4ccaaa958f
- update to version 2.3.13
* don't bother creating a v5 ccache in "external" mode
* add a "trace" option to enable libkrb5 tracing, if available
* avoid trying to get password-change creds twice
* use an in-memory ccache when obtaining tokens using v5 creds
* turn off creds==session in "sshd"
* add a "validate_user_user" option to control trying to perform
user-to-user authentication to validate TGTs when a keytab is not
available
* add an "ignore_k5login" option to control whether or not the module
will use the krb5_kuserok() function to perform additional
authorization checks
* turn on validation by default - verify_ap_req_nofail controls how we
treat errors reading keytab files now
* add an "always_allow_localname" option when we can use
krb5_aname_to_localname() to second-guess the krb5_kuserok() check
* prefer krb5_change_password() to krb5_set_password()
OBS-URL: https://build.opensuse.org/request/show/79471
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam_krb5?expand=0&rev=19
98 lines
3.1 KiB
RPMSpec
98 lines
3.1 KiB
RPMSpec
#
|
|
# spec file for package pam_krb5
|
|
#
|
|
# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
#
|
|
|
|
# norootforbuild
|
|
|
|
|
|
Name: pam_krb5
|
|
BuildRequires: krb5-client krb5-devel krb5-server openssl-devel pam-devel
|
|
%define PAM_RELEASE 1
|
|
License: BSD3c(or similar) ; LGPLv2.0+
|
|
Group: Productivity/Networking/Security
|
|
Provides: pam_krb
|
|
AutoReqProv: on
|
|
# bug437293
|
|
%ifarch ppc64
|
|
Obsoletes: pam_krb5-64bit
|
|
%endif
|
|
#
|
|
Version: 2.3.13
|
|
Release: 9
|
|
Summary: PAM Module for Kerberos Authentication
|
|
Url: http://sourceforge.net/projects/pam-krb5/
|
|
Source: pam_krb5-%{version}-%{PAM_RELEASE}.tar.bz2
|
|
Source2: pam_krb5-po.tar.gz
|
|
Source3: baselibs.conf
|
|
Patch1: pam_krb5-2.2.0-0.5-configure_ac.dif
|
|
Patch2: pam_krb5-2.3.1-log-choise.dif
|
|
Patch3: pam_krb5-LINGUAS.dif
|
|
Patch4: pam_krb5-2.3.1-switch-perms-on-refresh.dif
|
|
Patch5: pam_krb5-2.2.3-1-setcred-assume-establish.dif
|
|
Patch6: bug-641008_pam_krb5-2.3.11-setcred-log.diff
|
|
Patch7: use-urandom-for-tests.dif
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
|
|
%description
|
|
This PAM module supports authentication against a Kerberos KDC. It also
|
|
supports updating your Kerberos password.
|
|
|
|
%prep
|
|
%setup -q -n pam_krb5-%{version}-%{PAM_RELEASE}
|
|
%setup -a 2 -T -D -n pam_krb5-%{version}-%{PAM_RELEASE}
|
|
%patch1
|
|
%patch2 -p1
|
|
%patch3
|
|
%patch4 -p1
|
|
%patch5
|
|
%patch6 -p1
|
|
%patch7 -p1
|
|
%build
|
|
CFLAGS="$RPM_OPT_FLAGS -D_GNU_SOURCE " \
|
|
./configure --libdir=/%_lib/ \
|
|
--prefix=/usr \
|
|
--mandir=%{_mandir} \
|
|
--with-os-distribution="openSUSE" \
|
|
--with-default-use-shmem="sshd" \
|
|
--with-default-external="sshd sshd-rekey gssftp" \
|
|
--with-default-multiple-ccaches="su su-l" \
|
|
--with-default-no-cred-session="sshd"
|
|
make %{?jobs:-j%jobs}
|
|
make -C po update-po
|
|
make check
|
|
|
|
%install
|
|
make install DESTDIR=$RPM_BUILD_ROOT
|
|
ln -sf pam_krb5.so $RPM_BUILD_ROOT/%_lib/security/pam_krb5afs.so
|
|
rm -f $RPM_BUILD_ROOT/%_lib/security/*.la
|
|
# Create filelist with translatins
|
|
%{find_lang} pam_krb5
|
|
|
|
%clean
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
%files -f pam_krb5.lang
|
|
%defattr(444,root,root,755)
|
|
%doc TODO README* COPYING* ChangeLog AUTHORS NEWS
|
|
%attr(555,root,root) /%{_lib}/security/pam_krb5.so
|
|
%attr(555,root,root) /%{_lib}/security/pam_krb5afs.so
|
|
%dir /%{_lib}/security/pam_krb5
|
|
%attr(755,root,root) /%{_lib}/security/pam_krb5/pam_krb5_storetmp
|
|
%attr(444,root,root) %_mandir/man*/*.*
|
|
%attr(755,root,root) /usr/bin/afs5log
|
|
|
|
%changelog
|