2007-03-15 15:28:50 +01:00
|
|
|
-------------------------------------------------------------------
|
2007-07-05 01:17:15 +02:00
|
|
|
Mon Jul 2 10:09:34 CEST 2007 - mc@suse.de
|
|
|
|
|
|
|
|
- version 2.2.12
|
|
|
|
* add a "pwhelp" option.
|
|
|
|
* Display the KDC error to users.
|
|
|
|
* lots of bugfixes
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2007-03-15 15:28:50 +01:00
|
|
|
Thu Mar 15 12:34:55 CET 2007 - mc@suse.de
|
|
|
|
|
|
|
|
- drop privileges in _pam_krb5_sly_maybe_refresh when
|
|
|
|
running in set uid and restore them on exit of this
|
|
|
|
function. This enables us to refresh the ticket
|
|
|
|
after screen un-lock.
|
|
|
|
[#124611]
|
|
|
|
|
2007-01-16 00:29:00 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Sep 25 10:45:53 CEST 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- version 2.2.11
|
|
|
|
- remove two patches with are upstream now
|
|
|
|
- pam_krb5-2.2.10-0-oldauthtok.dif
|
|
|
|
- pam_krb5-2.2.10-0-testfix.dif
|
|
|
|
- make use of --with-os-distribution
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Sep 14 10:40:55 CEST 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- fix pam_set_item call for AUTHTOK and OLDAUTHTOK
|
|
|
|
- fix testcase
|
|
|
|
- if the server returns an error message during password-changing,
|
|
|
|
let the user see it
|
|
|
|
- add the "debug_sensitive" option, which actually logs passwords
|
|
|
|
- add the "no_subsequent_prompt" option, to force the module to
|
|
|
|
always answer a libkrb5 prompt with the PAM_AUTHTOK value
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Sep 12 11:37:12 CEST 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- version 2.2.10
|
|
|
|
* log text for server-supplied error code along with the
|
|
|
|
failure information.
|
|
|
|
* rework the prompting bits so that it makes more correct use of
|
|
|
|
the initial_prompt/use_first_pass flags and correctly disables
|
|
|
|
use of the callback for arbitrary prompts
|
|
|
|
* give the caller a way to specify which prompter callback we
|
|
|
|
should use.
|
|
|
|
* track whether or not we want to let libkrb5 ask for information
|
|
|
|
via the callbacks.
|
|
|
|
* and more fixes
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jul 27 11:03:27 CEST 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- version 2.2.9
|
|
|
|
* look for krb5/krb5.h in preference to krb5.h (new in
|
|
|
|
MIT Kerberos 1.5)
|
|
|
|
* if the default principal in the ccache doesn't match the
|
|
|
|
userinfo structure, update the userinfo structure.
|
|
|
|
* always use the name of the v5 principal when saving
|
|
|
|
credentials, especially for the "external" case where
|
|
|
|
it may not be the value we originally guessed
|
|
|
|
* be more careful about other ways which our prompting
|
|
|
|
callback can try to break us
|
|
|
|
* go back to overwriting the template, to avoid uncontrolled
|
|
|
|
growth in the filename.
|
|
|
|
* build the new ccache name by appending the mkstemp template
|
|
|
|
instead of assuming the previous file ended with one
|
|
|
|
* and more fixes.
|
|
|
|
- remove pam_krb5-2.2.3-1-prompter-segfault.dif it is upstream now
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jun 28 12:06:39 CEST 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- update to version 2.2.8
|
|
|
|
* fix reporting of the reasons for password change failures
|
|
|
|
* add "krb4_use_as_req" to completely disallow any attempts to get
|
|
|
|
v4 credentials
|
|
|
|
* do 524 conversion for the "external" cases, too
|
|
|
|
- remove obsolete patches
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Apr 21 11:18:26 CEST 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- fix segfault in prompter [#165972]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 25 21:39:14 CET 2006 - mls@suse.de
|
|
|
|
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 17 11:41:33 CET 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- add two patches from upstream
|
|
|
|
* pam_krb5-upstreamfix-password-handling.dif
|
|
|
|
* pam_krb5-upstreamfix-testcase.dif
|
|
|
|
- build with more then one job
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jan 13 16:04:17 CET 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- set /usr/bin/afs5log executable
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 11 14:29:53 CET 2006 - mc@suse.de
|
|
|
|
|
|
|
|
- add -fstack-protector to CFLAGS
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Dec 20 11:12:23 CET 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- update to version 2.2.3
|
|
|
|
- remove pam_krb5-2.2.0-0.5-NULL-fix.dif; patch is now upstream
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Dec 2 11:38:25 CET 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- update to version 2.2.2
|
|
|
|
* don't leak the keytab file descriptor
|
|
|
|
* actually check for AFS support first, so that the
|
|
|
|
ioctl-only support case will work properly.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Nov 14 16:28:45 CET 2005 - uli@suse.de
|
|
|
|
|
|
|
|
- no afs_syscall on ARM
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Nov 14 11:23:10 CET 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- update to version 2.2.0-2
|
|
|
|
- remove obsolete patch (debug_false is upstream now)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Oct 10 14:02:29 CEST 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- update to current CVS version
|
|
|
|
- drop some patches (they are upstream now)
|
|
|
|
- fix NULL problem
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 17 15:27:05 CEST 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- got official fix for the authtok problem
|
|
|
|
[#104051]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 15 13:41:42 CEST 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- fix the behavior of password changing if use_authtok
|
|
|
|
is not present [#104051]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jun 29 16:43:58 CEST 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- fix change password
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jun 10 12:43:04 CEST 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- set default for debug to false [#87005]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Apr 7 10:14:03 CEST 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- switch to version 2.2.0-0.5
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 22 12:31:53 CET 2005 - nadvornik@suse.cz
|
|
|
|
|
|
|
|
- fixed parsing of time values
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Feb 21 17:40:20 CET 2005 - mc@suse.de
|
|
|
|
|
|
|
|
- add pam_krb5-use-krb5_afslog.dif [#51047]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 18 16:43:06 CET 2005 - okir@suse.de
|
|
|
|
|
|
|
|
- updated to latest pam_krb5 snapshot from sourcforge CVS
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 11 17:48:14 CET 2005 - ro@suse.de
|
|
|
|
|
|
|
|
- re-added afs module (added krbafs to neededforbuild)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Nov 22 02:14:17 CET 2004 - ro@suse.de
|
|
|
|
|
|
|
|
- remove afs for the moment, mit-kerberos does not have support
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Apr 28 17:26:47 CEST 2004 - ro@suse.de
|
|
|
|
|
|
|
|
- added -fno-strict-aliasing
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jan 16 12:27:46 CET 2004 - kukuk@suse.de
|
|
|
|
|
|
|
|
- Add pam-devel to neededforbuild
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Jan 11 12:03:01 CET 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- build as user
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 16 14:29:56 CEST 2003 - nadvornik@suse.cz
|
|
|
|
|
|
|
|
- replaced by different implementation of pam_krb5
|
|
|
|
- afs support
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jun 20 11:35:20 CEST 2003 - okir@suse.de
|
|
|
|
|
|
|
|
- fix build problem with latest heimdal
|
|
|
|
- another fix for passwd updates (#20284)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jun 18 12:05:04 CEST 2003 - ro@suse.de
|
|
|
|
|
|
|
|
- use kerberos-devel-packages in neededforbuild
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 15 10:23:57 CEST 2003 - ro@suse.de
|
|
|
|
|
|
|
|
- fixed neededforbuild
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 28 11:43:01 CEST 2002 - okir@suse.de
|
|
|
|
|
|
|
|
- Security fix (#18463): unbecome_user did not properly reassert
|
|
|
|
original privilege, and the caller didn't check the return value.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 31 14:45:27 CEST 2002 - okir@suse.de
|
|
|
|
|
|
|
|
- suse_update_config now updates the right files
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 24 14:14:28 CEST 2002 - okir@suse.de
|
|
|
|
|
|
|
|
- fixed passwd(1) support; updated README
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jul 23 03:38:08 PDT 2002 - okir@suse.de
|
|
|
|
|
|
|
|
- initial packaging
|
|
|
|
|