From b693218d303b05ea5b09459b0514afe7a48c04669f0ec1917dc6f8ff2870efa5 Mon Sep 17 00:00:00 2001 From: OBS User unknown Date: Mon, 15 Jan 2007 23:28:55 +0000 Subject: [PATCH] OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pam-config?expand=0&rev=1 --- common-account-pc | 13 -- common-auth-pc | 15 -- common-password-pc | 13 -- common-session-pc | 16 -- pam-config-0.13.tar.bz2 | 3 + pam-config-0.91.tar.bz2 | 3 - pam-config.changes | 414 ---------------------------------------- pam-config.spec | 103 ++++++---- ready | 0 9 files changed, 70 insertions(+), 510 deletions(-) delete mode 100644 common-account-pc delete mode 100644 common-auth-pc delete mode 100644 common-password-pc delete mode 100644 common-session-pc create mode 100644 pam-config-0.13.tar.bz2 delete mode 100644 pam-config-0.91.tar.bz2 create mode 100644 ready diff --git a/common-account-pc b/common-account-pc deleted file mode 100644 index 240557b..0000000 --- a/common-account-pc +++ /dev/null @@ -1,13 +0,0 @@ -#%PAM-1.0 -# -# This file is autogenerated by pam-config. All changes -# will be overwritten. -# -# Account-related modules common to all services -# -# This file is included from other service-specific PAM config files, -# and should contain a list of the account modules that define -# the central access policy for use on the system. The default is to -# only deny service to users whose accounts are expired. -# -account required pam_unix.so try_first_pass diff --git a/common-auth-pc b/common-auth-pc deleted file mode 100644 index ebfea9b..0000000 --- a/common-auth-pc +++ /dev/null @@ -1,15 +0,0 @@ -#%PAM-1.0 -# -# This file is autogenerated by pam-config. All changes -# will be overwritten. -# -# Authentication-related modules common to all services -# -# This file is included from other service-specific PAM config files, -# and should contain a list of the authentication modules that define -# the central authentication scheme for use on the system -# (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the -# traditional Unix authentication mechanisms. -# -auth required pam_env.so -auth required pam_unix.so try_first_pass diff --git a/common-password-pc b/common-password-pc deleted file mode 100644 index f7d9736..0000000 --- a/common-password-pc +++ /dev/null @@ -1,13 +0,0 @@ -#%PAM-1.0 -# -# This file is autogenerated by pam-config. All changes -# will be overwritten. -# -# Password-related modules common to all services -# -# This file is included from other service-specific PAM config files, -# and should contain a list of modules that define the services to be -# used to change user passwords. -# -password requisite pam_cracklib.so -password required pam_unix.so use_authtok nullok shadow try_first_pass diff --git a/common-session-pc b/common-session-pc deleted file mode 100644 index 870749b..0000000 --- a/common-session-pc +++ /dev/null @@ -1,16 +0,0 @@ -#%PAM-1.0 -# -# This file is autogenerated by pam-config. All changes -# will be overwritten. -# -# Session-related modules common to all services -# -# This file is included from other service-specific PAM config files, -# and should contain a list of modules that define tasks to be performed -# at the start and end of sessions of *any* kind (both interactive and -# non-interactive -# -session required pam_limits.so -session required pam_unix.so try_first_pass -session optional pam_umask.so -session optional pam_env.so diff --git a/pam-config-0.13.tar.bz2 b/pam-config-0.13.tar.bz2 new file mode 100644 index 0000000..999e0ab --- /dev/null +++ b/pam-config-0.13.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f82730eb278465dfbe416728bc91cfdee1998efd806229df9df691e00bd754ee +size 144411 diff --git a/pam-config-0.91.tar.bz2 b/pam-config-0.91.tar.bz2 deleted file mode 100644 index 7e58d60..0000000 --- a/pam-config-0.91.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ed70b81cdf3ae34134eb312b44306942bbf0cdcfc4467c8ce2df4ea8589abd78 -size 321326 diff --git a/pam-config.changes b/pam-config.changes index a2b47a4..e8d9bc3 100644 --- a/pam-config.changes +++ b/pam-config.changes @@ -1,417 +1,3 @@ -------------------------------------------------------------------- -Tue May 31 15:41:15 CEST 2016 - kukuk@suse.de - -- No %ghost entries anymore, common-*-pc files are now real config - files for better tracking of modifications. -- Update to version 0.91 - - Adjust for Linux-PAM 1.3.0 - - Automatically replace obsolete PAM modules no longer installed - - Extend error messages - -------------------------------------------------------------------- -Fri Apr 1 11:37:05 CEST 2016 - kukuk@suse.de - -- Update to version 0.89 - - Includes pam_google_authenticator.patch - - Better check for dual-arch PAM stack - -------------------------------------------------------------------- -Sat Dec 13 22:39:00 UTC 2014 - Led - -- fix bashism in postun script - -------------------------------------------------------------------- -Wed Nov 12 14:33:26 CET 2014 - kukuk@suse.de - -- Added pam_google_authenticator.patch: support google authentiator - [bnc#888149] - -------------------------------------------------------------------- -Thu Sep 25 14:43:18 CEST 2014 - kukuk@suse.de - -- Update to pam-config 0.88 - - Add pam_ecryptfs to password section [bnc#895096] - -------------------------------------------------------------------- -Wed Apr 2 15:25:47 CEST 2014 - kukuk@suse.de - -- Update to pam-config 0.87 - - Add support for pam_access.so -- Rervert last change, it will break manually adjusted config - files as documented - -------------------------------------------------------------------- -Mon Mar 17 13:02:30 UTC 2014 - speilicke@suse.com - -- "pam-config --debug --update" in the %post section fails if any - /etc/pam.d/common-$TYPE file is not a symlink to /etc/pam.d/common-$TYPE-pc. - Fix that by adding '--force'. This is mainly an update issue since - fresh configs are created appropriatly - -------------------------------------------------------------------- -Thu Feb 7 09:59:26 CET 2013 - kukuk@suse.de - -- Remove last change regarding sha512, is now solved directly by - pam_unix.so. - -------------------------------------------------------------------- -Mon Feb 4 15:10:53 CET 2013 - kukuk@suse.de - -- Add sha512 and shadow to pam_unix.so when creating common-passwd-pc - by default, did somehow got lost [bnc#801970] - -------------------------------------------------------------------- -Mon Nov 12 15:49:07 CET 2012 - kukuk@suse.de - -- Use --create --force for new installation -- Update to pam-config 0.84 - - Add pam_env per default - - Don't print wrong error messages - -------------------------------------------------------------------- -Tue Sep 25 14:02:06 CEST 2012 - kukuk@suse.de - -- Update to pam-config 0.83: - - Fix stacking of pam_unix - - Add new pam_unix options - -------------------------------------------------------------------- -Thu Sep 20 14:58:56 CEST 2012 - kukuk@suse.de - -- Use pam_unix and pam_cracklib as default on fresh installations. - -------------------------------------------------------------------- -Tue Aug 14 13:02:09 UTC 2012 - vcizek@suse.com - -- make pam_ssh a sufficient auth module (bnc#730851) - -------------------------------------------------------------------- -Tue Aug 7 13:07:26 CEST 2012 - kukuk@suse.de - -- Update to pam-config 0.81: - - pam_ssh: fix try_first_pass bug fixed [bnc#773560] - - pam_ecryptfs: fix order, still does not work with - krb5 [bnc#740110] - -------------------------------------------------------------------- -Tue Apr 3 16:07:52 CEST 2012 - kukuk@suse.de - -- Add support for pam_ecryptfs [bnc#752851] - -------------------------------------------------------------------- -Wed Dec 7 14:00:35 UTC 2011 - jengelh@medozas.de - -- Remove redundant/unwanted tags/section (cf. specfile guidelines) -- Use %_smp_mflags for parallel building - -------------------------------------------------------------------- -Fri Dec 2 16:32:29 UTC 2011 - coolo@suse.com - -- add automake as buildrequire to avoid implicit dependency - -------------------------------------------------------------------- -Wed Aug 17 09:51:02 UTC 2011 - fcrozat@suse.com - -- Add pam_systemd.patch: Add pam_systemd support - -------------------------------------------------------------------- -Tue May 10 12:57:34 CEST 2011 - kukuk@suse.de - -- Version 0.79 - * Make pam_lastlog optional [bnc#686034]. - * Document that if symlinks don't point to *-pc files config is - ignored [FATE#310739]. - -------------------------------------------------------------------- -Wed Oct 13 14:41:55 CEST 2010 - kukuk@suse.de - -- Version 0.78 - * Add pam_fprintd support [bnc#644168] - * Move pam_env at the end of session stack - -------------------------------------------------------------------- -Tue Aug 31 17:07:37 CEST 2010 - kukuk@suse.de - -- Version 0.77 - * Fix check for lib64 [bnc#635098] - * Add pam_sss support - -------------------------------------------------------------------- -Wed Aug 25 15:05:08 CEST 2010 - kukuk@suse.de - -- Version 0.76 - * Add pam_fprint (patch from ro@suse.de) - -------------------------------------------------------------------- -Wed Aug 11 16:59:59 CEST 2010 - kukuk@suse.de - -- Version 0.75 - * Update translations - * Add pam_exec support - * Rewrite pam_make rules to use pam_exec - -------------------------------------------------------------------- -Tue Jun 29 16:42:50 CEST 2010 - kukuk@suse.de - -- Version 0.74 - * Fix typo in warning - * Update translations - -------------------------------------------------------------------- -Tue Dec 8 15:41:22 CET 2009 - jengelh@medozas.de - -- enable parallel building - -------------------------------------------------------------------- -Tue Dec 1 15:03:11 CET 2009 - mc@suse.de - -- Version 0.73 - * Add support for pam_passwdqc - * Print warning if cracklib-minlen <= 5 is used (bnc#539053) - -------------------------------------------------------------------- -Wed Jul 29 14:53:54 CEST 2009 - mc@novell.com - -- Version 0.72 - * src/mod_pam_gnome_keyring.c: enable use_authtok and support - new option only_if. (bnc#523379) - -------------------------------------------------------------------- -Fri May 8 13:18:47 CEST 2009 - mc@suse.de - -- Version 0.71 - * re-add lost query option [bnc#501341] - -------------------------------------------------------------------- -Thu Apr 30 13:10:58 CEST 2009 - kukuk@suse.de - -- Version 0.70 - * Fix try_first_pass handling for pam_ssh [bnc#499711] - -------------------------------------------------------------------- -Wed Mar 25 15:50:49 CET 2009 - kukuk@suse.de - -- Version 0.69 - * Add --verify option. - * pam_cracklib is now default instead of pam_pwcheck - [FATE#305468]. - -------------------------------------------------------------------- -Mon Dec 1 14:56:56 CET 2008 - mc@suse.de - -- Version 0.68 - * fix linking; accept relative links (bnc#450019) - * fix some testcases - * Update translations. - -------------------------------------------------------------------- -Fri Nov 21 13:26:49 CET 2008 - kukuk@suse.de - -- Version 0.67 - * Update translations. - * Add type option for pam_pwhistory. - -------------------------------------------------------------------- -Mon Nov 10 11:48:33 CET 2008 - mc@suse.de - -- No options in AUTH section for gnome-keyring (bnc#43189) - -------------------------------------------------------------------- -Fri Nov 7 16:42:58 CET 2008 - mc@suse.de - -- Version 0.66 - * delete option, if argument is 0 (bnc#442552) - * Add support for pam_gnome_keyring [bnc#440448]. - * Implement nullok for single services, too [bnc#440437]. - -------------------------------------------------------------------- -Wed Nov 5 14:47:05 CET 2008 - mc@suse.de - -- Version 0.65 - * fix error at option parsing.(bnc#440436) - * update translations. - -------------------------------------------------------------------- -Wed Oct 22 15:23:46 CEST 2008 - mc@suse.de - -- configure pam_selinux with open and close option - -------------------------------------------------------------------- -Tue Oct 21 14:32:44 CEST 2008 - mc@suse.de - -- Version 0.64 - - Add support for pam_selinux - -------------------------------------------------------------------- -Tue Oct 14 19:22:22 CEST 2008 - kukuk@suse.de - -- Version 0.63 - - Add support for pam_pwhistory - -------------------------------------------------------------------- -Tue Oct 7 16:57:22 CEST 2008 - mc@suse.de - -- Version 0.62 -- add support for pam_fp - -------------------------------------------------------------------- -Mon Oct 6 14:00:17 CEST 2008 - mc@suse.de - -- Version 0.61 - * print correct error message if sanity check fails - * fix the loose of values in case of some string options. - (bnc#414447) - -------------------------------------------------------------------- -Thu Sep 4 17:11:53 CEST 2008 - kukuk@suse.de - -- Version 0.60 - * Generate manual page from internal data - * Remove obsolete pam_pwcheck options - -------------------------------------------------------------------- -Fri Aug 29 12:21:07 CEST 2008 - mc@suse.de - -- Version 0.59 - * skip unix password change for uid > 999 in case of krb5 is used. - * set LANG=C when running checks - * Update translations. - -------------------------------------------------------------------- -Fri Aug 22 11:26:08 CEST 2008 - mc@suse.de - -- Version 0.58 - * return correct query result in case of - --ldap vs. --ldap-account_only - -------------------------------------------------------------------- -Mon Jul 28 14:24:33 CEST 2008 - sschober@suse.de - -- Version 0.57 - * fix pam_mount: use "optional" in session stack [bnc#409541] - -------------------------------------------------------------------- -Mon Jul 14 11:57:47 CEST 2008 - kukuk@suse.de - -- Version 0.56 - * Add is_enabled to pam_csync - -------------------------------------------------------------------- -Thu Jul 10 18:06:38 CEST 2008 - kukuk@suse.de - -- Version 0.55 - * Add pam_csync support [FATE#303805] - -------------------------------------------------------------------- -Mon Jun 30 14:41:10 CEST 2008 - kukuk@suse.de - -- Version 0.54 - * Add pam_ssh support (to start ssh-agent, not for authentication) - -------------------------------------------------------------------- -Fri May 23 15:25:22 CEST 2008 - kukuk@suse.de - -- Version 0.53 - * Better debug messages on writing config files - * Fix handling of backup files - (both found when debugging [bnc#392950]) - * Update translations - -------------------------------------------------------------------- -Tue Apr 1 15:56:07 CEST 2008 - mc@suse.de - -- Version 0.52 - * fix missing pam_localuser (bnc#371558) - * update localization files - -------------------------------------------------------------------- -Mon Mar 10 16:05:55 CET 2008 - mc@suse.de - -- Version 0.51 - - adapt krb5 support to new pam_krb5 version - -------------------------------------------------------------------- -Wed Feb 13 14:26:46 CET 2008 - kukuk@suse.de - -- Version 0.50 - - Add pam_time and pam_group support - - Rewrite option handling - -------------------------------------------------------------------- -Fri Nov 23 11:21:07 CET 2007 - mc@suse.de - -- Version 0.27 - - Move write_config after sanitize_check calles - -------------------------------------------------------------------- -Wed Nov 14 17:46:46 CET 2007 - mc@suse.de - -- Version 0.26 - - Add support for ldap-account_only - -------------------------------------------------------------------- -Tue Nov 13 11:34:46 CET 2007 - mc@suse.de - -- Version 0.25 - - Do not check for installed pam-module on - delete request [#337369]. - - fix missconfiguration of pam_krb5 [#335521] - -------------------------------------------------------------------- -Thu Oct 25 14:24:56 CEST 2007 - sschober@suse.de - -- Version 0.24: - - Bug fixing [#328519] - - integrated testsuite - -------------------------------------------------------------------- -Tue Aug 14 18:21:15 CEST 2007 - sschober@suse.de - -- Version 0.23: - - Bug fixing - - Support for pam_thinkfinger [#300201] [Fate#301952] - -------------------------------------------------------------------- -Tue Aug 14 13:36:29 CEST 2007 - sschober@suse.de - -- Version 0.22: - - Bug fixing - - Support for pam_ck_connector [#297559] - -------------------------------------------------------------------- -Fri Jul 27 13:17:21 CEST 2007 - kukuk@suse.de - -- Version 0.21: - - Add translations - - Bug fixing - - Add pam_cryptpass - -------------------------------------------------------------------- -Fri Jul 6 12:48:18 CEST 2007 - kukuk@suse.de - -- Version 0.20: - - Rewrite internal interface - - Add pam_unix and pam_mount - -------------------------------------------------------------------- -Wed Jun 27 13:53:20 CEST 2007 - kukuk@suse.de - -- Version 0.16: - - Add support for pam_lastlog and pam_loginuid - -------------------------------------------------------------------- -Mon Jan 29 13:29:09 CET 2007 - kukuk@suse.de - -- Version 0.15: - - Fix -d handling of minlen option of pam_pwcheck - -------------------------------------------------------------------- -Fri Jan 26 16:25:03 CET 2007 - kukuk@suse.de - -- Version 0.14: - - Add --krb5_ignore_unknown_principals option - - Add --pam_pwcheck-no_minlen option [bnc#227395] - ------------------------------------------------------------------- Wed Oct 25 12:18:35 CEST 2006 - kukuk@suse.de diff --git a/pam-config.spec b/pam-config.spec index 0725ca5..a8c6b1e 100644 --- a/pam-config.spec +++ b/pam-config.spec @@ -1,34 +1,26 @@ # -# spec file for package pam-config +# spec file for package pam-config (Version 0.13) # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. +# This file and all modifications and additions to the pristine +# package are under the same license as the package itself. # -# All modifications and additions to the file contributed by third parties -# remain the property of their copyright owners, unless otherwise agreed -# upon. The license for this file, and modifications and additions to the -# file, is the same license as for the pristine package itself (unless the -# license for the pristine package is not an Open Source License, in which -# case the license is the MIT License). An "Open Source License" is a -# license that conforms to the Open Source Definition (Version 1.9) -# published by the Open Source Initiative. - # Please submit bugfixes or comments via http://bugs.opensuse.org/ # +# norootforbuild Name: pam-config Summary: Modify common PAM configuration files -License: GPL-2.0 +Version: 0.13 +Release: 1 +License: GNU General Public License (GPL) - all versions +Autoreqprov: on +PreReq: pam >= 0.99 +Requires: pam-modules >= 10.2 +Prefix: %{_prefix} Group: System/Management -Version: 0.91 -Release: 0 -PreReq: pam >= 1.3.0 -Url: https://github.com/SUSE/pam-config Source: %{name}-%{version}.tar.bz2 -Source1: common-account-pc -Source2: common-auth-pc -Source3: common-password-pc -Source4: common-session-pc BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -45,26 +37,27 @@ add/adjust/remove other PAM modules and their options. %build %configure -make %{?_smp_mflags} +make %install make install DESTDIR=$RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d -install -m 644 %SOURCE1 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ -install -m 644 %SOURCE2 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ -install -m 644 %SOURCE3 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ -install -m 644 %SOURCE4 $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/ -%{find_lang} pam-config +for i in account auth password session ; do + touch $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/common-$i-pc +done + +%clean +rm -rf $RPM_BUILD_ROOT %post -if [ "$1" = "1" ]; then - pam-config --debug --create --force +if [ ! -f /etc/pam.d/common-auth-pc ] ; then + pam-config --debug --initialize else pam-config --debug --update ||: fi %postun -if [ $1 = 0 ]; then +if [ $1 == 0 ]; then # Deinstall dir=/etc/security for conf in pam_unix2.conf pam_pwcheck.conf ; do @@ -77,20 +70,58 @@ if [ $1 = 0 ]; then if [ -f $dir/$pamd.pam-config-backup -a -L $dir/$pamd ]; then rm -v $dir/$pamd && mv -v $dir/$pamd.pam-config-backup $dir/$pamd fi - # common-*-pc are ghost, so we have to move them away... + # common-*-pc are %ghost, so we have to move them away... if [ -f $dir/$pamd-pc ]; then mv -v $dir/$pamd-pc $dir/$pamd-pc.bak fi done fi -%files -f pam-config.lang +%files %defattr(-,root,root) %{_sbindir}/pam-config %doc %{_mandir}/man8/pam-config.8* -%config %{_sysconfdir}/pam.d/common-account-pc -%config %{_sysconfdir}/pam.d/common-auth-pc -%config %{_sysconfdir}/pam.d/common-password-pc -%config %{_sysconfdir}/pam.d/common-session-pc +%ghost %config %{_sysconfdir}/pam.d/common-account-pc +%ghost %config %{_sysconfdir}/pam.d/common-auth-pc +%ghost %config %{_sysconfdir}/pam.d/common-password-pc +%ghost %config %{_sysconfdir}/pam.d/common-session-pc -%changelog +%changelog -n pam-config +* Wed Oct 25 2006 - kukuk@suse.de +- Version 0.13: + - Add pam_capability support + - pam_apparmor should only be optional [Fate#300510] +* Wed Sep 20 2006 - kukuk@suse.de +- Fix debug flag handling for pam_cracklib/pam_pwcheck +* Thu Sep 14 2006 - kukuk@suse.de +- Version 0.11: + - Changes to account stack with krb5 and ldap + - Add support for pam_umask.so +* Thu Aug 31 2006 - kukuk@suse.de +- Version 0.10: + - Fix first install if pam-modules was updated before + - Document missing options in manual page +* Fri Aug 25 2006 - kukuk@suse.de +- Version 0.9: + - Add pam_winbind support + - Rename pam_krb5afs to pam_krb5 if we find it + - Support minimum_uid for pam_krb5 +* Fri Aug 25 2006 - kukuk@suse.de +- Add LUM support and no_obscure_checks to pam_pwcheck (0.8) +* Thu Aug 24 2006 - kukuk@suse.de +- Version 0.7: + - Add support for pam_cracklib. + - Add support for pam_apparmor. + - Fix stacking of pam_unix2 with pam_ldap. +* Wed Aug 23 2006 - kukuk@suse.de +- Fix stacking of modules, add query option for YaST2 (version 0.6) +* Tue Aug 22 2006 - kukuk@suse.de +- Bug fixes, add --update option (version 0.5) +* Tue Aug 22 2006 - kukuk@suse.de +- Add support for ccreds and pkcs11 (version 0.4) +* Mon Aug 21 2006 - kukuk@suse.de +- Add support for ldap and krb5 (version 0.3) +* Mon Aug 21 2006 - kukuk@suse.de +- Add documentation (version 0.2) +* Mon Aug 21 2006 - kukuk@suse.de +- Initial release diff --git a/ready b/ready new file mode 100644 index 0000000..473a0f4