From d5bd63102130bc6508cebe39a30f6133999f86764af921af9a5dcf02d519b96a Mon Sep 17 00:00:00 2001 From: OBS User unknown Date: Mon, 15 Jan 2007 23:29:00 +0000 Subject: [PATCH] OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pam_krb5?expand=0&rev=1 --- .gitattributes | 23 +++ pam_krb5-2.2.0-0.5-configure_ac.dif | 21 +++ pam_krb5-2.2.0-2-noafsonarm.patch | 16 ++ pam_krb5-2.2.11-1.tar.bz2 | 3 + pam_krb5.changes | 235 ++++++++++++++++++++++++++++ pam_krb5.spec | 202 ++++++++++++++++++++++++ ready | 0 7 files changed, 500 insertions(+) create mode 100644 .gitattributes create mode 100644 pam_krb5-2.2.0-0.5-configure_ac.dif create mode 100644 pam_krb5-2.2.0-2-noafsonarm.patch create mode 100644 pam_krb5-2.2.11-1.tar.bz2 create mode 100644 pam_krb5.changes create mode 100644 pam_krb5.spec create mode 100644 ready diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/pam_krb5-2.2.0-0.5-configure_ac.dif b/pam_krb5-2.2.0-0.5-configure_ac.dif new file mode 100644 index 0000000..81d7e5c --- /dev/null +++ b/pam_krb5-2.2.0-0.5-configure_ac.dif @@ -0,0 +1,21 @@ +--- configure.ac ++++ configure.ac 2005/03/31 13:00:53 +@@ -42,14 +42,14 @@ + AC_CHECK_LIB(resolv,main) + KRB5_CFLAGS=`$KRB5_CONFIG --cflags krb5` + KRB5_LIBS=`$KRB5_CONFIG --libs krb5` +-KRB5_LDFLAGS="`$KRB5_CONFIG --libs | sed s,'-l[[^ ]]*',,g`" +-LIBS="$LIBS `$KRB5_CONFIG --libs | sed s,'-l[[^ ]]*',,g`" ++KRB5_LDFLAGS="`$KRB5_CONFIG --libs`" ++LIBS="$LIBS `$KRB5_CONFIG --libs`" + LDFLAGS="$LDFLAGS $KRB5_LDFLAGS" + if test x$krb4 != xno ; then + KRB4_CFLAGS=`$KRB4_CONFIG --cflags krb4` + KRB4_LIBS=`$KRB4_CONFIG --libs krb4` +- KRB4_LDFLAGS="`$KRB4_CONFIG --libs | sed s,'-l[[^ ]]*',,g`" +- LIBS="$LIBS `$KRB4_CONFIG --libs | sed s,'-l[[^ ]]*',,g`" ++ KRB4_LDFLAGS="`$KRB4_CONFIG --libs`" ++ LIBS="$LIBS `$KRB4_CONFIG --libs`" + LDFLAGS="$LDFLAGS $KRB4_LDFLAGS" + fi + diff --git a/pam_krb5-2.2.0-2-noafsonarm.patch b/pam_krb5-2.2.0-2-noafsonarm.patch new file mode 100644 index 0000000..8c385f9 --- /dev/null +++ b/pam_krb5-2.2.0-2-noafsonarm.patch @@ -0,0 +1,16 @@ +--- src/minikafs.c ++++ src/minikafs.c +@@ -178,7 +178,13 @@ + static int + minikafs_syscall(long function, long arg1, long arg2, long arg3, long arg4) + { ++#ifdef __arm__ ++ /* no afs_syscall */ ++ errno = ENOSYS; ++ return -1; ++#else + return syscall(__NR_afs_syscall, function, arg1, arg2, arg3, arg4); ++#endif + } + + /* Call into AFS, somehow. */ diff --git a/pam_krb5-2.2.11-1.tar.bz2 b/pam_krb5-2.2.11-1.tar.bz2 new file mode 100644 index 0000000..0a95c9a --- /dev/null +++ b/pam_krb5-2.2.11-1.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3f33e66a417ffc9aef507f593314f1d3a2c5429225cc2e437a7a49562c581b25 +size 315912 diff --git a/pam_krb5.changes b/pam_krb5.changes new file mode 100644 index 0000000..93a7702 --- /dev/null +++ b/pam_krb5.changes @@ -0,0 +1,235 @@ +------------------------------------------------------------------- +Mon Sep 25 10:45:53 CEST 2006 - mc@suse.de + +- version 2.2.11 +- remove two patches with are upstream now + - pam_krb5-2.2.10-0-oldauthtok.dif + - pam_krb5-2.2.10-0-testfix.dif +- make use of --with-os-distribution + +------------------------------------------------------------------- +Thu Sep 14 10:40:55 CEST 2006 - mc@suse.de + +- fix pam_set_item call for AUTHTOK and OLDAUTHTOK +- fix testcase +- if the server returns an error message during password-changing, + let the user see it +- add the "debug_sensitive" option, which actually logs passwords +- add the "no_subsequent_prompt" option, to force the module to + always answer a libkrb5 prompt with the PAM_AUTHTOK value + +------------------------------------------------------------------- +Tue Sep 12 11:37:12 CEST 2006 - mc@suse.de + +- version 2.2.10 + * log text for server-supplied error code along with the + failure information. + * rework the prompting bits so that it makes more correct use of + the initial_prompt/use_first_pass flags and correctly disables + use of the callback for arbitrary prompts + * give the caller a way to specify which prompter callback we + should use. + * track whether or not we want to let libkrb5 ask for information + via the callbacks. + * and more fixes + +------------------------------------------------------------------- +Thu Jul 27 11:03:27 CEST 2006 - mc@suse.de + +- version 2.2.9 + * look for krb5/krb5.h in preference to krb5.h (new in + MIT Kerberos 1.5) + * if the default principal in the ccache doesn't match the + userinfo structure, update the userinfo structure. + * always use the name of the v5 principal when saving + credentials, especially for the "external" case where + it may not be the value we originally guessed + * be more careful about other ways which our prompting + callback can try to break us + * go back to overwriting the template, to avoid uncontrolled + growth in the filename. + * build the new ccache name by appending the mkstemp template + instead of assuming the previous file ended with one + * and more fixes. +- remove pam_krb5-2.2.3-1-prompter-segfault.dif it is upstream now + +------------------------------------------------------------------- +Wed Jun 28 12:06:39 CEST 2006 - mc@suse.de + +- update to version 2.2.8 + * fix reporting of the reasons for password change failures + * add "krb4_use_as_req" to completely disallow any attempts to get + v4 credentials + * do 524 conversion for the "external" cases, too +- remove obsolete patches + +------------------------------------------------------------------- +Fri Apr 21 11:18:26 CEST 2006 - mc@suse.de + +- fix segfault in prompter [#165972] + +------------------------------------------------------------------- +Wed Jan 25 21:39:14 CET 2006 - mls@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Tue Jan 17 11:41:33 CET 2006 - mc@suse.de + +- add two patches from upstream + * pam_krb5-upstreamfix-password-handling.dif + * pam_krb5-upstreamfix-testcase.dif +- build with more then one job + +------------------------------------------------------------------- +Fri Jan 13 16:04:17 CET 2006 - mc@suse.de + +- set /usr/bin/afs5log executable + +------------------------------------------------------------------- +Wed Jan 11 14:29:53 CET 2006 - mc@suse.de + +- add -fstack-protector to CFLAGS + +------------------------------------------------------------------- +Tue Dec 20 11:12:23 CET 2005 - mc@suse.de + +- update to version 2.2.3 +- remove pam_krb5-2.2.0-0.5-NULL-fix.dif; patch is now upstream + +------------------------------------------------------------------- +Fri Dec 2 11:38:25 CET 2005 - mc@suse.de + +- update to version 2.2.2 + * don't leak the keytab file descriptor + * actually check for AFS support first, so that the + ioctl-only support case will work properly. + +------------------------------------------------------------------- +Mon Nov 14 16:28:45 CET 2005 - uli@suse.de + +- no afs_syscall on ARM + +------------------------------------------------------------------- +Mon Nov 14 11:23:10 CET 2005 - mc@suse.de + +- update to version 2.2.0-2 +- remove obsolete patch (debug_false is upstream now) + +------------------------------------------------------------------- +Mon Oct 10 14:02:29 CEST 2005 - mc@suse.de + +- update to current CVS version +- drop some patches (they are upstream now) +- fix NULL problem + +------------------------------------------------------------------- +Wed Aug 17 15:27:05 CEST 2005 - mc@suse.de + +- got official fix for the authtok problem + [#104051] + +------------------------------------------------------------------- +Mon Aug 15 13:41:42 CEST 2005 - mc@suse.de + +- fix the behavior of password changing if use_authtok + is not present [#104051] + +------------------------------------------------------------------- +Wed Jun 29 16:43:58 CEST 2005 - mc@suse.de + +- fix change password + +------------------------------------------------------------------- +Fri Jun 10 12:43:04 CEST 2005 - mc@suse.de + +- set default for debug to false [#87005] + +------------------------------------------------------------------- +Thu Apr 7 10:14:03 CEST 2005 - mc@suse.de + +- switch to version 2.2.0-0.5 + +------------------------------------------------------------------- +Tue Feb 22 12:31:53 CET 2005 - nadvornik@suse.cz + +- fixed parsing of time values + +------------------------------------------------------------------- +Mon Feb 21 17:40:20 CET 2005 - mc@suse.de + +- add pam_krb5-use-krb5_afslog.dif [#51047] + +------------------------------------------------------------------- +Tue Jan 18 16:43:06 CET 2005 - okir@suse.de + +- updated to latest pam_krb5 snapshot from sourcforge CVS + +------------------------------------------------------------------- +Tue Jan 11 17:48:14 CET 2005 - ro@suse.de + +- re-added afs module (added krbafs to neededforbuild) + +------------------------------------------------------------------- +Mon Nov 22 02:14:17 CET 2004 - ro@suse.de + +- remove afs for the moment, mit-kerberos does not have support + +------------------------------------------------------------------- +Wed Apr 28 17:26:47 CEST 2004 - ro@suse.de + +- added -fno-strict-aliasing + +------------------------------------------------------------------- +Fri Jan 16 12:27:46 CET 2004 - kukuk@suse.de + +- Add pam-devel to neededforbuild + +------------------------------------------------------------------- +Sun Jan 11 12:03:01 CET 2004 - adrian@suse.de + +- build as user + +------------------------------------------------------------------- +Wed Jul 16 14:29:56 CEST 2003 - nadvornik@suse.cz + +- replaced by different implementation of pam_krb5 +- afs support + +------------------------------------------------------------------- +Fri Jun 20 11:35:20 CEST 2003 - okir@suse.de + +- fix build problem with latest heimdal +- another fix for passwd updates (#20284) + +------------------------------------------------------------------- +Wed Jun 18 12:05:04 CEST 2003 - ro@suse.de + +- use kerberos-devel-packages in neededforbuild + +------------------------------------------------------------------- +Tue Apr 15 10:23:57 CEST 2003 - ro@suse.de + +- fixed neededforbuild + +------------------------------------------------------------------- +Wed Aug 28 11:43:01 CEST 2002 - okir@suse.de + +- Security fix (#18463): unbecome_user did not properly reassert + original privilege, and the caller didn't check the return value. + +------------------------------------------------------------------- +Wed Jul 31 14:45:27 CEST 2002 - okir@suse.de + +- suse_update_config now updates the right files + +------------------------------------------------------------------- +Wed Jul 24 14:14:28 CEST 2002 - okir@suse.de + +- fixed passwd(1) support; updated README + +------------------------------------------------------------------- +Tue Jul 23 03:38:08 PDT 2002 - okir@suse.de + +- initial packaging + diff --git a/pam_krb5.spec b/pam_krb5.spec new file mode 100644 index 0000000..3aa3866 --- /dev/null +++ b/pam_krb5.spec @@ -0,0 +1,202 @@ +# +# spec file for package pam_krb5 (Version 2.2.11) +# +# Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. +# This file and all modifications and additions to the pristine +# package are under the same license as the package itself. +# +# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# + +# norootforbuild + +Name: pam_krb5 +BuildRequires: krb5-client krb5-devel krb5-server openssl-devel pam-devel +%define PAM_RELEASE 1 +License: GPL +Group: Productivity/Networking/Security +Provides: pam_krb +Autoreqprov: on +Version: 2.2.11 +Release: 1 +Summary: PAM Module for Kerberos Authentication +URL: http://sourceforge.net/projects/pam-krb5/ +Source: pam_krb5-%{version}-%{PAM_RELEASE}.tar.bz2 +Patch1: pam_krb5-2.2.0-0.5-configure_ac.dif +Patch2: pam_krb5-2.2.0-2-noafsonarm.patch +BuildRoot: %{_tmppath}/%{name}-%{version}-build + +%description +This PAM module supports authentication against a Kerberos KDC. It also +supports updating your Kerberos password. + + + +Authors: +-------- + Balazs Gal + Nalin Dahyabhai + +%prep +%setup -q -n pam_krb5-%{version}-%{PAM_RELEASE} +%patch1 +%patch2 + +%build +%{suse_update_config -f} +autoreconf --verbose --force --install +CFLAGS="$RPM_OPT_FLAGS -fstack-protector " \ +./configure --libdir=/%_lib/ \ + --prefix=/usr \ + --mandir=%{_mandir} \ + --with-os-distribution="openSUSE" +make %{?jobs:-j%jobs} +make check + +%install +rm -rf $RPM_BUILD_ROOT +make install DESTDIR=$RPM_BUILD_ROOT +ln -sf pam_krb5.so $RPM_BUILD_ROOT/%_lib/security/pam_krb5afs.so +rm -f $RPM_BUILD_ROOT/%_lib/security/*.la + +%clean +rm -rf $RPM_BUILD_ROOT + +%files +%defattr(444,root,root,755) +%doc TODO README* COPYING* ChangeLog INSTALL AUTHORS NEWS +%attr(555,root,root) /%{_lib}/security/pam_krb5.so +%attr(555,root,root) /%{_lib}/security/pam_krb5afs.so +%dir /%{_lib}/security/pam_krb5 +%attr(755,root,root) /%{_lib}/security/pam_krb5/pam_krb5_storetmp +%attr(444,root,root) %_mandir/man*/*.* +%attr(755,root,root) /usr/bin/afs5log + +%changelog -n pam_krb5 +* Mon Sep 25 2006 - mc@suse.de +- version 2.2.11 +- remove two patches with are upstream now +- pam_krb5-2.2.10-0-oldauthtok.dif +- pam_krb5-2.2.10-0-testfix.dif +- make use of --with-os-distribution +* Thu Sep 14 2006 - mc@suse.de +- fix pam_set_item call for AUTHTOK and OLDAUTHTOK +- fix testcase +- if the server returns an error message during password-changing, + let the user see it +- add the "debug_sensitive" option, which actually logs passwords +- add the "no_subsequent_prompt" option, to force the module to + always answer a libkrb5 prompt with the PAM_AUTHTOK value +* Tue Sep 12 2006 - mc@suse.de +- version 2.2.10 + * log text for server-supplied error code along with the + failure information. + * rework the prompting bits so that it makes more correct use of + the initial_prompt/use_first_pass flags and correctly disables + use of the callback for arbitrary prompts + * give the caller a way to specify which prompter callback we + should use. + * track whether or not we want to let libkrb5 ask for information + via the callbacks. + * and more fixes +* Thu Jul 27 2006 - mc@suse.de +- version 2.2.9 + * look for krb5/krb5.h in preference to krb5.h (new in + MIT Kerberos 1.5) + * if the default principal in the ccache doesn't match the + userinfo structure, update the userinfo structure. + * always use the name of the v5 principal when saving + credentials, especially for the "external" case where + it may not be the value we originally guessed + * be more careful about other ways which our prompting + callback can try to break us + * go back to overwriting the template, to avoid uncontrolled + growth in the filename. + * build the new ccache name by appending the mkstemp template + instead of assuming the previous file ended with one + * and more fixes. +- remove pam_krb5-2.2.3-1-prompter-segfault.dif it is upstream now +* Wed Jun 28 2006 - mc@suse.de +- update to version 2.2.8 + * fix reporting of the reasons for password change failures + * add "krb4_use_as_req" to completely disallow any attempts to get + v4 credentials + * do 524 conversion for the "external" cases, too +- remove obsolete patches +* Fri Apr 21 2006 - mc@suse.de +- fix segfault in prompter [#165972] +* Wed Jan 25 2006 - mls@suse.de +- converted neededforbuild to BuildRequires +* Tue Jan 17 2006 - mc@suse.de +- add two patches from upstream + * pam_krb5-upstreamfix-password-handling.dif + * pam_krb5-upstreamfix-testcase.dif +- build with more then one job +* Fri Jan 13 2006 - mc@suse.de +- set /usr/bin/afs5log executable +* Wed Jan 11 2006 - mc@suse.de +- add -fstack-protector to CFLAGS +* Tue Dec 20 2005 - mc@suse.de +- update to version 2.2.3 +- remove pam_krb5-2.2.0-0.5-NULL-fix.dif; patch is now upstream +* Fri Dec 02 2005 - mc@suse.de +- update to version 2.2.2 + * don't leak the keytab file descriptor + * actually check for AFS support first, so that the + ioctl-only support case will work properly. +* Mon Nov 14 2005 - uli@suse.de +- no afs_syscall on ARM +* Mon Nov 14 2005 - mc@suse.de +- update to version 2.2.0-2 +- remove obsolete patch (debug_false is upstream now) +* Mon Oct 10 2005 - mc@suse.de +- update to current CVS version +- drop some patches (they are upstream now) +- fix NULL problem +* Wed Aug 17 2005 - mc@suse.de +- got official fix for the authtok problem + [#104051] +* Mon Aug 15 2005 - mc@suse.de +- fix the behavior of password changing if use_authtok + is not present [#104051] +* Wed Jun 29 2005 - mc@suse.de +- fix change password +* Fri Jun 10 2005 - mc@suse.de +- set default for debug to false [#87005] +* Thu Apr 07 2005 - mc@suse.de +- switch to version 2.2.0-0.5 +* Tue Feb 22 2005 - nadvornik@suse.cz +- fixed parsing of time values +* Mon Feb 21 2005 - mc@suse.de +- add pam_krb5-use-krb5_afslog.dif [#51047] +* Tue Jan 18 2005 - okir@suse.de +- updated to latest pam_krb5 snapshot from sourcforge CVS +* Tue Jan 11 2005 - ro@suse.de +- re-added afs module (added krbafs to neededforbuild) +* Mon Nov 22 2004 - ro@suse.de +- remove afs for the moment, mit-kerberos does not have support +* Wed Apr 28 2004 - ro@suse.de +- added -fno-strict-aliasing +* Fri Jan 16 2004 - kukuk@suse.de +- Add pam-devel to neededforbuild +* Sun Jan 11 2004 - adrian@suse.de +- build as user +* Wed Jul 16 2003 - nadvornik@suse.cz +- replaced by different implementation of pam_krb5 +- afs support +* Fri Jun 20 2003 - okir@suse.de +- fix build problem with latest heimdal +- another fix for passwd updates (#20284) +* Wed Jun 18 2003 - ro@suse.de +- use kerberos-devel-packages in neededforbuild +* Tue Apr 15 2003 - ro@suse.de +- fixed neededforbuild +* Wed Aug 28 2002 - okir@suse.de +- Security fix (#18463): unbecome_user did not properly reassert + original privilege, and the caller didn't check the return value. +* Wed Jul 31 2002 - okir@suse.de +- suse_update_config now updates the right files +* Wed Jul 24 2002 - okir@suse.de +- fixed passwd(1) support; updated README +* Tue Jul 23 2002 - okir@suse.de +- initial packaging diff --git a/ready b/ready new file mode 100644 index 0000000..473a0f4