SHA256
1
0
forked from pool/pam-config
OBS User unknown 2007-01-15 23:28:55 +00:00 committed by Git OBS Bridge
parent cf572ccd09
commit b693218d30
9 changed files with 70 additions and 510 deletions

View File

@ -1,13 +0,0 @@
#%PAM-1.0
#
# This file is autogenerated by pam-config. All changes
# will be overwritten.
#
# Account-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the account modules that define
# the central access policy for use on the system. The default is to
# only deny service to users whose accounts are expired.
#
account required pam_unix.so try_first_pass

View File

@ -1,15 +0,0 @@
#%PAM-1.0
#
# This file is autogenerated by pam-config. All changes
# will be overwritten.
#
# Authentication-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the
# traditional Unix authentication mechanisms.
#
auth required pam_env.so
auth required pam_unix.so try_first_pass

View File

@ -1,13 +0,0 @@
#%PAM-1.0
#
# This file is autogenerated by pam-config. All changes
# will be overwritten.
#
# Password-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define the services to be
# used to change user passwords.
#
password requisite pam_cracklib.so
password required pam_unix.so use_authtok nullok shadow try_first_pass

View File

@ -1,16 +0,0 @@
#%PAM-1.0
#
# This file is autogenerated by pam-config. All changes
# will be overwritten.
#
# Session-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define tasks to be performed
# at the start and end of sessions of *any* kind (both interactive and
# non-interactive
#
session required pam_limits.so
session required pam_unix.so try_first_pass
session optional pam_umask.so
session optional pam_env.so

3
pam-config-0.13.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f82730eb278465dfbe416728bc91cfdee1998efd806229df9df691e00bd754ee
size 144411

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ed70b81cdf3ae34134eb312b44306942bbf0cdcfc4467c8ce2df4ea8589abd78
size 321326

View File

@ -1,417 +1,3 @@
-------------------------------------------------------------------
Tue May 31 15:41:15 CEST 2016 - kukuk@suse.de
- No %ghost entries anymore, common-*-pc files are now real config
files for better tracking of modifications.
- Update to version 0.91
- Adjust for Linux-PAM 1.3.0
- Automatically replace obsolete PAM modules no longer installed
- Extend error messages
-------------------------------------------------------------------
Fri Apr 1 11:37:05 CEST 2016 - kukuk@suse.de
- Update to version 0.89
- Includes pam_google_authenticator.patch
- Better check for dual-arch PAM stack
-------------------------------------------------------------------
Sat Dec 13 22:39:00 UTC 2014 - Led <ledest@gmail.com>
- fix bashism in postun script
-------------------------------------------------------------------
Wed Nov 12 14:33:26 CET 2014 - kukuk@suse.de
- Added pam_google_authenticator.patch: support google authentiator
[bnc#888149]
-------------------------------------------------------------------
Thu Sep 25 14:43:18 CEST 2014 - kukuk@suse.de
- Update to pam-config 0.88
- Add pam_ecryptfs to password section [bnc#895096]
-------------------------------------------------------------------
Wed Apr 2 15:25:47 CEST 2014 - kukuk@suse.de
- Update to pam-config 0.87
- Add support for pam_access.so
- Rervert last change, it will break manually adjusted config
files as documented
-------------------------------------------------------------------
Mon Mar 17 13:02:30 UTC 2014 - speilicke@suse.com
- "pam-config --debug --update" in the %post section fails if any
/etc/pam.d/common-$TYPE file is not a symlink to /etc/pam.d/common-$TYPE-pc.
Fix that by adding '--force'. This is mainly an update issue since
fresh configs are created appropriatly
-------------------------------------------------------------------
Thu Feb 7 09:59:26 CET 2013 - kukuk@suse.de
- Remove last change regarding sha512, is now solved directly by
pam_unix.so.
-------------------------------------------------------------------
Mon Feb 4 15:10:53 CET 2013 - kukuk@suse.de
- Add sha512 and shadow to pam_unix.so when creating common-passwd-pc
by default, did somehow got lost [bnc#801970]
-------------------------------------------------------------------
Mon Nov 12 15:49:07 CET 2012 - kukuk@suse.de
- Use --create --force for new installation
- Update to pam-config 0.84
- Add pam_env per default
- Don't print wrong error messages
-------------------------------------------------------------------
Tue Sep 25 14:02:06 CEST 2012 - kukuk@suse.de
- Update to pam-config 0.83:
- Fix stacking of pam_unix
- Add new pam_unix options
-------------------------------------------------------------------
Thu Sep 20 14:58:56 CEST 2012 - kukuk@suse.de
- Use pam_unix and pam_cracklib as default on fresh installations.
-------------------------------------------------------------------
Tue Aug 14 13:02:09 UTC 2012 - vcizek@suse.com
- make pam_ssh a sufficient auth module (bnc#730851)
-------------------------------------------------------------------
Tue Aug 7 13:07:26 CEST 2012 - kukuk@suse.de
- Update to pam-config 0.81:
- pam_ssh: fix try_first_pass bug fixed [bnc#773560]
- pam_ecryptfs: fix order, still does not work with
krb5 [bnc#740110]
-------------------------------------------------------------------
Tue Apr 3 16:07:52 CEST 2012 - kukuk@suse.de
- Add support for pam_ecryptfs [bnc#752851]
-------------------------------------------------------------------
Wed Dec 7 14:00:35 UTC 2011 - jengelh@medozas.de
- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
-------------------------------------------------------------------
Fri Dec 2 16:32:29 UTC 2011 - coolo@suse.com
- add automake as buildrequire to avoid implicit dependency
-------------------------------------------------------------------
Wed Aug 17 09:51:02 UTC 2011 - fcrozat@suse.com
- Add pam_systemd.patch: Add pam_systemd support
-------------------------------------------------------------------
Tue May 10 12:57:34 CEST 2011 - kukuk@suse.de
- Version 0.79
* Make pam_lastlog optional [bnc#686034].
* Document that if symlinks don't point to *-pc files config is
ignored [FATE#310739].
-------------------------------------------------------------------
Wed Oct 13 14:41:55 CEST 2010 - kukuk@suse.de
- Version 0.78
* Add pam_fprintd support [bnc#644168]
* Move pam_env at the end of session stack
-------------------------------------------------------------------
Tue Aug 31 17:07:37 CEST 2010 - kukuk@suse.de
- Version 0.77
* Fix check for lib64 [bnc#635098]
* Add pam_sss support
-------------------------------------------------------------------
Wed Aug 25 15:05:08 CEST 2010 - kukuk@suse.de
- Version 0.76
* Add pam_fprint (patch from ro@suse.de)
-------------------------------------------------------------------
Wed Aug 11 16:59:59 CEST 2010 - kukuk@suse.de
- Version 0.75
* Update translations
* Add pam_exec support
* Rewrite pam_make rules to use pam_exec
-------------------------------------------------------------------
Tue Jun 29 16:42:50 CEST 2010 - kukuk@suse.de
- Version 0.74
* Fix typo in warning
* Update translations
-------------------------------------------------------------------
Tue Dec 8 15:41:22 CET 2009 - jengelh@medozas.de
- enable parallel building
-------------------------------------------------------------------
Tue Dec 1 15:03:11 CET 2009 - mc@suse.de
- Version 0.73
* Add support for pam_passwdqc
* Print warning if cracklib-minlen <= 5 is used (bnc#539053)
-------------------------------------------------------------------
Wed Jul 29 14:53:54 CEST 2009 - mc@novell.com
- Version 0.72
* src/mod_pam_gnome_keyring.c: enable use_authtok and support
new option only_if. (bnc#523379)
-------------------------------------------------------------------
Fri May 8 13:18:47 CEST 2009 - mc@suse.de
- Version 0.71
* re-add lost query option [bnc#501341]
-------------------------------------------------------------------
Thu Apr 30 13:10:58 CEST 2009 - kukuk@suse.de
- Version 0.70
* Fix try_first_pass handling for pam_ssh [bnc#499711]
-------------------------------------------------------------------
Wed Mar 25 15:50:49 CET 2009 - kukuk@suse.de
- Version 0.69
* Add --verify option.
* pam_cracklib is now default instead of pam_pwcheck
[FATE#305468].
-------------------------------------------------------------------
Mon Dec 1 14:56:56 CET 2008 - mc@suse.de
- Version 0.68
* fix linking; accept relative links (bnc#450019)
* fix some testcases
* Update translations.
-------------------------------------------------------------------
Fri Nov 21 13:26:49 CET 2008 - kukuk@suse.de
- Version 0.67
* Update translations.
* Add type option for pam_pwhistory.
-------------------------------------------------------------------
Mon Nov 10 11:48:33 CET 2008 - mc@suse.de
- No options in AUTH section for gnome-keyring (bnc#43189)
-------------------------------------------------------------------
Fri Nov 7 16:42:58 CET 2008 - mc@suse.de
- Version 0.66
* delete option, if argument is 0 (bnc#442552)
* Add support for pam_gnome_keyring [bnc#440448].
* Implement nullok for single services, too [bnc#440437].
-------------------------------------------------------------------
Wed Nov 5 14:47:05 CET 2008 - mc@suse.de
- Version 0.65
* fix error at option parsing.(bnc#440436)
* update translations.
-------------------------------------------------------------------
Wed Oct 22 15:23:46 CEST 2008 - mc@suse.de
- configure pam_selinux with open and close option
-------------------------------------------------------------------
Tue Oct 21 14:32:44 CEST 2008 - mc@suse.de
- Version 0.64
- Add support for pam_selinux
-------------------------------------------------------------------
Tue Oct 14 19:22:22 CEST 2008 - kukuk@suse.de
- Version 0.63
- Add support for pam_pwhistory
-------------------------------------------------------------------
Tue Oct 7 16:57:22 CEST 2008 - mc@suse.de
- Version 0.62
- add support for pam_fp
-------------------------------------------------------------------
Mon Oct 6 14:00:17 CEST 2008 - mc@suse.de
- Version 0.61
* print correct error message if sanity check fails
* fix the loose of values in case of some string options.
(bnc#414447)
-------------------------------------------------------------------
Thu Sep 4 17:11:53 CEST 2008 - kukuk@suse.de
- Version 0.60
* Generate manual page from internal data
* Remove obsolete pam_pwcheck options
-------------------------------------------------------------------
Fri Aug 29 12:21:07 CEST 2008 - mc@suse.de
- Version 0.59
* skip unix password change for uid > 999 in case of krb5 is used.
* set LANG=C when running checks
* Update translations.
-------------------------------------------------------------------
Fri Aug 22 11:26:08 CEST 2008 - mc@suse.de
- Version 0.58
* return correct query result in case of
--ldap vs. --ldap-account_only
-------------------------------------------------------------------
Mon Jul 28 14:24:33 CEST 2008 - sschober@suse.de
- Version 0.57
* fix pam_mount: use "optional" in session stack [bnc#409541]
-------------------------------------------------------------------
Mon Jul 14 11:57:47 CEST 2008 - kukuk@suse.de
- Version 0.56
* Add is_enabled to pam_csync
-------------------------------------------------------------------
Thu Jul 10 18:06:38 CEST 2008 - kukuk@suse.de
- Version 0.55
* Add pam_csync support [FATE#303805]
-------------------------------------------------------------------
Mon Jun 30 14:41:10 CEST 2008 - kukuk@suse.de
- Version 0.54
* Add pam_ssh support (to start ssh-agent, not for authentication)
-------------------------------------------------------------------
Fri May 23 15:25:22 CEST 2008 - kukuk@suse.de
- Version 0.53
* Better debug messages on writing config files
* Fix handling of backup files
(both found when debugging [bnc#392950])
* Update translations
-------------------------------------------------------------------
Tue Apr 1 15:56:07 CEST 2008 - mc@suse.de
- Version 0.52
* fix missing pam_localuser (bnc#371558)
* update localization files
-------------------------------------------------------------------
Mon Mar 10 16:05:55 CET 2008 - mc@suse.de
- Version 0.51
- adapt krb5 support to new pam_krb5 version
-------------------------------------------------------------------
Wed Feb 13 14:26:46 CET 2008 - kukuk@suse.de
- Version 0.50
- Add pam_time and pam_group support
- Rewrite option handling
-------------------------------------------------------------------
Fri Nov 23 11:21:07 CET 2007 - mc@suse.de
- Version 0.27
- Move write_config after sanitize_check calles
-------------------------------------------------------------------
Wed Nov 14 17:46:46 CET 2007 - mc@suse.de
- Version 0.26
- Add support for ldap-account_only
-------------------------------------------------------------------
Tue Nov 13 11:34:46 CET 2007 - mc@suse.de
- Version 0.25
- Do not check for installed pam-module on
delete request [#337369].
- fix missconfiguration of pam_krb5 [#335521]
-------------------------------------------------------------------
Thu Oct 25 14:24:56 CEST 2007 - sschober@suse.de
- Version 0.24:
- Bug fixing [#328519]
- integrated testsuite
-------------------------------------------------------------------
Tue Aug 14 18:21:15 CEST 2007 - sschober@suse.de
- Version 0.23:
- Bug fixing
- Support for pam_thinkfinger [#300201] [Fate#301952]
-------------------------------------------------------------------
Tue Aug 14 13:36:29 CEST 2007 - sschober@suse.de
- Version 0.22:
- Bug fixing
- Support for pam_ck_connector [#297559]
-------------------------------------------------------------------
Fri Jul 27 13:17:21 CEST 2007 - kukuk@suse.de
- Version 0.21:
- Add translations
- Bug fixing
- Add pam_cryptpass
-------------------------------------------------------------------
Fri Jul 6 12:48:18 CEST 2007 - kukuk@suse.de
- Version 0.20:
- Rewrite internal interface
- Add pam_unix and pam_mount
-------------------------------------------------------------------
Wed Jun 27 13:53:20 CEST 2007 - kukuk@suse.de
- Version 0.16:
- Add support for pam_lastlog and pam_loginuid
-------------------------------------------------------------------
Mon Jan 29 13:29:09 CET 2007 - kukuk@suse.de
- Version 0.15:
- Fix -d handling of minlen option of pam_pwcheck
-------------------------------------------------------------------
Fri Jan 26 16:25:03 CET 2007 - kukuk@suse.de
- Version 0.14:
- Add --krb5_ignore_unknown_principals option
- Add --pam_pwcheck-no_minlen option [bnc#227395]
-------------------------------------------------------------------
Wed Oct 25 12:18:35 CEST 2006 - kukuk@suse.de

View File

@ -1,34 +1,26 @@
#
# spec file for package pam-config
# spec file for package pam-config (Version 0.13)
#
# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany.
# This file and all modifications and additions to the pristine
# package are under the same license as the package itself.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
# norootforbuild
Name: pam-config
Summary: Modify common PAM configuration files
License: GPL-2.0
Version: 0.13
Release: 1
License: GNU General Public License (GPL) - all versions
Autoreqprov: on
PreReq: pam >= 0.99
Requires: pam-modules >= 10.2
Prefix: %{_prefix}
Group: System/Management
Version: 0.91
Release: 0
PreReq: pam >= 1.3.0
Url: https://github.com/SUSE/pam-config
Source: %{name}-%{version}.tar.bz2
Source1: common-account-pc
Source2: common-auth-pc
Source3: common-password-pc
Source4: common-session-pc
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@ -45,26 +37,27 @@ add/adjust/remove other PAM modules and their options.
%build
%configure
make %{?_smp_mflags}
make
%install
make install DESTDIR=$RPM_BUILD_ROOT
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d
install -m 644 %SOURCE1 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/
install -m 644 %SOURCE2 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/
install -m 644 %SOURCE3 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/
install -m 644 %SOURCE4 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/
%{find_lang} pam-config
for i in account auth password session ; do
touch $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/common-$i-pc
done
%clean
rm -rf $RPM_BUILD_ROOT
%post
if [ "$1" = "1" ]; then
pam-config --debug --create --force
if [ ! -f /etc/pam.d/common-auth-pc ] ; then
pam-config --debug --initialize
else
pam-config --debug --update ||:
fi
%postun
if [ $1 = 0 ]; then
if [ $1 == 0 ]; then
# Deinstall
dir=/etc/security
for conf in pam_unix2.conf pam_pwcheck.conf ; do
@ -77,20 +70,58 @@ if [ $1 = 0 ]; then
if [ -f $dir/$pamd.pam-config-backup -a -L $dir/$pamd ]; then
rm -v $dir/$pamd && mv -v $dir/$pamd.pam-config-backup $dir/$pamd
fi
# common-*-pc are ghost, so we have to move them away...
# common-*-pc are %ghost, so we have to move them away...
if [ -f $dir/$pamd-pc ]; then
mv -v $dir/$pamd-pc $dir/$pamd-pc.bak
fi
done
fi
%files -f pam-config.lang
%files
%defattr(-,root,root)
%{_sbindir}/pam-config
%doc %{_mandir}/man8/pam-config.8*
%config %{_sysconfdir}/pam.d/common-account-pc
%config %{_sysconfdir}/pam.d/common-auth-pc
%config %{_sysconfdir}/pam.d/common-password-pc
%config %{_sysconfdir}/pam.d/common-session-pc
%ghost %config %{_sysconfdir}/pam.d/common-account-pc
%ghost %config %{_sysconfdir}/pam.d/common-auth-pc
%ghost %config %{_sysconfdir}/pam.d/common-password-pc
%ghost %config %{_sysconfdir}/pam.d/common-session-pc
%changelog
%changelog -n pam-config
* Wed Oct 25 2006 - kukuk@suse.de
- Version 0.13:
- Add pam_capability support
- pam_apparmor should only be optional [Fate#300510]
* Wed Sep 20 2006 - kukuk@suse.de
- Fix debug flag handling for pam_cracklib/pam_pwcheck
* Thu Sep 14 2006 - kukuk@suse.de
- Version 0.11:
- Changes to account stack with krb5 and ldap
- Add support for pam_umask.so
* Thu Aug 31 2006 - kukuk@suse.de
- Version 0.10:
- Fix first install if pam-modules was updated before
- Document missing options in manual page
* Fri Aug 25 2006 - kukuk@suse.de
- Version 0.9:
- Add pam_winbind support
- Rename pam_krb5afs to pam_krb5 if we find it
- Support minimum_uid for pam_krb5
* Fri Aug 25 2006 - kukuk@suse.de
- Add LUM support and no_obscure_checks to pam_pwcheck (0.8)
* Thu Aug 24 2006 - kukuk@suse.de
- Version 0.7:
- Add support for pam_cracklib.
- Add support for pam_apparmor.
- Fix stacking of pam_unix2 with pam_ldap.
* Wed Aug 23 2006 - kukuk@suse.de
- Fix stacking of modules, add query option for YaST2 (version 0.6)
* Tue Aug 22 2006 - kukuk@suse.de
- Bug fixes, add --update option (version 0.5)
* Tue Aug 22 2006 - kukuk@suse.de
- Add support for ccreds and pkcs11 (version 0.4)
* Mon Aug 21 2006 - kukuk@suse.de
- Add support for ldap and krb5 (version 0.3)
* Mon Aug 21 2006 - kukuk@suse.de
- Add documentation (version 0.2)
* Mon Aug 21 2006 - kukuk@suse.de
- Initial release

0
ready Normal file
View File