From 17c6c6c5ee90a552467c0adfc63fc16a08a6ed7e5fa7b740a58059b975eb8bbf Mon Sep 17 00:00:00 2001 From: Howard Guo Date: Fri, 11 Aug 2017 09:12:41 +0000 Subject: [PATCH 1/2] - Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543) OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=193 --- krb5.changes | 6 ++++++ vendor-files.tar.bz2 | 4 ++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/krb5.changes b/krb5.changes index 817147a..6fe27a3 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Fri Aug 11 09:08:58 UTC 2017 - hguo@suse.com + +- Prevent kadmind.service startup failure caused by absence of + LDAP service. (bsc#903543) + ------------------------------------------------------------------- Tue Jun 6 13:36:34 UTC 2017 - hguo@suse.com diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2 index 5e942bf..77dab73 100644 --- a/vendor-files.tar.bz2 +++ b/vendor-files.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:9fbb3f40968cce34b47881db19e2831d0359f621210b90179ac85b76e5c0e9ac -size 183189 +oid sha256:31b3faec12656f6116996d1c9fb718ea5e376a1ed3c62c280ca8fd835fcbc2d7 +size 155757 From 45350c1e0c9adcb26b70c45817732ad8dff9f7a6d4f645fbea0702cfdf615ebd Mon Sep 17 00:00:00 2001 From: Howard Guo Date: Fri, 18 Aug 2017 08:38:17 +0000 Subject: [PATCH 2/2] - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=194 --- krb5-mini.changes | 7 +++++++ krb5.changes | 7 +++++++ vendor-files.tar.bz2 | 4 ++-- 3 files changed, 16 insertions(+), 2 deletions(-) diff --git a/krb5-mini.changes b/krb5-mini.changes index ff0d21f..1e5f700 100644 --- a/krb5-mini.changes +++ b/krb5-mini.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Fri Aug 18 08:27:26 UTC 2017 - hguo@suse.com + +- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf + in order to improve client security in handling service principle + names. (bsc#1054028) + ------------------------------------------------------------------- Tue Jun 6 13:36:34 UTC 2017 - hguo@suse.com diff --git a/krb5.changes b/krb5.changes index 6fe27a3..19e26be 100644 --- a/krb5.changes +++ b/krb5.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Fri Aug 18 08:27:26 UTC 2017 - hguo@suse.com + +- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf + in order to improve client security in handling service principle + names. (bsc#1054028) + ------------------------------------------------------------------- Fri Aug 11 09:08:58 UTC 2017 - hguo@suse.com diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2 index 77dab73..a8e2562 100644 --- a/vendor-files.tar.bz2 +++ b/vendor-files.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:31b3faec12656f6116996d1c9fb718ea5e376a1ed3c62c280ca8fd835fcbc2d7 -size 155757 +oid sha256:41e114dd3133a2de2a0d2591b9a1fb6f4aa22348fdd57122647966f547bf6d2f +size 155986