Accepting request 440200 from home:hauky:branches:network

- add pam configuration file required for ksu 
  just use a copy of "su" one from Tumbleweed

OBS-URL: https://build.opensuse.org/request/show/440200
OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=175

krb5.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Nov 14 08:36:06 UTC 2016 - christof.hanke@rzg.mpg.de
+
+- add pam configuration file required for ksu 
+  just use a copy of "su" one from Tumbleweed 
+
 -------------------------------------------------------------------
 Fri Jul 22 08:45:19 UTC 2016 - michael@stroeder.com
 

krb5.spec

@@ -53,6 +53,7 @@ Source2:        krb5.keyring
 Source3:        vendor-files.tar.bz2
 Source4:        baselibs.conf
 Source5:        krb5-rpmlintrc
+Source6:        ksu-pam.d
 Patch1:         krb5-1.12-pam.patch
 Patch2:         krb5-1.9-manpaths.dif
 Patch3:         krb5-1.12-buildconf.patch
@@ -315,6 +316,10 @@ install -d -m 755 %{buildroot}/%{krb5docdir}
 install -m 644 %{_builddir}/%{srcRoot}/README %{buildroot}/%{krb5docdir}/README
 install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema %{buildroot}/%{krb5docdir}/kerberos.schema
 install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif %{buildroot}/%{krb5docdir}/kerberos.ldif
+# link pam-config for su to ksu 
+mkdir -p %{buildroot}/etc/pam.d/
+install -m 644 %{S:6} %{buildroot}/etc/pam.d/ksu
+
 # cleanup
 rm -f  %{buildroot}/usr/share/man/man1/tmac.doc*
 rm -f  /usr/share/man/man1/tmac.doc*
@@ -462,6 +467,7 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
 %dir /usr/lib/mit
 %dir /usr/lib/mit/bin
 %dir /usr/lib/mit/sbin
+%attr(0644,root,root) %config(noreplace) /etc/pam.d/ksu
 /usr/lib/mit/bin/kvno
 /usr/lib/mit/bin/kinit
 /usr/lib/mit/bin/kdestroy

ksu-pam.d

@@ -0,0 +1,8 @@
+#%PAM-1.0
+auth     sufficient     pam_rootok.so
+auth     include        common-auth
+account  sufficient     pam_rootok.so
+account  include        common-account
+password include        common-password
+session  include        common-session
+session  optional       pam_xauth.so