Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pam-config for openSUSE:Factory checked in at 2025-12-04 11:21:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pam-config (Old) and /work/SRC/openSUSE:Factory/.pam-config.new.1939 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pam-config" Thu Dec 4 11:21:10 2025 rev:111 rq:1320991 version:2.13+git.20251203 Changes: -------- --- /work/SRC/openSUSE:Factory/pam-config/pam-config.changes 2025-11-05 16:20:09.390749702 +0100 +++ /work/SRC/openSUSE:Factory/.pam-config.new.1939/pam-config.changes 2025-12-04 11:26:37.213857690 +0100 @@ -1,0 +2,7 @@ +Wed Dec 03 11:02:30 UTC 2025 - Thorsten Kukuk <[email protected]> + +- Update to version 2.13+git.20251203: + * Make pam_unix_ng work together with pam_sss + * pam_sss has no debug option + +------------------------------------------------------------------- Old: ---- pam-config-2.13+git.20251105.tar.xz New: ---- pam-config-2.13+git.20251203.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam-config.spec ++++++ --- /var/tmp/diff_new_pack.BTfnK3/_old 2025-12-04 11:26:37.741880033 +0100 +++ /var/tmp/diff_new_pack.BTfnK3/_new 2025-12-04 11:26:37.745880203 +0100 @@ -17,7 +17,7 @@ Name: pam-config -Version: 2.13+git.20251105 +Version: 2.13+git.20251203 Release: 0 Summary: Utility to modify common PAM configuration files License: GPL-2.0-only ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.BTfnK3/_old 2025-12-04 11:26:37.789882065 +0100 +++ /var/tmp/diff_new_pack.BTfnK3/_new 2025-12-04 11:26:37.793882234 +0100 @@ -2,7 +2,7 @@ <service name="tar_scm"> <param name="url">https://github.com/SUSE/pam-config.git</param> -<param name="changesrevision">297daecccda04b6bb66fb767e53c9567fe2ce417</param></service> +<param name="changesrevision">2444bd1b7ced973beaec8ac2a79d1f10bf9f6b99</param></service> </servicedata> (No newline at EOF) ++++++ pam-config-2.13+git.20251105.tar.xz -> pam-config-2.13+git.20251203.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pam-config-2.13+git.20251105/src/mod_pam_sss.c new/pam-config-2.13+git.20251203/src/mod_pam_sss.c --- old/pam-config-2.13+git.20251105/src/mod_pam_sss.c 2025-11-05 11:58:42.000000000 +0100 +++ new/pam-config-2.13+git.20251203/src/mod_pam_sss.c 2025-12-03 12:02:00.000000000 +0100 @@ -81,7 +81,7 @@ PRINT_XMLHELP("sss") /* ---- construct module object ---- */ -DECLARE_BOOL_OPTS_13(is_enabled, debug, quiet, forward_pass, use_first_pass, use_authtok, ignore_unknown_user, ignore_authinfo_unavail, allow_missing_name, prompt_always, try_cert_auth, require_cert_auth, allow_chauthtok_by_root); +DECLARE_BOOL_OPTS_12(is_enabled, quiet, forward_pass, use_first_pass, use_authtok, ignore_unknown_user, ignore_authinfo_unavail, allow_missing_name, prompt_always, try_cert_auth, require_cert_auth, allow_chauthtok_by_root); DECLARE_STRING_OPTS_2(retry, domains); DECLARE_OPT_SETS; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pam-config-2.13+git.20251105/src/mod_pam_unix_ng.c new/pam-config-2.13+git.20251203/src/mod_pam_unix_ng.c --- old/pam-config-2.13+git.20251105/src/mod_pam_unix_ng.c 2025-11-05 11:58:42.000000000 +0100 +++ new/pam-config-2.13+git.20251203/src/mod_pam_unix_ng.c 2025-12-03 12:02:00.000000000 +0100 @@ -29,7 +29,7 @@ write_config_unix_ng (pam_module_t *this, enum write_type op, FILE *fp) { option_set_t *opt_set = this->get_opt_set (this, op); - int with_pwquality; + int with_pwquality, with_sss; if (debug) debug_write_call (this, op); @@ -37,27 +37,38 @@ if (!opt_set->is_enabled (opt_set, "is_enabled")) return 0; - with_pwquality = is_module_enabled (common_module_list, "pam_pwquality.so" , op); + with_pwquality = is_module_enabled (common_module_list, "pam_pwquality.so", op); + with_sss = is_module_enabled (common_module_list, "pam_sss.so", op); + switch (op) { case AUTH: - fprintf (fp, "auth\trequired\tpam_unix_ng.so\t"); + if (with_sss) + fprintf (fp, "auth\tsufficient\tpam_unix_ng.so\t"); + else + fprintf (fp, "auth\trequired\tpam_unix_ng.so\t"); if (!opt_set->is_enabled (opt_set, "use_first_pass") && !opt_set->is_enabled (opt_set, "try_first_pass")) opt_set->enable (opt_set, "try_first_pass", TRUE); break; case ACCOUNT: - fprintf (fp, "account\trequired\tpam_unix_ng.so\t"); + if (with_sss) + fprintf (fp, "account\trequisite\tpam_unix_ng.so\t"); + else + fprintf (fp, "account\trequired\tpam_unix_ng.so\t"); break; case PASSWORD: - fprintf (fp, "password\trequired\tpam_unix_ng.so\t"); + if (with_sss) + fprintf (fp, "password\tsufficient\tpam_unix_ng.so\t"); + else + fprintf (fp, "password\trequired\tpam_unix_ng.so\t"); if (with_pwquality) fprintf (fp, "use_authtok "); break; - case SESSION: - fprintf (fp, "session\trequired\tpam_unix_ng.so\t"); - break; + case SESSION: + fprintf (fp, "session\trequired\tpam_unix_ng.so\t"); + break; } WRITE_CONFIG_OPTIONS diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pam-config-2.13+git.20251105/src/pam-config.8.xml new/pam-config-2.13+git.20251203/src/pam-config.8.xml --- old/pam-config-2.13+git.20251105/src/pam-config.8.xml 2025-11-05 11:58:42.000000000 +0100 +++ new/pam-config-2.13+git.20251203/src/pam-config.8.xml 2025-12-03 12:02:00.000000000 +0100 @@ -1426,14 +1426,6 @@ </listitem> </varlistentry> <varlistentry> - <term><option>--sss-debug</option></term> - <listitem> - <para> - Add <option>debug</option> option to all pam_sss.so invocations. - </para> - </listitem> - </varlistentry> - <varlistentry> <term><option>--sss-quiet</option></term> <listitem> <para>
