Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-pyspnego for openSUSE:Factory
checked in at 2026-10-06 19:20:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-pyspnego (Old)
and /work/SRC/openSUSE:Factory/.python-pyspnego.new.3698736 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-pyspnego"
Tue Oct 6 19:20:08 2026 rev:24 rq:1382773 version:0.12.4
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-pyspnego/python-pyspnego.changes
2026-10-01 16:45:14.236494393 +0200
+++
/work/SRC/openSUSE:Factory/.python-pyspnego.new.3698736/python-pyspnego.changes
2026-10-06 19:20:20.151372636 +0200
@@ -1,0 +2,36 @@
+Tue Oct 6 08:47:37 UTC 2026 - Martin Hauke <[email protected]>
+
+- Update to version 0.12.4
+ * Fix SSPI acceptor with explicit Password or KerberosKeytab
+ credentials failing with SEC_E_LOGON_DENIED when the username
+ is in the UPN form user@REALM
+ + The pszPrincipal value is no longer passed to
+ AcquireCredentialsHandle, it was set to the SPN for
+ acceptors but does not control the acceptor identity.
+ * Fix spnego.server(credentials=..., protocol="negotiate",
+ options=NegotiateOptions.use_negotiate) to pass the credentials
+ to the Kerberos and NTLM acceptor contexts it creates
+ + On Windows the Kerberos acceptor had no credential to accept
+ with and was dropped from the mech list, leaving only NTLM.
+ * Fix SPNEGO acceptor to echo the Kerberos OID the initiator
+ offered as the supportedMech
+ + Windows initiators list the MS Kerberos OID
+ 1.2.840.48018.1.2.2 ahead of the standard OID and reject a
+ NegTokenResp that does not echo it
+ + The MS Kerberos OID and the pre RFC draft OID 1.3.5.1.5.2
+ are treated as aliases of Kerberos when matching the mech
+ list and supportedMech, matching MIT krb5
+ + The acceptor no longer requests a mechListMIC when the
+ initiator listed a Kerberos alias first as the optimistic
+ mech was the one selected
+ * Use socket.gethostname() rather than socket.getfqdn() for the
+ DnsComputerName in the NTLM acceptor CHALLENGE message
+ + socket.getfqdn() does a DNS lookup which can block for a few
+ seconds when DNS is not set up for the host
+ * Fix the SSPI negotiated_protocol and session_key properties
+ failing with a TypeError before the first step
+ + negotiated_protocol returns the protocol requested, or None
+ for negotiate, like the GSSAPI and Python Negotiate proxies
+ + session_key raises NoContextError like the GSSAPI proxy.
+
+-------------------------------------------------------------------
Old:
----
pyspnego-0.12.3.tar.gz
New:
----
pyspnego-0.12.4.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-pyspnego.spec ++++++
--- /var/tmp/diff_new_pack.2tdgzT/_old 2026-10-06 19:20:21.163415126 +0200
+++ /var/tmp/diff_new_pack.2tdgzT/_new 2026-10-06 19:20:21.164415168 +0200
@@ -23,7 +23,7 @@
%endif
%{?sle15_python_module_pythons}
Name: python-pyspnego
-Version: 0.12.3
+Version: 0.12.4
Release: 0
Summary: Python SPNEGO authentication library
License: MIT
++++++ pyspnego-0.12.3.tar.gz -> pyspnego-0.12.4.tar.gz ++++++
++++ 2376 lines of diff (skipped)
