* Add client support for the Kerberos Cache Manager protocol. If the host

* Add support for doing unlocked database dumps for the DB2 KDC back end,
  * krb5-1.7-doublelog.patch

- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch

-  bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal 
- added patches:
  * bnc#897874-CVE-2014-5351.diff

OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=141

krb5-mini.spec

@@ -39,6 +39,7 @@ Obsoletes:      krb5-plugin-preauth-pkinit-nss
 %if ! 0%{?build_mini}
 BuildRequires:  doxygen
 BuildRequires:  libopenssl-devel
+BuildRequires:  libverto-devel
 BuildRequires:  openldap2-devel
 BuildRequires:  pam-devel
 BuildRequires:  python-Cheetah
@@ -65,6 +66,9 @@ Conflicts:      krb5-plugin-preauth-pkinit
 Conflicts:      krb5-plugin-preauth-otp
 %endif
 Source:         krb5-%{version}.tar.gz
+# URL is actually http://web.mit.edu/kerberos/krb5-1.13/krb5-%version.sig
+# but it is the signature of the tarball
+Source42:       krb5-%version.tar.sig
 Source1:        vendor-files.tar.bz2
 Source2:        baselibs.conf
 Source5:        krb5-rpmlintrc
@@ -105,6 +109,8 @@ client programs, like kinit, kadmin, ...
 Summary:        MIT Kerberos5 implementation - server
 Group:          Productivity/Networking/Security
 Requires:       cron
+Requires:       libverto
+Requires:       libverto-libev
 Requires:       logrotate
 Requires:       perl-Date-Calc
 %{?systemd_requires}
@@ -163,6 +169,7 @@ Group:          Development/Libraries/C and C++
 PreReq:         %{name} = %{version}
 Requires:       keyutils-devel
 Requires:       libcom_err-devel
+Requires:       libverto-devel
 # bug437293
 %ifarch ppc64
 Obsoletes:      krb5-devel-64bit
@@ -231,7 +238,8 @@ DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME
 %endif
         --with-selinux \
         --with-system-et \
-        --with-system-ss
+        --with-system-ss \
+        --with-system-verto
 %{__make} %{?_smp_mflags}
 %if ! 0%{?build_mini}
 cd doc
@@ -451,7 +459,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so
 %{_libdir}/libkdb5.so
 %{_libdir}/libkrb5.so
 %{_libdir}/libkrb5support.so
-%{_libdir}/libverto.so
 %{_libdir}/libkrad.so
 %{_libdir}/pkgconfig/gssrpc.pc
 %{_libdir}/pkgconfig/kadm-client.pc
@@ -511,7 +518,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so
 %{_libdir}/libkdb5.so.*
 %{_libdir}/libkrb5.so.*
 %{_libdir}/libkrb5support.so.*
-%{_libdir}/libverto.so.*
 %{_libdir}/libkrad.so.*
 %{_libdir}/krb5/plugins/kdb/*
 %{_libdir}/krb5/plugins/tls/*
@@ -585,7 +591,6 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so
 %{_libdir}/libkdb5.so.*
 %{_libdir}/libkrb5.so.*
 %{_libdir}/libkrb5support.so.*
-%{_libdir}/libverto.so.*
 %{_libdir}/libkrad.so.*
 
 %files server