-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 16 Jan 2006 18:11:57 -0800 Source: libpam-krb5 Binary: libpam-krb5 Architecture: source i386 Version: 1.2.0-2 Distribution: unstable Urgency: low Maintainer: Sam Hartman <hartmans@debian.org> Changed-By: Russ Allbery <rra@debian.org> Description: libpam-krb5 - PAM module for MIT Kerberos Closes: 339734 341926 342271 344003 Changes: libpam-krb5 (1.2.0-2) unstable; urgency=low . * Always use a disk cache for temporary storage of credentials and cope with not having module-specific data during pam_sm_setcred by passing the cache path in an environment variable. This is required to cope with OpenSSH's technique (when using ChallengeResponseAuthentication) of doing PAM authentication in a child process and then opening the session in the parent. (Closes: #339734) * Only initialize the ticket cache once no matter how many times setcred is called. Saves duplicate work and works around a bug in xdm, which calls setcred repeatedly and discards the environment set by the final call. * Don't assume we already have a context when changing passwords; passwd doesn't work that way. (Closes: #344003) * Fix the test for the new password. I don't think this would have worked at all before. * Improve debugging output for password changes. * If search_k5login is specified but no .k5login is found, still check the user with krb5_kuserok in case there are custom principal mappings defined. * Handle ignore_root in a cleaner fashion and add support for ignore_root on password changes. * Depend on krb5-config. (Closes: #342271) * Document that ccache and ccache_dir must be specified as options to the session module. (Closes: #341926) * Document that pam_sm_authenticate and pam_sm_setcred also call krb5_kuserok. * Properly override the upstream CFLAGS so that debugging builds work. * Don't ignore errors from make clean. * Providing binary-indep in debian/rules is required by Policy even if there are no arch-independent packages. Whoops. Files: 66ea3b8e445835dc6ce8ebf794325529 657 net optional libpam-krb5_1.2.0-2.dsc c9f5ce7e96c44a8e91c8c3885f4f15f4 17408 net optional libpam-krb5_1.2.0-2.diff.gz 1d0f6fff2d06e30d735432be350e948a 32606 net optional libpam-krb5_1.2.0-2_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFD1yM1+YXjQAr8dHYRAoeBAJ9Wiq6fuRuf/WdwSDkmRyicqqISIQCgmChF Y2sYBLEcFkqb7AMJWkJSSfc= =wemy -----END PGP SIGNATURE----- Accepted: libpam-krb5_1.2.0-2.diff.gz to pool/main/libp/libpam-krb5/libpam-krb5_1.2.0-2.diff.gz libpam-krb5_1.2.0-2.dsc to pool/main/libp/libpam-krb5/libpam-krb5_1.2.0-2.dsc libpam-krb5_1.2.0-2_i386.deb to pool/main/libp/libpam-krb5/libpam-krb5_1.2.0-2_i386.deb
