~ubuntu-branches/ubuntu/saucy/libpam-krb5/saucy-proposed : changes

~ubuntu-branches/ubuntu/saucy/libpam-krb5/saucy-proposed » Changes from revision 26

From Revision 26 to 7

Rev	Summary	Authors	Tags	Date
26	* Apply upstream patch to add AM_PROG_AR to configure.ac, no... * Apply upstream patch to add AM_PROG_AR to configure.ac, now apparently required by Automake for the binutils in unstable. (Closes: #713296) * Apply upstream patch to build with largefile support. This is probably pointless for this module, but consistency is good. * Canonicalize the Vcs-Git and Vcs-Browser URLs. * Update standards version to 3.9.4 (no changes required).	Russ Allbery	4.6-2	10 years ago
25	* New upstream release. * New upstream release. - New anon_fast option to attempt anonymous authentication and use those credentials to provide FAST armor. (Closes: #626509) - New user_realm option to set the realm for unqualified user principals without changing the default realm for all other operations. - New no_prompt option to suppress PAM prompting in favor of letting the Kerberos library handle it. (Closes: #626506) - New silent option that duplicates the behavior of PAM_SILENT. - New trace option for preliminary support of Kerberos trace logging. - Fix the doubled colon in password prompts from Heimdal. - Preserve the realm of the authentication identity when forming an alt_auth_map identity. - Allow the alt_auth_map format to contain a realm to force all mapped principals to be in that realm. - Avoid a NULL pointer dereference if krb5_init_context fails. (LP: #998525) - Close memory leaks in search_k5login and alt_auth_map. - Suppress bogus error messages about the realm option. - Retry authentication under try_first_pass for several other error conditions. * Regenerate the Autotools build system with dh-autoreconf. * Add krb5-config to Build-Depends so that the test programs don't abort with errors about not having a Kerberos configuration. * Switch to xz compression for the upstream and Debian tarballs. * Enable parallel builds. * Update standards version to 3.9.3 (no changes required).	Russ Allbery	4.6-1	11 years ago
24	* Enable bindnow hardening flags and fix the syntax of the * Enable bindnow hardening flags and fix the syntax of the DEB_BUILD_MAINT_OPTIONS setting. * Bump debhelper dependency to 9 now that compatibility mode V9 is no longer experimental. * Move single-debian-patch to local-options and patch-header to local-patch-header so that they only apply to the packages I build and NMUs get regular version-numbered patches.	Russ Allbery		12 years ago
23	Fix build rule to not override CPPFLAGS, which deactivates s... Fix build rule to not override CPPFLAGS, which deactivates some of the options passed in by dpkg-buildflags. Instead, use --with-krb5-lib and --with-krb5-include to locate the Kerberos headers and libraries. Thanks, Moritz Muehlenhoff. (Closes: #654293)	Russ Allbery	4.5-3	12 years ago
22	* Change the pam-auth-update configuration to skip remaining... * Change the pam-auth-update configuration to skip remaining password stack by default modules if the Kerberos password change succeeds. This is more useful behavior for the common case of Kerberos accounts not having local passwords. See README.Debian.gz for information about how to synchronize Kerberos and local passwords. (LP: #826989) * Update README.Debian.gz documentation with more current options for pam_unix and document password synchronization configuration. * Convert to multiarch. Depend on the multiarch version of libpam0g, install the modules into the multiarch version of /lib/security, and declare the packages Multi-Arch: same. * Update to debhelper compatibility level V9 (experimental). - Build-Depend on debhelper 8.9.4 or later for hardening flags. - Add Pre-Depends: ${misc:Pre-Depends}. * Update standards version to 3.9.2 (no changes required). * Fix formal name of the GPL in debian/copyright. (This will also be done upstream in the next release.)	Russ Allbery	4.4-3	12 years ago
21	Search for heimdal and kerberos libraries in multiarch locat... Search for heimdal and kerberos libraries in multiarch locations.	Matthias Klose	4.4-1ubuntu1	12 years ago
20	* New upstream release. * New upstream release. - Do not prompt for a password when try_pkinit is set, removing a spurious password prompt introduced in 4.1, but partly reintroducing a bug causing the password to not be saved in the PAM data if authentication falls back to password after a PKINIT failure. - Organize the pam_krb5 man page into sections. * Fix custom patch header to refer to pam-krb5, not remctl. * Update standards version to 3.9.1. - Refer to the GPL version 1 now that it's in common-licenses. * Update to debhelper compatibility level V8 (no changes required).	Russ Allbery	4.4-1	13 years ago
19	* New upstream release. * New upstream release. - New fail_pwchange option which treats expired passwords like authentication failure and suppresses password change.	Russ Allbery	4.2-1	14 years ago
18	* New upstream release. * New upstream release. - Fix a segfault if pam-krb5 is configured with use_first_pass or use_authtok and there is no stored password. Thanks, Jonathan Guthrie. (Closes: #537729)	Russ Allbery	3.15-1	14 years ago
17	No-change rebuild against libkrb5-3. No-change rebuild against libkrb5-3.	Steve Langasek	3.13-2ubuntu2	14 years ago
16	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: - debian/{pam-auth-update,postinst,prerm}, debian/rules, debian/dirs: enable pam_krb5 by default using the new pam-auth-update support. - debian/control: depend on libpam-runtime (>= 1.0.1-6) for the above. * Logging is now done with the LOG_AUTHPRIV facility. LP: #227531.	Steve Langasek	3.13-2ubuntu1	15 years ago
15	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/libpam-krb5.{pam-auth-update,install,postinst,prerm}, debian/rules, debian/dirs: enable pam_krb5 by default using the new pam-auth-update support. LP: #275169. - debian/control: depend on libpam-runtime (>= 1.0.1-4ubuntu1) for the above.	Marc Deslauriers	3.11-4ubuntu1	15 years ago
14	* debian/libpam-krb5.{pam-auth-update,install,postinst,prerm... * debian/libpam-krb5.{pam-auth-update,install,postinst,prerm}, debian/rules, debian/dirs: enable pam_krb5 by default using the new pam-auth-update support. LP: #275169. * debian/control: depend on libpam-runtime (>= 1.0.1-4ubuntu1) for the above.	Steve Langasek	3.11-3ubuntu1	15 years ago
13	Fix segfault after detection of unsafe .k5login ownership wh... Fix segfault after detection of unsafe .k5login ownership when search_k5login is set. Thanks, Andrew Deason. (Closes: #499479)	Russ Allbery	3.11-3	15 years ago
12	* New upstream release. * New upstream release. - If no_ccache is set, don't fail if we can't find module data. - Better error handling when reading keytabs. * Document in README.Debian that accounts must still exist in /etc/shadow when following the standard configuration and suggest an alternate configuration when that isn't appropriate. Thanks, Raoul Borenius. (Closes: #452592) * No longer build-depend on comerr-dev, since the module no longer links to it directly. * Update standards version to 3.7.3 (no changes required).	Russ Allbery	3.10-1	16 years ago
11	* New upstream release. * New upstream release. - If use_authtok is set, fail if we retrieve a NULL password, since that's how pam_cracklib rejects passwords. (Closes: #447306) - Add clear_on_fail option to clear the password on failed password change to force later password modules using use_authtok to fail. - Fix parsing of the keytab PAM option. - Return PAM_AUTHINFO_UNAVAIL when unable to resolve the realm. - Additional debugging information in README. * Add Homepage control field.	Russ Allbery	3.9-1	16 years ago
10	* New upstream release. * New upstream release. - Restore prompting for expired passwords. (Closes: #444740) - Correctly handle a negative minimum UID setting.	Russ Allbery	3.8-1	16 years ago
9	* New upstream release. * New upstream release. - Fix compilation errors with Heimdal. (Closes: #413553) - Document that ChallengeResponseAuthentication must be enabled in sshd to prompt users to change expired passwords. (Closes: #411816) - Support specifying a keytab other than the system keytab to use to verify passwords. (Partly addresses #399002) - New ticket_lifetime, banner, and expose_account config options. - Honor PAM_SILENT where appropriate. - Prefix the default cache type with FILE: to be explicit. - If PAM_USER is set to a fully-qualified principal that the Kerberos library can map to a local account name, reset PAM_USER to that local account name after authentication. - Return better PAM error codes for authentication failures. - Fix various memory leaks and memory handling problems. - Better error message handling with later Kerberos releases. - Various improvements to debug logging. * Update debhelper compatibility level to V5.	Russ Allbery	3.5-1	17 years ago
8	* New upstream release. * New upstream release. - Don't assume the return from pam_get_user will persist. - Avoid a use of freed memory when debugging is enabled. - Bind function calls within the PAM module where possible.	Russ Allbery	2.6-1	17 years ago
7	* New upstream release. * New upstream release. - Don't free the results of pam_get_item on password changes. Thanks, Arne Nordmark. (Closes: #395041) - Be more paranoid when checking authorization in pam_sm_acct_mgmt. - Zero passwords before freeing them.	Russ Allbery	2.5-1	17 years ago

Older »