From e30e1bbad97e3ad1993b3386486d3086511a2c06965d3387ea56fa0618272a8f Mon Sep 17 00:00:00 2001
From: Howard Guo <null@suse.de>
Date: Thu, 24 Nov 2016 14:43:00 +0000
Subject: [PATCH] Accepting request 440200 from home:hauky:branches:network

- add pam configuration file required for ksu
  just use a copy of "su" one from Tumbleweed

OBS-URL: https://build.opensuse.org/request/show/440200
OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=175
---
 krb5.changes | 6 ++++++
 krb5.spec    | 6 ++++++
 ksu-pam.d    | 8 ++++++++
 3 files changed, 20 insertions(+)
 create mode 100644 ksu-pam.d

diff --git a/krb5.changes b/krb5.changes
index 76dea70..c5734e5 100644
--- a/krb5.changes
+++ b/krb5.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Nov 14 08:36:06 UTC 2016 - christof.hanke@rzg.mpg.de
+
+- add pam configuration file required for ksu 
+  just use a copy of "su" one from Tumbleweed 
+
 -------------------------------------------------------------------
 Fri Jul 22 08:45:19 UTC 2016 - michael@stroeder.com
 
diff --git a/krb5.spec b/krb5.spec
index 79af43b..8aab904 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -53,6 +53,7 @@ Source2:        krb5.keyring
 Source3:        vendor-files.tar.bz2
 Source4:        baselibs.conf
 Source5:        krb5-rpmlintrc
+Source6:        ksu-pam.d
 Patch1:         krb5-1.12-pam.patch
 Patch2:         krb5-1.9-manpaths.dif
 Patch3:         krb5-1.12-buildconf.patch
@@ -315,6 +316,10 @@ install -d -m 755 %{buildroot}/%{krb5docdir}
 install -m 644 %{_builddir}/%{srcRoot}/README %{buildroot}/%{krb5docdir}/README
 install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema %{buildroot}/%{krb5docdir}/kerberos.schema
 install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif %{buildroot}/%{krb5docdir}/kerberos.ldif
+# link pam-config for su to ksu 
+mkdir -p %{buildroot}/etc/pam.d/
+install -m 644 %{S:6} %{buildroot}/etc/pam.d/ksu
+
 # cleanup
 rm -f  %{buildroot}/usr/share/man/man1/tmac.doc*
 rm -f  /usr/share/man/man1/tmac.doc*
@@ -462,6 +467,7 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
 %dir /usr/lib/mit
 %dir /usr/lib/mit/bin
 %dir /usr/lib/mit/sbin
+%attr(0644,root,root) %config(noreplace) /etc/pam.d/ksu
 /usr/lib/mit/bin/kvno
 /usr/lib/mit/bin/kinit
 /usr/lib/mit/bin/kdestroy
diff --git a/ksu-pam.d b/ksu-pam.d
new file mode 100644
index 0000000..d0c9fe8
--- /dev/null
+++ b/ksu-pam.d
@@ -0,0 +1,8 @@
+#%PAM-1.0
+auth     sufficient     pam_rootok.so
+auth     include        common-auth
+account  sufficient     pam_rootok.so
+account  include        common-account
+password include        common-password
+session  include        common-session
+session  optional       pam_xauth.so