol. If the host * Add support for doing unlocked database dumps for the DB2 KDC back end, * krb5-1.7-doublelog.patch - Work around replay cache creation race; (bnc#898439). krb5-1.13-work-around-replay-cache-creation-race.patch - bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal - added patches: * bnc#897874-CVE-2014-5351.diff OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=141 --- krb5-1.13.2.tar.sig | 14 ++++++++++++++ krb5-mini.changes | 26 ++++++++++++++++++++++---- krb5-mini.spec | 13 +++++++++---- krb5.spec | 3 +++ 4 files changed, 48 insertions(+), 8 deletions(-) create mode 100644 krb5-1.13.2.tar.sig diff --git a/krb5-1.13.2.tar.sig b/krb5-1.13.2.tar.sig new file mode 100644 index 0000000..d16e5d8 --- /dev/null +++ b/krb5-1.13.2.tar.sig @@ -0,0 +1,14 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1 + +iQGcBAABAgAGBQJVTUldAAoJEKMvF/0AVcMF9IoMAIEawAFZ1pRw91oRN6c3eAxy +RYBuJWsEa73JtqKCRtz7LA3qgacnJ8FGTpXaGHB3zErO55+Bclo1KZsUoNDtT27O +bxjsptPBjp15zTZhavlIpAjANFmo6QpghUHpLNcLxH8pXgmQDztHnPaenStxF8Bv +P2oFKh31uY3gYzOKnYi/r14XKSTNpFiDiGty53KY61efAO4H7xRFMhBgN2Vv1pBm +FvekjCWRypN7ai2z+94cuVNIlu8eipDnU4oBb865fRKlflxCdpBmHLr1K5AgwSEb +OAvDUPAEV9GwBP94M0yAoPwGf5ZHPvdORXbHfX00lzX2SgV+9DH4BqJOnytOeuaT +PA1Z+7izF+Xja4iHMcYlyJ7a/sGWachlZrw2ifELlYUf4vtcPY5e6gH0hSMUoA7t +Ww18ryv5fPHT1l+/o2P03hzZSFllOXjVsComsfw6Ws7qzbFuigpiVYdBg1XKMi9L +kjA7j43FTHvVKjtrEubiW+YHxowQHu5DIeQWVqsBJg== +=KdUH +-----END PGP SIGNATURE----- diff --git a/krb5-mini.changes b/krb5-mini.changes index 586d321..ad77a25 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -33,6 +33,11 @@ This is a bug fix release. * Improve documentation. +------------------------------------------------------------------- +Thu Apr 23 14:13:03 UTC 2015 - hguo@suse.com + +- Use externally built libverto + ------------------------------------------------------------------- Wed Feb 18 11:48:46 UTC 2015 - michael@stroeder.com @@ -49,8 +54,9 @@ This is a bug fix release. * Fix multiple kadmind vulnerabilities, some of which are based in the gssrpc library. [CVE-2014-5352 CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423] + ------------------------------------------------------------------- -Tue Jan 6 07:20:54 UTC 2015 - mlin@suse.com +Tue Jan 6 07:12:29 UTC 2015 - mlin@suse.com - Update to krb5 1.13 * Add support for accessing KDCs via an HTTPS proxy server using the @@ -65,12 +71,12 @@ Tue Jan 6 07:20:54 UTC 2015 - mlin@suse.com * The KDC listens for TCP connections by default. * Fix a minor key disclosure vulnerability where using the "keepold" option to the kadmin randkey operation could return the old keys. [CVE-2014-5351] - * Add client support for the Kerberos Cache Manager protocol. If the host + * Add client support for the Kerberos Cache Manager protocol. If the host is running a Heimdal kcm daemon, caches served by the daemon can be accessed with the KCM: cache type. * When built on OS X 10.7 and higher, use "KCM:" as the default cache type, unless overridden by command-line options or krb5-config values. - * Add support for doing unlocked database dumps for the DB2 KDC back end, + * Add support for doing unlocked database dumps for the DB2 KDC back end, which would allow the KDC and kadmind to continue accessing the database during lengthy database dumps. - Removed patches, useless or upstreamed @@ -83,9 +89,21 @@ Tue Jan 6 07:20:54 UTC 2015 - mlin@suse.com - Refreshed patches * krb5-1.12-pam.patch * krb5-1.12-selinux-label.patch - * krb5-1.7-doublelog.patch + * krb5-1.7-doublelog.patch ------------------------------------------------------------------- +Thu Sep 25 12:48:32 UTC 2014 - ddiss@suse.com + +- Work around replay cache creation race; (bnc#898439). + krb5-1.13-work-around-replay-cache-creation-race.patch + +------------------------------------------------------------------- +Tue Sep 23 13:25:33 UTC 2014 - varkoly@suse.com + +- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal +- added patches: + * bnc#897874-CVE-2014-5351.diff +------------------------------------------------------------------- Sat Aug 30 22:29:28 UTC 2014 - andreas.stieger@gmx.de - krb5 5.12.2: diff --git a/krb5-mini.spec b/krb5-mini.spec index 1f13afd..a422281 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -39,6 +39,7 @@ Obsoletes: krb5-plugin-preauth-pkinit-nss %if ! 0%{?build_mini} BuildRequires: doxygen BuildRequires: libopenssl-devel +BuildRequires: libverto-devel BuildRequires: openldap2-devel BuildRequires: pam-devel BuildRequires: python-Cheetah @@ -65,6 +66,9 @@ Conflicts: krb5-plugin-preauth-pkinit Conflicts: krb5-plugin-preauth-otp %endif Source: krb5-%{version}.tar.gz +# URL is actually http://web.mit.edu/kerberos/krb5-1.13/krb5-%version.sig +# but it is the signature of the tarball +Source42: krb5-%version.tar.sig Source1: vendor-files.tar.bz2 Source2: baselibs.conf Source5: krb5-rpmlintrc @@ -105,6 +109,8 @@ client programs, like kinit, kadmin, ... Summary: MIT Kerberos5 implementation - server Group: Productivity/Networking/Security Requires: cron +Requires: libverto +Requires: libverto-libev Requires: logrotate Requires: perl-Date-Calc %{?systemd_requires} @@ -163,6 +169,7 @@ Group: Development/Libraries/C and C++ PreReq: %{name} = %{version} Requires: keyutils-devel Requires: libcom_err-devel +Requires: libverto-devel # bug437293 %ifarch ppc64 Obsoletes: krb5-devel-64bit @@ -231,7 +238,8 @@ DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME %endif --with-selinux \ --with-system-et \ - --with-system-ss + --with-system-ss \ + --with-system-verto %{__make} %{?_smp_mflags} %if ! 0%{?build_mini} cd doc @@ -451,7 +459,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so %{_libdir}/libkrb5.so %{_libdir}/libkrb5support.so -%{_libdir}/libverto.so %{_libdir}/libkrad.so %{_libdir}/pkgconfig/gssrpc.pc %{_libdir}/pkgconfig/kadm-client.pc @@ -511,7 +518,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %{_libdir}/krb5/plugins/kdb/* %{_libdir}/krb5/plugins/tls/* @@ -585,7 +591,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/libkdb5.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* -%{_libdir}/libverto.so.* %{_libdir}/libkrad.so.* %files server diff --git a/krb5.spec b/krb5.spec index dc2156c..b6c2248 100644 --- a/krb5.spec +++ b/krb5.spec @@ -66,6 +66,9 @@ Conflicts: krb5-plugin-preauth-pkinit Conflicts: krb5-plugin-preauth-otp %endif Source: krb5-%{version}.tar.gz +# URL is actually http://web.mit.edu/kerberos/krb5-1.13/krb5-%version.sig +# but it is the signature of the tarball +Source42: krb5-%version.tar.sig Source1: vendor-files.tar.bz2 Source2: baselibs.conf Source5: krb5-rpmlintrc From 7991a93622cbcebd0bc6008a0b46dcbb32294cd401597562807590f73bfc9bf6 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Fri, 22 May 2015 09:30:16 +0000 Subject: [PATCH 5/7] - pre_checkin.sh aligned changes between krb5/krb5-mini - added krb5.keyring OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=142 --- krb5-1.13.2.tar.sig => krb5-1.13.2.tar.gz.asc | 0 krb5-mini.changes | 6 ++ krb5-mini.spec | 6 +- krb5.changes | 6 ++ krb5.keyring | 72 +++++++++++++++++++ krb5.spec | 6 +- 6 files changed, 90 insertions(+), 6 deletions(-) rename krb5-1.13.2.tar.sig => krb5-1.13.2.tar.gz.asc (100%) create mode 100644 krb5.keyring diff --git a/krb5-1.13.2.tar.sig b/krb5-1.13.2.tar.gz.asc similarity index 100% rename from krb5-1.13.2.tar.sig rename to krb5-1.13.2.tar.gz.asc diff --git a/krb5-mini.changes b/krb5-mini.changes index ad77a25..6a25f45 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Fri May 22 09:27:11 UTC 2015 - meissner@suse.com + +- pre_checkin.sh aligned changes between krb5/krb5-mini +- added krb5.keyring + ------------------------------------------------------------------- Tue May 12 07:48:18 UTC 2015 - michael@stroeder.com diff --git a/krb5-mini.spec b/krb5-mini.spec index a422281..02e0e24 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -65,10 +65,10 @@ Conflicts: krb5-plugin-kdb-ldap Conflicts: krb5-plugin-preauth-pkinit Conflicts: krb5-plugin-preauth-otp %endif +# both tar.gz and .tar.gz.asc extracted from the http://web.mit.edu/kerberos/dist/krb5/1.13/krb5-1.13.2-signed.tar Source: krb5-%{version}.tar.gz -# URL is actually http://web.mit.edu/kerberos/krb5-1.13/krb5-%version.sig -# but it is the signature of the tarball -Source42: krb5-%version.tar.sig +Source42: krb5-%version.tar.gz.asc +Source43: krb5.keyring Source1: vendor-files.tar.bz2 Source2: baselibs.conf Source5: krb5-rpmlintrc diff --git a/krb5.changes b/krb5.changes index ad77a25..6a25f45 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Fri May 22 09:27:11 UTC 2015 - meissner@suse.com + +- pre_checkin.sh aligned changes between krb5/krb5-mini +- added krb5.keyring + ------------------------------------------------------------------- Tue May 12 07:48:18 UTC 2015 - michael@stroeder.com diff --git a/krb5.keyring b/krb5.keyring new file mode 100644 index 0000000..f13592c --- /dev/null +++ b/krb5.keyring @@ -0,0 +1,72 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQGNBFTrtMYBDADZLb3TIJRUqLakS90xTgFFqQ3FeZ2payy95tMxSqjiDlE9a/ij +AltjEFHpxw6UMIBtl13Vr/d+YzGTloyeOwn+tV0NiVrGwRDv8tqHCuSH5p3vSO+D +Z42VNe3gcLk7gd2Cchsp/5d3vRMBBz3yvv/9qbpQOLXHCmx5o06D9YN6+CefxByl +6u6Nc980LMmexqHoiTr3QxKysSJoKpXjOl0NA8zNI1OcKdLbyl095EWlx0Bwc5g7 +4qPlAPFWxsDOO3Kg+MXDWl4ApWmD0sC+h42JwVTATmZKQ5O7bpdn4F5KHAr/M4rh +usuoDiOunqXns5igFNJdXPbJSWdoSGaNXv0X2unfe8H1tr/yWKkd/lNmTysW3onZ +CpS6igdYm5A3iD/Qd8ypEWrtd+KIoGGjUuNlmbXhYJIsOQMvmkXnTycRugioe/U+ +snTNInPKQ45Jue2Xto+U8FXpaxF4GKHBk9CYwBlp6+oCR9u7Is8+aWMSPFS0cwEr +zjyIriWD53U91jUAEQEAAbQVVG9tIFl1IDx0bHl1QG1pdC5lZHU+iQEcBBABAgAG +BQJU67WcAAoJEBUCTNN0nXiJUpEH+wXTW+X1v7yrTSR+/rYWa6FtXFeqfEB3eDqX +3a8z2lPofH7ou/CpgDwGfqEPveO+JOEDXHVNiUE/w7LeujJzIVTjPqlGd/WioVs+ +9Hj38tGUefssbUKSTkMrQEaMtJUYHaqxa+XrFmPS8HCzOirsxKVeSLiLxzennRLk +pOftGjekzp9tTxKrTjjl7iGVa1621WzzRi8cQOHaiHWYlNGnI9FAOILaTSmZcJNW +eCzQx1jSW8HIO7bofR1e+1fgDxNoq1tSOLzdrbo/Z/abFeJsSCB/1QBb4ZVwY3pX +7YXHmKYjfEfmvSy6YEinXJl7WuNXkMAp055dVUcPW1ytvwGZqCCJARwEEgEKAAYF +AlT1BlEACgkQeAB7mCHpdpLDiwgAyGNuTXX5SaDTP/6/zM5gS28HrmNfQPJbd7mP +e/jRqpfNeBnY/HjAbW/dZ9Todlj9mTrbPn4LVANOIw/yO9ggMxj+vnlRYkP1GcP8 +a+i2Sp6PV3LVkWSPJ1cRqEA9R7YOpPnGIID5tCoGQ9nc72GZPcNrGTZq1LX6qeN/ +AdFUoBg0UaR/OK/2g44m/IenDT4qo+buOt1VBQNqmF2P084hYLIiuGGjsZRqOexY +JVG681ZiNp9ZrJIWxnZSpUZq4xLdrjcgj9tPckVSFMJH3ixAYYro6V4gsyeY3r3x +hVy7i++memCGnqVVfW2nUeXYz46xX3Rl7XSJ1OlbUT2mb22OlokBoAQQAQoABgUC +VO5GDQAKCRAo2abzZOt1EshnDCCMTNlHt9oAXPcRVXk/wXpn7PTZKxLoPlmHs5qv +fYg4th/mtCIx2Z3+QIzsx71qbnYj1GbSErTkzAS5fvxFgQQCZILd9/NGdsca845W +J/9UkFCKaHXYPFuNbkoDKn+hzsroboUBEI+1ikCEjtnyCEAryauSkNj9VkOpH7sG +T1UY8VW2UArVFp8EmCv2a+9A7P3HrfoJ+s1GXmmYUqcMPOb6jBnOGySxQ6vRQs4x +ahBpJrAVoGPYE6xlnOf7VqE3TX7kzmgYjtrGcNlwae1Vg9nKsMK9pTT/64YF/Bf8 +Uer1wgMYAObVNZjazyDxbosidGeHt2WgACpQhijEUxEvICxgyb9AFJGR++CRGF5n +V+Ka5bQq+1YYuzPb6S3zzz2J2wJFCAb+MaXhVE1ldqIrAvUAXk4RsaW/d6wTObRP +vzP9iWrRP3qjOKDu61tvx3Gh08pyFLdGcNIwDgDyW1tuC234QLN+pxHF6trozh0V +G38HZbhKmKO9QJcxgT4GsDoaWaZrlqBmiQG+BBMBAgAoAhsDBgsJCAcDAgYVCAIJ +CgsEFgIDAQIeAQIXgAUCVOvafwUJCW+MigAKCRCjLxf9AFXDBbGQDADOWsh/RYnw +s1LgWe7JA/kN5cAL+AV8BBuyn26g4cjVu3B5KT3GvNfIDynV2RVAFzpnWmIrS/fc +xVkmwU59nHSnYeMFrg+aHrZykjlSKPNUZSjzZhOgdkwZs2AqUqldNRQfVAilf+WO +lHgn52yq6RQhpY3dcdHaqSpeoqUjgW91oweJ1ZzvR1yo/QeJo3TwnnRRioRDj91O +gVzVEGxVB/4OZW74JZph931sLM7Y9m77VT/Cyv8ON3wVOMCMktUozc5n33vhQ/yp +HUe27jZMEfiAH1g2xg153aWF79JfroQEFB0ZOTkrzMfzpx3dpTqhJLXPG8t9jsA2 +sjrQr1tlOiPby33MJpmGTM484rP7lS0/RDprxXnb8XGYlcchooOaVmJRHhFmwdli +tmSXfRpwkx+m5ZqyiIsTRw8nAiCD6N1P9J8ntLBIQlUR2jayPOQMkougFhDl4S9L +5ouJn6TeEmNe1b0gAHoNRMGOGcJ/xeguvtAF80uNXhmvJ4uXz10eA92JAhwEEAEC +AAYFAlT18PsACgkQDLoIV1+Dct+UVg/+L6rjh9mviUmqZ+mEmN7bMnJt9mji3w5B +XNTI6p9+gw8QsYN57qum2jYbaSTtynMopl9t+ksImJw1qyUtmm3M9lITinCas/0P +3cn0nTlS0ZJM6bAPj6CL/3jlQPXJUbt7GgapFNJoTKIeSRmxS0lRrz7olH9v/pW3 +QqaLHq+Ydf1mozBe7g85w3/YEccXTJy9A9JbMH0QdOYt2MU9aOwiDCtpa5x0iL+X +Y0WqNOFvzKuzsCAJmEiNXuYR9SOuiWpJxD0Zj32JSZsweCxKOIwSVPmBjgNybg4W +luoQDOeWIE9mYWsnouVfyvdmxeM8gvGhKwu3hc+XFAPl3w/nTlFypR48AyLevoAb +/1YdIKWVLZsLOjbPb+1EehS0hStsX2F0Q7Ebw2WNFlfBHPOjey9bgkDEW8tB0+qP +ptKUyU63CF2EwFDViTAt5MuCei6tkEdWaf3O6pDmV8xEM5hKM8SIdG/AHmpPuzt2 +mVtBZB2yBiSTfurlnkvOpu+hlc4xs6AzfALexpdQ7jJmzpIududB0IMC41fK3KG0 +Jxck/cRIIpmPVDLbMAeHmWnvmqlXH2lwk5eYbvrWjjB9/9ml3fQ8dyzcWJM3uPe1 +7UNaK7SIL6+JRmNJ0HwoO2H1NaJVXL7pugAX5x8b/6/WhjjLsrL4wYne/pTKhhfB +dSGyvhr3sUG5AY0EVOu0xgEMANP74TtijWGlHaJamxdYTHDWi1SDbsDeAHEnOTR9 +medwNPYoWnnjj+DIHq3uIsFtHFEpwH0mbk7HnAQblazCy0GGjQYFiGooqtnGniFB +duMTidhHntc6hjDEMT9z8u1JL8dXmM2oXNp2pcHEZX+xxI3GPsqhTvAjfgwZ4HA5 +5jA5WyIaSrxA7NEDLM12spsB27PJQp+KjbtEizns0LPCHvEwQrIzM0usGlEcArf2 +W0PMQuxVaLWmATsd+ZUUPdGk1UMPL337rxRPyXnZqp69v4+WBDr82/Jh5TaDtUdd +9jzjkqlAXkspkvuhIq/qj85Pg2vUUAf+XYS/MzhVTpirEd+9ZIzb76e27CNPX9E4 +/HOavFFnGr59xFD3jYz5XPydxp6q5I4TznejKGRUz43e2t4xmy6WgI+tmPKVThOK +ntklmZBhOL3fb6+V8AoXUtws4Ydbkzt6j9CQGvwZxlY9tgPQ8Za47datKlYdOzAt +iE1yFjFNGHlMJPGk2tpgRKclGQARAQABiQGlBBgBAgAPAhsMBQJU69qSBQkJb4yK +AAoJEKMvF/0AVcMFqkYMAIB0k6uOltV+x5BrdwDL4TygHzMjpct0L3FX1EPrwK5s +50eGEslZsYtkvE11jAkaoj9NTRKJKOmDswjoyFE9H3g00XBGKrO1wlKs72m8BWO6 +IwXgIHN7UPNiR8DvQibmD5NjpvJTr2Xu5VKbRKPjfcAfdCZdOtnJPNbFcfGVBtUS +l9NvXDVzdcGmfWx7W1ZfdNe96uiWJoxIBbMnUpvIJc1GuGz9JskkP66y1l91n9fG +96GhY1v5eVp3y+klEhl0VWFaEfn4pPiDiHRDm9BS2aAoKMbSJfaFf2dwA27dTK11 +NeVAKMNz6bvcZYrIzqTUeIJW9VZWAr6RCEKmC9FQ0d24jtMPQX3BymH5zWGqhIdf +oylOs9X+dm8XygzdEfYPbiSIUVCDqtnNHSvYmFOG0Aen6SomkZLaD2B5HctKW/ur +2/rrF6YTei+eN2WddP+mDH7znuTViyADLxcZdfBYLzR66hX4AD8Jp5oOCMQ/j1kP +p3N1KgXx6tnA7P65PC0REQ== +=sIgi +-----END PGP PUBLIC KEY BLOCK----- diff --git a/krb5.spec b/krb5.spec index b6c2248..80c6884 100644 --- a/krb5.spec +++ b/krb5.spec @@ -65,10 +65,10 @@ Conflicts: krb5-plugin-kdb-ldap Conflicts: krb5-plugin-preauth-pkinit Conflicts: krb5-plugin-preauth-otp %endif +# both tar.gz and .tar.gz.asc extracted from the http://web.mit.edu/kerberos/dist/krb5/1.13/krb5-1.13.2-signed.tar Source: krb5-%{version}.tar.gz -# URL is actually http://web.mit.edu/kerberos/krb5-1.13/krb5-%version.sig -# but it is the signature of the tarball -Source42: krb5-%version.tar.sig +Source42: krb5-%version.tar.gz.asc +Source43: krb5.keyring Source1: vendor-files.tar.bz2 Source2: baselibs.conf Source5: krb5-rpmlintrc From d9be576ce17cc844e7b1110fb3373b4c15e9a71ef16616d412b993ab46f25f60 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ismail=20D=C3=B6nmez?= Date: Wed, 27 May 2015 16:09:38 +0000 Subject: [PATCH 6/7] Accepting request 308898 from home:dimstar:Factory Also build dep libverto for the -mini variant... so it can actually be built OBS-URL: https://build.opensuse.org/request/show/308898 OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=143 --- krb5-mini.changes | 6 ++++++ krb5-mini.spec | 2 +- krb5.changes | 6 ++++++ krb5.spec | 2 +- 4 files changed, 14 insertions(+), 2 deletions(-) diff --git a/krb5-mini.changes b/krb5-mini.changes index 6a25f45..e3d038a 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed May 27 10:59:13 UTC 2015 - dimstar@opensuse.org + +- Unconditionally buildrequire libverto-devel: krb5-mini also + depends on it. + ------------------------------------------------------------------- Fri May 22 09:27:11 UTC 2015 - meissner@suse.com diff --git a/krb5-mini.spec b/krb5-mini.spec index 02e0e24..ea4913d 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -36,10 +36,10 @@ Summary: MIT Kerberos5 Implementation--Libraries License: MIT Group: Productivity/Networking/Security Obsoletes: krb5-plugin-preauth-pkinit-nss +BuildRequires: libverto-devel %if ! 0%{?build_mini} BuildRequires: doxygen BuildRequires: libopenssl-devel -BuildRequires: libverto-devel BuildRequires: openldap2-devel BuildRequires: pam-devel BuildRequires: python-Cheetah diff --git a/krb5.changes b/krb5.changes index 6a25f45..e3d038a 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed May 27 10:59:13 UTC 2015 - dimstar@opensuse.org + +- Unconditionally buildrequire libverto-devel: krb5-mini also + depends on it. + ------------------------------------------------------------------- Fri May 22 09:27:11 UTC 2015 - meissner@suse.com diff --git a/krb5.spec b/krb5.spec index 80c6884..2f7772e 100644 --- a/krb5.spec +++ b/krb5.spec @@ -36,10 +36,10 @@ Summary: MIT Kerberos5 Implementation--Libraries License: MIT Group: Productivity/Networking/Security Obsoletes: krb5-plugin-preauth-pkinit-nss +BuildRequires: libverto-devel %if ! 0%{?build_mini} BuildRequires: doxygen BuildRequires: libopenssl-devel -BuildRequires: libverto-devel BuildRequires: openldap2-devel BuildRequires: pam-devel BuildRequires: python-Cheetah From f1babf455431220d6606adf373da4239aaac508339dad2dca8c06ee635220b10 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ismail=20D=C3=B6nmez?= Date: Thu, 28 May 2015 08:59:56 +0000 Subject: [PATCH 7/7] Accepting request 309029 from home:dimstar:Factory - Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically. - Drop libverto and libverto-libev Requires from the -server package: those package names don't exist and the shared libs are pulled in automatically. OBS-URL: https://build.opensuse.org/request/show/309029 OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=144 --- krb5-mini.changes | 7 +++++++ krb5-mini.spec | 2 -- krb5.changes | 7 +++++++ krb5.spec | 2 -- 4 files changed, 14 insertions(+), 4 deletions(-) diff --git a/krb5-mini.changes b/krb5-mini.changes index e3d038a..3d1bf3b 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu May 28 08:01:00 UTC 2015 - dimstar@opensuse.org + +- Drop libverto and libverto-libev Requires from the -server + package: those package names don't exist and the shared libs + are pulled in automatically. + ------------------------------------------------------------------- Wed May 27 10:59:13 UTC 2015 - dimstar@opensuse.org diff --git a/krb5-mini.spec b/krb5-mini.spec index ea4913d..17051e2 100644 --- a/krb5-mini.spec +++ b/krb5-mini.spec @@ -109,8 +109,6 @@ client programs, like kinit, kadmin, ... Summary: MIT Kerberos5 implementation - server Group: Productivity/Networking/Security Requires: cron -Requires: libverto -Requires: libverto-libev Requires: logrotate Requires: perl-Date-Calc %{?systemd_requires} diff --git a/krb5.changes b/krb5.changes index e3d038a..3d1bf3b 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu May 28 08:01:00 UTC 2015 - dimstar@opensuse.org + +- Drop libverto and libverto-libev Requires from the -server + package: those package names don't exist and the shared libs + are pulled in automatically. + ------------------------------------------------------------------- Wed May 27 10:59:13 UTC 2015 - dimstar@opensuse.org diff --git a/krb5.spec b/krb5.spec index 2f7772e..b221287 100644 --- a/krb5.spec +++ b/krb5.spec @@ -109,8 +109,6 @@ client programs, like kinit, kadmin, ... Summary: MIT Kerberos5 implementation - server Group: Productivity/Networking/Security Requires: cron -Requires: libverto -Requires: libverto-libev Requires: logrotate Requires: perl-Date-Calc %{?systemd_requires}