Hello community, here is the log from the commit of package pam_krb5 for openSUSE:Factory checked in at 2013-04-17 23:14:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pam_krb5 (Old) and /work/SRC/openSUSE:Factory/.pam_krb5.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pam_krb5", Maintainer is "[email protected]" Changes: -------- --- /work/SRC/openSUSE:Factory/pam_krb5/pam_krb5.changes 2013-03-11 09:52:38.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.pam_krb5.new/pam_krb5.changes 2013-04-17 23:14:28.000000000 +0200 @@ -1,0 +2,18 @@ +Tue Apr 16 11:06:38 CEST 2013 - [email protected] + +- update to version 2.4.4 + * drop configuration settings that duplicated library settings + * drop the existing_ticket option + * drop krb4 support + * add support for preserving configuration information in ccaches + * add support for creating and cleaning up DIR: ccaches + * finish cleaning up KEYRING: ccaches + * add experimental "armor" and "armor_strategy" options + * handle creation of /run/user/XXX for FILE: and DIR: caches + * handle different function signatures for krb5_trace_callback + * avoid overriding the primary when updating DIR: caches +- obsolets patches (upstream): + * pam_krb5-2.2.0-0.5-configure_ac.dif + * use-urandom-for-tests.dif + +------------------------------------------------------------------- Old: ---- pam_krb5-2.2.0-0.5-configure_ac.dif pam_krb5-2.3.13-1.tar.bz2 use-urandom-for-tests.dif New: ---- pam_krb5-2.4.4.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam_krb5.spec ++++++ --- /var/tmp/diff_new_pack.9MsxAr/_old 2013-04-17 23:14:36.000000000 +0200 +++ /var/tmp/diff_new_pack.9MsxAr/_new 2013-04-17 23:14:36.000000000 +0200 @@ -21,31 +21,29 @@ BuildRequires: krb5-client BuildRequires: krb5-devel BuildRequires: krb5-server +BuildRequires: libselinux-devel BuildRequires: openssl-devel BuildRequires: pam-devel -%define PAM_RELEASE 1 Provides: pam_krb # bug437293 %ifarch ppc64 Obsoletes: pam_krb5-64bit %endif # -Version: 2.3.13 +Version: 2.4.4 Release: 0 -Summary: PAM Module for Kerberos Authentication +Summary: A Pluggable Authentication Module for Kerberos 5 License: BSD-3-Clause or LGPL-2.1+ Group: Productivity/Networking/Security -Url: http://sourceforge.net/projects/pam-krb5/ -Source: pam_krb5-%{version}-%{PAM_RELEASE}.tar.bz2 +Url: https://fedorahosted.org/pam_krb5/ +Source: https://fedorahosted.org/released/pam_krb5/pam_krb5-%{version}.tar.gz Source2: pam_krb5-po.tar.gz Source3: baselibs.conf -Patch1: pam_krb5-2.2.0-0.5-configure_ac.dif -Patch2: pam_krb5-2.3.1-log-choise.dif -Patch3: pam_krb5-LINGUAS.dif -Patch4: pam_krb5-2.3.1-switch-perms-on-refresh.dif -Patch5: pam_krb5-2.2.3-1-setcred-assume-establish.dif -Patch6: bug-641008_pam_krb5-2.3.11-setcred-log.diff -Patch7: use-urandom-for-tests.dif +Patch1: pam_krb5-2.3.1-log-choise.dif +Patch2: pam_krb5-LINGUAS.dif +Patch3: pam_krb5-2.3.1-switch-perms-on-refresh.dif +Patch4: pam_krb5-2.2.3-1-setcred-assume-establish.dif +Patch5: bug-641008_pam_krb5-2.3.11-setcred-log.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -53,35 +51,38 @@ supports updating your Kerberos password. %prep -%setup -q -n pam_krb5-%{version}-%{PAM_RELEASE} -%setup -a 2 -T -D -n pam_krb5-%{version}-%{PAM_RELEASE} -%patch1 -%patch2 -p1 -%patch3 -%patch4 -p1 -%patch5 -%patch6 -p1 -%patch7 -p1 +%setup -q -n pam_krb5-%{version} +%setup -a 2 -T -D -n pam_krb5-%{version} +%patch1 -p1 +%patch2 +%patch3 -p1 +%patch4 +%patch5 -p1 %build CFLAGS="$RPM_OPT_FLAGS -D_GNU_SOURCE " \ -./configure --libdir=/%_lib/ \ +./configure --libdir=/%{_lib} \ --prefix=/usr \ --mandir=%{_mandir} \ --with-os-distribution="openSUSE" \ --with-default-use-shmem="sshd" \ --with-default-external="sshd sshd-rekey gssftp" \ --with-default-multiple-ccaches="su su-l" \ - --with-default-no-cred-session="sshd" + --with-default-no-cred-session="sshd" \ + --enable-default-ccname-template=DIR:/run/user/%%U/krb5cc_XXXXXX make %{?jobs:-j%jobs} make -C po update-po # does not work in the buildservice #make check %install -make install DESTDIR=$RPM_BUILD_ROOT +make install DESTDIR=$RPM_BUILD_ROOT INSTALL="install -p" ln -sf pam_krb5.so $RPM_BUILD_ROOT/%_lib/security/pam_krb5afs.so rm -f $RPM_BUILD_ROOT/%_lib/security/*.la + +# Make the paths jive to avoid conflicts on multilib systems. +sed -ri -e 's|/lib(64)?/|/\$LIB/|g' $RPM_BUILD_ROOT/%{_mandir}/man*/pam_krb5*.8* + # Create filelist with translatins %{find_lang} pam_krb5 @@ -89,13 +90,12 @@ rm -rf $RPM_BUILD_ROOT %files -f pam_krb5.lang -%defattr(444,root,root,755) -%doc TODO README* COPYING* ChangeLog AUTHORS NEWS +%defattr(-,root,root,-) +%doc README* COPYING* ChangeLog AUTHORS NEWS +%{_bindir}/* %attr(555,root,root) /%{_lib}/security/pam_krb5.so %attr(555,root,root) /%{_lib}/security/pam_krb5afs.so -%dir /%{_lib}/security/pam_krb5 -%attr(755,root,root) /%{_lib}/security/pam_krb5/pam_krb5_storetmp -%attr(444,root,root) %_mandir/man*/*.* -%attr(755,root,root) /usr/bin/afs5log +/%{_lib}/security/pam_krb5 +%_mandir/man*/*.* %changelog ++++++ bug-641008_pam_krb5-2.3.11-setcred-log.diff ++++++ --- /var/tmp/diff_new_pack.9MsxAr/_old 2013-04-17 23:14:36.000000000 +0200 +++ /var/tmp/diff_new_pack.9MsxAr/_new 2013-04-17 23:14:36.000000000 +0200 @@ -1,8 +1,8 @@ -Index: pam_krb5-2.3.13-1/src/auth.c +Index: pam_krb5-2.4.4/src/auth.c =================================================================== ---- pam_krb5-2.3.13-1.orig/src/auth.c -+++ pam_krb5-2.3.13-1/src/auth.c -@@ -532,13 +532,32 @@ int +--- pam_krb5-2.4.4.orig/src/auth.c ++++ pam_krb5-2.4.4/src/auth.c +@@ -434,13 +434,32 @@ int pam_sm_setcred(pam_handle_t *pamh, int flags, int argc, PAM_KRB5_MAYBE_CONST char **argv) { @@ -40,7 +40,7 @@ return _pam_krb5_open_session(pamh, flags, argc, argv, "pam_setcred(PAM_ESTABLISH_CRED)", _pam_krb5_session_caller_setcred); -@@ -553,21 +572,31 @@ pam_sm_setcred(pam_handle_t *pamh, int f +@@ -455,21 +474,31 @@ pam_sm_setcred(pam_handle_t *pamh, int f } saved_perms = NULL; ++++++ pam_krb5-2.2.3-1-setcred-assume-establish.dif ++++++ --- /var/tmp/diff_new_pack.9MsxAr/_old 2013-04-17 23:14:36.000000000 +0200 +++ /var/tmp/diff_new_pack.9MsxAr/_new 2013-04-17 23:14:36.000000000 +0200 @@ -2,7 +2,7 @@ =================================================================== --- src/auth.c.orig +++ src/auth.c -@@ -568,6 +568,6 @@ pam_sm_setcred(pam_handle_t *pamh, int f +@@ -470,6 +470,6 @@ pam_sm_setcred(pam_handle_t *pamh, int f "pam_setcred(PAM_DELETE_CRED)", _pam_krb5_session_caller_setcred); } ++++++ pam_krb5-2.3.1-log-choise.dif ++++++ --- /var/tmp/diff_new_pack.9MsxAr/_old 2013-04-17 23:14:36.000000000 +0200 +++ /var/tmp/diff_new_pack.9MsxAr/_new 2013-04-17 23:14:36.000000000 +0200 @@ -1,9 +1,9 @@ -Index: pam_krb5-2.3.13-1/src/acct.c +Index: pam_krb5-2.4.4/src/acct.c =================================================================== ---- pam_krb5-2.3.13-1.orig/src/acct.c -+++ pam_krb5-2.3.13-1/src/acct.c -@@ -96,6 +96,10 @@ pam_sm_acct_mgmt(pam_handle_t *pamh, int - krb5_free_context(ctx); +--- pam_krb5-2.4.4.orig/src/acct.c ++++ pam_krb5-2.4.4/src/acct.c +@@ -89,6 +89,10 @@ pam_sm_acct_mgmt(pam_handle_t *pamh, int + _pam_krb5_free_ctx(ctx); return PAM_SERVICE_ERR; } + if (options->debug) { @@ -13,11 +13,11 @@ /* Get information about the user and the user's principal name. */ userinfo = _pam_krb5_user_info_init(ctx, user, options); -Index: pam_krb5-2.3.13-1/src/auth.c +Index: pam_krb5-2.4.4/src/auth.c =================================================================== ---- pam_krb5-2.3.13-1.orig/src/auth.c -+++ pam_krb5-2.3.13-1/src/auth.c -@@ -115,9 +115,10 @@ pam_sm_authenticate(pam_handle_t *pamh, +--- pam_krb5-2.4.4.orig/src/auth.c ++++ pam_krb5-2.4.4/src/auth.c +@@ -108,9 +108,10 @@ pam_sm_authenticate(pam_handle_t *pamh, return PAM_SERVICE_ERR; } if (options->debug) { @@ -30,7 +30,7 @@ _pam_krb5_set_init_opts(ctx, gic_options, options); /* Prompt for the password, as we might need to. */ -@@ -530,6 +531,11 @@ int +@@ -432,6 +433,11 @@ int pam_sm_setcred(pam_handle_t *pamh, int flags, int argc, PAM_KRB5_MAYBE_CONST char **argv) { @@ -42,12 +42,12 @@ if (flags & PAM_ESTABLISH_CRED) { return _pam_krb5_open_session(pamh, flags, argc, argv, "pam_setcred(PAM_ESTABLISH_CRED)", -Index: pam_krb5-2.3.13-1/src/password.c +Index: pam_krb5-2.4.4/src/password.c =================================================================== ---- pam_krb5-2.3.13-1.orig/src/password.c -+++ pam_krb5-2.3.13-1/src/password.c -@@ -116,6 +116,16 @@ pam_sm_chauthtok(pam_handle_t *pamh, int - krb5_free_context(ctx); +--- pam_krb5-2.4.4.orig/src/password.c ++++ pam_krb5-2.4.4/src/password.c +@@ -110,6 +110,16 @@ pam_sm_chauthtok(pam_handle_t *pamh, int + _pam_krb5_free_ctx(ctx); return PAM_SERVICE_ERR; } + if (options->debug) { @@ -63,12 +63,12 @@ _pam_krb5_set_init_opts(ctx, gic_options, options); /* Get information about the user and the user's principal name. */ -Index: pam_krb5-2.3.13-1/src/session.c +Index: pam_krb5-2.4.4/src/session.c =================================================================== ---- pam_krb5-2.3.13-1.orig/src/session.c -+++ pam_krb5-2.3.13-1/src/session.c -@@ -104,6 +104,10 @@ _pam_krb5_open_session(pam_handle_t *pam - krb5_free_context(ctx); +--- pam_krb5-2.4.4.orig/src/session.c ++++ pam_krb5-2.4.4/src/session.c +@@ -97,6 +97,10 @@ _pam_krb5_open_session(pam_handle_t *pam + _pam_krb5_free_ctx(ctx); return PAM_SERVICE_ERR; } + if (options->debug) { @@ -78,8 +78,8 @@ /* If we're in a no-cred-session situation, return. */ if ((!options->cred_session) && -@@ -358,7 +362,10 @@ _pam_krb5_close_session(pam_handle_t *pa - krb5_free_context(ctx); +@@ -301,7 +305,10 @@ _pam_krb5_close_session(pam_handle_t *pa + _pam_krb5_free_ctx(ctx); return PAM_SUCCESS; } - ++++++ pam_krb5-2.3.1-switch-perms-on-refresh.dif ++++++ --- /var/tmp/diff_new_pack.9MsxAr/_old 2013-04-17 23:14:36.000000000 +0200 +++ /var/tmp/diff_new_pack.9MsxAr/_new 2013-04-17 23:14:36.000000000 +0200 @@ -1,8 +1,8 @@ -Index: pam_krb5-2.3.13-1/src/auth.c +Index: pam_krb5-2.4.4/src/auth.c =================================================================== ---- pam_krb5-2.3.13-1.orig/src/auth.c -+++ pam_krb5-2.3.13-1/src/auth.c -@@ -62,6 +62,7 @@ +--- pam_krb5-2.4.4.orig/src/auth.c ++++ pam_krb5-2.4.4/src/auth.c +@@ -56,6 +56,7 @@ #include "items.h" #include "kuserok.h" #include "log.h" @@ -10,7 +10,7 @@ #include "options.h" #include "prompter.h" #include "session.h" -@@ -531,6 +532,7 @@ int +@@ -433,6 +434,7 @@ int pam_sm_setcred(pam_handle_t *pamh, int flags, int argc, PAM_KRB5_MAYBE_CONST char **argv) { @@ -18,7 +18,7 @@ notice("pam_setcred (%s) called", (flags & PAM_ESTABLISH_CRED)?"establish credential": (flags & PAM_REINITIALIZE_CRED)?"reinitialize credential": -@@ -542,10 +544,22 @@ pam_sm_setcred(pam_handle_t *pamh, int f +@@ -444,10 +446,22 @@ pam_sm_setcred(pam_handle_t *pamh, int f _pam_krb5_session_caller_setcred); } if (flags & (PAM_REINITIALIZE_CRED | PAM_REFRESH_CRED)) { @@ -43,11 +43,11 @@ return PAM_IGNORE; } } -Index: pam_krb5-2.3.13-1/src/perms.c +Index: pam_krb5-2.4.4/src/perms.c =================================================================== ---- pam_krb5-2.3.13-1.orig/src/perms.c -+++ pam_krb5-2.3.13-1/src/perms.c -@@ -87,3 +87,49 @@ _pam_krb5_restore_perms(struct _pam_krb5 +--- pam_krb5-2.4.4.orig/src/perms.c ++++ pam_krb5-2.4.4/src/perms.c +@@ -89,3 +89,49 @@ _pam_krb5_restore_perms(struct _pam_krb5 } return ret; } @@ -97,10 +97,10 @@ + } + return ret; +} -Index: pam_krb5-2.3.13-1/src/perms.h +Index: pam_krb5-2.4.4/src/perms.h =================================================================== ---- pam_krb5-2.3.13-1.orig/src/perms.h -+++ pam_krb5-2.3.13-1/src/perms.h +--- pam_krb5-2.4.4.orig/src/perms.h ++++ pam_krb5-2.4.4/src/perms.h @@ -37,4 +37,7 @@ struct _pam_krb5_perms; struct _pam_krb5_perms *_pam_krb5_switch_perms(void); int _pam_krb5_restore_perms(struct _pam_krb5_perms *saved); -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
